Support

Admin Tools

#21421 Your IP address was blocked because susspicious activity was detected as originating from your IP address".

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by tampe125 on Tuesday, 11 November 2014 02:21 CST

user76732
 Hello at Akeeba Support,

We love Admin Tools but we hate "Your IP address was blocked because suspicious activity was detected as originating from your IP address". After the new file checking system in Admin Tools: "Your Admin Tools installation is corrupt, it is now also impossible to use the IP Blocking work around "main-disable.php".

No one in our office and any developers can access our web sites without we use the above work around, even if there IPs are white listed in full.

This morning I checked that my own IP addresses was the same as yesterday and as they are I should be able to login to one of our web sites where I yesterday white listed my IPs in full. In full means for me:

Single IP, i.e. 192.168.1.1
Simple IP Range, i.e. 192.168.1.1-192.168.1.255
Implied IP Range, i.e. 192.168.1.
CIDR Block, i.e. 192.168.1.0/24

The white listing is not helping me as I still fall on a; Admin Query String.

We are using the right Administrator secret URL parameter so that can't be the reason for been blocked.

The problem is the same at the Joomla Admin and the front-end and it is the same at all our web sites.

Our WAF Configuration under "Basic Protection Features" is:
Allow administrator access only to IPs in Whitelist - No
Disallow site access to IPs in Blacklist - Yes
Administrator secret URL parameter - and we have a secret URL parameter.

Reading some of the ticket at Akeeba which have the same issue and the replies from Akeeba Support like this one: "If you add your IP to the whitelist, it won't get blocked. In fact, if you add your IP to the whitelist, no security checks will be performed when you visit your site from that IP address. Did your IP address change in the meantime?"

In our case:
1. IP addresses will be blocked even they are white listed
2. Security check is performed
3. No -our IP addresses did not change in the meantime

We have raised this issue two times before at Akeeba Support and it was not solved and now that our IP Blocking work around "main-disable.php" not are working anymore, if we shall use Admin Tools in an optimal way - we need a permanent solution for this problem and I kindly ask you to help us out.

Best regards,
Finn

tampe125
Akeeba Staff
Hello Finn,

where did you add your IP? In the whitelist page or inside the Never block these IPs field?
If you put them in the whitelist page, you have to enabled the option Allow administrator access only to IPs in Whitelist (but this will restrict the admin access to people in that list only).
If you just want to "switch off" Admin Tools for selected IPs, you simply have to add those addresses to the field Never block these IPs inside WAF configuration page.

However, we should understand what's triggering security exceptions.
Can you please look at the log page and post here the ban reason?

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!