wp-login.php is still showing

Solution (based on Lockdown WP Admin Version 2.2):

go to plugins/lockdown-wp-admin/src/Lockdown

Edit Application.php

about line 149 or AFTER

$blog_url = trailingslashit( get_bloginfo('url') );

ADD

$blog_urlHost = parse_url($blog_url);

if( $blog_urlHost['host'] != $_SERVER['HTTP_HOST'] )
	$this->throw404();

IF you WANT to hide wp-signup.php and wp-register.php

about line 166 Replace

// Are they visiting wp-login.php?
if ( $super_base == 'wp-login.php')
	$this->throw404();

With

// Are they visiting wp-login.php?
$visiting = array('wp-login.php', 'wp-signup.php', 'wp-register.php');
if ( in_array($super_base, $visiting))
	$this->throw404();

After reading https://www.ads-software.com/support/topic/login-61?replies=31

New update below:

// Are they visiting wp-login.php?
$visiting = array('wp-login.php', 'wp-signup.php', 'wp-register.php', 'login');
if ( in_array($super_base, $visiting))
	$this->throw404();

//We don't break the media uploader while the user is logged in
if ( is_user_logged_in() == false ) {

$user_visiting_loggedin = array('async-upload.php', '/async-upload.php', 'wp-admin/async-upload.php');

if ( in_array($super_base, $user_visiting_loggedin))
	$this->throw404(); 

                 }