Cornflake wrote:
At the time of this post - 49,346 posts over 526 unique IPs, of which 71 are used only once, and none of which can be referenced back to login times unfortunately makes investigation practically impossible.
Also, the user-agent isn't recorded - at least, not by anything I have access to.
Ah. Not a lot that can be done then.
Though you might run the IPs through a geolocation script, if there's a login from Tibet or a state Fnord has never visited, that would shore up the signature-vandalising hacker theory.
_________________
Behold! we are not bound for ever to the circles of the world, and beyond them is more than memory, Farewell!