Bruteforce messages appeared then stopped

I’m using the free version of the plugin. Will look into how much it will cost all my client sites under one single price it might be close to being possible.

So unsuccessfully there were a number of bruteforce attacks this morning from the same ip address of 193.112.5.66 which to me seems to be China. I could block this country or at least the ip address.

Is this the normal pattern or am I wasting my time? TY