blockchain.info email

[southafricadude]

On the really rare occasion that I log back into my old blockchain.info account, I always get an email asking me to authorize the login by clicking the link. As far as I know, the only way I am usually able to login is with my Identifier and my password. Once I do that, I get an email, then I click the link to verify my browser and IP, and I am in.

So I just got an email like I usually do, but I was not trying to access the account. The IP and location says "IP Address: 92.38.78.23 (Czech Republic)", and browser is Iternet Explorer FFS, so definitely not me, not even the same country.

So how could someone have my Identifier and password if I am the only one that has that? I do also have 2 factor authentication, and a secondary password for sending out, but still, its very odd. The email says if I did not try to login, maybe I was the victim of a phishing attack. No, very very very unlikely...and even then, it would involve me attempting to login which I have not done for ages.

The only thing I have done recently at all that has anything to do with blockchain.info, is update the android apps for wallet and merchant that I have on my phone. Does anyone have any ideas? I am not really worried since I dont keep any coin there, but I still keep the wallet open because it is a public address I have used for years.

[pedrog]

Did you set up an easy to remember alias for your account?

[franky1]

sometimes its not a hack attempt. sometimes the email you received could be the Phish itself.

i hope you didnt click on the link and log in using the link from that email

[-XXIII-]

On the really rare occasion that I log back into my old blockchain.info account, I always get an email asking me to authorize the login by clicking the link. As far as I know, the only way I am usually able to login is with my Identifier and my password. Once I do that, I get an email, then I click the link to verify my browser and IP, and I am in.

So I just got an email like I usually do, but I was not trying to access the account. The IP and location says "IP Address: 92.38.78.23 (Czech Republic)", and browser is Iternet Explorer FFS, so definitely not me, not even the same country.

So how could someone have my Identifier and password if I am the only one that has that? I do also have 2 factor authentication, and a secondary password for sending out, but still, its very odd. The email says if I did not try to login, maybe I was the victim of a phishing attack. No, very very very unlikely...and even then, it would involve me attempting to login which I have not done for ages.

The only thing I have done recently at all that has anything to do with blockchain.info, is update the android apps for wallet and merchant that I have on my phone. Does anyone have any ideas? I am not really worried since I dont keep any coin there, but I still keep the wallet open because it is a public address I have used for years.

Don't hesitate! Change all your passwords, email addresses, don't leave anything to chance here bud, if something smells fishy then there's probably fish around. or pussy, but not in this case it's definitely suspect activity on your computer that needs to be resolved.

[el kaka22]

I have always received this email when I login to my blockchain.info account (maybe because I have signed up the account from my old ISP IP address and I'm now using my new ISP). However I think this is a good security for my coins (though I have abandoned that wallet). Few days ago, I have received a mail of this kind from an unknown IP address (meaning that the account  is being hacked). However the hacker can't take my keys away. So, security is more important than convenience, at least for me.

[Racey]

http://iplocationtools.com/92.38.78.23.html

IP Address   92.38.78.23
Country Code   BY
Country Name    Belarus
Region Name   Homyel'skaya Voblasts'
City Name   Homyel'  Report Incorrect Location
Coordinates    52°26'18"N   30°58'56"E
(Latitude: 52.43826, Longitude: 30.98227)
ISP   Gomelsky RTSC Garant JSC      Domain Name   iptv.by
Connection Type   DSL      Usage Type    Commercial
IDD Code   375      Area Code   023
Postal Code   -      Elevation   137 meters
Local Time   12 Feb, 2016 05:29 PM (UTC +03:00)
Weather Station    Gomel' (BOXX0004)
View Live Weather »
MCC   -      MNC   -
Mobile Brand Name   -   
Permalink   http://www.iplocationtools.com/92.38.78.23.html


This site includes IP2Location Lite data available from http://lite.ip2location.com.
You can lodge a complaint for IP address 92.38.78.23  Report Abuse.


This IP address 92.38.78.23 is located in Belarus, Homyel'skaya Voblasts', Homyel'. ISP of this IP address is Gomelsky RTSC Garant JSC. The area code is 023. The postcode is -. The IDD code of this country (Belarus) is 375. The current time is 12 Feb, 2016 05:29 PM (UTC +03:00).

[ctlaltdefeat]

On the really rare occasion that I log back into my old blockchain.info account, I always get an email asking me to authorize the login by clicking the link. As far as I know, the only way I am usually able to login is with my Identifier and my password. Once I do that, I get an email, then I click the link to verify my browser and IP, and I am in.

So I just got an email like I usually do, but I was not trying to access the account. The IP and location says "IP Address: 92.38.78.23 (Czech Republic)", and browser is Iternet Explorer FFS, so definitely not me, not even the same country.

So how could someone have my Identifier and password if I am the only one that has that? I do also have 2 factor authentication, and a secondary password for sending out, but still, its very odd. The email says if I did not try to login, maybe I was the victim of a phishing attack. No, very very very unlikely...and even then, it would involve me attempting to login which I have not done for ages.

The only thing I have done recently at all that has anything to do with blockchain.info, is update the android apps for wallet and merchant that I have on my phone. Does anyone have any ideas? I am not really worried since I dont keep any coin there, but I still keep the wallet open because it is a public address I have used for years.

sent support and ask them to fix it,show your valid identity and dont open your account in other device,i also ever have same problem on coinbase.

