Anyone else randomly get "Critical security alert for your linked Google Account"

[airborne]

I have more than one Google account and I pull the mail from the other accounts via Pop3 to one of the gmail accounts and every so often I get a legit email from google from one of those accounts "Critical security alert for your linked Google Account". Whenever I follow the link in the email and check the IP address of the device/app that supposedly maliciously accessed the account the IP address is picked up as a Google mail server.

I'm assuming this is a false positive?

This is the email:

Sign-in attempt was blocked

*******@gmail.com
Someone just used your password to try to sign in to your account from a non-Google app. Google blocked them, but you should check what happened. Review your account activity to make sure no one else has access.

 

[airborne]

For instance this is the latest so called malicious IP:
https://whatismyipaddress.com/ip/2a00:1450:4864:20::422

Details for 2a00:1450:4864:20::422
IP: 2a00:1450:4864:20::422
Expanded IP: 2a00:1450:4864:0020:0000:0000:0000:0422
Hostname: mail-wr1-x422.google.com
ASN: 15169
ISP: Google
Organization: Google
Services: Likely mail server
Assignment: Static IP
Continent: Europe
Country: Ireland

 

[Swa]

Yes it's google not agreeing with some of your settings. It ironically sometimes flags it's own servers as malicious attempts. Used to be an option somewhere that you can set it to a trusted device if I remember correctly.

 

[kianm]

They especially don't like POP/IMAP access if I'm not mistaken, I'm sure you had to explicitly enable it yourself

 

[Dairyfarmer]

Are you using a VPN by any chance?

 

[Swa]

Are you using a VPN by any chance?

Has nothing to do with VPN. This is one google account accessing another one.

 

[airborne]

They especially don't like POP/IMAP access if I'm not mistaken, I'm sure you had to explicitly enable it yourself

Yes you have to enable pop3 access and they warn you that it isn't secure.

Are you using a VPN by any chance?

No vpn, that would otherwise be a logical answer.

I do have a pop3 checker script running to force checking the other accounts at shorter intervals but that's a script running on my computer, it's not remote. It may have some affect but I doubt it, I've been running it for years.

 

[Spliffcat]

Google checking up on your granny, girlfriend, uncle and your next date. As well as your shopping list and your future.

 

[airborne]

Google checking up on your granny, girlfriend, uncle and your next date. As well as your shopping list and your future.

Google sounds like your mother?
;D

 

[Spliffcat]

That it is. Google does not exist on any of my devices.