Welcome back to the Auth0 Community!
Thank you for posting your question. To automatically block a user after detecting a brute-force attack, you can use a Brute-Force Protection, but it doesn’t offer an option to unblock the user after a certain amount of time. And the user is notified about an unsuccessful attempt and can unblock themself. As for now, we don’t have a plug-and-play option to block users for a specific time.
I hope it will help you.
Thanks
Dawid