Hi,
Welcome to Kong Nation.
There are different things to consider to figure out what could be wrong in your configuration. (among them load balancer ? docker etc…)
Looking at your test, it seems that kong does not recognise the call as issued from 10.10.10.10
The IP restriction plugin is using ngx.var.binary_remote_addr and compares it with its configuration.
There are lot of information in this post : https://discuss.konghq.com/t/how-to-forward-clients-request-ip/384