Hi @karenelated, thanks for getting in touch.
It certainly can be frustrating to see many new page hits, especially if there seems to be no logical reason, but this is actually quite a normal occurrence. You might find the following blog post interesting: https://www.wordfence.com/blog/2018/03/ask-wordfence-why-is-an-insignificant-site-like-mine-being-attacked/
Wordfence, as an endpoint firewall cannot stop a bot or human from trying to visit your website altogether, but rather deal with the visits appropriately when they happen.
My general advice is that Wordfence does all of the important blocking for you automatically so you don’t have to, but if you wish to make your brute force or rate limiting rules a little stricter so that they can’t retry as frequently, you might find the following links useful to learn some more:
https://www.wordfence.com/help/firewall/brute-force/
https://www.wordfence.com/help/firewall/rate-limiting/
To keep yourself fully protected we ask users to set very strong passwords – stored in a password manager if necessary, and to use both 2FA and reCAPTCHA.
I hope that helps you out.
Thanks,
Peter.
