Yesterday I wrote about the importance of using good passwords because people are trying to bruteforce your email and social networking accounts. Today I logged into GMail and received a dire red letter message. “your email has been accessed from the United States.”
Upon reviewing the Gmail account activity log, I see access to my account from United States (CA) (220.127.116.11). An IPWhois wasn’t very helpful , its been registered to Verizon Business/MCI/UUNet. A google happened to include reverse DNS in the results showing me that 18.104.22.168 resolves to host44.tivo.com. After verifying that that host44.tivo.com also resolves to 22.214.171.124, I recalling using TiVo to watch some Youtube clips the other night. I used my Google account to log into Youtube from the Tivo. Mystery solved.
Apparently Google’s GMail tripwire is catching all Google authentications. Either that TiVo took my Google credentials and logged into GMail as well as youtube. The timestamp for the authentication doesn’t really line up with when I was watching the Youtube. Make me wonder if this is as innocent as I’d like to believe. Google really should differentiate between email access and authentications to other Google services.