Thank you mbrsolution
The site was hacked a few month ago so I panic at every little thing, although that same day I received a lock down email stating an ip address in Romania tried to gain access. The hacker even knew my secret login page name and unique username ???
So I was able to block him and change the login page name again
But thanks again
Darren