I'll have a good dig around the log files tonight as well to see what I can find. I've just had another one on:

WOL Info: irrv1195.uplogon.com

Argh :(
I had another idea, maybe they are some kind of bots and go there cause the link is on the first page? (quite lame theory, I know).

I guess I'll have to wait for the log files and the other statistics...

I've not finished work yet but the following has been hammering referrals.php all day:

mail.couchwhite.com

What is even more surprising is if you go to www.couchwhite.com it is a firm of solicitors/lawyers????

Now I'm getting more confused by what is going on.

Then I don't think it will be something harmful... :)
Unless it's faking another IP address... Could that happen?
Urgh, I just wish I knew more about security issues :(

I'll have a dig at the logs when I get chance. There's never enough time to do anything :)

I've blocked the two new offenders ip's from accessing the server and no probs at the moment.

I'm still curious to why people would be so interested in access this extension continuously!! There isn't anything they can get from it that they can't from the normal members list.

Not to worry, the ip blocking is working a treat and I don't want to remove this extension as I think it's great and my members like it.

When I get chance to view the logs i'll post the findings and maybe something show us what is going on :)

Thanks for the help Michelle.

Well there is something that they can't see on the memberlist (unless you hacked it): Who referred whom. Perhaps they are interested in that for some reason? :ermm:
However I think that the probable cause is a link to it in a site.
Btw how many of them did you have?

I wish I had offered any help but I don't think I did :(:disappointed:

I have 4 ips in total but what raised the alarm bells for me was a hosting site in Russia had about 10+ guest sessions all accessing the referrers.php page at the same time for hours.

The other was the Jap ISP, same thing there as if it was some sort of attack.

Warnung: Invalid argument supplied for foreach() in /referrers.php (Zeile 163)

Warnung: arsort() expects parameter 1 to be array, null given in /referrers.php (Zeile 173)

Warnung: Invalid argument supplied for foreach() in /referrers.php (Zeile 174)

The last days the hack works fine but now i visit the referrers.php and see the
errors above

Please help !

greeting's from Germany

mikepmm

no support ?
is there an other hack for 3.5x that do the same ?

mikepmm

ok I found it :-)

https://vborg.vbsupport.ru/showthread.php?t=102452

vbulletin and photopost - http://www.aminotsweet.de