RE: Distressing, possibly life threatening emails from free accounts (yahoo, hotmail

the email header has the IP address of the machine that sent the message. you would still need a court order to get the contact info from the ISP though

Received: from [x.x.x.x] by web41205.mail.yahoo.com via HTTP; Fri, 30 May 2003 09:49:19 PDT

-----Original Message-----
From: khayes@eastbay.com [mailto:khayes@eastbay.com] Sent: Thursday, May 29, 2003 10:04 AM
To: steve baker
Cc: security-basics@securityfocus.com
Subject: Re: Distressing, possibly life threatening emails from free accounts (yahoo, hotmail

Unfortunately there isn't a clear way to do this since Yahoo is the middle guy and the mail headers were generated there. We recently had a similar e-mail come in and we spoke to Yahoo directly. While they were sympathetic to the situation, they stated some sort of Court Order or Law Enforcement involvment would be required for them to give out information.

Ken Hayes
Network Administrator
Eastbay / Footlocker.com
Wausau, WI Offices
(715) 261-9573
khayes@eastbay.com

|---------+--------------------------->

|         |                           |

|         |                           |

|         |                           |

|         |                           |

|         |                           |

|         |   "steve baker"           |


|---------+--------------------------->
  >----------------------------------------------------------------------------------------------------------------------------|
  |                                                                                                                            |
  |                                                                                                                            |
  |                                                                                                                            |
  |To:     security-basics@securityfocus.com                                                                                   |
  |cc:                                                                                                                         |
  |Subject:  Distressing, possibly life threatening emails from free accounts (yahoo, hotmail                                  |
  |                                                                                                                            |
  >----------------------------------------------------------------------------------------------------------------------------|

One of our users has received questionable and possibly life threatening emails from a yahoo account that was created recently. They have approached
us to find out as much as we can pertaining to the person sending it.

Of course, we are not YAHOO so we cannot determine anything about the mail other than the content.

How can we find out who sent this?

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek