Suspicious IP Throttling - Maximum attempts and throttling rate

[lihua.zhang]

Hi @LexDiamonds1 ,

The Maximum Attempts is the number of failed login attempts a single IP address can make in one day before Auth0 blocks the next attempt. Setting it to 100 means a Single IP can make up to 100 failed attempts before being blocked.

The login throttling rate determines how many login attempts Auth0 grants to an IP address evenly over 24 hours. For example, a throttling rate of 100 means that Auth0 grants a new attempt approximately every 15 minutes.

Ref:

Suspicious IP Throttling

Hope the above details are helpful! Please let me know if any further queries.

Thanks!