That's a good point.
We can't say "You're password is right but not your email" so... he will see is wrong email refilled in the password lost page and he can re-check it here before sending a reset link.
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
Really good information but #7 is debatable. What if the user isn't able to log in due to a mistyped email address?
That's a good point.
We can't say "You're password is right but not your email" so... he will see is wrong email refilled in the password lost page and he can re-check it here before sending a reset link.