sharing_suspects
Detect likely subscription sharing by finding accounts with many distinct IPs or apps in recent requests and ranking users by hardware ID totals from panel history.
Instructions
Find clients who probably share their subscription: many different IPs / apps in recent subscription requests, and top users by number of HWID devices. Only counts and pseudonyms are returned. Cheap: reads panel history, does not touch the nodes.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| minIps | No | Flag users with at least this many distinct IPs | |
| records | No | How many latest subscription requests to analyse |