Get a List of Brute Force Blocked Users

Problem statement

Is there an endpoint that can retrieve all users blocked by Brute Force Attack Protection?

Solution

Currently, there is no endpoint to get a list of users blocked by the brute force protection feature. There are a couple of other methods to retrieve this information though.

One way to see blocked users from Brute Force Protection is to search the tenant logs for type:limit_wc to filter for Brute Force blocks (Log Event Type Codes ). Note that this approach will be limited to your tenant’s log retention time period.

The other method would be to do a Bulk User Export and check the blocked status with the Endpoints available here (Auth0 Management API v2)