Login
Username

Password



Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.
Navigation
Latest Addons
AD Gallery 64
SyntaxHighlighte... 51
Newsletters v4.03 114
Facebook Like Box 132
Newsletters v4.02 60
Metro 171
Facebook Connect 173
Shoutbox Panel 129
Redactor for PHP... 107
MI Floating Side... 109
Facebook Login/R... 156
Avatar Studio v2.03 180
Relationship Sta... 98
Sexual Orientati... 116
Fisherman 144
Popular Addons
iTheme2 5808
Arise 5808
User Control v1.23 4623
Event Calendar 4053
Photowidget panel 3888
Radio-Theme red2... 3359
Highslide Gallery 3315
CSS/JavaScript D... 3234
Facebook Connect... 2992
Dynamic Menu 2895
Slideshow Lightb... 2727
L-AMANT 2662
Enigma 2637
2Dark 2608
Black 2580
View Thread
Who is here? 1 guest(s)
 Print Thread
I Suspect Someone I Creating Multiple Accounts!
Craig
Hi,

I am suspicious about a member on my forum, I thiink he/she has mabee created a few different accounts for herself from 3 different computers that she has in here house, thus all IP's are different, so I can not really prove it!

The reason I suspect this user is creating multiple accounts mabeee at least 3 different anyway because posting techniques and time when the post are pretty much simmalar to the person everyday.

Does anyone know any tricks how I can catch the person out!

I have spoke to the person on msn and yesterday when she asked what I was Doing.

I said this just to see if she would confess without actually asking her straight out,

"I am Installing a mod which can tell if a user has multiple accounts even if they are different ips", but that did not work.

Any other suggestions or is this just one of those things that can not be avoided!

Cheers
Craig
 
http://www.fusiontube.co.uk/
starefossen
Whats the porblem having users registring multipiple account? I can't see any problems... Smile
www.postexus.com - Follow Postexus on Facebook.
 
Craig
When the site is aimed at kids ie. its a Sims 3 site, the ussual reason they create multiple accounts it to cause trouble or to avoid a ban!
 
http://www.fusiontube.co.uk/
starefossen
I see! You should be able to see if the persons are on the same netword as their IP addresses will start with the same numbers but have different endings Smile
www.postexus.com - Follow Postexus on Facebook.
 
Craig
Hmm! Ok the ip address's do not match at the begining but one did at the middle eg. 12.123.12.221 and 65.221.56.111
 
http://www.fusiontube.co.uk/
starefossen
I found something interesting, using a whois lookup for the IP addresses:

IP 1
Final results obtained from whois.ripe.net.
Results:
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.n...right.html

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '80.229.0.0 - 80.229.63.255'

inetnum: 80.229.0.0 - 80.229.63.255
netname: PLUSNET-DIAL-ADSL
descr: PlusNet plc.
country: GB
admin-c: PLUS1-RIPE
tech-c: PNET2-RIPE
status: ASSIGNED PA
mnt-by: MAINT-AS6871
source: RIPE # Filtered

role: Plusnet Hostmaster
address: PlusNet Plc
address: Internet House
address: 2 Tenter Street
address: Sheffield
address: S1 4BY
address: UK
phone: +44 114 2200084
remarks: trouble:
remarks: ------------------------------------------------
remarks: Please do NOT e-mail abuse to the contacts given
remarks: here, e-mail them to instead.
remarks: All email sent to other listed addresses will
remarks: be deleted!
remarks: ------------------------------------------------
remarks: Network Status and Information Page:
remarks: http://status.plu...
remarks: http://monitor.pl...
remarks: http://support.pl...
remarks: ------------------------------------------------
remarks: Support 24*7 Phone: (UK) 0845 140 0200
remarks: ------------------------------------------------
admin-c: AW570-RIPE
tech-c: DS3916-RIPE
tech-c: RM6084-RIPE
tech-c: AM10633-RIPE
nic-hdl: PNET2-RIPE
mnt-by: MAINT-AS6871
source: RIPE # Filtered
abuse-mailbox:

person: PlusNet Ripe Admin
address: Plusnet plc.
address: Internet House
address: 2 Tenter Street
address: Sheffield
address: S1 4BY
address: GB
phone: +44 114 22 00084
nic-hdl: PLUS1-RIPE
mnt-by: MAINT-AS6871
source: RIPE # Filtered

