Archiv verlassen und diese Seite im Standarddesign anzeigen : Mugu Dubletten
Jede Menge Nachschub...
Diesen Mugu hatte wir schon:
Received: from email02.consolidated.net (email02.consolidated.net
[216.176.95.173])
by xxxxx (Postfix) with ESMTP id 89F7A789BA77
for xxxxx; Tue, 26 May 2009 11:36:14 +0200 (CEST)
Received: from User ([113.112.40.217])
by email02.consolidated.net (MOS 3.10.5-GA)
with ESMTP id LQI01201 (AUTH ajfoa [at] consolidated.net);
Mon, 25 May 2009 23:10:32 -0500 (CDT)
IP: 113.112.40.217 ---> CHINANET Guangdong
atmcardection002 [at] gmail.com
ajfoa [at] consolidated.net
andy_lu2008 [at] live.com
andy_lu2009 [at] live.com
Muguphon: +861-372-480-2909 ---> China Mobile (GSM)
Received: from mail1.gigared.com (mail1.gigared.com [190.7.31.244])
by xxxxx (Postfix) with ESMTP id F28EA789AE8D
for xxxxx; Tue, 26 May 2009 02:44:22 +0200 (CEST)
Received: from webmail.gigared.com (smtp2.gigared.com.ar [190.7.31.231])
by mail1.gigared.com (Postfix) with ESMTP id 6232989B1;
Mon, 25 May 2009 21:37:07 -0300 (ART)
Received: from 41.191.108.130 ([41.191.108.130])
by webmail.gigared.com (IMP) with HTTP
for <ildaconesa [at] gigared.com@190.7.31.235>; Mon, 25 May 2009 21:36:49
-0300
IP: 41.191.108.130 ---> Suburban Telecom, Nigeria
ildaconesa [at] gigared.com
fosterandyou [at] w.cn
Natürlich auch mein Dauer-Mugu dabei:
Received: from kliacs.com.my (www.kliacs.com.my [60.49.217.21])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D80C0789B93E
for xxxxx; Tue, 26 May 2009 18:26:57 +0200 (CEST)
Received: from User (chromium.onspeed.com [83.138.172.76])
by kliacs.com.my (Postfix) with ESMTP id 611A6BEB1F0;
Tue, 26 May 2009 16:37:56 +0800 (MYT)
Received: from mtnngprs.com (trwKDgKdhT [at] mtnngprs.com [41.220.75.3])
by chromium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Tue, 26 May 2009
09:39:03 +0100 (BST)
IP: 41.220.75.3 ---> MTN, Nigeria
mr.nathan00 [at] yahoo.com.hk
mr.nathan_99 [at] yahoo.com.hk
Muguphon 1: +44-70359-21057 ---> Open Telecom International Ltd., UK
Muguphon 2: +44-70359-19444 ---> Open Telecom International Ltd., UK
Received: from vms173009pub.verizon.net (vms173009pub.verizon.net
[206.46.173.9])
by xxxxx (Postfix) with ESMTP id F25B2789AD57
for xxxxx; Tue, 26 May 2009 17:53:24 +0200 (CEST)
Received: from User ([216.169.104.135]) by vms173009.mailsrvcs.net
(Sun Java(tm) System Messaging Server 6.3-7.04 (built Sep 26 2008; 32bit))
with ESMTPA id <0KK900L6LCX5NN10 [at] vms173009.mailsrvcs.net> for
xxxxx; Tue, 26 May 2009 10:43:25 -0500 (CDT)
IP: 216.169.104.135 ---> SKYPORT/Ezzi
dr.obadiah006 [at] sify.com
Received: from mail.sinaproc.gob.pa (unknown [201.225.251.165])
by xxxxx (Postfix) with ESMTP id 9F727789B984
for xxxxx; Tue, 26 May 2009 21:38:27 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mail.sinaproc.gob.pa (Postfix) with ESMTP id 1E16A337048;
Tue, 26 May 2009 11:49:11 -0500 (EST)
Received: from mail.sinaproc.gob.pa ([127.0.0.1])
by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with LMTP
id 14255-01-38; Tue, 26 May 2009 11:49:11 -0500 (EST)
Received: from sinaproc.gob.pa (unknown [192.130.22.7])
by mail.sinaproc.gob.pa (Postfix) with ESMTP id A04AE336F53;
Tue, 26 May 2009 11:46:09 -0500 (EST)
Received: from 192.130.22.1
(SquirrelMail authenticated user base90)
by sinaproc.gob.pa with HTTP;
Tue, 26 May 2009 12:12:15 -0500 (EST)
IP: 192.130.22.1 ---> POWERFLUTE-NET
libertyloancompany [at] gmail.com
base90 [at] sinaproc.gob.pa
- kjz
Neuer Tag, neuer Spam...
der Dauer-Mugu:
Received: from mail.mn.yu (mail.mn.yu [195.66.166.8])
by xxxxx (Postfix) with ESMTP id 28A83789B038
for xxxxx; Wed, 27 May 2009 03:37:40 +0200 (CEST)
Received: from mail.mn.yu (localhost [127.0.0.1])
by mail.mn.yu (Postfix) with ESMTP id F023D364228;
Wed, 27 May 2009 02:46:24 +0200 (CEST)
Received: from 41.220.75.3
(SquirrelMail authenticated user sei)
by mail.mn.yu with HTTP;
Wed, 27 May 2009 02:46:25 +0200 (CEST)
IP: 41.220.75.3 ---> MTN, Nigeria
mrming [at] live.hk
mrminghk12 [at] gmail.com
sei [at] mn.yu
Dieser Mugu nervte schon gestern:
Received: from toq1-srv.bellnexxia.net (toq1.bellnexxia.net
[209.226.175.120])
by xxxxx (Postfix) with ESMTP id 6966A789AD10
for xxxxx; Wed, 27 May 2009 11:54:21 +0200 (CEST)
Received: from toip39-bus.srvr.bell.ca ([67.69.240.40])
by tomts37-srv.bellnexxia.net
(InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP
id
<20090527052236.OBRS1685.tomts37-srv.bellnexxia.net [at] toip39-bus.srvr.bell.ca>;
Wed, 27 May 2009 01:22:36 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AiUrAG5pHErR4q+G/2dsb2JhbACBL4QzhCKOUrYCg3cF
Received: from tofep2.bellnexxia.net (HELO smtp.bellnexxia.net)
([209.226.175.134])
by toip39-bus.srvr.bell.ca with SMTP; 27 May 2009 01:22:36 -0400
X-Originating-IP: [41.191.108.130] ---> Suburban Telecom, Nigeria
fosterandyou [at] w.cn
Received: from smtp19.orange.fr (smtp19.orange.fr [80.12.242.18])
by xxxxx (Postfix) with ESMTP id 3BAA0789B92D
for xxxxx; Wed, 27 May 2009 15:07:46 +0200 (CEST)
Received: from User (ip68-224-155-32.lv.lv.cox.net [68.224.155.32])
by mwinf1924.orange.fr (SMTP Server) with ESMTP id 825882000091;
Wed, 27 May 2009 15:05:16 +0200 (CEST)
pauldouglas12 [at] yahoo.cn
pauldouglas1 [at] gmail.com
Muguphone: +234-7066259668 ---> MTN Nigeria Communications Ltd.
- kjz
Wieder mal:
Received: from smtp816.mail.ird.yahoo.com (smtp816.mail.ird.yahoo.com
[77.238.189.16])
by xxxxx (Postfix) with SMTP id D9DBF7800E76
for xxxxx; Thu, 28 May 2009 13:54:36 +0200 (CEST)
Received: (qmail 14356 invoked from network); 28 May 2009 11:54:36 -0000
Received: from unknown (HELO User) (ezeeze06 [at] 202.98.20.205 with login)
by smtp816.mail.ird.yahoo.com with SMTP; 28 May 2009 11:54:33 -0000
IP: 202.98.20.205 ---> CNC Group CHINA169 Jilin
ezeeze06 [at] googlemail.com
ezeeze01 [at] googlemail.com
Muguphone: +234-702-621-0333 ---> Visafone Communications Ltd., Nigeria
Received: from blu0-omc1-s28.blu0.hotmail.com
(blu0-omc1-s28.blu0.hotmail.com [65.55.116.39])
by xxxxx (Postfix) with ESMTP id C9F5C7855788
for xxxxx; Fri, 29 May 2009 03:16:37 +0200 (CEST)
Received: from BLU118-W5 ([65.55.116.7]) by
blu0-omc1-s28.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 28 May 2009 18:16:37 -0700
X-Originating-IP: [41.204.234.23] ---> Direct-on-PC Limited, Nigeria
f_wise101 [at] yahoo.com.hk
Received: from kingstrucking.net (dpc674462114.direcpc.com [67.44.62.114])
by xxxxx (Postfix) with ESMTP id 86EB8789B760
for xxxxx; Fri, 29 May 2009 08:22:23 +0200 (CEST)
Received: from User ([41.189.7.46]) by kingstrucking.net with Microsoft
SMTPSVC(6.0.3790.1830);
Thu, 28 May 2009 17:41:10 -0400
IP: 41.189.7.46 ---> SWIFT NETWORKS LTD, Nigeria
buhary11 [at] gmail.com
buhary9 [at] gmail.com
buhary8 [at] gmail.com
- kjz
Es ist wieder Wochenende......
Received: from smtp2e.orange.fr (smtp2e.orange.fr [80.12.242.112])
by xxxxx (Postfix) with ESMTP id 179A3789BA6E
for xxxxx; Thu, 28 May 2009 17:16:52 +0200 (CEST)
Received: from User (adsl-99-152-21-146.dsl.scrm01.sbcglobal.net
[99.152.21.146])
by mwinf2e08.orange.fr (SMTP Server) with ESMTP id 9756680000BC;
Thu, 28 May 2009 17:13:59 +0200 (CEST)
adedavis1 [at] hotmail.com
robert9mueller [at] gmail.com
Received: from vms173003pub.verizon.net (vms173003pub.verizon.net
[206.46.173.3])
by xxxxx (Postfix) with ESMTP id CE1AE789BA91
for xxxxx; Fri, 29 May 2009 14:41:38 +0200 (CEST)
MIME-version: 1.0
Content-transfer-encoding: 8BIT
Content-type: text/html; charset=Windows-1251
Received: from User ([41.189.2.35]) by vms173003.mailsrvcs.net
(Sun Java(tm) System Messaging Server 6.3-7.04 (built Sep 26 2008; 32bit))
with ESMTPA id <0KKE0039OLNQCO30 [at] vms173003.mailsrvcs.net> for
xxxxx; Fri, 29 May 2009 06:40:36 -0500 (CDT)
IP: 41.189.2.35 ---> SWIFT NETWORKS LTD., Nigeria
drmusawills303 [at] yahoo.com.hk
cbnbank110 [at] gmail.com
Received: from smtp2f.orange.fr (smtp2f.orange.fr [80.12.242.151])
by xxxxx (Postfix) with ESMTP id 7134C789AE01
for xxxxx; Fri, 29 May 2009 18:08:01 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2f14.orange.fr (SMTP Server) with ESMTP id 2842A8000073;
Fri, 29 May 2009 18:08:01 +0200 (CEST)
Received: from mail.act-performance.fr
(LPuteaux-156-14-37-34.w82-127.abo.wanadoo.fr [82.127.52.34])
by mwinf2f14.orange.fr (SMTP Server) with ESMTP id 5B3F9800004C;
Fri, 29 May 2009 18:08:00 +0200 (CEST)
X-ME-UUID: 20090529160800373.5B3F9800004C [at] mwinf2f14.orange.fr
Received: from User ([41.191.108.130]) by mail.act-performance.fr with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 29 May 2009 02:06:48 +0200
IP: 41.191.108.130 ---> Suburban Telecom, Nigeria
sandspeter10110 [at] yahoo.com.hk
sandspeter85 [at] yahoo.com.hk
Received: from korchina.com.cn (korchina.com.cn [61.152.247.125])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1BE807800D51
for xxxxx; Sat, 30 May 2009 07:10:48 +0200 (CEST)
Received: from User ([41.202.20.168])
by korchina.com.cn (Korchina Shanghai Mial Server - Welcome)
with ASMTP id KKD87406;
Fri, 29 May 2009 13:00:06 +0800
IP: 41.202.20.168 ---> dhcp20168.myzipnet.com, Ghana
icbmanager [at] universia.es
georgenduka23 [at] gmail.com
Muguphone: +233 24 888 6531 ---> Spacefon, Ghana/MTN/Areeba
Received: from kmce.ie (mail.kmce.ie [87.192.124.170])
by xxxx (Postfix) with ESMTP id 69E28789BA84
for xxxxx; Sat, 30 May 2009 10:48:26 +0200 (CEST)
Received: from User ([196.3.183.72]) by kmce.ie with Microsoft
SMTPSVC(6.0.3790.3959);
Fri, 29 May 2009 12:08:53 +0100
IP: 196.3.183.72 ---> Suburban Telecom/Zoom, Nigeria
susan_fr1155 [at] live.com
susanfernado111 [at] live.com
Received: from same04.sameservers.com (same04.sameservers.com [72.29.68.8])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id DCED37800D4D
for xxxxx; Sat, 30 May 2009 03:54:33 +0200 (CEST)
Received: from localhost ([127.0.0.1]:28178)
by same04.sameservers.com with esmtpa (Exim 4.69)
(envelope-from <sayase [at] sify.com>)
id 1MACVn-0000Cm-JB; Fri, 29 May 2009 20:33:23 -0400
Received: from 91.121.169.69 ([91.121.169.69]) by businesslife.gr (Horde
MIME library) with HTTP; Fri, 29 May 2009 20:32:41 -0400
IP: 91.121.169.69 ---> ns361621.ovh.net (Die Hutfarbe von OVH sollte hinlänglich bekannt sein...)
sayase [at] sify.com
suha20052009 [at] hotmail.com
Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.47])
by xxxxx (Postfix) with ESMTP id 6E3B0789A7B5
for xxxxx; Sat, 30 May 2009 06:13:10 +0200 (CEST)
Received: from User (unknown [87.246.27.34])
by mwinf2107.orange.fr (SMTP Server) with ESMTP id 1A9961C0008C;
Sat, 30 May 2009 06:09:44 +0200 (CEST)
IP: 87.246.27.34 ---> CableBulgaria
j.stavis2008 [at] yahoo.com.hk
j.stavis2009 [at] yahoo.co.uk
Received: from ish2.mga.com.pl (ish2.mga.com.pl [83.16.203.26])
by xxxxx (Postfix) with ESMTP id 3E8DC789B77E
for xxxxx; Sat, 30 May 2009 07:48:49 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by ish2.mga.com.pl (Postfix) with ESMTP id ADBD01EC527;
Sat, 30 May 2009 07:37:43 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ish2.mga.com.pl
Received: from ish2.mga.com.pl ([127.0.0.1])
by localhost (ish2.mga.com.pl [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id z7XhrHLpeZDR; Sat, 30 May 2009 07:37:43 +0200 (CEST)
Received: from User (unknown [196.3.182.250])
by ish2.mga.com.pl (Postfix) with ESMTPA id 2C42D1EC4F5;
Sat, 30 May 2009 07:36:53 +0200 (CEST)
IP: 196.3.182.250 ---> CTAccess/Suburban Telecom, Nigeria
fdf_secretarybernardleroy01 [at] yahoo.fr
- kjz
Man kriecht weiter aus den Löchern:
Received: from mail.brs.cl (mail.brs.cl [200.29.139.14])
by xxxxx (Postfix) with ESMTP id 5D05D789A993
for xxxxxx; Sat, 30 May 2009 23:04:08 +0200 (CEST)
Received: by mail.brs.cl (Postfix, from userid 48)
id C7B7F223CC7; Sat, 30 May 2009 05:39:18 -0400 (CLT)
Received: from 83.138.172.76 (proxying for 80.255.59.242)
(SquirrelMail authenticated user admision)
by mail.brs.cl with HTTP;
Sat, 30 May 2009 05:39:18 -0400 (CLT)
IP: 80.255.59.242 ---> VIENNA-TECH, Nigeria
macdon.claimsdpt [at] sify.com
Received: from cyserver.changye.com.cn (unknown [218.16.125.107])
by xxxxx (Postfix) with ESMTP id F25BF789B8A5
for xxxxx; Sun, 31 May 2009 09:14:01 +0200 (CEST)
Received: from User (unknown [196.3.183.73])
by cyserver.changye.com.cn (Postfix) with ESMTPA id 71F044E6379;
Sun, 31 May 2009 00:09:19 +0800 (CST)
IP: 196.3.183.73 ---> Suburban Telecom/Zoom, Nigeria
mrbankimoonun1 [at] sify.com
Muguphone: +2348064109875 ---> MTN Nigeria Communications Ltd.
der Dauer-Mugu:
Received: from smtp-out02.msg.oleane.net (smtp-out02.msg.oleane.net
[62.161.3.11])
by xxxxx (Postfix) with ESMTP id 8BC567800D56
for xxxxx; Sat, 30 May 2009 23:01:43 +0200 (CEST)
Received: from smtp05.msg.oleane.net (smtp05.mail.priv [172.17.20.114])
by smtp-out02.msg.oleane.net with ESMTP id n4UL0PCi029225;
Sat, 30 May 2009 23:00:25 +0200
Received: from sam.ville-wasquehal.fr (reverse.completel.net
[92.103.140.202] (may be forged)) (authenticated)
by smtp05.msg.oleane.net (MTA) with ESMTP id n4UL0MPs017909;
Sat, 30 May 2009 23:00:22 +0200
X-Oleane-Rep: REPA
Received: from webmail.ville-wasquehal.fr (localhost [127.0.0.1])
by sam.ville-wasquehal.fr (Postfix) with ESMTP id 36302AA4008;
Sat, 30 May 2009 22:43:06 +0200 (CEST)
Received: from 41.220.75.3
(SquirrelMail authenticated user identitedelaville)
by webmail.ville-wasquehal.fr with HTTP;
Sat, 30 May 2009 22:43:12 +0200 (CEST)
IP: 41.220.75.3 ---> MTN Nigeria
ruthmadoff [at] googlemail.com
ruthmadoff028 [at] googlemail.com
Received: from imo-m19.mx.aol.com (imo-m19.mx.aol.com [64.12.137.11])
by xxxxx (Postfix) with ESMTP id 3B334789B8EF
for xxxxx; Sun, 31 May 2009 01:39:46 +0200 (CEST)
Received: from imo-da04.mx.aol.com (imo-da04.mx.aol.com
[205.188.169.202]) by imo-m19.mx.aol.com (v107.10) with ESMTP id
RELAYIN2-34a21c312264; Sat, 30 May 2009 19:36:51 -0400
Received: from halifabankplc011 [at] alestra.net.mx
by imo-da04.mx.aol.com (mail_out_v40_r1.5.) id 6.bf0.506d73e9 (37081);
Sat, 30 May 2009 19:36:45 -0400 (EDT)
Received: from User ([216.250.221.135]) by cia-db06.mx.aol.com (v123.4)
with ESMTP id MAILCIADB063-90d94a21c29728c; Sat, 30 May 2009 19:36:40
-0400
IP: 216.250.221.135 ---> Easynet Concepts Inc., Lagos
info.halfaxbankplc [at] gmail.com
halifabankplc011 [at] alestra.net.mx
Muguphone: +447024047619 ---> Magrathea Telecommunications Limited, UK
Mugufax: +448704955663 ---> Stylecom Limited, UK
Received: from customermail4.easily.co.uk
(customermail4.netbenefit.co.uk [212.53.95.205])
by xxxxx (Postfix) with ESMTP id A8F477800D51
for xxxxx; Sun, 31 May 2009 09:16:05 +0200 (CEST)
Received: from [62.173.42.194] (helo=User)
by customermail4.easily.co.uk with esmtpa (Exim 4.67)
(envelope-from <dratikubello [at] msn.com>)
id 1MAfFo-0004ln-Cg; Sun, 31 May 2009 08:14:51 +0100
IP: 62.173.42.194 ---> ipNX Nigeria Limited
drkennethwilliams112 [at] gmail.com
dratikubello [at] msn.com
Muguphone: +234 8087784157 ---> Celtel Nigeria Limited/Zain
- kjz
Auch heute keine Schonung:
Received: from customermail4.easily.co.uk
(customermail4.netbenefit.co.uk [212.53.95.205])
by xxxxx (Postfix) with ESMTP id 54221789B892
for xxxxx; Tue, 2 Jun 2009 06:34:47 +0200 (CEST)
Received: from [62.173.42.194] (helo=User)
by customermail4.easily.co.uk with esmtpa (Exim 4.67)
(envelope-from <dratikubello [at] msn.com>)
id 1MBLg3-00076E-5h; Tue, 02 Jun 2009 05:32:49 +0100
IP: 62.173.42.194 ---> ipNX Nigeria Limited
drkennethdwilliams3 [at] gmail.com
dratikubello [at] msn.com
Muguphone: +234 8087784157 ---> Celtel Nigeria Limited/Zain
Received: from mailsrv4.tranzpeer.net (vmail.tranzpeer.net [202.180.66.226])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 12252789AD9B
for xxxxx; Tue, 2 Jun 2009 09:00:59 +0200 (CEST)
Received: from [81.199.162.48] (helo=User)
by mailsrv4.tranzpeer.net with ESMTPA (Exim 4.62)
id 1MBJ2b-0001Dd-Oc; Tue, 02 Jun 2009 13:43:51 +1200
IP: 81.199.162.48 ---> 81.199.162.48.satcom-systems.net (die Mugufreunde aus IL)
jhuan1111 [at] yahoo.com.hk
Received: from malgum.com (unknown [116.122.36.184])
by spammotel.com (Postfix) with ESMTPS id DB8AA6E53C0
for xxxxx; Mon, 1 Jun 2009 16:05:29 -0400 (EDT)
Received: from User (213.37.112.227.dyn.user.ono.com [213.37.112.227])
(authenticated bits=0)
by malgum.com (8.13.8/8.13.8) with ESMTP id n51K0mdw016188;
Tue, 2 Jun 2009 05:00:51 +0900
kennypaulsam [at] mail.com
ready_live [at] yahoo.com
Muguphone: +447045740164 ---> Open Telecom International Ltd., UK
Received: from blu0-omc2-s14.blu0.hotmail.com
(blu0-omc2-s14.blu0.hotmail.com [65.55.111.89])
by xxxxx (Postfix) with ESMTP id 4C7F8789BA8D
for xxxxx; Tue, 2 Jun 2009 13:50:52 +0200 (CEST)
Received: from BLU146-W33 ([65.55.111.73]) by
blu0-omc2-s14.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 2 Jun 2009 04:50:51 -0700
X-Originating-IP: [41.203.230.124] ---> ONATEL, BF
is_013 [at] msn.com
issakaoued [at] hotmail.fr
Muguphone: +22678341752 ---> Telecel Faso S.A.
