viktoresku

That is called Chutzpah.

HN and WP and the top communities (alongside with Reddit) using AT exclusively for piracy making all the legal troubles.

Now the pirates require "apology" from a free service they abuse, threatening that they will stop pirating otherwise.

It is not "doxxing" but something weirder, "bulling" may be a better word, or as you said "stalking their favorite online celebrity".

The quality of investigation is too poor to be "doxxable", even Jani (in his reply here) accepts it, and no sensitive info is disclosured, but the blog post and its promotion here and there spread dangerous rumors like:

"AT is connected to Russia"

"AT is connected to Israel"

"AT is connected to Hackers"

"AT is wanted by FBI"

"AT does not like Nazis"

...

This is what Jani does.

Cloudflare strikes back for AT's blocking 1.1.1.1 for years. How did 1.1.1.2 managed to work when 1.1.1.1 did not?

In addition to the obvious growth in popularity of VPNs, there are two other subtle points:

1. Many Russian IP addresses are now registered to foreign offshore companies to avoid confiscation in the next package of EU sanctions. Being Russian, they were registered through RIPE, which created a risk. The same IP which was Russian a year ago, now can be listed as Madlovian or Magnolian remaining physically in Russia.

2. Cloudflare is a biased internet: the most traffic-heavy sites using Cloudflare are porn sites. That is, we can only draw conclusions here about changes in the structure of porn content consumption in Russia. High-traffic western websites censored in Russia - LinkedIn, Twitter, Facebook, Instagram, YouTube, ... - are not on Cloudflare anyway and their blockade does not contribute to this chart.