Support

The lockout is strange - I have applied the same settings to four Joomla sites, but one has me locked out of both front and back end. When I looked at the IP in log, the host server IP was listed, not mine.

The blocked requests graph on the admin shows no blocks.

When I turn off permanent ban, I'm still banned (with my custom message). At the moment, this site, which was hacked, has been running in main-disabled mode for a couple hours - and new files have been injected.

I am also unable to whitelist IP's in the Administrator Exclusive Allow IP List - clicking 'New' gives me the expected fields, but saving does nothing.

How do I navigate this confluence of IP issues, one wonders. Or at least, I wonder.

Thanks for your very fast reply. I am getting a different IP in the log than my own IP.  But your specific directions seem to be working - what's interesting is that I submitted my IP as it appeared in that list, but 'saved' after several attempts. Now there are several copies of it there.

As to the hackfiles, I have indeed scanned and cleaned everywhere - trying carefully not to go for php5-era regex statements highlighted as suspicious. My last few scans are coming up clean. The hacks are on a cpanel account, clones of two of these sites that were installed simultaneously on a Plesk account remain clean.

Thanks for your help.