[BUG] LOGİN -- WRONG PASSWORD

The limit for incorrect password entries is 10, but even though I logged in to the server after a long time, when I enter 1 incorrect password, it gives the warning “You entered the wrong password” and the server cannot be logged in.

This is not only happening for me but for all players. Someone who has never logged into the server also encounters this problem.

```
{
"versionInfo": {
"name": "Velocity",
"vendor": "Velocity Contributors",
"version": "3.4.0-SNAPSHOT (git-8f3dea54-b478)"
},
"platform": {
"operatingSystemType": "Windows Server 2022",
"operatingSystemVersion": "10.0",
"operatingSystemArchitecture": "amd64",
"javaVersion": "21.0.7",
"javaVendor": "Oracle Corporation",
"listener": {
"listenerType": "NIO",
"compression": "Java",
"encryption": "Java"
}
},
"config": {
"bind": "77.90.5.229:25565",
"motd": "\u003c#09add3\u003eA Velocity Server",
"showMaxPlayers": 500,
"onlineMode": false,
"preventClientProxyConnections": false,
"playerInfoForwardingMode": "MODERN",
"announceForge": false,
"onlineModeKickExistingPlayers": false,
"pingPassthrough": "DISABLED",
"advanced": {
"compressionThreshold": 256,
"compressionLevel": -1,
"loginRatelimit": 3000,
"connectionTimeout": 5000,
"readTimeout": 30000,
"proxyProtocol": false,
"tcpFastOpen": false,
"bungeePluginMessageChannel": true,
"showPingRequests": false,
"failoverOnUnexpectedServerDisconnect": true,
"announceProxyCommands": true,
"logCommandExecutions": false,
"logPlayerConnections": true,
"acceptTransfers": false,
"enableReusePort": false
},
"query": {
"queryEnabled": false,
"queryPort": 25565,
"queryMap": "Velocity",
"showPlugins": true
},
"enablePlayerAddressLogging": true,
"forceKeyAuthentication": false,
"servers": {
"lobi": {
"currentPlayers": 0,
"host": "77.90.XXX.XXX",
"port": XX
},
"skyblock": {
"currentPlayers": 5,
"host": "77.90.XXX.XXX",
"port": XX
}
},
"connectOrder": [
"lobi"
],
"forcedHosts": {
"lobi.example.com": [
"lobi"
]
}
},
"plugins": [
{
"id": "velocity",
"name": "Velocity",
"version": "3.4.0-SNAPSHOT (git-8f3dea54-b478)",
"authors": [
"Velocity Contributors"
],
"description": "The Velocity proxy",
"url": "https://velocitypowered.com"
},
{
"id": "limboapi",
"name": "LimboAPI",
"version": "1.1.27-SNAPSHOT (git-f779f2d)",
"authors": [
"Elytrium (https://elytrium.net/)"
],
"description": "Velocity plugin for making virtual servers.",
"url": "https://elytrium.net/"
},
{
"id": "limboauth",
"name": "LimboAuth",
"version": "1.1.14-SNAPSHOT (git-4023a45)",
"authors": [
"Elytrium (https://elytrium.net/)"
],
"url": "https://elytrium.net/",
"dependencies": [
"limboapi",
"floodgate"
]
},
{
"id": "minimotd-velocity",
"name": "MiniMOTD",
"version": "2.1.5",
"authors": [
"jmp"
],
"description": "Use MiniMessage text formatting in the server list MOTD.",
"url": "https://github.com/jpenilla/MiniMOTD"
},
{
"id": "skinsrestorer",
"name": "SkinsRestorer",
"version": "15.5.3",
"authors": [
"knat",
"AlexProgrammerDE",
"Blackfire62",
"McLive"
],
"description": "Ability to restore/change skins on servers!",
"url": "https://skinsrestorer.net",
"dependencies": [
"floodgate"
]
},
{
"id": "snap",
"name": "Snap",
"version": "1.2-SNAPSHOT (build 35)",
"authors": [
"Phoenix616"
]
}
]
}
```

Start by reproducing the login failure with the reported LimboAuth and Velocity versions, then trace how incorrect-password attempts are counted and persisted. Done means a single incorrect password does not block login, the configured limit of 10 is respected, and the behavior is verified for both returning and new players.

Written by the indexing model from the issue text.