与在线投票相关的 IP 地址的性质
我有一个在线竞赛,人们通过填写 html 表格来投票选出一个运动队。
在查看任意一天的数据时,我们注意到每小时经常会收到来自同一 IP 地址的数百张选票。昨天,我们每小时收到数百个来自 111.111.111.111 和 222.222.222.222 的请求。然后今天,我们每小时从 333.333.333.333、444.444.444.444 和 555.555.555.555 获得数百张选票。我自然而然地怀疑有恶意行为,例如机器人,或者来自同一大楼的一组员工代表其他用户投票。
然而,当我运行 SQL 查询来显示每小时的投票时,我注意到来自这些 IP 地址的投票在中午 9 点到午夜之间的中午和深夜期间激增。我想这与真实的用户投票行为一致,因为人们希望在非工作时间投票。
我很困惑,IP 地址似乎意味着犯规,但每小时的投票数似乎意味着合法投票。
所以我的问题是: 整个城市和城镇是否可以使用相同的 IP 地址?我想要了解 IP 地址的工作原理,以便确定这是否是检测违规选票的有效方法。
I have an online contest where people vote for a sports team by filling out an html form.
When looking at the data on any given day, we notice that we often get hundreds of votes per hour coming from the same IP address. Yesterday we got hundreds of per hour from 111.111.111.111 and 222.222.222.222. Then today, we get hundreds of votes per hour from 333.333.333.333 and 444.444.444.444 and 555.555.555.555. I automatically suspect foul play such as a bot, or perhaps a team of employees from the same building voting on behalf of other users.
However, when i ran an sql query to show votes per hour, I noticed that the votes from these IP addresses spiked around noon and late nights between 9pm and midnight. I'd imagine this is consistent with real user voting behaviour, because people want to vote during their non-work hours.
I'm confused, the IP addresses seem to imply foul play, but the votes per hour seem to imply legitimate votes.
So my question is:
Is it possible for entire cities and towns to use the same IP address? I'd like an explanation on how IP addresses work so that I can determine if it is an effective way to detect foul votes.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(4)
如今,IP 的共享程度已不如 20 年前。事实是,发布了如此多的不同 IP,以至于 IPv4 池即将耗尽,我们几乎只能求助于 IPv6 来扩展 IP 池。
无论如何,这绝对是傻瓜游戏。输入对每个 IP 的限制,并在多次尝试从同一个地方投票后进行禁止,应该没问题。根据您的系统/实现,您可以使用 cookie、查看客户端详细信息(使用的导航器等)...来分隔具有相同 IP 的多个用户。
IPs are not shared as much today as they were 20 years ago. Fact is, so many different IPs are issued that the IPv4 pool is being drained out and we are close to having to resort exclusively to IPv6 to expand the IP pool.
Anyway, this is definitely fool play. Input a limit on each IP and a ban after too many attemps to vote from the same place and you should be fine. Depending on your system/implementation, you could use cookies, look client details (navigator used, etc...),... to separate multiple users with the same IP.
我还以为是诈骗呢您或许应该对特定 IP 地址实施投票限制。
I'd think it was fraud. You should probably implement vote throttling from a specific IP address.
IP 地址很容易被弄乱。
尝试通过不同的东西(例如用户名)来识别您的用户
IP addresses can be easily flubbed.
Try identifying your users by something different (like a username)
是的,有可能有数十个人来自同一个地址 - 关于人们被禁止访问某些网站的故事有很多,因为他们的互联网提供商通过一个地址代理所有网络流量。
Yes, it is possible to have scores of people coming from the same address - the stories are legion about people being banned from certain sites because their internet provider proxies all webtraffic through one address.