Impossible Travel - Sign-ins from Geographically Impossible Locations

Rudra Verma@Rudraverma

•updated Feb 24, 2026•18•1•161

This rule detects 'impossible travel' scenarios where a user successfully signs in from two geographically distant locations within an implausibly short time frame (less than 120 minutes). It specifically looks for sign-ins where the country of origin changes between consecutive successful login events for the same user.