WordPress Multisite Login Access
If you want to provide restricted access, you should add an additional string with the /wp-login.php URL. For example: http://example.com/wp-login.php?restricted_site_access=key_string If the URL does not have such a string parameter, then you can redirect them to a 404 page; you don’t need to rewrite the .htaccess file for it.