Mert has been investigating scammers and threat actors. His government ID was recently disabled due to repeated login attempts from threat actors. He is now taking a closer look at the IP addresses from which these attacks were conducted using IPinfo’s service.
I also ran the queries myself. Here is the summary of the IPs that were involved in this attack: