Ban IPs that make too many password failures