WordPress.org

Ready to get started?Download WordPress

Forums

Limit Login Attempts
~500 login attemps in a few minutes from same IP address w/ limit-login-attempt (2 posts)

  1. pordft
    Member
    Posted 6 months ago #

    I have limit-login-attemps plugin installed and set to 3 maximum attemps, and it works for normal users but there seem to be a bug because using another plugin (Simple Login Log), I was able to log about 500 attemps from the same IP address and for the same username (admin) within a few minutes.

    http://wordpress.org/plugins/limit-login-attempts/

  2. Richard
    Member
    Posted 6 months ago #

    I got more or less the same thing, only i use ThreeWP Activity Monitor for logging. I got probably a few thousand although my logs are limited to contain 1000 entries max. Lucky thing I don't have an admin user.

    It seems not to work 100%,
    My settings are:

    Lockout 5 allowed retries
    20 minutes lockout
    4 lockouts increase lockout time to 24 hours
    12 hours until retries are reset

    But 1 and the same ip adress achieved to made 999 tries, according to the 'ThreeWP Activity Monitor' plugin. Probably it was more but logs are limited for 1000 entries.

    Nice adition would be that there are at least 30 seconds between an single entry

Reply

You must log in to post.

About this Plugin

About this Topic

Tags