30/12/2013 - Other URLs in /wp-admin were still accessible, we were just being blocked from accessing wp-login.php. We contacted the site's host, 1&1, on .