Automated probes from Colombian networks are testing local logins.

Technical intelligence has identified a series of coordinated sign-in attacks originating from Colombia targeting local New Zealand organisations.

A high-volume sign-in campaign originating from Colombia has been detected by Decision1 monitoring systems. These automated probes are testing multiple staff accounts across the community, searching for weak credentials. This highlights the importance of geoblocking and robust identity protection policies.

Source: Decision1 Internal Intelligence

IP Intelligence

What's this?

Signals about the attacker's network — abuse history, hosting provider, and the ISP's typical role. Bulletproof hosts and residential-proxy networks are the usual bad-actor infrastructure.

Abuse score100 / 100High abuse

ISPTelmex Colombia S.A.

Under attack

Microsoft 365

Source

Decision1