sounds more like a pirated api key sold to someone in china and the first one is the buyer and the rest are either a single entity or some pirated open router service.
I do not think distallation works like this; could be wrong though.
Or both, if you're distilling a model (which is already against ToS), why not go for gray/black market leaked API keys instead of paying full price.
Or for the pirate open router service people, part of the "distillation" is just logging all conversations and selling that as training data to labs with less scruples.