doesnt automatically lock out users using specific mentioned usernames

Hi @extremist87, thanks for reaching out.

I have admin set and was just successfully blocked when trying to use it. Live Traffic gives Blocked by login security setting as the reason as expected when the Immediately block the IP of users who try to sign in as these usernames setting is the deciding factor.

The only occasion this setting might be ignored is when the username matches a real username on your site, the SAVE CHANGES button hasn’t been used on the All Options page, or caches in place on your site/server/database are still loading the pre-change settings. In the latter case, the caches may need clearing.

Failing that, if you don’t have a large number of users, Immediately lock out invalid usernames could be checked in an attempt to deal with the randomly picked usernames. However, this is generally against our recommendations for online stores, forums, etc. where common mistakes like mistyping a username will result in a higher quantity of blocks for real users.

Let us know if you observe anything else or nothing seems to change when trying the above,
Peter.