CBFSHC, there's an option to turn that off in options (notifications.) I had to after a while and just monitored the live view logins. I was getting an email every 30 seconds, if I had kept it on I would still be getting them, 24 hours later.
The "test" username and blank username was turned into my domain name, so it looks like real bot attack and not just weird errors in any case.