This system is used in my mud now, it actively watch's for password attempts, and when bad password attempts come in, it grabs them, if too many failed attempts come in, it will effectively block the ip responsible for it. Ontop of that, it also logs the failed attempts into the players pfile, notifying them when they next log in about the failed password attempts, and what passwords were attempted.