Kevin Clark wrote:That IP belongs to Lancaster University.
What exactly are they doing? If the logs are cleared how do you know they're in there? What are you seeing?
DAY 1: Sent a mass email (Totaly spam) , Deleted 4 users, Changed the admin users passwords. Cleared logs.
Day 2: Sent mass email (It was like "This board is closing please move to this board xxx.xxx) , Changed admin passwords. Cleared Logs.
Also once i was in the ACP while that IP was in, and seen what he changed then he clears log.