Fabrikam Dental Group
fabrikam.onmicrosoft.com
Sign-ins
609
Interactive, last 7 days, by 56 accounts
Failure rate
7%
37 failed sign-ins; 55 MFA or other prompts not counted
Repeated failures
1
Accounts with 5+ failed sign-ins
Countries
6
3 countries unusual for this tenant
Unusual countries
13
Accounts that signed in from one
Without MFA
284
Successful sign-ins by 53 accounts
Not checked
Risky sign-ins need Entra ID P2 (Identity Protection, included in Microsoft 365 E5 or as an add-on); without it Microsoft hides sign-in risk.
Accounts with repeated failures 1Addresses with many failures 4Successful sign-ins from unusual countries 17Successful sign-ins without MFA 53Failure reasons 7Sign-ins by country 6Sign-ins by app 6Every account 56
Accounts that failed to sign in 5 or more times in the last 7 days (MFA and other prompts aren't counted). Many wrong passwords from several addresses or countries is someone guessing the password. If the person didn't make them, make sure MFA is enforced for the account and check any success that followed.
| Account | Failed | Wrong password | Locked out | Succeeded | Addresses | Countries | Last failure (UTC) | Last failure reason |
|---|---|---|---|---|---|---|---|---|
| ben.okafor@fabrikam.example high | 9 | 8 | 1 | 0 | 3 | RU, GB, BR | 9 Oct 2026, 09:00 | Account is disabled |
Addresses that failed against several accounts, or 5 or more times. One address trying 5 or more accounts is password spraying. Successful sign-ins from the same address can be the office's own internet connection (people mistyping), or a guess that worked: check which.
| IP address | Failed sign‑ins | Wrong password | Accounts tried | Accounts | Countries | Successful sign‑ins from here | Last failure (UTC) |
|---|---|---|---|---|---|---|---|
| 203.0.113.66 high | 5 | 4 | 5 | nobody@fabrikam.example, g#EXT#@fabrikam.example + 3 more | BR | 0 | 7 Oct 2026, 23:04 |
| 203.0.113.11 medium | 3 | 3 | 2 | aisha.brown@fabrikam.example, henry.roberts@ | GB | 18 | 10 Oct 2026, 09:56 |
| 203.0.113.14 medium | 2 | 2 | 2 | owen.turner@fabrikam.example, rhys.walker@fabrikam.example | GB | 19 | 7 Oct 2026, 13:15 |
| 198.51.100.7 medium | 7 | 7 | 1 | ben.okafor@fabrikam.example | RU | 0 | 8 Oct 2026, 02:20 |
Countries with less than 5% of the tenant's successful sign-ins, other than the main one. Travel explains most. If the person doesn't recognise one, someone else has their password (and got past any MFA): reset it and sign them out everywhere.
| Account | Country | Successful sign‑ins | Failed | Cities | IP addresses | Apps | Last success (UTC) |
|---|---|---|---|---|---|---|---|
| amelia.khan@fabrikam.example medium | FR | 1 | 0 | London | 203.0.113.43 | Microsoft Teams | 11 Oct 2026, 16:35 |
| anna.kowalski@ | FR | 1 | 0 | Paris | 198.51.100.40 | Office 365 SharePoint Online | 9 Oct 2026, 21:40 |
| george.baker@fabrikam.example medium | FR | 1 | 0 | London | 203.0.113.33 | Microsoft Teams | 5 Oct 2026, 08:07 |
| george.williams@ | FR | 1 | 0 | London | 203.0.113.26 | Microsoft Office | 11 Oct 2026, 15:26 |
| noah.wood@fabrikam.example medium | FR | 1 | 0 | London | 203.0.113.15 | Microsoft Teams | 5 Oct 2026, 15:58 |
| william.lewis@ | FR | 1 | 0 | London | 203.0.113.22 | Microsoft Office | 8 Oct 2026, 14:08 |
