Every sign-in attempt is logged. The account locks for a while after five failed tries.