Discourse check the user IP for block list only on login

[volas (Alexander V)]

We have a user that has been banned on our forum couple of times. But seems like he can easily bypass the IP ban by using the VPN/proxy to log in only, and then he can continue the work with forum from his main address, despite the ban.

It’s possible to do something with it?

[Canapin (Coin-coin le Canapin)]

Maybe this?

Discourse Fingerprint - Browser Fingerprinting Plugin

Discourse Fingerprint Discourse Fingerprint comes as a tool to community managers in their combat with internet trolls. It works by computing a unique identifier (a fingerprint) of each registered user, by taking into consideration over 20 browser characteristics such as user agent, screen resolution, timezone, device memory, etc. When each of these browser characteristics are considered separately, they are not enough to assess whether two users are the same. There is a …

[volas (Alexander V)]

Looks interesting, I will check it, thanks!

But I feel that it can still be a problem that the address is only checked on login time in base discourse.