Detect invalid login attempts and lock user in a rule

I wanted to follow up @jstevenson and see if you had any further questions on the subject. Thanks!