{"action":"opened","issue":{"url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/33","labels_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/33/labels{/name}","comments_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/33/comments","events_url":"https://api.github.com/repos/WPWhiteSecurity/WP-Security-Audit-Log/issues/33/events","html_url":"https://github.com/WPWhiteSecurity/WP-Security-Audit-Log/issues/33","id":57081002,"number":33,"title":"Issue with Failed Logins Alerts - Alerts 1002 Not Generated when there are 10+ Alert 1003","user":{"login":"robert81","id":3965050,"avatar_url":"https://avatars.githubusercontent.com/u/3965050?v=3","gravatar_id":"","url":"https://api.github.com/users/robert81","html_url":"https://github.com/robert81","followers_url":"https://api.github.com/users/robert81/followers","following_url":"https://api.github.com/users/robert81/following{/other_user}","gists_url":"https://api.github.com/users/robert81/gists{/gist_id}","starred_url":"https://api.github.com/users/robert81/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robert81/subscriptions","organizations_url":"https://api.github.com/users/robert81/orgs","repos_url":"https://api.github.com/users/robert81/repos","events_url":"https://api.github.com/users/robert81/events{/privacy}","received_events_url":"https://api.github.com/users/robert81/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"carmelopreeostudios","id":10559677,"avatar_url":"https://avatars.githubusercontent.com/u/10559677?v=3","gravatar_id":"","url":"https://api.github.com/users/carmelopreeostudios","html_url":"https://github.com/carmelopreeostudios","followers_url":"https://api.github.com/users/carmelopreeostudios/followers","following_url":"https://api.github.com/users/carmelopreeostudios/following{/other_user}","gists_url":"https://api.github.com/users/carmelopreeostudios/gists{/gist_id}","starred_url":"https://api.github.com/users/carmelopreeostudios/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/carmelopreeostudios/subscriptions","organizations_url":"https://api.github.com/users/carmelopreeostudios/orgs","repos_url":"https://api.github.com/users/carmelopreeostudios/repos","events_url":"https://api.github.com/users/carmelopreeostudios/events{/privacy}","received_events_url":"https://api.github.com/users/carmelopreeostudios/received_events","type":"User","site_admin":false},"milestone":null,"comments":0,"created_at":"2015-02-09T19:55:53Z","updated_at":"2015-02-09T19:55:53Z","closed_at":null,"body":"Branch 1.4.0:\r\n\r\nIf there are 10+ Alerts with code 1003 (failed logins for non existing users from a specific host), if there are failed logins for existing users from the same host the plugin is not generating Alert 1002. The logic should be as follows:\r\n\r\nPlugin detects failed alert\r\nPlugin checks username in failed login\r\nIf username exists it generates Alert 1002 and reports username\r\nIf username does not exist it generates Alert 1003\r\n\r\nIn case there are 10+ 1003 alerts the plugin should still keep check the usernames of failed logins from the same host. If the user is non existing, the plugin should ignore the request, as is now. Though if the username exists it should generate or update Alert 1002. If there are 10+ instances of Alert 1002 for that specific username and host then the request should be ignored.\r\n\r\nThe only situation where the plugin should ignore failed logins from a specific host when there are 10+ 1003 alerts and 10+ 1002 alerts for each existing username on WordPress."}}