Ah...some of us *use* xml-rpc, which you need for offline editors like Windows Live Writer. I've been using it for years, and never come in for the kind of attack that hit Jeffro, which seems to have been bad luck as much as anything. (Well, that and lack of eptitude from his host.)

Jeff, any idea who resides at that IP address or owns those domains? A competent hacker would be hiding several jumps back, and not likely traceable, but whoever it is deserves a smackdown.