Initial analysis of four million login attempts