New Country Logins
Overview
New Country Logins highlights successful logins that come from countries not normally associated with a user or system.
What this feature does
It provides a signal that access may be unusual and should be reviewed.
Why it is useful
- It can reveal compromised accounts.
- It helps administrators validate unusual access.
- It supports security workflows when staff travel or use VPNs.
Who should read this?
RISE Admin, Security Officer, System Owner.
Where to find it
Rise Audit Pro → Security Dashboard and Auth Log.
How to use it
- Open Security Dashboard.
- Review new country login records.
- Open the related Auth Log event.
- Check user, IP, country, device, and time.
- Confirm with the user if needed.
Example workflow
A login appears from a country the user has never used before. The admin checks with the user and resets the password if the login is not recognized.
Screenshot
Screenshot required
Capture from: Rise Audit Pro → Security Dashboard → New Country Logins
Capture from: Rise Audit Pro → Security Dashboard → New Country Logins
Common mistakes
- Treating country data as perfect proof.
- Ignoring VPN and proxy behavior.
- Not combining country data with activity after login.
Related articles
- New Country Login Detection
- IP and Country Lookup
- Login Success Events
