Spoof attempts with auth failure

This query helps in checking for spoofing attempts on the domain with Authentication failures