# User.Suspicious\_ (4)

<table data-full-width="true"><thead><tr><th width="447">Code</th><th width="190">Name</th><th>Description</th></tr></thead><tbody><tr><td>USER.SUSPICIOUS-LOGIN-WARNED.ATTEMPT</td><td>User - Suspicious Attempt Login Warned</td><td>This event occurs when a user logs in with multiple failed attempts.</td></tr><tr><td>USER.SUSPICIOUS-LOGIN-WARNED.IP</td><td>User - Suspicious IP Login Warned</td><td>This event occurs when a user logs in from a new IP address.</td></tr><tr><td>USER.SUSPICIOUS-LOGIN-WARNED.LOCATION</td><td>User - Suspicious Location Login Warned</td><td>This event occurs when a user logs in from a new location.</td></tr><tr><td>USER.SUSPICIOUS-LOGIN-WARNED.DEVICE</td><td>User - Suspicious Device Login Warned</td><td>This event occurs when a user logs in from a new device.</td></tr></tbody></table>