We are seeing false positive risk detections for atypical travel due to how we have some things configured in our environment. According to the risk documentation, adding trusted IPs should help reduce false positives. About 18 hours ago we added some /32 IP ranges as trusted, however we are still seeing detections associated with these IPs. In which scenarios does risk detection use these IPs, and is it possible the changes haven't taken effect yet?
