How do you handle suspicious logins?

Question

Have an app with a decent number of users (just over 275k) and wondering how other developers handle suspicious login attempts. Do you track IP/user agents, and then block a