Brute Force Protection Blocked User "User (email) attempted 10 consecutive logins unsuccessfully"
Last Updated:
Overview
A user is blocked by Brute Force Protection with the following message in the logs:
User (someone@example.com) attempted 10 consecutive logins unsuccessfully. Brute force protection is enabled for this connection, further attempts are blocked from this IP address for this user.
Before this log message, the user had many successful logins. The user did not see any failed login (wrong password) records. This article explains how this is possible
Applies To
- Brute Force Protection
Solution
The successful login with linked accounts (for example, Google SSO) does not reset the failed login count for Brute Force Protection. As a result, there can be successful logins with linked accounts, while the username and password authentication keeps failing.
