← Customer 14024100

#37422 2-factor continuing

Customer Reply Created Mar 3, 2026, 4:55 PM
System (internal) Mar 3, 2026, 4:55 PM
Created from Lead: https://artichoke.shield.syncromsp.com/leads/40227324/convert
Check-in (internal) Mar 3, 2026, 4:55 PM
2-factor is continuing to happen randomly to random people. It is happening after folks have restarted handfuls of times too.

Please advise.
Susan Cloninger
Office Operations Manager
Human Resource Council
1801 S. Higgins
Missoula, MT 59801
(406) 728-3710

CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged information. Any unauthorized review,
copying, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original message. Thank you.
Artichoke Support - Peet (internal) Mar 3, 2026, 5:54 PM
Could you let me know a username/date and time/location for any one of these? e.g. "[email protected]/03.01.26-around 3pm/Higgins Office

Cheers.Peet
customer-reply (internal) Mar 3, 2026, 5:59 PM
[email protected], 3/3/26 around 10:00ish/1801 S. Higgins

[email protected], 3/2/26, 8:30ish/1833 S. Higgins

Susan Cloninger
Office Operations Manager
Human Resource Council
1801 S. Higgins
Missoula, MT 59801
(406) 728-3710

CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged information. Any unauthorized review,
copying, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original message. Thank you.

From: Artichoke Support - Peet <[email protected]>
Date: Tuesday, March 3, 2026 at 10:54 AM
To: Susan Cloninger <[email protected]>
Subject: 2-factor continuing (message id: 107149147)
Artichoke Support - Peet (internal) Mar 3, 2026, 6:32 PM
Added Centurylink's ip (65.102.121.217) to your trusted sites. That should set the secure login bypass for you.

I'm at a loss as to why traffic is randomly being asighed to that outgoing ip.

Cheers.Peet
customer-reply (internal) Mar 3, 2026, 7:53 PM
Did Spectrum perhaps go down and it has not reverted back to that after failover for Centurylink? Can we see what we are connected/ing to currently?

Susan Cloninger
Office Operations Manager
Human Resource Council
1801 S. Higgins
Missoula, MT 59801
(406) 728-3710

CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged information. Any unauthorized review,
copying, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original message. Thank you.

From: Artichoke Support - Peet <[email protected]>
Date: Tuesday, March 3, 2026 at 11:32 AM
To: Susan Cloninger <[email protected]>
Subject: 2-factor continuing (message id: 107149147)
Artichoke Support - Peet (internal) Mar 3, 2026, 9:07 PM
You’re definitely on charter right now. The issue is that one out of every few hundred authentications seem to go the DSL. I have no idea and it wasn’t until you failed over to theDSL that this started to happen so shrug. Not a thing that’s worth worrying about because it should be gone.
KnockWood