it does look suspicious and the ip does match most of the ip from the previous case i would say go ahead and create another case at wp spi say whaaat