few siomple things.. make sure your cpanel or server side is an insanely large password thats all gibberish. There are items for cpanel to blacklist / whitelist all access to this as well.
Second, if your using wordpress or any other “standard” system know there are thousands of people that know what is in your folders, admicp folder should be LOCKED at the server level, IE you should need to enter a username and password setup in yout .htaccess before you cna log into the admincp, and you should really not use the directory admicp at all, rename it to something like skoobydooadmin/ and still lock it down.