Same here. About 20 today alone, so they are getting through, and using the username ‘login’ which I don’t have, but their persistence tells me they are not giving up.
The tracking package I use reports this code is being used, which suggests this is happening through the server somewhere, not just through the front end.
\”1.0\”?>system.multicallmethodNamewp.getUsersBlogsparams[login][login]1234444
Any ideas people?