Among other things... having hundreds of calls and texts onramping from the same IP would be a rather large red flag.
I'm a little surprised that a behavioral analysis didn't flag these anyway. Probably did, just the networks don't care as long as they get their cut.