&quot;Piggybacking&quot;? Presumably, they&#x27;re hitting a REST API served up on an HTTP server on port 80 or 443 (hopefully 443...)<p>And sure - stick it behind a NAT, learn the servers that the systems reports to, block those (or set up your own DNS); nothing that the average mainstream consumer is capable of doing.