looks like to be very efficient

Actually not so efficient as I thought. Please correct me if I am wrong but the bots came back and are trying to login into usernames eachtime from different IP addresses as before. Not sure if this is a bot or not but we’re still under attack.

There are many types of attacks. Blackhole stops bad bots who disobey robots.txt rules (as explained in the documentation). Other types of attacks include brute-force logins, as you have described. Sometimes these two things overlap, other times they do not. To stop brute login attacks, there are several ways to go about it depending on the site’s goals, users, and so forth. For example:

– HTTP Authentication
– 2-Factor authorization
– reCaptcha plugin
– other login plugins (rate limiters, et al)

Blackhole is VERY efficient as a honeypot method of stopping bad bots, but not all bad bots are looking for honey. Some bad bots just sit there and attack your login page. I hope this helps shed some light on things.