{"id":12255,"date":"2025-07-17T11:00:51","date_gmt":"2025-07-17T02:00:51","guid":{"rendered":"https:\/\/m365jp.net\/?p=12255"},"modified":"2025-07-17T11:01:08","modified_gmt":"2025-07-17T02:01:08","slug":"servicerestored-mo1090779-microsoft-365-suite-some-admins-may-see-incorrect-ip-addresses-logged-in-their-safe-links-reports-within-the-eac-and-microsoft-defender-xdr-2","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-07-17-servicerestored-mo1090779-microsoft-365-suite-some-admins-may-see-incorrect-ip-addresses-logged-in-their-safe-links-reports-within-the-eac-and-microsoft-defender-xdr-2","title":{"rendered":"[serviceRestored] MO1090779 | Microsoft 365 suite | Some admins may see incorrect IP addresses logged in their Safe Links reports within the EAC and Microsoft Defender XDR"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MO1090779 | Microsoft 365 suite | Some admins may see incorrect IP addresses logged in their Safe Links reports within the EAC and Microsoft Defender XDR<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Status<\/th>\n<td class=\"bad\">serviceRestored<\/td>\n<\/tr>\n<tr>\n<th>Classification<\/th>\n<td>advisory<\/td>\n<\/tr>\n<tr>\n<th>User Impact<\/th>\n<td>Admins may have seen incorrect IP addresses logged in their Safe Links reports within the EAC and Microsoft Defender XDR<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>07\/17\/2025 01:00:41<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>05\/13\/2025 12:00:00<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>07\/16\/2025 00:00:00<\/td>\n<\/tr>\n<tr>\n<th>Latest Message<\/th>\n<td>Title: Some admins may see incorrect IP addresses logged in their Safe Links reports within the EAC and Microsoft Defender XDR<\/p>\n<p>  User impact: Admins may have seen incorrect IP addresses logged in their Safe Links reports within the EAC and Microsoft Defender XDR.<\/p>\n<p>  More info: This impact may have manifested for URL protection reports in the Microsoft Defender XDR portal, the Exchange admin center (EAC), and in any cmdlets referencing Safe Links URL click data.<\/p>\n<p>  The incorrect IP addresses admins may have seen in these logs aren&#8217;t associated with any other Microsoft 365 users or organizations.<\/p>\n<p>  Final status: We\u2019ve completed deploying our fix which has reached desirable saturation levels and based off our logs, we can see that the affected environments are healthy again, thus the issue has been remediated.<\/p>\n<p>  Scope of impact: Some admins viewing Safe Links report details within the EAC and Microsoft Defender XDR portal may have been impacted.<\/p>\n<p>  Start time: Tuesday, May 13, 2025, at 12:00 PM UTC<\/p>\n<p>  End time: Wednesday, July 16, 2025, at 12:00 AM UTC<\/p>\n<p>  Root cause: A recent service configuration change introduced as part of an effort to optimize the service to improve the flow of the involved API calls was resulting in impact.<\/p>\n<p>  Next steps:<br \/>  -We\u2019re investigating the offending configuration change to better understand how it caused impact to Safe Links reports within Exchange Online and Microsoft Defender so that we can aim to better prevent similar issues in the future.<\/p>\n<p>  This is the final update for the event.