How to block the user after a few failed logins modules like login security deny the user IP after afew failed logins. there are softwares that randomly generate new IP for user so it makes such modules useless. sending cookie to the user browser is also unreliable because the user can disable accepting cookie. What is the most reliable solution to block some users?
Rules is what comes to mind. You can react to the user logging in I guess.