Generally speaking, firewalls do not block failed login attempts. Keep in mind that a legitimate user can very easily forget their password. As such, blocking them at the firewall level might not be ideal. This is why Melapress Login Security is such an invaluable WordPress security tool, as it allows you to set rules and effectively manage failed logins.