# wp-login.php being brute-forced. Only allow
# specific IPs

<FilesMatch "^wp-login.php$">
Order deny,allow
allow from xxx.xx.xx.xx
allow from xxx.xx.xx.xx
Deny from all
</FilesMatch>

ErrorDocument 403 "Access Denied"