RE: Distressing, possibly life threatening emails from free accounts (yahoo, hotmail

["Gross Barry D." <bd.gross () hosp wisc edu>]

the email header has the IP address of the machine that sent the message. you would still need a court order to get the 
contact info from the ISP though

Received: from [x.x.x.x] by web41205.mail.yahoo.com via HTTP; Fri, 30 May 2003 09:49:19 PDT




-----Original Message-----
From: khayes () eastbay com [mailto:khayes () eastbay com]
Sent: Thursday, May 29, 2003 10:04 AM
To: steve baker
Cc: security-basics () securityfocus com
Subject: Re: Distressing, possibly life threatening emails from free
accounts (yahoo, hotmail



Unfortunately there isn't a clear way to do this since Yahoo is the middle
guy and the mail headers were generated there.  We recently had a similar
e-mail come in and we spoke to Yahoo directly.  While they were sympathetic
to the situation, they stated some sort of Court Order or Law Enforcement
involvment would be required for them to give out information.

Ken Hayes
Network Administrator
Eastbay / Footlocker.com
Wausau, WI Offices
(715) 261-9573
khayes () eastbay com



|---------+--------------------------->
|         |                           |
|         |                           |
|         |                           |
|         |                           |
|         |                           |
|         |   "steve baker"           |
|         |   <stephenbbaker@hotmail.c|
|         |   om>                     |
|         |                           |
|         |   05/27/2003 11:38 AM     |
|         |                           |
|---------+--------------------------->
  
> ----------------------------------------------------------------------------------------------------------------------------|
  |                                                                                                                     
       |
  |                                                                                                                     
       |
  |                                                                                                                     
       |
  |To:     security-basics () securityfocus com                                                                         
          |
  |cc:                                                                                                                  
       |
  |Subject:  Distressing, possibly life threatening emails from free accounts (yahoo, hotmail                           
       |
  |                                                                                                                     
       |
  
> ----------------------------------------------------------------------------------------------------------------------------|




One of our users has received questionable and possibly life threatening
emails from a yahoo account that was created recently.  They have
approached
us to find out as much as we can pertaining to the person sending it.

Of course, we are not YAHOO so we cannot determine anything about the mail
other than the content.

How can we find out who sent this?

_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail


---------------------------------------------------------------------------
----------------------------------------------------------------------------








---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------