Thanks for the reply nexialys. Yeah we actually removed the memberlist.php page a while ago, so I'm not sure how they're getting all the usernames.
We just disabled the Who's Online > Active Members list at the bottom of the forum to all logged out guests, so hopefully that might help. But I'd imagine this bot or spammers might simply be going through the forum threads getting usernames too.
Has this type of spammer activity happened with any of you guys? If it keeps up we might have to disable the email that's sent out to users when their account is locked for 15 minutes. I'd hate to do it but we can't tolerate our members getting those notification emails non-stop due to the bots.
|