EvilZone

Hacking and Security => Hacking and Security => : Axon December 24, 2012, 10:51:01 PM

: Suspicious sign in prevented
: Axon December 24, 2012, 10:51:01 PM

Someone recently tried to use an application to sign in to your Google Account - 999******@gmail.com. We prevented the sign-in attempt in case this was a hijacker trying to access your account. Please review the details of the sign-in attempt:

Monday, December 24, 2012 10:33:15 AM UTC
IP Address: 174.127.126.250
Location: Los Angeles, CA, USA

I got this email at 1:33 pm local time, what do you think guys.

: Re: Suspicious sign in prevented
: geXXos December 24, 2012, 11:10:33 PM

hmm,yes i had the same in my account but from a Chinese IP
I just changed pass and some gmail secure steps.Now every time someone to login from  different IP i get an sms.

: Re: Suspicious sign in prevented
: Axon December 24, 2012, 11:13:21 PM

: geXXos  December 24, 2012, 11:10:33 PM

hmm,yes i had the same in my account but from a Chinese IP
I just changed pass and some gmail secure steps.Now every time someone to login from  different IP i get an sms.

That IP belongs to this website: https://www.midphase.com/

: Re: Suspicious sign in prevented
: techb December 25, 2012, 01:52:55 AM

: Axon  December 24, 2012, 11:13:21 PM

That IP belongs to this website: https://www.midphase.com/ (https://www.midphase.com/)

I wonder if they realize this kinda info is out there.

: Re: Suspicious sign in prevented
: iTpHo3NiX December 25, 2012, 09:51:13 AM

Looks like someone has a shell on one of their hosted sites and using it to bruteforce emails. I would do the norm, reset passwords and the likes as well as set up alerts.

: Re: Suspicious sign in prevented
: Pak_Track December 25, 2012, 09:57:07 AM

ive gotten this when im signing in through VPNs
were you browsing midphase.com when you were using Gmail?

: Re: Suspicious sign in prevented
: Axon December 25, 2012, 10:57:35 AM

: Pak_Track  December 25, 2012, 09:57:07 AM

ive gotten this when im signing in through VPNs
were you browsing midphase.com when you were using Gmail?

I did't know about this website up until I received this alert.

: Re: Suspicious sign in prevented
: Pak_Track December 25, 2012, 11:53:37 AM

i think that guy lives somewhere in milleville
http://i45.tinypic.com/5005zd.png

: Re: Suspicious sign in prevented
: Axon December 25, 2012, 01:20:51 PM

: Pak_Track  December 25, 2012, 11:53:37 AM

i think that guy lives somewhere in milleville
http://i45.tinypic.com/5005zd.png

Geo location website are not quite accurate as you would think.

: Re: Suspicious sign in prevented
: p_2001 December 25, 2012, 01:57:24 PM

Make use of SMS verification on gmail.. That way you cannot access until code is entered..

: Re: Suspicious sign in prevented
: Axon December 25, 2012, 02:12:29 PM

: p_2001  December 25, 2012, 01:57:24 PM

Make use of SMS verification on gmail.. That way you cannot access until code is entered..

Thanks for the tip, didn't think of this :)
+1

: Re: Suspicious sign in prevented
: p_2001 December 25, 2012, 03:57:32 PM

: Axon  December 25, 2012, 02:12:29 PM

Thanks for the tip, didn't think of this :)
+1

you are welcome :). Btw add a secondary phone number too.. In case you lose yours.

: Re: Suspicious sign in prevented
: eliaou December 27, 2012, 09:44:22 PM

i got the same thing from a chineese ip too..changed my pass and everything

: Re: Suspicious sign in prevented
: kenjoe41 December 28, 2012, 01:37:41 PM

Got this message but on FB it was also from somewhere in california. Changed pass and logout all other acounts and was gud to go. Also got it wen usin a vpn once.

: Re: Suspicious sign in prevented
: proxx December 28, 2012, 01:46:55 PM

May I assume you ppl used the same password for different accounts ?
Thus this being the reason why one shouldnt ever do that?

:D