IP block by ISP on “/wp-admin/” results in 403 error on “wp-login.php” page

If IP block is enabled by ISP on “/wp-admin/” folder, then “wp-login.php” page results in 403 error unless you access it from an allowed IP.

Does the “wp-login.php” page access / use something in the “/wp-admin/” folder.

My users are all “subscribers” and do not submit new posts, only read posts and comment on posts – all without going to “wp-admin”, so from a functionality point of view I should be able to lock down access to the “/wp-admin/” folder.

As I do not know the IP of all my users, this currently prevents me from IP blocking “/wp-admin/” folder.

Why block “/wp-admin/” folder by IP? For security reasons to prevent others from accessing wp-admin.

The page I need help with: [log in to see the link]