A burst of failed lookups at the sign-in edge asking which accounts exist - dozens of distinct names from one hosting source, none ever provisioned, names built on the org's naming convention, then a password attempt on the one that resolved. Counts distinct names per source and why each failed.
