Querying Wordfence’s login log

To find out the reason for a user blocked by Wordfence:

SELECT FROM_UNIXTIME(ctime) t, action, username, fail, INET6_NTOA(IP) ip
FROM wp_wflogins ORDER BY ctime DESC LIMIT 15;