You could presumably find out, by looking at the IP addresses those workers are connecting from? If there are clumps of machines coming from the same IP address or IP block, it is probably a farm. If they are all individual IP addresses from all over the world, almost certainly a botnet?