GTIG says 316 threat clusters used suspected NetNut exit nodes in one June week to hide locations and run password-guessing attacks.