Admin Bypass flaw attack attempt
Jonny Bradley wrote:
Hi @RandyH
I presume and hope you have made another account with an unpredictable username and strong password and added that to the Admins group, and once you have done that you can use the validate button on the admin user page
to unlock the default admin account if necessary... but if you're under such continuous attack (and have an alternative admin login) you could also just leave it locked which might save time?
I had not yet but will do so. Guessing this means it is a hard coded name that cannot be changed. For now, the .htaccess deny on the Class C network is working to block them. Hopefully they will not get more sophisticated using VPNs and such. Likely some middle school kid just learning the tricks of the trade.