Static IP Address Code Not Blocking Log-in Attempts

Hi,

We’ve just had our Static IP Address installed and have added the following code to the “CUSTOM CODE BRUTE FORCE LOGIN PAGE PROTECTION:” section.

# Protect wp-login.php from Brute Force Login Attacks based on IP Address
<FilesMatch "^(wp-login\.php)">
Order Allow,Deny

# Add your website domain name
Allow from www.appareltruth.org

# Add your website/Server IP Address
Allow from [OUR SERVER IP ADDRESS]

# Add your Public IP Address using 2 or 3 octets so that if/when
# your IP address changes it will still be in your subnet range. If you
# have a static IP address then use all 4 octets.
# Examples: 2 octets: 65.100. 3 octets: 65.100.50. 4 octets: 65.100.50.1
Allow from [OUR OFFICE IP ADDRESS]

</FilesMatch>

We then click “Create secure.htaccess File” and then “Activate Root Folder BulletProof Mode” and “Activate wp-admin Folder BulletProof Mode”

We have Wordfence installed, which keeps notifying us stating that people are being blocked by the attempt to log-in.

We’re unsure to why we are getting this error, as we thought that it was impossible for people to access the log-in page now due to our Static IP Address.

Would you be able to confirm that our log-in page is in fact secure, or whether we need to do anything to harden the installation.

Thanks,
Jamie

https://ww.wp.xz.cn/plugins/bulletproof-security/