This interface lets you limit who can login to your site. It will NOT block traffic from these IP's altogether and is not a replacement for a firewall.
Smart IP Banning
Tick the box Lock IP after failed login attempts in seconds. Enter the amount of failed attempts you would like to allow and the amount of seconds in which the login attempts are made.
By default all smart bans are permanent this can be changed by amending the radio box below
Banned IP addresses will automatically populate the box from there you can either make the ban permanent or remove the ban.
(If the ban is set to be for a pre-defined amount of minutes then it will automatically be removed after that time has passed)
To permanently ban an IP address enter the IP address in the box on the right hand side.
Allow list
In V8, you can allow list IP address ranges.
Dashboard > System & Settings > Permissions & Access > IP Blacklist > View button > Whitelisted IP Addresses
" Allow list only selected IP addresses: that way, the login is only allowed from those selected addresses." https://github.com/concretecms/concretecms/pull/5331...