Strang IPs?

[xApster]

In my incoming ips from almost all my trades I have these to ips..

211.216.216.93
211.216.216.33

and in all those trades almost all of them have those two ips in my outgoing ips as well.

Almost every trade has them as there top ips sent to me! The ips belong to Korean Telecom or something and was wondering if anyone else see's them?

Is it some person cheating all the sites or 1 site cheating everyone and the hits just keep going or is it nothing http://bbs.adultwebmasterinfo.com/ubb/smile.gif ?

xApster

[Dawgy]

maybe ur script is wacked

[sidenius]

xApster

I got em too....

I got them from several trades too...

[AzteK]

211.216.216.34
211.216.216.94
211.216.216.38

I got'em too. What he hell is up with this?!

[xApster]

Bump

[Zane]

I looked thru a bunch of my trades refer stats and didn't find those i.p.'s. I'm interested in if those i.p.'s are showing up on the same trades at your respective sites.

[xApster]

I trade with a bunch of teen tgps and basicly they all have them http://bbs.adultwebmasterinfo.com/ubb/smile.gif

[Lizard]

I got those to...

[Lizard]

05/06/01 15:54:55 IP block 211.216.216.34
Trying 211.216.216.34 at ARIN
Trying 211.216.216 at ARIN
Redirecting to APNIC ...
Trying 211.216.216.34 at APNIC
Trying 211.216.216 at APNIC
Trying 211.216 at APNIC

% Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html

inetnum: 211.216.0.0 - 211.216.255.255
netname: KORNET
descr: KOREA TELECOM
descr: KOREA TELECOM Internet Operating Center
country: KR
admin-c: GP33-AP
tech-c: WK44-AP
mnt-by: MNT-KRNIC-AP
changed: hostmaster@apnic.net 20000901
source: APNIC

person: Gilsoon Park
address: Central Data Communication O&M Office,
address: 128 Yeong-Dong Jongro-Ku Seoul
country: KR
phone: +82-2-766-1407
fax-no: +82-2-766-6007
e-mail: gspark@rms.kornet.net
nic-hdl: GP33-AP
mnt-by: MNT-KRNIC-AP
changed: hostmaster@nic.or.kr 20000830
source: APNIC

person: Won Kang
address: Central Data Communication O&M Office, 128 Yeong-Dong Jongro-Ku Seoul
country: KR
phone: +82-2-766-5902
fax-no: +82-2-766-5901
e-mail: kw627@soback.kornet.net
nic-hdl: WK44-AP
mnt-by: MNT-KRNIC-AP
changed: hostmaster@nic.or.kr 20000830
source: APNIC

I get this on all those...

Some korean isp...

[XP]

Hey you guys,
most of you are on a cable or dsl huh?
but in Asia & my country (Turkey) our ISPs has transparent proxy. So if you have 1000 visitor from korea, you'll see only 1 IP!

Thats same on click sponsors too http://bbs.adultwebmasterinfo.com/ubb/frown.gif
I can't make any bucks with my turkish sites... god damn it that Transparent Proxy thing

[evil]

I have not the same but similar IPs
211.216.216.90
211.216.216.30

[xApster]

Well i just went to the proxy definitions again to make sure nothing was wrong but a normal transparent proxy will submit the surfers real ip with each request .. and thats what isp's normally use .. a anon proxy will not reveal the ip but usually isp's dont use them ...

So it looks like he is cheating http://bbs.adultwebmasterinfo.com/ubb/smile.gif

[spud]

I have several sites and I have those IP's in my logs too but I'm getting them from everyone?
xApster - he who? I'm not getting more or less form anyone as far as density goes...

[DemonWolfe]

I have looked into this as well.

I have about 45 trades where these are the top IP numbers.

I thought that perhaps it was a firewall ip (like AOL uses) but I find it unlikely that it 1) would show up that like that 2) that an asian ISP would be larger than AOL

I don't supsect the sites with it are necessarily cheaters. I have trades between sites that I own who have those as the top IP's. (Example, DemonWolfe TGP and EvilTGP. Evil's top incoming to DemonWolfe shows up like this). Since I own both sites, I doubt that I am cheating myself directly, but one can never know. In this business it's hard to even trust yourself.

Seriously though, I have not been able to come up with an explantion, and I would like to see what anyone else can come up with.

I am suspicious it is a leech program that leaves that IP behind. Could be a bot of some sort too I suppose.

Those IP's starting showing up one site at a time about 4 -5 months ago, and now (like I said earlier) I have 45 sites trading with demonwolfe alone with those ip #'s.


Hopefully someone can enlighten us. http://bbs.adultwebmasterinfo.com/ubb/smile.gif

[Chosen]

I have some korean traffic on my freehost(around 10-15k/day). And I'm tracking several sponsorlinks with a script. In my logs I can see lots of clicks from different pages, with different browsers, but from the same ip. So like XP said, this is probably just transparent proxies.

[xApster]

my stats
Incoming Repetitive IP's
363 211.216.216.33
308 211.216.216.93
29 211.216.216.92

Outgoing Repetitive IP's
1796 211.216.216.33
1161 211.216.216.93
263 211.188.149.133

This is from one trade ... freepicspage.com

[xApster]

I think that there may be a bot or proxy that travels that keeps genererating clicks on all sites they come.

If that sort of thing exists? So it origonated from one site and then just spreads around??

[XP]

So everyone see thats a transparent proxy problem http://bbs.adultwebmasterinfo.com/ubb/smile.gif

in Turkey, biggest 5 ISP uses transparent proxy shit! That makes our connection faster. Only in-Turkey sites loads normal (not from cache).

This is same for All countries in Asia, which have limited outgoing connection