Hi @etjoom
The entries in the logfile just means that someone tried to login with wrong credentials. This may happen if someone is trying to hack you. It doesn't say if he was successful or not, just that someone tried.

If your site is indeed hacked I suggest that you follow the doc page about just that: http://docs.joomla.org/Security_Checklist/You_have_been_hacked_or_defaced

If you have found and verified a security issue, you can use http://developer.joomla.org/contact-security-team.html to report the issue.

Closing this issue since it's the wrong way to deal with security issues and there is no information about an actual issue related to the CMS,

@ghost
FYI, addy+figure is not usually a defacing code but simply produced by the mailcloak plugin.