Support

Just updated to Joomla 3.9.2 and AdminTools 5.2.1
I am now getting continually locked out of my website with my ip address being blocked.
I whitelisted my ip address but to no avail.
I am only able to access now by renaming main.php to something different.
Please advise.
Thanks,
Jim

Jim,

If you look at the Security Exceptions Log, what is the reason for the block? Are all the IP addresses in the log the same?

Exceptions are from numerous sources apparently. Here are the last 8:

2019-01-15 06:08:09 MST 116.212.157.29 Admin Query String http://aztouring.com/administrator/index.php
2019-01-15 06:07:22 MST 116.212.157.29 Admin Query String http://aztouring.com/administrator/index.php
2019-01-15 02:02:55 MST 36.89.53.175 Admin Query String http://aztouring.com/administrator/index.php
2019-01-15 00:27:10 MST 202.93.240.18 Admin Query String http://aztouring.com/administrator/index.php
2019-01-14 22:22:18 MST 220.247.170.82 Admin Query String http://aztouring.com/administrator/index.php
2019-01-14 22:21:18 MST 220.247.170.82 Admin Query String http://aztouring.com/administrator/index.php
2019-01-14 22:20:53 MST 220.247.170.82 Admin Query String http://aztouring.com/administrator/index.php
2019-01-14 21:38:12 MST 39.137.168.230 Admin Query String http://aztouring.com/administrator/index.php

I am getting hit rather hard with around 250 since the first of the year.

OK, variety is good. When all of the exceptions are from the same IP address, it usually means that you have something like CloudFlare in front of your site and we're reading the wrong IP address. CloudFlare sends both the real from IP address and it's own address as well. That setting shouldn't change with an update though.

Are you using a secret URL parameter? And, if so, are you passing that parameter in the URL for the back end?

Are you using GeoIP block? I think that is checked before the IP whitelist is checked. Do you have a dynamic IP address and are you using the right IP in the whitelist?

yes, I am using a secret URL parameter. Also .htaccess for AdminTools.
Yes, I use GeoIP Block.
Yes it is a dynamic IP address and for the time being ;) it is the correct address.
I renamed main.php back to its real name and for the past 15 minutes I have not experienced the problem again......so it may be "fixed."
I use COX for internet access and they had been having problems earlier this morning and it may be that whatever problem they were having was interfering somehow and creating this problem.
For the time being, I will just wait and watch....
But many thanks for your quick reply and help. I will post again if the problem re-occurs.
Thanks!
Jim

Strange things sometimes happen with a Joomla! update if you don't clear the browser cache. You can get a mixture of old and new program files because of the cache. But that normally causes display issues, not security issues. So maybe it is fixed.

Please do let us know if you have any more trouble.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.