>>64465272
My guess is it's kind of like a VAC ban, you let them run rampant long enough that you'll hopefully catch more than just one before they switch accounts/proxies.