Putting this here in Cyber News because there is nothing actionable. It’s just interesting.
On 2026-08-17T07:00:00Z, both Github and Bluesky experienced several hours of outage. Both were due to sustained DDoS attacks.
Iranian-backed “313 Team,” aka the “Islamic Cyber Resistance in Iraq” claimed both attacks on their Telegram channel.
Worth noting that in the past, 313 used Beamed, a Cloudflare-protected booter for their operations. Since June, they have pivoted to using booters protected by DiamWall.
Current booter is Cypher Services, with a marketing site at government[.]st. Previous was elitestress[.]st. These both seem like vibe-coded marketing sites.
Warning: speculation/inference: The booter tech is identical to beamed, just relabeled ad nauseam.
DiamWall lists a business address in Portugal, but the site feels extremely generic. The “Blog” is ancient. It would not be crazy that this entire ecosystem is part of the same operation, but that is pure speculation. I’ve never heard of DiamWall before.
Preliminary info: At first glance, diamwall appears to be a bulletproof host utilizing low-cost, low-reputation China-based IP reseller hkgo/August Internet for its IP space.
Diamwall has its own ASN registered in 2022: AS207731. Its one prefix was provided by hkgo/August Internet. Whether Diamwall is directly connected to hkgo/AI or is just a customer is yet to be determined.
DomainTools has 117 domains currently connected to Diamwall, with an average risk score of 72 (slightly higher than average but not terrible; worth raising an eyebrow at).
However, examining the domains shows a high prevalence of booter service sites and stolen IP via premium piracy sites (“pay a fee, get all this stolen IP”, see “lib” or “library” domains in csv). Add to booter list: ipstresser[.]io, ipstresser[.]rs, stressers[.]best, candystress[.]st, ddos[.]ax, more. Heavy [.]ru presence, thematically reminiscent of DDOS-Guard.
Preliminary guess is that Diamwall protects the disposable interface layers for the booter services, but not the booter services themselves. But still TBD.
Jumping into a meeting in a few, while look more in a bit.
