sdayman on "[Plugin: Wordfence Security] Tons of login attempts with invalid usernames"

That's par for the course. They'll probably eventually give up. One way or another they'll be hitting your site. You can check your server logs to see if they're using a particular bogus user agent you can block.