Hi @groggy72, thanks for getting in touch.
This could be an issue with IP detection on your site or mistyped usernames.
Are you able to find out why they are getting blocked by looking at Wordfence > Tools > Live Traffic, then filtering by “Blocked” or “Blocked by Firewall” and tell me what you see. If there’s nothing there, it may require the Traffic Logging Mode to be changed temporarily to ALL TRAFFIC, and getting them to re-visit the site. I should be able to identify which setting is catching these users from the information there.
Do you have any Custom Pattern or IP blocks that might be catching them set in Wordfence > Firewall > Blocking? It’s also possible that “Immediately lock out invalid usernames” in Wordfence > All Options > Brute Force Protection is catching this user out if they’re using, to cite a common example, their email when it doesn’t match their WordPress username.
Could you please confirm whether your IP shown in Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs currently matches your public IP as shown on https://www.whatsmyip.com
Thanks,
Peter.