DDoS Attack List

Part of our research consists of following DDoS botnets and DDoS-for-Hire marketplaces. From these networks, we extract live DDoS attack targets, tactics, and victims.

The Gorilla Stresser

A detailed case study was conducted on the Gorilla Stresser. Our measurements started in September of 2024 and lasted until the end of June in 2025. The network was inactive in January and February of 2025. During this measurement period, we had visibility on their Layer 4 DDoS attacks.

In total, we observed over 740k attacks targeting over 140k unique victims across the world. On average, we observed 4.5k attacks per day.

The Gorilla case study is a proof-of-concept. We are currently working on generalising the method for different botnets to get a better view of the global DDoS-for-Hire activity.

We are willing to share the data collected during our investigation. Please contact Maarten Weyns to receive the data.