Microsoft warns of password attacks against Exchange Online, here's what you need to do

SMTP and IMAP are by far the most common protocols abused by password-spraying attacks.