1. Investigating a Suspicious Login Attempt
Security AnalystBackground
An alert was triggered for a login attempt from an unrecognized IP address on a corporate portal.
Problem
The analyst needs to quickly determine the physical location, ISP, and security risk profile of the IP address 198.51.100.42.
How to use
Enter 198.51.100.42 in the IP Address field, enable 'Include Network Details', and check 'Include Security Assessment'.
IP Address: 198.51.100.42, Include Network Details: True, Include Security Assessment: TrueOutcome
A detailed card report is generated, showing the IP is hosted on a known VPN provider in a different country, flagging it as a potential security risk.