I think it was found that people were directly connected or the ip address was forwarded.