Dave,

The 10 minutes lockout period starts from the last attempt not first - meaning if someone is continuously attacking with less than 10 minute gaps in between, their IP will always remain blocked. It will get unblocked 10 minutes AFTER they stop attacking.

If you would still like to increase this period, follow the steps below:

• Create/modify $INSTALL_DIR\config\server.properties file and add the following line
• invalid.pwd.blocked.time=20
• The above line sets this parameter to 20 minutes
• Save the file
• Restart Xeams