Yes, me too. Have now had more than 60 emails advising me that I am locked out of registration due five incorrect attempts to login and to try again after 15 minutes. Let me see now ... that's 60 x 5 = 300+ login attempts - maybe I should feel honoured.
Persistent little morons, aren't they? Just to be on the safe side, I've changed my password and made it longer and more complex.
Hope that does the trick and stops 'em getting in to use my fictitious username, though I too wonder what advantage that will actually give this annoying hacker. Seems to me he/she/they will only be able to post or possibly download mods using my name. Is there a threat beyond that which I am not seeing?
Incidentally, on my own website, I place blocks on guests and REGISTERED MEMBERS with regard to seeing the member list. I don't see a valid reason or a need for them to look at who is a member until they have joined us and posted enough times for me to know whether or not they are real persons who are genuinely interested in the site. And I allow nobody but Admins to see who's online.