![](/images/flag/s/en.gif)
However, if the third failed login attempt is made outside of the 10-minute timespan, there would be no lock out for that username. In a similar scenario for an IP address (using the same timespan and designated number of failed login attempts), if any user (one or more) enters an incorrect password for any username (one or more) using that same machine, a lockout would be made for that machine's IP address on the third unsuccessful login attempt. But there would be no lockout for that IP addres