I suggest you make sure you password is not a dictionary word or something a bit more complicated than say "password1".
To enable the IP protection you need to make sure you have a static IP first of all, or know all the common IPs you are assigned. Go to your Profile > Account Related Settings > IP Address Account Protection, then enter one or more IPs to block the bots.
Any questions, feel free to ask
