Hi designweb,
Not affiliated with WP Cerber, but you can see that the plugin seems to work as intended: After the second request, you can see “IP address is locked out”, meaning the actual request is automatically denied.
Of course you cannot stop the attacker from further trying to access the URLs and sending further requests, but the logs clearly show that the requests were denied.
Regards,
barghest