I'm noticing that ntp queries are being misclassified as proxy.
Example attached.
Hi,
It was tagged as Tor IP. It is re-tagged and new DB will be shipped tomorrow.
Thanks!
Found a few more examples. Not sure if they're also covered by your update:
66.228.58.20
149.20.176.27
162.243.194.203
Hi,
All done.