CAPTHCA/additional table field/allowed ip s - not propose.
I think best option is: keep login attempts in server cache.
If you can propound other options or cut up option with cache, you are welcome.
How do I get two distinct random records using Django? I ve seen questions about how to get one but I need to get two random records and they must differ.