Ive had issues with SOMEONE MAY HAVE LOGGED in flag for awhile, even when things were good Id get that sometimes. Security logs dont show any new logins from other IPs or anything. Let me know if you ever figure that out. My theory is that flag is usually related to the creation of the accounts, or if the account is somehow linked to other accounts that get flagged, and its flagged by association