Ok I found out why the Brute Force Login protection .htaccess code is not working on your particular server/website. Your server is a Windows IIS 8.0 server, which uses a Rewrite Module that translates Apache Linux htaccess code into rules that a Windows IIS server can interpret/apply/use. So your particular server is ignoring the Brute Force Login protection .htaccess code instead of translating it into usable rules for/on your particular server. So unfortunately, you cannot use the Brute Force Login protection .htaccess code on your particular server.
Server Type: Microsoft-IIS/8.0
Operating System: WINNT