Well, I think it goes to show that an automated process that attempts to log in with a random string every 10 minutes to a random account should probably be a standard feature of production. (Or maybe just to a specific account so you don't lock people out, but random would be ideal.)