Automated probes from Colombian networks are testing local logins.

Technical intelligence has identified a series of coordinated sign-in attacks originating from Colombia targeting local New Zealand organisations.

A high-volume sign-in campaign originating from Colombia has been detected by Decision1 monitoring systems. These automated probes are testing multiple staff accounts across the community, searching for weak credentials. This highlights the importance of geoblocking and robust identity protection policies.

Source: Decision1 Internal Intelligence

IP Intelligence

What's this?

Abuse score

100/ 100High abuse

ISP (Internet Service Provider)

Telmex Colombia S.A.

Function:Function Unknown

Reputation:Reputation Unknown

Under attack

Microsoft 365

Source

Decision1