🛈 Announcement
Greetings! Ubisoft Connect forums are now archived and accessible in read-only mode, please go to the new platform to discuss the game
  1. #1

    Suspicious Activity - Log-In - Even though I have 2FA.

    I read what I assumed to be a phishing email at first, but all of the links that I hovered over were correct, as was the email address. I also logged in on a new device to create another automated email (detecthing a log-in) to verify that the initial email was indeed correct, and it was. I had an email stating that somebody had logged into my account from India, but I have 2FA enabled, so how is this possible? The moment I verified the email was correct, I reset my password, but I just want to make sure whether or not this person had actually logged into my account, or if they'd just attempted to? The way the email is constructed appears to imply that a log-in had taken place. If they couldn't get in, then great, but if they did actually log-in, then I'm slightly concerned about the security behind it, given that 2FA is supposed to be super secure. Any information would be hugely appreciated, I'm just making this post just to be on the safe side! Thanks!
     2 people found this helpful
    Share this post

  2. #2
    I had the exact same thing happen except mine was from Bulgaria. I also have 2fa on and want to know if they actually got access or are just trying to.
    Share this post

  3. #3
    ubi--unicorn's Avatar Ubisoft Support Staff
    Join Date
    Mar 2017
    Posts
    9,511
    Hey guys, it looks like they were failed logins. Apologies for any confusion.
    Share this post

  4. #4
    Navelintel's Avatar Member
    Join Date
    Jun 2006
    Location
    Wherever the ripple in the fabric of time. . .
    Posts
    96

    Me too!

    I too have concerns regarding the effectiveness of Ubisoft’s cyber security.

    It seems someone was able to log into my account even with Ubisoft’s vaunted ‘2 Step Verification’ when I received an email alert on 7/15/2018 from Ubisoft saying that there had been suspicious activity (login) from an IP address (59.174.72.234) that originated in Wuhan, China. So, I took the time to examine every login entry from my Ubisoft (service history.cvs) file and discovered there were several others IP addresses that attempted to log into my account. They came from Jaipur (India) on 7/11/18, IP address (157.37.112.70) Kuala Lumpur (Malaysia) on 6/30/18, IP address (118.100.163.247), Moscow (Russia) on 4/2/18 IP address (62.112.116.146), Prague (Czech Republic) on 3/4/18, IP address (188.72.96.207), and Krakow (Poland) on 2/15/18, IP address (89.64.49.113). Fortunately, only the IP address from Moscow was able to successfully login yet I never received an alert from Ubisoft. And how is that? Did it slip under Ubisoft’s ‘radar’ or were they simply asleep at the wheel?

    Incidentally, I had already enabled my ‘2 Step Verification’ prior to any of these incidents. So, if my account can still be hacked, what's the point of the ‘2 Step Verification’?

    So, it begs the following questions:

    1) What are the chances that someone in both China and Russia could link my email address with my Ubisoft account and successfully login in? (I’d say astronomical!)
    2) And if they tried to access my personal data, how were they able to acquire access to my previous ‘secure password’ and bypass the ‘2 Step Verification’ to successfully login?

    Coincidences are planned. And as a Ubisoft client since June 2010, I’ve never been hacked. So, unless Ubisoft can satisfactorily answer the above questions and admit they’ve got a serious problem with their security protocol, I’ll consider my support ticket open until the issue is resolved. And if someone again diddles around in my account and it originates with an IP address different from my own, generating another alert from Ubisoft after I’ve already enabled the ‘2 Step Verification’, then my suspicions will have been confirmed.

    Lastly, some free advice for all my fellow gamers: I wouldn’t recommend providing any payment information with your accounts unless you’re willing to have someone hack your credit card as well.
     5 people found this helpful
    Share this post

  5. #5
    Same here as the other people. I don't have 2SV on my account and i don't think someone got in as i was able to log into uplay and my uplay points are still there. But i got 3 of them tonight. And got another one while typing this out, but this very last one was my ip address. I don't use any vpn's and i never been outside the USA so there is no way i could log in from turkey, germany or russia.
    But here are the ip addresses and locations incase it starts a common path.

    Spoiler:  Show
    An unusual activity was recently registered on your Ubisoft account for the following email address: (removed for security reasons). Please review the details below:

    Activity: Login
    Country: Germany
    IP address: 193.32.95.105

    Details for 193.32.95.105
    IP: 193.32.95.105
    Decimal: 3240124265
    Hostname: 193.32.95.105
    ASN: 206485
    ISP: Premier Trading Solutions Ltd
    Organization: QualityNetwork
    Services: None detected
    Type: Broadband
    Assignment: Static IP
    Blacklist:
    Continent: Europe
    Country: Germany de flag
    State/Region: Land Berlin
    City: Berlin
    Latitude: 52.5167 (52° 31′ 0.12″ N)
    Longitude: 13.4 (13° 24′ 0.00″ E)
    Postal Code: 12529

    An unusual activity was recently registered on your Ubisoft account for the following email address: (removed for security reasons). Please review the details below:

    Activity: Login
    Country: Russia
    IP address: 193.93.193.192

    Details for 193.93.193.192
    IP: 193.93.193.192
    Decimal: 3244147136
    Hostname: 193.93.193.192
    ASN: 49453
    ISP: Petersburg Internet Network ltd.
    Organization: QualityNetwork
    Services: None detected
    Type: Broadband
    Assignment: Static IP
    Blacklist:
    Continent: Europe
    Country: Russia ru flag
    Latitude: 55.7386 (55° 44′ 18.96″ N)
    Longitude: 37.6068 (37° 36′ 24.48″ E)

    An unusual activity was recently registered on your Ubisoft account for the following email address: (removed for security reasons). Please review the details below:

    Activity: Login
    Country: Turkey
    IP address: 178.159.100.156

    Details for 178.159.100.156
    IP: 178.159.100.156
    Decimal: 2996790428
    Hostname: 178.159.100.156
    ASN: 49453
    ISP: Atomohost LLC
    Organization: QualityNetwork
    Services: None detected
    Assignment: Static IP
    Blacklist:
    Continent: Asia
    Country: Turkey tr flag
    State/Region: Istanbul
    City: Istanbul
    Latitude: 41.0186 (41° 1′ 6.96″ N)
    Longitude: 28.9647 (28° 57′ 52.92″ E)
    Postal Code: 34110

    Here is the raw message of the e-mails i got maybe it might be useful to ubisoft.

