The system is designed to block a user temporarily if the user makes 5 attempts in one hour to log in with an incorrect password or username.
The block expires after 15 minutes.
To customize these settings (not recommended) or clear the blocks in less than 15 minutes, see:
https://summersailstice.com/admin/config/people/flood-control