- kjz
Heute in der Mugu-Liga am Start:
Received: from mail1.africau.ac.zw (EHLO mail1.africau.ac.zw) [83.229.26.65]
by mx0.gmx.net (mx010) with SMTP; 03 Jun 2009 01:57:40 +0200
Received: from mail1.africau.ac.zw (localhost [127.0.0.1])
by mail1.africau.ac.zw (Postfix) with ESMTP id 26C46B03C8;
Wed, 3 Jun 2009 01:34:16 +0200 (CAT)
Received: (from apache [at] localhost)
by mail1.africau.ac.zw (8.13.8/8.13.8/Submit) id n52NYFkd020457;
Wed, 3 Jun 2009 01:34:15 +0200
X-Authentication-Warning: mail1.africau.ac.zw: apache set sender to
babarose209 [at] ymail.com using -f
Received: from 41.210.25.68
(SquirrelMail authenticated user test)
by 83.229.26.65 with HTTP;
Wed, 3 Jun 2009 01:34:15 +0200 (CEST)
IP: 41.210.25.68 ---> adsl2568.4u.com.gh
babarose209 [at] ymail.com
babarose2009 [at] sify.com
Received: from mail.piracicabana.com.br (mail.piracicabana.com.br
[200.210.176.130])
by xxxxx (Postfix) with ESMTP id 43E56789B964
for xxxxx; Wed, 3 Jun 2009 09:29:26 +0200 (CEST)
Received: from User (unknown [216.226.74.45])
by mail.piracicabana.com.br (Postfix) with ESMTPA id 94FA546D676;
Wed, 3 Jun 2009 03:55:38 -0300 (BRT)
mrallenpeter [at] yahoo.com.hk
Received: from server1.myebiz.com (EHLO server1.myebiz.com) [64.34.194.243]
by mx0.gmx.net (mx110) with SMTP; 03 Jun 2009 11:49:09 +0200
Received: from User ([41.189.2.133])
(authenticated bits=0)
by server1.myebiz.com (8.12.11.20060308/8.12.11) with ESMTP id
n539eVgK032029;
Wed, 3 Jun 2009 03:40:41 -0600
IP: 41.189.2.133 ---> SWIFT NETWORKS LTD., Nigeria
rtdjamesmorgan2 [at] gazeta.pl
jamesmorgan [at] myway.com
Received: from mx1.ketchum.com.ar (mx1.ketchum.com.ar [190.2.24.229])
by xxxxx (Postfix) with ESMTP id B73BE789ADFE
for xxxxx; Wed, 3 Jun 2009 12:57:56 +0200 (CEST)
Received: from User (unknown [41.223.251.88])
(Authenticated sender: info)
by mx1.ketchum.com.ar (Postfix) with ESMTPA id 10E635471DB;
Tue, 2 Jun 2009 23:33:15 -0300 (ART)
IP: 41.223.251.88 ---> Omnium des Telecommunications et de l'Internet Benin
jenetchieze6 [at] gmail.com
fcscoffice20 [at] gmail.com
Muguphone: +229-98434765 ---> Benin
Received: from unknown (EHLO mail.cefc.com.cn) [202.101.116.18]
by mx0.gmx.net (mx103) with SMTP; 03 Jun 2009 12:58:05 +0200
Received: from User (174.36.195.78-static.reverse.softlayer.com
[174.36.195.78])
(authenticated bits=0)
by mail.cefc.com.cn (8.13.4/8.13.4) with ESMTP id n53AnTo4012848;
Wed, 3 Jun 2009 18:50:44 +0800
liberty.seguross [at] gmail.com
liberty.seguross2 [at] gmail.com
- kjz
Das Wochenende naht und die Mugus laufen zur Hochform auf:
Received: from mail-ew0-f178.google.com (mail-ew0-f178.google.com
[209.85.219.178])
by xxxxx (Postfix) with ESMTP id DC907789AD71
for xxxxx; Thu, 4 Jun 2009 15:02:03 +0200 (CEST)
Received: by ewy26 with SMTP id 26so182606ewy.6
for xxxxx; Thu, 04 Jun 2009 06:02:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:reply-to:date:message-id
:subject:from:to:content-type;
bh=dYzSKMG86kJLU+Y69QHAcOgUJswq178OVtby+6Q16Js=;
b=dGzKUARDFnRQLFBOuFtDm3r+K5N24kxPH/7M6cqWURkIpEZA002WvA4o/XSh8CuG48
dw99ERD5joh6+8HHiyNZzAE3fGhj81XjBg8D9MVFIQ6RFAgG+fJSAUda8KG3OZ/BWe6r
PwOeaKnWoGGfXplDMPCBdAS1U48yI3qXeEtWA=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
b=CWJFTZ6NpvxGWOsbEdCD52dHfZEyhIp7VbdmOXa4+fMOlJ4ngYhjwFQgS6HBe4uxoF
5fXlnY4U0xjMS1ivrj3Ee/KGFiX64iqeycUd6pykngHYt3t+I3hto6pNhC1jr1yGJwZY
cxpfW/S+cRZDZBDEhbXKd9lkYBV3fprdvlTo0=
MIME-Version: 1.0
Received: by 10.216.52.76 with SMTP id d54mr760360wec.119.1244119779288;
Thu,
04 Jun 2009 05:49:39 -0700 (PDT)
phrosea4 [at] gmail.com
rosebe [at] sify.com
Received: from fes03.lc-2.la.inter.net (fes03.lc-2.la.inter.net
[190.180.146.40])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2E96B789BA86
for xxxxx; Thu, 4 Jun 2009 23:28:44 +0200 (CEST)
Received: from [41.210.37.237] (port=52134 helo=User)
by fes03.lc-2.la.inter.net with esmtpa (Exim 4.50)
id 1MCFcu-00072P-6r; Thu, 04 Jun 2009 13:17:22 -0300
IP: 41.210.37.237 ---> Ghana Telecom
corin [at] interserver.com.ar
thaulth06 [at] yahoo.com.hk
Received: from bay0-omc3-s8.bay0.hotmail.com
(bay0-omc3-s8.bay0.hotmail.com [65.54.246.208])
by xxxxx (Postfix) with ESMTP id 75C98789B8D8
for xxxxx; Fri, 5 Jun 2009 07:56:43 +0200 (CEST)
Received: from BAY125-W5 ([65.55.130.40]) by
bay0-omc3-s8.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 4 Jun 2009 22:56:42 -0700
X-Originating-IP: [83.229.48.149] ---> Cyberspace Link 4 PHC, Nigeria
agk000109 [at] msn.com
karchiemails [at] yahoo.com.hk
Received: from smtp2f.orange.fr (smtp2f.orange.fr [80.12.242.152])
by xxxxx (Postfix) with ESMTP id 94115789B999
for xxxxx; Fri, 5 Jun 2009 08:18:29 +0200 (CEST)
Received: from User (pool-173-64-64-45.bltmmd.fios.verizon.net
[173.64.64.45])
by mwinf2f16.orange.fr (SMTP Server) with ESMTP id 1E79880000A8;
Fri, 5 Jun 2009 08:15:44 +0200 (CEST)
ama9022 [at] yahoo.cn
Muguphon: +234-8083475523 ---> Celtel Nigeria Limited/Zain
Received: from shdlx1.system3.net (shdlx1.system3.net [65.60.36.66])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2A15F789BA9F
for xxxxx; Fri, 5 Jun 2009 08:42:52 +0200 (CEST)
Received: (qmail 22837 invoked by uid 89); 5 Jun 2009 03:01:31 -0000
Received: by simscan 1.3.1 ppid: 21775, pid: 22818, t: 1.9854s
scanners: attach: 1.3.1 clamav: 0.93/m:
Received: from unknown (HELO User)
(anilmohindru [at] emulines.com@82.128.111.203)
by shdlx1.system3.net with ESMTPA; 5 Jun 2009 03:01:30 -0000
anilmohindru [at] emulines.com
mrt_jones [at] live.com
mrt_jones1 [at] yahoo.com.hk
Received: from mail.led.go.th (186.245.150.203.sta.inet.co.th
[203.150.245.186])
by xxxxx (Postfix) with ESMTP id 62785789C290
for xxxxx; Fri, 5 Jun 2009 10:46:11 +0200 (CEST)
Received: from User (unknown [41.222.69.120])
by mail.led.go.th (NextMessage) with ESMTP id 4E2B4E94F0;
Thu, 4 Jun 2009 17:02:29 +0700 (ICT)
IP: 41.222.69.120 ---> Swift Networks Ltd., Nigeria
kabochambers1 [at] sify.com
kabo.williams [at] pobox.sk
Received: from sys3.secfiber.com (sys3.secfiber.com [209.160.64.208])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5BC98789C2AC
for xxxxx; Fri, 5 Jun 2009 12:39:10 +0200 (CEST)
Received: (qmail 64125 invoked from network); 11 May 2009 05:15:00 -0400
Received: from unknown (HELO User) (82.128.26.72)
by netfxx.com with SMTP; 11 May 2009 05:14:57 -0400
IP: 82.128.26.72 ---> Multilinks Telecommunications Limited, Nigeria
markmomos.1 [at] gmail.com
marko [at] homail.com
Received: from vms173017pub.verizon.net (vms173017pub.verizon.net
[206.46.173.17])
by xxxxx (Postfix) with ESMTP id 40374789C258
for xxxxx; Fri, 5 Jun 2009 13:26:19 +0200 (CEST)
Received: from User ([24.184.188.153]) by vms173017.mailsrvcs.net
(Sun Java(tm) System Messaging Server 6.3-7.04 (built Sep 26 2008; 32bit))
with ESMTPA id <0KKR0083ZJOG6450 [at] vms173017.mailsrvcs.net> for
xxxxx; Fri, 05 Jun 2009 06:26:07 -0500 (CDT)
IP: 24.184.188.153 ---> ool-18b8bc99.dyn.optonline.net
rmant10543 [at] googlemail.com
Was auffällt: Freemail-Provider aus Fernost (Yahoo HK, Sify) kommen bei den Mugus immer mehr in Mode. Nun ja, wenn die genauso schnell reagieren wie ihre 'Komplizen' im Land der umfallenden Reissäcke.... Und in Nigeria scheint es immer mehr (kleine) Provider zu geben. Bei dem Sumpf dort haben sicher bald die ersten Mugu-Banden ihren eigenen ISP eröffnet...
- kjz
Die Mugu-Party steigt wieder:
Received: from ktl.at (mail.ktl.at [80.120.145.2])
by xxxxx (Postfix) with ESMTP id 7C5DD789C289
for xxxxx; Mon, 15 Jun 2009 07:40:11 +0200 (CEST)
Received: from User [83.138.172.76] by ktl.at with ESMTP
(SMTPD32-8.05) id A054B9C00BA; Thu, 11 Jun 2009 08:12:36 +0200
Received: from 83.229.48.149 (trWkDgkdhT [at] 83.229.48.149 [83.229.48.149])
by chromium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Thu, 11 Jun 2009 06:59:41 +0100
(BST)
X-Originating-IP: [83.229.48.149] ---> Cyberspace Link 4 PHC, Nigeria
alatkinz [at] i12.com
alatkinz [at] yahoo.com.hk
Received: from tccinc.ph (unknown [203.99.236.198])
by xxxxx (Postfix) with ESMTP id AE40C7800E76
for xxxxx; Mon, 15 Jun 2009 02:59:45 +0200 (CEST)
Received: from User [196.3.183.72] by tccinc.ph with ESMTP
(SMTPD-9.23) id AE2D0250; Sun, 14 Jun 2009 18:17:17 +0800
IP: 196.3.183.72 (bitte merken) ---> Suburban Telecom, Nigeria
britishairportauthority [at] upmail.us
h.greg001 [at] gmail.com
Received: from mail.asico.net (mail.asico.net [87.118.136.210])
by xxxxx (Postfix) with ESMTP id C3139789BAD8
for xxxxxx; Mon, 15 Jun 2009 01:20:23 +0200 (CEST)
Received: from User ([196.3.183.72] RDNS failed) by mail.asico.net with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 15 Jun 2009 02:12:52 +0300
IP: 196.3.183.72, siehe oben....
mr.colemanw [at] yahoo.com
williamsuzo1 [at] yahoo.com.hk
Received: from smtp27.orange.fr (smtp27.orange.fr [80.12.242.96])
by xxxxx (Postfix) with ESMTP id A8331789C258
for xxxxx; Mon, 15 Jun 2009 03:45:27 +0200 (CEST)
Received: from User (84.126.129.173.dyn.user.ono.com [84.126.129.173])
by mwinf2719.orange.fr (SMTP Server) with ESMTP id 640641C00088;
Mon, 15 Jun 2009 03:44:04 +0200 (CEST)
pauldouglas1 [at] gmail.com
pauldouglasadb [at] yahoo.cn
Muguphon: 234-7066259668 ---> MTN Nigeria Communications Ltd.
Received: from mail.lt-press.ru (unknown [188.128.0.2])
by xxxxx (Postfix) with ESMTP id 7DDA678A016A
for xxxxx; Mon, 15 Jun 2009 16:15:00 +0200 (CEST)
Received: from User (unknown [41.211.230.231])
by mail.lt-press.ru (Postfix) with ESMTP id 7320A185C55;
Mon, 15 Jun 2009 14:42:52 +0400 (MSD)
IP: 41.211.230.231 ---> DIRECT ON PC LTD, Nigeria
fbiwatchsecurity [at] i12.com
fbifraudwatchunit2 [at] poczta.onet.pl
Received: from mail.gxu.cn (unknown [210.36.16.37])
by xxxxx (Postfix) with SMTP id D1E75789C289
for xxxxx; Tue, 16 Jun 2009 01:18:28 +0200 (CEST)
Received: (eqmail ); 9 Jun 2009 20:24:43 -0000
Received: from unknown (HELO user) (system [at] 41.191.108.130)
by localhost with SMTP; 9 Jun 2009 20:24:43 -0000
IP: 41.191.108.130(bitte merken) ---> Suburban Telecom, Nigeria
perry.rice0017 [at] gmail.com
prsgtrice7740 [at] gmail.com
Received: from mercurius.unri.ac.id (unknown [222.124.195.4])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AF35778A0165
for xxxxx; Tue, 16 Jun 2009 11:17:12 +0200 (CEST)
Received: (qmail 11382 invoked from network); 16 Jun 2009 15:53:57 -0000
Received: from unknown (HELO mail.unri.ac.id) ([127.0.0.1])
(envelope-sender <info [at] loan.net>)
by mercurius.unri.ac.id (qmail-ldap-1.03) with SMTP
for <sd206he [at] uni-duisburg.de>; 16 Jun 2009 15:53:57 -0000
Received: from 78.138.6.251
(SquirrelMail authenticated user mujiatko)
by mail.unri.ac.id with HTTP;
Tue, 16 Jun 2009 15:53:57 -0000 (UTC)
IP: 78.138.6.251 ---> Ipmath, Nigeria
williamsfinancialloan01 [at] gmail.com
Muguphon: +44 70457 20415 ---> Open Telecom International Ltd.
- kjz
Es droht Nachschub:
Received: from imss.bttindia.com (210-210-85-101.lan.sify.net
[210.210.85.101])
by xxxxx (Postfix) with ESMTP id 799BC78A012F
for xxxxx; Mon, 15 Jun 2009 22:11:10 +0200 (CEST)
Received: from imss.bttindia.com (imss.bttindia.com [127.0.0.1])
by postfix.imss70 (Postfix) with ESMTP id 2916835E592;
Tue, 16 Jun 2009 01:00:03 +0530 (IST)
Received: from notes.bttindia.com (unknown [192.168.0.1])
by imss.bttindia.com (Postfix) with ESMTP id F2AB335E4D3;
Tue, 16 Jun 2009 01:00:02 +0530 (IST)
Received: from User ([62.140.137.157])
by notes.bttindia.com (Lotus Domino Release 7.0.1FP1)
with ESMTP id 2009061600595938-17930 ;
Tue, 16 Jun 2009 00:59:59 +0530
woodward_invest1 [at] yahoo.com.hk
Received: from enviro.env.gov.sc (enviro.env.gov.sc [196.1.123.144])
by xxxxx (Postfix) with ESMTP id 83611789AB5D
for xxxxx; Tue, 16 Jun 2009 21:00:59 +0200 (CEST)
Received: from www.env.gov.sc (localhost [127.0.0.1])
by enviro.env.gov.sc (Postfix) with ESMTP id 1709D1FDC927;
Tue, 16 Jun 2009 21:12:29 +0400 (SCT)
Received: from 41.204.224.19
(SquirrelMail authenticated user d.dogley)
by www.env.gov.sc with HTTP;
Tue, 16 Jun 2009 21:12:29 +0400 (SCT)
IP: 41.204.224.19 ---> Direct-on-PC Limited, Nigeria
oceanfinloans [at] aol.com
Received: from vms173007pub.verizon.net (vms173007pub.verizon.net
[206.46.173.7])
by xxxxx (Postfix) with ESMTP id 391127800E76
for xxxxx; Wed, 17 Jun 2009 20:50:13 +0200 (CEST)
Received: from User ([201.13.199.240]) by vms173007.mailsrvcs.net
(Sun Java(tm) System Messaging Server 6.3-7.04 (built Sep 26 2008; 32bit))
with ESMTPA id <0KLE00CZNC9HQE00 [at] vms173007.mailsrvcs.net> for
xxxxx; Wed, 17 Jun 2009 13:49:59 -0500
IP: 201.13.199.240 ---> 201-13-199-240.dial-up.telesp.net.br
Man merke sich mal: Bot ---> Verizon; mich deucht, diese Kette haben wir nicht das letzte Mal gesehen....
finance.office01 [at] gmail.com
Ach ja, der gute, alte Charles Soludo:
soludop66 [at] sify.com
Muguphon: 234-803-769-6639 ---> MTN Nigeria Communications Ltd.
Received: from smtp2b.orange.fr (smtp2b.orange.fr [80.12.242.146])
by xxxx (Postfix) with ESMTP id 50F6C7800D56
for xxxxx; Wed, 17 Jun 2009 20:50:52 +0200 (CEST)
Received: from User (118.Red-83-55-43.dynamicIP.rima-tde.net [83.55.43.118])
by mwinf2b27.orange.fr (SMTP Server) with ESMTP id 6351B80000A0;
Wed, 17 Jun 2009 20:48:01 +0200 (CEST)
Und die Madrider Mugu-Konnektion setzt auf Frank Williams den dreihunderteinundvierzigsten:
frankwilliams341 [at] yahoo.com
- kjz
frische Mugus:
Received: from mail.cmsius.com (unknown [69.85.52.82])
by xxxxx (Postfix) with ESMTP id B4A05789C2A0
for xxxxx; Wed, 17 Jun 2009 23:03:15 +0200 (CEST)
Received: from User [41.207.3.60] by mail.cmsius.com with ESMTP
(SMTPD32-8.04) id A69712D301F2; Thu, 04 Jun 2009 05:40:39 -0400
IP: 41.207.3.60 ---> AFNET, CI
sndtanita1 [at] aol.com
sndtanita [at] aol.com
Received: from psmtp12.wxs.nl (psmtp12.wxs.nl [195.121.247.24])
by xxxxx (Postfix) with ESMTP id EEB9D7800D56
for xxxxx; Thu, 18 Jun 2009 05:51:54 +0200 (CEST)
Received: from po13.wxs.nl ([10.94.53.250])
by psmtp12.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
2006)) with ESMTP id <0KLE00D79Y7QAO [at] psmtp12.wxs.nl> for
xxxxx; Thu, 18 Jun 2009 04:43:02 +0200 (MEST)
Received: from planet.nl ([127.0.0.1])
by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
2005))
with ESMTP id <0KLE00IY4Y7NXF [at] po13.wxs.nl> for xxxxx;
Thu,
18 Jun 2009 04:43:00 +0200 (MEST)
Received: from [10.94.71.42] (Forwarded-For: 41.191.85.17, [148.233.159.58])
by po13.wxs.nl (mshttpd); Thu, 18 Jun 2009 04:42:58 +0200
IP: 41.191.85.17 ---> Ste OTTOLA & Company, BJ
92van253 [at] kpn-officedsl.nl
www.western011 [at] sify.com
Muguphon: +229-93-42-99-51 ---> BBCom, Benin
Received: from mxout1.ocpwebserver.com (fire2cab1.megavelocity.com
[209.44.115.3])
by xxxxx (Postfix) with ESMTP id 9E8FE789B964
for xxxxx; Thu, 18 Jun 2009 03:29:02 +0200 (CEST)
Received: from gemofnet.com (unknown [10.10.100.16])
by mxout1.ocpwebserver.com (Postfix) with ESMTP id 9E2B36C028;
Wed, 17 Jun 2009 21:00:09 -0400 (EDT)
Received: from User [82.128.27.174] by gemofnet.com with ESMTP
(SMTPD32-8.15) id A3CD26C700B4; Wed, 17 Jun 2009 21:09:33 -0400
IP: 82.128.27.174 ---> Multilinks Telecommunications Limited, Nigeria
robert_kelvin99 [at] yahoo.com.hk
- kjz
Wochenende ist Mugu-Zeit....
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id B2850789B970
for xxxxx; Fri, 19 Jun 2009 01:35:37 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 3980961D2E; Sun, 14 Jun 2009 06:20:02 -0300 (BRT)
Received: from phpmailer ([77.209.54.225])
by 77.209.54.225 with HTTP (UebiMiau);
Sun, 14 Jun 2009 06:20:02 -0300
IP: 77.209.54.225 ---> VODAFONE_SPAIN_NETWORK
martinsdito [at] aim.com
ditoweber [at] aim.com
Received: from mail.pwmadar.pl (mail.pwmadar.pl [195.150.92.53])
by xxxxx (Postfix) with ESMTP id 81BBC789A992
for xxxxx; Fri, 19 Jun 2009 06:06:01 +0200 (CEST)
Received: from mail.pwmadar.pl (komp72 [192.168.0.72])
by mail.pwmadar.pl (Postfix) with ESMTP id 113D41F581B;
Thu, 18 Jun 2009 22:46:25 +0200 (CEST)
Received: from User (unknown [121.121.129.71])
by mail.pwmadar.pl (Postfix) with ESMTP id BD5C91F567E;
Thu, 18 Jun 2009 22:45:40 +0200 (CEST)
IP: 121.121.129.71 ---> Maxis Broadband Sdn Bhd, MY
yusufmohd2 [at] sify.com
yusufmohd [at] gmail.com
Received: from server23.koenig-com.de (server23.koenig-com.de
[88.198.218.70])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 38C11789AA6A
for xxxxx; Fri, 19 Jun 2009 01:29:58 +0200 (CEST)
Received: by server23.koenig-com.de (Postfix, from userid 33)
id 6BA5A31A362; Fri, 19 Jun 2009 00:59:04 +0200 (CEST)
barristerjonathangray37 [at] gmail.com
jonathangray [at] gmail.com
www-data [at] server23.koenig-com.de
Received: from mail.cyberzone.tj (cyberzone.tj [193.111.11.8])
by xxxxx (Postfix) with ESMTP id 2E6667800D62
for xxxxx; Fri, 19 Jun 2009 03:06:42 +0200 (CEST)
Received: from localhost (localhost.tojikiston.com [127.0.0.1])
by mail.cyberzone.tj (Postfix) with ESMTP id BCD2312275CF;
Fri, 19 Jun 2009 05:50:59 +0500 (TJT)
X-Virus-Scanned: amavisd-new at cyberzone.tj
Received: from mail.cyberzone.tj ([127.0.0.1])
by localhost (ns.cyberzone.tj [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id u5CV19iSNPua; Fri, 19 Jun 2009 05:50:59 +0500 (TJT)
Received: from mail.tojikiston.com (localhost.tojikiston.com [127.0.0.1])
by mail.cyberzone.tj (Postfix) with ESMTP id BCEB81226718;
Fri, 19 Jun 2009 05:50:58 +0500 (TJT)
Received: from 82.128.46.178
(SquirrelMail authenticated user habib [at] tojikiston.com)
by mail.cyberzone.tj with HTTP;
Fri, 19 Jun 2009 05:50:59 +0500 (TJT)
IP: 82.128.46.178 ---> Multilinks Telecommunications Limited, Nigeria
obanna.helen3 [at] gmail.com
habib [at] tojikiston.com
- kjz
Das Wochenende ist noch lange nicht zu Ende:
Received: from mail.amtrade.co.uk (mail.amtrade.co.uk [81.5.154.174])
by spammotel.com (Postfix) with ESMTP id 314C16E6133
for xxxxx; Fri, 19 Jun 2009 09:31:54 -0400 (EDT)
Received: from User ([198.166.44.232]) by mail.amtrade.co.uk with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 19 Jun 2009 14:21:38 +0100
IP: 198.166.44.232 ---> s198-166-44-232.ab.hsia.telus.net
yv20009 [at] gmail.com
yv20091 [at] hotmail.com
Wer A sagt:
Received: from mail.smartmessage.com.tr (EHLO mail.smartmessage.com.tr)
[195.87.6.118]
by mx0.gmx.net (mx009) with SMTP; 20 Jun 2009 05:11:52 +0200
Received: from User ([41.222.69.12]) by smartmessage.com.tr with
MailEnable ESMTP; Fri, 19 Jun 2009 16:39:43 +0300
IP: 41.222.69.12 ---> SWIFT NETWORKS IP RANGE FOR AMUWO DHCP AND STATIC CLIENTS, Nigeria
johnaken1 [at] gmail.com
jwilliams [at] emailclick.com
zum Ersten:
Received: from ayaguard.ayagon.cl (unknown [201.236.77.250])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 83550789BAD8
for xxxxx; Sat, 20 Jun 2009 09:23:10 +0200 (CEST)
Received: from User (unknown [41.191.108.130])
by ayaguard.ayagon.cl (Postfix) with ESMTP id D6F67CA2A14;
Fri, 19 Jun 2009 13:03:03 -0400 (CLT)
IP: 41.191.108.130 ---> Suburban Telecom, Nigeria (die Mugu-Dauer-IP)
harrydgrant_pb99 [at] yahoo.com.hk
Muguphon: +447035914771 ---> Open Telecom International Ltd., UK
Muguphon: +447035919578 ---> Open Telecom International Ltd., UK
Die Madrid-Konnektion:
Received: from smtp2web.tin.it (smtp2web.tin.it [212.216.176.236])
by xxxxx (Postfix) with ESMTP id 3DF34789C25C
for xxxxx; Fri, 19 Jun 2009 22:19:01 +0200 (CEST)
Received: from feu5 (10.192.64.15) by smtp2web.tin.it (8.0.025)
id 4A36862000478BC5; Fri, 19 Jun 2009 22:05:05 +0200
Received: from (77.209.165.242) by webmailvtin.alice.it; Fri, 19 Jun
2009 22:05:05 +0200
IP: 77.209.165.242 ---> VODAFONE_SPAIN_NETWORK
sosasosa1 [at] virgilio.it
infosgasl [at] aim.com
Muguphon: +34 691 955 349 ---> France Telecom España, S.a.
