Fwd: Re: question on spoofed email

From: John P. Leonard (jleonard@laporte.com)
Date: 04/29/02 

Date: Mon, 29 Apr 2002 12:33:35 -0500
From: "John P. Leonard" <jleonard@laporte.com>
To: <@securityfocus.com <SECURITY-BASICS@SECURITYFOCUS.COM>>

The header info is as follows:

received: from newsserver
        ([213.154.159.215])
        by mail.laporte.com; Tue, 23 Apr 2002 21:01:48 -0500
From: "jleonard" <jleonard@laporte.com>
To: "jleonard" <jleonard@laporte.com>
Subject: Dear jleonard , as you reguested...
Date: Tue, 23 Apr 02 20:42:28 E. Europe Daylight Time
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary= "----=_NextPart_000_0058_B7E15E7B.8365DDA0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2462.0000

I have traced the IP address to western Europe.

Thanks

attached mail follows:

From: Rob Hughes <rob@robhughes.com>
To: "John P. Leonard" <jleonard@laporte.com>
Date: 26 Apr 2002 13:41:56 -0500

On Thu, 2002-04-25 at 15:35, John P. Leonard wrote:
> I have received several e-mails from my own email address with the subject line as follows:
>
> Dear jleonard , as you reguested...
>
> There is nothing in the body of the message and there are no attachments.
>
>
> I did not originate these messages. Has anyone else seen this? Any suggestions?
>
> Thanks,
>
> John
>

A copy of the headers might be helpful.

Quantcast