Not working?

After an onslaught of bots trying to break in, I downloaded this software and set things to lock users out after a week after 3 failed.

It seemed to work well and I was only seeing bots with one or two login attempts.

Then, I saw it happening with a few hits here and there. I learned about XML-RPC. So I installed software to disable that.

Things have been good for several days and just today there is again a bunch of bots with 15, 20, 40 attempted logins.

Does this software work or not? Is there other ways to try to access the login page that I need to know about? Are you running a racket where you allow bots in anyway so that you can get us to buy your software and use your cloud?

I believe in paying people for their work, so I’m happy to pay for your software but I don’t want to if it doesn’t work or I’m being tricked into doing so.