Please go visit Webmin >>> Usermin Configuration >>> Authentication.
There is a checkbox without any text explanation. I guess this should be similarly to Webmin Authentication: "Also lock users with failed logins"
Please see the attachment for understanding the issue.
When you fix this please let me know to update my files. Thank you!