Okay good to know, thanks. I was looking to block login attempts to wp-admin via htaccess and wondered what the best way to block whole countries is here? Do you think the firewall is best option rather than htaccess rule?
They are probably using VPN to access your website if their IP address changes very frequently. But if I it's once in a while, then it might be just location change from them. I wouldn't block them immediately if I were you.