I had a failed login notification come through, the IP address indicated someone/something using a Linode server in the US so that has been blocked from making a login attempt again in future.
It's such a simple feature but one I really enjoyed putting together.