How to deal with login attempts coming from 1-127.0.01 and what does it means?
After attempt five login drupal block account automatically 


Install the Flood module flood_control
Enable the Flood module
Go to admin/settings/system/Flood control
Change the "Failed login (username) window" from 6 hours to None
Save


Flood Control


  This project is intended to add an administration interface for hidden
  flood control variables in Drupal 7, like the login attempt limiters
  and any future hidden variables.


Flood Unblock


  This module makes it possible for site administrators to remove
  ip-adresses from the flood table, or to remove all ip-adresses from
  the table depending on the event type.


Different ways to reset Drupal admin password

Protect site from flooding when user login is attacked...