Msg#: 3774200 posted 9:27 pm on Oct 26, 2008 (gmt 0)
Hi guys. I am a moderator on a forum and we are having trouble with multiple id's and people using them to say nasty things to forum members. I checked up on some Ip's and found the following. These three people share not just one but two IP addresses as you will see. So what is the likelyhood of them being all the same person or using the same PC? They are all AOL subscribers and have only the IP addresses you see.
user1 195.93.xx.a 195.93.xx.b
user2 195.93.xx.a 195.93.xx.b 195.93.xx.c
user3 195.93.xx.a 195.93.xx.b
As you see they all share two IP's. Hope you can help, thanks.
[edited by: eelixduppy at 1:34 pm (utc) on Oct. 27, 2008] [edit reason] removed specifics [/edit]
Msg#: 3774200 posted 9:52 pm on Oct 28, 2008 (gmt 0)
If they are AOL users you can't block their IP addresses. Look for other similarities such as passwords or writing styles and dates and times of logins to identify sock puppets.
You can try reporting the abuse to AOL themselves - though good luck as this method has always met with perfect silence for us in the past.
You can try sending them a stiffly worded email or letter if you know their address. Mention the damages they are causing to you (hint that you will recover those damages from them if they continue).
Frankly IP addresses are useless for identifying and removing sock puppets. Banning IPs doesn't prevent the problem and penalises the blameless, especially if AOL users. There are other services available that use machine profiling and shared databases which are a lot more effective.
Msg#: 3774200 posted 10:32 pm on Oct 28, 2008 (gmt 0)
IP address it's not identification of user now... But you can know you banning proxy (gateway) or you banning real user...
The biggest part of users going to internet throw proxy... But you can do something: 1) handle proxy headers (if any proxy header exist => proxy) 2) detect host name that user come from and compare it's IP with user's IP, if IP's are different => 100% proxy 3) if not 1) and not 2) => it can be real user's IP
[edited by: rogerd at 11:06 pm (utc) on Oct. 28, 2008] [edit reason] no URLs or specifics, please, per TOS [/edit]
Msg#: 3774200 posted 11:10 pm on Oct 28, 2008 (gmt 0)
Welcome to WebmasterWorld, Lothlorien and Coder1251!
You can also try cookie-focused bans.
One type is a global ignore, which makes the member's posts invisible to everyone else. That's effective as long as he stays logged in to that account.
Another uses a hidden cookie to operate a multi-detection script to alert mods that the same PC is being used by more than one member. If one of those members is banned, it's a good bet that the new user is the same person.
Ultimately, the solution is quick and effective moderation. Even the most persistent abuser tires of the game when a mod can nuke all of his posts in a few seconds, and he has to start all over with a new email, new username, etc.