| jack.ward@fabrikam.example medium | IE | 1 | 0 | London | 203.0.113.39 | Office 365 SharePoint Online | 5 Oct 2026, 15:23 |
| megan.king@fabrikam.example medium | IE | 1 | 0 | London | 203.0.113.34 | Microsoft Teams | 8 Oct 2026, 10:21 |
| noah.wood@fabrikam.example medium | IE | 1 | 0 | London | 203.0.113.15 | Microsoft Teams | 6 Oct 2026, 17:00 |
| ruby.clark@fabrikam.example medium | IE | 1 | 0 | London | 203.0.113.16 | Office 365 SharePoint Online | 9 Oct 2026, 09:27 |
| william.lewis@ | IE | 2 | 0 | London | 203.0.113.22 | Microsoft Office | 8 Oct 2026, 08:16 |
| zara.edwards@fabrikam.example medium | IE | 1 | 0 | London | 203.0.113.10 | Microsoft Teams | 8 Oct 2026, 15:54 |
| ava.moore@fabrikam.example medium | US | 1 | 0 | London | 203.0.113.28 | Microsoft Teams | 5 Oct 2026, 10:42 |
| jack.lee@fabrikam.example medium | US | 1 | 0 | London | 203.0.113.12 | Microsoft Office | 7 Oct 2026, 07:59 |
| noah.wood@fabrikam.example medium | US | 1 | 0 | London | 203.0.113.15 | Microsoft Teams | 5 Oct 2026, 17:47 |
| olivia.taylor@ | US | 1 | 0 | London | 203.0.113.13 | Office 365 Exchange Online | 7 Oct 2026, 07:14 |
| zara.edwards@fabrikam.example medium | US | 1 | 0 | London | 203.0.113.10 | Office 365 Exchange Online | 5 Oct 2026, 11:48 |
Successful sign-ins that needed only a password. Conditional Access exclusions, trusted locations and apps a policy doesn't cover show up here; the MFA coverage report shows why each account isn't asked. Flagged: accounts that never used MFA in this period.
| Account | Without MFA | With MFA | Apps | Countries | Last success (UTC) |
|---|---|---|---|---|---|
| ruby.wood@fabrikam.example low | 13 | 5 | Microsoft Teams, Office 365 Exchange Online + 2 more
| GB | 10 Oct 2026, 16:47 |
| george.baker@fabrikam.example low | 10 | 7 | Microsoft Office, Microsoft Teams + 2 more
| GB, FR | 9 Oct 2026, 18:13 |
| george.williams@ | 9 | 7 | Microsoft Office, Office 365 Exchange Online + 2 more
| GB, FR | 11 Oct 2026, 15:26 |
| amelia.khan@fabrikam.example low | 8 | 3 | Office 365 SharePoint Online, Microsoft Teams + 2 more
| GB, FR | 11 Oct 2026, 16:35 |
| lily.khan@fabrikam.example low | 8 | 3 | Office 365 SharePoint Online, Microsoft Teams, Office 365 Exchange Online | GB | 9 Oct 2026, 12:35 |
| noah.harris@fabrikam.example low | 8 | 1 | Microsoft Teams, Office 365 Exchange Online + 2 more
| GB | 11 Oct 2026, 16:19 |
| rhys.walker@fabrikam.example low | 8 | 3 | Microsoft Office, Office 365 Exchange Online + 2 more
| GB | 9 Oct 2026, 18:53 |
| william.lewis@ | 8 | 7 | Office 365 Exchange Online, Microsoft Teams + 2 more
| GB, IE, FR | 9 Oct 2026, 13:35 |
| anna.kowalski@ | 7 | 33 | Microsoft Teams, Office 365 Exchange Online + 4 more
| GB, FR + 2 more
| 11 Oct 2026, 16:15 |
| arthur.lee@fabrikam.example low | 7 | 5 | Microsoft Teams, Office 365 Exchange Online + 2 more
| GB | 9 Oct 2026, 15:02 |
| arthur.williams@ | 7 | 2 | Office 365 Exchange Online, Office 365 SharePoint Online + 2 more
| GB | 10 Oct 2026, 16:13 |
| ella.evans@fabrikam.example low | 7 | 6 | Office 365 SharePoint Online, Microsoft Office + 2 more
| GB | 10 Oct 2026, 12:04 |
| ella.hughes@fabrikam.example low | 7 | 2 | Microsoft Teams, Office 365 SharePoint Online, Office 365 Exchange Online | GB | 9 Oct 2026, 18:24 |
