2. The method as claimed in claim 1 , said method further includes: continuously determining at least one suspicious account group by downloading newly added data during a plurality of updated time intervals.
2. The method as claimed in claim 1 , said method further includes: continuously determining at least one suspicious account group by downloading newly added data during a plurality of updated time intervals. 3. The method as claimed in claim 2 , said method further includes: for said each updated time interval, updating said plurality of homonyms synonyms to at least one existing language model, and for each new account different from the previous group of accounts during said each update time interval, re-establishing a language model of said new account to describe its post contents.