BizSugar.com › Resources › 10 Step Guide to Better Protect WordPress

My post was original published on the now defunct Melbourne IT Blog that was taken down after it was hacked and defaced twice by The Syrian Electronic Army and hasn’t come back….
On the 11th of April 2013 a large scale brute force attack was staged focused on vulnerable WordPress blogs using 90,000 strong botnet. The attack was focused on hacking WordPress websites that have not changed “Admin” as their username, the problem is that “Admin” is the default username across a large number of the 64 million WordPress sites globally.
The attack was concerning due to the botnet’s processing power to test around 2,000,000,000 passwords per hour, typical security precautions for blocking the IP was not successful as the hackers were using 90,000 IP addresses but there were a number of steps you can take now to prevent it happening in the future.