[cat199]

Is it the same hosts?

Having worked web security -

This is always a battle - for big operations you've got people farming out signups using stolen data to random 'buddies' on the other side of the world with the dark hat team ready to stand up outbounding traffic as fast as they can get a processor to execute it on, not to mention the hosts that get cracked automatically..

It's whack-a-mole on crystal meth.