The last few days there is an on-going and highly-distributed, global attack on WordPress installations across virtually every web host in existence. This attack is well organized and distributed.
To protect your blog,
- remove default admin account and create a new one with a different username
- change your administrator password
- install a captcha plugin