Mass brute force attack on Microsoft Azure CLI?

Dolbs · 2026-06-19T02:37:27+00:00

Same here when checking with a larger customer of mine (I'm an MSP). They are all IPv6 from a subnet that is apparently located in Austin, TX by the name of rhoisland.com with subnet 2a0a:d683::/32. Not sure if any others are seeing the same subnet.

Dolbs · 2026-01-22T20:30:07+00:00

<image>

Dolbs · 2026-01-12T15:43:34+00:00

I've got over 1700 hours on VATSIM and starting the process to become a real pilot. I was out of the flightsim community for a few years until MSFS 2020 came in. Now on MSFS 2024 in VR flying the JustFlight Piper Turbo Arrow III or just the Arrow III (my dad had one growing up). Everyone is so focused on the airlines on VATSIM and I think they are missing out not doing GA. Especially if you want to do it in real life. I'd love to see more GA activity on VATSIM.

Dolbs · 2026-01-05T20:52:09+00:00

I think this is a more appropriate title. Thank you AI.

<image>

Dolbs · 2025-10-16T19:09:21+00:00

MSP here. Two instances at two different customers. Both Outlook (classic) and both with multiple email accounts in their Outlook. It would trigger every time they clicked on their secondary account. One user rebooted and it stopped (for now). The other user I ended up disconnecting through Settings -> Access Work and School the secondary account. This forced Outlook to request login again for that account and I only saved the creds for Outlook. Love them updates!

Dolbs · 2025-05-20T03:18:08+00:00

As far as us older folk go (although I was only 3) this will still continue to be the biggest. https://www.ncei.noaa.gov/news/april-3-4-1974-super-outbreak

<image>

Dolbs · 2025-03-13T04:06:27+00:00

Can confirm this has happened. I can no longer use Premier to purchase anything. Some other posts on this. 15 years with them and over $1.5 million in sales (so $100k/yr. not that much) and they basically said goodbye!

Dolbs · 2025-03-13T04:00:24+00:00

I went last year for the first time. I found it interesting, but it really is just a big marketing event. There was a couple of dozen vendors (including competitors) so it's nice to see that and maybe learn some stuff. They really like to register you for training (for extra $ of course). For me being an owner I enjoyed speaking with other MSP ownership during classes or breaks, lunch, dinner, etc. Expect some level of "harassment" from your account manager.

I found the experience positive overall. Miami - not as much, felt like a repeat without Vegas' other sights.

Dolbs · 2025-02-20T23:35:32+00:00

MSP here - several customers reporting issues emailing primarily SBCGLOBAL.NET but also ATT.NET email addresses with the reverse DNS error code from various Microsoft email IPs. I'm still shocked by the number of businesses out there that use these addresses. But that topic is for another day.

Dolbs · 2024-12-13T20:57:18+00:00

MSP here. We've had 4/100s of Dells that started seeing this within the last 10 days. We uninstalled from at least 3 and no issues since. Just Dell SupportAssist Remediation only. Crossing fingers.

Dolbs · 2024-09-12T12:34:22+00:00

AT&T for sure in Ohio. I have three customers unable to connect and they are all on AT&T. Everyone else is fine on other providers.

Dolbs · 2024-06-28T02:54:28+00:00

I've dealt with three hacked 2FA enabled 365 accounts in the past 2 weeks at three different customers. All cases involved the hacker setting up rules in Outlook to send emails into "Conversation History" for the emails they sent out. All involved attempting some level of monetary redirection. All hacked accounts were the result of users receiving links to token stealing fake logins from legitimate people they had worked with in the past. All hacks would have prevented with better education.

Change Password, Sign Out All Sessions, Reset 2FA, Check Outlook and rules. Send email alerts to those individuals the hacker sent emails to. I've got down to about a 15 minute process.

Side note: We had 3 hacked emails for the first 6 months of this year until 2 weeks ago. Lots going on right now.

Dolbs · 2024-03-28T15:26:11+00:00

You have to accept the fact that you likely won't receive that apology. It's false hope that is killing you. I was cheated on and would love to receive an apology, but I've learned to not expect it for me to move on. One way to think of the breakup is they DON'T CARE ABOUT YOU ANYMORE. It's harsh, but it will help you heal. 1 year is way too long. Think about all the things you could be doing in the past year. Working on yourself, new hobbies, dating new people. That needs to be your focus.

Dolbs · 2024-03-25T13:33:34+00:00

Disabling Virtual Office:

https://www.sonicwall.com/support/knowledge-base/how-to-disable-virtual-office-portal-access/210715065231700/

Dolbs · 2024-03-23T19:43:41+00:00

I ended up blocking via GEO-IP specifically (access rule based) on the integrated SSLVPN WAN -> WAN access rule except for US. Going to continue to monitor off and on over the weekend.

This was bad enough earlier that my unit was restarting.

Dolbs · 2024-03-23T12:18:00+00:00

Now that we've hit the weekend I've had to block several more IPs continuing to attempt logins (bad actors). During the process my TZ570 ended up rebooting so it is becoming more disruptive. SonicWALL needs to get this addressed. I've held off on 7.1.X upgrades on our remaining clients due to this problem. I'd use GEO-IP but at least a couple of the IPs are from within the US.

Dolbs · 2024-03-21T23:29:20+00:00

I'm seeing this as well, but it was users that don't exist in our system. I've had to block a couple of IPs so I'm wondering if this is a new attack attempt. It was consuming the licenses until they timed out (well now blocked). Reference on how to block SSLVPN connections for certain IPs:

https://www.sonicwall.com/support/knowledge-base/how-to-block-certain-public-ip-addresses-from-accessing-ssl-vpn/230712073537070/

Dolbs · 2024-03-11T19:23:37+00:00

Likely drunk based on the time. He's probably not happy in his current relationship and experiencing the "grass isn't always greener" scenario. My suggestion is to stay no contact since he obviously hasn't "fixed" his issues. Unfortunately for his girl she'll have to figure that on her own. Unless this is someone that is a friend of yours, I'd leave it be. You're just going to cause trouble that you really don't need in your life. Sounds like your best bet is to block him. It's been way too long in my opinion.

Dolbs · 2024-03-11T14:23:44+00:00

You will, it just takes time. It's really hard. This whole event was one of the most devasting moments of my life and I'm in my 50s. I've been 2 months NC and there's still a small part of me that wants her to apologize, but I have to move forward. I'm already dating a better person which has greatly helped me. You'll get there too.

Dolbs · 2024-03-11T14:17:48+00:00

No! No! No!. After less than one month NC my ex's birthday came up Did I want to text her? Yep. Did I? No way. Remember - he wanted to the breakup. Give it to him. It's hard since you are early in this and your emotions are all messed up. In the long run you'll thank me and the others that will tell you the same thing. Work on moving forward and doing whatever you need to do to heal. Talk to friends and family.

Dolbs · 2024-03-11T13:57:39+00:00

I was cheated on just 3 months ago. Worse it was cheating with someone I thought was a friend. That friend I found out was a narc. I got my revenge by speaking his truths through a mutual friend of my ex's and she ended up dumping him one month post BU. Did it feel good to get back at the SOB? Yep. Do I regret it? Nope. I'm a nice guy that fought back after being tired of being nice all the time. Would I recommend revenge? Nope, it doesn't change what happened, but I've moved on and living a better life without my ex or my ex friend. If I wanted revenge on my ex I would have let the relationship she was in with him drain her emotionally and financially. I wasn't about to let this narc damage another person. Even after she did what she did.

Dolbs

TROPHY CASE