Forum Discussion
Windows Live Custom Domains causes Entra account lockout
Hi everyone, we have an on-prem AD connected with EntraConnect to EntraID since about 3 years. We only sync users and groups, no password hash or anything else. Since a few days 4 (out of about 250)...
I've also seem multiple access attempts across multiple customers since 23rd Sep using this application. Ip addresses show US and Germany. A popular source location is Schorfheide, Brandenburg, DE
IP address 2a07:db85:4b71:a22e:aa6a:7c77:2ed1:e75a although IP Geo Location shows it as in the UK from 3xK Tech GmbH (head office is the location in Germany) and https://scamalytics.com/ip/isp/3xk-tech-gmbhsays 14% of their web traffic is fraudulent. They run lots of anonymising VPNs/proxies.
I couldn't find anything in Conditional Access Policies that allows that specific app to be blocked, so suggestions welcome.
Sorry can't be of more help.
Cheers,
Mike