Default Values for Auth0 Suspicious IP Throttling
Mar 10, 2026
Overview
Auth0's Suspicious IP Throttling feature protects against high-volume attacks by blocking traffic from flagged IP addresses. The default request limits are 50 Signup attempts per day per IP address and 100 Login attempts per day per IP address.
Applies To
- Suspicious IP Throttling
Solution
What are the default limits for Suspicious IP Throttling?
Suspicious IP Throttling restricts the number of attempts a single IP address can make in a 24-hour period before Auth0 suspends further requests.
-
Signup: 50 attempts per day, per IP address. (Auth0 suspends further attempts once reached).
-
Login: 100 attempts per day, per IP address. (Auth0 suspends further attempts once reached).
