---
title: User has changed country
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Datadog Security > OOTB Rules > User has changed country
---

# User has changed country
 
## Goal{% #goal %}

Detect whenever a user uses an application from a new country.

## Strategy{% #strategy %}

This rule monitors the user's HTTP Client IP location to detect when the application is accessed from a country that has not been seen before.

## Triage & response{% #triage--response %}

Investigate user with id `{{@usr.id}}` for unusual activity (account theft…).