Detect invalid login attempts and lock user in a rule