Bitcoin Forum
June 21, 2024, 11:27:10 AM *
News: Voting for pizza day contest
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: failed login attempt (blocked and notified)  (Read 1075 times)
HMSXV (OP)
Newbie
*
Offline Offline

Activity: 6
Merit: 0


View Profile
September 15, 2014, 08:47:45 PM
 #1

Hi,

somebody tried to access my blockchain.info wallet earlier today.
I received an email from blockchain with some details about the person, including his/her IP address, operating system and some hardware info.

What can one do with someone's IP address in general?
What do you people recommend I do?

thanks
Bitcoins101
Hero Member
*****
Offline Offline

Activity: 826
Merit: 508


View Profile
September 15, 2014, 08:55:54 PM
 #2

It's not worth your trouble. Just make sure your account is secure with a good password and 2FA.

IcyCoins
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
September 15, 2014, 09:01:04 PM
 #3

Perhaps it's someone you know in real life?
Buo
Member
**
Offline Offline

Activity: 112
Merit: 10


View Profile
September 15, 2014, 09:22:12 PM
 #4

It could be a mistake, I think you have to worry only if the login attempts will continue.

clickhero
Newbie
*
Offline Offline

Activity: 14
Merit: 0


View Profile
September 15, 2014, 09:52:07 PM
 #5

Has he failed to login several times or only once?
devthedev
Legendary
*
Offline Offline

Activity: 1050
Merit: 1004



View Profile
September 15, 2014, 10:02:38 PM
 #6

It could be a phishing attempt too. Carefully interact with emails that claim to have come from a party you trust.

ANTIcentralized
Full Member
***
Offline Offline

Activity: 210
Merit: 100


View Profile
September 15, 2014, 11:48:02 PM
 #7

I would suggest getting a new wallet (and identifier) and transferring your bitcoin into your new wallet. Someone is clearly trying to steal your bitcoin.

As far as your question about what you can do with someone's IP address, the answer is likely nothing.
HMSXV (OP)
Newbie
*
Offline Offline

Activity: 6
Merit: 0


View Profile
September 16, 2014, 08:03:49 AM
 #8

Thank you for your input.

There was 1 email, so I suppose he couldn't access another time or simply didn't try.
Looking at my identifier I conclude that it was no accident. You can't just type in that thing by accident.

But then again, I've once typed in a valid private key by accident.

I'll change all passwords and perhaps move to a new wallet.

Cheers everyone

edit: I took a look at the email address, I wonder why I didn't do that earlier. It's a phishing mail. Here's a transcript:

--

Blockchain (garyalanhill@comcast.net)

Authorize login attempt

A login attempt to your blockchain.info wallet was made from an unrecognized browser. Please confirm the following details are correct:

Time: 2014-09-15 09:17:42

IP Address: 91.241.18.129

Browser: Mozilla

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:32.0) Gecko/20100101 Firefox/32.0



Click here to confirm you own this account





Failing to confirm your account, may result in being suspended, according to our terms.





If this login attempt was made by you, this email can be safely ignored. It means you have visited your wallet login page using your alias from an unrecognez browser.
The login attempt was blocked, it does mean your wallet details are compromised





Top Tip
Backup your bitcoin wallet using dropbox. It's free, easy to use and secure.

VMIGHMSUJYYOETPUXBOQECVFNIISLNKHXVUNNG

--
w4ssop
Newbie
*
Offline Offline

Activity: 42
Merit: 0


View Profile
September 16, 2014, 08:05:49 AM
 #9

Thank you for your input.

There was 1 email, so I suppose he couldn't access another time or simply didn't try.
Looking at my identifier I conclude that it was no accident. You can't just type in that thing by accident.

But then again, I've once typed in a valid private key by accident.

I'll change all passwords and perhaps move to a new wallet.

Cheers everyone

Yes in this way you won't have any more trouble, I don't think someone will track your movements if you aren't a big whale Smiley
HMSXV (OP)
Newbie
*
Offline Offline

Activity: 6
Merit: 0


View Profile
September 16, 2014, 08:11:06 AM
 #10

The only concern I have is that in my monstrous stupidity I clicked the 2nd link. Didn't lead anywhere (doh!).

Now what? I ran a hijackthis scan - all clean.
oceans
Sr. Member
****
Offline Offline

Activity: 406
Merit: 250



View Profile
September 16, 2014, 06:55:20 PM
 #11

I personally really do not see any reason why you should try and retaliate to be honest, it's better to ensure you make all the changes possible to ensure that your account is safe to prevent any further attempts to access it.
DavidShares
Newbie
*
Offline Offline

Activity: 15
Merit: 0


View Profile
September 18, 2014, 03:22:05 PM
 #12

It's a phishing attempt. If you look at the info page for the shortened google links you will get this: https://i.imgur.com/ySZBcLC.png
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!