Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Luxembourg, Luxembourg, LU. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Luxembourg, Luxembourg, LU. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Luxembourg, Luxembourg, LU. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Luxembourg, Luxembourg, LU. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Cheyenne, Wyoming, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Cheyenne, Wyoming, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Azure Active Directory PowerShell. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS206092 (IPXO (formerly Heficed) / Hytron). Reported origin: Frankfurt Am Main, Hessen, DE. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Azure Active Directory PowerShell. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS62240 (Clouvider Limited). Reported origin: Los Angeles, California, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Azure Active Directory PowerShell. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS206092 (IPXO (formerly Heficed) / Hytron). Reported origin: Ashburn, Virginia, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Azure Active Directory PowerShell. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS14061 (DigitalOcean). Reported origin: Newark, New Jersey, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Azure Active Directory PowerShell. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS62240 (Clouvider Limited). Reported origin: Los Angeles, California, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 2 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Azure Active Directory PowerShell. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS62240 (Clouvider Limited). Reported origin: Los Angeles, California, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Cheyenne, Wyoming, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Cheyenne, Wyoming, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Microsoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authenticat ...
show moreMicrosoft 365 / Entra ID password spray attack against corporate user accounts. 1 failed authentication attempt(s) within observation window 2026-05-07 to 2026-05-14 UTC. Target application: Microsoft Azure CLI. Failure codes: 50053 (Smart Lockout) and 50126 (Invalid Credential). Source: AS53667 (FranTech Solutions / BuyVM). Reported origin: Cheyenne, Wyoming, US. Multiple corporate user accounts targeted across coordinated campaign from this provider's IP space. No legitimate business relationship with source. Pattern consistent with credential spray attack.
show less
Brute-ForceWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.