3 ms·By IP. It doesn't have to be limited by much, just enough to discourage brute force attempts.by fullstop 5y agoBy IP. It doesn't have to be limited by much, just enough to discourage brute force attempts.