>>107064873
>where are the IPs from
They are residential IPs from all around the globe. I've set up a honeypot where I log browser profiles and turns out they are all from Russia (Vladivostok, Yekaterinburg, Samara), Uzbekistan (Tashkent), Brazil (Sao Paulo), and US (New York). The profiles never match the IPs, but the browser profiles like screen resolution and timezones are static, implying that they post from the same computers or VNs and use proxies or VPNs to hide their IP. The IPs were not in any known spam database and none of the ASNs resolved to VPN or VPS services, so I'm leaning on botnets. It's not impossible they used one of those VPN botnets like Tuxler (the ones that turn regular users computers into part of their VPN network for others to use), since those are impossible to detect.
>>107064896
Only thing I've seen indians spam is their own altchan.
>>107064638
one of the ones with "chan" in its name.