| george.walker@ | 7 | 3 | Office 365 Exchange Online, Microsoft Teams + 2 more
| GB | 9 Oct 2026, 18:30 |
| isla.scott@fabrikam.example low | 7 | 3 | Office 365 Exchange Online, Microsoft Teams, Microsoft Office | GB, US | 9 Oct 2026, 15:37 |
| megan.king@fabrikam.example low | 7 | 2 | Microsoft Teams, Office 365 Exchange Online + 2 more
| GB, IE | 9 Oct 2026, 16:18 |
| noah.wood@fabrikam.example low | 7 | 5 | Microsoft Office, Microsoft Teams + 2 more
| GB, IE + 2 more
| 9 Oct 2026, 17:13 |
| owen.khan@fabrikam.example low | 7 | 1 | Microsoft Teams, Microsoft Office, Office 365 Exchange Online | GB | 9 Oct 2026, 13:31 |
| william.wood@fabrikam.example low | 7 | 9 | Office 365 Exchange Online, Office 365 SharePoint Online + 2 more
| GB | 9 Oct 2026, 10:03 |
| aisha.brown@fabrikam.example low | 6 | 4 | Office 365 SharePoint Online, Microsoft Office + 2 more
| GB | 10 Oct 2026, 13:44 |
| ava.moore@fabrikam.example low | 6 | 9 | Office 365 Exchange Online, Microsoft Teams + 2 more
| GB, US | 9 Oct 2026, 09:12 |
| breakglass@fabrikam.example low | 6 | 3 | Microsoft Teams, Microsoft Office + 2 more
| GB | 10 Oct 2026, 16:25 |
| ethan.jones@fabrikam.example low | 6 | 8 | Microsoft Teams, Office 365 SharePoint Online + 2 more
| GB | 9 Oct 2026, 17:35 |
| jack.lee@fabrikam.example medium | 6 | 0 | Microsoft Office, Office 365 Exchange Online, Office 365 SharePoint Online | GB, US | 10 Oct 2026, 08:53 |
| jack.ward@fabrikam.example low | 6 | 7 | Office 365 SharePoint Online, Microsoft Office + 2 more
| GB, IE | 9 Oct 2026, 16:31 |
| zara.edwards@fabrikam.example low | 6 | 7 | Office 365 Exchange Online, Microsoft Office + 2 more
| GB, IE, US | 8 Oct 2026, 15:54 |
| ava.thomas@fabrikam.example low | 5 | 4 | Office 365 Exchange Online, Microsoft Teams, Microsoft Office | GB | 9 Oct 2026, 14:36 |
| chloe.jackson@ | 5 | 9 | Office 365 Exchange Online, Office 365 SharePoint Online + 2 more
| GB | 9 Oct 2026, 13:06 |
| owen.smith@fabrikam.example low | 5 | 3 | Office 365 Exchange Online, Microsoft Teams + 2 more
| GB | 11 Oct 2026, 17:56 |
| owen.turner@fabrikam.example low | 5 | 3 | Office 365 SharePoint Online, Microsoft Office, Microsoft Teams | GB | 7 Oct 2026, 11:12 |
| aaron.smith@fabrikam.example low | 4 | 6 | Microsoft Office, Office 365 SharePoint Online + 2 more
| GB | 9 Oct 2026, 16:16 |
| amelia.jackson@ | 4 | 3 | Microsoft Office, Office 365 SharePoint Online + 2 more
| GB | 8 Oct 2026, 10:52 |
| freya.evans@fabrikam.example low | 4 | 2 | Office 365 SharePoint Online, Microsoft Office + 2 more
| GB | 7 Oct 2026, 13:00 |
| jack.roberts@fabrikam.example low | 4 | 3 | Microsoft Teams, Office 365 SharePoint Online, Office 365 Exchange Online | GB | 9 Oct 2026, 13:32 |
| lily.watson@fabrikam.example low | 4 | 2 | Microsoft Teams, Office 365 SharePoint Online + 2 more
| GB | 7 Oct 2026, 13:49 |
| olivia.taylor@ | 4 | 3 | Microsoft Office, Office 365 Exchange Online, Office 365 SharePoint Online | GB, US | 8 Oct 2026, 17:46 |
| owen.scott@fabrikam.example low | 4 | 4 | Office 365 Exchange Online, Microsoft Teams, Microsoft Office | GB | 9 Oct 2026, 15:10 |
| priya.williams@ | 4 | 2 | Microsoft Office, Office 365 SharePoint Online, Microsoft Teams | GB | 7 Oct 2026, 15:21 |
