Yeah, I'm still getting hammered by attempts. Good thing I changed the default admin name. It'd be funnier if I could redirect all invalid usernames to a certain site of dubious nature and internet legend like ***spin.com :)
I'll keep this open for the time being and try the htaccess trick on the test server
tim