Oren finally came to me with one of the most reasonable explanations of ever seen: the IP address could've been Replit. Oren probably uses it to run bots, or at least test them
we can try and look for the location of the ip? replit is based in san francisco so it should be around there i think