New Azure Active Directory signin locations today versus historical Azure Active Directory signin data.In the case of password spraying or brute force attacks one might see authentication attempts for many accounts from a new location.
Source: Github - Microsoft
MITRE ATT&CK Tactics
Azure Sign-in Logs
VPN access in some special situations
Investigate if this user account is legitimate. If not change Azure AD user account password.