Forum Discussion
Microsoft IPs in audit logs
I'm investigating an incident and noticed that in many instances throughout the audit log, there is a Microsoft IP address associated with the action (in this case the action is "FileAccessed"). I'd ...
I wonder the same, the Sharepoint audit logs show FileAccessed records from
52.108.46.6
52.108.195.22
52.108.68.26
20.29.125.50
These IPs all belong to Microsoft in different regions (Japan, Singapore, US), but how is an auditor supposed to know/verify which of these Microsoft owned IPs are supposed to access SharePoint files.
Some clarity from Microsoft would be appreciated.
52.108.46.6
52.108.195.22
52.108.68.26
20.29.125.50
These IPs all belong to Microsoft in different regions (Japan, Singapore, US), but how is an auditor supposed to know/verify which of these Microsoft owned IPs are supposed to access SharePoint files.
Some clarity from Microsoft would be appreciated.