IP blocking not working properly?

First thanks for creating an updated version of “Limit Login Attempts”
which I used on nearly all of my sites.

Anyway I discovered an potential issue today: in addition to your plugin, I also installed https://www.ads-software.com/plugins/wp-login-attempt-log/ to keep track of all the login attempts.

Have a look at the IP 160.202.162.204 which according to “Limit Login Attempts” accounts for 8200 login attempts during one day:

(larger view: https://www.mapsmarker.com/limit-login-attempts-logs.png)

The log of “Limit Login Attempts Reloaded” in contrast only displays 15 lockouts in total for for 160.202.162.204:

(larger view: https://www.mapsmarker.com/limit-login-attempts-reloaded.png

So my assumption is that somehow the IP lockout does not seem to work properly.

FYI: the XMLRPC endpoint is disabled for all users via htaccess, so I actually have no idea how the IP 160.202.162.204 succeeded in creating that many login attempts without getting blocked by your plugin.

I hope you can help here.
Thx,

Robert

• This topic was modified 7 years, 8 months ago by Robert Seyfriedsberger.