Breach through VNC [migrated]

Breach through VNC [migrated]

I accidentally overlooked that I hadn't assigned a password when I set up
my VNC server. I had been using it remotely and it never occurred to me
that ANYONE could access my PC. I caught the unauthorized user making a
purchase to the Walmart website (using someone elses information, not
mine) in which I immediately disabled the internet. I want to report the
incident to my local authorities but I'd like to at least give a tad more
information like the IP address.
Doesn't VNC keep logs of incoming connections? I can't seem to find the
VNC logs in Ubuntu 13.04 64-bit. Is there any other logs I can search for
this IP address? I remember it started with 41.x.. before it disappeared
from the VNC incoming connection notification.