    X-Apparently-To: ( e-mail removed for security reasons); Sun, 22 Jul 2018 22:16:51 +0000
    Return-Path: <AccountSupport@ubi.com>
    Received-SPF: pass (domain of ubi.com designates 216.98.52.35 as permitted sender)
    X-YMailISG: zGI4OcYWLDupf1BkeRZhXZ06Py29XWXQk71LAV5TiUU9mVBf
    PYvsdqoo5jVvEKv_Ysc5KzfmqzhIp3rwtZ5QN1c0c25oRuo8FG 7AAffngMSd
    .n0eEfzCDFGUUjdFNHfZ..7_hhJWC_e_3nx8Voc3N9GGUSNWdA TV4mMFI9EN
    Zb9aM1AbApR1u6Wij5gUWmRYQIiQ3NUR90hxHVmDRohkQBsb6N IFIZsCRZot
    WX_jXMSzWaAMlkRJEQGxP3YT92ciB.DgoTGx9Vh26lDaGcGNgO H57SVwry12
    2zMeSn744roLXCy2L8oj_X6CvweR_YsYuIpYl9SsvO7Tu03duw SWcAwcvELD
    1BpMl5PfysLqcjBOjhROelr8j6lMnJdrd6rZVEArx5L3LjOBKA jcZv7Y4HQR
    ogmlSMjI.7Emoh9a2D6J3fUorvVengnt4DOa4obyS9nht_J738 duY4P.JvFA
    f.TGSP4ihKSZmeocEEctqcryReDhXiZw_hS0gvVpXwahRkYi1W BufxY1OC8Q
    QO0NWyGJHgJqMsMRYQgs5SAt_SgErSMiTJ46QM10Sigqw.IUoM Qjl.yvd1Lv
    FKU981f5nnXt3dYb25bdAYzTVMkMBw6WBM5V3SPb_7NDQQqhl5 SAYwFPBkZc
    8hgZMFxZJyKhjFmPTJgQaVX7_lVIIo9y0MbmRw9IBX48axFU0X W.LPizUXOD
    IgK2IokjCFsFYDhh6gc4yD3pX5wSnFCCuFYB5aC2eYsysab0qb JMGphjFpDN
    PyNfGm4LzE9G_lJxR5MW51CU5pEC0UrX8erKCvbZPK12tWEXvl zNvzWCCYKm
    nY2EZ9dcKOEganu9JNJj1O7.6Pw0CeH8ASlzsWEHuAolyNbZAf PdD2ngLjnQ
    FPtKH66OAxvOsBn9.5F7brXNucC_Q2yYmKto6N9qpSKNfLNDrb HO5UcM_aHQ
    hGOD4He4lLcDhTUf0bvsCTlZuqwWPlpE_hbWckiTS2Kv.8h2AW jPKrpt2kvM
    FWt0Cqx_OicHSAghp0w08sR64cvxMFlUZNChkZPQd7L24n6Utx Wr5Z720K7J
    PpS6UaiSk57lqBKve7Q56Qx2WyRviB0txPaNsiM74ZxvM_8vx5 k6uzCyqsLJ
    qKFDBLuhQ3b9VBxPX4wJqRNBjh7IxB6XzpSKrISIu1qRE.G4S6 RLd68N.L8g
    fk4XUalGftlcSvQjMYyrCK1zhILFQveNzwpXFwbTPUm0EDhkWR YqDJXXKdd8
    Y6fpbGuwQqsvYpD0G4SuXS.zsg09iJVakJPskWpbQB046yV3lK 8uvEZE8Hfp
    7hFoaf2cyekOCMtPQZcd
    X-Originating-IP: [216.98.52.35]
    Authentication-Results: mta4378.mail.ne1.yahoo.com from=ubi.com; domainkeys=neutral (no sig); from=ubi.com; dkim=pass (ok)
    Received: from 127.0.0.1 (EHLO msr-onl-mail-out04.ubisoft.com) (216.98.52.35)
    by mta4378.mail.ne1.yahoo.com with SMTPS; Sun, 22 Jul 2018 22:16:51 +0000
    MIME-Version: 1.0
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ubi.com; s=p160727;
    t=1532297810; bh=cVr14mwh1fikUyz9+6dJHUyF0w143gLweHrvRb0pVmE=;
    h=From:Toate:Subject;
    b=WE1qBBsc2y3kFqpBOO7EsGa5G8iSEfvJRi8ny14ZNZW4kCLs zt1A1lD4eQJAV7nq3
    loa60T6V2RvmtoIYzu64CYThi4Bvi2oMjW1UQHawYxDLyPuGxA gbKlb6gj7Hk66vx3
    Zrt6Xq9tQcWP105/dIXqJak+o1WURSswqeWGr+2HtgDNMkUHi1v8kIeMucd6bI4EZO
    R+ji5c9taTNBE2xsTZ46vNNgk2cjh/hjLWYhXfrlrZ7wQWpag5onaOU/4DScSXAlqy
    KeG9NNKmLRjI9Rnxn5zxdbhvvI8PSO2L7znjxQa7cSXzjw7Gni gYHMq5VkdUoBzdxH
    R2akC66NJfSPw==
    X-Ubisoft-Relay: yes
    From: "Ubisoft Account Support" <AccountSupport@ubi.com>
    To: (e-mail removed for security)
    Date: 22 Jul 2018 22:16:50 +0000
    Subject: Suspicious Activity
    Content-Type: text/html; charset=utf-8
    Content-Transfer-Encoding: base64
    Message-Id: <20180722221650.98C231E04@msr-onl-mail-out04.ubisoft.com>
    Content-Length: 14865

    PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW 50PSJ0ZXh0L2h0bWw7
    IGNoYXJzZXQ9dXRmLTgiPjxtZXRhIG5hbWU9InZpZXdwb3J0Ii Bjb250ZW50PSJ3aWR0
    aD1kZXZpY2Utd2lkdGgiPiA8dGl0bGU+U2ltcGxlIFRyYW5zYW N0aW9uYWwgRW1haWw8
    L3RpdGxlPiA8c3R5bGUgdHlwZT0idGV4dC9jc3MiPiAvKiAtLS 0tLS0tLS0tLS0tLS0t
    LS0tLS0tLS0tLS0tLS0tLS0tLS0tIEdMT0JBTCBSRVNFVFMgLS 0tLS0tLS0tLS0tLS0t
    LS0tLS0tLS0tLS0tLS0tLS0tLS0tLSAqLyAvKiAtLS0tLS0tLS 0tLS0tLS0tLS0tLS0t
    LS0tLS0tLS0tLS0tLS0tIEJPRFkgJiBDT05UQUlORVIgLS0tLS 0tLS0tLS0tLS0tLS0t
    LS0tLS0tLS0tLS0tLS0tLS0tLSAqLyAvKiBTZXQgYSBtYXgtd2 lkdGgsIGFuZCBtYWtl
    IGl0IGRpc3BsYXkgYXMgYmxvY2sgc28gaXQgd2lsbCBhdXRvbW F0aWNhbGx5IHN0cmV0
    Y2ggdG8gdGhhdCB3aWR0aCwgYnV0IHdpbGwgYWxzbyBzaHJpbm sgZG93biBvbiBhIHBo
    b25lIG9yIHNvbWV0aGluZyAqLyAvKiBUaGlzIHNob3VsZCBhbH NvIGJlIGEgYmxvY2sg
    ZWxlbWVudCwgc28gdGhhdCBpdCB3aWxsIGZpbGwgMTAwJSBvZi B0aGUgLmNvbnRhaW5l
    ciAqLyAvKiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tIEhFQURF
    UiwgRk9PVEVSLCBNQUlOIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0t
    LS0gKi8gLyogLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLSBUWVBP
    R1JBUEhZIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0gKi8gLyog
    LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS BCVVRUT05TIC0tLS0t
    LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0gKi8gLy ogLS0tLS0tLS0tLS0t
    LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLSBPVEhFUiBTVFlMRV MgVEhBVCBNSUdIVCBC
    RSBVU0VGVUwgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLSAqLyAv
    KiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tIFJFU1BPTlNJVkUg
    QU5EIE1PQklMRSBGUklFTkRMWSBTVFlMRVMgLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0t
    LS0tLS0tLS0tLS0tLSAqLyBAbWVkaWEgb25seSBzY3JlZW4gYW 5kIChtYXgtd2lkdGg6
    IDYyMHB4KSB7IHRhYmxlW2NsYXNzPWJvZHldIGgxIHsgZm9udC 1zaXplOiAyOHB4ICFp
    bXBvcnRhbnQ7IG1hcmdpbi1ib3R0b206IDEwcHggIWltcG9ydG FudDsgfSB0YWJsZVtj
    bGFzcz1ib2R5XSBwLCB0YWJsZVtjbGFzcz1ib2R5XSB1bCwgdG FibGVbY2xhc3M9Ym9k
    eV0gb2wsIHRhYmxlW2NsYXNzPWJvZHldIHRkLCB0YWJsZVtjbG Fzcz1ib2R5XSBzcGFu
    LCB0YWJsZVtjbGFzcz1ib2R5XSBhIHsgZm9udC1zaXplOiAxNH B4ICFpbXBvcnRhbnQ7
    IH0gdGFibGVbY2xhc3M9Ym9keV0gdWwsIHRhYmxlW2NsYXNzPW JvZHldIG9sIHsgcGFk
    ZGluZy1sZWZ0OiAwcHggIWltcG9ydGFudDsgfSB0YWJsZVtjbG Fzcz1ib2R5XSBsaSB7
    IG1hcmdpbi1ib3R0b206IDEwcHggIWltcG9ydGFudDsgfSB0YW JsZVtjbGFzcz1ib2R5
    XSAud3JhcHBlciwgdGFibGVbY2xhc3M9Ym9keV0gLmFydGljbG UgeyBwYWRkaW5nOiAx
    MHB4ICFpbXBvcnRhbnQ7IH0gdGFibGVbY2xhc3M9Ym9keV0gLm NvbnRlbnQgeyBwYWRk
    aW5nOiAwICFpbXBvcnRhbnQ7IH0gdGFibGVbY2xhc3M9Ym9keV 0gLmNvbnRhaW5lciB7
    IHBhZGRpbmc6IDAgIWltcG9ydGFudDsgd2lkdGg6IDEwMCUgIW ltcG9ydGFudDsgfSB0
    YWJsZVtjbGFzcz1ib2R5XSAubWFpbiB7IGJvcmRlci1sZWZ0LX dpZHRoOiAwICFpbXBv
    cnRhbnQ7IGJvcmRlci1yYWRpdXM6IDAgIWltcG9ydGFudDsgYm 9yZGVyLXJpZ2h0LXdp
    ZHRoOiAwICFpbXBvcnRhbnQ7IH0gdGFibGVbY2xhc3M9Ym9keV 0gLmJ0biB0YWJsZSB7
    IHdpZHRoOiAxMDAlICFpbXBvcnRhbnQ7IH0gdGFibGVbY2xhc3 M9Ym9keV0gLmJ0biBh
    IHsgd2lkdGg6IDEwMCUgIWltcG9ydGFudDsgfSB0YWJsZVtjbG Fzcz1ib2R5XSAuaW1n
    LXJlc3BvbnNpdmUgeyBoZWlnaHQ6IGF1dG8gIWltcG9ydGFudD sgbWF4LXdpZHRoOiAx
    MDAlICFpbXBvcnRhbnQ7IHdpZHRoOiBhdXRvICFpbXBvcnRhbn Q7IH19IC8qIC0tLS0t
    LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0gUFJFU0 VSVkUgVEhFU0UgU1RZ
    TEVTIElOIFRIRSBIRUFEIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0t
    LS0gKi8gQG1lZGlhIGFsbCB7IC5FeHRlcm5hbENsYXNzIHsgd2 lkdGg6IDEwMCU7IH0g
    LkV4dGVybmFsQ2xhc3MsIC5FeHRlcm5hbENsYXNzIHAsIC5FeH Rlcm5hbENsYXNzIHNw
    YW4sIC5FeHRlcm5hbENsYXNzIGZvbnQsIC5FeHRlcm5hbENsYX NzIHRkLCAuRXh0ZXJu
    YWxDbGFzcyBkaXYgeyBsaW5lLWhlaWdodDogMTAwJTsgfSAuYX BwbGUtbGluayBhIHsg
    Y29sb3I6IGluaGVyaXQgIWltcG9ydGFudDsgZm9udC1mYW1pbH k6IGluaGVyaXQgIWlt
    cG9ydGFudDsgZm9udC1zaXplOiBpbmhlcml0ICFpbXBvcnRhbn Q7IGZvbnQtd2VpZ2h0
    OiBpbmhlcml0ICFpbXBvcnRhbnQ7IGxpbmUtaGVpZ2h0OiBpbm hlcml0ICFpbXBvcnRh
    bnQ7IHRleHQtZGVjb3JhdGlvbjogbm9uZSAhaW1wb3J0YW50Oy B9IC5idG4tcHJpbWFy
    eSB0YWJsZSB0ZDpob3ZlciB7IGJhY2tncm91bmQtY29sb3I6IC MzNDQ5NWUgIWltcG9y
    dGFudDsgfSAuYnRuLXByaW1hcnkgYTpob3ZlciB7IGJhY2tncm 91bmQtY29sb3I6ICMz
    NDQ5NWUgIWltcG9ydGFudDsgYm9yZGVyLWNvbG9yOiAjMzQ0OT VlICFpbXBvcnRhbnQ7
    IH0gfSA8L3N0eWxlPg0KICANCiAgDQogICAgPHRhYmxlIGJvcm Rlcj0iMCIgY2VsbHBh
    ZGRpbmc9IjAiIGNlbGxzcGFjaW5nPSIwIiBjbGFzcz0iYm9keS Igc3R5bGU9ImJvcmRl
    ci1jb2xsYXBzZTpzZXBhcmF0ZTttc28tdGFibGUtbHNwYWNlOj BwdDttc28tdGFibGUt
    cnNwYWNlOjBwdDtiYWNrZ3JvdW5kLWNvbG9yOiNmNmY2ZjY7Ym Fja2dyb3VuZC1pbWFn
    ZTp1cmwoaHR0cHM6Ly9zdGF0aWMyLmNkbi51YmkuY29tL2VtYW lsL2ltYWdlcy9ncmV5
    LWJhY2tncm91bmQucG5nKTtiYWNrZ3JvdW5kLXJlcGVhdDpyZX BlYXQ7d2lkdGg6MTAw
    JSI+DQogICAgICA8dGJvZHk+PHRyPg0KICAgICAgICA8dGQgc3 R5bGU9ImZvbnQtZmFt
    aWx5OlZlcmRhbmEsIHNhbnMtc2VyaWY7Zm9udC1zaXplOjE0cH g7dmVydGljYWwtYWxp
    Z246dG9wIj4mbmJzcDs8L3RkPg0KICAgICAgICA8dGQgY2xhc3 M9ImNvbnRhaW5lciIg
    c3R5bGU9ImZvbnQtZmFtaWx5OlZlcmRhbmEsIHNhbnMtc2VyaW Y7Zm9udC1zaXplOjE0
    cHg7dmVydGljYWwtYWxpZ246dG9wO2Rpc3BsYXk6YmxvY2s7bW F4LXdpZHRoOjc1MHB4
    O3BhZGRpbmc6MTBweDt3aWR0aDo3NTBweDtNYXJnaW46MCBhdX RvICFpbXBvcnRhbnQ7
    d2lkdGg6YXV0byAhaW1wb3J0YW50Ij4NCiAgICAgICAgICA8ZG l2IGNsYXNzPSJjb250
    ZW50IiBzdHlsZT0iYm94LXNpemluZzpib3JkZXItYm94O2Rpc3 BsYXk6YmxvY2s7TWFy
    Z2luOjAgYXV0bzttYXgtd2lkdGg6NzUwcHg7cGFkZGluZzoxMH B4Ij4NCiAgICAgICAg
    ICAgIDwhLS0gU1RBUlQgQ0VOVEVSRUQgV0hJVEUgQ09OVEFJTk VSIC0tPiA8c3BhbiBj
    bGFzcz0icHJlaGVhZGVyIiBzdHlsZT0iY29sb3I6dHJhbnNwYX JlbnQ7ZGlzcGxheTpu
    b25lO2hlaWdodDowO21heC1oZWlnaHQ6MDttYXgtd2lkdGg6MD tvcGFjaXR5OjA7b3Zl
    cmZsb3c6aGlkZGVuO21zby1oaWRlOmFsbDt2aXNpYmlsaXR5Om hpZGRlbjt3aWR0aDow
    Ij5JZiB5b3UgY2Fubm90IHNlZSB0aGlzIGVtYWlsLCBwbGVhc2 UgPGEgaHJlZj0iaHR0
    cHM6Ly9zdXBwb3J0LnViaS5jb20vQ29udGFjdCIgc3R5bGU9Im NvbG9yOiMzNDk4ZGI7
    dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZSI+Y2xpY2sgaGVyZT wvYT4uPC9zcGFuPg0K
    ICAgICAgICAgICAgPHRhYmxlIGNsYXNzPSJoZWFkZXIiIHdpZH RoPSIxMDAlIiBzdHls
    ZT0iYm9yZGVyLWNvbGxhcHNlOnNlcGFyYXRlO21zby10YWJsZS 1sc3BhY2U6MHB0O21z
    by10YWJsZS1yc3BhY2U6MHB0O2JhY2tncm91bmQ6I2ZmZjtib3 JkZXItcmFkaXVzOjBw
    eDtib3JkZXItc3BhY2luZzowcHg7d2lkdGg6MTAwJSI+DQogIC AgICAgICAgICAgIDwh
    LS0gU1RBUlQgSEVBREVSIENPTlRFTlQgQVJFQSAtLT4NCiAgIC AgICAgICAgICAgPHRi
    b2R5Pjx0cj4NCiAgICAgICAgICAgICAgICA8dGQgY2xhc3M9Im 5vLXdyYXBwZXIiIHdp
    ZHRoPSIxMDAlIiBzdHlsZT0iZm9udC1mYW1pbHk6VmVyZGFuYS wgc2Fucy1zZXJpZjtm
    b250LXNpemU6MTRweDt2ZXJ0aWNhbC1hbGlnbjp0b3A7Ym94LX NpemluZzpib3JkZXIt
    Ym94O3BhZGRpbmc6MHB4Ij4NCiAgICAgICAgICAgICAgICAgID x0YWJsZSBib3JkZXI9
    IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgd2 lkdGg9IjEwMCUiIGNs
    YXNzPSJsb2dvIiBzdHlsZT0iYm9yZGVyLWNvbGxhcHNlOnNlcG FyYXRlO21zby10YWJs
    ZS1sc3BhY2U6MHB0O21zby10YWJsZS1yc3BhY2U6MHB0O3dpZH RoOjEwMCU7Ym9yZGVy
    LXRvcDo1cHggc29saWQgIzY5Njk2OTtib3JkZXItYm90dG9tOj lweCBzb2xpZCAjNjk2
    OTY5Ij4NCiAgICAgICAgICAgICAgICAgICAgPHRib2R5Pjx0cj 4NCiAgICAgICAgICAg
    ICAgICAgICAgICA8dGQgc3R5bGU9ImZvbnQtZmFtaWx5OlZlcm RhbmEsIHNhbnMtc2Vy
    aWY7Zm9udC1zaXplOjE0cHg7dmVydGljYWwtYWxpZ246dG9wIj 4NCiAgICAgICAgICAg
    ICAgICAgICAgICAgIDxhIGhyZWY9Imh0dHBzOi8vd3d3LnViaX NvZnQuY29tIiBzdHls
    ZT0iY29sb3I6IzM0OThkYjt0ZXh0LWRlY29yYXRpb246dW5kZX JsaW5lO2Rpc3BsYXk6
    IGJsb2NrOyB3aWR0aDogMTAwJTsiPjxpbWcgc3JjPSJodHRwOi 8vc3RhdGljMi5jZG4u
    dWJpLmNvbS91cGxheS1jb25uZWN0L3YyL2FsbC91YmktbG9nby 1lbWFpbC5wbmciIHdp
    ZHRoPSIxODAiIGhlaWdodD0iNjQiIGNsYXNzPSJsb2dvLWltZy Igc3R5bGU9ImJvcmRl
    cjpub25lOy1tcy1pbnRlcnBvbGF0aW9uLW1vZGU6YmljdWJpYz ttYXgtd2lkdGg6MTAw
    JTttYXJnaW4tdG9wOjEwcHg7bWFyZ2luLWJvdHRvbTo1cHgiPj wvYT4NCiAgICAgICAg
    ICAgICAgICAgICAgICA8L3RkPg0KICAgICAgICAgICAgICAgIC AgICA8L3RyPg0KICAg
    ICAgICAgICAgICAgICAgPC90Ym9keT48L3RhYmxlPg0KICAgIC AgICAgICAgICAgIDwv
    dGQ+DQogICAgICAgICAgICAgIDwvdHI+DQogICAgICAgICAgIC AgIDwhLS0gRU5EIEhF
    QURFUiBDT05URU5UIEFSRUEgLS0+DQogICAgICAgICAgICA8L3 Rib2R5PjwvdGFibGU+
    DQogICAgICAgICAgICA8dGFibGUgY2xhc3M9Im1haW4iIHN0eW xlPSJib3JkZXItY29s
    bGFwc2U6c2VwYXJhdGU7bXNvLXRhYmxlLWxzcGFjZTowcHQ7bX NvLXRhYmxlLXJzcGFj
    ZTowcHQ7YmFja2dyb3VuZDojZmZmO2JvcmRlci1yYWRpdXM6MH B4O3dpZHRoOjEwMCU7
    bWFyZ2luLWJvdHRvbTozMHB4Ij4NCiAgICAgICAgICAgICAgPC EtLSBTVEFSVCBNQUlO
    IENPTlRFTlQgQVJFQSAtLT4NCiAgICAgICAgICAgICAgPHRib2 R5Pjx0cj4NCiAgICAg
    ICAgICAgICAgICA8dGQgY2xhc3M9IndyYXBwZXIiIHN0eWxlPS Jmb250LWZhbWlseTpW
    ZXJkYW5hLCBzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxNHB4O3Zlcn RpY2FsLWFsaWduOnRv
    cDtib3gtc2l6aW5nOmJvcmRlci1ib3g7cGFkZGluZzoyMHB4Ij 4NCiAgICAgICAgICAg
    ICAgICAgIDx0YWJsZSBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPS IwIiBjZWxsc3BhY2lu
    Zz0iMCIgc3R5bGU9ImJvcmRlci1jb2xsYXBzZTpzZXBhcmF0ZT ttc28tdGFibGUtbHNw
    YWNlOjBwdDttc28tdGFibGUtcnNwYWNlOjBwdDt3aWR0aDoxMD AlIj4NCiAgICAgICAg
    ICAgICAgICAgICAgPHRib2R5Pjx0cj4NCiAgICAgICAgICAgIC AgICAgICAgICA8dGQg
    c3R5bGU9ImZvbnQtZmFtaWx5OlZlcmRhbmEsIHNhbnMtc2VyaW Y7Zm9udC1zaXplOjE0
    cHg7dmVydGljYWwtYWxpZ246dG9wIj4NCiAgICAgICAgICAgIC AgICAgICAgICAgIDxw
    IHN0eWxlPSJmb250LWZhbWlseTpWZXJkYW5hLCBzYW5zLXNlcm lmO2ZvbnQtc2l6ZTox
    NHB4O2ZvbnQtd2VpZ2h0Om5vcm1hbDttYXJnaW46MDtNYXJnaW 4tYm90dG9tOjE1cHg7
    bGlzdC1zdHlsZS10eXBlOmRpc2MiPkhpLDwvcD4NCiAgICAgIC AgICAgICAgICAgICAg
    ICAgIDxwIHN0eWxlPSJmb250LWZhbWlseTpWZXJkYW5hLCBzYW 5zLXNlcmlmO2ZvbnQt
    c2l6ZToxNHB4O2ZvbnQtd2VpZ2h0Om5vcm1hbDttYXJnaW46MD tNYXJnaW4tYm90dG9t
    OjE1cHg7bGlzdC1zdHlsZS10eXBlOmRpc2MiPkFuIHVudXN1YW wgYWN0aXZpdHkgd2Fz
    IHJlY2VudGx5IHJlZ2lzdGVyZWQgb24geW91ciBVYmlzb2Z0IG FjY291bnQgZm9yJm5i
    c3A7dGhlIGZvbGxvd2luZyBlbWFpbCBhZGRyZXNzOiZuYnNwO3 RodWc0bGlmZTIwMDVA
    eWFob28uY29tLiBQbGVhc2UgcmV2aWV3IHRoZSBkZXRhaWxzIG JlbG93OjwvcD4gDQog
    ICAgICAgICAgICAgICAgICAgICAgICA8dWwgc3R5bGU9ImZvbn QtZmFtaWx5OlZlcmRh
    bmEsIHNhbnMtc2VyaWY7Zm9udC1zaXplOjE0cHg7Zm9udC13ZW lnaHQ6bm9ybWFsO21h
