not2easy - 2:16 am on Jan 24, 2013 (gmt 0)

For access logs on Wordpress I pull out all lines with
"POST /wp-login.php and for sites without any access controls there can be hundreds of lines in a month's time, from dozens of IPs, most of them at regular intervals, automated. Easy to see how a poorly chosen password gives them entry - or there wouldn't be so many trying.