Weird Ip's when logging in

Hey everyone, i recently logged into my account and noticed a different IP address at the top...however when i checked my items, they were all there. So i logged out. next day i log back in to see if it happened again, and the same exact IP address was there from the first time. This time however, my bank pin had been removed AND all of my valuable items were sitting in my inventory.

I immediately enabled that account guardian, changed my password and all that. I got a picture of the persons IP address and will post it in this thread.

**IM NOT SURE HOW TO POST IMAGES....THE IP ADDRESS IS: 174.6.238.123

Can anyone find out where that IP is coming from?

 

http://whois.domaintools.com/
http://www.utrace.de/

It seems the IP is located near Vancouver, BC (Canada).
The IP won't go to an exact location, and it's possible they used a VPN or proxy.

Run a virus scan to check for any RATs in case you were keylogged. As you've changed your PW/enabled JAG that's all the info I can give to help!

 

virus scan asap

 

9/10 that means you've got someone who knows the account information... First step is to check and remove all facebook associations with the account. Then change EMAILS on the account (because if they get a hold of the password change you're fucked). Next change your password.

After that please change the password to your email itself and perhaps facebook if you have had it linked to the account (in order to prevent any further unauthorized logins)

 

Download malwarebytes and check if anything comes up. You might be ratted.

 

hmmm.. i would also email Jagex if this keeps happening.

 

Awesome, thanks for the help guys!

 

Use malwarebytespro version and CCleaner which should solve this problem.

 

Did you accidently post your username and pass on a scam report?

Reason asking is cause I was reading scam reports and it showed skype messages that had username and pass on it, and he didn't block it out and then he was whining about losing 160m?

 

some times during login it will change your ip from numbers to like virgin media it is due to the host/ specially if there is a update just happened

 

Keylogger probably buddy.