Search results

Did that when it was just one IP. But now they are using a VPN with IP randomizer. There is no way to know what IP it will come from next.

I changed the login name of the Administrator from "admin" to something else. Tested and attempts to "admin" don't even make it to the logs. I assume whoever it is may keep trying, but they will never guess the password because the response does not help them to know which was wrong the...

I did 2FA. But they submitted anyhow.

I just added 2FA. Not going to stop the attempts, but maybe it will confuse their script with the additional field to complete. Or not! Maybe it will happily fail over and over and over while trying to login. <sigh>

The block added last week is holding for that one IP. Whoever it is seems quite determined! They have changed to using a lot of different IP sources. All over the world. I would guess some kind of VPN IP address randomizer. :-( Any ideas on what to do next? It doesn't make much sense...

Nothing since I added the deny in .htaccess. Not sure if that alone did it or if the firewall block is sticking now.

Great idea. I had forgotten about the .htaccess file. Blocking at the firewall for this kind of source is probably better. It is nothing but a bad actor. The address was gone again during daylight yesterday, CST. Then it came back overnight. It's as if the firewall block goes away. I...

Dang. :-( That same IP is back today. It showed back up at 6:50 PM yesterday. Same pattern as before. The blacklist didn't hold.

Wow! Such quick response. Thanks a LOT!! Looking at the logs, that IP should have tried again in the past half hour based on the past pattern. Looks like it is not getting to "try" to login anymore.

I see in my joomla site logs that someone is trying hundreds of times every 4 hours to login as "admin". User admin tried to login to admin Users 2 hours ago. Administrator 193.106.31.130 10221 User admin tried to login to admin Users 2 hours ago. Administrator 193.106.31.130 10220 User admin...

Thanks for all of your help Anna! You are always the best! :-) I will keep using the link for sso even though it does not seem to pass the right credentials to phpMyAdmin. I was able to restore that database, and it caused the original php errors again! Something in it was corrupted by the...

The Mysql Management works OK. The PHPMyAdmin link under extra features does not. I need to change the password on a restored database. I don't see where I can do that in the Mysql Management screen. The things I am reading say I need to use the PHPMyAdmin screen to do it. I have never...

It doesn't seem to take any login credentials I know about. Is there some default set I have not tried? Can it be reset? My domain is kane1.com

Got it. It won't connect, but I will have to figure that part out. Thanks for your help.

The older one is going to be the right one. Likely the bigger one too.

Awesome! I am on track now. A new joomla installed and the page is at default. That administration page is also loading. I must have missed a message about changing IP's the first time around. I saw your post this morning. I was thinking about that last night, but did not change it right...

Wait ... what? There is a new IP? Funny, I was starting to wonder about that and was looking at what IP I was using. Direct Admin DNS says A kane1.x10host.com. 14400 198.91.81.12 My DNS record for kane1.com is 198.91.81.3. I just changed my DNS to match Direct Admin, assuming that is the...

Sorry, I gave too much information. What I want to do is start over from scratch. The error says something is not compatible. Yet, I have deleted everything and reinstalled a bunch of times now. The symptom is going to kane1.com and it finds an index.html and loads it. Yet, the path for...

My site has been broken for many months. I have a temp page I set up with simple html so the links would work. I get PHP errors. This happened the last time I upgraded Joomla. I have given up on fixing it. So, I deleted everything and started over. After what I think was a fresh install, I...

Joomla is hosed! I just reinstalled, but it created a new install. That one works. How do I fix the current site without being able to get to the administration console?