147.90.219.10

Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 147.90.219.10 Application: Azure Active Directory PowerShell Event time (UTC): 11/2/2026 15:11 Error code: 50053 Result: Sign-in was blocked because it came ... show more Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 147.90.219.10 Application: Azure Active Directory PowerShell Event time (UTC): 11/2/2026 15:11 Error code: 50053 Result: Sign-in was blocked because it came from an IP address with malicious activity Destination service: login.microsoftonline.com Destination port: TCP 443 Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts. show less

Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 147.90.219.10 Application: Azure Active Directory PowerShell Event time (UTC): 11/1/2026 17:41 Error code: 50053 Result: Sign-in was blocked because it came ... show more Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 147.90.219.10 Application: Azure Active Directory PowerShell Event time (UTC): 11/1/2026 17:41 Error code: 50053 Result: Sign-in was blocked because it came from an IP address with malicious activity Destination service: login.microsoftonline.com Destination port: TCP 443 Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts. show less

Credential stuffing - exchange accounts

Brute-force / credential-stuffing login attempts against a monitored business sign-in service; every attempt blocked. Event time (UTC): 2026-11-01T22:43:44Z. Network: 1337 Services GmbH (hosting).

Failed Microsoft 365 sign-in attempts. password guessing through the Azure AD PowerShell client (resource-owner password flow); none of this organization's successful sign-ins in the past 24 hours used this client

Credential stuffing - exchange accounts

Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 147.90.219.10 Application: Azure Active Directory PowerShell Event time (UTC): 10/29/2026 2:49 Error code: 50053 Result: Sign-in was blocked because it came ... show more Unauthorized authentication attempt against our Microsoft Entra ID tenant. Source IP: 147.90.219.10 Application: Azure Active Directory PowerShell Event time (UTC): 10/29/2026 2:49 Error code: 50053 Result: Sign-in was blocked because it came from an IP address with malicious activity Destination service: login.microsoftonline.com Destination port: TCP 443 Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts. show less

Credential stuffing - exchange accounts