San dai - I got 3 of those emails too! :) Would this be something you could take up with the people who supplied that IP and report its abuse? When I looked up my password change IP, it resolved to a DNS host of "Asia-Pacific Network Information Center" (website: - http://www.apnic.net/ ) Your call but I honestly think you shouldn't let go of this person so lightly because unless he or she understands there is a consequence to doing this, I bet you they will try again, perhaps in some other way. Just my thoughts.