zum Zweiten:
Received: from ayaguard.ayagon.cl (unknown [201.236.77.250])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 65009789C295
for xxxxx; Sat, 20 Jun 2009 13:12:39 +0200 (CEST)
Received: from User (unknown [41.191.108.130])
by ayaguard.ayagon.cl (Postfix) with ESMTP id EC86CCE07AB;
Fri, 19 Jun 2009 22:07:58 -0400 (CLT)
IP: 41.191.108.130 ---> Suburban Telecom, Nigeria (die Mugu-Dauer-IP)
harrydgrant_pb09 [at] yahoo.co.uk
der Senegal ist auch dabei:
Received: from omr13.networksolutionsemail.com
(omr13.networksolutionsemail.com [205.178.146.63])
by xxxxx (Postfix) with ESMTP id D5786789A996
for xxxxx; Sat, 20 Jun 2009 02:12:33 +0200 (CEST)
Received: from mail.networksolutionsemail.com
(ns-omr13.mgt.hosting.dc2.netsol.com [10.49.6.76])
by omr13.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
n5K0CWBT021430
for xxxxx; Fri, 19 Jun 2009 20:12:33 -0400
Message-Id: <200906200012.n5K0CWBT021430 [at] omr13.networksolutionsemail.com>
Received: (qmail 17567 invoked by uid 78); 20 Jun 2009 00:12:29 -0000
Received: from unknown (HELO User) (vevw0004 [at] shiqueto.org@41.208.168.127)
by ns-omr13.lb.hosting.dc2.netsol.com with SMTP; 20 Jun 2009 00:12:29
-0000
IP: 41.208.168.127 ---> SONATEL, SN
kate_duncan232 [at] yahoo.cn
Received: from smtp1m5.poczta.onet.pl (smtp1m5.poczta.onet.pl
[213.180.138.32])
by xxxxx (Postfix) with ESMTP id 509A878A0156
for xxxxx; Sat, 20 Jun 2009 14:31:33 +0200 (CEST)
Received: from [41.211.230.153] ([41.211.230.153]:1657 "EHLO
mmmmnnhgfde34 [at] poczta.onet.eu" rhost-flags-FAIL-FAIL-FAIL-FAIL)
by ps1.mod5.onet with ESMTPA id S50336337AbZFTMbdA0VWn (ORCPT
<rfc822;xxxxx); Sat, 20 Jun 2009 14:31:33 +0200
IP: 41.211.230.153 ---> DIRECT ON PC LTD, Nigera
andrewwolley59 [at] yahoo.com.hk
andrewwolley67 [at] yahoo.com.hk
Muguphon: +44-700-5921640 ---> PNC Telecom Services Limited, UK/Vanguard
Muguphon: +44 7624198271 ---> Manx Telecom
Mugufax: +44 870 288 7323 ---> Interweb Design Ltd., UK
kann seine Klappe nicht halten und muss auch B sagen:
Received: from mail.smartmessage.com.tr (EHLO mail.smartmessage.com.tr)
[195.87.6.118]
by mx0.gmx.net (mx048) with SMTP; 20 Jun 2009 15:34:20 +0200
Received: from User ([41.222.69.12]) by smartmessage.com.tr with
MailEnable ESMTP; Fri, 19 Jun 2009 16:39:43 +0300
IP: 41.222.69.12 ---> SWIFT NETWORKS IP RANGE FOR AMUWO DHCP AND STATIC CLIENTS, Nigeria
jwilliams [at] emailclick.com
johnaken1 [at] gmail.com
Received: from smtp2e.orange.fr (smtp2e.orange.fr [80.12.242.113])
by xxxxx (Postfix) with ESMTP id 4BADB789C29B
for xxxxx; Sat, 20 Jun 2009 15:18:15 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2e23.orange.fr (SMTP Server) with ESMTP id 153D880001C1;
Sat, 20 Jun 2009 15:18:15 +0200 (CEST)
Received: from francoise-briand.com
(LSt-Amand-152-33-4-68.w193-251.abo.wanadoo.fr [193.251.35.68])
by mwinf2e23.orange.fr (SMTP Server) with ESMTP id 9BA7180001B9;
Sat, 20 Jun 2009 15:18:14 +0200 (CEST)
X-ME-UUID: 20090620131814637.9BA7180001B9 [at] mwinf2e23.orange.fr
Received: from User ([196.3.183.72]) by francoise-briand.com with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 20 Jun 2009 15:18:08 +0200
IP: 196.3.183.72 ---> Suburban Telecom, Nigeria
isu.smith [at] yahoo.com.hk
smithisu [at] msn.com
die Amsterdam-Konnektion zum Ersten:
Received: from psmtp31.wxs.nl (psmtp31.wxs.nl [195.121.247.33])
by xxxxx (Postfix) with ESMTP id E994E7800D56
for xxxxx; Sat, 20 Jun 2009 16:50:46 +0200 (CEST)
Received: from po13.wxs.nl ([10.94.53.250])
by psmtp31.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
2006)) with ESMTP id <0KLJ00KUKL6W0Y [at] psmtp31.wxs.nl> for
xxxxx; Sat, 20 Jun 2009 16:49:44 +0200 (CEST)
Received: from planet.nl ([127.0.0.1])
by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
2005))
with ESMTP id <0KLJ00EPVL6VQI [at] po13.wxs.nl> for kziegler [at] uni-koblenz.de;
Sat,
20 Jun 2009 16:49:44 +0200 (MEST)
Received: from [10.94.71.42] (Forwarded-For: 41.222.192.88,
[148.233.159.58])
by po13.wxs.nl (mshttpd); Sat, 20 Jun 2009 15:49:43 +0100
IP: 41.222.192.88 ---> ISOCEL SARL, BJ
agentoffice2010 [at] gmail.com
die Amsterdam-Konnektion zum Zweiten:
Received: from psmtp13.wxs.nl (psmtp13.wxs.nl [195.121.247.25])
by xxxxx (Postfix) with ESMTP id 104C478A0138
for xxxxx; Sat, 20 Jun 2009 19:27:06 +0200 (CEST)
Received: from po13.wxs.nl ([10.94.53.250])
by psmtp13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
2006)) with ESMTP id <0KLJ006NIQ2R0Y [at] psmtp13.wxs.nl> for
xxxxx; Sat, 20 Jun 2009 18:35:16 +0200 (MEST)
Received: from planet.nl ([127.0.0.1])
by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
2005))
with ESMTP id <0KLJ00EY1Q2KQI [at] po13.wxs.nl> for xxxxx;
Sat,
20 Jun 2009 18:35:09 +0200 (MEST)
Received: from [10.94.71.40] (Forwarded-For: 41.223.251.101,
[200.65.127.161])
by po13.wxs.nl (mshttpd); Sat, 20 Jun 2009 18:35:08 +0200
IP: 41.223.251.101 ---> Omnium des Telecommunications et de l'Internet Benin
apex.expres.courier.shipping.c [at] live.com
Muguphon: +229-98-877-596 ---> Benin
- kjz
Received: from mail.insivumeh.gob.gt (mail.insivumeh.gob.gt [200.49.167.82])
by xxxxx (Postfix) with ESMTP id 5FF7A789A476
for xxxxx; Mon, 22 Jun 2009 04:31:12 +0200 (CEST)
MIME-version: 1.0
Content-transfer-encoding: 8BIT
Content-type: text/plain; charset=Windows-1251
Received: from User ([174.137.58.104])
by mail.insivumeh.gob.gt (Sun Java(tm) System Messaging Server 6.3-0.15
(built
Feb 9 2007)) with ESMTPA id <0KLD007MYF2F6R00 [at] mail.insivumeh.gob.gt> for
xxxxx; Wed, 17 Jun 2009 00:52:33 -0600 (CST)
info_atmfund02 [at] sify.com
charles.0001 [at] live.com
Muguphon: +234-8074644875 ---> Globacom Ltd., Nigeria
Received: from smtp2b.orange.fr (smtp2b.orange.fr [80.12.242.146])
by xxxxx (Postfix) with ESMTP id CD6C7789A938
for xxxxx; Mon, 22 Jun 2009 14:11:58 +0200 (CEST)
Received: from User (77-120-202-235.telesweet.net [77.120.202.235])
by mwinf2b26.orange.fr (SMTP Server) with ESMTP id 93F508000065;
Mon, 22 Jun 2009 14:09:45 +0200 (CEST)
Ob dies ein neuer Trend wird? Mugu-Spam wird zwar immer noch über 'offizielle' (kompromittierte) Mailserver (sehr gerne genommen: Squirrel Mail Web Interface) abgekippt, diese werden aber nicht mehr direkt von Providern in Afrika 'gefütttert', man leistet sich jetzt auch zunehmend Proxies/Botnetze.
rob.muellerm [at] yahoo.com
mr.kelvinwilliams2 [at] gmail.com
- kjz
Nachschub droht:
Received: from garfield2.fisica.ufs.br (garfield2.fisica.ufs.br
[200.17.141.35])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0B44C789C2A2
for xxxxx; Sat, 20 Jun 2009 21:35:58 +0200 (CEST)
Received: from www.fisica.ufs.br (garfield2.fisica.ufs.br [200.17.141.35])
by garfield2.fisica.ufs.br (Postfix) with ESMTP id E9BC321C793;
Sat, 20 Jun 2009 15:53:54 -0300 (BRT)
Received: from 41.220.75.3
(SquirrelMail authenticated user wfilho)
by www.fisica.ufs.br with HTTP;
Sat, 20 Jun 2009 15:53:55 -0300 (BRT)
Dauer-Mugu-IP: 41.220.75.3 ---> MTN Nigeria
a_tristan22 [at] live.co.uk
mwelp [at] live.co.uk
Received: from vuexcas4.vuad.villanova.edu (EHLO
transport.villanova.edu) [153.104.6.166]
by mx0.gmx.net (mx105) with SMTP; 21 Jun 2009 03:05:26 +0200
Received: from User (41.217.2.7) by vuexcas4.vuad.villanova.edu
(153.104.6.6)
with Microsoft SMTP Server id 8.1.375.2; Sat, 20 Jun 2009 20:31:07
-0400
gecrackter Uni-Account, IP: 41.217.2.7 ---> ZOOM Mobile Nigeria Ltd
mailactivationoptns [at] inMail24.com
kathleen.waldron [at] villanova.edu
Received: from smtp28.orange.fr (smtp28.orange.fr [80.12.242.100])
by xxxxx (Postfix) with ESMTP id 02439789B02B
for xxxxx; Sun, 21 Jun 2009 21:49:22 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2812.orange.fr (SMTP Server) with ESMTP id 913387000082;
Sun, 21 Jun 2009 21:49:03 +0200 (CEST)
Received: from francoise-briand.com
(LSt-Amand-152-33-4-68.w193-251.abo.wanadoo.fr [193.251.35.68])
by mwinf2812.orange.fr (SMTP Server) with ESMTP id 27993700006D;
Sun, 21 Jun 2009 21:49:03 +0200 (CEST)
X-ME-UUID: 20090621194903162.27993700006D [at] mwinf2812.orange.fr
Received: from User ([124.120.131.70]) by francoise-briand.com with
Microsoft SMTPSVC(6.0.3790.3959);
Sun, 21 Jun 2009 21:49:01 +0200
Spamadoo + Botversand, IP: 124.120.131.70 ---> ppp-124-120-131-70.revip2.asianet.co.th
barrjohnwilliams_bangkok [at] yahoo.com.hk
Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.26])
by xxxxx (Postfix) with ESMTP id 5C210789B3B7
for xxxxx; Mon, 22 Jun 2009 19:15:45 +0200 (CEST)
Received: from User (unknown [86.121.202.99])
by mwinf2006.orange.fr (SMTP Server) with ESMTP id F3987200007F;
Mon, 22 Jun 2009 19:14:18 +0200 (CEST)
wieder Spamadoo + Botversand, IP: 86.121.202.99 ---> 86-121-202-99.rdsnet.ro
Bei Reissack-Juchuu gibts Adressen anscheinend nur im Tausenderpack....
idrisbuba9 [at] yahoo.cn
idrisbuba3 [at] yahoo.cn
idrisbuba5 [at] yahoo.cn
Received: from psmtp30.wxs.nl (psmtp30.wxs.nl [195.121.247.32])
by xxxxx (Postfix) with ESMTP id 85AF6789B936
for xxxxx; Mon, 22 Jun 2009 17:22:13 +0200 (CEST)
Received: from po13.wxs.nl ([10.94.53.250])
by psmtp30.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
2006)) with ESMTP id <0KLN00LZ0C114W [at] psmtp30.wxs.nl> for
xxxxx; Mon, 22 Jun 2009 17:22:13 +0200 (MEST)
Received: from planet.nl ([127.0.0.1])
by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
2005))
with ESMTP id <0KLN00068C10C7 [at] po13.wxs.nl> for xxxxx;
Mon,
22 Jun 2009 17:22:13 +0200 (MEST)
Received: from [10.94.71.42] (Forwarded-For: 41.222.192.88,
[148.233.159.58])
by po13.wxs.nl (mshttpd); Mon, 22 Jun 2009 11:22:12 -0400
der Planet of Spam mit Benin, IP: 41.222.192.88 ---> ISOCEL SARL, BJ
www.w.union.20083 [at] gmail.com
80jag799 [at] kpn-officedsl.nl
Muguphon: +229 93-69-31-96 ---> BBCom/Bell Benin
Received: from psmtp13.wxs.nl (psmtp13.wxs.nl [195.121.247.25])
by xxxxx (Postfix) with ESMTP id 6A53E789B35C
for xxxxx; Mon, 22 Jun 2009 21:13:17 +0200 (CEST)
Received: from po13.wxs.nl ([10.94.53.250])
by psmtp13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
2006)) with ESMTP id <0KLN0002BMQ3QY [at] psmtp13.wxs.nl> for
xxxxx; Mon, 22 Jun 2009 21:13:15 +0200 (MEST)
Received: from planet.nl ([127.0.0.1])
by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
2005))
with ESMTP id <0KLN008UAMQ0JG [at] po13.wxs.nl> for xxxxx;
Mon,
22 Jun 2009 21:13:13 +0200 (MEST)
Received: from [10.94.71.40] (Forwarded-For: 41.222.192.70,
[200.65.127.161])
by po13.wxs.nl (mshttpd); Mon, 22 Jun 2009 21:13:12 +0200
wieder der Planet of Spam, IP: 41.222.192.70 ---> ISOCEL SARL, BJ (die Bande hatten wir auch schon am mind. 18. 6.)
infousaembassy001 [at] inMail24.com
80jag820 [at] kpn-officedsl.nl
Muguphon: +229 98 33 73 27 ---> Benin
Received: from mfa.gov.ge (mail.mfa.gov.ge [77.92.233.50])
by xxxxx (Postfix) with ESMTP id 23937789B013
for xxxxx; Mon, 22 Jun 2009 21:05:23 +0200 (CEST)
Received: from [82.128.34.165] (account test HELO User)
by mfa.gov.ge (CommuniGate Pro SMTP 5.1.16)
with ESMTPA id 3160910; Mon, 22 Jun 2009 15:47:03 +0400
IP: 82.128.34.165 ---> Multilinks Telecommunications Limited, Nigeria
cpuihangseng2001 [at] gmail.com
cheungpuihsb1997 [at] ymail.com
- kjz
Noch ein paar....
die Madrid-Konnektion
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id CE25F789B764
for xxxxx; Mon, 22 Jun 2009 22:40:35 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id D7D4861DA4; Sun, 21 Jun 2009 07:18:48 -0300 (BRT)
Received: from phpmailer ([77.209.85.241])
by 77.209.85.241 with HTTP (UebiMiau);
Sun, 21 Jun 2009 07:18:48 -0300
IP: 77.209.85.241 ---> VODAFONE_SPAIN_NETWORK
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id CF2A5789B76A
for xxxxx; Mon, 22 Jun 2009 22:40:35 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 4332961DA5; Sun, 21 Jun 2009 07:20:23 -0300 (BRT)
Received: from phpmailer ([77.209.85.241])
by 77.209.85.241 with HTTP (UebiMiau);
Sun, 21 Jun 2009 07:20:23 -0300
martinsdito [at] aim.com
ditoweber [at] aim.com
eceived: from srvmail.managecomm.com (unknown [70.167.10.68])
by xxxxx (Postfix) with ESMTP id 070A4789AE08
for xxxxx; Tue, 23 Jun 2009 18:01:04 +0200 (CEST)
Received: from User ([81.91.228.131]) by srvmail.managecomm.com with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 22 Jun 2009 12:57:05 -0700
IP: 81.91.228.131 ---> Office des Postes et Telecommunications (OPT), BJ
wu-agencybj [at] live.fr
wusgbbe [at] gmail.com
sgbbbj [at] gmail.com
Muguphon: +229-21073310 ---> Benin
- kjz
Es geht weiter....
Received: from smtp2b.orange.fr (smtp2b.orange.fr [80.12.242.146])
by xxxxx (Postfix) with ESMTP id CD6C7789A938
for xxxxx; Mon, 22 Jun 2009 14:11:58 +0200 (CEST)
Received: from User (77-120-202-235.telesweet.net [77.120.202.235])
by mwinf2b26.orange.fr (SMTP Server) with ESMTP id 93F508000065;
Mon, 22 Jun 2009 14:09:45 +0200 (CEST)
rob.muellerm [at] yahoo.com
mr.kelvinwilliams2 [at] gmail.com
Received: from mail2.totalhosting.magic.fr (mail2.totalhosting.magic.fr
[195.154.194.111])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 90F41789B3B7
for xxxxx; Mon, 22 Jun 2009 23:28:58 +0200 (CEST)
Received: (qmail 16216 invoked from network); 22 Jun 2009 18:44:23 +0200
Received: from unknown (HELO User) (62.173.42.192)
by udaf49.net with SMTP; 22 Jun 2009 18:44:18 +0200
IP: 62.173.42.192 ---> ipNX Nigeria
plix014 [at] gmail.com
george.will013 [at] gmail.com
Received: from smtp.benet.ru (ns2.benet.ru [83.167.4.66])
by xxxxx (Postfix) with ESMTP id 348AC789B908
for xxxxx; Tue, 23 Jun 2009 08:26:30 +0200 (CEST)
Received: by smtp.benet.ru (Postfix, from userid 426)
id CB2695A5B14; Fri, 19 Jun 2009 11:15:58 +0600 (YEKST)
Received: from User (unknown [196.3.183.73])
by smtp.benet.ru (Postfix) with ESMTP id 42F2A5A470C;
Fri, 19 Jun 2009 11:13:16 +0600 (YEKST)
IP: 196.3.183.73 ---> Suburban Telecom, Nigeria
jones1jones5007 [at] o2.pl
jones1jones50015 [at] o2.pl
Received: from ms04-i.ethome.com.tw (ms04.ethome.com.tw [211.76.112.37])
by xxxxx (Postfix) with ESMTP id CF922789B35E
for xxxxx; Tue, 23 Jun 2009 09:57:20 +0200 (CEST)
Received: from localhost (localhost.ethome.com.tw [127.0.0.1])
by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
452662ED7C2;
Tue, 23 Jun 2009 07:44:41 +0800 (CST)
X-Virus-Scanned: amavisd-new at ethome.com.tw
Received: from ms04-i.ethome.com.tw ([127.0.0.1])
by localhost (ms04-i.ethome.com.tw [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id D2sxeDL9fC2h; Tue, 23 Jun 2009 07:44:40 +0800 (CST)
Received: from kbronet.com.tw (unknown [192.168.88.25])
by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
B4B922EEEAE;
Tue, 23 Jun 2009 07:44:33 +0800 (CST)
X-OriginatingIP: 41.220.75.3 (wang0312 [at] kbronet.com.tw) ---> MTN Nigeria (Dauer-Mugu-IP)
wang0312 [at] kbronet.com.tw
edes2abebe2004 [at] yahoo.com.hk
Muguphon: +2347031375938 ---> MTN Nigeria Communications Ltd.
Received: from blu0-omc2-s6.blu0.hotmail.com
(blu0-omc2-s6.blu0.hotmail.com [65.55.111.81])
by xxxxx (Postfix) with ESMTP id 0AE4A789AD92
for xxxxx; Wed, 24 Jun 2009 05:26:46 +0200 (CEST)
Received: from BLU137-W28 ([65.55.111.71]) by
blu0-omc2-s6.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 23 Jun 2009 20:26:46 -0700
X-Originating-IP: [86.62.27.210] ---> 210-27-62-86.digitalskys.com
davidclark_1 [at] walla.com
da_ccccc07 [at] msn.com
davidclark_01234 [at] yahoo.com.hk
Received: from dns.jgps.tpc.edu.tw (dns.jgps.tpc.edu.tw [163.20.71.1])
by xxxxx (Postfix) with ESMTP id C104F789B157
for xxxxx; Tue, 23 Jun 2009 23:35:18 +0200 (CEST)
Received: from dns.jgps.tpc.edu.tw (localhost [127.0.0.1])
by dns.jgps.tpc.edu.tw (Postfix) with ESMTP id B22BD8F8AE40;
Wed, 24 Jun 2009 05:15:54 +0800 (CST)
Received: from jgps.tpc.edu.tw (localhost [127.0.0.1])
by dns.jgps.tpc.edu.tw (Postfix) with ESMTP id 680DD8F8A99E;
Wed, 24 Jun 2009 05:15:54 +0800 (CST)
X-OriginatingIP: 41.191.108.130 (jcs0220) ---> Suburban Telecom, Nigeria (Dauer-Mugu-IP)
vincentandjane2 [at] live.com
vincentandjane [at] hotmail.com
- kjz
Wochenend und Sonnenschein....äääähhhh...Mugu-Mails....
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id 0FD60789B59E
for xxxxx; Sat, 27 Jun 2009 01:46:02 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 676E662051; Wed, 24 Jun 2009 21:36:57 -0300 (BRT)
Received: from phpmailer ([77.209.6.218])
by 77.209.6.218 with HTTP (UebiMiau);
Wed, 24 Jun 2009 21:36:57 -0300
gecrackter PHPMailer der Madrid-Konnektion:
IP: 77.209.6.218 ---> VODAFONE_SPAIN_NETWORK
martinsdito [at] aim.com
ditoweber [at] aim.com
Received: from megabaze.com (LRouen-151-71-54-18.w80-11.abo.wanadoo.fr
[80.11.234.18])
by spammotel.com (Postfix) with ESMTP id 5ED806E68F1
for xxxxx; Fri, 26 Jun 2009 18:15:48 -0400 (EDT)
Received: from User (unknown [74.198.8.57])
by megabaze.com (Postfix) with ESMTP id 328D542ED940;
Fri, 26 Jun 2009 22:16:58 +0200 (CEST)
IP: 74.198.8.57 ---> Rogers Wireless Inc.
yusufabida [at] adnanaswadconsultancy.co.in
melwilllaw [at] aol.com
Received: from offshoreenergy.com.au (offsho.lnk.telstra.net
[203.45.71.238])
by xxxxx (Postfix) with ESMTP id 6551D789B033
for xxxxx; Sat, 27 Jun 2009 07:27:33 +0200 (CEST)
Received: from User ([124.120.130.68]) by offshoreenergy.com.au with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 27 Jun 2009 05:11:18 +0930
IP: 124.120.130.68 ---> ppp-124-120-130-68.revip2.asianet.co.th
fbithailandd [at] yahoo.com.hk
chasemanhatanbnk [at] yahoo.com.hk
Muguphon: +668-6906-1503 ---> Total Access Communication Plc. (TAC/DTAC), TH
eceived: from HoangNgoc.hoangngoc-resort.com (mail.hoangngoc-resort.com
[118.69.206.149])
by xxxxx (Postfix) with ESMTP id EF0FD789B163
for xxxxx; Sat, 27 Jun 2009 06:39:04 +0200 (CEST)
Received: from User ([41.191.108.130]) by HoangNgoc.hoangngoc-resort.com
with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 27 Jun 2009 11:25:32 +0700
IP: 41.191.108.130 ---> Suburban Telecom, Nigeria (der bekannte Mugu-Schwarzhut)
genobijohnson [at] mynet.com
genobijohnson [at] gmail.com
genobijohnson [at] aol.com
Spamadoo natürlich auch wieder dabei:
Received: from smtp28.orange.fr (EHLO smtp28.orange.fr) [80.12.242.100]
by mx0.gmx.net (mx034) with SMTP; 27 Jun 2009 16:52:34 +0200
Received: from smtp28.orange.fr (mwinf2823 [10.232.15.123])
by mwinf2810.orange.fr (SMTP Server) with ESMTP id DA00E1C0422C;
Sat, 27 Jun 2009 00:24:00 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2823.orange.fr (SMTP Server) with ESMTP id A9BE380000A5;
Sat, 27 Jun 2009 00:24:00 +0200 (CEST)
Received: from oriflam.com
(LPuteaux-156-15-60-181.w82-127.abo.wanadoo.fr [82.127.119.181])
by mwinf2823.orange.fr (SMTP Server) with ESMTP id D757D80000BB;
Sat, 27 Jun 2009 00:23:57 +0200 (CEST)
X-ME-UUID: 20090626222357882.D757D80000BB [at] mwinf2823.orange.fr
Received: from [196.3.183.73] (account julie HELO User)
by oriflam.com (CommuniGate Pro SMTP 5.2.14)
with ESMTPA id 1189180; Sat, 27 Jun 2009 00:23:51 +0200
IP: 196.3.183.73 ---> Suburban Telecom, Nigeria
bankkinfo [at] yahoo.com.hk
bankkinfo0 [at] yahoo.com.hk
petadebayo [at] aol.com
Received: from mx1.ketchum.com.ar (mx1.ketchum.com.ar [190.2.24.229])
by xxxxx (Postfix) with ESMTP id EA2A8789B019
for xxxxx; Sun, 28 Jun 2009 09:48:18 +0200 (CEST)
Received: from User (unknown [41.216.40.59])
(Authenticated sender: info)
by mx1.ketchum.com.ar (Postfix) with ESMTPA id 0B00354A265;
Sat, 27 Jun 2009 13:54:47 -0300 (ART)
IP: 41.216.40.59 ---> Benin Telecoms SA
dhldelieverservice [at] ciudad.com.ar
pwpapchuawllm67 [at] gmail.com
info [at] ketchum.com.ar
Muguphon: +2299-3253656 ---> BBCom/Bell Benin
gecrackter Uni-Account:
Received: from exchr.raritanval.edu (exchr.raritanval.edu [207.200.169.35])
by xxxxx (Postfix) with ESMTP id 01C79789B63B
for xxxxx; Sat, 27 Jun 2009 22:49:25 +0200 (CEST)
guaranteeloan.plc [at] 8u8.us
emusselm [at] raritanval.edu
Received: from outbound.mail.myantel.net.mm (unknown [203.81.162.82])
by xxxxx (Postfix) with ESMTP id D39B1789B632
for xxxxx; Sun, 28 Jun 2009 16:26:57 +0200 (CEST)
Received: from relay3.bagan.net.mm (unknown [203.81.162.126])
by outbound.mail.myantel.net.mm (Postfix) with SMTP id 4487B52F9A6
for xxxxx; Sun, 28 Jun 2009 17:25:20 +0630 (MMT)
Received: (qmail 24487 invoked from network); 28 Jun 2009 09:42:36 -0000
Received: from owm.myantel.net.mm (HELO myanmar.com.mm) (203.81.71.113)
by relay3.bagan.net.mm with SMTP; 28 Jun 2009 09:42:36 -0000
X-OriginatingIP: 62.56.132.9 (asiangrace) ---> 62.56.132.9.satcom-systems.net (die Mugu-Freunde aus IL)
fiduciary0agentwhite [at] yahoo.com.hk
Muguphon: +447045744871 ---> Open Telecom International Ltd., UK
- kjz
It's Mugu Time (deshalb war's am Wochenende auch vergleichsweise ruhig....:
gleich doppelt gemoppelt:
Received: from mail.sborcity.ru (unknown [212.58.197.10])
by xxxxx (Postfix) with ESMTP id 53586789B5BD
for xxxxx; Mon, 29 Jun 2009 23:14:51 +0200 (CEST)
Received: from mail.sborcity.ru (unknown [212.58.197.10])
by mail.sborcity.ru (Postfix) with ESMTP id 114ED1B92B9C;
Sun, 28 Jun 2009 21:36:10 +0400 (MSD)
Received: from User (unknown [58.56.87.2])
by mail.sborcity.ru (Postfix) with ESMTPA id F242B1B4E964;
Sun, 28 Jun 2009 21:35:17 +0400 (MSD)
Received: from mail.sborcity.ru (unknown [212.58.197.10])
by xxxxx (Postfix) with ESMTP id EFB80789C28C
for xxxxx; Tue, 30 Jun 2009 10:50:22 +0200 (CEST)
Received: from mail.sborcity.ru (unknown [212.58.197.10])
by mail.sborcity.ru (Postfix) with ESMTP id 0FCAA20F8A59;
Tue, 30 Jun 2009 01:53:27 +0400 (MSD)
Received: from User (unknown [58.211.75.8])
by mail.sborcity.ru (Postfix) with ESMTPA id 0D8A41B49E6D;
Tue, 30 Jun 2009 00:04:47 +0400 (MSD)
IP: 58.56.87.2 ---> CHINANET SHANDONG PROVINCE
ada [at] sborcity.ru
liuggui [at] yahoo.com.hk
Received: from mx1.ketchum.com.ar (mx1.ketchum.com.ar [190.2.24.229])
by xxxxx (Postfix) with ESMTP id E6D5C7800E76
for xxxxx; Tue, 30 Jun 2009 04:04:05 +0200 (CEST)
Received: from User (unknown [41.216.40.59])
(Authenticated sender: info)
by mx1.ketchum.com.ar (Postfix) with ESMTPA id C3CAC583BEA;
Mon, 29 Jun 2009 11:33:07 -0300 (ART)
IP: 41.216.40.59 ---> Benin Telecoms SA
pwpapchuawllm67 [at] gmail.com
mikysimon25 [at] hotmail.com
Received: from mail.cooperativa.cl (mail.cooperativa.cl [200.11.86.101])
by xxxxx (Postfix) with ESMTP id D15D4789B394
for xxxxx; Tue, 30 Jun 2009 02:25:30 +0200 (CEST)
Received: by mail.cooperativa.cl (Postfix, from userid 80)
id AF9399E367; Mon, 29 Jun 2009 15:25:52 -0400 (CLT)
Received: from wbs-41-208-227-93.wbs.co.za (wbs-41-208-227-93.wbs.co.za
[41.208.227.93]) by webmail.cooperativa.cl (Horde MIME library) with HTTP;
Mon, 29 Jun 2009 15:25:50 -0400
deastwood101902 [at] yahoo.fr
davideastwood23 [at] yahoo.fr
Received: from blu0-omc2-s2.blu0.hotmail.com
(blu0-omc2-s2.blu0.hotmail.com [65.55.111.77])
by xxxxx (Postfix) with ESMTP id C2FD3789B3AC
for xxxxx; Tue, 30 Jun 2009 00:31:44 +0200 (CEST)
Received: from BLU132-W9 ([65.55.111.73]) by
blu0-omc2-s2.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 29 Jun 2009 15:31:44 -0700
X-Originating-IP: [86.62.27.210] ---> 210-27-62-86.digitalskys.com
mr.clark46 [at] yahoo.com.hk
bbb_c002 [at] msn.com
davidclark_01234 [at] yahoo.com.hk
Received: from IMPaqm3.telefonica.net (impaqm3.telefonica.net
[213.4.129.18])
by xxxxx (Postfix) with ESMTP id 6BE02789C288
for xxxxx; Tue, 30 Jun 2009 10:49:52 +0200 (CEST)
Received: from IMPmailhost3.adm.correo ([10.20.102.124])
by IMPaqm3.telefonica.net with bizsmtp
id A8ZT1c01C2h2L9m3P8pnPZ; Tue, 30 Jun 2009 10:49:47 +0200
Received: from cps6 ([10.20.100.206])
by IMPmailhost3.adm.correo with BIZ IMP
id A8pn1c00B4TArT61j8pn7v; Tue, 30 Jun 2009 10:49:47 +0200
X-TE-authinfo: authemail="??" |auth_email="??"
