Block Login Form

I'm trying to block the user login, adding the id "user-login" or "user_login" to the Forms to Impose Flood Control on, but I can still access from all IPs.