Perhaps his members plan revolt behind his back.
Personally, though, I would just use phpMyAdmin and search for keywords to squelch that

. Or, it could be that members complain about a certain member harrassing them and others; this way it could be easily verified. The whole why discussion has been beaten to death, though; I'm sure you can find plenty explaination in the threads for each hack.