I see repeated admin login attempts on my site also. As you have changed your username, use a strong password and are blocking repeated attempts from the same IP you should be very safe indeed. On point to bear in mind is that most IP addresses host hundreds of users, of which only one is usually causing issues by malicious login attempts. Therefore, I avoid blocking any one IP address for longer than 1 hour after 3 failed attempts if the IP address is from a country where I have a high number of visitors. This disrupts login attempts without permanently excluding the other genuine potential visitors using that IP address.
↧