[Plugin: Theme My Login] Too many login attempts

Well I re-installed it and still continue to get the same error.. Is there something that I am unaware of that would cause this issue???

Nothing short of too many login attempts. You may need to go into the user admin and “unlock” users.

Except EVERY user was locked out.. They ALL didn’t try to log in and get locked out..

I could NOT get in with my own admin login to unlock folks, and I KNOW I didn’t not make more than 5 login attempts.. It gave me the locked out message on my FIRST login attempt.. I also logged in with a backup account I have setup and was informed that it too was locked out after the FIRST login attempt..

The only way I could get back into the client’s site was to delete the theme-my-login plugin folder..

Are you able to access the database directly, with phpMyAdmin or any other means? If so, look in the usermeta table for keys “theme_my_login_security” and post the results of a few.

meta_key meta_value
theme_my_login_security ” a:3:{s:9:””is_locked””;s:1:””1″”;s:21:””failed_login_attempts””;a:5:{i:0;a:2:{s:4:””time””;s:10:””1327475373″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:1;a:2:{s:4:””time””;s:10:””1327475374″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:2;a:2:{s:4:””time””;s:10:””1327475375″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:3;a:2:{s:4:””time””;s:10:””1327475376″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:4;a:2:{s:4:””time””;s:10:””1327475376″”;s:2:””ip””;s:14:””80.165.154.119″”;}}s:15:””lock_expiration””;s:10:””1327561776″”;}”
theme_my_login_security ” a:2:{s:9:””is_locked””;s:0:””””;s:21:””failed_login_attempts””;a:3:{i:0;a:2:{s:4:””time””;s:10:””1326771755″”;s:2:””ip””;s:14:””108.38.100.103″”;}i:1;a:2:{s:4:””time””;s:10:””1326771772″”;s:2:””ip””;s:14:””108.38.100.103″”;}i:2;a:2:{s:4:””time””;s:10:””1326771777″”;s:2:””ip””;s:14:””108.38.100.103″”;}}}”
theme_my_login_security ” a:3:{s:9:””is_locked””;s:1:””1″”;s:21:””failed_login_attempts””;a:5:{i:0;a:2:{s:4:””time””;s:10:””1327475310″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:1;a:2:{s:4:””time””;s:10:””1327475311″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:2;a:2:{s:4:””time””;s:10:””1327475312″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:3;a:2:{s:4:””time””;s:10:””1327475313″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:4;a:2:{s:4:””time””;s:10:””1327475314″”;s:2:””ip””;s:14:””80.165.154.119″”;}}s:15:””lock_expiration””;s:10:””1327561714″”;}”
theme_my_login_security ” a:2:{s:9:””is_locked””;s:0:””””;s:21:””failed_login_attempts””;a:1:{i:0;a:2:{s:4:””time””;s:10:””1326332925″”;s:2:””ip””;s:13:””96.229.129.29″”;}}}”
theme_my_login_security ” a:3:{s:9:””is_locked””;s:1:””1″”;s:21:””failed_login_attempts””;a:5:{i:0;a:2:{s:4:””time””;s:10:””1327475445″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:1;a:2:{s:4:””time””;s:10:””1327475446″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:2;a:2:{s:4:””time””;s:10:””1327475447″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:3;a:2:{s:4:””time””;s:10:””1327475448″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:4;a:2:{s:4:””time””;s:10:””1327475448″”;s:2:””ip””;s:14:””80.165.154.119″”;}}s:15:””lock_expiration””;s:10:””1327561848″”;}”
theme_my_login_security ” a:3:{s:9:””is_locked””;s:1:””1″”;s:21:””failed_login_attempts””;a:5:{i:0;a:2:{s:4:””time””;s:10:””1327475413″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:1;a:2:{s:4:””time””;s:10:””1327475414″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:2;a:2:{s:4:””time””;s:10:””1327475415″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:3;a:2:{s:4:””time””;s:10:””1327475416″”;s:2:””ip””;s:14:””80.165.154.119″”;}i:4;a:2:{s:4:””time””;s:10:””1327475417″”;s:2:””ip””;s:14:””80.165.154.119″”;}}s:15:””lock_expiration””;s:10:””1327561817″”;}”

I have some issue with this plugin after installing theme my login wp-admin page redirect to this login page which i dont want how i can remove this redirection??? please help me

when we login through theme my login page and click on dash board than admin automatically sign out and go on same login page why? what is the problem with this plugin??? please help me out…i think thats why user try to sign in again and you guys facing blocking issue

Atifasif – Dude.. for reals?????

START YOUR OWN POST!!!!! your issue is not the same as the one I am reporting here..

@ DivaVocals you are not the owner of wordpress mind it and this is not your website and if by mistake I posted some thing here by mistake than you should not get hyper mind it.

Because these are public forums and every one come forward and post here. Understood????

@atifasif – Yeah.. okay.. Got it.. I don’t own WordPress.. whatever.. **SMH**

So, according to the data, not every one of them is locked. Those that are locked, all occured from the same IP address.

I saw that too.. Those are all the same username though.. What’s interesting though Jeff is that my two logins wasn’t one of those that were locked out according to the data.. I attempted to log in when I was alerted by my other admins that they were locked out.. That’s when I got the too many login attempts on my FIRST login try… Very strange..

They can’t all be the same username because there is only one set of theme_my_login_security meta data per user.

My admin account was locked out for 24 hours with the same IP 80.165.154.119 tonight, had disable/Re-Enable Theme My Login plugin so could login to dashboard.

I advise all of yous to block this IP and report it.

Sorry Jeff that was typo.. It should have read “they AREN’T all the same username“. and yes ALL of my users were locked out admins and all..

Bottomline is ALL my users didn’t try to login and get locked out.. I didn’t try to log in at all until I was alerted to the issue of folks being locked out and I got the locked out message when I made my FIRST attempt to login. There really is some kind of issue here, and unlike overchecking, disable/re-enable did not work for me.. the ONLY way I made the error go away was to delete the Theme my Login folder from my plugins folder via FTP so that I could log back in..

This is starting to feel like some kind of bot attack…

Well, just like @overchecking just mentioned, he/she had the same IP address show up. So, it is an attack – and the plugin is doing it’s job!