some turkish IP tried to access my account

[ra3or]

Hello,

Some hacker tried to access my account from a Turkey IP.
The hacker gained access to the new random password.
This is a serious security breach. You should do a internal check.

A few years back my account was hacked into, tho I never shared the password I use on warmane account.
Turns out the whole db was leaked (info at haveibeenpwned dot com)

I'm not expecting any response. Just making you aware of what has happened.

mail:

Dear <*****_acc_hidden>,

We've received a request to access your Warmane account from a new location.
The following IP Address is making the request: 88.241.82.32

To complete this process, enter the following code into the authorization box to begin playing:

<code_*******>

Thanks for helping us maintain the security of your account.

Kind Regards,
Warmane Support Team

Please do not reply to this message. Replies to this message are routed to an unmonitored mailbox. If you have any queries visit http://forum.warmane.com/.

whois:

IP Information for 88.241.82.32
 Quick Stats
IP Location	Turkey Turkey Kusadasi Turk Telekomunikasyon Anonim Sirketi
ASN	Turkey AS9121 TTNET, TR (registered Dec 29, 1998)
Resolve Host	88.241.82.32.dynamic.ttnet.com.tr
Whois Server	whois.ripe.net

[Palutena]

Add two step authenticator.

[dolcokidol]

2FA is enabled but it sends the email before it checks the password with the ingame client.
So if you have username hunter123 and the Turkish guy has hunterr123 he may have had a typo.

I'd change my password just in case, but it's nothing to worry about as long as 2FA stopped him.

[Invictum]

Hello,

This is a serious security breach. You should do a internal check.

Since when a logon attempt is a breach xD

Anyhow.. Kusadasi, uuuuh.. dude.
Give him your Warmane acc for a week vacation at his place of residence.

[ra3or]

Add two step authenticator.

read the 'mail' from OP (it is enabled)

2FA is enabled but it sends the email before it checks the password with the ingame client.
So if you have username hunter123 and the Turkish guy has hunterr123 he may have had a typo.

If this happens, it should be fixed. It exposes that 'hunter123' account name exists.
If it correctly checks username and password both match, that email was sent because the details were exposed.

Since when a logon attempt is a breach xD

Anyhow.. Kusadasi, uuuuh.. dude.
Give him your Warmane acc for a week vacation at his place of residence.

not feeding the trolls