Hello, I’m trying to create a site lockdown for wp-admin and even though I specify the allowed IP address it still lets any IP hit that address.
You probably don’t want to block wp-admin because admin-ajax needs to be accessible.
What is it you’re trying to prevent? wp-admin is pretty useless for anybody not logged in.
Also…what exactly did you do to try to block access?