Limit hostnames for user
root, assuming it is the SUPER user, should be very restricted.

'root'@'my.domain.com'

'root'@'11.22.33.44'


In other situations, you might want

'joe'@'192.168.%'

'sal'@'%.our-domain.com'