I concur on the use of residential proxies. I have observed a couple of instances of machines contacting femboy.cat's URL, and in both cases 1) the User-Agent was Go-http-client/1.1, suggesting that the traffic did not originate from web browsing (e.g. web ads) 2) the machines where hosting at least one proxyware (Pawns.app, Grass.io, infatica-sdk.io...)
Not conclusive, but that bolsters the resip hypothesis. _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/E3CQIQIMAKFOCBQ7BRPFTM66WU7I6QBY/
