LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Gmail accessed by a foreign IP addresses that aren't mine. (https://www.linuxquestions.org/questions/linux-security-4/gmail-accessed-by-a-foreign-ip-addresses-that-arent-mine-813251/)

lupusarcanus 06-09-2010 09:43 PM

Gmail accessed by a foreign IP addresses that aren't mine.
 
Well I changed the password immediately after finding out, but I don't know if I should call somebody like Google or my ISP or what...?

All of them were in the 8.22.161.* field and all were traced/WHOIS to Level 3 Communications, which is a big ISP company apparently but not my ISP specifically.

I also did a Nmap scan on 8.22.161.1 and Nmap's OS fingerprint said it looked like some sort of router...

Should I just forget about it or what? Thanks for your help. A bit scary... :(

yooy 06-09-2010 10:26 PM

Today many websites try to use their users mail accounts to import contacts. Maybe thats it.

anomie 06-09-2010 11:03 PM

A geo IP locate puts that IP space in Palm Harbor, Florida. (I wouldn't exactly call that "foreign". YMMV.)

Assuming you're using strong passwords, the troubling question is: how could someone have gotten it? Do you log in to gmail from Windows systems? How about from public (e.g. library) systems? Do you use the same password for gmail as for other web services?

I don't have any good answers, but if I were in your shoes I'd be carefully thinking through my usage habits.


All times are GMT -5. The time now is 07:20 PM.