User got emails sent to herself.. from herself.. when she wasn't here..
I know some people have permissions to send as other people.. but I don't think that is what happend. One of the emails subject line is: 557, and the contents are "969" ...
The other email subject line is: 57657, with contents being: 5556..
Both of the messages headers show it came from IP 213.184.232.163
Heres a snippet
Now I really don't think it's a company site.. and if you go to the IP directly.. it asks you to log in to 'Viking'.. if you tracert it, it lokos lke it comes from x.aichyna.com .. which is in like.. a different language..
Should the user be worried? I suppose I should have her change her password to be safe..?
I know some people have permissions to send as other people.. but I don't think that is what happend. One of the emails subject line is: 557, and the contents are "969" ...
The other email subject line is: 57657, with contents being: 5556..
Both of the messages headers show it came from IP 213.184.232.163
Heres a snippet
Code:
X-Originating-IP: [213.184.232.163]
X-SpamReason: No, hits=4.9 required=7.0 tests=HTML_80_90,HTML_MESSAGE,
HTML_SHORT_LENGTH,MIME_HTML_ONLY,MSGID_SPAM_LETTERS
Received: (qmail 20268 invoked from network); 6 Jun 2006 08:17:23 -0000
Received: from vpn-232-163.aichyna.com (HELO Secretar.org) (213.184.232.163)
by <removed> with SMTP; 6 Jun 2006 08:17:23 -0000
Date: Tue, 06 Jun 2006 11:18:40 +0200
Now I really don't think it's a company site.. and if you go to the IP directly.. it asks you to log in to 'Viking'.. if you tracert it, it lokos lke it comes from x.aichyna.com .. which is in like.. a different language..
Should the user be worried? I suppose I should have her change her password to be safe..?