After how many attempts does a device automatically enter blacklist?

If you enter for thirty times username and/or password incorrect, the device is placed on blacklist. For security reason, after the first fifteen attempts you prompted to wait five minutes before you try again to login.