oh damn. i guess i better disable my shoutbox.

also another good security measure is password protecting the admincp directory through cpanel or direct admin. that way if someone does log in with admin privelages they wont be able to access the admincp.