# How do you stop somone from posting at a forum when they change IP address?

**URL:** <https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517>\
**Category:** Factual Questions\
**Created:** [August 7, 2003, 4:06am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517 "2003-08-07T04:06:26Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![BrentLumkin](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@BrentLumkin](https://boards.straightdope.com/u/BrentLumkin)\
**Post date:** [August 7, 2003, 4:06am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/1 "2003-08-07T04:06:26Z")

</div>

At a forum I go to, we have a problem. A guy was banned, and ever since then, he keeps coming back under a new name every time, with a new IP address each time. He posts VERY strong racial slurs, other horrible things, and does it all of the time. He’s ruining threads almost nightly, and we’re tired of it.

How can we stop someone doing this, when they change their IP address? Is there any way to find out what his ISP is or something. We need to take action, as this has gone on long enough.

Is there a program we need, or what?

Any help would be appriciated, thanks guys!

---

<div class="post-metadata">

**Author:** ![ScottHaneda](https://avatars.discourse-cdn.com/v4/letter/s/9d8465/32.png) [@ScottHaneda](https://boards.straightdope.com/u/ScottHaneda)\
**Post date:** [August 7, 2003, 4:15am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/2 "2003-08-07T04:15:24Z")

</div>

Go to [http://arin.net/](http://arin.net/) and enter in the IP, this will tell you who owns the IP space, then you can contact the ISP.

You may consider blocking the entire /24  
(basically block from 0 to 255, if your software allows it, otherwise, you cound do it in your router, or your ISP’s router.

---

<div class="post-metadata">

**Author:** ![BrentLumkin](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@BrentLumkin](https://boards.straightdope.com/u/BrentLumkin)\
**Post date:** [August 7, 2003, 4:16am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/3 "2003-08-07T04:16:48Z")

</div>

> [@](#):
>
> \*Originally posted by ScottHaneda \*  
> \*\*Go to [http://arin.net/](http://arin.net/) and enter in the IP, this will tell you who owns the IP space, then you can contact the ISP.
> 
> You may consider blocking the entire /24  
> (basically block from 0 to 255, if your software allows it, otherwise, you cound do it in your router, or your ISP’s router. \*\*

Every new user name they sign up as though, is a different IP address. What do we do when they are changing it like that?

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [August 7, 2003, 4:18am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/4 "2003-08-07T04:18:27Z")

</div>

They’re using proxy servers. You’ll contact the proxy server(s) owners who in turn can trace his original IP back to his ISP for you.

---

<div class="post-metadata">

**Author:** ![BrentLumkin](https://avatars.discourse-cdn.com/v4/letter/b/9d8465/32.png) [@BrentLumkin](https://boards.straightdope.com/u/BrentLumkin)\
**Post date:** [August 7, 2003, 4:20am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/5 "2003-08-07T04:20:02Z")

</div>

> [@](#):
>
> \*Originally posted by Q.E.D. \*  
> \*\*They’re using proxy servers. You’ll contact the proxy server(s) owners who in turn can trace his original IP back to his ISP for you. \*\*

How do you determine what proxy server(s) they are using in order to contact them?

I’m sorry if I sound stupid, but I’ve never encountered such a problem before, and I’ve been an Admin at sites before, and still am, heh.

---

<div class="post-metadata">

**Author:** ![Q.E.D](https://avatars.discourse-cdn.com/v4/letter/q/51bf81/32.png) [@Q.E.D](https://boards.straightdope.com/u/Q.E.D)\
**Post date:** [August 7, 2003, 4:21am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/6 "2003-08-07T04:21:59Z")

</div>

Get a traceroute program, such as NeoTrace. That’ll pull whois information for you including contact phone numbers and email addresses

---

<div class="post-metadata">

**Author:** ![Berkut](https://avatars.discourse-cdn.com/v4/letter/b/a88e57/32.png) [@Berkut](https://boards.straightdope.com/u/Berkut)\
**Post date:** [August 7, 2003, 4:25am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/7 "2003-08-07T04:25:06Z")

</div>

You can find out his who his IP belongs to by going to [www.arin.net](http://www.arin.net) and looking it up there. That will also tell you the range of IPs assigned to that entity. You can ban his whole range, but that may result in legitimate users from that ISP being banned also.

You can start small, though. Look for similarities in his different IP addresses. If his IP is 192.168.1.100 one time, and the next time it’s something like 192.168.1.200 (only the last octet changing), try banning the 192.168.1.XXX range first.

Also, you can ban the numerous free proxy servers out there. Unwanted users can use them to get around IP bans.

---

<div class="post-metadata">

**Author:** ![Berkut](https://avatars.discourse-cdn.com/v4/letter/b/a88e57/32.png) [@Berkut](https://boards.straightdope.com/u/Berkut)\
**Post date:** [August 7, 2003, 4:27am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/8 "2003-08-07T04:27:02Z")

</div>

> [@](#):
>
> \*Originally posted by Q.E.D. \*  
> \*\*They’re using proxy servers. You’ll contact the proxy server(s) owners who in turn can trace his original IP back to his ISP for you. \*\*

Good luck with that. Most of the web proxy servers pride themselves on providing anonymity for their users.

---

<div class="post-metadata">

**Author:** ![SlickRoenick](https://avatars.discourse-cdn.com/v4/letter/s/e68b1a/32.png) [@SlickRoenick](https://boards.straightdope.com/u/SlickRoenick)\
**Post date:** [August 7, 2003, 4:40am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/9 "2003-08-07T04:40:52Z")

</div>

Is it possible to just block the MAC address rather than the IP or the IP scope?

---

<div class="post-metadata">

**Author:** ![Berkut](https://avatars.discourse-cdn.com/v4/letter/b/a88e57/32.png) [@Berkut](https://boards.straightdope.com/u/Berkut)\
**Post date:** [August 7, 2003, 4:52am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/10 "2003-08-07T04:52:23Z")

</div>

> [@](#):
>
> \*Originally posted by SlickRoenick \*  
> \*\*Is it possible to just block the MAC address rather than the IP or the IP scope? \*\*

No. Wouldn’t do you much good anyway, the MAC address can be spoofed fairly easily.

---

<div class="post-metadata">

**Author:** ![Alereon](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@Alereon](https://boards.straightdope.com/u/Alereon)\
**Post date:** [August 7, 2003, 9:35am UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/11 "2003-08-07T09:35:00Z")

</div>

If a user is determined, there’s no way to stop them. They’ll have access to thousands upon thousands of proxy servers, all operating from compromised home, business, educational, and government systems, often with dynamic IP addresses. This means no abuse departments to complain to, and no accountability. You’ll never be able to get the proxies shut down, much less the abuser dealt with.

Your only defense is an effective e-mail address confirmation registration system. In general, someone will run out of e-mail accounts they have access to long before they run out of IPs. If you ban free e-mail providers, it becomes even more effective. Requiring moderators to manually approve new registrations is even better.

---

<div class="post-metadata">

**Author:** ![handy](https://avatars.discourse-cdn.com/v4/letter/h/b5a626/32.png) [@handy](https://boards.straightdope.com/u/handy)\
**Post date:** [August 7, 2003, 2:28pm UTC](https://boards.straightdope.com/t/how-do-you-stop-somone-from-posting-at-a-forum-when-they-change-ip-address/193517/12 "2003-08-07T14:28:03Z")

</div>

I suppose you could get an Anonymous Proxy Server List & ban anything on that.
