# Suspect users and dealing with trolls
**URL:** https://meta.discourse.org/t/suspect-users-and-dealing-with-trolls/107916
**Category:** Community Building
**Created:** [January 30, 2019, 12:19pm UTC](https://meta.discourse.org/t/suspect-users-and-dealing-with-trolls/107916 "2019-01-30T12:19:43Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@slackmoehrle](https://meta.discourse.org/u/slackmoehrle)
#### Post date: [January 30, 2019, 12:19pm UTC](https://meta.discourse.org/t/suspect-users-and-dealing-with-trolls/107916/1 "2019-01-30T12:19:43Z")
We are getting a lot of sign ups each day. Fake accounts, we think.
- They are all close together
- \<1 min read time
- multiple accounts from the same IP
My questions:
1. When a user is in the suspect category, why were they put there?
2. I guess to suspend users WITHOUT them being notified, I should just run an update query against the database?
3. Is there a way to get a list each day of accounts that share IP addresses? This seems to be something we are seeing a lot of now.
I can query the database directly, I guess?
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [January 30, 2019, 12:21pm UTC](https://meta.discourse.org/t/suspect-users-and-dealing-with-trolls/107916/2 "2019-01-30T12:21:12Z")
> [@slackmoehrle](#):
>
> When a user is in the suspect category, why were they put there?
They filled out their user profile but have almost no read time. This is a _very_ unusual behavior pattern for most users.
You absolutely must run the Akismet plugin if you are not already. It is essential in the current era of common 100% human spammers.
---
### Author:  [@slackmoehrle](https://meta.discourse.org/u/slackmoehrle)
#### Post date: [January 30, 2019, 1:54pm UTC](https://meta.discourse.org/t/suspect-users-and-dealing-with-trolls/107916/3 "2019-01-30T13:54:44Z")
Thank you! I will get it installed now. I appreciate the response.
---
### Author:  [@osioke](https://meta.discourse.org/u/osioke)
#### Post date: [February 7, 2022, 7:28am UTC](https://meta.discourse.org/t/suspect-users-and-dealing-with-trolls/107916/5 "2022-02-07T07:28:35Z")