You will probably need some custom coding to do it. I don't think there's an option for that.

Thanks' , can you, please, direct me where to start looking ? or to data relevant to this issue ?

..\concrete\single_pages\login.php
..\concrete\controllers\single_page\login.php ->authenticate()

But a lot of c5 comes together in there so it will need quite a bit of knowledge.

Maybe a better way is to hook into a application level event, check for an error and do your counting
I don't think there is a failed login event yet.

http://documentation.concrete5.org/developers/application-events/ov...

Would be nice to see your progress.

edit* I see now that you spec. asked about the forgot password option. But the places to look for are about the same.

Thank you very much !!
If i will find the way to do it, i will post it back here .

I think your best bet is to look at the login page code.
There is an option to ban users after a certain number of attempted log-in. That's based on IP address recognition.

You could probably copy that bit of code and re-use it for the password reset functionality.