On March 11, according to analysis by Qianxin's Xlab laboratory, the large-scale cyber attack that caused the X platform to paralyze three times was the same main botnet that attacked DeepSeek during the Spring Festival. This network is called the Mirai variant botnet RapperBot, which belongs to an attack organization of the nature of a "professional thugs". Qianxin's Xlab laboratory found that the attack time completely matched the X platform downtime, mainly concentrated from 10 pm on March 10 to 2 am on the 11th Beijing time. The botnet is active all year round, attacking hundreds of targets every day on average, and issuing thousands of instructions during peak periods. The attack targets are distributed in Brazil, Belarus, Russia, China, Sweden and other regions. The scale and intensity of the attack directly caused the X platform to experience three obvious service interruptions on March 10, U.S. Eastern Time, with a peak of 20,538 users reporting failures.