1. You would first setup wp-admin directory password protection in your InMotion Host control panel (or resave your settings). When you do that htaccess code will be written to the top of your wp-admin htaccess file.
2. Copy and paste that wp-admin directory password protection htaccess code that is written to the top of your wp-admin htaccess file into this BPS wp-admin Custom Code text box: CUSTOM CODE WPADMIN TOP: Add wp-admin password protection, IP whitelist allow access & miscellaneous custom code here
3. Click the Save wp-admin Custom Code button.
4. Go to the BPS Security Modes page and activate wp-admin BulletProof Mode.
I believe once you add wp-admin folder directory password protection it will also take care of the failed logins/lockouts since the hacker/spammer bots will be stopped by the additional wp-admin login.