PSA: You can see a record of IPs that have attempted to hack your GitHub account

Posted by kibwen on Wednesday July 18, 2018 @01:57PM
from the self-post dept.

Github's security settings page (https://github.com/settings/security (insert the usual cautionary tale against phishing attempts here)) has a "Security history" section at the bottom that shows a history of security-related events for the past several months. One can click on the events for more detail, which shows that e.g. a "user.failed_login" event from May 16 was generated when a Ukrainian IP attempted to access my account. Fun tidbit for those of us who enjoy perusing SSH access logs.

( 1 comment | 13 points | on HN )

Re:PSA: You can see a record of IPs that have attempted to h... by wesamco on Thursday July 19, 2018 @12:29PM (#17567875)

thanks a lot, now I see how 2FA saved me two weeks ago, the moment I got the SMS, I immediately went on my first security ritual, changed all passwords with my pass manager, and removed the original/primary email address that haveibeenpwned.com, which I already knew about, changed its pass and stopped using it but forgot to remove from GH. 2 IPs are Turkish, 2 Tunisian and 2 Indonesian, some ips had multiple attempts.

[ Parent | on HN ]