Hacker Post Sites????

[suzieg]

I need some help, maybe someone can give me some advice. I know by looking at my traffic stats that my members section is being hacked - I want to find out who and how. Does anyone know the addresses of sites where people post the username/passwords for members sections? Would appreciate any help on this!

[Azathoth]

Try checking your referrers in your logs for your members section. You may beable to see where they are coming from.

[fpanko]

I agree, referers are the easiest way to find out where they are coming from. You can use htaccess files so people don't just jump into your members area.

As for the people who give away your user/pass info. 2 choices I know.
1. Make a deal with them. Give them a banner and affilate code. If they can make money off of it. They won't give it away.

2. Track member's IP's. If you have a member come from more than 2 Ip's. Then you most likely have fraud. Close the account.


Hope this helps

[hobbywhore]

Am I incredibly naive here, shouldn't you be glad and praise the lord that someone has hacked and posted your site and login info? What I think you should do is to track each and every visitor who uses that I.P. number, contact their ISP's, get their identities and send them a brief mail where u give them the alternative between a) they pay membership dues for the time they have accessed the site or b) after their ISP closes down their account you will sue them.

Hobbywhore

[eXperienZ]

Install a protection script...
Pennywize is quite good at it..

[kenga]

protection scripts work for me...