A good rule for Rate Limiting

Looking forward to activating Rate Limiting on a login page but I was wondering what could be a good rule as a start. Would allowing a maximum of 5req/10 seconds be a good rule to start with?