Some users have their home IP's never change, BUT they will forget their password after a month of not having used it. So now they will get their negative count

Some users have their home IP's never change, BUT they will forget their password after a month of not having used it. So now they will get their negative count, AND 10 tries to get it right. It has saved the support staff some grief in the past. I've seen a couple of them get to 15 tries and then log in successfully.