My dedicated server showed excessive usage (all of my email went down for 11 hours and we are trying to figure out why - it led to the mail queue which was filled with a bunch of excess usage notices from root) -- the host tech support searched the logs and told me about the 4K attempted logins. Do you want me to request a copy of the log entries?
Wordfence is working great on another active website that I run (logging blocked attempts every minute or two), so I was really surprised when I saw that it hadn't logged anything for 7 days on this domain.
