So this is what I placed in the Custom Code Brute Force Login….
# Protect wp-login.php from Brute Force Login Attacks based on IP Address <FilesMatch "^(wp-login\.php)"> Order Allow,Deny # Add your website/Server IP Address Allow from xxx.xxx Allow from xxx.xxx Allow from xxx </FilesMatch>
Do I need Deny from all at the end and do I need periods after the IPs?