Get a List of Brute Force Blocked Users
Sep 10, 2025
Overview
This article provides a few methods for retrieving all users currently blocked by Brute Force Attack Protection.
Applies To
- Brute Force Attack Protection
- Blocked Users
- Lists and Reports
Solution
At the moment, there is no endpoint for getting a list of users blocked by the brute force feature. However, there are a couple of other methods for retrieving this information.
- To see users who are blocked via Brute Force Protection, search the tenant logs for type:limit_wc to filter for Brute Force blocks. See Log Event Type Codes for more details.
- NOTE: This approach will be limited to the log retention time period for the tenant.
- Perform a Bulk User Export and check the blocked status with the Get blocks by identifier endpoint.
