There are 3 types of times that are counted in the tibia ...
The stamina time
The played online
The time online
*
I believe the CIP, currently used as the detection method Time Online which is the time in which the client is open. I have several scripts that appears in minotor my hunt that way ...
Example:
Stamina: 35h
Played Online: 7h
Time Online: 5:22:47:35 (day, hour, minute, second)
In short, that my character is only 7 hours playing and 35 hours of stamina, but the client is open for 5 days, 22 hours, 47 minutes, 35 seconds. So as a character would be only 7 hours playing but have five days that the customer is not closed (moneymakers).
My opinion is that the CIP began evolving gradually started putting stamina and analyzing players (not just with bots), then the real time online players, and now how long a client is open.
My main character, is dsa stamina 42h-15h already tired of seeing private message and default message saying that he had reported me, I have received more than 20 messages, and my character is lvl 113 is active, but when it finishes stamina 15h the client closes .
I do not know if repair but every customer has an ID (PID: numbers).