Microsoft
Microsoftmrman5917 - Apologies, that was a typo in this section and the evaluate has been removed - "Additionally, below is a sample query that brings out some of the logons to Azure AD where multi factor authentication was satisfied by token based logons versus MFA via phone auth or the like. It is possible this could produce many results, so additional tuning is suggested for your environment." It comes from the query that associated the VPS providers discussed right below this - Signins From VPS Providers - where there is a list of IPs that are referenced by using IP_Data.
