Sam-AUST 5 Posted March 21, 2016 I've attached a screencapture of the who's online. I googled part of the weird URLs showing and found mention of AWStats and security vulnerabilities. Is this a sign something has happened on my site and if there has been malicious code installed, where do I look to locate it? Share this post Link to post Share on other sites
Jack_mcs 792 Posted March 22, 2016 I don't see mention of AWStats in the links so your question is not clear, at least to me. However, the IP at the bottom that is repeated many times is clearly a hacker playing games. I suggest you block him with 188.116.0.0/18 unless you know the IP to be good. It is from Poland. Support Links: Need Help? See this thread and provide the information requested. Is your version of osC up to date? You'll find the latest osC version (the community-supported responsive version) here. How to Upgrade to the latest version Recommended SEO Addons Share this post Link to post Share on other sites
♥kymation 629 Posted March 22, 2016 That's some script kiddie throwing everything in his script at your site in hopes that somethng will work. As far as I know it won't. Ban the IP if you want to, or if it's loading your server, otherwise ignore it. Regards Jim See my profile for a list of my addons and ways to get support. Share this post Link to post Share on other sites
