Suspicious IP Throttling - When does it reset?

Problem Statement

What happens after a user gets blocked from a non-allow Listed IP address? Does it reset at some point?

Solution

After an IP hits the thresholds and is blocked,

  • It takes ~15 minutes for the IP to become unblocked, and there will be 1 available attempt at that time. After ~30 mins there will be 2 attempts, etc.
  • It takes 24h to replenish all 100 attempts (because we replenish at a rate of 100 attempts per day).

Please be noted that if there are new failed login attempts during that time, they will be subtracted from the available attempts. For example, after 12 hours, you’d be at 50 attempts available, but one failed login attempt will put you back at 49 attempts available.