So it seems we became big enough that spambots are trying to get in the site. I added a really silly simple login capatcha to stop the automated systems trying to brute force attack your passwords.
I hate capatchas, but I also hate getting 95,000 emails that a user was locked weekly.