The poneytelecom IPs would just constantly remain connected to me without actually downloading or uploading anything, which is quite unusual because torrent clients normally are supposed to disconnect from peers that they have no use for. And there would be like 15-30 IPs doing the same thing on the same few torrents. They were using Deluge, a legitimate client, which is quite weird, so maybe their shit was just misconfigured accidentally somehow. I looked up one of them on iknowwhatyoudownload.com and it was active on thosands of random torrents (including lots of CP apparently). I also recall in the past another IP from that range repeatedly downloading the same 80 GiB torrent which I am the only seed on, wasting my bandwidth for no apparent reason. So I just banned the entire IP range since clearly it's not doing anything legitimate to me and is just acting strangely in all sorts of ways. It's sort of a mini DDoS attack (intentionally or not) since I have my qBittorrent configured with a max number of connections.

The Xunlei IPs aren't really attackers per se, but the client doesn't follow the BitTorrent protocol standard and seeding to them is useless since they are incapable of seeding to other people. Some people just ban China entirely but I can't do that because there are lots of legitimate Chinese users on the torrents I have and I don't want to cut them off over something other people do