Forum Discussion

JakobRohde's avatar
JakobRohde
Iron Contributor
Jan 06, 2020
Solved

Service account with weird travel habits

We have a service account used by an application. Our data center is in West Europe, and I would expect all logins by the service account to occur from there, so I am puzzled why I receive email aler...
security
  • oliwer_sundgren's avatar
    oliwer_sundgren
    Jan 07, 2020

    Hello!JakobRohde 

     

    That really depends on what resorces the service account is used for.

    Is it used for any other SaaS apps other than Microsoft, that could have their resources in these locations? 

    The IP Addresses, that are logged from these locations, are they familiar to you? 

     

    This isn't usual behavior from my experience, if you dont, like I said earlier, have worloads that could be located in these areas. 

     

    I suggest doing some more investigation on the IP addresses used, and also change the Password ( if it's not to much of a hassle for you ) 

     

    Kind Regards
    Oliwer 

oliwer_sundgren's avatar
oliwer_sundgren
Steel Contributor
Jan 07, 2020

Hello!JakobRohde 

 

That really depends on what resorces the service account is used for.

Is it used for any other SaaS apps other than Microsoft, that could have their resources in these locations? 

The IP Addresses, that are logged from these locations, are they familiar to you? 

 

This isn't usual behavior from my experience, if you dont, like I said earlier, have worloads that could be located in these areas. 

 

I suggest doing some more investigation on the IP addresses used, and also change the Password ( if it's not to much of a hassle for you ) 

 

Kind Regards
Oliwer