Botnets use real residential connections not just data centers. So your static list of “real people” doesn’t really make a difference.