Hi,
I actually got such thing happened to me a few times. The log shows this,
Event: login failure
Message: Attempted user login by “admin” failed.
Username: unknown
Category: 2
IP Address: 88.99.41.84
I personally don’t think that they have found the renamed login. I’m thinking if they managed to somehow to login thru wp-login.php.
Right now with the new LAP, I think security should be more tight and better.
Paul, if you managed to find anything, do let us know.
Thanks for great plugin.