Charles,
Have you thought about using a product like fail2ban to slowdown brute force attacks like this based on Apache logs? You could add something like this in front of DreamFactory and as Bill suggested, implement DreamFactory Enterprise to place an additional speed bump before someone gets into your backend.
My two cents.
Sridhar