code: protected void addInvalidLogin(String userName, String remoteAddress) {
  
          if (m_maxBadAttempts < 0) {
              // invalid login storage is disabled
              return;
          }
  
          String key = createStorageKey(userName, remoteAddress);
          // look up the user in the storage
          CmsUserData userData = m_storage.get(key);
          if (userData != null) {
              // user data already contained in storage
              userData.increaseInvalidLoginCount();
          } else {
              // create an new data object for this user
              userData = new CmsUserData();
              m_storage.put(key, userData);
          }
      }
docs: Adds an invalid attempt to login for the given user / IP to the storage.<p>
  
  In case the configured threshold is reached, the user is disabled for the configured time.<p>
  
  @param userName the name of the user
  @param remoteAddress the remore address (IP) from which the login attempt was made