If this is true, it practically eliminates the suspicion on Oren.
Oren finally came to me with one of the most reasonable explanations of ever seen: the IP address could've been Replit. Oren probably uses it to run bots, or at least test them