The function check_is_login_page() uses headers for the IP check, which can be easily spoofed.
Published November 21, 2022.
Gunkastudios Login Block Ips