Quote:
Originally Posted by TROLLENSTEIN
Did your list contain:
173.209.211.144
173.209.211.145
173.209.211.146
173.209.211.148
173.209.211.193
173.209.211.214
173.209.211.215
173.209.211.221
173.209.211.225
173.209.211.235
173.209.211.242
173.209.212.148
173.209.212.215
173.209.212.218
173.209.212.235
173.209.212.238
We have all these flagged/banned as open proxies/botnet on Windows boxes, not mobile. Spikes in traffic* from this range on February 27th 2014, March 4th 2014, March 9th 2014, March 19th, March 18th, April 18th, April 28th 2014. If it is a business running a Cel/WiFi hotspot and their main box is compromised maybe anyone on their Windows laptop is being infected? But you mention mobile, so if the signup was made via mobile it could be something entirely different. Still, that entire IP range appears rooted and infected so it's banned/blocked.
*Could be more but only took a quick look at the stats.
|
I am looking at data from the month of May primarily, and to the naked eye, after sorting by time/date stamp there aren't any visible spikes, variances seem to fall well within what could be natural coincidence and the entire month is covered more or less evenly, however as I mentioned since I banned some popular prepaid gift cards successful joined dropped sharply. (20 joins prior to May 17th, 3 after)
So at the moment if I had a theory about this being an intentional conspiracy I am thinking this could be a person or group who has a list of virtual cards and maybe a few stolen cards and runs it via botnet on PPS programs where the commission is higher than the signup cost. There seems to be a concentrated effort to lightly sprinkle these joins among other legitimate joins and across a variety of affiliate accounts so as to degrade but not destroy the profitability of the individual affiliate accounts. It's just a theory that will most likely be proven false or unlikely when I get back to my office Sunday and run more detailed reports.