QUICK, are my passwords being traded? - GoFuckYourself.com - Adult Webmaster Forum

X

PhounTho

Confirmed User

Join Date: Jul 2004

Posts: 157
Share

Post
#1

QUICK, are my passwords being traded?

12-13-2004, 05:35 AM

I read through the FAQ on Pennywize but still can't quite figure out the report: Here's what's happened so far today only:

Account Subnets Hits Bytes Downloaded Minutes Online
06336887--1------1-------108,626,299------------1
07757945--1------557----848,507,254------------34
08117572--1------137----330,219,013-------------9
18120089--1-------12-----370,433,424------------6
29701720--1-------9-------223,079,202-----------4
35687384--1-------7-------72,039-------------------2
36985131--1-------560----603,112,744-----------44
45023958--1-------79------641,869,490-----------16
56037587--1-------20------138,800,362------------1
64604378--1-------64------733,654------------------2
73785981--1-------300-----2,676,926---------------7 ???
75358604--1-------3--------94,502,683-------------3

Obviously, I'm concerned especially with the frownys.
I'm a little lost on the column headings--what does "hit" mean in this case? How many page views once logging in? Or how many log in attempts? Also, the account marked with question marks has a ton of hits but not many bytes downloaded. What gives?

Also, how can I tell how many different IPs are being used to log in to a given account?

I have the free version of Pennywize.

Thanks in so much advance!

Upskirt Champ Productions 50% Rev Share
Tags: None
PhounTho

Confirmed User

Join Date: Jul 2004

Posts: 157
Share

Post
#2

12-13-2004, 04:49 PM

Bump. Sorry.

Upskirt Champ Productions 50% Rev Share
Comment
Adultnet

Confirmed User

Join Date: Sep 2003

Posts: 8713
Share

Post
#3

12-14-2004, 07:33 AM

hits should mean the number of views the page or download gets...

TrafficCashGold Paying Webmasters Since 1996!
Awesome Conversions! Fast Weekly Payments! Over 125 Tours!
Comment
PhounTho

Confirmed User

Join Date: Jul 2004

Posts: 157
Share

Post
#4

12-14-2004, 08:03 AM

I'm still a little foggy on hits for this reason: My member's area doesn't have that many pages. For a single user to accumulate 576 hits in a day seems odd to me. Does it to you? I probably have 18 pages in my member's area.

Upskirt Champ Productions 50% Rev Share
Comment
BackToMine

Confirmed User

Join Date: Nov 2004

Posts: 541
Share

Post
#5

12-15-2004, 03:14 AM

If a password is being traded, then it'll be logged in from many subnets.

So I doubt the passwords are being traded since its 1 for all the accounts you pasted.
Comment
PhounTho

Confirmed User

Join Date: Jul 2004

Posts: 157
Share

Post
#6

12-15-2004, 08:16 AM

Thanks all.

Follow up question: How do you get Pennywize to report more than one day's activity? If I'm trying to catch password traders it would help if I could look at a week's worth of data at once--a month would be great.

For example, what if Johnny uses the password on Monday, and Timmy uses it on Tuesday? I would see only 1 subnet per day and think nothing of it in the current way pennwize reports. But if I could look at a week, I would see two different subnets one on Monday and one on Tuesday for the same password.

I must be missing something here.

Upskirt Champ Productions 50% Rev Share
Comment
feetishes

Confirmed User

Join Date: Oct 2004

Posts: 16
Share

Post
#7

12-17-2004, 12:49 PM

In order to see reports from a period of days, you would probably need to get a subscription. Usually, when I view my reports from Pennywize (like a 2 week period), I look at the ip address, along with the country where the ip originates from.

I set a daily download of 300 megs for all users. Once they reach that limit, I have set Pennywize to lock the account for 12 hours. This helps with password trading. But I do monitor the logs, and will unblock all legitimate user accounts immediately.
Comment
Twe Russ

Confirmed User

Join Date: Jan 2003

Posts: 3493
Share

Post
#8

12-18-2004, 05:28 AM

ROFL, are you using anything to protect the site?

Contact information - ICQ: 7.9.0.3.0.0 · AIM: no roach · E-Mail: roachito || @ || gmail || . || com
[Friend Finder - Geo Targeting & Incredible Site Ratio] - [Credit Card Traffic - Make $65 Per Join]
Comment
Twe Russ

Confirmed User

Join Date: Jan 2003

Posts: 3493
Share

Post
#9

01-15-2005, 09:29 AM

1234567890

Contact information - ICQ: 7.9.0.3.0.0 · AIM: no roach · E-Mail: roachito || @ || gmail || . || com
[Friend Finder - Geo Targeting & Incredible Site Ratio] - [Credit Card Traffic - Make $65 Per Join]
Comment
Twe Russ

Confirmed User

Join Date: Jan 2003

Posts: 3493
Share

Post
#10

01-15-2005, 09:29 AM

1234567890 42345646778

Contact information - ICQ: 7.9.0.3.0.0 · AIM: no roach · E-Mail: roachito || @ || gmail || . || com
[Friend Finder - Geo Targeting & Incredible Site Ratio] - [Credit Card Traffic - Make $65 Per Join]
Comment
PhounTho

Confirmed User

Join Date: Jul 2004

Posts: 157
Share

Post
#11

01-22-2005, 07:30 PM

I'm not currently using anything to protect the site. I'm assuming htaccess doesn't count in this context.

Feetishes, don't you piss off a lot of people by limiting them to 300megs per day? Most people expect to download a whole site if they sign up for a month don't they? That means a diligent customer of yours can only download 9gig if they log on and dowload their limit every day.

Upskirt Champ Productions 50% Rev Share
Comment
firequartz

Confirmed User

Join Date: Jan 2005

Posts: 125
Share

Post
#12

01-23-2005, 08:46 AM

Try Password Sentry

Every paysite I have worked on , I insist on using Password Sentry .. a cgi that does exactly what you ask .. tracks how many different IPs are using a specific username/password .. once it goes over a certain (you set it) number .. it locks out the account .. works in conjunction with ccBill, Verotel, and all the others (if that's a issue) ... costs only $80.00 .. best money you'll spend on your site (no, I don't get a cut) ..

http://www.monster-submit.com/sentry/

-fQ-
modelswelove.com
foxynetbabes.com
xwebgirls.com
adultvideolocker.com
bunnyhoneys.com
penthousehoneys.com
Comment
vickyQ

Confirmed User

Join Date: Nov 2004

Posts: 141
Share

Post
#13

01-23-2005, 08:56 AM

Login to your site via ftp and check the .htaccess file. You should recognize suspicious accounts by their name, it's usually different than your payment processor sets.

Hosting, domain name registrations and server security

contact us for custom hosting offer
Comment
vickyQ

Confirmed User

Join Date: Nov 2004

Posts: 141
Share

Post
#14

01-23-2005, 09:00 AM

I meant to say .htpasswd file, not .htaccess

Hosting, domain name registrations and server security

contact us for custom hosting offer
Comment
PhounTho

Confirmed User

Join Date: Jul 2004

Posts: 157
Share

Post
#15

02-13-2005, 09:41 AM

UPDATE. I have chosen to go with Strongbox at bettercgi.com and it seems like it's a pretty neat little script. For $70 this guy in Texas will even install it for you, and he'll even return your phone calls if you have a question. It does the little Turing image thing where people have to enter in username, password, and then the letters of the image in the box. It's pretty cool, check it out.

Upskirt Champ Productions 50% Rev Share
Comment

Previous template Next

Working...