--- a/mod_limit_auth/mod_limit_auth.lua	Wed Oct 28 16:16:59 2015 +0100
+++ b/mod_limit_auth/mod_limit_auth.lua	Fri Oct 30 17:47:48 2015 +0100
@@ -34,6 +34,7 @@
 
 module:hook("stanza/urn:ietf:params:xml:ns:xmpp-sasl:auth", function (event)
 	local origin = event.origin;
+	if origin.type ~= "c2s_unauthed" then return end
 	if not get_throttle(origin.ip):peek(1) then
 		origin.log("warn", "Too many authentication attepmts for ip %s", origin.ip);
 		tarpit_delay();