Does the brute force across your cluster protection also include IPv6? I don't think it does.. also we are unable to whitelist/blacklist IPv6 addresses in the brute force protection section of control panel settings.
