The administration panel of your website should be hidden and not easily accessible to normal Internet users. Areas such as: /wp-admin if you use Wordpress or cpanel.examplewebsite.com, etc. are highly sensitive and could be subject to brute-force attacks on credentials, so it is a good idea not to have them accessible from outside your company.
In fact, a cybercriminal knows that these resources are often easy to access and one of the first identification actions they perform is to seek access to administrative panels. Access by unauthorised persons to such portals involves a critical compromise of your business as it implies total control over your assets such as your website and servers. A good way to protect yourself from this risk is to create and enforce a list of devices and IP addresses authorised to access.