Your problem is bots / brute force attack hitting your wp-admin or wp-login.php
hc-custom-wp-admin-url add that plugin and change your admin to site.com/whatever
Then go in and go through your logs and block every Chinese/Russian/Eastern European ip that you see hittin wp-admin / wp-login.php
|