[FR] Separate alert and block thresholds in the brute force monitor

[interfasys]

I'd definitely want to automatically block any IP trying something a hundred time, but I'd like to be notified of IPs being rejected 5 times. For this to happen, we would need 2 separate thresholds.