Drupal 7 prevents brute force attacks on accounts. It does so by refusing login attempts when more than 5 attempts failed. The amount of failed logins is recorded in the table ‘flood’.
To unblock these users, do:
DELETE FROM `flood`;
Blocked users will be able to login back again.
