Invalid Authentication attempts coming from unauthorised IPs

Help
1

Our application is authenticating users using an email passwordless connection.
We have found in the Auth0 Logs that every single successful authentication attempt is mirrored by a number of failed authentication requests coming from IP addresses in unknown locations.

Is this something that may be cause by a configuration error or could this be caused by someone actively trying to get access to our application?

The attachment contains an example of a failed request. The user_agent is always “Chrome 70.0.3538 / Windows 10.0.0” on these invalid requests.

auth0-logs
auth0-logs1301×351 34.1 KB

2

Hi @george.stoica ,

Welcome to Auth0 Community!

I don’t think this is caused by some configuration issue in your Auth0 tenant. This looks like someone actively trying to login to your application.

Do you have any application access logs that aligns with the timeline of these requests?

3

Hi @supun ,

Went through the application logs but could not find anything helpful.

This is what i got from the Auth0 Logs

image
image1328×442 31.9 KB

We found that these errors do not happen when logging in using a username/Password login.

Also the errors started happening without us making any configuration changes on our web app or on Auth0.

We found similar issues previously reported that look similar. Could these be related?