Support » Plugin: Limit Login Attempts » ~500 login attemps in a few minutes from same IP address w/ limit-login-attempt

  • I have limit-login-attemps plugin installed and set to 3 maximum attemps, and it works for normal users but there seem to be a bug because using another plugin (Simple Login Log), I was able to log about 500 attemps from the same IP address and for the same username (admin) within a few minutes.

Viewing 1 replies (of 1 total)
  • I got more or less the same thing, only i use ThreeWP Activity Monitor for logging. I got probably a few thousand although my logs are limited to contain 1000 entries max. Lucky thing I don’t have an admin user.

    It seems not to work 100%,
    My settings are:

    Lockout 5 allowed retries
    20 minutes lockout
    4 lockouts increase lockout time to 24 hours
    12 hours until retries are reset

    But 1 and the same ip adress achieved to made 999 tries, according to the ‘ThreeWP Activity Monitor’ plugin. Probably it was more but logs are limited for 1000 entries.

    Nice adition would be that there are at least 30 seconds between an single entry

Viewing 1 replies (of 1 total)
  • The topic ‘~500 login attemps in a few minutes from same IP address w/ limit-login-attempt’ is closed to new replies.