5

Yesterday I received 2 SMS from my Gmail account. Somebody tried to login to my account. He/she tried to use SMS to reset my password. Can anybody tell me how to find the IP from which the attacker sent the password recovery SMS?

I didn't get any email from the Gmail team. I could easily login with my previous password after the attack.

1 Answer 1

6

To see the IP addresses and access methods for your Gmail account, you probably want to look at the Last account activity page.

This page is accessed by the "Details" link at the bottom of the gmail web page.

How to access Gmail's last account activity page

I'm not sure there is a way to find out the originating IP of a password recovery request, however it is very unlikely that your gmail account was compromised via the SMS recovery method.

For this to happen, the attacker would have had to somehow login to your account (know your password in the first place), then update your recovery options and change the phone number.

So the good news is that your account is probably still secure, and you got an SMS message from google which alerted you that someone tried to use SMS password recovery and probably failed, as long as they have no access to your phone or SMS messages.

2
  • I tried this. This shows login info. But the person couldn't login rather then sending two sms reset code. Can I find from which IP the person used to do that job? Sorry for the delay.
    – Cool Brain
    Dec 16, 2012 at 10:33
  • As far as I've been able to gather, Google does not provide a way for users to get the IP from which a password reset request comes from.
    – TrinitronX
    Dec 17, 2012 at 19:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.