Login attempts are logged. After 5 failed attempts the account is temporarily locked.