1

This question already has an answer here:

I got two emails this week from Gmail, claiming to have prevented "suspicious sign-in attempts" to my account. These emails came from the address: signins.activityalerts@gmail.com (using the name "Activity Alerts"), and were located in my inbox (not spam, where faked emails should go).

Image of one of the emails:

email

Text:

[My name redacted],

In the past 48 hours we have detected 6 failed sign-in attempts to your Google Account, [My email redacted]. We have prevented further sign-in attempts from the responsible address in case this was a hijacker trying to access your account. Please review the details of these attempts:

IP Address: [Redacted]

Location: [Redacted]

ISP: [Redacted]

Organization: [Redacted]

If you do not recognize this address, someone else might be trying to access your account. These sign-in attempts were unsuccessful, so no action is required. However, you may wish to reset your password for greater security. Find out how at http://support.google.com/accounts?p=reset_pw

If this was you, you may safely ignore this email. The address will be allowed to sign in again within 24 hours.

Sincerely,

The Google Accounts Team

Are these legitimate? I've never seen the email address before, but the only link on it (to learn how to reset my password) goes where it says and doesn't ask for any login information. If it is legitimate, is my account safe or compromised?

marked as duplicate by ale, Vidar S. Ramdal, Alex, jonsca Nov 18 '14 at 5:33

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
    I believe it's legitimate. There may have been an attempt, but doesn't seem like they got in. There's no harm in changing your password. (You should strongly consider using multi-factor auth.) – ale Nov 17 '14 at 4:04
  • Thanks for making the edit. It doesn't really differentiate your issue from the one at the duplicate, though. – jonsca Nov 19 '14 at 0:48
1

As far as I know, yes, this is legitimate. I've had a few local business clients that have gotten these recently. Seems to require frequent access attempts from a unique but different IP address. And I think these emails only started being sent fairly recently - never seen them before this month.

Not the answer you're looking for? Browse other questions tagged or ask your own question.