Using firewall software to protect your content management system (WordPress, Joomla) website can save the day. I receive email notification every time someone tries to login to one of my clients’ or my websites with the incorrect username and/or password.
Some of the software can be set to block back end login attempts after a number of repeated tries from a specific ip address. This is called autobanning and can be very useful especially when you are not at your computer. Most of the attempted tries have happened in the middle of the night and the autoban is a lifesaver.
Make sure your website is secure.