If we could identify who is doing this, I bet that those people would be publicly burned at the stake by now.
I mean, if residential proxies are tools used to DDOS websites, why is Google advertising them? And if you have Google ads for them, can we really say “ah, if we only knew who these guys are?”.