<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\u30bf\u30a4\u30c8\u30eb: \u4e00\u90e8\u306e\u7ba1\u7406\u8005\u306b\u306f\u3001EAC \u3068 Microsoft Defender XDR \u5185\u306e\u5b89\u5168\u306a\u30ea\u30f3\u30af \u30ec\u30dd\u30fc\u30c8\u306b\u6b63\u3057\u304f\u306a\u3044 IP \u30a2\u30c9\u30ec\u30b9\u304c\u8a18\u9332\u3055\u308c\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059<\/p>\n<p>  \u30e6\u30fc\u30b6\u30fc\u3078\u306e\u5f71\u97ff: \u7ba1\u7406\u8005\u306f\u3001EAC \u304a\u3088\u3073 Microsoft Defender XDR \u5185\u306e\u5b89\u5168\u306a\u30ea\u30f3\u30af \u30ec\u30dd\u30fc\u30c8\u306b\u6b63\u3057\u304f\u306a\u3044 IP \u30a2\u30c9\u30ec\u30b9\u304c\u8a18\u9332\u3055\u308c\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>  \u8a73\u7d30: \u3053\u306e\u5f71\u97ff\u306f\u3001Microsoft Defender XDR \u30dd\u30fc\u30bf\u30eb\u3001Exchange \u7ba1\u7406\u30bb\u30f3\u30bf\u30fc (EAC)\u3001\u304a\u3088\u3073\u5b89\u5168\u306a\u30ea\u30f3\u30af\u306e URL \u30af\u30ea\u30c3\u30af \u30c7\u30fc\u30bf\u3092\u53c2\u7167\u3059\u308b\u30b3\u30de\u30f3\u30c9\u30ec\u30c3\u30c8\u306e URL \u4fdd\u8b77\u30ec\u30dd\u30fc\u30c8\u306b\u73fe\u308c\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>  \u7ba1\u7406\u8005\u304c\u3053\u308c\u3089\u306e\u30ed\u30b0\u306b\u8868\u793a\u3057\u305f\u53ef\u80fd\u6027\u306e\u3042\u308b\u6b63\u3057\u304f\u306a\u3044 IP \u30a2\u30c9\u30ec\u30b9\u306f\u3001\u4ed6\u306e Microsoft 365 \u30e6\u30fc\u30b6\u30fc\u307e\u305f\u306f\u7d44\u7e54\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u305b\u3093\u3002<\/p>\n<p>  \u6700\u7d42\u30b9\u30c6\u30fc\u30bf\u30b9: \u671b\u307e\u3057\u3044\u98fd\u548c\u30ec\u30d9\u30eb\u306b\u9054\u3057\u305f\u4fee\u6b63\u30d7\u30ed\u30b0\u30e9\u30e0\u306e\u30c7\u30d7\u30ed\u30a4\u304c\u5b8c\u4e86\u3057\u3001\u30ed\u30b0\u306b\u57fa\u3065\u3044\u3066\u3001\u5f71\u97ff\u3092\u53d7\u3051\u305f\u74b0\u5883\u304c\u518d\u3073\u6b63\u5e38\u306b\u306a\u3063\u305f\u305f\u3081\u3001\u554f\u984c\u304c\u4fee\u5fa9\u3055\u308c\u305f\u3053\u3068\u304c\u308f\u304b\u308a\u307e\u3059\u3002<\/p>\n<p>  \u5f71\u97ff\u7bc4\u56f2: EAC \u304a\u3088\u3073 Microsoft Defender XDR \u30dd\u30fc\u30bf\u30eb\u5185\u3067\u5b89\u5168\u306a\u30ea\u30f3\u30af \u30ec\u30dd\u30fc\u30c8\u306e\u8a73\u7d30\u3092\u8868\u793a\u3057\u3066\u3044\u308b\u4e00\u90e8\u306e\u7ba1\u7406\u8005\u304c\u5f71\u97ff\u3092\u53d7\u3051\u305f\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>  \u958b\u59cb\u6642\u9593: 2025 \u5e74 5 \u6708 13 \u65e5 (\u706b) 12:00 PM UTC<\/p>\n<p>  \u7d42\u4e86\u6642\u523b: 2025 \u5e74 7 \u6708 16 \u65e5 (\u6c34) 12:00 AM UTC<\/p>\n<p>  \u6839\u672c\u539f\u56e0: \u95a2\u9023\u3059\u308b API \u547c\u3073\u51fa\u3057\u306e\u30d5\u30ed\u30fc\u3092\u6539\u5584\u3059\u308b\u305f\u3081\u306b\u30b5\u30fc\u30d3\u30b9\u3092\u6700\u9069\u5316\u3059\u308b\u53d6\u308a\u7d44\u307f\u306e\u4e00\u74b0\u3068\u3057\u3066\u5c0e\u5165\u3055\u308c\u305f\u6700\u8fd1\u306e\u30b5\u30fc\u30d3\u30b9\u69cb\u6210\u306e\u5909\u66f4\u304c\u3001\u5f71\u97ff\u3092\u3082\u305f\u3089\u3057\u3066\u3044\u307e\u3057\u305f\u3002<\/p>\n<p>  \u6b21\u306e\u30b9\u30c6\u30c3\u30d7:<br \/>  &#8211; \u554f\u984c\u306e\u3042\u308b\u69cb\u6210\u5909\u66f4\u3092\u8abf\u67fb\u3057\u3066\u3001Exchange Online\u3068Microsoft Defender\u5185\u306e\u5b89\u5168\u306a\u30ea\u30f3\u30af \u30ec\u30dd\u30fc\u30c8\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u305f\u304b\u3092\u3088\u308a\u3088\u304f\u7406\u89e3\u3057\u3001\u4eca\u5f8c\u540c\u69d8\u306e\u554f\u984c\u3092\u3088\u308a\u9069\u5207\u306b\u9632\u6b62\u3059\u308b\u3053\u3068\u3092\u76ee\u6307\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>  \u3053\u308c\u306f\u30a4\u30d9\u30f3\u30c8\u306e\u6700\u7d42\u66f4\u65b0\u3067\u3059\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MO1090779 | Microsoft 365 suite | Some admins may see incorrect IP addresses logged in their Safe Links report [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-12255","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/12255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=12255"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/12255\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=12255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=12255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=12255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}