Oze we only have an event for successful web login.
You could use a middleware to listen for calls to /login endpoint and react based on the response code.
Users can also "login" into the API by using the /api/token endpoint to generate an access token, which is used by login transparently. The login event doesn't trigger when an API token is manually created.