用户登录报告的清晰度 [英] Clarity on User Sign In Reports

问题描述

美好的一天

我最近开始查看可用的AAD报告(在Azure门户和PowerBI AAD审核日志仪表板和报告中)，并注意到来自世界各地的许多尝试登录的尝试.他们都失败了，但是 认为有太多尝试渗透到我们公司中，我感到非常不安.当我进一步查看时，我发现很多情况下失败的原因是帐户被锁定，因为用户尝试使用错误的密码登录过多次" 用户ID或密码"错误代码为50053.但是，我的用户均未报告其帐户处于锁定状态.还有50126个错误似乎来自合法IP地址/位置，错误似乎太多了.

I recently started looking at the available AAD reports (both in the Azure portal and the PowerBI AAD Audit Logs dashboard and reports) and noticed quite a number of attempted sign ins from various countries all over the world. They have all failed but it was quite disconcerting to think that there were so many attempts to infiltrate our company. When I looked further, I saw a number of occasions where the reason for failure was "Account is locked because user tried to sign in too many times with an incorrect user ID or password" with error code 50053. However none of my users reported their accounts being in a locked state. There are also a number of 50126 errors that seem to come from legitimate IP addresses/locations, are too many to seem plausible.

然后我的问题是这些报告是否准确?如果可以，我应该如何正确解释它们，以便我可以正确评估对公司的威胁级别.

My question then is are these reports accurate and if so how do I interpret them properly so that I can properly assess the threat level to my company.

感谢您的帮助和见识.

推荐答案

报告中的差异必须通过技术支持进行调查. 建议您打开 技术 支持票证

Discrepancy in the reports would have to be investigated through technical support. We would suggest you to open a Technical Support Ticket, as this would require deeper investigation and we would need your Subscription and Tenant details.

点击标记为答案"在对您有帮助的帖子上，这可能会对其他社区成员有所帮助.

Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

这篇关于用户登录报告的清晰度的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！