    cmdpbjowO01hcmdpbi1ib3R0b206MTVweDtwYWRkaW5nLWxlZn Q6MjBweDtsaXN0LXN0
    eWxlLXR5cGU6ZGlzYyI+DQogICAgICAgICAgICAgICAgICAgIC AgICAgIDxsaSBzdHls
    ZT0ibGlzdC1zdHlsZS1wb3NpdGlvbjppbnNpZGU7TWFyZ2luLW xlZnQ6MHB4O01hcmdp
    bi1ib3R0b206NnB4O21zby1zcGVjaWFsLWZvcm1hdDpidWxsZX Q7bGlzdC1zdHlsZS10
    eXBlOmRpc2MiPkFjdGl2aXR5OiBMb2dpbjwvbGk+DQogICAgIC AgICAgICAgICAgICAg
    ICAgICAgIDxsaSBzdHlsZT0ibGlzdC1zdHlsZS1wb3NpdGlvbj ppbnNpZGU7TWFyZ2lu
    LWxlZnQ6MHB4O01hcmdpbi1ib3R0b206NnB4O21zby1zcGVjaW FsLWZvcm1hdDpidWxs
    ZXQ7bGlzdC1zdHlsZS10eXBlOmRpc2MiPkNvdW50cnk6IEdlcm 1hbnk8L2xpPg0KICAg
    ICAgICAgICAgICAgICAgICAgICAgICA8bGkgc3R5bGU9Imxpc3 Qtc3R5bGUtcG9zaXRp
    b246aW5zaWRlO01hcmdpbi1sZWZ0OjBweDtNYXJnaW4tYm90dG 9tOjZweDttc28tc3Bl
    Y2lhbC1mb3JtYXQ6YnVsbGV0O2xpc3Qtc3R5bGUtdHlwZTpkaX NjIj5JUCBhZGRyZXNz
    OiAxOTMuMzIuOTUuMTA1PC9saT4NCiAgICAgICAgICAgICAgIC AgICAgICAgIDwvdWw+
    PGJyPg0KDQogICAgICAgICAgICAgICAgICAgICAgICA8cCBzdH lsZT0iZm9udC1mYW1p
    bHk6VmVyZGFuYSwgc2Fucy1zZXJpZjtmb250LXNpemU6MTRweD tmb250LXdlaWdodDpu
    b3JtYWw7bWFyZ2luOjA7TWFyZ2luLWJvdHRvbToxNXB4O2xpc3 Qtc3R5bGUtdHlwZTpk
    aXNjO2ZvbnQtd2VpZ2h0OmJvbGQ7Ij5JZiB0aGlzIHdhcyB5b3 U6PC9wPg0KICAgICAg
    ICAgICAgICAgICAgICAgICAgPHAgc3R5bGU9ImZvbnQtZmFtaW x5OlZlcmRhbmEsIHNh
    bnMtc2VyaWY7Zm9udC1zaXplOjE0cHg7Zm9udC13ZWlnaHQ6bm 9ybWFsO21hcmdpbjow
    O01hcmdpbi1ib3R0b206MTVweDtsaXN0LXN0eWxlLXR5cGU6ZG lzYyI+R3JlYXQhIFlv
    dSBjYW4gc2FmZWx5IGlnbm9yZSB0aGlzIGVtYWlsLjwvcD48Yn I+DQoNCiAgICAgICAg
    ICAgICAgICAgICAgICAgIDxwIHN0eWxlPSJmb250LWZhbWlseT pWZXJkYW5hLCBzYW5z
    LXNlcmlmO2ZvbnQtc2l6ZToxNHB4O2ZvbnQtd2VpZ2h0Om5vcm 1hbDttYXJnaW46MDtN
    YXJnaW4tYm90dG9tOjE1cHg7bGlzdC1zdHlsZS10eXBlOmRpc2 M7Zm9udC13ZWlnaHQ6
    Ym9sZDsiPklmIHRoaXMgd2Fzbid0IHlvdTo8L3A+DQogICAgIC AgICAgICAgICAgICAg
    ICAgICA8cCBzdHlsZT0iZm9udC1mYW1pbHk6VmVyZGFuYSwgc2 Fucy1zZXJpZjtmb250
    LXNpemU6MTRweDtmb250LXdlaWdodDpub3JtYWw7bWFyZ2luOj A7TWFyZ2luLWJvdHRv
    bToxNXB4O2xpc3Qtc3R5bGUtdHlwZTpkaXNjIj5Zb3VyIFViaX NvZnQgYWNjb3VudCBt
    YXkgaGF2ZSBiZWVuIGNvbXByb21pc2VkIGFuZCB5b3Ugc2hvdW xkIHRha2UgYSBmZXcg
    c3RlcHMgdG8gbWFrZSBzdXJlIGl0IGlzIHNlY3VyZS4gVG8gc3 RhcnQsIDxhIGhyZWY9
    Imh0dHBzOi8vYWNjb3VudC11cGxheS51YmkuY29tL2VuLVVTL3 NlY3VyaXR5LXNldHRp
    bmdzIiB2ZXJpZmljYXRpb249IiIgbGluaz0iIiBzdHlsZT0iY2 9sb3I6IzM0OThkYjt0
    ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lIj48c3Ryb25nPnJlc2 V0IHlvdXIgcGFzc3dv
    cmQ8L3N0cm9uZz48L2E+IG5vdy4gQWZ0ZXIgdGhhdCwgd2Ugcm Vjb21tZW5kIHlvdSB0
    byAgPGEgaHJlZj0iaHR0cHM6Ly9hY2NvdW50LXVwbGF5LnViaS 5jb20vZW4tVVMvc2Vj
    dXJpdHktc2V0dGluZ3MiIHZlcmlmaWNhdGlvbj0iIiBsaW5rPS IiIHN0eWxlPSJjb2xv
    cjojMzQ5OGRiO3RleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmUiPj xzdHJvbmc+YWN0aXZh
    dGUgdGhlIDItU3RlcCBWZXJpZmljYXRpb248L3N0cm9uZz48L2 E+IHRvIGVuaGFuY2Ug
    dGhlIHNlY3VyaXR5IG9mIHlvdXIgYWNjb3VudC48L3A+PGJyPg 0KDQogICAgICAgICAg
    ICAgICAgICAgICAgICA8cCBzdHlsZT0iZm9udC1mYW1pbHk6Vm VyZGFuYSwgc2Fucy1z
    ZXJpZjtmb250LXNpemU6MTRweDtmb250LXdlaWdodDpub3JtYW w7bWFyZ2luOjA7TWFy
    Z2luLWJvdHRvbToxNXB4O2xpc3Qtc3R5bGUtdHlwZTpkaXNjIj 5OZWVkIGFkZGl0aW9u
    YWwgaGVscD8gQ29udGFjdCA8YSBocmVmPSJodHRwczovL3N1cH BvcnQudWJpLmNvbS9D
    b250YWN0IiBzdHlsZT0iY29sb3I6IzM0OThkYjt0ZXh0LWRlY2 9yYXRpb246dW5kZXJs
