I am managing a WordPress website.
I have installed the plugin "Limit Login Attempts Reloaded".
This plugin sent me an email saying that A.B.C.D has tried to login with the non-existent username "admin" 9 times and has been blocked.
Googling the IP address, it has been reported as being abusive (it tried to login to other WP websites before).
But I went to https://www.ipqualityscore.com/ and this website doesn't report the IP as a VPN exit node nor a Tor exit node (although classifying it as abusive with 89% probability).
How is it possible?
Is that the real IP address of the person that tried to login?