Reply To: Protect Login Page from Brute Force Login Attacks

In most cases you only need to add your public IP address and not your website/server IP address, BUT your public IP address will be dynamically changed frequently by your ISP.  So what you need to figure out is how many octets of your IP addresss remain the same/consistent. So in the example below all IP addresses starting with 65. will be allowed to view and login to your site.

Regarding the rest of your question:  Did you add the custom code in the correct Custom Code text box?  The only logical reason for why you would be seeing a wp-admin htaccess file error message would be that you entered your custom code in the wrong text box.

# Protect wp-login.php from Brute Force Login Attacks based on IP Address
<FilesMatch "^(wp-login\.php)">
Order Allow,Deny
# Add your Public IP Address using 2 or 3 octets so that if/when
# your IP address changes it will still be in your subnet range. If you
# have a static IP address then use all 4 octets.
# Examples: 2 octets: 65.100. 3 octets: 65.100.50. 4 octets: 65.100.50.1
Allow from 65.
</FilesMatch>

• This reply was modified 21 hours, 38 minutes ago by  AITpro Admin.