So if you see that an IP address has sent an abnormal number of POST requests to wp-loginphp files  you can ban it from your firewall From our experience and stats  a normal number of POST requests to wp-login