Hi @gitscr,
Welcome to the Auth0 Community! 
There is no quota for failed auth transactions. Quotas are based on active users and M2M tokens, which only occur when an auth transaction is successful.
We also offer a suite of attack protection features, some are enabled by default.