http://seclists.org/lists/fulldisclosure/2004/Jul/1238.html it seems to have improved from that (no longer just 'guest' and 'test')...i have been getting from 3 to about 100 attempts per day for the past couple of months on my home dsl here in miami florida the ips that you find are either a very stupid kiddie using their home box or more likely something already compromised /joshua -- A common mistake that people make when trying to design something completely foolproof is to underestimate the ingenuity of complete fools. - Douglas Adams -