-
Type:
Bug
-
Resolution: Won't Fix
-
Priority:
Low
-
Component/s: Security - BANS
-
None
-
1
-
Minor
Issue Summary
Customers utilizing a Proxy/VPN Service are receiving notifications from Atlassian that their connection is unusual, however, the Location returned is incorrect
Steps to Reproduce
- Connect to a Proxy/VPN Service (like zScaler)
- Access the Atlassian Cloud Environment
Expected Results
Location shown in email accurately reflects where the user is connected through
Actual Results
User receives a notification indicating that there is unusual activity with their account.
Email received
Hello, We noticed some unusual login activity with your Atlassian account. Email <EMAIL ADDRESS> Time Thursday, November xx, 2019 hh:mm AM (America/New_York) Location Pleasant Prairie, Wisconsin, United States Device Unknown Browser Chrome IP address 165.225.x.xx3 To make sure your account is secure, let us know if this was you.
If the IP Address is checked/looked up using an online tool, the location is correct:
| => curl https://ipapi.co/165.225.x.xx3/json { "ip": "165.225.x.xx3", "city": "Chicago", "region": "Illinois", "region_code": "IL", "country": "US", "country_name": "United States", "continent_code": "NA", "in_eu": false, "postal": "60602", "latitude": 41.8483, "longitude": -87.6517, "timezone": "America/Chicago", "utc_offset": "-0600", "country_calling_code": "+1", "currency": "USD", "languages": "en-US,es-US,haw,fr", "asn": "AS22616", "org": "ZSCALER, INC." }
Workaround
If the IP Returned in this notification is recognized, acknowledge the message by clicking "This was me" in the notification.