search
Microsoft Entra ID
Trends
- 1GreyNoise flags malicious IPs in live Entra ID demo●During a live product demo, GreyNoise-labeled malicious IPs were identified in an organization’s Entra ID sign-in logs.
During a live product demonstration, security company GreyNoise identified IP addresses it labels as malicious inside an organization's Microsoft Entra ID sign-in logs. The addresses looked benign at first glance, appearing residential and matching expected geolocations. The tell was multiple users authenticating from the same IP address, a pattern inconsistent with normal user behavior and a signal of potential compromise.