OWASP: "Testing for Brute Force: Discovery Authentication Methods"

Read this article.

Click https://s3.amazonaws.com/saylordotorg-resources/wwwresources/site/wp-content/uploads/2011/06/CS305-6.3.2.pdf link to open resource.