Administrative and Maintenance Tools - Duplicate IP Report by BOP5 (Checks for users sharing the same IP Addresses) VB3/VB4

Brought to you by BirdOPrey5
www.Qapla.com

Version 2.1.2 - Fixed MySQLi bug - Introduced GOLD/Premium Version
Version 2.1 - Added BBCode to Banned Users and Post Count Options, better debug info
Version 2.0 - Added report for Registration (User) IP Address Checking

Check out the GOLD Version for these additional features:

• Run reports directly from the Admin CP anytime you want
• Post daily report as a "New Post" into an existing thread rather than a "New Thread" each night
• Access to another Gold Mod- Recent Registration Check- will block spammers and scammers trying to register multiple accounts from the same IP address

This mod will run a nightly scan of your "post" and/or "user" table. It will report if it finds any users sharing the same IP address. You choose in the options how many days back you want to look. (Max of 5000 days, but please use more reasonable limits.)

If any "duplicate use" is found the IP addresses, usernames and optionally the posts themselves will be reported.

See a real report: Report Demo at Qapla.com

The report takes the form of a new thread posted to the forum of the Admin's choosing (A private forum for mods or admins is strongly recommended.)

There are options for whitelisting (ignoring) specific IP Addresses and/or userids so if you or your mods post as other users you can prevent that from being reported. If you use the Zoints Anonymous Posting mod you will want to put that userid on the whitelist else the report will out whoever posted "Anonymously."

NOTE: There are PERFECTLY valid reasons 2 or more users may share the same IP address. This report in and of itself is not proof of malicious activity. Users that connect by mobile devices, work in same offices, or go to the same schools for example would likely share the same IP address on some posts. So would too any users connecting from the same home or public Wi-Fi network.

As of version 2.0 there is a report for both the "post" and "user" table. The "user" table will find when 2 or more users register with the same IP address.

Tested and working on VB 3.8.7 and VB 4.1.12/4.2.0 and should work on all 3.7 / 3.8 / 4.x versions.

------------------------------------------------------

Please "Mark as Installed" if you use this.
Donations always appreciated. :up:
Nominate MOTM if you LOVE it!

[tpearl5]

Has anyone seen two users with the same ips multiple times that also use tapatalk? It seems posts made either from tapatalk or mobile phones in general more commonly get the same ips.

[BirdOPrey5]

Originally Posted by tpearl5

Has anyone seen two users with the same ips multiple times that also use tapatalk? It seems posts made either from tapatalk or mobile phones in general more commonly get the same ips.

Yes, as I noted in the first post users using mobile devices often share the same IP address. I have users in different states that often end up sharing the same verizon wireless, cingular, at&t, or sprint IP addresses because they are using their cell phones to access. It's not Tapatalk's IP address, it's the fact the mobile providers don't use unique IPs.

[tpearl5]

Right, okay. I read everything but the rest of the first post And that's what I figured with the mobile IP's.

[Bubble #5]

BOP5 you always come up with the best mods! This is exactly what I was looking for :up:

Nominated for MOTM.

When I ran it I saw some code. Is it normal for it to display this in the ACP?

Post Check SQL:
SELECT post.ipaddress, GROUP_CONCAT(DISTINCT post.userid) AS userid, GROUP_CONCAT(DISTINCT post.postid) AS postid, user.usergroupid FROM post LEFT JOIN user ON user.userid = post.userid WHERE post.dateline > 1378097227 AND post.userid > 0 AND post.ipaddress != '127.0.0.1' AND post.ipaddress != '' GROUP BY post.ipaddress HAVING COUNT(DISTINCT post.userid) > 1 ORDER BY COUNT(DISTINCT post.userid) DESC LIMIT 500

User Check SQL:
SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, usergroupid FROM user WHERE joindate > 1376110027 AND userid > 0 AND ipaddress != '127.0.0.1' AND ipaddress != '' GROUP BY ipaddress HAVING COUNT(DISTINCT userid) > 1 ORDER BY COUNT(DISTINCT userid) DESC LIMIT 500

[BirdOPrey5]

Yes, if you run the task manually I have it display the queries for debugging purposes. It won't show if not run manually.

[ForceHSS]

What do I need to change in the scheduled task so it will run once every 7 days on a Monday. Time does not matter as long as it runs each Monday.

[CAG CheechDogg]

To do that do the following..

Day of the week: Monday
Day of the Month: *
Hour: what ever hour of the day you want
Minute: what ever minute of the day you want

[ForceHSS]

Thanks

[CAG CheechDogg]

No problem ForceHSS ....

[ali1359]

When I hit Run Report Now :


MySQL Error : Invalid use of group function
Error Number : 1111
Request Date : Tuesday, September 17th 2013 @ 11:31:52 AM
Error Date : Tuesday, September 17th 2013 @ 11:31:52 AM
Script : http://xxxxx.com/admincp/cronadmin.p...check&manual=1
Referrer :
IP Address : xx.xx.x.xx
Username : Admin
Classname : vB_Database_MySQLi
MySQL Version : 4.1.21-community-nt


What I have to do ?