whats this?

[sixzeros]

I have a bunch of hits coming in on the same IP blocks of 212.138.47.* and 212.138.64.* and all from the same referer.
Is this normal?


212.138.47.12 Bursts Details 0 35
212.138.47.27 Bursts Details 0 33
212.138.47.11 Bursts Details 0 32
212.138.47.20 Bursts Details 0 29
212.138.64.173 Bursts Details 0 28
212.138.47.17 Bursts Details 0 28
212.138.47.29 Bursts Details 0 28
212.250.7.19 Bursts Details 0 27
68.10.57.42 Bursts Details 0 26
68.96.226.174 Bursts Details 0 24
211.0.29.225 Bursts Details 0 23
152.163.195.208 Bursts Details 0 23
68.72.103.215 Bursts Details 0 22
212.138.64.174 Bursts Details 0 22
212.138.64.172 Bursts Details 0 21

[Heinz]

http://ipdetective.com

212.138.47.* and 212.138.64.* are sa proxys

[sixzeros]

Hey, that IP detective is cool!

Well more specifically.. do you think this guy is cheating? I mean the numbers are kinda low, but what are the odds of 90% of someones traffic coming in from a single set of proxies?

Incoming Repetitive IP's
2 - 24.168.98.13
1 - 212.138.47.13
1 - 195.72.5.232
1 - 212.138.47.27
4 - none
1 - 213.184.160.202


Outgoing Repetitive IP's
7 - 212.138.47.13
4 - 24.168.98.13
4 - 212.138.47.12
3 - 212.138.47.20
2 - 212.138.47.29
2 - 212.138.64.171
2 - 212.138.64.172
2 - 212.138.47.17
2 - 212.138.64.173
1 - 212.138.47.27
11 - none
6 - 212.71.60.200
4 - 212.26.79.22
2 - 212.26.79.6
2 - 212.26.79.7
2 - 213.184.160.202
1 - 212.26.79.24
1 - 212.26.79.25