We are having the same problem – all of our admins and users of all levels were locked out, having not used the site at all for a couple of weeks.
1) Followed plugin directions to clear the lock outs in WP Options in phpMyadmin. Still didn’t allow any of us to log in
2) Changed the attempts.php file name, which deactivated the plugin. Site did not recognize my password anymore.
3) Requested a WP password reset link, reset password, could log in.
4) Logged out and fixed the attempts.php file name to see what would happen. Got the too-many-log-in-attempts error message again.
5) Deactived plugin through the file name and was able to log back in.
I see this is happening to a lot of people on this and other boards, but I don’t see feedback or directions from the author yet. Am going to leave this deactivated and research a replacement plugin next. Also going to install a plugin to track login attempts, per other notes I’m seeing.
I can’t figure out why we couldn’t log in with our existing passwords after clearing the lockouts in options. A pain to ask all of our users to reset their passwords!
