Screening, sanctions and continuous-monitoring workspace.
Five failed attempts within 15 minutes trigger a temporary login lock for that username/IP combination.