X-TE-AcuTerraCos: auth_cuTerraCos="terra-wm"
Received: from [41.222.193.98] by correo11.terra.es with HTTP
(authenticated as wumt19 [at] terra.es); Tue, 30 Jun 2009 10:09:11
+0200
IP: 41.222.193.98 ---> ISOCEL, Benin
wumt19 [at] terra.es
wunionmtransfer [at] live.fr
Muguphon: +22993299975 ---> BBCom/Bell Benin
- kjz
Das Wochenende naht: Muuuuuguuuuu-Time.....
Received: from fert.qingdaochina.com (unknown [218.58.79.22])
by xxxxx (Postfix) with ESMTP id A982B789B377
for xxxxx; Wed, 1 Jul 2009 06:24:37 +0200 (CEST)
Received: from User [82.128.33.102] by fert.qingdaochina.com with ESMTP
(SMTPD32-8.02) id AF861A90056; Tue, 30 Jun 2009 23:30:14 +0800
IP: 82.128.33.102 ---> Multilinks Telecommunications Limited, Nigeria
barrister.peterkelvin101 [at] gmail.com
barrister.peterkelvin102 [at] gmail.com
Received: from smtp2018.ep2001.biz (unknown [91.199.50.110])
by spammotel.com (Postfix) with ESMTP id 286088F4126
for xxxxx; Wed, 1 Jul 2009 18:47:26 -0400 (EDT)
Received: from 64-150-188-155 (unknown [64.150.188.155])
by smtp2018.ep2001.biz (Postfix) with ESMTP id 4F761B89B5
for xxxxx; Wed, 1 Jul 2009 16:13:54 +0000 (UTC)
IP: 64.150.188.155 ---> 64-150-188-155.dedicated.abac.net
james_martin111 [at] yahoo.com
ep2018 [at] ep2001.biz
gecracktes PHP:
Received: from mail.posta.ge (newmail.posta.ge [62.168.168.233])
by xxxxx (Postfix) with ESMTP id 39A43789ACE5
for xxxxx; Fri, 3 Jul 2009 02:51:17 +0200 (CEST)
Received: from localhost (relay.caucasus.net [62.168.168.208])
by mail.posta.ge (Postfix) with ESMTP id E3E302D050;
Thu, 2 Jul 2009 19:28:51 +0400 (GET)
Received: from mail.posta.ge ([62.168.168.233])
by localhost (relay.caucasus.net [62.168.168.208]) (amavisd-new, port
10018)
with ESMTP id n4QAvjL-GiHz; Thu, 2 Jul 2009 19:32:28 +0400 (GET)
Received: by mail.posta.ge (Postfix, from userid 80)
id 0123D28479; Thu, 2 Jul 2009 19:28:51 +0400 (GET)
X-PHP-Script: mail.ge/index.php for 41.202.18.171 ---> Zipnet-Network, Ghana
pessien4 [at] adinet.com.uy
paulessien [at] mail.ge
Received: from smtp3m5.poczta.onet.pl (smtp3m5.poczta.onet.pl
[213.180.138.34])
by xxxxx (Postfix) with ESMTP id 1509A789B961
for xxxxx; Fri, 3 Jul 2009 02:36:21 +0200 (CEST)
Received: from [82.128.26.88] ([82.128.26.88]:2868 "EHLO
fbioffice00010001 [at] poczta.onet.eu" rhost-flags-FAIL-FAIL-FAIL-FAIL)
by ps3.mod5.onet with ESMTPA id S50349373AbZGCAgVWIoWb (ORCPT
<rfc822;xxxxx); Fri, 3 Jul 2009 02:36:21 +0200
IP: 82.128.26.88 ---> Multilinks Telecommunications Limited, Nigeria
frdcbng1 [at] gmail.com
fbioffice00010001 [at] poczta.onet.eu
gecracktes Squirrelmail/PHP:
Received: from mail.obsa.com.ec (mail.obsa.com.ec [157.100.192.242])
by xxxxx (Postfix) with ESMTP id C89ED789B757
for xxxxx; Fri, 3 Jul 2009 06:41:29 +0200 (CEST)
Received: by mail.obsa.com.ec (Postfix, from userid 48)
id 52EC311F910; Thu, 2 Jul 2009 20:40:33 -0500 (ECT)
Received: from 41.191.85.209
(SquirrelMail authenticated user tramos)
by mail.obsa.com.ec with HTTP;
Fri, 3 Jul 2009 02:40:33 +0100 (BST)
IP: 41.191.85.209 ---> MICRO-NET_CYBER, Benin
fedexcourierservice1980 [at] inMail24.com
tramos [at] obsa.com.ec
Muguphon: +229-98895888 ---> Benin
Received: from fep06.mfe.bur.connect.com.au
(fep06.mfe.bur.connect.com.au [203.63.86.26])
by xxxxx (Postfix) with ESMTP id 4146D789B635
for xxxxx; Fri, 3 Jul 2009 06:33:35 +0200 (CEST)
Received: from User (unknown [82.128.26.120])
(Authenticated sender: petrol [at] aapt.net.au)
by fep06.mfe.bur.connect.com.au (Postfix) with ESMTP id 1CE3323AAC;
Fri, 3 Jul 2009 13:29:26 +1000 (EST)
IP: 82.128.26.120 ---> Multilinks Telecommunications Limited, Nigeria
petrol [at] aapt.net.au
info.jgoodman [at] sify.com
info.jgoodmanjr [at] sify.com
die Madrid-Konnektion:
Received: from server.fibafrica.com (unknown [74.55.33.106])
by spammotel.com (Postfix) with ESMTPS id 1E3086E7ACD
for xxxxx; Thu, 2 Jul 2009 15:25:10 -0400 (EDT)
Received: from 141.red-88-6-46.staticip.rima-tde.net ([88.6.46.141]
helo=User)
by server.fibafrica.com with esmtpa (Exim 4.69)
(envelope-from <ferrandojorgelob [at] msn.com>)
id 1MMRr3-0008Of-8j; Thu, 02 Jul 2009 14:21:57 -0500
ferrandojorgelob [at] msn.com
ferrandodejorgeluis [at] aol.es
ferrandojorgelu [at] mixmail.com
gecracktes Squirrelmail/PHP:
Received: from wow.lk (mailwall.suntelwow.lk [202.124.160.185])
by xxxxx (Postfix) with ESMTP id 3ECA9789B394;
Fri, 3 Jul 2009 09:03:18 +0200 (CEST)
Received: from webmail.wow.lk (ftp.wow.lk [202.124.160.4])
by mailwall.suntelwow.lk with ESMTP id n61AjsOl028387;
Wed, 1 Jul 2009 16:15:54 +0530
Received: from 64.136.164.35 (proxying for 82.128.35.149)
(SquirrelMail authenticated user viluyana)
by webmail.wow.lk with HTTP;
Wed, 1 Jul 2009 16:11:46 +0530 (IST)
IP: 82.128.35.149 ---> Multilinks Telecommunications Limited, Nigeria
viluyana [at] wow.lk
harrisonclarke [at] inmail24.com
Muguphon: +447035969341 ---> Open Telecom International Ltd., UK
Received: from mail.sborcity.ru (unknown [212.58.197.10])
by xxxxx (Postfix) with ESMTP id EFDFA789BABE
for xxxxx; Fri, 3 Jul 2009 13:35:37 +0200 (CEST)
Received: from mail.sborcity.ru (unknown [212.58.197.10])
by mail.sborcity.ru (Postfix) with ESMTP id 460B83235E94;
Mon, 29 Jun 2009 07:42:46 +0400 (MSD)
Received: from User (unknown [58.214.5.169])
by mail.sborcity.ru (Postfix) with ESMTPA id E757B3236A98;
Mon, 29 Jun 2009 05:59:54 +0400 (MSD)
liu_qinggui [at] yahoo.com.hk
- kjz
Wie war das noch mit Wochenende und Mugus....
Received: from smtp23.orange.fr (smtp23.orange.fr [193.252.22.126])
by xxxxx (Postfix) with ESMTP id 2A991789B8F0
for xxxxx; Fri, 3 Jul 2009 15:15:36 +0200 (CEST)
Received: from User (unknown [78.56.136.208])
by mwinf2317.orange.fr (SMTP Server) with ESMTP id F0E79700008F;
Fri, 3 Jul 2009 15:13:54 +0200 (CEST)
paymentofficer111 [at] yahoo.cn
Muguphon: +27-78-130-2165 ---> MTN, ZA
Received: from poczta.o2.pl (mx12.go2.pl [193.17.41.142])
by xxxxx (Postfix) with ESMTP id 85D9C7800D62
for xxxxx; Fri, 3 Jul 2009 18:53:37 +0200 (CEST)
Received: from poczta.o2.pl (mx12 [127.0.0.1])
by poczta.o2.pl (Postfix) with ESMTP id 86202104091;
Fri, 3 Jul 2009 18:53:27 +0200 (CEST)
Received: from User (dsl-146-51-162.telkomadsl.co.za [165.146.51.162])
by poczta.o2.pl (Postfix) with ESMTP;
Fri, 3 Jul 2009 18:53:24 +0200 (CEST)
mphundu20 [at] gmail.com
nikitaab [at] o2.pl
Received: from mail.cultura.ro (mail.cultura.ro [89.45.181.74])
by xxxxx (Postfix) with ESMTP id CA344789B2AF
for xxxxx; Sat, 4 Jul 2009 02:08:22 +0200 (CEST)
Received: from User [198.186.190.167] by mail.cultura.ro with ESMTP
(SMTPD-10.02) id A80A05AC; Fri, 03 Jul 2009 11:57:46 +0300
IP: 198.186.190.167 ---> Prescient Software, Inc.
lamido1 [at] sify.com
lamido3 [at] sify.com
Muguphon: +234-806-6899964 ---> MTN Nigeria Communications Ltd.
die Madrid-Konnektion:
Received: from IMPaqm5.telefonica.net (impaqm5.telefonica.net
[213.4.129.20])
by xxxxx (Postfix) with ESMTP id 85EBE789B977
for xxxxx; Fri, 3 Jul 2009 22:46:26 +0200 (CEST)
Received: from IMPmailhost1.adm.correo ([10.20.102.38])
by IMPaqm5.telefonica.net with bizsmtp
id BWBG1c02l0piX6q3RYmRlB; Fri, 03 Jul 2009 22:46:25 +0200
Received: from User ([87.223.63.91])
by IMPmailhost1.adm.correo with BIZ IMP
id BYmN1c0041y7ZVz1hYmPnb; Fri, 03 Jul 2009 22:46:25 +0200
IP: 87.223.63.91 ---> 91.63.223.87.dynamic.jazztel.es
tgf54643 [at] terra.es
info0 [at] centrum.cz
auch der Dauer-Mugu kommt zum Einsatz:
Received: from ms04-i.ethome.com.tw (ms04.ethome.com.tw [211.76.112.37])
by xxxxx (Postfix) with ESMTP id 7FF54789AE3B
for xxxxx; Fri, 3 Jul 2009 23:16:34 +0200 (CEST)
Received: from localhost (localhost.ethome.com.tw [127.0.0.1])
by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
102F02EBCDE;
Sat, 4 Jul 2009 04:49:18 +0800 (CST)
X-Virus-Scanned: amavisd-new at ethome.com.tw
Received: from ms04-i.ethome.com.tw ([127.0.0.1])
by localhost (ms04-i.ethome.com.tw [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 5L3K4wgozDMH; Sat, 4 Jul 2009 04:49:17 +0800 (CST)
Received: from kbronet.com.tw (unknown [192.168.88.25])
by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
26C402EBCA3;
Sat, 4 Jul 2009 04:49:17 +0800 (CST)
Man beachte:
X-OriginatingIP: 41.220.75.3 (afw254 [at] kbronet.com.tw) ---> MTN Nigeria
afw254 [at] kbronet.com.tw
edes2abebe2004 [at] yahoo.com.hk
Muguphon: +2347031375938 ---> MTN Nigeria Communications Ltd.
- kjz
Es ist noch immer Wochenende....
Received: from server10.host2day.com (server10.host2day.com [193.33.20.4])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5FC8A789B968
for xxxxx; Sun, 5 Jul 2009 13:47:52 +0200 (CEST)
Received: from server10.host2day.com (unknown [127.0.0.1])
by server10.host2day.com (Postfix) with ESMTP id 67DE723E292D
for xxxxx; Sun, 5 Jul 2009 11:36:30 +0000 (UTC)
Received: by server10.host2day.com (Postfix, from userid 10285)
id BC46C23E2E04; Sun, 5 Jul 2009 11:36:24 +0000 (UTC)
wltrmik [at] aol.com
fullval [at] server10.host2day.com
Und dieser Mugu versucht's direkt zweimal über Spamadoo:
Received: from smtp2b.orange.fr (smtp2b.orange.fr [80.12.242.146])
by xxxxx (Postfix) with ESMTP id 74C7B7893FF6
for xxxxx; Sun, 5 Jul 2009 15:16:08 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2b23.orange.fr (SMTP Server) with ESMTP id 434057000095;
Sun, 5 Jul 2009 15:16:08 +0200 (CEST)
Received: from SERVEUR-01.groupe-esi.local
(LAubervilliers-153-51-12-12.w193-252.abo.wanadoo.fr [193.252.187.12])
by mwinf2b23.orange.fr (SMTP Server) with ESMTP id ABD937000090;
Sun, 5 Jul 2009 15:16:07 +0200 (CEST)
X-ME-UUID: 20090705131607703.ABD937000090 [at] mwinf2b23.orange.fr
Received: from SERVEUR-01.ceder.local ([193.252.43.188]) by
SERVEUR-01.groupe-esi.local with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 5 Jul 2009 15:12:30 +0200
Received: from User ([80.255.61.29]) by SERVEUR-01.ceder.local with
Microsoft SMTPSVC(6.0.3790.1830);
Sun, 5 Jul 2009 15:15:30 +0200
Received: from smtp21.orange.fr (unknown [80.12.242.48])
by xxxxx (Postfix) with ESMTP id BD814789A476
for xxxxx; Sun, 5 Jul 2009 16:52:24 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2113.orange.fr (SMTP Server) with ESMTP id A4FAE1C000A6;
Sun, 5 Jul 2009 16:51:38 +0200 (CEST)
Received: from SERVEUR-01.groupe-esi.local
(LAubervilliers-153-51-12-12.w193-252.abo.wanadoo.fr [193.252.187.12])
by mwinf2113.orange.fr (SMTP Server) with ESMTP id 42BCA1C000A5;
Sun, 5 Jul 2009 16:51:38 +0200 (CEST)
X-ME-UUID: 20090705145138273.42BCA1C000A5 [at] mwinf2113.orange.fr
Received: from SERVEUR-01.ceder.local ([193.252.43.188]) by
SERVEUR-01.groupe-esi.local with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 5 Jul 2009 16:48:21 +0200
Received: from User ([80.255.61.29]) by SERVEUR-01.ceder.local with
Microsoft SMTPSVC(6.0.3790.1830);
Sun, 5 Jul 2009 16:51:27 +0200
IP: 80.255.61.29 ---> INTELSAT-CUST-globalcom-NG
ex.wgeorge [at] yahoo.com.hk
ex.wwgeorge [at] yahoo.com
- kjz
Noch ein paar Mugu-Nachzügler:
Received: from fw.com.hk (fw.com.hk [202.181.234.242])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6B6C0789B760
for xxxxx; Sun, 5 Jul 2009 22:05:35 +0200 (CEST)
Received: from fw.com.hk (localhost.fw.com.hk [127.0.0.1])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by fw.com.hk (Postfix) with ESMTP id 6AFAA292566;
Sun, 5 Jul 2009 23:03:05 +0800 (HKT)
Received: from User (unknown [83.229.48.149])
by fw.com.hk (Postfix) with ESMTP id 2888829217A;
Sun, 5 Jul 2009 23:01:56 +0800 (HKT)
IP: 83.229.48.149 ---> Cyberspace Link 4 PHC, Nigeria/SkyVision Network Services
franciobi [at] rediffmail.com
obifran2000 [at] yahoo.co.in
francisobi777 [at] rediffmail.com
Katherine ist wieder daaaaa.....
Received: from mail.spw.info (mail.spw.info [86.59.99.202])
by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)
id 0MKrqa-1MNlkC3kRd-000AeB ; Mon, 06 Jul 2009 12:48:21 +0200
Received: from User ([202.67.44.125])
by mail.spw.info (IceWarp 9.4.2) with ASMTP id NRC89017;
Mon, 06 Jul 2009 12:48:17 +0200
IP: 202.67.44.125 ---> 125.44.67.202.static.ipnet.net.id
katiren114 [at] yahoo.co.jp
k4 [at] yahoo.com
Received: from calpop.advancelitigation.com (mail.advancelitigation.com
[216.240.145.241])
by xxxxx (Postfix) with ESMTP id 73A5178A014B
for xxxxx; Mon, 6 Jul 2009 14:45:52 +0200 (CEST)
Received: from UnknownHost [82.128.70.224] by
calpop.advancelitigation.com with SMTP;
Mon, 6 Jul 2009 04:59:12 -0700
IP: 82.128.70.224 ---> Multilinks Telecommunications Limited, Nigeria
adriandinos [at] googlemail.com
Received: from relay02.kiev.sovam.com (relay02.kiev.sovam.com
[62.64.120.197])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AAB8D789BAD4
for xxxxx; Mon, 6 Jul 2009 15:30:48 +0200 (CEST)
Received: from [212.82.219.106] (helo=mt.host)
by relay02.kiev.sovam.com with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <jamesbalard2009 [at] aim.com>)
id 1MNoHM-00039a-Uk; Mon, 06 Jul 2009 16:30:45 +0300
Received: from User ([82.128.70.166])
(authenticated user test [at] mt.ua)
by mt.host (Kerio MailServer 6.6.0 patch 1);
Mon, 6 Jul 2009 16:32:19 +0300
jamesbalard2009 [at] aim.com
test [at] mt.ua
- kjz
Aus allen Ecken und Enden....
gecracktes SquirrelMail:
Received: from web3.heritagewebdesign.com
(host-117.pl1211120-1.fiber.net [209.90.87.117])
by xxxxx (Postfix) with ESMTP id 4536D789B88A
for xxxxx; Tue, 7 Jul 2009 07:47:32 +0200 (CEST)
Received: from www.heritagewebdesign.com (localhost [127.0.0.1])
by web3.heritagewebdesign.com (Postfix) with ESMTP id 408D7202253;
Mon, 6 Jul 2009 20:45:00 -0600 (MDT)
Received: from 82.128.55.202
(SquirrelMail authenticated user lindels [at] heritagewebdesign.com)
by www.heritagewebdesign.com with HTTP;
Mon, 6 Jul 2009 22:45:00 -0400 (EDT)
IP: 82.128.55.202 ---> Multilinks Telecommunications Limited, Nigeria
ecospecrim [at] whatmail.com
lindels [at] heritagewebdesign.com
ecospecrime [at] fanaticos.com
wieder SquirrelMail gecrackt:
Received: from cp.offshorededi.com (unknown [93.174.93.46])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id BEB00789B24A
for xxxxx; Tue, 7 Jul 2009 03:31:23 +0200 (CEST)
Received: from localhost ([127.0.0.1] helo=webmail.abbeygroupplc.com)
by cp.offshorededi.com with esmtpa (Exim 4.69)
(envelope-from <jsmith.t88 [at] gmail.com>)
id 1MNwZD-0005dW-4Q; Mon, 06 Jul 2009 18:21:43 -0400
Received: from 82.128.32.29 ([82.128.32.29])
(SquirrelMail authenticated user secure [at] abbeygroupplc.com)
by webmail.abbeygroupplc.com with HTTP;
Mon, 6 Jul 2009 18:21:43 -0400 (EDT)
IP: 82.128.32.29 ---> Multilinks Telecommunications Limited, Nigeria
secure [at] abbeygroupplc.com
jsmith.t88 [at] gmail.com
revjimlawson2 [at] inmail.sk
Received: from jccapitals.com (unknown [65.59.190.45])
by xxxxx (Postfix) with ESMTP id 7D645789B63A
for xxxxx; Tue, 7 Jul 2009 06:31:41 +0200 (CEST)
Received: from User [58.51.197.246] by jccapitals.com with ESMTP
(SMTPD32-7.07) id A79537E50112; Mon, 06 Jul 2009 11:26:13 -0400
IP:58.51.197.246 ---> CHINANET Hubei
drtstssn [at] jmail.co.za
drtstssn [at] gmail.com
Received: from web4210.mail.ogk.yahoo.co.jp
(web4210.mail.ogk.yahoo.co.jp [124.83.212.30])
by xxxxx (Postfix) with SMTP id A7C3F789BACC
for xxxxx; Tue, 7 Jul 2009 12:17:25 +0200 (CEST)
Received: (qmail 78721 invoked by uid 60001); 7 Jul 2009 10:09:20 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=yj20050223; d=yahoo.co.jp;
h=Message-ID:Received:X-RocketDSI:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=pdTN7I86LCLDvP0SBozORsDXgxMh/q9a1WQFLWo9IlkqBGpNUI2leIByIsEUWJTqzmi7PHCDp/LYKgq802GkDlVEzt/W/vHw3CjSKgj0//G+Sc1jb71V6/6FgHgJROQK
;
Message-ID: <20090707100920.78719.qmail [at] web4210.mail.ogk.yahoo.co.jp>
Received: from [82.128.32.230] by web4210.mail.ogk.yahoo.co.jp via HTTP;
Tue, 07 Jul 2009 19:09:20 JST
IP: 82.128.32.230 ---> Multilinks Telecommunications Limited, Nigeria
davidcole20000 [at] yahoo.com.hk
uknational_28thlotto_wininngs8 [at] yahoo.co.jp
die Amsterdam-Konnektion:
Received: from mailscanner.connect.com.fj (smtp.connect.com.fj
[202.62.124.233])
by xxxxx (Postfix) with ESMTP id E90AD78A014C
for xxxxx; Tue, 7 Jul 2009 14:39:15 +0200 (CEST)
Message-Id: <7ui0es$grdmt [at] mailscanner.connect.com.fj>
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AtH+AHjQUkpN+6t8PGdsb2JhbAAEAY5KiT93AQEBHxgnhi2zTg
X-IronPort-AV: E=McAfee;i="5300,2777,5668"; a="17675997"
X-IronPort-AV: E=Sophos;i="4.42,362,1243771200";
d="scan'208";a="17675997"
Received: from dhcp-077-251-171-124.chello.nl (HELO User) ([77.251.171.124])
by mailscanner.connect.com.fj with ESMTP; 07 Jul 2009 22:46:57 +1200
DicksonMubane [at] aim.com
jjkongsar97 [at] gmail.com
Der Mugu-Preis des Tages geht an:
Multilinks Nigeria, your friendly, criminal, mugu-owned company.....
Und nicht zu vergessen: besonderer Dank an alle unfähigen Admins, die noch nicht mal eine sichere SquirrelMail-Installation gebacken bekommen, aber meinen, sie müssten unbedingt einen eigenen Mailserver betreiben....