% Information related to '80.229.0.0/16AS6871'

route: 80.229.0.0/16
descr: Plusnet Technologies Ltd
origin: AS6871
mnt-by: MAINT-AS6871
source: RIPE # Filtered


IP 2
Final results obtained from whois.ripe.net.
Results:
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.n...right.html

% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '86.128.0.0 - 86.135.255.255'

inetnum: 86.128.0.0 - 86.135.255.255
remarks: ******************************************************
remarks: * Please send abuse reports to *
remarks: ******************************************************
netname: BT-CENTRAL-PLUS
descr: IP pools
country: GB
admin-c: BTCP1-RIPE
tech-c: BTCP1-RIPE
status: ASSIGNED PA
remarks: Please send abuse notification to
mnt-by: BTNET-MNT
mnt-lower: BTNET-MNT
mnt-routes: BTNET-MNT
source: RIPE # Filtered

role: BT CENTRAL PLUS - OPERATIONAL SUPPORT
remarks: ******************************************************
remarks: * Please send abuse reports to *
remarks: ******************************************************
address: BT
address: Wholesale
address: UK
abuse-mailbox:
admin-c: PC487-RIPE
tech-c: SR401-RIPE
nic-hdl: BTCP1-RIPE
mnt-by: BTNET-MNT
source: RIPE # Filtered

% Information related to '86.128.0.0/10AS2856'

route: 86.128.0.0/10
descr: BT Public Internet Service
origin: AS2856
mnt-by: BTNET-MNT
source: RIPE # Filtered

% Information related to '86.128.0.0/12AS2856'

route: 86.128.0.0/12
descr: BT Public Internet Service
origin: AS2856
mnt-by: BTNET-MNT
source: RIPE # Filtered


I havent got the time to go through it deeply but both are located in the UK!
Edited by starefossen on 29-08-2008 17:46
www.postexus.com - Follow Postexus on Facebook.
 
Craig
No sorry I should of stated they were just example IP's.

Ok I was going to keep the persons IP confidential but if it helps me here are the real ones in question:
Edited by starefossen on 29-08-2008 17:45
 
http://www.fusiontube.co.uk/
starefossen
Look at my updated post Smile
www.postexus.com - Follow Postexus on Facebook.
 
Craig
Not the same networks then?
 
http://www.fusiontube.co.uk/
starefossen
descr: BT Public Internet Service


The one is a public internet, probably accessable by anyone, but I'm not sure.
www.postexus.com - Follow Postexus on Facebook.
 
googlebot
Well, if the user is not very smart in trying to create multiple accounts WITHOUT getting caught....

Look at the PREFIX_users table and browse it. Look at the rows in which the different users that you suspect are. Now note the password hash of each user. If they are the same, you've got some pretty strong evidence! (i.e. they have the same password, which is VERY unlikely if they are actually different people)
Visit the new home of the merge between Hacking Vs. Security and Security Override!
My copyright removal has been switched over from HvS to SecurityOverride.
 
Jump to Forum:
Similar Threads
Thread Forum Replies Last Post
Delete multiple photos Content Administration 10 23-03-2013 16:08
Finance and accounts Ideas for Modifications and Requests 31 06-02-2013 23:51
Fake Accounts on your site Security Issues & Announcements 22 21-12-2012 16:57
Auto login from multiple computers User Administration 2 29-11-2012 09:59
Multiple Center Panels Ideas for Modifications and Requests 45 27-11-2012 13:18
Official Home of PHP-Fusion uses cookies. Some may already have been set. Read more about our Cookies here.
Please click the button I Consent Cookies to hide this bar and accept our cookies. If you continue to use the site with no action taken, we'll assume that you consent our cookies anyway.
Cookiebar Panel byVenue