Hi, do you want to block direct access to /wp-login.php and /wp-admin? Or your requirement is something else?

In General settings tab, there are 2 options – https://www.screencast.com/t/5Ur2JmAHYwcP
1) Hide Login Page
2) Hide Admin

“Hide Login Page” is for blocking direct access to http://www.url.com/wp-login.php
With this option enabled, you will be able to access login page only using secret key, e.g. http://www.url.com/wp-login.php?hide_my_wp=1234
(you can define your own secret key)
And if you do not want to use secret key then you can define your login path in “Change Login URL” option in Permalinks & URLs tab. Using this option you can access the login page like http://www.url.com/mylogin

“Hide Admin” is for blocking direct access to http://www.url.com/wp-admin

To block direct access to /wp-admin you will need to enable/check “Hide Admin” option in General Settings tab.
If it’s still the issue then please let us know your site’s wp-admin login details (as private reply) so that we can look into it. Thanks!

/wp-admin and /wp-login.php are inter-related, and wordpress redirects wp-admin to wp-login.php. I didn’t get, what’s the point of hiding only wp-login.php and not wp-admin. The users and bots will know that it’s WP login page if either /wp-login.php or /wp-admin is accessible. So, either hide both or none.