the problem is more massively distributed botnets guessing a few times, each with a random known email, and a popular password(s). You are virtually gaurenteed

the problem is more massively distributed botnets guessing a few times, each with a random known email, and a popular password(s). You are virtually gaurenteed to get hits with this approach and its extremely difficult to block.