that message which locks you out after incorrect attempts does NOT protect a vbulletin forum from remote bruteforce attacks. I know because I have tried online tools and while it does take a long time...