Lack of interest Log failed ACP logins

[Ozzy47]

I believe that this is useful and can be used to lock down things.

 

[Paul B]

Lock down things how?

With a decent password, 2FA enabled which would require the device in order to log in, coupled with .htaccess password auth, I don't see what else could be done.

 

[Ozzy47]

It would help admins identify problematic people that target their ACP. This is a feature that is available on other platforms such as vB, and I feel it would be a no e addition to XF.

 

[Paul B]

You haven't explained how it would help them lock things down.

The only identifying information you would have would be an IP address and to prevent it, it would have to be blocked at the server level.
If it's a dynamic/proxy IP address then doing so is pointless.

 

[S Thomas]

It would more likely just be overflooded with standard admin:admin attempts.. similar to how fail2ban logs are worth to be checked.