Hey @chekki,
I’ve spoken with the team about this.
This is indeed likely a brute force attack. The reason you’re not seeing the block is that the bot that’s attempting the attack isn’t entering a password. If they don’t attempt with some type of password the Blocking of specified usernames isn’t enforced. We’ve seen this a few times before, and it seems it’s really just a badly (thankfully) bot script. But rest assured, Wordfence will block attacks that do attempt with a password.
Please let me know if you have any other questions.
Thanks,
Gerroald
Thread Starter
Chekki
(@chekki)
Thanks for the information Gerroald!