"Hey, guys, I think you're talking about IP spoofing or proxy services here. But, honestly, IP addresses for brutes are basically worthless nowadays, and it's not too hard for targets to block them out."
Dude, 8 mill IPs for brute force botnets is insane. Not to mention the strain it would put on the hosting infrastructure. You think anyone would actually sell this stuff?
I'm not buying into these mass IP blocks, even the ones from shady VPNs or ISPs. They're just not reliable enough for serious botnet op's and will get you flagged by many sites fast, especially after recent Google updates.
I'm not sure why people are still buying IP's for brute-force attacks, considering most hosts are blocking those types of traffic now. Has anyone tried using alternative proxies or VPS's for these types of operations?