Hacked or Spammed?

IceWarp Server User to User Forum

Forums Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

Hacked or Spammed?

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Security] >> IceWarp Server Security Settings >> Hacked or Spammed?

Page: [1]

Message

<< Older Topic Newer Topic >>

Hacked or Spammed? - 10/30/2008 6:29:06 AM

grayloon

Posts: 7
Score: 0
Joined: 6/18/2008
Status: offline

One of my users received the following bounce message. She doesn't communicate with anyone in Japan or Russia. Based on the headers, can you tell what happened here? Has her computer been compromised? Is someone abusing our IceWarp server?

Received: from p7227-ipbfp04takakise.saga.ocn.ne.jp ([124.98.133.227]) by mail.nurminenprima.ru with Microsoft SMTPSVC(6.0.3790.1830);
	 Thu, 30 Oct 2008 18:01:05 +0300
Received: from [124.98.133.227] by evansvillecvb.org.s5a1.psmtp.com; Thu, 30 Oct 2008 23:59:58 +0900
Return-Path: <llibs@evansvillecvb.org>
From: "????" <llibs@evansvillecvb.org>
To: <alexander.semenov@nurminenprima.ru>
Subject: Aaoa ?aeeaia ii?eo auou ooo
Date: Thu, 30 Oct 2008 08:59:58 -0600
Message-ID: <01c93aeb$9cd99300$e385627c@llibs>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0011_01C93A77.1B7EE4F0"
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
Thread-Index: Ack6oFThIcZcSfMNR6GRZMwLhmC1bQ==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579

Received: from FM-1770216656.ctt.ne.jp ([203.88.185.188]) by vizagroup.ru with Microsoft SMTPSVC(6.0.3790.3959);
	 Thu, 30 Oct 2008 19:20:32 +0400
Received: from [203.88.185.188] by evansvillecvb.org.s5a1.psmtp.com; Fri, 31 Oct 2008 00:20:34 +0900
Return-Path: <llibs@evansvillecvb.org>
From: "?????????" <llibs@evansvillecvb.org>
To: <postmaster@vizagroup.ru>
Subject: Neo?aa ainoaaee ii?ou
Date: Thu, 30 Oct 2008 09:20:34 -0600
Message-ID: <01c93aee$7dc85c00$bcb958cb@llibs>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0005_01C93A79.F6742370"
X-Mailer: Microsoft Outlook Express 4.72.3338.1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Thread-Index: Ack6owx3DGGLO7cxSr+CTFBDy8HCYA==

< Message edited by grayloon -- 10/30/2008 6:32:19 AM >