25 August 2021

[...]

Bright Data (formerly Luminati) with headquarters in Netanya, Israel [...].

[...]

Luminati was flooding the website with no less than 100 new IPs ever hour and thousands of requests per second.

[...]
It is difficult to believe that an attacker launching billions of requests flooding one single website has been undetected by Luminati for weeks. Only “Bright Data / Luminati Networks” will be able to bring light to this case and explain to the general public how this “business deal” was arranged.

[...]

After some email exchanges, where Bright Data did not request more evidence, we received this fascinating explanation on August 24th.

“The IPs from the list you have attached (attaching it again) belong to Bright Data, however we did not find any of them in the requests that were sent to the reported domain. Due to the lack of findings, we keep the reported domain blocked for all of our customers, and from all of our networks, therefore we expect no requests will be sent to it through our network.
Thank you for your report and hope we managed to help you sufficiently”.

As in other cases when we have traced back attack infrastructure, the email exchange finish with the common “No worries. We did not do it. It will not happen again”:

(…) we left the domain blocked so no traffic to karapatan.org will be going through our network. That way we can ensure you that no future abuse could be generated from our networks.