In reply to richard.

According to core devs, a really useful tool such as a login limiter is plugin territory. No wonder WP has a reputation of being easy to hack...