Many members with changing IP adressen lately?
 

Am I the only one experiencing a lot of new members area lately whos IP number changes every 10 minutes or so (all IPs from the same city) causing their accounts being blocked by proxypass and other anti hack scripts?

Can't say I have noticed it.

:2 cents:

that happens a lot when browsing from a mobile device. I know that for instance t-mobile in the US constantly rotates around the IP address while browsing

Yep, more mobile traffic => more changing IP's.

Definitely mobile. Since that's mostly all I deal with, I see this often.

Lots of public wi-fi here and anyone on a limited mobile data plan is encouraged to use it.

Yes, and it's not just mobile,

My fucking internet does the same thing, even after switching ISPs. It's such a big problem that I have to use a custom batch file to access my servers.. :(

About it happening with mobile: It's probably people in cars/public transportation and switching cell towers constantly..

or someone just got your db and posted few new accounts from it somewhere :winkwink: wait few days and search for the usernames in google :winkwink: stay safe! :thumbsup

most likely it's just some user/pass's getting out onto share sites. We detect it automatically and shut it down.

I can't believe searching for *:*@ still works.... :Oh crap

Yes we have and most of it seems to be from mobile users using hot spots. They are getting blocked left and right and it's becoming a pain in the ass.

How are all of you dealing with this (mobile users / constant changing IPs)?

just ignore when the last 2 octets of the ip change. when a user's ip is dynamically switching you'll notice that it's usually always in the same subnet.

218.45.34.84
218.45.34.15
218.45.34.216
218.45.36.184

so it should be pretty easy to adjust whatever software you have to only take into account the first couple octets

Those doesn't get flagged, but what is happening a lot for us is guys using various hot spots around town so it's a totally different IP. It always ends up being a guy on a phone or tablet. I don't know they are jerking off in bathrooms all over town or what, but they log in with a different IP often.

At first I thought our pw db was hacked and shared but I can't find anything through google, and it's only happening to select mobile users who seem to be on the run or something. :1orglaugh

oh ahh yeah in that case i'd just use cookies to determine if someone is logging on from a different device. although people that visit porn sites probably delete their cookies/history. guess this is just one of those problems that there is no perfect solution for :)

Hopefully in the near future the security software companies will start implementing device recognition. That would probably solve the problem most of the time.

It's frustrating to work so much on trying to get mobile members only to have them have problems getting into your site due to how they are accessing it.

I have gotten really good at reading IP logs over the years but much of what I have learned is useless now with all the mobile devices out there.

Each celphone tower or wireless hotspot is its own IP and doesnt translate to a single user at all.

I dont know if browser can capture mac addresses (or if phones and tablets have them) but if so that will be a lot more meaningful moving forward.

My adsl isnt a static ip.. drives me mad, have to use knockfiles for server access as I cant lock it to an ip.

ditto :2 cents: