Greetings. I have utilized the Hide Login Area feature for quite a long time with absolutely no one discovering the proper URL. This past week, however, someone discovered the URL and attempted brute force and admin account login attempts (both thwarted by iThemes Security).
I am a single administrator – meaning that no one else knows the admin login URL. In addition, I used a pretty random login location (along the lines of http://www.mysite.com/mjp-blob which has absolutely no meaning or connection to my website).
Has anyone heard of this occurring previously? It just seems so unlikely that someone figured out where my login screen resided that I wanted to get some feedback.
(I have since changed the location of my login screen)
https://wordpress.org/plugins/better-wp-security/
