# Day 14: Attack Protection Instinct

**URL:** <https://community.auth0.com/t/day-14-attack-protection-instinct/194681>\
**Category:** The 25 Days of Auth0 Community Daily Challenge\
**Created:** [December 14, 2025, 1:00pm UTC](https://community.auth0.com/t/day-14-attack-protection-instinct/194681 "2025-12-14T13:00:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dawid.matuszczyk](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dawid.matuszczyk/32/74550_2.png) [@dawid.matuszczyk](https://community.auth0.com/u/dawid.matuszczyk)\
**Post date:** [December 14, 2025, 1:00pm UTC](https://community.auth0.com/t/day-14-attack-protection-instinct/194681/1 "2025-12-14T13:00:58Z")

</div>

[Challenge Task:](https://community.auth0.com/t/get-ready-to-learn-and-win-announcing-the-25-days-of-auth0-community-daily-challenge/194507) Imagine a bot tries to guess a user’s password 500 times in one minute. Which specific Auth0 security feature kicks in to block that IP address?

Submission Requirement: The name of the feature + does it block the user or the traffic?

---

<div class="post-metadata">

**Author:** ![joseauth0](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@joseauth0](https://community.auth0.com/u/joseauth0)\
**Post date:** [December 14, 2025, 1:42pm UTC](https://community.auth0.com/t/day-14-attack-protection-instinct/194681/2 "2025-12-14T13:42:46Z")

</div>

feature 1: Brute-force protection safeguards your tenant against attackers who use a single IP address to target a single user account.

feature 2: Suspicious IP Throttling blocks traffic from any IP address that rapidly attempts too many logins or signups. This helps protect your applications from high-velocity attacks that target multiple accounts.

- Blocks the suspicious IP address from logging in as that user. and sends a **notification** to the affected user.

footnotes:

[https://auth0.com/docs/secure/attack-protection/brute-force-protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection)

[https://auth0.com/docs/secure/attack-protection/suspicious-ip-throttling](https://auth0.com/docs/secure/attack-protection/suspicious-ip-throttling)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [December 15, 2025, 1:01pm UTC](https://community.auth0.com/t/day-14-attack-protection-instinct/194681/3 "2025-12-15T13:01:14Z")

</div>

This topic was automatically closed after 24 hours. New replies are no longer allowed.