private function sessionBruteForceLock()
    {
        $attempt = Yii::$app->session->get('__attempt_count', 0);
        
        $counter = $attempt + 1;
        
        Yii::$app->session->set('__attempt_count', $counter);
        
        $lockout = Yii::$app->session->get('__attempt_lockout');
        
        if ($lockout && $lockout > time()) {
            Yii::$app->session->set('__attempt_count', 0);
            return $lockout;
        }
        
        if ($counter >= $this->module->loginSessionAttemptCount) {
            Yii::$app->session->set('__attempt_lockout', time() + $this->module->loginSessionAttemptLockoutTime);
        }
        
        return false;
    }