These are on spread out external IPs (VPSs) so not within CF networks or specific IP subnets. The common denominator is that at certain bursts of traffic, we get blocked.
If this had some kind of pattern we could avoid or improve, I wouldn't even bring it up.
