Hi @RWatson626 ,     I'd say you should be moderately concerned. If the Peer IP is unknown, from an odd location, or part of multiple failed attempts, it’s worth investigating further as a potential security incident. I'd recommend to: Block the IP: As a precaution, block the unknown Peer IP in your Meraki firewall or VPN settings. It’s low-effort and prevents further attempts from that source. Monitor Logs: Watch for more unexpected IPs or failed logins over the next day or two. Patterns matter more than a single event.   Is it possible that one of your users mistyped their credentials, their account is locked, or their access has expired and they were logging in from a custom location? ... View more