Limit Login Attempts Reloaded keeps the authentication door narrow. Each failed login increments retry counters in WordPress options, and each lockout writes a row to the plugin's lockout table capturing IP, attempted username, gateway, reason, and timestamp. The admin shows the lockouts as a paginated table with basic filters, which is useful for one-off review and less useful when the team needs to follow a campaign across the week.

SleekView reads the Reloaded lockout dataset directly. One row per lockout, with IP, username, gateway, and time as filterable columns. Filter to gateway equals XML-RPC for the noisy quarter of the log. Filter to user_login contains admin for accounts attackers know. Sort by time to see the last hour. Save the view and reopen the on-call dashboard with a click.

The plugin keeps owning the retry counters, lockout decisions, and the safelist. SleekView only adds the triage surface so the team can act on the data inside WordPress.

Limit Login Attempts Reloaded is one of the most installed brute-force defences on WordPress and its lockout log is dense with detail. The trade-off is that the admin presents that log row by row, which makes the per-incident view tidy and the macro view invisible. SleekView reads the lockout table directly and renders it as one sortable, filterable workspace.

The plugin keeps owning counters, lockouts, and safelist enforcement. The security team gets a triage queue with saved views, role scoping, and CSV exports, so daily review and incident reconstruction stop being CSV-and-spreadsheet exercises.