I'll let people post their settings, if they like, but I'd also like to point out that a recent addition to Brute Force rules is the new "delay" setting, as opposed to a flat out block. This can be used as a "front line" type of prevention prior to implementing more restrictive blocks.