By default your wordpress login page is open for everybody, anyone can just type /wp-admin or /wp-login.php next to your domain name and reach your site entry point. So what do they do after reaching the entrance, they simply try to get in to your dashboard by attempting several logins. You should always be aware