uh-oh .. she can't take much more captain...
The hits are increasing drastically per hour !
Turkey — Largest single wave of the day, 6 full /16s blocked in one hit at 20:15. Türk Telekom and Vodafone residential ranges, 200+ confirmed offenders each. New to the attack today.
Bangladesh — Most persistent all day, 22 different ISPs contributing /24 blocks across nearly every hourly run. Clearly the core of the residential botnet pool.
Ukraine — 17 different ISPs appearing steadily throughout the day. Second most persistent country after Bangladesh.
Pakistan — 8 ISPs involved including a full /16 from Cyber Internet. Active from mid-morning onward.
China — China Unicom appearing every single run all day with 50-116 offenders, plus Baidu range. Relentless and consistent.
US proxies — DigitalOcean, Bunny Communications, Ace Data Centers and Liasail Global providing commercial proxy infrastructure used by the operators throughout the day.
Africa — Single large /16 block, operator unknown, appeared mid-afternoon.
Tunisia — Orange Tunisie full /16 blocked mid-afternoon.
Kazakhstan & Kyrgyzstan — Multiple residential ISPs appearing steadily through the day.
Uzbekistan & Azerbaijan — Smaller but consistent contribution across multiple ISPs.
Malaysia — TM Technology and Celcom appearing in later runs.
India — Two ISPs appearing in afternoon runs.
Lebanon, Bahrain, Iraq, Jordan — Middle Eastern residential ISPs appearing in later runs.
Colombia, Venezuela, Costa Rica, Jamaica, Paraguay — Latin American ISPs appearing in the evening wave.
Russia, Belarus — Small contribution, one ISP each.
Indonesia, Myanmar, Singapore — Southeast Asian residential ISPs in later runs.
Somalia, Albania, Spain — Single ISPs each, appearing in the final runs of the evening.
I think we have officially jumped off the cliff! Just waiting for the big splatter at the end now
EDIT:
OK we died at, Most users ever online was 90754 on Fri Jun 12, 2026 9:24 pm
