Thousands of failed login attempts in MS account

[Laurijan]

Hello,

Any idea what I can do about thousands of failed login attempts to my Microsoft account in the last couple of month?
In MS account sign in history every hour there is a new failed login where it just says wrong password was used.
Am using strong randomly generated password and 2-factor authentication.
Today I realized that with Whois website I can lookup the IP addresses used for the logins and there is a report abuse email address from the ISP that IP belongs too.
Problem is with every login the country of login attempt changes so I would spend days reporting to hundreds of abuse ISP emails.

 

[Solaris17]

please see

Microsoft/Outlook.com foreign failed login attempts?

The other day I was searching for something in a Microsoft (/ Outlook / Live / whatever they call it nowadays) account's settings, and found something unexpected. There's a page showing "Recent activity". In my case that means sign-in history. And a few times per week various attackers tried to...

www.techpowerup.com

I also standby what I said then.

Yup pretty normal; the world’s a scary place when you look at the logs. Don’t reuse passwords and enable MFA. My email is available in a lot of places my account is full of these.

 

[oxrufiioxo]

Some of your information must have been leaked or hacked is my guess.... A lot of reputable companies sell our information's these days. I'm still getting harassed 15 months later after buying a house from all sorts of shady companies.


Other than reporting it or outright making a new email there isn't a lot you can do afaik.

 

[68Olds]

Today I realized that with Whois website I can lookup the IP addresses used for the logins and there is a report abuse email address from the ISP that IP belongs too.
Problem is with every login the country of login attempt changes so I would spend days reporting to hundreds of abuse ISP emails.

The IP addresses are more than likely spoofed using a VPN. Total waste of time reporting the IPs.

 

[Laurijan]

That hacker also sends me emails that appear to come from my own email address with generic text like you pervert have been recording over webcam etc (dont have webcam lol)
They quoted a leaked password from 10y ago that i dont use anymore

 

[Gunbound]

Maybe consider looking into those services that will remove your leaked info off the people that sell your info

 

[RJARRRPCGP]

I have those reports coming from Microsoft, too, but there are no signs of myself being hacked. A ton of them were from Brazil. I suspect it's those so-called "password spraying" attacks.
They keep getting the wrong password, because I'm not a password dummy!

They quoted a leaked password from 10y ago that i dont use anymore

Yeah, it's a cyber-criminal brag, just like for a password that I made in 2008! Got one of those E-mails, except that no E-mail accused me of having porn that I can remember. That was back in the later-2010s, IIRC. By then, I most likely wasn't even using that password anymore! It was for a password that I made hard to guess, too. Definitely not a "dictionary password".

IIRC, the 2010s, had major breaches, possibly dwarfing 2020s breaches so far! And, that's not even including the Equifax hacking incident.

 

[MSV198]

I have the same thing. There's a new login attempt approximately every 10 minutes every hour every day.
I know my email and old passwords have been leaked before so that's probably why this happens.

My account has a new strong password and two factor authentication, so I'm not worried they're gonna get in, but even if they did, there's absolutely nothing of value in there.