Recent content by kane1x10

  1. K

    Joomla admin account being hacked again

    Did that when it was just one IP. But now they are using a VPN with IP randomizer. There is no way to know what IP it will come from next.
  2. K

    Joomla admin account being hacked again

    I changed the login name of the Administrator from "admin" to something else. Tested and attempts to "admin" don't even make it to the logs. I assume whoever it is may keep trying, but they will never guess the password because the response does not help them to know which was wrong the...
  3. K

    Joomla admin account being hacked again

    I did 2FA. But they submitted anyhow.
  4. K

    Joomla admin account being hacked again

    I just added 2FA. Not going to stop the attempts, but maybe it will confuse their script with the additional field to complete. Or not! Maybe it will happily fail over and over and over while trying to login. <sigh>
  5. K

    Joomla admin account being hacked again

    The block added last week is holding for that one IP. Whoever it is seems quite determined! They have changed to using a lot of different IP sources. All over the world. I would guess some kind of VPN IP address randomizer. :-( Any ideas on what to do next? It doesn't make much sense...
  6. K

    Admin Account Being Attacked / Hacked

    Nothing since I added the deny in .htaccess. Not sure if that alone did it or if the firewall block is sticking now.
  7. K

    Admin Account Being Attacked / Hacked

    Great idea. I had forgotten about the .htaccess file. Blocking at the firewall for this kind of source is probably better. It is nothing but a bad actor. The address was gone again during daylight yesterday, CST. Then it came back overnight. It's as if the firewall block goes away. I...
  8. K

    Admin Account Being Attacked / Hacked

    Dang. :-( That same IP is back today. It showed back up at 6:50 PM yesterday. Same pattern as before. The blacklist didn't hold.
  9. K

    Admin Account Being Attacked / Hacked

    Wow! Such quick response. Thanks a LOT!! Looking at the logs, that IP should have tried again in the past half hour based on the past pattern. Looks like it is not getting to "try" to login anymore.
  10. K

    Admin Account Being Attacked / Hacked

    I see in my joomla site logs that someone is trying hundreds of times every 4 hours to login as "admin". User admin tried to login to admin Users 2 hours ago. Administrator 193.106.31.130 10221 User admin tried to login to admin Users 2 hours ago. Administrator 193.106.31.130 10220 User admin...
  11. K

    How to login to phpadmin?

    Thanks for all of your help Anna! You are always the best! :-) I will keep using the link for sso even though it does not seem to pass the right credentials to phpMyAdmin. I was able to restore that database, and it caused the original php errors again! Something in it was corrupted by the...
  12. K

    How to login to phpadmin?

    The Mysql Management works OK. The PHPMyAdmin link under extra features does not. I need to change the password on a restored database. I don't see where I can do that in the Mysql Management screen. The things I am reading say I need to use the PHPMyAdmin screen to do it. I have never...
  13. K

    How to login to phpadmin?

    It doesn't seem to take any login credentials I know about. Is there some default set I have not tried? Can it be reset? My domain is kane1.com
  14. K

    Class 'JError' not found

    Got it. It won't connect, but I will have to figure that part out. Thanks for your help.
  15. K

    Class 'JError' not found

    The older one is going to be the right one. Likely the bigger one too.
Top