I have always thought this limit login attempts feature should have been added to the core.