Hack Attempts-MS Account Sign-in Activity

<p>"<span style="color: rgb(0, 0, 0);">Is this just the world in which we live in now and have to deal with this stuff?"</span></p><p><br></p><p>Yes.</p><p><br></p><p>Because you said you have locked it down pretty well, with 2FA and such, I wouldn't worry about it. Like the log entry says, the sign-in was unsuccessful.</p><p><br></p><p>Things like this happen nowadays, where attackers would try to get to any other accounts you may have, if your information was leaked in any of the breaches that have happened over the past decade, as people tend to re-use the same logins to multiple sites. It could also have been leaked in one we don't know yet about. Or they are just trying any account looking for easy pickings: accounts without security features like 2FA turned on. (The trade-off between security and convenience is always a battle.)</p><p><br></p><p>It is like this also for anything that is exposed to the Internet. Web applications, Secure Shell (ssh) severs, VPNs, IoT devices, networking equipment, etc. The attempts would usually show up in logs if logging is enabled. What would be concerning is if the attempt was successful, in which case it becomes a matter of how quickly you can detect it and move to limit further loss or damage.</p><p><br></p><p>If you want, you can change your password, so that even if it was leaked, it now is no longer valid.</p>