Question Strange email - logged in 12 times?

Generally, this isn't something to concern yourself with. It's an automated report telling you that "we are watching you" because your login is doing something abnormal and that sort of thing could potentially be the result of attempts to hack the site. Considering what happened to the old site, we're somewhat sensitive to such things. IF you do a LOT of browsing on the site while on the move (say, for instance, that you visit the site while you commute to work via an hour light rail trip), you cross in and out of cell towers coverage quite often and each time you do, you are making a new network connection probably with a new IP address and thus a new login with the site. Even if its happening invisibly to you.

This IS, actually, somewhat risky to you... because those automatic hand offs from network to network can be co-opted and allow for hacking opportunities. And if you do enough of it within a 24 hr time frame, the site may automatically lock you out for a temporary ban while we verify your info... the email to you is to let you know that you're approaching this point (and you get a different mail if you actually get temp banned).

In that event, we recommend that you look at the ways you are using the site while in transit. The 'best' bet is to pull up a story and then switch yourself to offline while you read it. The story is still there, but you are no longer trying to sustain a login along the way.

Because, technically, this is part of our security system. A user engaging in dialogue in the forums to find out why something happened tells us that there is a concerned user on the other end of those alerts worried that they may be doing something wrong. An FAQ with the answers to how our security works is... one big step towards that security not existing at all.

I've actually gotten that email myself when I've been being aggressive in watching for hackers. So it's just the number of logins not changing ip's.

As I've announced I'm being real proactive on spammers and where they are attempting to register or login from. We have modules in place that are comparing emails, login names, ip addresses of everyone that logs in or registers. If you show up on these "black hole" list one time, you will be marked suspicious and we'll watch you closely. (even if it's actually a false positive.) If the person registering is a bot there are probably a few hundred if not thousand reports on the lists we check against. In that case new registrants will be refused. we will be notified and I add the ip address to our own blacklist and they will be faced with visiting Google rather than us.

It's not really a huge concern. Past experience suggests that most people will simply post a comment or forum post even if an existing thread on the subject is present. Even an FAQ is often bypassed ... unless you put it in between where the person experiences the problem and their means of asking the question. And that's not always feasible.