Russian bulletproof hosting still scans EU after Dutch seizure of 800 servers
On May 18 2026, Dutch investigators seized over 800 servers of a Russian bulletproof‑hosting operation tied to cyber‑attacks across the EU. Despite the takedown, scanning from the network’s ASN continued, with roughly one‑third of its IPs still active. The case highlights the resilience of threat‑infrastructure even after large‑scale seizures.