Suspicious Login Notifications

419 views
Skip to first unread message

Randy Damewood

unread,
Apr 27, 2015, 4:31:53 PM4/27/15
to Hecctech, Google Apps Group
Just starting this weekend I have recieved 3 suspusious login attempt notification.

Below is the notice

Have you all been getting some of these?

If so, what do you do about it. 

All I do is check the account and so far there has not been a match on the login  time so I have not worried about it.

This is to inform you that Google has detected a suspicious login for username user in your domain k12coffee.net, on Monday, April 27, 2015 at 2:49:42 PM Central Daylight Time. The details are: 

User: username
IP from which the login attempt was detected: 5.135.152.108
Location: Dubai - United Arab Emirates
Time: Monday, April 27, 2015 at 2:49:42 PM Central Daylight Time
Service: 
Domain from where the login was detected (rDNS): ns317996.ip-5-135-152.eu.

--
Randy Damewood
Director of Technology
Coffee County Schools

Wes Bartlett

unread,
Apr 28, 2015, 8:41:18 AM4/28/15
to Randy Damewood, k12ap...@googlegroups.com
Randy - 

I typically see this type of message when kids or staff go on vacation and are logging in from somewhere geographically different than there normal login area.  If the user in question is in school I would reset their password as a precaution as the account might have been compromised.

Wes

Wes Bartlett
Technology Director
Lake Local Schools

--
--
You received this message because you are subscribed to the Google
Groups "Google Apps K12 Technical Forum" group.
To post to this group, send email to k12ap...@googlegroups.com
To unsubscribe from this group, send email to
k12appstech...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/k12appstech?hl=en?hl=en

---
You received this message because you are subscribed to the Google Groups "Google Apps K12 Technical Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to k12appstech...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

dbroers...@dmcsemail.org

unread,
May 1, 2015, 9:23:41 AM5/1/15
to k12ap...@googlegroups.com, hecc...@hecc.k12.in.us
I actually called Google on this because I set up our apps domain in November and by January had a student with five of these emails.  This can happen they told me when they are signed in on many devices i.e. phones, ipods, ipads, computers, etc.  It can also happen, as Wes said, when they go on vacation.  I just verified with the student what they were doing and everything seemed okay.

Dan

Melissa Benson

unread,
May 1, 2015, 9:25:06 AM5/1/15
to dbroers...@dmcsemail.org, Google Apps K12 Technical Forum, Hecctech
Does everyone else just get a ton of these? I don't pay attention anymore..and a lot of the attempts are from the same place. I wonder if any third party apps connected to accounts will bring up false positives?

--
--
You received this message because you are subscribed to the Google
Groups "Google Apps K12 Technical Forum" group.
To post to this group, send email to k12ap...@googlegroups.com
To unsubscribe from this group, send email to
k12appstech...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/k12appstech?hl=en?hl=en

---
You received this message because you are subscribed to the Google Groups "Google Apps K12 Technical Forum" group.
To unsubscribe from this group and stop receiving emails from it, send an email to k12appstech...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.



--
Melissa Benson
@mebenson
mebe...@gmail.com
www.melbenson.com
Reply all
Reply to author
Forward
0 new messages