} else {
                    // Block expired, reset
                    ip.reset();
                }
            }

            // Check IP rate limit
            if (ip.getRecentAttempts() >= maxAttemptsPerIp) {
                ip.block(lockoutDuration);
                totalAttemptsBlocked.incrementAndGet();
                totalIpsBlocked.incrementAndGet();