[Kprawn]

Do not click on these emails when you login to your account... rather go to the site directly {type in Url} and then login. Most of these emails are

trying to mimic the emails received from Blockchain.info and are most probably a phishing attempt. You have 2FA and a password on withdrawals, so

they cannot do anything, if they cannot get hold of your cellphone to login. If you using a webmail service, it is most probably compromised.  

[BitcoinHodler]

you should check the sender of the email and the link that it contains the IP and etc are not important.

if the link leads to a site other than the legit site it is phishing attempt so do not click.

if it is legit link contact blockchain.info immediately.

[southafricadude]

It looks like a legit mail from blockchain.info, everything is correct, except that it was not me, so not clicking the link to approve.....I still have 2 factor sms to my phone and a second password so should be fine for now. I hardly use that wallet anyway, its just weird since I dont even know my identifier off hand, I have to click a bookmark to login, and somehow, this person knew what that was to be able to try login my account.

[gribble]

I think your computer has attacked by malware 

[Racey]

It looks like a legit mail from blockchain.info, everything is correct, except that it was not me, so not clicking the link to approve.....I still have 2 factor sms to my phone and a second password so should be fine for now. I hardly use that wallet anyway, its just weird since I dont even know my identifier off hand, I have to click a bookmark to login, and somehow, this person knew what that was to be able to try login my account.

You really should save your identifier and all details in a safe place such as a usb pen, only plug it in when logging in to your wallet.
If you lose your book marks through system failure, you would then have a backup.

[southafricadude]

All good points for being safer thanks!
I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows.

I'll be safer with the blockchain account and do the usb pen thing, good idea.

[Racey]

All good points for being safer thanks!
I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows.

I'll be safer with the blockchain account and do the usb pen thing, good idea.

Malwarebytes is free forever, I have the upgraded version, still good though https://www.malwarebytes.org/

For a free Antivirus scanner just a 30 day trial http://www.eset.com/us/free-trial/ but will do the job scanning the system, you can have both scanners running at the same time.

[Patatas]

You could be a victim of a phishing attack.Because there is a phishing page of blockchain.info which was reported  a few days back.They would have sent you a email in the name of Blockchain and as regular you thought its an official email and logged in.They can't really attack your private keys .Either key logger or a Remote Administration tool would have done the job if not phishing website.

[meadefreling]

It is obvious that someone is trying to gain access to your account, do all these steps as fast as you can, change the password and add 2FA and receive sms via your phone number.

[unent]

All good points for being safer thanks!
I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows.

I'll be safer with the blockchain account and do the usb pen thing, good idea.

Malwarebytes is free forever, I have the upgraded version, still good though https://www.malwarebytes.org/

For a free Antivirus scanner just a 30 day trial http://www.eset.com/us/free-trial/ but will do the job scanning the system, you can have both scanners running at the same time.

Some viruses can only be detected and removed when an infected windows isn't running. You can use a live cd to detect and remove them like the one from Avira antivirus. The download link to the Avira antivirus live cd and its user manuals is here.


http://www.avira.com/en/download/product/avira-rescue-system

These quotes are from its manual. First it tries to download the latest virus definition updates, if it can't connect to the internet it uses the virus definitions included on the cd.

In the first instance, the scanner updates the Virus Definition File (VDF) and the scan engine. If no Internet connection is established, the scanner searches for infections with the VDF and engine versions found on the ISO file.

After its finished scanning it shows you whether your computer was infected.

The Results area shows whether your system was completely cleaned and repaired. By clicking the Report button, details about the detections will be displayed.

[Racey]

All good points for being safer thanks!
I have a windows 7 pc that I am using now for the last 2 months, before that I was always ubuntu. What is a good malware checker that I can try to use just to be 100% certain. I only started using this computer because I need to use photoshop and some other programs that only work on windows.

I'll be safer with the blockchain account and do the usb pen thing, good idea.

Malwarebytes is free forever, I have the upgraded version, still good though https://www.malwarebytes.org/

For a free Antivirus scanner just a 30 day trial http://www.eset.com/us/free-trial/ but will do the job scanning the system, you can have both scanners running at the same time.

Some viruses can only be detected and removed when an infected windows isn't running. You can use a live cd to detect and remove them like the one from Avira antivirus. The download link to the Avira antivirus live cd and its user manuals is here.


http://www.avira.com/en/download/product/avira-rescue-system

These quotes are from its manual. First it tries to download the latest virus definition updates, if it can't connect to the internet it uses the virus definitions included on the cd.

In the first instance, the scanner updates the Virus Definition File (VDF) and the scan engine. If no Internet connection is established, the scanner searches for infections with the VDF and engine versions found on the ISO file.

After its finished scanning it shows you whether your computer was infected.

The Results area shows whether your system was completely cleaned and repaired. By clicking the Report button, details about the detections will be displayed.

You can do all this with ESET http://www.eset.com/int/support/sysrescue/

http://support.eset.com/kb3509/

[septian44]

blockchain lose your wallet .... I never like you ..... until now my wallet locked

[pedrog]

Just checked my email, I also got one log-in attempt from Lebanon, I ain't even near Lebanon.

Someone is trying to breach blockchain.info accounts en mass.