Depends on the implementation of different login services. Depending on the number of possible permutations, an attacker will probably get locked out of trying to log in after making dozens of guesses.