Yet another WordPress brute force attack

Recently, I’ve seen a significant increase in brute force attack activity on a WordPress blog I administer. What’s different about this attack is the login attempts are coming from a wide variety of IP addresses, but mostly localized to one particular country.

So, I’ll see failed login attempts from IP addresses in the same class A network, but different CLASS B networks and sub-nets within. For example, I’ll see failed login attempts from:

nn.A.xxx.yyy
nn.B.www.vv
nn.A.bbb.cc
nn.C.xx.yyy

and so on. Also, it seems each IP address I see occurs only once, per failed login attempt.

Are others seeing similar attacks? I’ve been watching this for the past couple of weeks.

Thanks!

Peace…