IP Block from viewing website doesn't work on HTTP

I want to block a few ip addresses from viewing my Magento shop.


In .htaccess I added the deny from and this works fine if I try to access the shop via HTTPS! Than I get blocked!


But if I try to access the shop via HTTP the IP block doesn’t work ! I can still access the shop.



Anyone any idea why the IP block doesn’t work for HTTP?

 

Can you please tell was the Block defined on which Directive

Thanks
Philix