- kjz
wieder SquirrelMail gecrackt:
Received: from cp.offshorededi.com (unknown [93.174.93.46])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id BEB00789B24A
for xxxxx; Tue, 7 Jul 2009 03:31:23 +0200 (CEST)
Received: from localhost ([127.0.0.1] helo=webmail.abbeygroupplc.com)
by cp.offshorededi.com with esmtpa (Exim 4.69)
(envelope-from <jsmith.t88 [at] gmail.com>)
id 1MNwZD-0005dW-4Q; Mon, 06 Jul 2009 18:21:43 -0400
Received: from 82.128.32.29 ([82.128.32.29])
(SquirrelMail authenticated user secure [at] abbeygroupplc.com)
by webmail.abbeygroupplc.com with HTTP;
Mon, 6 Jul 2009 18:21:43 -0400 (EDT)
IP: 82.128.32.29 ---> Multilinks Telecommunications Limited, Nigeria
secure [at] abbeygroupplc.com
jsmith.t88 [at] gmail.com
revjimlawson2 [at] inmail.sk
Nicht unbedingt: abbeygroupplc.com = 93.174.93.46
Ist das nicht eine schöne Bank?
Ist das nicht eine schöne Bank?
Und so toll vertrauenerweckend, da würde auch ein Crack prima zu passen....
- kjz
Na sowas, jemand muß es kaputtgespielt haben. :D
Noch ein paar zum abgewöhnen:
Received: from 69-55-236-248.in-addr.arpa.johncompanies.com (EHLO
kevinvescc-inc.com) [69.55.236.248]
by mx0.gmx.net (mx099) with SMTP; 06 Jul 2009 19:48:09 +0200
Received: from kevinvescc-inc.com (unknown [127.0.0.1])
by kevinvescc-inc.com (Postfix) with ESMTP id D07166F057F4;
Mon, 6 Jul 2009 17:19:31 +0000 (UTC)
Received: from User (unknown [81.199.63.115])
by kevinvescc-inc.com (Postfix) with ESMTP;
Mon, 6 Jul 2009 17:19:30 +0000 (UTC)
IP: 81.199.63.115 ---> 81.199.63.115.satcom-systems.net
charlesclarke [at] charlesclarkegroup.com
Received: from server.ashiwi.org (unknown [68.177.234.140])
by xxxxx (Postfix) with ESMTP id D725F789B962
for xxxxx; Tue, 7 Jul 2009 18:18:46 +0200 (CEST)
tntcourier [at] sify.com
mcachini [at] ashiwi.org
Muguphon: +44-7035926447 ---> Open Telecom International Ltd., UK
Mugufax: +44-7006094035 ---> Call Sciences Limited, UK/Yac
gecracktes Squirrelmail:
Received: from utmi.net (mail.utmi.net [67.59.33.133])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6CA127800D62
for xxxxx; Tue, 7 Jul 2009 18:50:43 +0200 (CEST)
Received: (qmail 2857 invoked by uid 89); 7 Jul 2009 16:05:53 -0000
Received: from unknown (HELO www.utmi.net) (127.0.0.1)
by 0 with SMTP; 7 Jul 2009 16:05:53 -0000
Received: from 83.138.172.72 (proxying for 196.3.183.72)
(SquirrelMail authenticated user millie)
by www.utmi.net with HTTP;
Tue, 7 Jul 2009 12:05:53 -0400 (EDT)
IP: 196.3.183.72 ---> Suburban Telecom, Nigeria
doriangardner92 [at] gmail.com
millie [at] utmi.net
Received: from mail.easternhousing.com (ip-58-147-170-110.aitlbd.net
[58.147.170.110])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1637E789A6EE
for xxxxx; Thu, 9 Jul 2009 17:51:57 +0200 (CEST)
Received: from easternhousing.com (mail.easternhousing.com [127.0.0.1])
by mail.easternhousing.com (8.12.8/8.12.8) with ESMTP id n6998NLR020140;
Thu, 9 Jul 2009 15:08:24 +0600
X-OriginatingIP: 82.128.71.101 (flat) ---> Multilinks Telecommunications Limited, Nigeria
bernarddwhitechambers [at] o2.pl
bernardwhitechambersattor [at] o2.pl
Muguphon: +447031980792 ---> Magrathea Telecommunications Limited, UK
- kjz
Jemand Interesse an einer Diskussion mit dem nigerianischen FBI? :)
X-Envelope-From: <info [at] fbi.gov>
X-Envelope-To: <meine Mail-Adresse>
X-Delivery-Time: 1247120002
X-UID: 17019
Return-Path: <info [at] fbi.gov>
X-RZG-FWD-BY: meine Mail-Adresse
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (voltan mi38) (RZmta 18.46)
for <meine Mail-Adresse>; Thu, 9 Jul 2009 08:13:22 +0200 (MEST)
X-RZG-CLASS-ID: mi
Received: from colegiosdiaconales.cl
(mail.colegiosdiaconales.cl [201.238.235.132])
by mailin.webmailer.de (voltan mi38) (RZmta 18.46)
with ESMTP id C07161l69622S3 for <meine Mail-Adresse>;
Thu, 9 Jul 2009 08:13:22 +0200 (MEST)
Received: from colegiosdiaconales.cl (localhost [127.0.0.1])
by colegiosdiaconales.cl (Postfix) with ESMTP id 5D2F34CA474;
Thu, 9 Jul 2009 02:12:13 -0400 (CLT)
From: "FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC" <info [at] fbi.gov>
Reply-To: securitywatch [at] fed-bureau-investigations.org
Subject: FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC
Date: Thu, 9 Jul 2009 02:12:13 -0400
Message-Id: <20090709060836.M86494 [at] fbi.gov>
X-Mailer: Open WebMail 2.51 20050504
X-OriginatingIP: 41.191.108.130 (ccaasnd)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-2
To: undisclosed-recipients:;
Und diesmal geht es um lächerliche 8 Millionen Öcken:
ROBERT MUELLER III
EXECUTIVE DIRECTOR FBI
FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC.
FBI SEEKING TO WIRETAP INTERNET
ATTENTION:
We believe this notification meets you in a very good present state of mind
and health. The Federal bureau of investigation (FBI) Washington, DC in
conjunction with some other relevant Investigation Agencies here in the United
states of America have recently been informed through our Global intelligence
monitoring network that you presently have a transaction going on with the
Central Bank of Nigeria (CBN) as regards to your over-due contract payment
which was fully endorsed in your favor accordingly.
We will find a way to fix a schedule for you to come to our head-quarter in
Washington DC to enable us advise you on what to do, but meanwhile you are
further advised to be contacting us via email for now because we are having
various investigations that we are working on now. Keep everything regarding
to your transaction confidential for security reasons and note that we have
not informed the local FBI department in your state regarding this matter
because we want to keep everything secret until your fund is been transferred
to you accordingly.
For the main time we the Federal Bureau of Investigation Washington D.C will
be helping you to monitor all the transaction with the central bank of
Nigeria. We want you to have in mind that we are trying to protect you because
your inheritance fund that is about to be transferred to you is a large amount
of money, and we will advise you not to inform any one about this transaction
until the corresponding bank have successfully transferred your inheritance fund.
It might interest you to know that we have taken out time in screening through
this project as stipulated on our protocol of operation and have finally
confirmed that your contract payment is 100% genuine and hitch free from all
facet and of which you have the lawful right to claim your fund without any
further delay. Having said all this, we will further advise that you go ahead
in dealing with the Central Bank office accordingly as we will be monitoring
all their services with you as well as your correspondence at all level.
In addition, also be informed that we recently had a meeting with the
Executive Governor of the Central Bank of Nigeria, in the person of Dr. Lamido
Sanusi, and Mr. Kingsley Agwor along with some of the top officials of the
Ministry regarding your case and they made us to understand that your file has
been held in abase depending on when you personally come for the claim. They
also told us that the only problem they are facing right now is that some
unscrupulous element are using this project as an avenue to scam innocent
people off their hard earned money by impersonating the Executive Governor and
the Central Bank office.
We were also made to understand that a lady with name Mrs. Joan C. Bailey from
OHIO has already contacted them and also presented to them all the necessary
documentations evidencing your claim purported to have been signed personally
by you prior to the release of your contract fund valued at about
US$8,000,000.00 (Eight million united states dollars), but the Central Bank
office did the wise thing by insisting on hearing from you personally before
the go ahead on wiring your fund to the Bank information's which was forwarded
to them by the above named Lady so that was the main reason why they contacted
us so as to assist them in making the investigations.
They further informed us that we should warn our dear citizens who must have
been informed of the contract payment which was awarded to them from the
Central Bank of Nigeria, to be very careful prior to this irregularities so
that they don't fall victim to this ugly circumstance. And should in case you
are already dealing with anybody or office claiming to be from the Central
Bank of Nigeria, you are further advised to STOP further contact with them in
your best interest and then contact immediately the real office of the Central
Bank of Nigeria (CBN) only with the below information's accordingly:
NAME: MR. KINGSLEY AGWOR
OFFICE ADDRESS: Central Bank of Nigeria, Central Business
District,Cad astral Zone, Abuja,
Federal Capital Territory,
Nigeria.
TEL: +234-8079-322-197
+234-1221-5892
Email: contact [at] cenbknig.org
NOTE:
In your best interest, any message that doesn't come from the above official
email address and phone numbers should not be replied to and should be
disregarded accordingly for security reasons. Meanwhile, we will advise that
you contact the Central Bank office immediately with the above email address
and request that they attend to you payment file as directed so as to enable
you receive your contract fund accordingly.
Ensure you follow all their procedure as may be required by them as that will
further help hasten up the whole procedures as regards to the transfer of your
fund to you as designated. Also have in mind that the Central Bank of Nigeria
equally have their own protocol of operation as stipulated on their banking
terms, so delay could be very dangerous. Once again, we will advise that you
contact them with the above email address and make sure you forward to them
all the necessary information's which they may require from you prior to the
release of your fund to you accordingly.
All modalities has already been worked out even before you were contacted and
note that we will be monitoring all your dealings with them as you proceed so
you don't have anything to worry about. All we require from you henceforth is
an update so as to enable us be on track with you and the Central Bank of
Nigeria. Without wasting much time, will want you to contact them immediately
with the above email address so as to enable them attend to your case
accordingly without any further delay as time is already running out.
Should in case you need any more information's in regards to this
notification, feel free to get back to us so that we can brief you more as we
are here to guide you during and after this project has been completely
perfected and you have received your contract fund as stated.Thank you very
much for your anticipated co-operation in advance as we earnestly await your
urgent response to this matter.
Best Regards,
Robert S. Mueller III
Federal Bureau of Investigation
J. Edgar Hoover Building
935 Pennsylvania Avenue,
NW Washington, D.C.
20535-0001, USA
Wenn jemand Interesse hat, ich lösch die Mail mal von meinem Server... :)
Gruß,
- syntax
http://db.aa419.org/fakebanksview.php?key=37889
http://db.aa419.org/fakebanksview.php?key=27534
Irgendwo kann man sich bei Microsoft auch wegen der Seiten beschweren, aber deren Server sind gerade wieder einmal so entsetzlich grottenlahm, daß ich keine Lust auf größere Suchaktionen in deren unübersichtlichem Dschungel habe.
Ich kann kein Englisch.
Vermute mal das es wie immer sowas wie Betrug ist und nach der alten Masche ablaufen soll, nachdem ich den Betrag $ 12,000 000 gesehen habe.
Eventuell kann ein Mod das mal Prüfen und dann an die richtigen stelle verschieben oder passend antackern.
Smart
Return-path: <john02cassidy [at] gmail.com>
Delivery-date: Thu, 09 Jul 2009 16:44:40 +0200
Received: from mi025.mc1.hosteurope.de ([80.237.138.230])
by mini002.webpack.hosteurope.de running ExIM with esmtp
id 1MOurY-0008Dd-P0; Thu, 09 Jul 2009 16:44:40 +0200
Received: from mail-in5-pp.ewetel.de ([212.6.122.80])
by mx0.webpack.hosteurope.de (mi025.mc1.hosteurope.de) with esmtp
id 1MOurX-0007Ve-Hk
for XXXXXXX [at] XXX.de; Thu, 09 Jul 2009 16:44:40 +0200
Received: from mail-bw0-f174.google.com (mail-bw0-f174.google.com [209.85.218.174])
by mail-in5-pp.ewetel.de (8.12.1/8.12.9) with ESMTP id n69EiW1I001450
for <XXXXXXXX @XXXXXXXX>; Thu, 9 Jul 2009 16:44:32 +0200
Received: by bwz22 with SMTP id 22so28753bwz.4
for <XXXXXXXXX @ewetel.net>; Thu, 09 Jul 2009 07:44:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:date:message-id:subject
:from:content-type;
bh=rS5UGtpqpzrBaPfVx5Gp4j/+YPeN/97pLLcXEag2js8=;
b=qBxjSOM85ZvhtXgNeTuVLyCZH64xAL7+uhAHdEyLSsx98yKpOtAq7RnrIIFgYusqAI
zPE5mYJygkSUfFx3JkFH/yAnNlKhImMk/EwCLskR82eWJXVE83KXKEwHvp8j/gTortQj
VojnKK3HZQBYGSFa0XSssYU7YrGwBE2quczcE=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:content-type;
b=Fkyl0UK319mcUoMHdMhYnFDSawpxhg3dpJkdxIJ2r/4u1ja9E6QmM38sTdfZjFobr9
Dj4KIbwkXPVbXvK6ucOcIqjx75HUHSo2yiWj3ckmoWLp4aSWvk4zFsHUqMlBeGiTtGSo
8ciN6P4DWrFfvo0TfJSbEYdFJGP8u6aaPlOKk=
MIME-Version: 1.0
Received: by 10.239.164.129 with SMTP id t1mt94974hbd.172.1247149774845; Thu,
09 Jul 2009 07:29:34 -0700 (PDT)
Date: Thu, 9 Jul 2009 14:29:34 +0000
Message-ID: <133d60040907090729ncd55038q213c94a059f54645 [at] mail.gmail.com>
Subject: PLEASE HELP ME
From: john cassidy <john02cassidy [at] gmail.com>
Content-Type: multipart/alternative; boundary=001485f3b96acbaaa1046e46e4cd
X-CheckCompat: OK
X-ACL-Warn: Message does not conform to RFC2822 standard
X-HE-Virus-Scanned: yes
X-HE-Spam-Level: +++++++++
X-HE-Spam-Score: 9.3
X-HE-Spam-Report: Content analysis details: (9.3 points)
pts rule name description
---- ---------------------- --------------------------------------------------
1.8 MILLION_USD BODY: Talks about millions of dollars
1.0 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.8 SUBJ_ALL_CAPS Subject is all capitals
1.6 MISSING_HEADERS Missing To: header
0.1 HTML_MESSAGE BODY: HTML included in message
3.0 JM_SOUGHT_FRAUD_3 Body contains frequently-spammed text patterns
0.0 RDNS_NONE Delivered to trusted network by a host with no rDNS
X-SPAM-FLAG: Yes
Envelope-to: XXXXXXX @XXXXXXX.de
Die (positivbewerteten) Prüfroutinn von Spamassassin sagen eigentlich schon alles:
1.8 MILLION_USD BODY: Talks about millions of dollars
Im Mailtext ist von Millionen Dollar die Rede.
1.8 SUBJ_ALL_CAPS Subject is all capitals
Der Betreff besteht nur aus Großbuchstaben.
3.0 JM_SOUGHT_FRAUD_3 Body contains frequently-spammed text patterns
Der Mailtext enthält Textmuster, wie sie sehr oft in Spam vorkommen.
Mit anderen Worten: eine typische Mugu-Mail.
- kjz
Wie man ja weiss, ist das Wochenende Mugu-Hochzeit:
Received: from hd-group.co.jp (unknown [210.160.67.66])
by xxxxx (Postfix) with ESMTP id 2CAC7789B8A4
for xxxxx; Fri, 10 Jul 2009 14:26:28 +0200 (CEST)
Received: from User (scandium.onspeed.com [83.138.136.91])
by hd-group.co.jp (Postfix) with ESMTP id 5014485D5D8;
Fri, 10 Jul 2009 20:30:17 +0900 (JST)
Received: from 82.128.33.46 (jeffladun009 [at] 82.128.33.46 [82.128.33.46])
by scandium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Fri, 10 Jul 2009 12:32:47 +0100
(BST)
X-Originating-IP: [82.128.33.46] ---> Multilinks Telecommunications Limited, Nigeria
Richardgilster [at] mail.com
richardgilster [at] buzonabc.com
jeffladun009 [at] 82.128.33.46
Received: from superhousebj.Ruian.com (unknown [202.106.69.183])
by xxxxx (Postfix) with ESMTP id EEB7E789AAD6
for xxxxx; Sat, 11 Jul 2009 00:17:44 +0200 (CEST)
Received: from User ([82.128.34.157]) by superhousebj.Ruian.com with
Microsoft SMTPSVC(5.0.2195.6713);
Sat, 11 Jul 2009 05:35:44 +0800
IP: 82.128.34.157 ---> Multilinks Telecommunications Limited, Nigeria
info.files [at] gawab.com
info08 [at] web2mail.com
komole [at] msn.com
Received: from vsmtp6.jaring.my (vsmtp6.jaring.my [192.228.250.86])
by xxxxx (Postfix) with ESMTP id D633D789B2AF
for xxxxx; Sat, 11 Jul 2009 16:09:07 +0200 (CEST)
Received: from localhost (localhost.jaring.my [127.0.0.1])
by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP id n6BDxrhc088594;
Sat, 11 Jul 2009 21:59:53 +0800 (MYT)
(envelope-from adbank_donald [at] indiatimes.com)
X-Virus-Scanned: by JARING Malware Filters (jaring.my)
Received: from vsmtp6.jaring.my ([127.0.0.1])
by localhost (vsmtp6.jaring.my [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id AcfUyP-T4blU; Sat, 11 Jul 2009 21:59:52 +0800 (MYT)
Received: from User (ml82.128.23.178.multilinks.com [82.128.23.178])
(authenticated bits=0)
by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP id n6BDwnMI088542;
Sat, 11 Jul 2009 21:58:59 +0800 (MYT)
(envelope-from adbank_donald [at] indiatimes.com)
africandevelopmentbank [at] indiatimes.com
adbank_donald [at] indiatimes.com
Muguphon: +234-805-2722898 ---> Globacom Ltd., Nigeria
das doppelte Lottchen:
Received: from bgl-svr-mta-out-02.bsnl.in (unknown [218.248.240.7])
by xxxxx (Postfix) with ESMTP id 912057855788
for xxxxx; Sat, 11 Jul 2009 19:51:19 +0200 (CEST)
Received: from bgl-svr-sacm-01.bsnl.in ([10.16.12.36])
by bgl-svr-mta-out-02.bsnl.in
(InterMail vM.6.06.00.06 201-2159-105-108-20070306) with ESMTP
id
<20090711101754.RVOH294942.bgl-svr-mta-out-02.bsnl.in [at] bgl-svr-sacm-01.bsnl.in>
for xxxxx; Sat, 11 Jul 2009 15:47:54 +0530
Received: from bgl-svr-fep-04.bsnl.net.in ([10.16.12.24])
by bgl-svr-sacm-01.bsnl.in
(InterMail vG.2.02.00.01 201-2161-120-102-20060912) with ESMTP
id
<20090711105235.CPCN13881.bgl-svr-sacm-01.bsnl.in [at] bgl-svr-fep-04.bsnl.net.in>;
Sat, 11 Jul 2009 16:22:35 +0530
Received: from bgl-svr-mta-out-02.bsnl.in (unknown [218.248.240.7])
by xxxxx (Postfix) with ESMTP id 90C82789ACE5
for xxxxx; Sat, 11 Jul 2009 19:51:22 +0200 (CEST)
Received: from bgl-svr-sacm-01.bsnl.in ([10.16.12.36])
by bgl-svr-mta-out-03.bsnl.in
(InterMail vM.6.06.00.06 201-2159-105-108-20070306) with ESMTP
id
<20090711101755.YUPA368670.bgl-svr-mta-out-03.bsnl.in [at] bgl-svr-sacm-01.bsnl.in>
for xxxxx; Sat, 11 Jul 2009 15:47:55 +0530
Received: from bgl-svr-fep-04.bsnl.net.in ([10.16.12.24])
by bgl-svr-sacm-01.bsnl.in
(InterMail vG.2.02.00.01 201-2161-120-102-20060912) with ESMTP
id
<20090711105237.CPCP13881.bgl-svr-sacm-01.bsnl.in [at] bgl-svr-fep-04.bsnl.net.in>;
Sat, 11 Jul 2009 16:22:37 +0530
info-microsoft-lotto [at] bsnl.in
thompson.gary56 [at] yahoo.com.hk
timbers_ad1 [at] bsnl.in
- kjz
Wochenend und Muguleins.....
Received: from elasmtp-scoter.atl.sa.earthlink.net
(elasmtp-scoter.atl.sa.earthlink.net [209.86.89.67])
by xxxxx (Postfix) with ESMTP id CF308789B91D
for xxxxx; Sat, 11 Jul 2009 23:05:28 +0200 (CEST)
Received: from [85.249.223.12] (helo=User)
by elasmtp-scoter.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <unoffice32 [at] gmail.com>)
id 1MPjjU-00078v-GK; Sat, 11 Jul 2009 17:04:18 -0400
citibankgpuk [at] yahoo.com.hk
unoffice32 [at] gmail.com
unitednlondon [at] yahoo.com.hk
Muguphon: +44-7024054564 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44-7092845407 ---> YAC Ltd, UK
Received: from dhuumrelay3.dtm.ops.eu.uu.net (EHLO
dhuumrelay3.dtm.ops.eu.uu.net) [194.139.33.96]
by mx0.gmx.net (mx059) with SMTP; 12 Jul 2009 10:38:32 +0200
Received: from qz1 (1Cust2.tnt31.rtm1.nld.da.uu.net [213.116.156.2])
by dhuumrelay3.dtm.ops.eu.uu.net (8.14.1/8.14.1) with SMTP id
n6C8b2ha025952;
Sun, 12 Jul 2009 08:37:03 GMT
bingocliams [at] games.com
Received: from out09.wanadoo.es (out09.wanadoo.es [62.36.20.209])
by xxxxx (Postfix) with ESMTP id 4DC52789B35F
for xxxxx; Sun, 12 Jul 2009 15:03:44 +0200 (CEST)
Received: from [173.45.94.223] (helo=User)
by out09.wanadoo.es with esmtpa (Exim 4.43)
id 1MPyiU-00037v-Bf; Sun, 12 Jul 2009 15:03:43 +0200
IP: 173.45.94.223 ---> df.5e.2d.static.xlhost.com
hammond.kleen60 [at] sify.com
hammondkleen80 [at] yahoo.com.hk
Received: from smtpgate4.pacific.net.sg (smtpgate4.pacific.net.sg
[203.120.68.34])
by xxxxx (Postfix) with SMTP id A44CA78A0133
for xxxxx; Sun, 12 Jul 2009 20:33:37 +0200 (CEST)
Received: (qmail 10279 invoked from network); 12 Jul 2009 18:33:29 -0000
Received: from wm3.pacific.net.sg (HELO localhost) (eelzam [at] 192.169.41.133)
by smtpgate4.pacific.net.sg with ESMTPA; 12 Jul 2009 18:33:29 -0000
Received: from localhost (localhost [127.0.0.1]) by wm3.web.pacific.net.sg
(Horde MIME library) with HTTP; Mon, 13 Jul 2009 02:33:28 +0800
eventsmanager [at] live.com
eelzam [at] pacific.net.sg
Muguphon: +44-704 570 2546 ---> Open Telecom International Ltd., UK
Es ist schon 'unappetitlich' zu sehen, wie beim Muguphon immer wieder 2 Namen auftauchen: Magrathea und Open Telecom. Dabei handelt es sich um 70-er Nummern in England, wohl so etwas ähnliches wie die 900-er Mehrbetrugsnummern in DE. Diese beiden Firmen scheinen 'auf Zuruf' ohne nähere Authentifizierung 70-er Nummern an alle Mugu-Kriminellen zu vergeben. Die Nummern täuschen für den Unbedarften eine Telefonnummer in UK vor, sind aber nur eine Weiterleitung auf irgendein Handy im afrikanischen Busch. Und an den überhöhten Telefonkosten, die natürlich der ahnungslose Anrufer zahlt, verdienen sich Magrathea und Open Telecom dumm und dämlich. Es gibt zwar auch in UK eine Regulierungsbehörde (http://www.phonepayplus.org.uk/output/default.aspx), die scheint aber genauso ein zahnloser Tiger zu sein, wie selbige Behörde in DE. Würde alles mit rechten Dingen zugehen, hätten beide Unternehmen wohl schon längst ihre Zulassung verloren. Sehr schön dokumentiert ist der Umfang der Mithilfe zur Anbahnung des Vorschussbetruges hier (http://www.data-wales.co.uk/nigerian.htm) und hier (http://www.data-wales.co.uk/ni_070telnumbers.htm).
- kjz
Schnabelland
13.07.2009, 13:53
Dabei handelt es sich um 70-er Nummern in England, wohl so etwas ähnliches wie die 900-er Mehrbetrugsnummern in DE. Diese beiden Firmen scheinen 'auf Zuruf' ohne nähere Authentifizierung 70-er Nummern an alle Mugu-Kriminellen zu vergeben. Die Nummern täuschen für den Unbedarften eine Telefonnummer in UK vor, sind aber nur eine Weiterleitung auf irgendein Handy im afrikanischen Busch. Und an den überhöhten Telefonkosten, die natürlich der ahnungslose Anrufer zahlt, verdienen sich Magrathea und Open Telecom dumm und dämlich.
Das würde allerdings nur dann funktionieren, wenn der Anrufer ebenfalls aus dem britischen Telefonnetz anrufen würde. Meines Wissens sind die Mehrwertnummern sämtlicher Länder für Anrufe aus dem jeweiligen Ausland gesperrt (wobei derzeit meines Wissens über einen "Service 00900" diskutiert wird, eine Art "Internationales 0900", ähnlich wie das bereits existierende 00800 für internationale kostenlose Anrufe, die vom Angerufenen bezahlt werden). Dies würde diese Nummern jedoch für die Mugus relativ uninteressant machen, es sei denn, sie konzentrieren ihre Opfersuche auf britische Adressen, indem sie z.B. nur .uk-eMail-Adressen anspammen. Ich gebe Dir in soweit recht, dass es sich um eine reine Weiterleitung auf eine - vermutlich anonyme - Nummer handelt, die auch nicht zwingend in Afrika sitzen muss, denn viele dieser Banden operieren von der einer größten "off-shore" (= in diesem Falle: außerhalb Afrikas)-Mugu-Metropolen aus, und die heißt London... Die Weiterleitung auf ein afrikanisches Handy wäre wegen der immensen Kosten vermutlich weder für die Mugus, noch für die Telefonfirma finanzierbar.
