Block user enumeration.
Default setting: disabled
New in version 2.1.0.
Changed in version 4.0.0: Now also blocks enumeration via the REST API.
/** * Block user enumeration. */ define('WP_FAIL2BAN_BLOCK_USER_ENUMERATION', true);
You should define this in
wp-config.php even if you are using the Premium version of WPf2b.
If your theme has Author profile pages (e.g. TwentyTwenty) you will need to block username logins instead.
Based on a suggestion from @geeklol and a plugin by @ROIBOT.