Sometimes we have a problem with blocking users. Do you remember on pam_tally2? Let's try command faillock