some twunt in china hacked my gmail account

[edo]

... sand sent some bks email to my entire address book.

Can see his IP in my login history (pass all changed now)

Anything I can do with this?

115.49.61.192

[CedGTV]

Lookup IP Information


IP Information - 115.49.61.192
Host name hn.kd.ny.adsl
Country China
Country Code CN
Region Beijing
City Beijing
Latitude 39.9289
Longitude 116.3883
Approximate Geographic Location
1 miles1 miles© 2010 Microsoft Corporation © AND © 2010 Microsoft Corporation © AND 2D3DRoadAerialBird's eyeLabelsSee this location in bird's eye view
Bing Maps 3D has finished updating
Whois Information

2. Query terms are ambiguous. The query is assumed to be:
3. "n 115.49.61.192"
5. Use "?" to get help.

2. The following results may also be obtained via:
3. http://whois.arin.net/rest/nets;q=115.49.61.192?sh...

NetRange: 115.0.0.0 - 115.255.255.255
CIDR: 115.0.0.0/8
OriginAS:
NetName: APNIC-115
NetHandle: NET-115-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: TINNIE.ARIN.NET
NameServer: SEC1.AUTHDNS.RIPE.NET
NameServer: NS4.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS1.APNIC.NET
NameServer: NS2.LACNIC.NET
Comment: This IP address range is not registered in the ARIN database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or http://wq.apnic.net/apnic-bin/whois.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet Registry
Comment: for the Asia Pacific region. APNIC does not operate networks
Comment: using this IP address range and is not able to investigate
Comment: spam or abuse reports relating to these addresses. For more
Comment: help, refer to http://www.apnic.net/apnic-info/whois_search2/abus...
RegDate: 2007-10-29
Updated: 2010-07-30
Ref: http://whois.arin.net/rest/net/NET-115-0-0-0-1

OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU
RegDate:
Updated: 2004-03-01
Ref: http://whois.arin.net/rest/org/APNIC

ReferralServer: whois://whois.apnic.net

OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: [phone]
OrgTechEmail: [e-mail]
OrgTechRef: http://whois.arin.net/rest/poc/AWC12-ARIN

2. ARIN WHOIS data and services are subject to the Terms of Use
3. available at: https://www.arin.net/whois_tou.html

[paddyhasneeds]

edo said:

... sand sent some bks email to my entire address book.

Can see his IP in my login history (pass all changed now)

Anything I can do with this?

115.49.61.192

Just change your password to something much, much stronger.

It's China, they don't give a fk.

[ShadownINja]

Even if that info gave you the guy's home address, as it's likely to be a dodgy criminal, you'd be foolish to pay him a visit.

[edo]

it was already pretty strong (numbers non disctonary word etc).

I thought if more than a few trys the account would have locked? Below is their access - first wasnt a browser...

Unknown China (ny.adsl:115.49.61.192) 09:11 (3.5 hours ago)
Browser China (115.49.61.192) 09:11 (3.5 hours ago)

[edo]

ShadownINja said:

Even if that info gave you the guy's home address, as it's likely to be a dodgy criminal, you'd be foolish to pay him a visit.

GLOL. Flight may be expensive too!

[john_p]

Strongly urge a good virus / malware check to ensure nothing nasty is on your machine...

[edo]

john_p said:

Strongly urge a good virus / malware check to ensure nothing nasty is on your machine...

Thanks. All done.

[lestag]

http://computerworld.co.nz/news.nsf/security/googl...
Get this if you can

[cmackay81]

edo said:

it was already pretty strong (numbers non disctonary word etc).

I thought if more than a few trys the account would have locked? Below is their access - first wasnt a browser...

Unknown China (ny.adsl:115.49.61.192) 09:11 (3.5 hours ago)
Browser China (115.49.61.192) 09:11 (3.5 hours ago)

Do you use your e-mail password for other sites/forums etc

generally, e-mail addresses aren't hacked, but password lists for forums/sites etc are sold by employees.
This is why it is very important to have different passwords for every site; and not to do it in too obvious a way!

[edo]

cmackay81 said:

edo said:

it was already pretty strong (numbers non disctonary word etc).

I thought if more than a few trys the account would have locked? Below is their access - first wasnt a browser...

Unknown China (ny.adsl:115.49.61.192) 09:11 (3.5 hours ago)
Browser China (115.49.61.192) 09:11 (3.5 hours ago)

Do you use your e-mail password for other sites/forums etc

generally, e-mail addresses aren't hacked, but password lists for forums/sites etc are sold by employees.
This is why it is very important to have different passwords for every site; and not to do it in too obvious a way!

interesting. No, generally have different (and more secure on email).

Will review though, thanks.

[itsnotarace]

Change your password back to what it was and then send yourself a strongly worded email, he will then read said email and you may hurt his feelings.

[edo]

itsnotarace said:

Change your password back to what it was and then send yourself a strongly worded email, he will then read said email and you may hurt his feelings.

GLOL.

[ShadownINja]

edo said:

ShadownINja said:

Even if that info gave you the guy's home address, as it's likely to be a dodgy criminal, you'd be foolish to pay him a visit.

GLOL. Flight may be expensive too!

Depends on your rage.