Ban Evaders

[Towal Moore]

Hello! We are having a problem with people coming back after they are banned, or having multiple accounts in violation of our TOU. We have the CJ Duplicate Member logger running already, but it's not catching everyone (from what I can tell, it doesn't work cross browser or after a cache / cookie clear). Does anyone have any good sql queries or tools or tips they are using to combat this problem?

 

 

[MADMAN32395]

Can't really stop people from using a VPN or changing IP some other way. Best you can do is just ban away.

[Optic14]

Sorry to bump this but I have similar concerns.

Members possibly making alter ego accounts, any way to better detect them (e.g via a cookie + cross-check user agent) ?

I had an addon on XenForo that could help detect "alter ego" accounts.

[Faqole]

28 minutes ago, Optic14 said:

Sorry to bump this but I have similar concerns.

Members possibly making alter ego accounts, any way to better detect them (e.g via a cookie + cross-check user agent) ?

I had an addon on XenForo that could help detect "alter ego" accounts.

Have a look at this app. 

 

[David..]

6 minutes ago, Faqole said:

Have a look at this app. 

 

That’s useless. :/ People can bypass that app by simply going incognito.

The IPB3 version worked better.

[Aiwa]

9 minutes ago, David.. said:

That’s useless. :/ People can bypass that app by simply going incognito.

The IPB3 version worked better.

Going incognito doesn't change your IP...

[David..]

3 hours ago, Aiwa said:

Going incognito doesn't change your IP...

I know, but that's not how the App works :/

See author's post: https://codingjungle.com/files/file/31-cj-duplicate-member-logger/?do=findComment&comment=3

Recent app changelogs do not mention any additionally added detection methods.

[Aiwa]

But again, their IP doesn't change.  If you suspect someone is using an evasion account you can use IPS' built in IP address tools to verify.  That obviously doesn't help if they are using a VPN or have changed their IP, but it does address those that think incognito will protect them.

[David..]

2 hours ago, Aiwa said:

But again, their IP doesn't change.  If you suspect someone is using an evasion account you can use IPS' built in IP address tools to verify.  That obviously doesn't help if they are using a VPN or have changed their IP, but it does address those that think incognito will protect them.

I understand but my argument was about the app not being effective. I already know about IP address tools but it would be nice to have something else that does the work automatically and presents the duplicate accounts to the admin.

[Faqole]

23 minutes ago, David.. said:

I understand but my argument was about the app not being effective. I already know about IP address tools but it would be nice to have something else that does the work automatically and presents the duplicate accounts to the admin.

Have you considered to post your suggestions at the app 's support topic to make it working to your likings? 

Or alternatively, you can put in a request for a new app to be developed for you.

[Optic14]

11 hours ago, David.. said:

See author's post: https://codingjungle.com/files/file/31-cj-duplicate-member-logger/?do=findComment&comment=3

15 hours ago, Faqole said:

Have a look at this app. 

Thanks, cookie check looks promising.

As others have stated IP check for duplicate accounts is very unreliable. And of course there are so many disposable email services out there - it's impossible to blacklist them all.

Yes, going incognitio does bypass cookie check but it's better than nothing.