ACP 403 - possibly hacked

[macron]

A new user registered from Russia, despite the StopForumSpam filter. I get these alot and delete them asap. When I logged in to do that in and go to the ACP, I now get a 403. I do have access to the database. I have a backup admin user as well. That one also gets a 403 logging in to the ACP.
Does anyone know why I get the 403 and how to restore access?

[KevC]

More likely is your hosts have changed something and your admin link is blocked. Ask them first.

[macron]

Having Russians creating a lot of accounts has me a bit in panic mode, no matter how well I try to filter and block them.

For anyone else having this issue:
Just checked the errorlog on my hosting provider and I came across this:

mod_security rule [id "77140992"] at [/etc/modsecurity.d/013_i360_1_infectors.conf:594] triggered!

I checked my website admin panel under Security and disabled the SecRuleEngine. Now I can log in to ACP again. I've notified the host. Hopefully they can fix this.

Thanks.

[SuiSSaS]

I have a similar issue after registering a Russian user.
Now when I try to enter ACP I just get a "Not acceptable" message.
The entire forum works normally, I just don't have access to ACP.

Any solution?

[KevC]

You need to ask your hosts. It's likely mod_security on their server has blocked something.