hi,
interesting. i’m sure some people know better about this situation than I, but if i were in your position, i would check manually where those IMSI are coming from (were they sold in your country, in your operator, or elsewhere ?)
then you can check in which cells those bad IMSI are located (by doing A-interface trace, unless there is another solution ?)
regards
pix