Suspicious activity

VM administration activities committed from Tor IP



Orca detected that API calls to change virtual machine state were made by the principal - {AzurePrincipal} from Tor IP, the operation was successful. This action may indicate of a presence of an unauthorized actor in the cloud environment, since the API calls were made from a Tor IP.