Track unsuccessful login attempts

[schwobaseggl]

Unsuccessful login attempts

• Track failed login attempts (account, datetime, etc.)
• Add config option to enforce deactivation of accoutns after n consecutive failed attempts

Questions

• Notify account owner?
• Enforce Password change? Maybe configurable?

[vvvityaaa]

We can use django-axes package, which implements exactly the same functionality.
It can track login attempts and lock account after a number of unsuccessful attempts. It logs successful and unsuccessful attempts, saving this information to the database. The records consist of time of login, IP address, user agent, username, path to which login was attempted and the number of failed attempts.