account.reset();
                }
            }
        }

        // Check per-IP limit
        if (sourceIp != null) {
            IpAttempts ip = ipAttempts.computeIfAbsent(sourceIp, k -> new IpAttempts());
            if (ip.isBlocked()) {
                if (ip.getBlockExpiry().isAfter(Instant.now())) {
                    totalAttemptsBlocked.incrementAndGet();