IPs banned due to suspicious activity. Auto-unbans after 1 hour.
IPs blocked after too many login attempts — they'll see "Security challenge required."
Accounts locked after repeated failed logins.