If it walks like a duck and talks like a duck its probably not a chicken ...
If someone is just logging in from multiple ip's the downloads should be random, sporadic and average ... if a password has been shared or hacked you'll notice different movement in that account. I'm not sure if pennywize is still available for lease but it has a download counter for each user/pass that shows you who has downloaded what. Its not hard to spot the cheats if you have the right data.
|