Hi @grahappa , thanks for reaching out.
This is currently not a feature available in Wordfence. We currently have options to allowlist IP addresses so they can bypass Wordfence Rules and 2FA or reCAPTCHA.
The closest feature to what you want is on the Wordfence > Firewall > All Firewall Options page in the Brute Force Protection section. You can input specific usernames/emails for which you see login attempts in the textbox next to “Immediately block the IP of users who try to sign in as these usernames.” Don’t forget to save the changes before leaving the page.
You can read more about this feature here – https://www.wordfence.com/help/firewall/brute-force/#lockout-usernames
Please note that this option will not prevent users or bots from registering using the same username or email. If you’re seeing any spam registrations on the site, you will need to enable reCAPTCHA in Wordfence > Login Security > Settings so that the default WordPress registration page can only be used by humans.
General treatment of bots can also be set in the Rate Limiting section of Wordfence > All Options to limit how many pages visitors and automated crawlers can access your website per minute as described in this article https://www.wordfence.com/help/firewall/rate-limiting/
Let me know in case you need any further assistance.
Thanks,
Mark.