Methods and systems for detecting an electronic intrusion

1. A method comprising:

receiving a notification, over a network, from a first application server that is hosting a first electronic service that is hosting a first user account, the notification reporting a detection of a user activity associated with the first account, the first application server being included in a plurality of application servers, the first electronic service being included in a plurality of electronic services, the first user account being included in a plurality of user accounts, the plurality of application servers respectively corresponds to the plurality of electronic services that respectively corresponding to the plurality of user accounts, the plurality of user accounts being respectively monitored for the user activity;

identifying the notification reporting the detection of the user activity as a possible electronic intrusion into the first user account;

determining a location of a first user corresponding to the first user account;

identifying whether to communicate a request to the first user for instructions to respond to the notification, based at least in part on the location of the first user;

receiving a response from the first user, the response including instructions to block access to the first user account at the first application server; and

communicating command information to the first application server based on the response, the command information including a command to block access to the first user account.

2. The method of claim 1 , further comprising:

communicating the request, over the network, to the first user for the instructions to respond to the notification; and

setting a timeout that is associated with the communicating the request.

3. The method of claim 2 , further comprising detecting an expiration of the timeout that is associated with the communication of the request to the first user for instructions to respond to the notification.

4. The method of claim 3 , further comprising communicating a command to the first application server to block access to the first user account that is associated with the first user, the communicating the command being responsive to detecting the expiration of the timeout.

5. The method of claim 1 , further comprising:

receiving configuration information, over the network, wherein the configuration information identifies processing to respond to the notification and wherein the processing to respond to the notification is selected from a group including blocking access to the first user account, permitting access to the first user account, and communicating a request for instructions to respond to the notification.

6. The method of claim 1 , further comprising:

receiving a status, over the network, from the first user, wherein the status indicates the first user is away.

7. A system comprising:

a communication module that is executable by at least one processor to receive a notification, over a network, from a first application server that is hosting a first electronic service that is hosting a first user account, the notification reports a detection of a user activity, the first application server is included in a plurality of application servers, the first electronic service is included in a plurality of electronic services, the first user account is included in a plurality of user accounts, the plurality of application servers respectively corresponds to the plurality of electronic services that respectively corresponds to the plurality of user accounts, the plurality of user accounts are respectively monitored for user activity;

a location status module that is executable by at least one processor to determine a location of a first user corresponding to the first user account;

a processing module comprising at least one processor and configured to identify the notification that reports the detection of the user activity as a possible electronic intrusion into the first user account and identify whether to communicate a request to the first user for instructions to respond to the notification, based at least in part on the location of the first user; and

the communication module is further to

receive a response from the first user, the response includes a request to block access to first account at the first application server, and

communicate command information to the first application server based on the response, the command information includes a command to block access to the first user account.

8. The system of claim 7 , wherein the communication module communicates the request, over the network, to the first user for instructions to respond to the notification and wherein the processing module is to set a timeout that is associated with the communication of the request.

9. The system of claim 8 , wherein the communication module detects an expiration of the timeout that is associated with the communication of the request to request instructions.

10. The system of claim 9 , wherein the communication module communicates a command to the first application server to block access to the first user account responsive to detecting the expiration of the timeout that is associated with the communication of the request.

11. The system of claim 7 , wherein the communication module receives configuration information, over the network, wherein the configuration information identifies processing to respond to the notification and wherein the processing to respond to the notification is selected from a group consisting of blocking access to the first user account, permitting access to the first user account, and communicating a request for instructions to the first user.

12. The system of claim 7 , further wherein the communication module receives a status, over the network, from the first user, wherein the status indicates the first user is away.

13. A non-transitory machine-readable medium storing instructions that, when executed by a machine, cause the machine to perform operations comprising:

receiving a notification, over a network, from a first application server that hosts a first electronic service that hosts a first user account, the notification reports a detection of a user activity associated with the first user account, the first application server is included in a plurality of application servers, the first electronic service is included in a plurality of electronic services, the first user account is included in a plurality of user accounts, the plurality of application servers respectively corresponds to the plurality of electronic services that respectively corresponds to the plurality of user accounts, the plurality of user accounts is respectively monitored for the user activity;

identifying the notification that reports the detection of the user activity associated with the first user account as a possible electronic intrusion into the first user account;

determining a location of a first user corresponding to the first user account;

identifying whether to communicate a request to the first user for instructions to respond to the notification, based at least in part on the location of the first user;

receiving a response from the first user, the response including instructions to block access to the first user account at the first application server; and

communicating command information to the first application server based on the response, the command information including a command to block access to the first user account.

14. A system comprising:

a communication module that is executable by at least one processor to receive a notification, over a network, from a first application server that is hosting a first electronic service that hosts a first user account, the notification reports a detection of a user activity associated with the first user account, the first application server is included in a plurality of application servers, the first electronic service is included in a plurality of electronic services, the first user account is included in a plurality of user accounts, the plurality of application servers respectively corresponds to the plurality of electronic services that respectively corresponds to the plurality of user accounts, the plurality of user accounts are respectively monitored for the user activity;

a means for determining a location of a first user corresponding to the first user account;

a means for identifying the notification that reports the detection of the first user activity associated with the first user account as a possible electronic intrusion into the first account and identifying whether to communicate a request to the first user for instructions to respond to the notification, based at least in part on the location of the first user; and

the communication module further to

receive a response from the first user, the response includes a request to block access to first account at the first application server, and

communicate command information to the first application server based on the response, the command information includes a command to block access to the first user account.