Lock account if consecutive 2FA are failed after a configurable value.
Record a dedicated login failure for 2FA in history Use it to lock account with Brute Force Plugin.