Hi Everyone,

I have set my site properties as in the table.

InvalidLoginCheckWindowInMinutesInteger60
IPAttemptsFirstBackoffDelayInSecondsInteger300
IPAttemptsSecondBackoffDelayInSecondsInteger300
MaxIPAttemptsFirstBackoffInteger20
MaxIPAttemptsSecondBackoffInteger50
MaxUsernameAttemptsFirstBackoffInteger3
MaxUsernameAttemptsSecondBackoffInteger4
PasswordAutocompleteValueTextoff
UsernameAttemptsFirstBackoffDelayInSecondsInteger300
UsernameAttemptsSecondBackoffDelayInSecondsInteger300



I wanted to block the users after 3 wrong attempts and unblock the users after 5 minutes. In the first round, the application is working fine but after unblocking the user after 5 minutes again if the user puts the wrong password the user is being blocked on the very first attempt and in the users blocked attempts count after exhausting all the 3 chances is coming as total:

Blocked Login Attempts



8 attempts from IP '142.117.179.198' (last attempt at 17:59:06)Unblock


Why is it coming as total as I want it to be started all fresh?


Please help!


Thanks & Regards

Shivya Pant



Was it UnBlocked after the FirstBackOff Automatically or You did call an action to do so?

Seems it is not resetting the Backoff & the next time you again made an IncorrectAttemot it consider it as a SecondBackoff.

As of the Default values as per your site properties for FirstBackupOff-3 & SecondBackOff-4.

For instance of a test purpose, you can increase the values & check, but it will not fix this.