I see entries in the security log that do not cause me concern, but this one does – REQUEST_URI: /wp-login.php. It seems someones are either attempting to log in or somehow attempting to access the login.php.
The ip addresses are no one I am aware has anything to do with my sites.
Is this security log entry a cause for concern? If so, I imagine the best thing to do would be to block these ips from logging in?
Nope, no need for concern. I see these all day long every day. These are automated bot probes/recons looking for things. If it is being blocked then there is nothing to be concerned about.