Frequently Asked Question

GEN Email Security Advisory - Successful Connections

Last Updated 13 hours ago

GEN Email Security Advisory Service

GEN is committed to protecting your email security, and our Security Advisory Service automatically monitors successful logins to your email account and alerts you to connections originating from IP addresses that are not known to us as standard UK ISPs or mobile providers.

This service helps you quickly identify potentially suspicious access locations, especially those from outside the UK or from high-risk networks, and you won't find this from anyone else.

Understanding the Color Coding

The IP addresses presented in your security advisory email are color-coded to help you assess the risk level:

■ Grey : UK-based IP addresses from unknown or unrecognised networks. These are typically legitimate connections from smaller or non-standard UK providers.

■ Orange : IP addresses from outside the United Kingdom. If you are currently travelling or accessing your email from abroad, these connections are likely legitimate. If you are in the UK, these connections warrant immediate investigation.

■ Red : High-risk IP addresses. These often belong to VPNs, hosting providers, data centers, or cloud services. Malicious actors frequently use these types of networks to mask their location. If you are not using a VPN or cloud service to access your email, these connections are highly suspicious.

If you are accessing your email from outside the UK, you should expect to see Orange or Red classifications, depending on the network you are using. Please review these carefully to ensure they match your travel or remote access activity.

IP Networks

If you have a mobile device with your email configured, then this WILL clock up IP addresses because when you're not in the office or at home it will be using your mobile providers network to connect and login. We do exclude IPs from the majority of knowing UK mobile networks so it is still worth checking.

If you use Wi-Fi hotspots (and we strongly recommend you do not) then these too will appear in these reports, again, most common UK ISP's are excluded automatically so these will be the uncommon or unknown ones.

If you use a VPN for whatever reason then this can cause out of country IPs to appear on the report so please be aware.

IF you use your email on a fixed PC either at home or at the office, then additional IPs are a significant red flag and should be reported immediately.

The Importance of Strong Passwords

Your email account is a critical gateway to your digital life. If someone else gains access to your email, they can:

Read all your private correspondence.
Reset passwords for other online services (banking, social media, shopping).
Impersonate you to colleagues, friends, or family, leading to financial loss or reputational damage.

It is vital that you maintain a strong, unique password for your email account, which should be long, complex, and not used anywhere else. Our Password Toolkit allows you to quickly generate STRONG passwords.

What to do if you see suspicious activity

1. Investigate the IP: You can look up the IP address details (such as the country and ISP) using our free DNS Toolkit.

2. Immediate Action (Direct GEN Customers): If you are confident that these IP addresses are not yours (e.g., seeing overseas connections while in the UK), you must:

Urgently raise a ticket at the HelpDesk (support.gen.uk).
Immediately change your email password to a new, strong, unique password.

3. Immediate Action (Indirect GEN Customers): If you receive GEN services through a third-party provider or IT department, you should contact your IT department or Incident Response team as directed by your organisation's security policy.