Hi @vincent5
Welcome to the Auth0 Community!
Thank you for posting your question. The behaviour is observed that you don’t see users who were blocked by the Brute Force Protection is expected behaviour. You can read more about that here → Query Users Blocked by Brute Force Protection Using the Management API
Thanks!
Dawid