I started getting these notifications yesterday. I’m wondering if this is legit.
Mine reads “Hello,
12 failed login attempts (3 lockout(s)) from IP 188.228.143.121
Last user attempted: admin
IP was blocked for 20 minutes
This notification was sent automatically via Limit Login Attempts Reloaded Plugin. This is installed on your WordPress site.
Under Attack? Try our advanced protection. Have Questions? Visit our help section.”
Seems that the hacker is using “admin” as the password over and over.