[Plugin: Limit Login Attempts] Does not work!

This is from your webserver/system log?

WordPress doesn’t log failed login attempts. This plugin does not use the webserver log. So these messages are probably from the webserver.

I’m guessing you are password-protecting part of your site (perhaps the admin directory) using .htaccess or similar. That would explain things: someone is trying to brute-force the .htaccess protection.

The .htaccess test is made by the webserver before any PHP code is executed. There is nothing any WP plugin can do about it.

Either that or you are using some other WP plugin that hooks into wp_login_failed. If so please send me a link so I can check it out!

I have a “event log plugin” that logs login attempts, user logins,etc. That is how I am being told about these attempts.
The plugin also lets me know that wp-login.php was the script called while these many times. Also, I have edited a few details about the log such as the user ID in question and the physical path to my wp-login.php

Ok, sorry about that misunderstanding! ??

On the Limit Login Attempts plugin options page, does the IP in question get logged, and show up as blocked (turn on plugin IP log if necessary)?

If yes
Then there shouldn’t be any problem: the IP will fail to login regardless of username/passwords tried.

However. Reason for failure get filtered at a later stage. No information should leak to attacker, but the original WP error object (including original failure message) is passed along to any other plugin that uses the relevant hooks, wp_login_failed get triggered, and so on.

If no
Then please mail me at [email protected] and I’ll try to debug it further: please tell me about what plugins you have active — especially if they use the authentication hooks (authenticate, wp_authenticate, wp_authenticate_user, …) or replace those pluggable functions. Could you send along a link or copy of your event logging so I can make sure exactly what gets checked?

Oh! Crap! Sorry for replying late.. and overlooking at the plugin page. It does indeed get locked out – 195.191.54.176 xxxx (1 lockout)