We sometimes see incorrect IP geolocation's which cause false positive ITDR alerts, which can cause a hassle as we can't exclude specific IP addresses from the ITDR alert without excluding the country (which is incorrect and causes unnecessary risk).

A button to mark an IP as an incorrect location with an option to exclude this IP from further alerts would help reduce the noise in our SOC.