Your "Deny from all" is doing nothing: LiteSpeed, AIOWPS and the 5G blacklist
A WordPress site kept serving requests despite a Deny from all rule. Tracing LiteSpeed's handling of AIOWPS's legacy blacklist revealed the conflict and a rewrite rule restored the intended restriction.