I watched a security video a while back, tons of info they can pull from a logon page. How long it takes to do things, order, how consistently, etc. You get patterns that stand out that are bots. Maybe they always click on the center of the box? Stuff like that.