Spam at work
 

Okay, this is a funny story with a question.

Wednesday at about 3:55 PM, the whole company got a spam e-mail from cumfiesta.com. It looks like someone had signed the company distribution e-mail up for it. Laughter filled the halls as people opened the e-mail.

Okay, my question, would a disgruntled ex employee have done this? It gave the IP address of the pc that signed it up, or could a spyware have gotten this, or could someone have hacked and got it? I didn't even know this address existed. I'm not in systems, and I'm sure they'll take care of it, I was just looking to find out how this could have happened, since systems won't tell anything. Thanks!

Don't be so nervous. They won't be able to find out <strike>you</strike> who did this. <strike>You</strike> Nobody should worry. I doubt the sys admin has time or inclination to follow this up. <strike>You</strike> Whomever can just let it go.

Why are you asking? Did you do it?

There's alot of reason how this could happened.

A: A spyware could have been installed on a coworker's computer and it may have figured out what's the company's distrubution email address is and sold it to various spammers.

B: A coworker simply signed up and either he/she did it to look at porn or out of humour or disgrunted at everyone else.

C: Everybody in tech support aint gonna help you. Unless you're the manager, they don't have any reason why they should tell you who did it and how they did it. Sometimes I help out in tech support, sometimes I refused to tell people why some problems occurrs.

is there any reason to belive the ip is real ? did you trace it

did the send it to a distrubition list email, or to each individual, is the distribution list an obvious name ?

No, I wouldn't have done it. I have no idea how to trace the IP, but my guess is that someone who left the company did it. I do some work on the internet, and every now and again I get some spy ware crap (I've now loaded the lava soft software), and just hoped the ip wasn't traced back to me, but I'm sure it wasn't. When it happened, I was another managers desk, he opened it and went to the website, while others replied to the do not send script. Who ever did it, had to know the company distribution, which I do not (until now).

traceroute ip_address
in windows
tracert ip_address (do it from a cmd shell)

is it a private ip ? like 10.0.xx or 192.168 etc

The IP listed was 208.something. I can't remember off the top of my head.

If anyone cares, they traced back to an AOL account, but can't get any further than that. Whew!