Hack Forums
Gmail account access conditions triggering verfication code request - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Gmail account access conditions triggering verfication code request (/showthread.php?tid=5676707)



Gmail account access conditions triggering verfication code request - pupu78 - Jul 23, 2017

Hi,

I'm trying to figure out what exact conditions trigger gmail to block access and request a verification code sent by phone when trying to access a gmail account.
Gmail sends emails informing of suspicious activity when for instance a different device, email client, or different IP geolocation is used. But these conditions alone do not trigger the request of a verification code sent to the recovery mobile phone linked to the account.
From examining the whois command outputs of servers/proxies trying to access gmail accounts, it would seem that the servers that do not provide "org" attributes are flagged and blocked by gmail in this way.
Can anyone confirm this to me?
Thanks


* - WhiteArm - Aug 4, 2017

I have same question with you, I have tested using same IP country or city (by proxy) but still triggered verification request, I think some user of gmail have they own setting on their google account for security, for example 2FA, swipe phone to sign in or send text code, if there is no security setting enable on their account then request of verification will not trigger
CMIIW


* - DeLiiRiuM - Aug 4, 2017

(Aug 4, 2017 05:40 AM)WhiteArm Wrote:  I have same question with you, I have tested using same IP country or city (by proxy) but still triggered verification request, I think some user of gmail have they own setting on their google account for security, for example 2FA, swipe phone to sign in or send text code, if there is no security setting enable on their account then request of verification will not trigger
CMIIW

This is not true, all gmail accounts have this security feature
🤝