Unnecessarily condescending comment. You said: >Other than allowing at least 14,000 login attempts from the same system But from 23andMe's end, they didn't s

Unnecessarily condescending comment. You said: >Other than allowing at least 14,000 login attempts from the same system But from 23andMe's end, they didn't see these login attempts originating from a single system because it was from several locations, with different user-agents, fingerprints, etc. How do you propose they were to identify these various computers to be part of the same botnet? If you have a reliable way to do so, many people would pay you large amounts of dollars for that service.