    aW5lIj5VYmlzb2Z0IEN1c3RvbWVyIFN1cHBvcnQ8L2E+LjwvcD 4NCiAgICAgICAgICAg
    ICAgICAgICAgICAgIDxwIHN0eWxlPSJmb250LWZhbWlseTpWZX JkYW5hLCBzYW5zLXNl
    cmlmO2ZvbnQtc2l6ZToxNHB4O2ZvbnQtd2VpZ2h0Om5vcm1hbD ttYXJnaW46MDtNYXJn
    aW4tYm90dG9tOjE1cHg7bGlzdC1zdHlsZS10eXBlOmRpc2MiPl ViaXNvZnQ8L3A+DQog
    ICAgICAgICAgICAgICAgICAgICAgPC90ZD4NCiAgICAgICAgIC AgICAgICAgICAgPC90
    cj4NCiAgICAgICAgICAgICAgICAgIDwvdGJvZHk+PC90YWJsZT 4NCiAgICAgICAgICAg
    ICAgICA8L3RkPg0KICAgICAgICAgICAgICA8L3RyPg0KICAgIC AgICAgICAgICA8IS0t
    IEVORCBNQUlOIENPTlRFTlQgQVJFQSAtLT4NCiAgICAgICAgIC AgIDwvdGJvZHk+PC90
    YWJsZT4NCiAgICAgICAgICAgIDwhLS0gU1RBUlQgRk9PVEVSIC 0tPg0KICAgICAgICAg
    ICAgPGRpdiBjbGFzcz0iZm9vdGVyIiBzdHlsZT0iY2xlYXI6Ym 90aDtwYWRkaW5nLXRv
    cDoxMHB4O3RleHQtYWxpZ246Y2VudGVyO3dpZHRoOjEwMCUiPg 0KICAgICAgICAgICAg
    ICA8dGFibGUgYm9yZGVyPSIwIiBjZWxscGFkZGluZz0iMCIgY2 VsbHNwYWNpbmc9IjAi
    IHN0eWxlPSJib3JkZXItY29sbGFwc2U6c2VwYXJhdGU7bXNvLX RhYmxlLWxzcGFjZTow
    cHQ7bXNvLXRhYmxlLXJzcGFjZTowcHQ7d2lkdGg6MTAwJSI+DQ ogICAgICAgICAgICAg
    ICAgPHRib2R5Pjx0cj4NCiAgICAgICAgICAgICAgICAgIDx0ZC BjbGFzcz0iY29udGVu
    dC1ibG9jayIgc3R5bGU9InZlcnRpY2FsLWFsaWduOiB0b3A7IH RleHQtYWxpZ246IGNl
    bnRlcjsiPg0KICAgICAgICAgICAgICAgICAgICA8cCBzdHlsZT 0iY29sb3I6IHJnYigx
    NTMsIDE1MywgMTUzKTsgZm9udC1mYW1pbHk6IFZlcmRhbmEsIH NhbnMtc2VyaWY7IGZv
    bnQtc2l6ZTogMTJweDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbW FyZ2luOiAwcHggMHB4
    IDE1cHg7IGxpc3Qtc3R5bGUtdHlwZTogZGlzYzsgdGV4dC1hbG lnbjogY2VudGVyOyI+
    4oCcwqkyMDE4IFViaXNvZnQgRW50ZXJ0YWlubWVudC4gQWxsIH JpZ2h0cyByZXNlcnZl
    ZC4gVWJpc29mdCBhbmQgdGhlIFViaXNvZnQgbG9nbyBhcmUgdH JhZGVtYXJrcyBvZiBV
    Ymlzb2Z0IEVudGVydGFpbm1lbnQgaW4gdGhlIFUuUy4gYW5kL2 9yIG90aGVyIGNvdW50
    cmllcy48L3A+PHAgc3R5bGU9ImNvbG9yOiByZ2IoMTUzLCAxNT MsIDE1Myk7IGZvbnQt
    ZmFtaWx5OiBWZXJkYW5hLCBzYW5zLXNlcmlmOyBmb250LXNpem U6IDEycHg7IGZvbnQt
    d2VpZ2h0OiBub3JtYWw7IG1hcmdpbjogMHB4IDBweCAxNXB4Oy BsaXN0LXN0eWxlLXR5
    cGU6IGRpc2M7IHRleHQtYWxpZ246IGNlbnRlcjsiPlVCSVNPRl QgRU5URVJUQUlOTUVO
    VCBTLkEuLCBhIHNvY2nDqXTDqSBhbm9ueW1lIGluY29ycG9yYX RlZCB1bmRlciB0aGUg
    bGF3cyBvZiBGcmFuY2UgaGF2aW5nIGl0cyByZWdpc3RlcmVkIG 9mZmljZSBhdCAxMDcg
    QXZlbnVlIEhlbnJpIEZyZXZpbGxlLCBCUCAxMDcwLCAzNTIwNy BSZW5uZXMsIEZyYW5j
    ZeKAnTwvcD4NCiAgICAgICAgICAgICAgICAgICAgPHAgc3R5bG U9ImNvbG9yOiByZ2Io
    MTUzLCAxNTMsIDE1Myk7IGZvbnQtZmFtaWx5OiBWZXJkYW5hLC BzYW5zLXNlcmlmOyBm
    b250LXNpemU6IDEycHg7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IG 1hcmdpbjogMHB4IDBw
    eCAxNXB4OyBsaXN0LXN0eWxlLXR5cGU6IGRpc2M7IHRleHQtYW xpZ246IGNlbnRlcjsi
    PlB1cnN1YW50IHRvIHRoZSBFdXJvcGVhbiBEaXJlY3RpdmUgOT UvNDYvQ0UsIHlvdSBo
    YXZlIHRoZSByaWdodCB0byBhY2Nlc3MsIG1vZGlmeSwgcmVjdG lmeSBhbmQgZGVsZXRl
    IGFueSBwZXJzb25hbCBkYXRhIGNvbmNlcm5pbmcgeW91LjwvcD 4NCiAgICAgICAgICAg
    ICAgICAgIDwvdGQ+DQogICAgICAgICAgICAgICAgPC90cj4NCi AgICAgICAgICAgICAg
    PC90Ym9keT48L3RhYmxlPg0KICAgICAgICAgICAgPC9kaXY+DQ ogICAgICAgICAgICA8
    IS0tIEVORCBGT09URVIgLS0+IDwhLS0gRU5EIENFTlR***VEIF dISVRFIENPTlRBSU5F
    UiAtLT4NCiAgICAgICAgICA8L2Rpdj4NCiAgICAgICAgPC90ZD 4NCiAgICAgICAgPHRk
    IHN0eWxlPSJmb250LWZhbWlseTpWZXJkYW5hLCBzYW5zLXNlcm lmO2ZvbnQtc2l6ZTox
    NHB4O3ZlcnRpY2FsLWFsaWduOnRvcCI+Jm5ic3A7PC90ZD4NCi AgICAgIDwvdHI+DQog
    ICAgPC90Ym9keT48L3RhYmxlPg==



