diff --git a/plugins/Login/Controller.php b/plugins/Login/Controller.php
index <HASH>..<HASH> 100644
--- a/plugins/Login/Controller.php
+++ b/plugins/Login/Controller.php
@@ -441,8 +441,9 @@ class Controller extends \Piwik\Plugin\ControllerAdmin
         try {
             $passwordHash = $this->passwordResetter->checkValidConfirmPasswordToken($login, $resetToken);
         } catch (Exception $ex) {
-            Log::debug($ex);
+            $this->bruteForceDetection->addFailedAttempt(IP::getIpFromHeader());
 
+            Log::debug($ex);
             $errorMessage = $ex->getMessage();
         }
Use brute force detection for reset password action (#<I>)