Hi,

Please have a look at this log line (from the Administrative log):

[2018.11.28] 10:13:28 [redacted IP]Login failed: Too many login attempts for user redacted@redacted.com.  Brute force attempts increased to 7.  Next clean available at 11/28/2018 8:13:35 AM

As you can see, the log entry was made at 10:13:28, which is correct as that is the time the user tried with the wrong credentials over and over again. But the "Next clean available" is at the same date, but 2 hours ago? How does that work?

This is how all of these events look like. The time on the server was 10:13:28 at the time of the event.

Any help would be appreciated.