How do spraying attacks not get flagged?

This question applies to brute force logins as well...does this attack simply become nullified with account lockouts after x amount of failed logins?

account attack attacks brute cybersecurity flagged logins question spraying