Too many invalid login attempts should write a note