> that the hacker's activity is mostly in Southeast Asia working hours (read GMT+8) Opposite is true. His activity is focused around midnight in UTC+0800, with

> that the hacker's activity is mostly in Southeast Asia working hours (read GMT+8) Opposite is true. His activity is focused around midnight in UTC+0800, with significant activity at 2AM in that timezone.