If you asked me from September 2012 forward, the answer would change dramatically with WordPress Brute Force Attacks now exceeding 50% of all attacks being reported. Peter Abraham, dynamicnet.net Viewing my stats recently on one of my websites, I noticed several persistent attempts from one IP address to log into my site with the username ‘admin’. I don’t have a user named ‘admin’ so it caught my eye. It’s recognized best practice on WordPress sites to delete and replace this default user with another administrative username for your site – and here’s why. As I looked deeper into this login attempt I noticed…