Meines Wissens handelt es sich bei den britischen 070er-Nummern um so etwas ähnliches wie bei uns 0180. Das bedeutet, dass es auch hier sein kann, dass die Nummern teurer sind als der herkömmliche Telefontarif, jedoch nur bei Anrufen aus dem Inland (vom Ausland sind deutsche 0180er entweder nicht oder zum normalen internationalen Tarif für ein Telefonat nach Deutschland erreichbar). Aus diesen höheren Inlands-Gebühren kann die Telefonfirma ggf. wirklich eine Weiterleitung finanzieren und so den Dienst für den Mugu kostenlos anbieten, aber eben nur dann, wenn die Weiterleitung relativ preisgünstig ist - nicht jedoch, wenn eine teure Weiterleitung zu einem afrikanischen Handy erfolgt.
Aus den von mir zitierten Quellen ergibt sich nur:
How do they profit? The +44 70*** numbers are supplied free to the fraud criminals. The premium charges for calling these numbers are paid for by actual and potential fraud victims from around the world - i.e. those who respond to the millions of frau e-mails generated by the 419 criminals.
070
070 prefixes ares used for personal numbers also known as a 'find-me-anywhere' services. 070 numbers cost up to 50p per minute from a landline (fixed line phone) but if you call from your mobile call costs will vary and you may be charged more. PhonepayPlus regulates 070 numbers if they 'offer' premium rate-style services and the cost of the call exceeds 10p per minute.
und aus der Website einer der 'bekannten' Telefongesellschaften:
07's ('mobile numbers') look like mobile phone numbers, and are recognisably more expensive to call than 08 numbers. As such, they are more suitable for contacting individuals than for sales use, although they make good 'field support' numbers for staff who are 'on call'. 07 numbers are free to setup and include a huge amount of free call forwarding, making them perfect personal contact numbers.
Number costs and other information
* Setup Fee - Free
* Line Rental - Free
* Call Usage - Free
* Free Time - Not applicable as call usage is free
* Cost to Caller - 37.5p/25p/12.5p/min. Day/Night/Weekend incl. VAT
* Call Forwarding - Free redirection to UK landline, UK mobile, International phone lines in over 180 countries (see order form for full list of countries available)
* Billing - Not applicable
Ja, auch 'Nigeria + mobile' ist in der Liste des 'Call Forwarding' der 180 Länder enthalten.
- kjz
Nachschub:
Received: from mail.wcnet.org (mailhub.wcnet.org [64.31.64.4])
by xxxxx (Postfix) with ESMTP id 16E01789B905
for xxxxx; Mon, 13 Jul 2009 13:26:22 +0200 (CEST)
Received: from authmail.wcnet.org (authmail.wcnet.org [64.31.64.16])
by mail.wcnet.org (Postfix) with ESMTP id 6A4AB42B8C1C;
Mon, 13 Jul 2009 07:28:41 -0400 (EDT)
Received: from dfspls (unknown [219.159.199.34])
by authmail.wcnet.org (Postfix) with ESMTP id 113667C719C;
Mon, 13 Jul 2009 07:23:09 -0400 (EDT)
IP: 219.159.199.34 ---> CHINANET guangxi
loanfirm_service88 [at] yahoo.com.hk
Received: from smtpgate3.pacific.net.sg (smtpgate3.pacific.net.sg
[203.81.36.33])
by xxxxx (Postfix) with SMTP id 210BA78A0C87
for xxxxx; Mon, 13 Jul 2009 14:29:11 +0200 (CEST)
Received: (qmail 453 invoked from network); 13 Jul 2009 12:28:50 -0000
Received: from unknown (HELO User) (remi [at] 123.238.224.43)
by smtpgate3.pacific.net.sg with ESMTPA; 13 Jul 2009 12:28:49 -0000
generalpeterolu2029 [at] yahoo.com.hk
remi [at] 123.238.224.43
generalpeterolu2004 [at] yahoo.com.hk
Muguphon: 234-7026905160 ---> Visafone Communications Ltd., Nigeria
Mugufax: 234-8029402741 ---> Celtel Nigeria Limited/Zain
- kjz
Weiter gehts:
Received: from 10ibp20ser03.datacenter.cha.cantv.net
(10ibp20ser03.datacenter.cha.cantv.net [200.11.173.14])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 731BE78A013E
for xxxxx; Mon, 13 Jul 2009 22:45:55 +0200 (CEST)
X-DNSBL-MILTER: Passed
Received: from cantv.net (rs20s18.datacenter.cha.cantv.net [200.109.127.83])
by 10ibp20ser03.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP
id n6DIioDF016536;
Mon, 13 Jul 2009 14:14:50 -0430
X-ORIGINATOR-IP: 196.201.66.10 ---> AFRITECH, CI
pray4mrscarolineaka [at] cantv.net
Der Dauer-Mugu via gecracktes Squirrel-Mail:
Received: from dmzserver.dnv.gub.uy
(r200-40-211-210.static.adinet.com.uy [200.40.211.210])
by xxxxx (Postfix) with ESMTP id 99968789B89C
for xxxxx; Tue, 14 Jul 2009 07:18:22 +0200 (CEST)
Received: from vial_correo.dnv.gub.uy (unknown [192.168.103.5])
by dmzserver.dnv.gub.uy (Postfix) with ESMTP id CB9FF5010;
Tue, 14 Jul 2009 14:58:09 -0300 (UYT)
Received: from mail.dnv.gub.uy ([10.0.0.2]) by vial_correo.dnv.gub.uy
with Microsoft SMTPSVC(5.0.2195.6713);
Mon, 13 Jul 2009 14:50:50 -0300
Received: from 41.220.75.3
(SquirrelMail authenticated user cmagnone)
by mail.dnv.gub.uy with HTTP;
Tue, 14 Jul 2009 14:58:09 -0300 (UYT)
IP: 41.220.75.3 ---> MTN Nigeria
euro-frijters1 [at] msn.com
cmagnone [at] dnv.gub.uy
das doppelte Mugulein:
Received: from smtp.cotecal.com.ar (EHLO spam1.cotecal.com.ar)
[200.50.248.3]
by mx0.gmx.net (mx017) with SMTP; 14 Jul 2009 06:41:08 +0200
Received: from blackie.cotecal.com.ar (blackie.cotecal.com.ar
[200.50.248.2])
by spam1.cotecal.com.ar (Postfix) with ESMTP id 4C87D37428D;
Tue, 14 Jul 2009 01:30:17 -0300 (ART)
Received: from blackie.cotecal.com.ar (localhost.localdomain [127.0.0.1])
by blackie.cotecal.com.ar (Postfix) with SMTP id 6C2EE23AEC4;
Tue, 14 Jul 2009 01:30:17 -0300 (ART)
Received: by blackie.cotecal.com.ar (Postfix, from userid 33)
id DB7BE23AE6B; Tue, 14 Jul 2009 01:30:16 -0300 (ART)
Received: from TEPte-15p2-236.ppp17.odn.ad.jp
(TEPte-15p2-236.ppp17.odn.ad.jp [143.90.221.236]) by webmail.cotecal.com.ar
(Horde MIME library) with HTTP; Tue, 14 Jul 2009 01:30:13 -0300
Received: from smtp.cotecal.com.ar (EHLO spam2.cotecal.com.ar)
[200.50.248.4]
by mx0.gmx.net (mx048) with SMTP; 14 Jul 2009 09:34:36 +0200
Received: from blackie.cotecal.com.ar (blackie.cotecal.com.ar
[200.50.248.2])
by spam2.cotecal.com.ar (Postfix) with ESMTP id A19B4ABAE9A;
Tue, 14 Jul 2009 04:21:38 -0300 (ART)
Received: from blackie.cotecal.com.ar (localhost.localdomain [127.0.0.1])
by blackie.cotecal.com.ar (Postfix) with SMTP id 331BE23AEF0;
Tue, 14 Jul 2009 04:21:38 -0300 (ART)
Received: by blackie.cotecal.com.ar (Postfix, from userid 33)
id 9DC5823AE6B; Tue, 14 Jul 2009 04:21:37 -0300 (ART)
Received: from TEPte-15p2-236.ppp17.odn.ad.jp
(TEPte-15p2-236.ppp17.odn.ad.jp [143.90.221.236]) by webmail.cotecal.com.ar
(Horde MIME library) with HTTP; Tue, 14 Jul 2009 04:21:35 -0300
anthonyjohnson777 [at] gmail.com
genanthony.j147 [at] hotmail.com
Received: from relay1.mail.internal (relay1-new.mail.interoute.net
[154.15.199.106])
by xxxxx (Postfix) with ESMTP id 4F7E378A0198
for xxxxx; Wed, 15 Jul 2009 09:37:01 +0200 (CEST)
Received: from [154.15.201.163] (helo=m2500.psi.neteu.net)
by relay1.mail.internal with esmtp (Exim 4.68)
(envelope-from <diplomatic.unit001 [at] gmail.com>)
id 1MQqoR-0003u1-Rh; Wed, 15 Jul 2009 00:49:27 +0200
Received: from 82.128.27.143 (EHLO User) ([82.128.27.143])
by mstore.psi.neteu.net (MOS 3.8.2-GA FastPath queued)
with ESMTP id KTD20160 (AUTH test);
Wed, 15 Jul 2009 00:48:02 +0200 (CEST)
IP: 82.128.27.143 ---> Multilinks Telecommunications Limited, Nigeria
deutschbank.online [at] gmail.com
diplomatic.unit001 [at] gmail.com
Received: from col0-omc3-s9.col0.hotmail.com
(col0-omc3-s9.col0.hotmail.com [65.55.34.147])
by xxxxx (Postfix) with ESMTP id 216877855788
for xxxxx; Wed, 15 Jul 2009 12:54:05 +0200 (CEST)
Received: from COL101-W59 ([65.55.34.136]) by
col0-omc3-s9.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 15 Jul 2009 03:52:47 -0700
X-Originating-IP: [196.213.229.97] ---> net-229-97.mweb.co.za
jamesnelson99005 [at] msn.com
mandelotteryprogram2009 [at] yahoo.com.hk
- kjz
IP: 82.128.27.143 ---> Multilinks Telecommunications Limited, Nigeria
deutschbank.online [at] gmail.com
diplomatic.unit001 [at] gmail.com
DerDeutschBank-Mugu ist wieder da:
Received: from smtp005.onecommunications.net
(smtp005.onecommunications.net [69.95.226.15])
by xxxxx (Postfix) with SMTP id 8C454789B88E
for xxxxx; Wed, 15 Jul 2009 17:58:47 +0200 (CEST)
Received: (qmail 18154 invoked from network); 15 Jul 2009 15:58:46 -0000
Received: from unknown (HELO mail.albertbasse.com) (155.212.192.82)
by smtp005.onecommunications.net with SMTP; 15 Jul 2009 15:58:46 -0000
Received: from User (82.128.26.73) by mail.albertbasse.com with ESMTP
(Eudora Internet Mail Server 3.1.6); Wed, 15 Jul 2009 11:58:45 -0400
IP: 82.128.26.73 ---> Multilinks Telecommunications Limited, Nigeria
deutschbank [at] sify.com
deutschbank.online [at] gmail.com
Ausserdem hätte ich noch im Angebot:
Received: from relay.aragon.es (relay.aragon.es [195.55.229.45])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 54545789B15A
for xxxxx; Mon, 13 Jul 2009 18:59:09 +0200 (CEST)
Received: from midcorreo2.dga.es (midcorreo2.dga.es [172.27.12.76])
by relay.aragon.es (8.13.8/8.13.8/Debian-3) with ESMTP id n6DGGRIw015971
for xxxxx; Mon, 13 Jul 2009 18:16:28 +0200
johnmartins_claimsagent04 [at] yahoo.com.hk
cpeacarzaragoza [at] educa.aragon.es
Muguphon: +44 703 597 8975 ---> Open Telecom International Ltd., UK
Received: from server.ashiwi.org (unknown [68.177.234.140])
by xxxxx (Postfix) with ESMTP id B578978A0EAA
for xxxxx; Tue, 14 Jul 2009 19:09:21 +0200 (CEST)
mcachini [at] ashiwi.org
multiwinelecoltd [at] sify.com
Muguphon: +447042326008 ---> Pipemedia Ltd., UK
- kjz
Received: from col0-omc3-s9.col0.hotmail.com
(col0-omc3-s9.col0.hotmail.com [65.55.34.147])
by xxxxx (Postfix) with ESMTP id 216877855788
for xxxxx; Wed, 15 Jul 2009 12:54:05 +0200 (CEST)
Received: from COL101-W59 ([65.55.34.136]) by
col0-omc3-s9.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 15 Jul 2009 03:52:47 -0700
X-Originating-IP: [196.213.229.97] ---> net-229-97.mweb.co.za
jamesnelson99005 [at] msn.com
mandelotteryprogram2009 [at] yahoo.com.hk
Der sieht interessant aus. Mandela-Lotterie? Hast du die Mail noch?
Ja, der in der Zeichenkodierung 'vermurkelte' Quelltext:
Electronically=2C your Email ID was selected randomly as the winner of the =
United Nations lottery promo in South Africa on the 16th day of July=2C 200=
9. Contact your claims agent for your winning prize of US$3m (Three millio=
n United State Dollars) with the following: Name..... Home address......Dat=
e of Birth....... Gender....occupation=85..Country of origin..... Your ID..=
... Telephone/Fax No.......=20
Sincerely =20
Mr.James Nelson
--_bab7ecff-8658-4e2f-a0ea-c0204a058795_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<style>
.hmmessage P
{
margin:0px=3B
padding:0px
}
body.hmmessage
{
font-size: 10pt=3B
font-family:Verdana
}
</style>
</head>
<body class=3D'hmmessage'>
<BR><BR>Electronically=2C your Email ID was selected randomly as the winner=
of the United Nations lottery promo in South Africa on the 16th day of Jul=
y=2C 2009. =3B Contact your claims agent for your winning prize of US$3=
m (Three million United State Dollars) with the following: Name..... Home a=
ddress......Date of Birth....... Gender....occupation=85..Country of origin=
..... Your ID..... Telephone/Fax No....... <BR>Sincerely =3B =3B&nb=
sp=3B =3B <BR>Mr.James Nelson<BR><BR></body>
</html>=
--_bab7ecff-8658-4e2f-a0ea-c0204a058795_--
- kjz
Josef Ackermann....ähhh...der DeutschBank-Mugu mal wieder:
Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 15B1A789B038
for xxxxx; Thu, 16 Jul 2009 14:54:21 +0200 (CEST)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout6.freenet.de with esmtpa (ID fgh [at] bossmail.de) (port 25) (Exim
4.69 #92)
id 1MRQQZ-0001HW-FV; Thu, 16 Jul 2009 14:51:11 +0200
Received: from [41.191.108.130] (port=8496 helo=User)
by 4.mx.freenet.de with esmtpa (ID fgh [at] bossmail.de) (port 587) (Exim
4.69 #93)
id 1MRQQY-0001kf-7O; Thu, 16 Jul 2009 14:51:11 +0200
IP: 41.191.108.130 ---> Suburban Telecom, Nigeria
dbgermany [at] live.de
momvic [at] ciudad.com
fgh [at] bossmail.de
Received: from host46.216.26.163.empiredatatech.com (EHLO
mail2.empiredatatech.com) [216.26.163.46]
by mx0.gmx.net (mx007) with SMTP; 16 Jul 2009 17:11:28 +0200
Received: from User ([])
by mail2.empiredatatech.com (Merak 7.0.1) with ASMTP id JCA37650;
Thu, 16 Jul 2009 05:24:09 -0400
franciscogarnelo [at] sify.com
Received: from blu0-omc1-s14.blu0.hotmail.com
(blu0-omc1-s14.blu0.hotmail.com [65.55.116.25])
by xxxxx (Postfix) with ESMTP id BC90078A0CA6
for xxxxx; Thu, 16 Jul 2009 14:25:40 +0200 (CEST)
Received: from BLU137-W35 ([65.55.116.7]) by
blu0-omc1-s14.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 16 Jul 2009 05:25:39 -0700
X-Originating-IP: [41.207.17.75] ---> AVISONET, CI
aisha.kone22 [at] hotmail.fr
aisha13kone [at] msn.com
Mal wieder der JohnMartins-Mugu:
Received: from g5mail.printexinc.com (g5mail.printexinc.com [68.95.88.219])
by xxxxx (Postfix) with ESMTP id 3353A78A0CD9
for xxxxx; Thu, 16 Jul 2009 14:34:59 +0200 (CEST)
Received: from User (220-245-129-33.static.tpgi.com.au [220.245.129.33])
by g5mail.printexinc.com (Postfix) with ESMTP
id 6C9181ACF72E; Wed, 15 Jul 2009 03:00:29 -0500 (CDT)
john_martins1970 [at] yahoo.com.hk
Dann phisht das Dauer-Mugulein noch nach Webmail-Accounts via gecracktem SquirrelMail, man braucht Nachschub.....
Received: from mailhost.vnpt.com.vn (mail.vnpt.com.vn [203.162.130.70])
by xxxxx (Postfix) with ESMTP id B0C457800D56
for xxxxx; Thu, 16 Jul 2009 15:57:02 +0200 (CEST)
Received: from localhost (unknown [10.1.2.92])
by mailhost.vnpt.com.vn (COSA mail) with ESMTP
id BDC0C1610A1; Thu, 16 Jul 2009 18:40:04 +0700 (ICT)
Received: from mailhost.vnpt.com.vn ([127.0.0.1])
by localhost (mailgate.vnpt.com.vn [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 28785-19; Thu, 16 Jul 2009 18:41:47 +0700 (ICT)
Received: from vnpt.com.vn (unknown [10.1.2.91])
by mailhost.vnpt.com.vn (COSA-SMTP) with ESMTP id 9FC442AC1B3;
Thu, 16 Jul 2009 18:41:45 +0700 (ICT)
Received: from 203.160.1.71 (proxying for 41.220.75.3)
(SquirrelMail authenticated user longnd)
by mail.vnpt.com.vn with HTTP;
Thu, 16 Jul 2009 11:38:06 -0000 (America/Mexico_City)
IP: 41.220.75.3 ---> MTN, Nigeria, bei der Krankenakte: 9(!) Spamhaus (http://www.spamhaus.org/query/bl?ip=41.220.75.3)-Listings ist das wohl ein Mugu-Groß-Cafe....
vancepro [at] yahoo.com.hk
Und mal was anderes:
Received: from 120454-www1.Fiercemarkets.com (unknown [72.3.226.221])
by xxxxx (Postfix) with ESMTP id 14D8878A0CE3
for xxxxx; Thu, 16 Jul 2009 16:41:52 +0200 (CEST)
Received: by 120454-www1.Fiercemarkets.com (Postfix, from userid 48)
id 64AEB6E4657; Thu, 16 Jul 2009 06:51:38 -0400 (EDT)
wohl über einen 'Biziness-Marketeer' rausgeblasen....
apache [at] 120454-www1.fiercemarkets.com
nicfay300 [at] i12.com
info [at] fiercemarkets.com
- kjz
Wochenende = Mugu-Flashmob
Received: from smtp.dynanet.lk (unknown [59.163.254.75])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 8B95E789B3B3
for xxxxx; Fri, 17 Jul 2009 06:25:20 +0200 (CEST)
Received: from dynanet.lk (smtp.dynanet.lk [127.0.0.1])
by smtp.dynanet.lk (8.13.8/8.13.8) with ESMTP id n6H0dK4l024865;
Fri, 17 Jul 2009 06:09:20 +0530
Received: from smtp.dynanet.lk (unknown [59.163.254.75])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 00F95789B24A
for xxxxx; Fri, 17 Jul 2009 07:08:50 +0200 (CEST)
Received: from dynanet.lk (smtp.dynanet.lk [127.0.0.1])
by smtp.dynanet.lk (8.13.8/8.13.8) with ESMTP id n6H0jHuG024936;
Fri, 17 Jul 2009 06:15:17 +0530
X-OriginatingIP: 119.167.225.136 (jayampat) ---> CNC Group CHINA169
upscouriercontact09 [at] yahoo.com.hk
Received: from mailserver.ta-frankfurt.de (EHLO
EMAILSERVER.TA-Frankfurt.de) [213.61.186.133]
by mx0.gmx.net (mx090) with SMTP; 17 Jul 2009 07:35:05 +0200
Received: from User ([41.202.18.152])
(authenticated user dan [at] TA-Frankfurt.de)
by EMAILSERVER.TA-Frankfurt.de (Kerio MailServer 6.6.0);
Thu, 16 Jul 2009 10:24:50 +0200
dan [at] TA-Frankfurt.de
atapeter233 [at] yahoo.com.hk
a.peter0001 [at] yahoo.com.hk
Received: from nano.caravan.ru (EHLO nano.caravan.ru) [62.213.78.3]
by mx0.gmx.net (mx076) with SMTP; 17 Jul 2009 05:05:56 +0200
Received: from [41.207.0.237] (helo=User)
by nano.caravan.ru with esmtpa (Exim 4.68)
(envelope-from <marinalxndrx [at] gmail.com>)
id 1MRdla-000N81-KL; Fri, 17 Jul 2009 07:05:47 +0400
Received: from nano.caravan.ru (EHLO nano.caravan.ru) [62.213.78.3]
by mx0.gmx.net (mx076) with SMTP; 17 Jul 2009 05:05:56 +0200
Received: from [41.207.0.237] (helo=User)
by nano.caravan.ru with esmtpa (Exim 4.68)
(envelope-from <marinalxndrx [at] gmail.com>)
id 1MRdla-000N81-KL; Fri, 17 Jul 2009 07:05:47 +0400
IP: 41.207.0.237 ---> host-41-207-0-237.afnet.net, CI
marinalxndrx [at] gmail.com
marinalitvinenkxx [at] msn.com
Received: from unknown (EHLO mail.dreaminterface.com) [218.50.0.99]
by mx0.gmx.net (mx076) with SMTP; 17 Jul 2009 14:22:02 +0200
Received: from User ([196.3.183.72])
by mail.dreaminterface.com (Dream Dream) with ASMTP id D4088321;
Fri, 17 Jul 2009 20:55:12 +0900
IP: 196.3.183.72 ---> Suburban Telecom, Nigeria
genanthonyjohnson147 [at] gmail.com
genanthony.j147 [at] gmail.com
- kjz
Das Mugu-Wochenende:
Received: from webmail.kuwaitnet.net (unknown [64.91.230.29])
by xxxxx (Postfix) with ESMTP id E07F8789A7B5
for xxxxx; Fri, 17 Jul 2009 18:51:59 +0200 (CEST)
Received: from localhost ([127.0.0.1]
helo=webmail.kuwaitnet.net.kuwaitnet.net)
by webmail.kuwaitnet.net with esmtp (Exim 4.34)
id 1MRikY-0005Qw-Fj; Fri, 17 Jul 2009 11:25:02 +0300
X-Origin: 82.128.27.226 ---> Multilinks Telecommunications Limited, Nigeria
ambroseedward2009 [at] hotmail.com
drclementipoh1 [at] live.com
Die Madrid-Konnektion gleich mehrfach per gecracktem PHPMailer:
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx with ESMTP id 985D2789A99C
for xxxxx; Sat, 18 Jul 2009 06:35:17 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 3347B67CB1; Wed, 15 Jul 2009 07:48:07 -0300 (BRT)
Received: from phpmailer ([77.209.141.141])
by 77.209.141.141 with HTTP (UebiMiau);
Wed, 15 Jul 2009 07:48:07 -0300
IP: 77.209.141.141 ---> VODAFONE_SPAIN_NETWORK
claimoffice34 [at] aim.com
claimoffice313 [at] aim.com
Muguphon: 003467282238 ---> mobile number, Spain
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id 91E777800D62;
Sat, 18 Jul 2009 07:00:55 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 371FE67871; Thu, 16 Jul 2009 08:33:30 -0300 (BRT)
Received: from phpmailer ([77.209.192.72])
by 77.209.192.72 with HTTP (UebiMiau);
Thu, 16 Jul 2009 08:33:30 -0300
IP: 77.209.192.72 ---> VODAFONE_SPAIN_NETWORK
Martins Dito kennt man hier auch:
martinsdito [at] aim.com
ditoweber [at] aim.com
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id 479D47855788
for xxxxx; Sat, 18 Jul 2009 06:58:12 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 22941678A4; Thu, 16 Jul 2009 10:13:48 -0300 (BRT)
Received: from phpmailer ([77.209.192.72])
by 77.209.192.72 with HTTP (UebiMiau);
Thu, 16 Jul 2009 10:13:47 -0300
IP: 77.209.192.72 ---> VODAFONE_SPAIN_NETWORK
claimoffice34 [at] aim.com
claimoffice313 [at] aim.com
Aus deutschen Landen frisch exploitet auf den Tisch:
Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 402737800E76
for xxxxx; Fri, 17 Jul 2009 23:18:17 +0200 (CEST)
Received: from [195.4.92.16] (helo=6.mx.freenet.de)
by mout2.freenet.de with esmtpa (ID frer [at] bossmail.de) (port 25) (Exim
4.69 #92)
id 1MRumv-0006ZC-Eq; Fri, 17 Jul 2009 23:16:17 +0200
Received: from [62.173.50.171] (port=61741 helo=User)
by 6.mx.freenet.de with esmtpa (ID frer [at] bossmail.de) (port 587) (Exim
4.69 #93)
id 1MRums-0003lW-RL; Fri, 17 Jul 2009 23:16:17 +0200
IP: 62.173.50.171 ---> ipNX Nigeria Limited
frer [at] bossmail.de
mradekunleelvis_cbn [at] yahoo.com.hk
Received: from smtpgate3.pacific.net.sg (smtpgate3.pacific.net.sg
[203.81.36.33])
by xxxxx (Postfix) with SMTP id 3D3107800D56
for xxxxx; Sat, 18 Jul 2009 03:35:14 +0200 (CEST)
Received: (qmail 17484 invoked from network); 18 Jul 2009 00:38:13 -0000
Received: from unknown (HELO User) (boilermaster [at] 222.138.109.204)
by smtpgate3.pacific.net.sg with ESMTPA; 18 Jul 2009 00:38:10 -0000
IP: 222.138.109.204 ---> China Unicom Henan
boilermaster [at] 222.138.109.204
appmmyy280 [at] sify.com
Muguphon: +234-802-8982752 ---> Celtel Nigeria Limited/Zain
gecracktes SquirrelMail:
Received: from emek1.ablehost.com (unknown [208.81.178.15])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2ACE2789B987
for xxxxx; Sat, 18 Jul 2009 18:47:01 +0200 (CEST)
Received: from emek1.ablehost.com (localhost.localdomain [127.0.0.1])
by emek1.ablehost.com (Postfix) with ESMTP id 3210338605;
Sat, 18 Jul 2009 12:23:27 -0400 (EDT)
Received: from 62.173.52.188
(SquirrelMail authenticated user johnandersonlawfirm.co.uk_)
by emek1.ablehost.com with HTTP;
Sat, 18 Jul 2009 12:23:27 -0400 (EDT)
IP: 62.173.52.188 ---> ipNX Nigeria Limited
johnandersonlawfirm.co.uk_ [at] ablehost.com
john_andersonlondonuk [at] live.com
johnanderson12 [at] live.com
Received: from smtp-out114.alice.it (smtp-out114.alice.it [85.37.17.114])
by xxxxx (Postfix) with ESMTP id B754D7855788
for xxxxx; Sat, 18 Jul 2009 18:51:01 +0200 (CEST)
Received: from FBCMMO02.fbc.local ([192.168.68.196]) by
smtp-out114.alice.it with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 18 Jul 2009 18:50:57 +0200
Received: from FBCMST15V03.fbc.local ([192.168.178.35]) by
FBCMMO02.fbc.local with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 18 Jul 2009 18:50:57 +0200
ben_akim [at] alice.it
fedexcourierservice [at] freemail.lt
- kjz
das Mugu-Wochenende geht weiter:
Received: from server2003.PRIMOSSA.local (local.primossa.cz [81.27.203.194])
by xxxxx (Postfix) with ESMTP id 5101A789A6EE
for xxxxx; Sun, 19 Jul 2009 09:35:02 +0200 (CEST)
Received: from User ([216.131.118.75] RDNS failed) by
server2003.PRIMOSSA.local with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 18 Jul 2009 23:30:04 +0200
IP: 216.131.118.75 ---> exchng-75.wn68.reliablehosting.com
visacardmegajackpot [at] yahoo.com.hk
Muguphon: +44 702 403 7514 ---> Magrathea Telecommunications Limited, UK
Received: from smtp3m5.poczta.onet.pl (smtp3m5.poczta.onet.pl
[213.180.138.34])
by xxxxx (Postfix) with ESMTP id 0ECC6789B62E
for xxxxx; Sun, 19 Jul 2009 00:05:42 +0200 (CEST)
Received: from [82.128.27.124] ([82.128.27.124]:52955 "EHLO
smtp.poczta.onet.pl" rhost-flags-FAIL-FAIL-OK-FAIL) by ps3.mod5.onet
with ESMTPA id S50332446AbZGRWFmhTWwA (ORCPT
<rfc822;xxxxx); Sun, 19 Jul 2009 00:05:42 +0200
IP: 82.128.27.124 ---> Multilinks Telecommunications Limited, Nigeria
jamesmulenga [at] centrum.cz
dannkuhhjj [at] poczta.onet.eu
- kjz
Ja, der in der Zeichenkodierung 'vermurkelte' Quelltext:
Der Typ ist tatsächlich ein echter Profi. Mit den von ihm rübergereichten Kotodaten versandet jegliche Überweisung ganz ohne göttliche Intervention.
