re: #14 Charles Johnson
If you’re a Russian hacker living in mom’s basement and subsisting on income from spam, trust me - $114,000 looks like a major score.
Yeah, I know a little (and I’m sure that you know a lot more than me, Charles) about those Russian hackers; ever since I did a long-needed rebuild of my troop’s website with Joomla 3.3 a couple of weeks ago (up from Joomla 1.6) and installed the Brute Force Stop plugin (among other security measures), the failed login logs are stuffed mostly with Russian IP addresses.
They keep trying to log in as admin in the backend at least once an hour, every hour, and keep rotating IP addresses and IP blocks. Luckily, with a very strong password and two-factor authentication using Google Authenticator, I don’t worry so much.