My Forum Has Been Breached

[Nadavy]

So repeatedly over the past couple days, several of our admin accounts have logged onto the forum and started posting inappropriate comments and talking about how we have been hacked. They keep saying they are unstoppable.
We installed an ip block so that only a few of us can get into the admin panel.
Is there any sort of MOD that I can download that only allows certain IPs into certain accounts?
Any suggestions?! Help!

[Attitude5ire]

When you have more admin accounts..the risk of getting breached is also higher. You need to secure ur ACP more.
Firstly backup ur forum database just in case.
Password protect ur ACP using .htaccess password
Assign ur admin account strong passwords.
If they still keep getting breachd. just suspend them for a while and patch more areas. Also ask they to make sure they havent been hacked cos someone might have a keylogger installd in ur admin accounts.. so its hard to pin point but just suspend till u take all precautions.

[Scotteh]

in your home/public_html/forum there should be the admincp folder, in that there should be a .htaccess file.

Then you can add;

Order Deny,Allow
Deny from all
Allow from IPADDRESSOFADMIN1, IPADDRESSOFADMIN2

etc (use comma to seperate)

So it denies access to it from everyone apart from those specific IP's, however a vast amount of people have dynamic IP's now so it may be alot harder.

[Nadavy]

We installed an .htaccess thing.
So that stopped them from being able to do serious damage...
but they can still log onto the admin acounts =/

Anything else?

[Wired1]

Change the passwords to the database, and as Attitude5ire said, change the passwords of all admin / mod accounts. Do it from a secure computer, as one or more of the admins may have keyloggers on their computer.