Seit wann hängt man die TLD an den Swift-Code? :clown:
Aber hoffentlich blüht ihm demnächst was: http://www.golem.de/0907/68476.html
Mugu-Nachschub:
Received: from linkpkfe01.link.net.pk (unknown [210.2.183.253])
by xxxxx (Postfix) with ESMTP id E07E3789A6EE
for xxxxx; Mon, 20 Jul 2009 20:53:19 +0200 (CEST)
Received: from User ([82.128.33.176]) by linkpkfe01.link.net.pk with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 21 Jul 2009 00:39:19 +0500
IP: 82.128.33.176 ---> Multilinks Telecommunications Limited, Nigeria
oljdanic [at] gmail.com
o.ol18 [at] yahoo.com
Dear Dauer-Mugu per gecracktem SquirrelMail:
Received: from pustik.unhalu.ac.id (unknown [222.124.222.59])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 23480789B77E
for xxxxx; Wed, 22 Jul 2009 17:54:36 +0200 (CEST)
Received: from www.unhalu.ac.id (localhost [127.0.0.1])
by pustik.unhalu.ac.id (Postfix) with ESMTP id 62C0CBA0AD;
Mon, 20 Jul 2009 14:20:42 -0700 (PDT)
Received: from 41.220.75.3
(SquirrelMail authenticated user paradigma)
by www.unhalu.ac.id with HTTP;
Mon, 20 Jul 2009 14:20:42 -0700 (PDT
IP: 41.220.75.3 ---> MTN Nigeria
jim.leon [at] w.cn
jim_leon [at] w.cn
paradigma [at] unhalu.ac.id
Received: from bokosi1.sdnp.org.mw (EHLO bokosi1.sdnp.org.mw)
[196.45.188.14]
by mx0.gmx.net (mx047) with SMTP; 22 Jul 2009 20:21:04 +0200
Received: from sdnp.org.mw (localhost [127.0.0.1])
by bokosi1.sdnp.org.mw (8.13.8/8.13.4) with ESMTP id n6MKTBE8025730;
Wed, 22 Jul 2009 22:29:11 +0200
X-OriginatingIP: 60.48.178.190 (kalekenikaphale) ---> 190.178.48.60.brk02-home.tm.net.my
vcardteam [at] btinternet.com
vcardteam [at] 9.cn
Muguphon: +44 702 403 7514 ---> Magrathea Telecommunications Limited, UK
- kjz
In den letzten Tagen so eingetrudelt:
Received: from mail.hmc0605.com (mail.hmc0605.com [194.154.164.202])
by xxxxx (Postfix) with ESMTP id C9916789B907
for xxxxx; Mon, 20 Jul 2009 05:02:08 +0200 (CEST)
Received: from User ([82.128.54.227]) by mail.hmc0605.com with Microsoft
SMTPSVC(6.0.3790.1830);
Mon, 20 Jul 2009 03:56:46 +0100
IP: 82.128.54.227 ---> Multilinks Telecommunications Limited, Nigeria
globalloancorp [at] glc.com
globalloancorp [at] focusedonprofits.com
Received: from blu0-omc4-s35.blu0.hotmail.com
(blu0-omc4-s35.blu0.hotmail.com [65.55.111.174])
by xxxxx (Postfix) with ESMTP id 83E81789B98F
for xxxxx; Mon, 20 Jul 2009 09:02:51 +0200 (CEST)
Received: from BLU127-W27 ([65.55.111.137]) by
blu0-omc4-s35.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 20 Jul 2009 00:02:51 -0700
X-Originating-IP: [115.133.208.112] ---> TELEKOM MALAYSIA BERHAD
kabore558 [at] msn.com
Gecracktes Squirrelmail vom Dauer-Mugu:
Received: from pustik.unhalu.ac.id (unknown [222.124.222.59])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 801AB78A0CE5
for xxxxx; Tue, 21 Jul 2009 16:08:24 +0200 (CEST)
Received: from www.unhalu.ac.id (localhost [127.0.0.1])
by pustik.unhalu.ac.id (Postfix) with ESMTP id D79FDBA0A2;
Mon, 20 Jul 2009 14:20:36 -0700 (PDT)
Received: from 41.220.75.3
(SquirrelMail authenticated user paradigma)
by www.unhalu.ac.id with HTTP;
Mon, 20 Jul 2009 14:20:36 -0700 (PDT)
IP: 41.220.75.3 ---> MTN, Nigeria
jim.leon [at] w.cn
jim_leon [at] w.cn
paradigma [at] unhalu.ac.id
Received: from gvo14114.gvocom.com (gvo14114.gvocom.com [12.68.141.14])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6EB36789B359
for xxxxx; Wed, 22 Jul 2009 01:05:00 +0200 (CEST)
Received: from [75.127.109.241] (helo=User)
by gvo14114.gvocom.com with esmtpa (Exim 4.69)
(envelope-from <michelle [at] catchthecash.com>)
id 1MT5Ly-0002gu-Ka; Mon, 20 Jul 2009 22:45:19 -0400
fedexdisposer [at] rogers.com
sw7645 [at] gmail.com
Muguphon: +234-807-96-8593 ---> Globacom Ltd., Nigeria
Der Dauer-Mugu:
Received: from ms2.sude.tpc.edu.tw (sude.tpc.edu.tw [163.20.156.2])
by xxxxx (Postfix) with ESMTP id 8E420789B93E
for xxxxx; Wed, 22 Jul 2009 05:25:23 +0200 (CEST)
Received: from ms2.sude.tpc.edu.tw (localhost [127.0.0.1])
by ms2.sude.tpc.edu.tw (Postfix) with ESMTP id 9CF332C1DC04;
Wed, 22 Jul 2009 11:10:15 +0800 (CST)
Received: from ms2.sude.tpc.edu.tw (localhost [127.0.0.1])
by ms2.sude.tpc.edu.tw (Postfix) with ESMTP id 878A22C1DBBF;
Wed, 22 Jul 2009 11:10:15 +0800 (CST)
X-OriginatingIP: 41.220.75.3 (t35) ---> MTN Nigeria
mrsrita_petrov11 [at] yahoo.com.hk
wieder SquirrelMail gecrackt:
Received: from imss2.unacar.mx (unknown [200.33.30.14])
by xxxxx (Postfix) with ESMTP id 8785B78A0EDF
for xxxxx; Wed, 22 Jul 2009 13:33:58 +0200 (CEST)
Received: from imss2.unacar.mx (localhost [127.0.0.1])
by localhost.pampano.unacar.mx (Postfix) with ESMTP id 4AD7921F2;
Wed, 22 Jul 2009 05:56:23 -0500 (CDT)
Received: from www.unacar.mx (www.unacar.mx [200.33.30.5])by imss2.unacar.mx
(Postfix) with ESMTP id 98B8D21B9;Wed, 22 Jul 2009 05:56:22 -0500 (CDT)
Received: from 41.211.230.194 (SquirrelMail authenticated user
rgonzalez) by www.unacar.mx with HTTP; Wed, 22 Jul 2009
05:52:04 -0500 (CDT)
IP: 41.211.230.194 ---> DIRECTONPC, Nigeria
davidadams [at] keko.net
dansuk [at] I12.COM
rgonzalez [at] unacar.mx
die Amsterdam Konnektion:
Received: from cp-out1.libero.it (cp-out1.libero.it [212.52.84.101])
by xxxxx (Postfix) with ESMTP id 6318A789B038
for xxxxx; Thu, 23 Jul 2009 02:50:23 +0200 (CEST)
Received: from libero.it (192.168.17.10) by cp-out1.libero.it (8.5.107)
id 4A65A8D5001A287A; Thu, 23 Jul 2009 02:50:15 +0200
X-SenderIP: 77.251.255.231 ---> dhcp-077-251-255-231.chello.nl
inter.net2009 [at] libero.it
accu.claim_file [at] sify.com
Muguphon: +31- 847 549 511 ---> J2 Global (Netherlands) B.V./efax
Received: from IMPaqm4.telefonica.net (impaqm4.telefonica.net
[213.4.129.19])
by xxxxx (Postfix) with ESMTP id 4F069789B88B
for xxxxx; Thu, 23 Jul 2009 03:10:07 +0200 (CEST)
Received: from IMPmailhost3.adm.correo ([10.20.102.124])
by IMPaqm4.telefonica.net with bizsmtp
id K5mg1c04q2h2L9m3QDA60M; Thu, 23 Jul 2009 03:10:06 +0200
Received: from cps2 ([10.20.100.2])
by IMPmailhost3.adm.correo with BIZ IMP
id KDA51c00J035iYi1jDA5qq; Thu, 23 Jul 2009 03:10:06 +0200
Received: from [41.191.86.29] by correo2.terra.es with HTTP
(authenticated as josephpeter [at] terra.es); Thu, 23 Jul 2009
03:10:05 +0200
IP: 41.191.86.29 ---> MULTINET_SERVICE, BJ
josephpeter [at] terra.es
fedexcexpress36 [at] live.fr
Received: from ns02.skalian.com.my (EHLO ns02.skalian.com.my)
[202.186.96.51]
by mx0.gmx.net (mx084) with SMTP; 22 Jul 2009 22:45:50 +0200
Received: from ns01.skalian.com.my [202.186.96.50] by
ns02.skalian.com.my with SMTP;
Thu, 23 Jul 2009 04:43:20 +0800
Received: from ml82.128.20.200.multilinks.com [82.128.20.200] by
mx.skalian.com.my with SMTP;
Thu, 23 Jul 2009 04:43:02 +0800
sec.point01 [at] sify.com
shikin [at] nhkmfg.com.my
sec.point [at] sify.com
Received: from pride.hosted-servers.net (EHLO pride.hosted-servers.net)
[209.188.15.20]
by mx0.gmx.net (mx044) with SMTP; 23 Jul 2009 02:55:59 +0200
Received: from localhost ([127.0.0.1])
by pride.hosted-servers.net with esmtpa (Exim 4.69)
(envelope-from <info [at] lotto.net>)
id 1MTm1o-0005WG-PV; Wed, 22 Jul 2009 17:19:20 -0700
Received: from 66.148.112.108 ([66.148.112.108]) by www.dmedia.co.nz (Horde
MIME library) with HTTP; Wed, 22 Jul 2009 18:19:15 -0600
heinzagency [at] yahoo.com.hk
die Madrid Konnektion:
Received: from 79.Red-81-47-151.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [81.47.151.79]
by mx0.gmx.net (mx074) with SMTP; 23 Jul 2009 12:01:28 +0200
europasc [at] aim.com Hmmmm, der Localpart soll wohl Europascam heissen......
Muguphon: +34-663-375-644 ---> Vodafone España, S.a.
Received: from 79.Red-81-47-151.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [81.47.151.79]
by mx0.gmx.net (mx018) with SMTP; 23 Jul 2009 14:10:10 +0200
europasc [at] aim.com
Mugufax: +34 911 311 831 ---> Jazz Telecom, S.a.u., ES
Magrathea treibt jetzt das von hiesigen Mehrbetrugsnummern bereits gewohnte Spiel:
Phone: +44 702 403 7514 ---> Magrathea Telecommunications Limited, UK
This number has been contracted out to another telephone company.
Please contact the following regarding this matter:
Datacalls
e-mail :- dbaker [at] datacalls.co.uk
Das waren nicht wir, da hat unser Reseller/Affiliate/werauchimmer Mist gebaut.....
- kjz
Das Wochenende naht, das bedeutet: Mugu Alarmstufe Rot.....
Received: from HoangNgoc.hoangngoc-resort.com (mail.hoangngoc-resort.com
[118.69.206.149])
by xxxxx (Postfix) with ESMTP id 6FA31789B25C
for xxxxxx; Fri, 24 Jul 2009 04:36:46 +0200 (CEST)
Received: from User ([219.153.65.39]) by HoangNgoc.hoangngoc-resort.com
with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 24 Jul 2009 09:22:34 +0700
IP: 219.153.65.39 ---> 39.65.153.219.broad.cq.cq.dynamic.163data.com.cn
general_obi [at] mynet.com
gen_obi_marshal [at] mynet.com
In Vietnam steht dem Mailserver der Hosenlatz schon seit einem Monat offen: http://www.antispam-ev.de/forum/showpost.php?p=223043&postcount=268
Da ist wohl Ignoranz mit Dummheit in trauter Einigkeit gepaart....
Received: from huiyuan.com.cn (unknown [61.50.158.28])
by xxxxx (Postfix) with SMTP id 57D33789B63F
for xxxxx; Fri, 24 Jul 2009 03:18:54 +0200 (CEST)
Received: from 41.218.212.122 by 192.168.16.107 with SMTP; Fri, 24 Jul
2009 08:09:59 +0800
IP: 41.218.212.122 ---> vfbb212122.4u.com.gh
jeff_robert [at] sify.com
jeffrobert1 [at] Safe-mail.net
bar_mike_ofori [at] naseej.com
Received: from northerncontractingcorp.com
(mail.northerncontractingcorp.com [74.92.17.249])
by xxxxx (Postfix) with ESMTP id E61E8789A9F5
for xxxxx; Fri, 24 Jul 2009 08:06:07 +0200 (CEST)
Received: from User ([82.128.27.2]) by northerncontractingcorp.com
with SMTP (Code-Crafters Ability Mail Server 2.55);
Thu, 23 Jul 2009 23:16:31 -0400
IP: 82.128.27.2 ---> Multilinks Telecommunications Limited, Nigeria
twilliam1958 [at] sify.com
twilliam [at] cbn.org
Received: from smtp.stsland.ru (smtp.stsland.ru [217.20.80.51])
by xxxxx (Postfix) with ESMTP id C1B7678A12AF
for xxxxx; Fri, 24 Jul 2009 08:43:58 +0200 (CEST)
Received: from User (unknown [41.191.85.37])
by smtp.stsland.ru (Postfix) with ESMTP id A9E4521E31;
Fri, 24 Jul 2009 02:12:37 +0600 (YEKST)
IP: 41.191.85.37 ---> LARY MAXIME CYBER, BJ
westerunion62 [at] hotmail.fr
Muguphon: +229 93865292 ---> BBCom/Bell Benin
- kjz
Nachschub droht....
Received: from dell-server.sylvansystems.local (mail.sylvansystems.net
[207.191.122.88])
by xxxxx (Postfix) with ESMTP id A1B07789A7B5
for xxxxx; Fri, 24 Jul 2009 23:05:20 +0200 (CEST)
Received: from User ([113.112.52.230]) by
dell-server.sylvansystems.local with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 24 Jul 2009 15:50:35 -0500
IP: 113.112.52.230 ---> CHINANET Guangdong
johnsmile22 [at] live.co.uk
johnsmile20072007 [at] yahoo.co.hk
johnsmilebros2001 [at] yahoo.cn
Mal wieder gecracktes SquirrelMail:
Received: from mx-out.mail002.coreserver.be
(mx-out.mail002.coreserver.be [83.143.245.22])
by xxxxx (Postfix) with ESMTP id 02FFF789B89C
for xxxxx; Sat, 25 Jul 2009 02:09:25 +0200 (CEST)
Received: from webmail.dxadsl.be (web001.coreserver.be [83.143.245.13])
by mx-out.mail002.coreserver.be (Postfix) with ESMTP id 67AC12EA6F72;
Fri, 24 Jul 2009 23:41:18 +0000 (UTC)
Received: from 41.202.73.231
(SquirrelMail authenticated user spb34813-1)
by webmail.dxadsl.be with HTTP;
Sat, 25 Jul 2009 01:45:05 +0200 (CEST)
IP: 41.202.73.231 ---> AVISONET, CI
williams13challas [at] yahoo.co.uk
spb34813-1 [at] coreserver.be
Muguphon: +225 66947964 ---> Comium Ivory Coast Inc (KoZ), CI
Received: from blu0-omc2-s26.blu0.hotmail.com
(blu0-omc2-s26.blu0.hotmail.com [65.55.111.101])
by xxxxx (Postfix) with ESMTP id 9C5DE789B987
for xxxxx; Sat, 25 Jul 2009 06:33:15 +0200 (CEST)
Received: from BLU137-W35 ([65.55.111.73]) by
blu0-omc2-s26.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 24 Jul 2009 21:33:15 -0700
X-Originating-IP: [41.207.21.246] ---> AVISONET, CI
wilson1544kl1 [at] msn.com
wilson_peter002 [at] yahoo.co.jp
Received: from blu0-omc3-s2.blu0.hotmail.com
(blu0-omc3-s2.blu0.hotmail.com [65.55.116.77])
by xxxxx (Postfix) with ESMTP id 08A7A789B910
for xxxxx; Sat, 25 Jul 2009 10:10:40 +0200 (CEST)
Received: from BLU125-W22 ([65.55.116.73]) by
blu0-omc3-s2.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 25 Jul 2009 01:10:40 -0700
X-Originating-IP: [165.146.51.180] ---> dsl-146-51-180.telkomadsl.co.za
mr.moseszuma___4_ [at] msn.com
mr.moseszuma [at] gmail.com
Muguphon: +27787229648 ---> MTN
die Madrid-Konnektion wieder mal mit 'europascam':
Received: from 74.Red-81-47-147.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [81.47.147.74]
by mx0.gmx.net (mx094) with SMTP; 25 Jul 2009 14:15:46 +0200
iintterlloto [at] aim.com
europasc [at] aim.com
Muguphon: +34 657-838-484 ---> France Telecom España, S.a.
Mugufax: +34 911 311 735 ---> Jazz Telecom, S.a.u.
- kjz
Dieser Mugu dürfte einen Komplizen in DE haben. Für Babelfish ist die Übersetzung zu gut, andererseits für einen Muttersprachler aber wieder zu schlecht. Der Spam ging anscheinend auch nur an (generierte?) .de Adressen.
Received: from unknown (HELO GMX.DE) [41.151.13.238]
by mx0.gmx.net (mx049) with SMTP; 25 Jul 2009 23:54:58 +0200
Von Mr. Jabu Zulu
Johannesburg South Africa
E-Mail: zulu.1966 [at] hotmail.com
Dear Sir/Madam,
Guten Tag, mein Name ist Mr. Jabu Zulu , Chef Auditor der First Naional
Bank of South Africa (FNB). Ich war ein sehr enger Freund von Mr. Thomas
Frie, Staatsbürger ihres Landes. Mr.Frie arbeitete mit einer
Mienennentwicklungsfirma in Zimbabwe zusammen. Am 21 Mai 2005
verunglückte Mr. Frie mit seiner Familie bei einem Autounfall. Sie
befanden sich auf den Weg von Zimbabwe nach Süd Afrika um den Befehl von
Präsident Robert Mugabe die Häuser der Mitglieder der Oppositions Partei
zu zerstören (Operation Murambatsvina) zu entkommen. Alle Insassen des
Autos starben bei dem Unfall. Seit dem habe ich zahlreiche Erkundigungen
bei Ihrer Botschaft hier in Süd Afrika angestellt um Verwandte von Mr.
Frie ausfindig zu machen. Leider war ich bisher erfolglos.
Nach zahlreichen ergebnisslosen Versuchen Mr. Frie's Verwandten
ausfindig zu machen, habe ich mich entschieden Ihren Namen /E-mail
Addresse übers dasoertliche site ausfindig zu machen, da sie die gleiche
Nationalität haben. Ich habe Sie kontaktiert um Ihnen dabei zu
assistieren Anspruch auf einen Betrag von 10 Millionen US Dollar,
hinterlassen von meinem Freund Mr. Frie, zu erheben, bevor es von der
First National Bank of South Africa konfeziert wird . Die First National
Bank of South Afrika hat mich benachrichtigt das ich einen Verwandten
ausfindig machen muss oder das Geld wird innerhalb der nächsten 21
Arbeitstagen konfesziert. In meiner Position als Chef Auditor der First
National Bank of South Afrika ist es mir Möglich das Geld auf ein
gültiges ausländisches Konto zu überweien mit der Sicherung das das Geld
komplett sein wird bis ich in Ihr Land komme um das Geld mit Ihnen zu
teilen. Da es mir seit zwei Jahren nicht gelungen ist Verwandschaft von
Mr. Frie ausfindig zu machen, versuche ich Ihr Einverständ
nis zu bekommen Sie als nächste Verwandten des Verstorbenen zu
präsentieren da Sie die gleiche Nationalität haben und somit das Geld zu
Ihnen überwiesen werden kann. Wenn Sie an meinen Vorschlag interessiert
sind, können wir die Teilungsverhältnisse und Uberweisungsmodalitäten
besprechen. Ich besitze alle nötigen Informationen und gesetzlichen
Dokumente um Ihre Anspruchsforderung zu unterstützen falls Se sich dazu
entscheiden.
Ich brauche nur Ihre ehrliche Zustimmung zur Zusammenarbeit um uns diese
Transaktion zu ermöglichen. Ich garantiere Ihnen das dies nur unter
legalen/ gesetzlichen Vorraussetzungen stattfinden wird.
