A log of failed sign-in attempts, recorded by the Axes brute-force protection module. It shows the username, IP address, user agent, and time. Entries are created automatically and can’t be added here.
How the brute-force protection works
All sign-ins that require a username and password are protected for both LDAP and local users. This covers the Meeting Portal and the backend admin. Failed attempts are counted per IP address. After 10 failed attempts, sign-in from that IP address is locked for 5 minutes. The lockout ends automatically after this time.
To unlock an IP address immediately, delete its access attempt entry.
List view
| Column | Description |
|---|---|
| Attempt Time | When the latest failed attempt was made. |
| IP Address | The IP address from which the attempts came. |
| User Agent | The browser or client that was used. |
| Username | The username that was entered. |
| Path | The page or API path where the attempt was made. |
| Failed Logins | The number of failed attempts counted in this entry. |
View an access attempt
Click an entry to see all details. All fields are read-only.
| Field | Description |
|---|---|
| Username | The username that was entered. |
| Path | The page or API path where the attempt was made. |
| Failed Logins | The number of failed attempts. |
| GET Data | The query parameters of the request. |
| POST Data | The submitted form data. Passwords are masked. |
| User Agent | The browser or client that was used. |
| IP Address | The IP address from which the attempt came. |
| HTTP Accept | The Accept header of the request. |
Delete access attempts
To reset the counter and remove a lockout, open the entry and click Delete. To delete multiple entries, select them in the list and use the Delete selected access attempts action.