question

JohnRezekDA-0473 avatar image
1 Vote"
JohnRezekDA-0473 asked Spicy-0579 answered

IP6 on AT&T causing Impossible Travel alerts from Tanzania

Anyone finding issue with users that have AT&T Plan on phones that keeps causing Logon message from Tanzania. I have about 7 users so far and while I'm concerned, I have technicians stating it is a false positive. I want to be sure since this is disconcerting.

not-supported
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Kurtis-4815 avatar image
0 Votes"
Kurtis-4815 answered Kurtis-4815 published

YES!!!

Literally just got notifications this morning that I have to investigate. I have received them in the past too but always hit a dead end.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Kurtis-4815 avatar image
0 Votes"
Kurtis-4815 answered Spicy-0579 published

YES!

I am also getting these alerts for what seem to be AT&T iPhones. I don't have any other information, but I will inquire with our AT&T rep.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Same here. Getting the same impossible travel alerts.

0 Votes 0 ·
Spicy-0579 avatar image
0 Votes"
Spicy-0579 answered

Hello Microsoft !

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VioletAndrew-7546 avatar image
0 Votes"
VioletAndrew-7546 answered VioletAndrew-7546 published

We have several users who flagged an alert on this too. All of them show an impossible travel from Tanzania using an IPV6 address. Interesting that the ISP are all mobile carriers showing AT&T, T-Mobile and Verizon. No explanation anywhere.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Spicy-0579 avatar image
0 Votes"
Spicy-0579 answered

September 13, 2021 12:39 PM
Title: Admins are seeing incorrect activity locations within the Microsoft Cloud App Security portal

User Impact: Admins are seeing incorrect activity locations within the Microsoft Cloud App Security portal.

Current status: We've identified a recent change in the geo-location provider service that is causing admins to see locations for some activities to be incorrectly reported as Tanzania within the Microsoft Cloud App Security portal. The team is working on a fix to revert the change and remediate impact.

Scope of impact: Your organization is affected by this event, and this issue may potentially affect any of your admins attempting to view activity locations within the Microsoft Cloud App Security portal.

Start time: Thursday, September 9, 2021, 1:29 PM (5:29 PM UTC)

Root cause: A recent update to the geo-location provider service is causing admins to see incorrect locations within the Microsoft Cloud App Security portal.

Next update by: Wednesday, September 15, 2021, 10:00 AM (2:00 PM UTC)

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.