I regularly get tried by bots. I once found a broken one that had latched on and was somewhere the thousands of running exactly the same permutations of password attempts before I just blocked it at the firewall. It had well north of a million attempts when I blocked it. The poor thing was stuck in repeat for more than a day and they didn't notice...