Hi @sorenf, thanks for getting in touch.
If Wordfence > All Options > Brute Force > Amount of time a user is locked out and Wordfence > All Options > Rate Limiting > How long is an IP address blocked when it breaks a rule? are set to low timescales such as minutes or hours, you may never see them on any blocked list as they’ve already been removed when you check. You can try increasing these to days or months if you prefer. Naturally, make sure both Brute Force and Rate Limiting toggles are set to ON for these rules to work. There’s also some good information on recommended settings and what everything does if you follow the links I’ve provided.
You can check to see whether (and why) this user was blocked by looking at Wordfence > Tools > Live Traffic, then filtering “Blocked”/”Locked Out”/”Logins and Logouts”. You should be able to see times, location/IP and the reason. This can be tested yourself, for example on a mobile device not connected to your wifi so that your main device still has access to view the site’s administrative area.
Thanks,
Peter.
