使用Web应用程序防止密码列表攻击的最佳实践

i'd like to prevent bots from hacking weak password-protected accounts. (e.g. this happend to ebay and other big sites)i'd like to prevent bots from hacking weak pass