Add check for Failed login attempts from same IP.

Problem/Motivation

For this Drupal application, repeated failed login attempts from the same IP address can indicate brute-force attacks, but there is currently no Drupal FIT check that highlights suspicious IPs or warns administrators about abnormal failure patterns.

Steps to reproduce

Proposed resolution

Add a new Security FitCheck plugin FailedLoginFromIpCheck that:

• Reads recent failed login attempts from Drupal’s logging/flood data, grouped by source IP within a defined time window.
• Flags IPs that exceed a configurable threshold of failed attempts with FitWeight::High (or FitWeight::Critical if the volume is very high), indicating likely brute-force activity.
• Lists the top offending IPs and counts in the FitResult so administrators can enable or tune rate limiting, IP blocking, or additional protections (e.g. CAPTCHA or Login Security module).

Remaining tasks

User interface changes

API changes

Data model changes