| rhys.scott@fabrikam.example low | 4 | 2 | Office 365 Exchange Online, Microsoft Teams, Microsoft Office | GB | 8 Oct 2026, 14:48 |
| ruby.clark@fabrikam.example low | 4 | 7 | Microsoft Teams, Office 365 Exchange Online + 2 more
| GB, IE | 11 Oct 2026, 08:12 |
| thomas.johnson@ | 4 | 2 | Office 365 Exchange Online, Microsoft Office + 2 more
| GB | 8 Oct 2026, 10:30 |
| callum.turner@ | 3 | 3 | Office 365 SharePoint Online, Microsoft Teams + 2 more
| GB | 9 Oct 2026, 10:28 |
| henry.roberts@ | 3 | 5 | Microsoft Teams, Office 365 Exchange Online + 2 more
| GB | 9 Oct 2026, 13:27 |
| leo.harrison@fabrikam.example low | 3 | 6 | Microsoft Teams, Office 365 Exchange Online + 2 more
| GB | 9 Oct 2026, 16:20 |
| megan.green@fabrikam.example medium | 3 | 0 | Microsoft Teams, Microsoft Office, Office 365 Exchange Online | GB | 8 Oct 2026, 09:18 |
| owen.patel@fabrikam.example low | 3 | 1 | Microsoft Office, Office 365 Exchange Online, Microsoft Teams | GB | 9 Oct 2026, 12:51 |
| ruby.davies@fabrikam.example low | 3 | 3 | Microsoft Office, Microsoft Teams + 2 more
| GB | 10 Oct 2026, 15:35 |
| ava.jackson@fabrikam.example low | 2 | 6 | Microsoft Teams, Office 365 SharePoint Online + 2 more
| GB | 7 Oct 2026, 18:53 |
| info@fabrikam.example medium | 2 | 0 | Office 365 Exchange Online | GB, BR | 11 Oct 2026, 12:00 |
| lily.white@fabrikam.example low | 2 | 1 | Microsoft Teams, Microsoft Office | GB | 9 Oct 2026, 17:00 |
| rhys.hall@fabrikam.example low | 2 | 1 | Office 365 Exchange Online, Microsoft Office + 2 more
| GB | 7 Oct 2026, 15:30 |
| thomas.allen@fabrikam.example low | 2 | 2 | Office 365 Exchange Online, Microsoft Teams + 2 more
| GB | 8 Oct 2026, 08:17 |
| thomas.robinson@ | 1 | 4 | Microsoft Office, Office 365 Exchange Online + 2 more
| GB | 8 Oct 2026, 13:56 |
Why sign-ins didn't complete. Prompts (MFA, "Stay signed in?") are recorded by Microsoft as failures but are part of a normal sign-in.
| Error code | Kind | Sign‑ins | Accounts | Last seen (UTC) |
|---|---|---|---|---|
| 50074 | Prompt | 39 | 28 | 11 Oct 2026, 17:53 |
What it means: Asked to complete MFA | ||||
| 50126 | Failure | 33 | 22 | 11 Oct 2026, 11:32 |
What it means: Wrong user name or password | ||||
| 50140 | Prompt | 16 | 14 | 10 Oct 2026, 07:02 |
What it means: Interrupted by the "Stay signed in?" prompt | ||||
| 50034 | Failure | 1 | 1 | 7 Oct 2026, 23:04 |
What it means: No such account in this tenant | ||||
| 50053 medium | Failure | 1 | 1 | 8 Oct 2026, 02:20 |
What it means: Locked out: too many wrong passwords (smart lockout), or the address is known to be malicious | ||||
| 50057 | Failure | 1 | 1 | 9 Oct 2026, 09:00 |
What it means: Account is disabled | ||||
| 53003 | Failure | 1 | 1 | 10 Oct 2026, 16:00 |
What it means: Blocked by Conditional Access | ||||
Where sign-ins came from, by Microsoft's location for the address. Flagged: countries the tenant rarely signs in from.
What people signed in to. "Without MFA" counts successful sign-ins that needed only a password.
Every account that signed in interactively in the last 7 days. Open an account for the rest of what Office Sentry knows about it.
Interactive sign-ins since 2026-10-05, from the Entra ID sign-in log. Background sign-ins by apps and saved sessions aren't included. Times are UTC.
Data from Sign-in activity (), Tenant profile and licences ().