Unauthorized authentication attempt against our Microsoft Entra ID tenant.
Source IP: 45.158.104. ...
show moreUnauthorized authentication attempt against our Microsoft Entra ID tenant.
Source IP: 45.158.104.249
Application: Azure Active Directory PowerShell
Event time (UTC): 8/3/2026 7:02
Error code: 50057
Result: The user account is disabled.
Destination service: login.microsoftonline.com
Destination port: TCP 443
Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts.
show less
Unauthorized authentication attempt against our Microsoft Entra ID tenant.
Source IP: 45.158.104. ...
show moreUnauthorized authentication attempt against our Microsoft Entra ID tenant.
Source IP: 45.158.104.249
Application: Azure Active Directory PowerShell
Event time (UTC): 8/3/2026 7:02
Error code: 50057
Result: The user account is disabled.
Destination service: login.microsoftonline.com
Destination port: TCP 443
Activity is consistent with automated password spraying, credential stuffing, or brute-force authentication attempts.
show less
Attempted brute force login to web vpn 1 time(s); last attempt for 2025.11.21 is noted in report tim ...
show moreAttempted brute force login to web vpn 1 time(s); last attempt for 2025.11.21 is noted in report timestamp
show less
Hacking
Brute-Force
Anonymous
scanning http requests from known botnet
Web App Attack
Anonymous
scanning http requests from known botnet
Web App Attack
Anonymous
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to ...
show moreDistributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in thread-skip.asp
show less