That’s the username I use, but the email is in the settings as an alternative option. I presume someone had a list and was trying all my known passwords with the email - it wouldn’t get them in (I use unique random passwords for everything of any importance) but trying over and over gets me locked out. It might be worth checking your settings to see if it is enabled.