{"action":"created","issue":{"url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/34","labels_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/34/labels{/name}","comments_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/34/comments","events_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/34/events","html_url":"https://github.com/WPWhiteSecurity/WP-Security-Audit-Log/issues/34","id":57435511,"number":34,"title":"Failed Logins Issue (Specific Alert 1003 issue) with Multisite","user":{"login":"robert81","id":3965050,"avatar_url":"https://avatars.githubusercontent.com/u/3965050?v=3","gravatar_id":"","url":"https://api.github.com/users/robert81","html_url":"https://github.com/robert81","followers_url":"https://api.github.com/users/robert81/followers","following_url":"https://api.github.com/users/robert81/following{/other_user}","gists_url":"https://api.github.com/users/robert81/gists{/gist_id}","starred_url":"https://api.github.com/users/robert81/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robert81/subscriptions","organizations_url":"https://api.github.com/users/robert81/orgs","repos_url":"https://api.github.com/users/robert81/repos","events_url":"https://api.github.com/users/robert81/events{/privacy}","received_events_url":"https://api.github.com/users/robert81/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/labels/Bug","name":"Bug","color":"fc2929"}],"state":"open","locked":false,"assignee":{"login":"carmelopreeostudios","id":10559677,"avatar_url":"https://avatars.githubusercontent.com/u/10559677?v=3","gravatar_id":"","url":"https://api.github.com/users/carmelopreeostudios","html_url":"https://github.com/carmelopreeostudios","followers_url":"https://api.github.com/users/carmelopreeostudios/followers","following_url":"https://api.github.com/users/carmelopreeostudios/following{/other_user}","gists_url":"https://api.github.com/users/carmelopreeostudios/gists{/gist_id}","starred_url":"https://api.github.com/users/carmelopreeostudios/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/carmelopreeostudios/subscriptions","organizations_url":"https://api.github.com/users/carmelopreeostudios/orgs","repos_url":"https://api.github.com/users/carmelopreeostudios/repos","events_url":"https://api.github.com/users/carmelopreeostudios/events{/privacy}","received_events_url":"https://api.github.com/users/carmelopreeostudios/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/milestones/1","labels_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/milestones/1/labels","id":976725,"number":1,"title":"1.4","description":"Issues to be tackled for version 1.4","creator":{"login":"robert81","id":3965050,"avatar_url":"https://avatars.githubusercontent.com/u/3965050?v=3","gravatar_id":"","url":"https://api.github.com/users/robert81","html_url":"https://github.com/robert81","followers_url":"https://api.github.com/users/robert81/followers","following_url":"https://api.github.com/users/robert81/following{/other_user}","gists_url":"https://api.github.com/users/robert81/gists{/gist_id}","starred_url":"https://api.github.com/users/robert81/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robert81/subscriptions","organizations_url":"https://api.github.com/users/robert81/orgs","repos_url":"https://api.github.com/users/robert81/repos","events_url":"https://api.github.com/users/robert81/events{/privacy}","received_events_url":"https://api.github.com/users/robert81/received_events","type":"User","site_admin":false},"open_issues":2,"closed_issues":2,"state":"open","created_at":"2015-02-12T11:54:53Z","updated_at":"2015-02-16T20:10:46Z","due_on":null,"closed_at":null},"comments":5,"created_at":"2015-02-12T09:22:54Z","updated_at":"2015-02-17T08:43:01Z","closed_at":null,"body":"In a multisite environment alert 1003 is not \"working correctly\". This is what is happening:\r\n\r\nSetup: 3 websites on a multisite:\r\n\r\nsite1.multiwp.com\r\nsite2.multiwp.com\r\nsite3.multiwp.com\r\n\r\nThere are a number failed logins for a non existing user from host 192.168.2.127 hence Alert 1003 is generated reporting the site name, as per the below screenshot:\r\n\r\n![image](https://cloud.githubusercontent.com/assets/3965050/6164565/c577b38a-b2a0-11e4-9064-31b5dd2d7bba.png)\r\n\r\nIf failed logins for a non existing user are generated from the same host but on a different site, e.g. site2.multiwp.com the date of the same Alert 1003 is being updated. In the case of multisite we need to keep track of failed logins specifically for each site on the network hence in the above case a new Alert 1003 should have been generated for site2.\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/comments/74634263","html_url":"https://github.com/WPWhiteSecurity/WP-Security-Audit-Log/issues/34#issuecomment-74634263","issue_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/34","id":74634263,"user":{"login":"carmelopreeostudios","id":10559677,"avatar_url":"https://avatars.githubusercontent.com/u/10559677?v=3","gravatar_id":"","url":"https://api.github.com/users/carmelopreeostudios","html_url":"https://github.com/carmelopreeostudios","followers_url":"https://api.github.com/users/carmelopreeostudios/followers","following_url":"https://api.github.com/users/carmelopreeostudios/following{/other_user}","gists_url":"https://api.github.com/users/carmelopreeostudios/gists{/gist_id}","starred_url":"https://api.github.com/users/carmelopreeostudios/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/carmelopreeostudios/subscriptions","organizations_url":"https://api.github.com/users/carmelopreeostudios/orgs","repos_url":"https://api.github.com/users/carmelopreeostudios/repos","events_url":"https://api.github.com/users/carmelopreeostudios/events{/privacy}","received_events_url":"https://api.github.com/users/carmelopreeostudios/received_events","type":"User","site_admin":false},"created_at":"2015-02-17T08:43:01Z","updated_at":"2015-02-17T08:43:01Z","body":"@robert81 The plugin continued to record because for testing I changed the limit number,\r\nnow is fixed\r\ncommit 986a6489b0fa4d99e1ec5280da856801363acf1b"}}