[Paul M]

Whatever that Guest is - it is (incorrectly) passing on 127.0.0.1 as it's "real" address, so the hack is (correctly) displaying it. There is a setting to tell the hack to ignore any real ip's that are in the private ranges (such as this one) - but you need to edit this setting in the hack code itself ;

in class_core.php find ;

PHP Code:

        $ignoreprivate = false; // Set to true to ignore private 'real' ip's // 


and change it to ;

PHP Code:

        $ignoreprivate = true; // Set to true to ignore private 'real' ip's //