I receive these messages from admin tools that indicate a user has logged on with admin privileges and then logs out at times when I am not on the system., I looked on the site's control panel and cannot find the login. I also asked the hosting company to check the logins but they cannot find the login activity? Do I have something set wrong?'
(I removed the website name from the output)
What is strange is that the messages have the same transaction id. When I compare the user action log with the timestamps, I find they are legitimate logins with different and separate transaction IDs for which I did not receive a notification
I am a little concerned because last week someone from a Russian IP address showed up on the user action log as logging out as administrator, but never logging in. When I looked it up the information indicated it was a spamming site so I blocked the IP. I cannot figure out how they logged in?
I am not using the standard Administrator username or the default administrator address, and have Joomla's 2FA enabled.
Is this something I need to be concerned about?
Admin Tool Messages:
12:29 Transaction ID 754
Latest User Actions ------ This is the latest action performed by a user on your website. Action | Date | Extension | Name User <a href='https://.com/administrator/index.php?option=com_users&task=user.edit&id=789'>ad@in-iStrat=Ad#or</a> installed the file file_fef | 2022-04-24 04:29:16 UTC | Installer | Administrator
12:33 Transaction ID 755
Latest User Actions ------ This is the latest action performed by a user on your website. Action | Date | Extension | Name User <a href='https://.com/administrator/index.php?option=com_users&task=user.edit&id=789'>ad@in-iStrat=Ad#or</a> logged out from admin | 2022-04-24 04:33:26 UTC | Users | Administrator
12:51 Transaction ID 756
Latest User Actions ------ This is the latest action performed by a user on your website. Action | Date | Extension | Name User <a href='https://www.com/administrator/index.php?option=com_users&task=user.edit&id=789'>ad@in-iStrat=Ad#or</a> logged in
to admin | 2022-04-24 17:20:33 UTC | Users | Administrator
12:59 Transaction ID 754
Latest User Actions ------ This is the latest action performed by a user on your website. Action | Date | Extension | Name User <a href='https://www.com/administrator/index.php?option=com_users&task=user.edit&id=789'>ad@in-iStrat=Ad#or</a> logged out from admin | 2022-04-24 04:59:39 UTC | Users | Administrator
