#PasswordSpray
Live, measured metrics for the hashtag #PasswordSpray from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #passwordspray
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mas.to (Mastodon public tags API) · fetched 2026-09-08 01:09 UTC0 uses by 0 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mas.to (Mastodon public search API) · fetched 2026-09-08 01:09 UTCLive pulse
measured · mas.to (Mastodon tag timeline) · fetched 2026-09-08 01:09 UTCEverything below is measured over the latest 17 public posts (spanning ~25071 hours).
Posting hours (UTC) — busiest: 15:00
Languages: English (15) · French (1) · German (1)
Avg boosts / post: 1.3
Top of the latest posts
Microsoft 365 users and admins, beware! There's a specific IPv6 range (2a0a:d683::/32) operated by a provider called LSHIY that is engaging in password spraying / brute force login attempts against Microsoft accounts with old, previously le
🤖 Azure CLI password spray: 81M+ attempts from IPv6 range 2a0a:d683::/32 (AS32167/LSHIY LLC). At least 78 Microsoft accounts compromised between June 12-26. Ongoing attack detected by Huntress. 🔗 https://thehackernews.com/2026/07/azure-cl
In a recent case, I collaborated with a non-profit organization to unravel a classic password spray attack scenario. The organization's Executive Director faced a staggering 1,159 unauthorized sign-in attempts within a few hours. https://no
#passwordspray across platforms
every network with a public tag surfaceFollow #passwordspray straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/passwordspray