    The ip address (216.98.52.35) that sent the e-mail is in fact from ubisoft. I'm guessing a hacker. But i'll change my password just to be safe.
    Share this post

  6. #6
    I also have 2FA active and today someone from Brazil logged into my Account (also having 4 failed login attempts 4 days ago from around the world)
    Share this post

  7. #7
    UbiGabrinth's Avatar Ubisoft Support Staff
    Join Date
    Mar 2017
    Posts
    6,366
    I do see many failed login attempts. I recommend that you consider changing the email on your account to avoid those continuing. There isn't a way for us to stop attempts otherwise.

    I do see a successful login. It is likely that the user logged into a website that doesn't require two-step verification -- a website where nothing could be changed.
    Share this post

  8. #8
    Hallo,

    Auf deinem Ubisoft-Konto mit der E-Mail-Adresse (--------------------) wurde kürzlich eine verdächtige Aktivität festgestellt. Im Folgenden findest du weitere Einzelheiten:

    Aktivität: Login
    Land: Albanien
    IP-Adresse: 185.191.166.109


    Falls du das warst:

    Klasse! Du kannst diese E-Mail getrost ignorieren.

    Falls du es nicht warst:

    Dein Ubisoft-Konto wurde möglicherweise gehackt und du solltest ein paar Schritte ausführen, um sicherzustellen, dass es sicher ist. In einem ersten Schritt solltest du jetzt dein Passwort zurücksetzen. Anschließend empfehlen wir, die 2-Schritt-Überprüfung zu aktivieren, um die Sicherheit deines Kontos zu erhöhen.

    Brauchst du Hilfe? Kontaktiere den Ubisoft-Kundendienst.

    Ubisoft

    i have 2FA

    HELP ADMINS
    Share this post

  9. #9
    Ubi-Gumdrops's Avatar Ubisoft Support Staff
    Join Date
    May 2018
    Posts
    2,374
    Hey there P4NiiC! Sorry to see you received this email. I'd recommend updating your password in this instance.
    Share this post

  10. #10
    Same problem as OP. I have the 2step authentication set already and today I received an email that someone has logged into my account from Ukraine! How is that possible? When I log in to my account from my browser I have to enter the digits from authenticator. How could this hacker bypass that from a different IP and login to my account when I cannot do so from my own IP??

    Anyways I have changed my password now, but this makes me question the reliability of the 2 step verification.
    Share this post

Page 1 of 8 123 ... Last ►►