Somebody trying to hack my gmail account

esumitkumar · 05-07-2010, 11:13 AM

Hi all

I have been receiving several gmail account recovery assistance mails on my other account and recovery SMS on my cell over a few months

This happens on a gap of every 15-20 days frequently

Some of my old friend is trying to reset my gmail accnt password thereby gaining access to account

Now I am pasting this recovery mail in full header

Can somebody help me to get mail's orginating geo location

(from which city this mail originated so I can guess who's the culprit)

Google Password Assistance

Monday, 5 July, 2010 10:02 AM
From account-recovery-noreply@google.com Mon Jul 5 04:32:19 2010

X-Apparently-To:
--------- via 203.104.17.160; Sun, 04 Jul 2010 21:32:20 -0700 Return-Path:
<3u2axtbgkadenppbhag-erpbirel-abercyltbbtyr.pbz@gaia.bounces.google.com> Received-SPF:
pass (mta1072.mail.sp2.yahoo.com: domain of 3u2axtbgkadenppbhag-erpbirel-abercyl...ces.google.com designates 74.125.83.197 as permitted sender) X-YMailISG:
MK0I_sQcZAqzsYsnFmYtGGVG9IH5qKBmbMIDRDIdbLGAWuZY .wIJT6OCRmLIA4PkeeKQPhWU1.Frp4nV_ib0fEHJzL8I1Q3.aQ H9QXWmtNWM TTKOFHUZYHb6kQoar2b_nWOF.YRRzdslBy9DVXdeVmPXsBwA3R 3GzGoojCqj pwyLXdKfXzeeBWLNQLwexuy7qnNHuWIAfPouBiKNudqau4rswq I_qi9POMxx XZmpFJoB5CdXxbuSgJ8URfVWW3D.Zi.usXO0r32R7CO6j9klow BoCC4OI9ev ZBjVnZqK.kX.fIRly0lR8WMATktGlyRo5BljdJ1yWkIfo0h_6d fsfpQj231_ dIwdd6edDWqMw4vkxYmNgZ0MYMwGwYT9GKlRplA4bHvYarxzzy aRVQRGgurF fj_i9qCuiYA8OMuWIldlMrqi0Qm2I84VeFb2T6uagVyjcOjL6i jpRnju2Iz2 .3Z3LU3ec5BeiaVe8IVuMxbacnRV4qsg2gaYAFvIE.9_2WBJWo b_VHiwner4 msLWhZUAKVjdcGS0poHGIENKLN2EzwsmA4TFZ2iBL2P7mRqbD2 Urywmu7DHU QH77so1gAhx6Gi.8eBCkJrmPd6RLWr09BnXf_vn4Alz3TzCDAU 34cXNbcEtq K_9a9qSbYOiiYrLeaewuvFpwmUZlcrnARvjSbORjKi.T7Xm9ZB rq.sxYGRbF FiSiJii8eHPQqeqb_AsZmsLsqN1xQL4H4Ryi_B02uuTKoyQ5cm 2VFN2NeEo- X-Originating-IP:
[74.125.83.197] Authentication-Results:
mta1072.mail.sp2.yahoo.com from=google.com; domainkeys=pass (ok); from=google.com; dkim=pass (ok) Received:
from 127.0.0.1 (EHLO mail-pv0-f197.google.com) (74.125.83.197) by mta1072.mail.sp2.yahoo.com with SMTP; Sun, 04 Jul 2010 21:32:19 -0700 Received:
by mail-pv0-f197.google.com with SMTP id 12so1413214pvd.4 for <-------------->; Sun, 04 Jul 2010 21:32:19 -0700 (PDT) DKIM-Signature:
v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=beta; h=domainkey-signature:mime-version:received:message-id:date:subject :from:to:content-type; bh=dklsfapmWGI6yOl8RIYrRC7jkzRJwH+Fm/JF38VDtKE=; b=Ay3J+L56IyZNBa/534ejqsDzN46ig4DHnnxRIfEXrbRKYksWzH1Cb1/ZJIXWGu2MZH zKO0rUVBOZcP1sO7OtiA== DomainKey-Signature:
a=rsa-sha1; c=nofws; d=google.com; s=beta; h=mime-version:message-id:date:subject:from:to:content-type; b=PyOlZYPp9hqUhpNz7MM6kAypaIPOaRu86HZmRMFRAdokJYsl xyDZCjv7HmdbI+hz9W e/BWYED7trJxe8Z5MyNg== MIME-Version:
1.0 Received:
by 10.114.94.3 with SMTP id r3mr447462wab.20.1278304339716; Sun, 04 Jul 2010 21:32:19 -0700 (PDT) Message-ID:
<38ed3d0d8a4b7fc5.accounts@google.com> Date:
Mon, 05 Jul 2010 04:32:19 +0000 Subject:
Google Password Assistance From:
This sender is DomainKeys verified account-recovery-noreply@google.com
Add sender to Contacts To:

Content-Type:
text/plain; charset=ISO-8859-1; format=flowed; delsp=yes Content-Length:
804

dheeraj_kumar · 06-07-2010, 08:59 AM

It looks like this request is from a yahoo mail server. That's all. All IPs are the servers' addresses, meaning, from US. No readable information about sender is specified.