Hi,
The IP HikaShop adds to carts / orders is what PHP provides:
stackoverflow.com/questions/3003145/how-...nt-ip-address-in-php
That information can be spoofed, and should not be trusted.
If the user uses a VPN, proxy, or if your server is behind a proxy, the IP address won't the customer's.
I'm afraid you won't be able to do anything.
Note that the affiliation mechanism doesn't depend on the IP address of the user. It depends on the cookies provided by the browser of the user.
So regardless of what the IP address of the user is, if he is behing a procy or not, etc the affiliation will still work as long as the browser provides the cookies.
This might not happen if the browser blocks the cookies (some browser privacy extensions allow for that) and in that case there is not much you can do.