3rd party email access security

Hello

When 3rd party access check box is enabled, are users alerted when failed attempts to log in occur?

If not, can a bad actor use 3rd party email apps to guess passwords an unlimited number of times without any alerts?

Is there any notification if a successful login comes from a "new" location?

thanks!