I use Limit Login Attempts - choosing it over other options primarily for the email notification.