Login Lockout blocks the CDN IP address instead of the user IP address

I use this plugin on a number of client websites – most of which don;t need the paid version usually.

I have noticed on one site that is on AWS , and served via a lightsail CDN , that the login lockout feature seems to be blocking the IP of the CDN endpoint instead of the IP of the user.

The site URL is https://getaboutable.com – it is a directory site with open registration, so we do manage a fair amount of spam and fake registrations and every so often a brute force attack happens.

Any insights you could have as to settings or changes we can make to block the actual user IP for the failed logins would be great

thanks !