I am seeing some traffic from a few IP addresses in the AS4770 space (ICONZ).
This traffic come with a few different user-agents but all these browsers are used across different IP addresses - and reCAPTCHA is marking all of them as bots. All those IP respond to port 10002 requests as WonderProxy (wonderproxy.com). I am not sure those are business IPs or some residential IP being used as exit for this service without people knowing. Is there anyone from ICONZ here that would be interested? Cheers Mauricio Freitas https://about.me/freitasm
_______________________________________________ NZNOG mailing list -- nznog@list.waikato.ac.nz To unsubscribe send an email to nznog-le...@list.waikato.ac.nz
