@mbrsolution
yep , i’ve tried Cookie Based Brute Force Login Prevention, that’s great feature. But that not what i want :D. so just simply , if i enable Rename Login Page, set 404 for wp-admin if not login. this make more invisible if we use wordpress for visitor ??
Cheers