It happens anytime it detects that your IP changed (if you don't have a security token). It doesn't necessarily mean anyone is trying to hack into your account.