I am seeing some traffic from a few IP addresses in the AS4770 space (ICONZ).

This traffic come with a few different user-agents but all these browsers are used across different IP addresses – and reCAPTCHA is marking all of them as bots.

All those IP respond to port 10002 requests as WonderProxy (wonderproxy.com).

I am not sure those are business IPs or some residential IP being used as exit for this service without people knowing.

Is there anyone from ICONZ here that would be interested?

Cheers

Mauricio Freitas

https://about.me/freitasm