Google Account Recently Used Devices, I'm concerned!!

Forums › IT Pro and developers › Google Account Recently Used Devices, I'm concerned!!

quebec

852 posts

Ultimate Geek

#205567 17-Nov-2016 23:47

Couldn't find an appropriate Forum so posting here, hope someone pays attention.

While checking my recently used devices on my Google Account I noticed it was successfully signed in from Sydney Australia IP Address 54.153.142.138 which belongs to Amazon as per http://www.ip-tracker.org/locator/ip-lookup.php?ip=54.153.142.138

How is it possible? On the same day I did set up a new tablet around same time but that's it. Should I be concerned?

1 | 2

25 posts

Geek
Inactive user

#1673258 18-Nov-2016 00:33

It might be possible that there's already an Amazon app installed in your new Tablet and then it synced up with your google account as you said that you did set up a new tablet that day.

lNomNoml

1807 posts

Uber Geek

ID Verified

#1673259 18-Nov-2016 00:46

If you are concerned about security on your Google account, simply setup 2 step verification.

Otherwise judging by what you have told us, it was most likely an app that accessed your account automatically.

bigalow

566 posts

Ultimate Geek

#1673267 18-Nov-2016 01:28

change your password if concerned

might not be a Amazon app

some people do use Amazon hosting for good and evil

gzt

17104 posts

Uber Geek

Lifetime subscriber

#1673270 18-Nov-2016 04:59

What is the exact model of device you set up?

Also did it have that exact version of chrome on it at that time? Does the time match your use of the tablet exactly?

coffeebaron

6231 posts

Uber Geek

Trusted

Lifetime subscriber

#1673323 18-Nov-2016 07:58

Any other email account pulling in your Gmail?

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

spearsniper

133 posts

Master Geek

#1673364 18-Nov-2016 09:25

Definitely one of the AWS Sydney Public IP addresses. This is not Amazon.com the online merchant, but rather their public cloud arm of the business. Anyone can fire up a server here, and do what they like (at least until their account gets shut down).
Put on Multi Factor Authentication, and it should not be an issue. If you have a weak password, change it immediately.

quebec

852 posts

Ultimate Geek

#1673431 18-Nov-2016 10:48

gzt: What is the exact model of device you set up?

Also did it have that exact version of chrome on it at that time? Does the time match your use of the tablet exactly?

Samsung Tab S2 -SM T710, yes and I believe time matches.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

quebec

852 posts

Ultimate Geek

#1673433 18-Nov-2016 10:49

coffeebaron: Any other email account pulling in your Gmail?

quebec

852 posts

Ultimate Geek

#1673434 18-Nov-2016 10:50

lNomNoml:

If you are concerned about security on your Google account, simply setup 2 step verification.

Otherwise judging by what you have told us, it was most likely an app that accessed your account automatically.

I already have 2 step enabled and a strong password. if it was an app, how did it access my account without going through 2 step?

quebec

852 posts

Ultimate Geek

#1673450 18-Nov-2016 10:59

Cthom:

It might be possible that there's already an Amazon app installed in your new Tablet and then it synced up with your google account as you said that you did set up a new tablet that day.

No Amazon app installed

spearsniper

133 posts

Master Geek

#1673478 18-Nov-2016 11:12

Are you using a VPN? or VPN as a service?

If you are, it would makes sense that your login is recorded by google as the Public IP of the VPN service.

quebec

852 posts

Ultimate Geek

#1673495 18-Nov-2016 11:28

spearsniper:

Are you using a VPN? or VPN as a service?

If you are, it would makes sense that your login is recorded by google as the Public IP of the VPN service.

You're right. i think it was Hola as they use AWS. I installed it to try and see if Plus 7 app works. Thanks

How about this, is this a good idea, safe?

https://www.webdigi.co.uk/blog/2015/how-to-setup-your-own-private-secure-free-vpn-on-the-amazon-aws-cloud-in-10-minutes/

spearsniper

133 posts

Master Geek

#1673502 18-Nov-2016 11:35

quebec:

You're right. i think it was Hola as they use AWS. I installed it to try and see if Plus 7 app works. Thanks

How about this, is this a good idea, safe?

https://www.webdigi.co.uk/blog/2015/how-to-setup-your-own-private-secure-free-vpn-on-the-amazon-aws-cloud-in-10-minutes/

Running your own VPN is a good idea, provided you have the know-how to secure it properly. Otherwise your AWS instance will get owned in pretty quick time and become part of a botnet.
If it needs to be highly available, a bit more work is required.

quebec

852 posts

Ultimate Geek

#1673516 18-Nov-2016 11:50

Just noticed something, as per App Detective I installed hola on 12.11.16 at 11 pm in the night, wonder how accurate that it and what time zone Google shows on their page.

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#1673575 18-Nov-2016 13:35

Be some app that uses advertising is my guess. they do stuff in background.. or host graphic banners

like file manager

have you rooted and put on atleast adaway... problem solved with ads then.

or get real serious and put framework on and then modules debloated/lightning wall

1 | 2