Activity From Untrustworthy ISP

Detects logins from new Internet Service Providers (ISPs) with low trust scores, considering activity within the last 90 days. Trust score based on enrichment services and Tranco Top 1M list. ISP considered new for 7 days.

Recommended Actions

Verify the origin of the action with the account.

Default Check Settings

Number of days threshold to regard ISP as new: 7 days

Compatibility

Microsoft Entra ID

Okta

Duo

Google Workspace

Salesforce

Last updated