I am running a wordpress website, with AIO WP Security & Firewall plugin which inform me if there is a wrong login attempts.
/wp-admin contain a .htaccess where I set:
order deny,allow deny from all allow from 18.104.22.168 // my IP
I still get emails from AIO Plugin that someone tried login with a strange Username from a different IP.
Is there another way how to get the login page an try to authenticate other than /wp-admin ??