Forum Discussion

MarcForrest's avatar
MarcForrest
Copper Contributor
Jun 23, 2021

Geo Location IP address incorrect

We had a user report as a Risky Sign in due to a sign in from a completely different country. 

The IP address reported in the Sign-In activity log as being reported in Brazil, while the user was signing in from his Mobile device using mobile data in South Africa


Azure AD Info

Location

Sao Paulo, Sao Paulo, BR
IP address
41.116.61.19
 
Location: South Africa
Carrier: MTN
 
All 4 Geo Location DB's report South Africa, yet Microsoft reports Brazil?
What GEO DB is Microsoft using and how can we mitigate this going forward ? Any suggestions ? 
Azure Active Directory (AAD)
Identity Management
  • GuruLee's avatar
    GuruLee
    Brass Contributor
    Apr 04, 2023
    We are seeing the same thing as well. When we cross-reference the IP, several IP reputation /whois sites all show the correct geo... 👎
  • VasilMichev's avatar
    VasilMichev
    MVP
    Jun 23, 2021
    I'm pretty sure there's a disclaimer in the documentation, saying this data is not always correct. You shouldn't rely on it, moreover Microsoft is introducing actual GPS-based location condition, which will make this obsolete.

Resources