Notifications can be setup to notify on unusual number of access from individual users having multiple failed attempts.