To secure your admin area from hackers, you should only allow access to your admin directory from selected IP addresses. You can create a dot htaccess file in the directory where you want to restrict access to specific IP addresses.… …How to Restrict Access to Directories by IP Address – SiteWorx
You can prevent unauthorized access to your htaccess file by adding this rule to the file: # .htaccess protection order allow, deny deny from all satisfy all
For security purposes, you should disable directory browsing on your website so no one can see the files/directories of your website. You can disable Directory Browsing by adding the below line to your dot htaccess file. Options -Indexes
If you want to block an IP Address, you can add the below lines to your htaccess file. order allow, deny deny from IP-ADDRESS allow from all Replace IP-ADDRESS with the IP you want to block.