yeah they do record all ips, but as soon as you log into your paypal account from an unrecognized ip you are asked security questions (bank or creditcard #) unless you didnt have these on your account then possibly he got your password from some database of a site you used to frequent. Call paypal and see what they can do.