What the benefit of "Bruteforce" blocked, if user is still active?

I try to understand why some of our users got BLOCKED (BRUTEFORCE) email, but continue to use the system (and success login) with Auth0 log Successful Refresh Token exchange?

Hey there!

Are you able to provide us with any added context on that?

Thanks @konrad.sopala for the reply.

I found the reason.
It happened because the users login with refresh token but our scenario sometimes send wrong params that block one connection of the user but not really block the user.

Ohh got it! Thanks for sharing it with the rest of community!