Use a limit login attempt plugin or hide your wp-login.php/wp-admin or both. Not really anything to worry about as long as you use a strong pass and keep everything updated. It's more a nuisance screwing up server logs.
You can pentest your own site with WPScan and see what info your site is leaking i.e plugin/user enumeration
|