Sorry..
I am still looking for the way to prevent brute attack.
Yes.
I am a worried person.. :(
I found web page
I think that If I can insert google recaptcha on Tracks's authorization page, I can effectively defend the brute attack.
Is there anyone who know how to set link's google recaptcha to Tracks.
If you have someone, let me know how to set google recaptcha to Tracks