The owner of the KiwiFarms goes into detail how the attack against his site works and where the residential IPs are from:

"The bot spammer

- Started his attack by simply DDoS attacking the forum.

- Uses thousands of real email addresses from real providers like gmail, outlook, and hotmail.

- Uses tens of thousands of VPN IPs.

- He also uses tens of thousands of IPs from "Residential Private Networks", which are "free" VPN services that actually sell your IP address to spammers so that their activity cannot be identified as coming from a commercial service provider.

- Is able to pass off all CAPTCHA providers to CAPTCHA solvers to bypass anti-bot challenges.

- Is completely lifeless and dedicated to this task. Publicly posted invites were found and used by him, and after a full month of no engagement he noticed registrations were open within hours."

Source: https://kiwifarms.st/threads/the-gay-pedophile-at-the-gates....

I understand the value of providing evidence here, but I think KF links get your post auto-killed...