Bitte kontaktiren Sie mich unter meiner Fax: + 27-866147366 order rufen
Sie mich unter folgender Telefonnummer an: +27-781892600 order E-mail:
zulu.1966 [at] hotmail.com
Mit freundlichen Grüssen
MR. Jabu Zulu
zulu.1966 [at] hotmail.com
Muguphon: + 27-781892600 ---> MTN
Mugufax: + 27-866147366 ---> premium rate number, ZA
- kjz
Die 'Dreckskiste' ist immer noch online, Zitat vom 19. 6. 09:
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id B2850789B970
for xxxxx; Fri, 19 Jun 2009 01:35:37 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 3980961D2E; Sun, 14 Jun 2009 06:20:02 -0300 (BRT)
Received: from phpmailer ([77.209.54.225])
by 77.209.54.225 with HTTP (UebiMiau);
Sun, 14 Jun 2009 06:20:02 -0300
IP: 77.209.54.225 ---> VODAFONE_SPAIN_NETWORK
martinsdito [at] aim.com
ditoweber [at] aim.com
heute:
Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
by xxxxx (Postfix) with ESMTP id 01243789A99C
for xxxxx; Sun, 26 Jul 2009 20:50:26 +0200 (CEST)
Received: by bc.mwmail.com.br (Postfix, from userid 65534)
id 7AD0F67AF2; Sat, 25 Jul 2009 13:01:11 -0300 (BRT)
Received: from phpmailer ([82.159.84.218])
by 82.159.84.218 with HTTP (UebiMiau);
Sat, 25 Jul 2009 13:01:11 -0300
IP: 82.159.84.218 ---> 82.159.84.218.dyn.user.ono.com, also wieder die Madrid-Konnektion. Somit also auch Mails an:
suporte [at] mwmail.com.br
claimoffice34 [at] aim.com
Received: from elasmtp-scoter.atl.sa.earthlink.net
(elasmtp-scoter.atl.sa.earthlink.net [209.86.89.67])
by xxxxx (Postfix) with ESMTP id B53C4789C2A5
for xxxxx; Sun, 26 Jul 2009 15:08:26 +0200 (CEST)
Received: from [85.249.223.22] (helo=User)
by elasmtp-scoter.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <mrdavidw01 [at] gmail.com>)
id 1MV3P6-0002V9-P2; Sun, 26 Jul 2009 09:05:09 -0400
mit .doc-Anhang und 3 Mail-Adressen zum Verbrennen, die Mugu-Boyz müssen wohl schon ziemlich verzweifelt sein... :D
mrdavidw01 [at] yahoo.com.tr
mrdavidw01 [at] gmail.com
wdipcs [at] yahoo.com.hk
- kjz
Nachschub zum Abend:
Received: from mail.antalyamarket.com.tr (unknown [212.175.205.195])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id B115178A0EFA
for xxxxx; Mon, 27 Jul 2009 20:22:07 +0200 (CEST)
Received: from User ([82.128.27.171])
by mail.antalyamarket.com.tr (IceWarp 9.1.0) with ASMTP id GCT32735;
Sat, 25 Jul 2009 14:46:35 -0700
IP: 82.128.27.171 ---> Multilinks Telecommunications Limited, Nigeria
okonji_diata_global [at] yahoo.com.hk
ray_umar_2006 [at] yahoo.com.hk
Muguphon: +44-704-5752097 ---> Open Telecom International Ltd., UK
Received: from server.webteknic.com (server.webteknic.com [216.180.227.10])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1480478A0EFB
for xxxxx; Tue, 28 Jul 2009 16:22:34 +0200 (CEST)
Received: from ml82.128.1.48.multilinks.com ([82.128.1.48] helo=User)
by server.webteknic.com with esmtpa (Exim 4.69)
(envelope-from <bwhitechamberss [at] o2.pl>)
id 1MVJMt-0002Gb-Jq; Mon, 27 Jul 2009 16:07:37 +1000
IP: 82.128.1.48 ---> Multilinks Telecommunications Limited, Nigeria
bwhitechamberss [at] o2.pl
bernardwhitechamberss [at] o2.pl
bernarddwhitechambers [at] o2.pl
die Amsterdam-Konnektion:
Received: from ORDELL-SERVER.ordell.com.sg (mail.ordell.com.sg
[203.125.243.130])
by xxxxx (Postfix) with ESMTP id 4611078A0ECB
for xxxxx; Tue, 28 Jul 2009 19:24:57 +0200 (CEST)
Received: from User ([62.140.137.157]) by ORDELL-SERVER.ordell.com.sg
with Microsoft SMTPSVC(5.0.2195.6713);
Tue, 28 Jul 2009 17:55:56 +0800
IP: 62.140.137.157 ---> Vodafone NL Infrastructure
soresenholms09 [at] yahoo.cn
Muguphon: +31 619 970 279 ---> Telfort B.V., NL
Mugufax: +31 847 455 835 ---> J2 Global (Netherlands) B.V.
- kjz
Für die Sammlung:
Received: from mx2.rmt.ru (mx2-src192.rmt.ru [194.67.139.201])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id CCDDA789B755
for xxxxx; Mon, 27 Jul 2009 02:04:03 +0200 (CEST)
Received: from User ([41.211.226.149])
(authenticated bits=0)
by mx2.rmt.ru (8.14.2/8.14.2) with ESMTP id n6QMGePX021999;
Mon, 27 Jul 2009 02:16:47 +0400 (MSD)
(envelope-from senatehse06 [at] gmail.com)
IP: 41.211.226.149 ---> Direct-on-PC Limited, Nigeria
senatehse06 [at] gmail.com
davemark2 [at] katamail.com
Received: from omr3.bezeqint.net (omr3.bezeqint.net [192.115.104.13])
by xxxxx (Postfix) with ESMTP id 24DE5789BACC
for xxxxx; Tue, 28 Jul 2009 06:14:09 +0200 (CEST)
Received: from m7.bezeqint.net (m7.bezeqint.net [192.115.104.87])
by omr3.bezeqint.net (Bezeq International SMTP out Mail Server) with
ESMTP id 2680233F16;
Tue, 28 Jul 2009 06:28:51 +0300 (IDT)
Received: from User ([41.211.238.220])
by m7.bezeqint.net (MOS 3.10.3-GA)
with ESMTP id JPI25041 (AUTH breslerman [at] bezeqint.net);
Tue, 28 Jul 2009 06:31:13 +0300 (IDT)
IP: 41.211.238.220 ---> Direct-on-PC Limited, Nigeria
tarcole [at] aol.com
breslerman [at] bezeqint.net
tay [at] sify.in
Received: from mail.si-sv2404.com (unknown [74.86.1.213])
by xxxxx (Postfix) with ESMTP id 5974878A0EE2
for xxxxx; Tue, 28 Jul 2009 08:23:00 +0200 (CEST)
Received: from 121.121.254.70 [121.121.254.70] by mail.si-sv2404.com
with SMTP;
Tue, 28 Jul 2009 00:48:48 -0500
IP:121.121.254.70 ---> Maxis Broadband Sdn Bhd, MY
homeloan_fincorp [at] sify.com
homeloanfincorp01 [at] sifymail.com
Mal wieder der merkbefreite 'europascam' von der Madrid-Konnektion:
Received: from mx4.hotmail.com (74.Red-81-47-147.staticIP.rima-tde.net
[81.47.147.74])
by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
id 0MKreC-1MVavi3NaG-000QjY for xxxxx; Tue, 28 Jul 2009
02:52:35 +0200
europasc [at] aim.com
iintterlloto [at] aim.com
Muguphon: +34 911 311 735 ---> Jazz Telecom, S.a.u., ES
wieder die Madrid-Konnektion:
Received: from 74.Red-81-47-147.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [81.47.147.74]
by mx0.gmx.net (mx067) with SMTP; 29 Jul 2009 02:48:34 +0200
eumillotto [at] gmail.com
securitiesu [at] aol.com
Muguphon: +34656462003 ---> France Telecom España, S.a.
Received: from onnet1.onnet.ca (EHLO onnet1.onnet.ca) [216.239.69.227]
by mx0.gmx.net (mx030) with SMTP; 29 Jul 2009 05:56:56 +0200
X-ClientAddr: 77.104.239.1
Received: from User (www.minaretnet.cz [77.104.239.1] (may be forged))
(authenticated bits=0)
by onnet1.onnet.ca (8.13.1/8.13.1) with ESMTP id n6T4WH4K030241;
Wed, 29 Jul 2009 00:32:29 -0400
davidwalters1900 [at] yahoo.com
davidwalters1967 [at] gmail.com
wieder die Madrid-Konnektion:
Received: from IMPaqm4.telefonica.net (impaqm4.telefonica.net
[213.4.129.19])
by xxxxx (Postfix) with ESMTP id BD1B678A0EED
for xxxxx; Wed, 29 Jul 2009 13:12:22 +0200 (CEST)
Received: from IMPmailhost6.adm.correo ([10.20.102.127])
by IMPaqm4.telefonica.net with bizsmtp
id Mj2h1c00a2kvMAa3QnCNKh; Wed, 29 Jul 2009 13:12:22 +0200
Received: from maria.lopez0 ([77.211.173.133])
by IMPmailhost6.adm.correo with BIZ IMP
id MnCF1c0042t39K91mnCJpV; Wed, 29 Jul 2009 13:12:22 +0200
maria.lopez0 [at] terra.es
esq.moyadavid [at] yahoo.es
- kjz
Ich brauche keinen Kalender mehr, denn das Wochenende ist, merkt man zuverlässig am Mugu-Flashmob, aus allen Ecken und Enden kommen die Yahoo-Boyz gekrochen:
Received: from snt0-omc3-s23.snt0.hotmail.com
(snt0-omc3-s23.snt0.hotmail.com [65.55.90.162])
by xxxxx (Postfix) with ESMTP id 7DA22789B359
for xxxxx; Thu, 30 Jul 2009 02:57:20 +0200 (CEST)
Received: from SNT106-W36 ([65.55.90.135]) by
snt0-omc3-s23.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 29 Jul 2009 17:50:52 -0700
X-Originating-IP: [41.222.192.89] ---> ISOCEL SARL, BJ
jubileegodwin [at] hotmail.fr
mredolinkmore6 [at] msn.com
Muguphon: +22998-273-617 ---> Benin
Received: from cityne.com (unknown [221.130.187.152])
by xxxxx (Postfix) with ESMTP id 7DEC978A0EF0
for xxxxx; Thu, 30 Jul 2009 22:40:01 +0200 (CEST)
Received: from User [60.15.173.106] by cityne.com with ESMTP
(SMTPD-8.21) id AED905C0; Thu, 23 Jul 2009 09:37:29 +0800
general_obi [at] mynet.com
gen_obi_marshal [at] mynet.com
der Dauer-Mugu via gecracktem SquirrelMail:
Received: from r200-40-211-210.static.adinet.com.uy (EHLO
dmzserver.dnv.gub.uy) [200.40.211.210]
by mx0.gmx.net (mx014) with SMTP; 31 Jul 2009 02:34:17 +0200
Received: from vial_correo.dnv.gub.uy (unknown [192.168.103.5])
by dmzserver.dnv.gub.uy (Postfix) with ESMTP id 271915763;
Fri, 31 Jul 2009 20:40:22 -0300 (UYT)
Received: from mail.dnv.gub.uy ([10.0.0.2]) by vial_correo.dnv.gub.uy
with Microsoft SMTPSVC(5.0.2195.6713);
Thu, 30 Jul 2009 20:32:15 -0300
Received: from 41.220.75.3
(SquirrelMail authenticated user denrich)
by mail.dnv.gub.uy with HTTP;
Fri, 31 Jul 2009 20:40:21 -0300 (UYT)
IP: 41.220.75.3 ---> MTN Nigeria
diamantejjalfaross [at] bigstring.com
denrich [at] dnv.gub.uy
Received: from eagle.xyzdns.net (eagle.xyzdns.net [65.254.32.2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A5F11789B92A
for xxxxx; Fri, 31 Jul 2009 05:00:16 +0200 (CEST)
Received: from [62.72.113.122] (helo=User)
by eagle.xyzdns.net with esmtpa (Exim 4.69)
(envelope-from <mrssherylg2666 [at] gmail.com>)
id 1MWiFL-0007Z8-IC; Thu, 30 Jul 2009 22:53:28 -0400
mrssherylg266 [at] gmail.com
mrssherylg2666 [at] gmail.com
g_wlmwlm [at] yahoo.com.hk
Muguphon: +66898089483 ---> DTAC, Thailand
Der Dauer-Mugu wieder via gecracktem SquirrelMail, die Drecks-Kiste in Indonesien hat noch immer den Hosenlatz offen:
Received: from pustik.unhalu.ac.id (unknown [222.124.222.59])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 70E2978A0E80
for xxxxx; Thu, 30 Jul 2009 22:25:00 +0200 (CEST)
Received: from www.unhalu.ac.id (localhost [127.0.0.1])
by pustik.unhalu.ac.id (Postfix) with ESMTP id DAD39AA12B;
Wed, 29 Jul 2009 21:50:12 -0700 (PDT)
Received: from 41.220.75.3
(SquirrelMail authenticated user paradigma)
by www.unhalu.ac.id with HTTP;
Wed, 29 Jul 2009 21:50:12 -0700 (PDT)
Received: from pustik.unhalu.ac.id (unknown [222.124.222.59])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id B144478A0EC2
for xxxxx; Fri, 31 Jul 2009 02:16:52 +0200 (CEST)
Received: from www.unhalu.ac.id (localhost [127.0.0.1])
by pustik.unhalu.ac.id (Postfix) with ESMTP id 0A8DAAA12D;
Wed, 29 Jul 2009 21:50:14 -0700 (PDT)
Received: from 41.220.75.3
(SquirrelMail authenticated user paradigma)
by www.unhalu.ac.id with HTTP;
Wed, 29 Jul 2009 21:50:14 -0700 (PDT)
IP: 41.220.75.3 ---> MTN, Nigeria
upsdeliveryteam [at] w.cn
upsdeliverylink [at] w.cn
paradigma [at] unhalu.ac.id
Muguphon: +44-703-591-5394 ---> Open Telecom International Ltd., UK
Received: from hermes.saude.mg.gov.br (hermes.saude.mg.gov.br
[200.198.43.4])
by xxxxx (Postfix) with ESMTP id 26BEF789A938
for xxxxx; Fri, 31 Jul 2009 10:28:19 +0200 (CEST)
Received: from saude.mg.gov.br (localhost.localdomain [127.0.0.1])
by hermes.saude.mg.gov.br (Postfix) with ESMTP id 2A2E12D9BCE;
Thu, 30 Jul 2009 19:05:24 +0000 (UTC)
X-OriginatingIP: 212.100.70.4 (exantematicas) ---> eth4.beta-computers.com/Cyberspace Network Limited, Nigeria
fedexcourierdeliveryservices01 [at] w.cn
Muguphon: +2347056315760 ---> Globacom Ltd., Nigeria
die Madrid-Konnektion:
Received: from mail.smtpserve.com (mail.smtpserve.com [72.29.120.104])
by xxxxx (Postfix) with ESMTP id CF94F78A12B2
for xxxxx; Fri, 31 Jul 2009 12:22:19 +0200 (CEST)
Received: from 217.217.183.101.dyn.user.ono.com [217.217.183.101] by
mail.smtpserve.com with SMTP;
Fri, 31 Jul 2009 11:04:21 +0100
mark.stone75 [at] yahoo.com.hk
m_stone009 [at] live.com
Muguphon: +447031912079 ---> Magrathea Telecommunications Limited, UK
nochmals die Madrid-Konnektion:
Received: from ironport2.cable.net.co (ironport2.cable.net.co
[200.118.2.78])
by xxxxx (Postfix) with ESMTP id 24E30789AE9B
for xxxxx; Fri, 31 Jul 2009 12:52:56 +0200 (CEST)
X-IronPort-AV: E=Sophos;i="4.43,301,1246856400";
d="pdf'?scan'208";a="110359145"
Received: from hefesto.cable.net.co ([200.118.2.58])
by ironport2.cable.net.co with ESMTP; 31 Jul 2009 05:52:52 -0500
Received: from User ([77.211.83.34])
by hefesto.cable.net.co (Sun Java System Messaging Server 6.2-7.06
(built Oct
6 2006)) with ESMTPA id <0KNN00LN97IZ6D20 [at] hefesto.cable.net.co> for
xxxxx; Fri, 31 Jul 2009 05:52:50 -0500 (COT)
IP: 77.211.83.34 ---> VODAFONE_SPAIN_NETWORK
companys42 [at] yahoo.es
securit_company [at] yahoo.com.hk
bilbaosecuritclaims [at] yahoo.com.hk
Muguphon: +34*693*572*703 ---> France Telecom España, S.a.
Mugufax: +1*518 684*1775 ---> Choice One Communications, Inc., NL
auch dieser Server hat noch immer den Hosenlatz offen:
Received: from server.webteknic.com (server.webteknic.com [216.180.227.10])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 93A0A78A1285
for xxxxx; Fri, 31 Jul 2009 14:31:42 +0200 (CEST)
Received: from [82.128.71.17] (helo=User)
by server.webteknic.com with esmtpa (Exim 4.69)
(envelope-from <williamscommordity [at] prokonto.pl>)
id 1MSg14-0005fV-E3; Mon, 20 Jul 2009 09:42:03 +1000
IP: 82.128.71.17 ---> Multilinks Telecommunications Limited, Nigeria
williamssales [at] prokonto.pl
williamscommordity [at] prokonto.pl
- kjz
Die Mugus legen nach:
Received: from ps27.myhostcenter.com
(s5.n56.n171.n68.static.myhostcenter.com [68.171.56.5])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AB5B6789C28C
for xxxxx; Thu, 30 Jul 2009 17:58:58 +0200 (CEST)
Received: (qmail 23017 invoked from network); 30 Jul 2009 09:39:22 -0400
Received: from ml82.128.20.96.multilinks.com (HELO User) (82.128.20.96)
by dracopaps.com with SMTP; 30 Jul 2009 09:39:16 -0400
82.128.20.96, also Multiscam von Nigeria....
diplomatallengeorge0009 [at] gmail.com
Muguphon: +447045764613 ---> Open Telecom International Ltd., UK
wieder mal gecracktes SquirrelMail:
Received: from mail.co.dare.nc.us (mail.co.dare.nc.us [208.11.168.3])
by xxxxx (Postfix) with SMTP id E255A78A0E80
for xxxxx; Thu, 30 Jul 2009 20:32:22 +0200 (CEST)
Received: from mail.co.dare.nc.us (localhost [127.0.0.1])
by mail.co.dare.nc.us (Postfix) with ESMTP id CD72352C0F8;
Thu, 30 Jul 2009 13:45:18 -0400 (EDT)
Received: from 216.139.166.154
(SquirrelMail authenticated user vtillett)
by mail.co.dare.nc.us with HTTP;
Thu, 30 Jul 2009 13:45:19 -0400 (EDT)
IP: 216.139.166.154 ---> PanAmSat Corporation/Millenium, SN
captmic_james [at] sify.com
vtillett [at] darenc.com
Auch diese gecrackte Kiste hatten wir schon:
Received: from mail.antalyamarket.com.tr (unknown [212.175.205.195])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 06B0E78A0EF6
for xxxxx; Fri, 31 Jul 2009 15:10:57 +0200 (CEST)
Received: from User ([82.128.27.187])
by mail.antalyamarket.com.tr (IceWarp 9.1.0) with ASMTP id MON81229;
Fri, 31 Jul 2009 00:08:29 -0700
IP: 82.128.27.187 ---> Multilinks Telecommunications Limited, Nigeria
ray_umar_2006 [at] yahoo.com.hk
okonji_diata_wb [at] yahoo.co.uk
Muguphon: +44-704-5752097 ---> Open Telecom International Ltd., UK
- kjz
Das Wochenende ist noch nicht vorbei:
die Madrid-Konnektion:
Received: from om.cz.net (om.cz.net [193.85.2.13])
by xxxxx (Postfix) with ESMTP id 458B9789B89F
for xxxxx; Sat, 1 Aug 2009 02:13:31 +0200 (CEST)
Received: from mail.biesse.cz (unknown [194.108.220.222])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by om.cz.net (Postfix) with ESMTPS id 189E170F3E;
Sat, 1 Aug 2009 02:13:31 +0200 (CEST)
Received: from User ([77.211.172.188])
(authenticated user kovarik [at] biesse.cz)
by mail.biesse.cz (Kerio MailServer 6.6.0);
Sat, 1 Aug 2009 02:17:43 +0200
IP: 77.211.172.188 ---> VODAFONE_SPAIN_NETWORK
loteriaespanasl [at] terra.es
kovarik [at] biesse.cz
bancaixaspain [at] terra.es
Muguphon: +34.693.548.407 ---> France Telecom España, S.a.
Received: from hksmtp.happily.com.hk (hksmtp.happily.com.hk
[202.60.246.186])
by xxxxx (Postfix) with ESMTP id 43F3F789B5E4
for xxxxx; Sat, 1 Aug 2009 03:13:48 +0200 (CEST)
Received: from User [82.128.21.142] by hksmtp.happily.com.hk with ESMTP
(SMTPD32-8.10) id AB925F011E; Sat, 01 Aug 2009 08:25:54 +0800
IP: 82.128.21.142 ---> ml82.128.21.142.multilinks.com, Nigeria
apextextiles01 [at] gmail.com
msaiz003 [at] yahoo.com
Muguphon: +44 (0) 7031851083 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44 870-135-6993 ---> COLT Telecommunications, UK
Received: from smtp4m5.poczta.onet.pl (smtp4m5.poczta.onet.pl
[213.180.138.35])
by xxxxx (Postfix) with ESMTP id D5FD278A0EF6
for xxxxx; Sat, 1 Aug 2009 18:38:41 +0200 (CEST)
Received: from [41.211.232.158] ([41.211.232.158]:1297 "EHLO
unitednation9932 [at] poczta.onet.eu" rhost-flags-FAIL-FAIL-FAIL-FAIL)
by ps4.mod5.onet with ESMTPA id S357304AbZHAQilbbTmb (ORCPT
<rfc822;xxxxx); Sat, 1 Aug 2009 18:38:41 +0200
IP: 41.211.232.158 ---> Direct-on-PC Limited, Nigeria
andrewwolley10123 [at] googlemail.com
unitednation9932 [at] poczta.onet.eu
andrewwolley309 [at] yahoo.com.hk
Muguphon: +44-703 594 2488 ---> Open Telecom International Ltd., UK
Mugufax: +44 870 288 7323 ---> Interweb Design Ltd., UK
Received: from correo.indeci.gob.pe (unknown [200.48.54.5])
by xxxxx (Postfix) with ESMTP id 3605B789A9F5
for xxxxx; Sun, 2 Aug 2009 05:57:29 +0200 (CEST)
Received: from unknown (HELO mail.indeci.gob.pe) ([192.168.254.2])
by correo.indeci.gob.pe with ESMTP; 01 Aug 2009 11:24:21 -0500
Received: from indeci.gob.pe (localhost [127.0.0.1])
by mail.indeci.gob.pe (Postfix) with ESMTP id 3915EC5E3A;
Sat, 1 Aug 2009 11:24:05 -0500 (PET)
Received: from eth4.beta-computers.com (eth4.beta-computers.com
[212.100.70.4]) by www.indeci.gob.pe (Horde MIME library) with HTTP; Sat,
01 Aug 2009 11:24:03 -0500
IP: 212.100.70.4 --> Cyberspace Network Limited, Nigeria
woodloan [at] sify.com
woodloan2 [at] sify.com
jcontreras [at] indeci.gob.pe
Received: from prokonto.pl
(host78-210-static.107-82-b.business.telecomitalia.it [82.107.210.78])
by spammotel.com (Postfix) with SMTP id 184C06EC5BC
for xxxxx; Mon, 13 Jul 2009 09:06:36 -0400 (EDT)
Received: from pc6 ([127.0.0.1]) by pc6 ([127.0.0.1]) with SMTPSVC;
Tue, 07 Jul 2009 09:05:19 +0200
annaamin [at] prokonto.pl
- kjz
Anscheinend ist das Wochenende noch nicht zu Ende:
Received: from dns.greenlife.idv.tw (unknown [60.244.103.97])
by xxxxx (Postfix) with ESMTP id 4D7F878A1318
for xxxxx; Mon, 3 Aug 2009 08:44:16 +0200 (CEST)
Received: from User (unknown [219.153.65.39])
by dns.greenlife.idv.tw (Postfix) with ESMTP id A3D0C2E8A7E;
Mon, 3 Aug 2009 05:12:59 +0800 (CST)
IP: 219.153.65.39 ---> 39.65.153.219.broad.cq.cq.dynamic.163data.com.cn
asufu62 [at] gmail.com
absufu64 [at] w.cn
wieder der Europa-Scam von der Madrid-Konnektion:
Received: from 74.Red-81-47-147.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [81.47.147.74]
by mx0.gmx.net (mx061) with SMTP; 03 Aug 2009 10:14:57 +0200
europasc [at] aim.com
iintterlloto [at] aim.com
Muguohon: +34 657-838-484 ---> France Telecom España, S.a.
Mugufax: +34 911 311 735 ---> Jazz Telecom, S.a.u.
Received: from aix1.itimes.com (aix1.itimes.com [125.18.254.81])
by xxxxx (Postfix) with ESMTP id A1113789B00C;
Mon, 3 Aug 2009 12:12:40 +0200 (CEST)
DomainKey-Signature: s=private; d=itimes.com; c=nofws; q=dns;
b=MWLidiuYCDErGIbFEGDB5LvQti3i43uJDTGnjWUaEu30Rei3hh+Cpi7aj9pxvifA+Q5+tvjkFryB9X 7ou/JUZnRpU7gtcWtZinu4A6fDbRKf67E766LwvMec33q4A3izp3P1PeGVD+ro7mVSj0jlY7jou8zVhaH9EU L/nhgV1ws=;
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
ArQGAIxRdkqsHgHG/2dsb2JhbAAIjyGJI4FFfqR2Co84hBgFh2OCHAI
Received: from unknown (HELO ims2.itimes.com) ([172.30.1.198])
by ix1.itimes.com with ESMTP; 03 Aug 2009 15:26:36 +0530
X-Originating-IP: [124.40.51.29] ---> NTT COMMUNICATIONS CORPORATION
paulina009 [at] itimes.com
paulinaduru [at] yahoo.com
Received: from web3307.mail.ogk.yahoo.co.jp
(web3307.mail.ogk.yahoo.co.jp [124.83.168.21])
by spammotel.com (Postfix) with SMTP id AC531706E94
for xxxxx; Fri, 17 Jul 2009 04:14:13 -0400 (EDT)
Received: (qmail 39147 invoked by uid 60001); 17 Jul 2009 07:47:04 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=yj20050223; d=yahoo.co.jp;
h=Message-ID:Received:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=T95FvrjxN/vPjWjEbT1otsA/dhQQiwnhTCcFef/zNl5JpDx8Ij9GsIw4h3NN4NG2ttO6uZaz962oOHTxxIWQaYuOi5bBbBChOYX/9poZcVQU5VUfAHcVqV97i111/X2m
;
Message-ID: <20090717074704.39145.qmail [at] web3307.mail.ogk.yahoo.co.jp>
Received: from [41.189.48.236] by web3307.mail.ogk.yahoo.co.jp via HTTP;
Fri, 17 Jul 2009 16:47:04 JST
IP: 41.189.48.236 ---> AVISONET, CI
r_20d04 [at] yahoo.co.jp
r_20d01 [at] yahoo.co.jp
die Madrid-Konnekltion wieder, man vergleiche mal die IP mit dem Europa-Scam:
Received: from mx4.hotmail.com (74.Red-81-47-147.staticIP.rima-tde.net
[81.47.147.74])
by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
id 0MKriK-1MXuwu3sbi-000cbi for xxxxx; Mon, 03 Aug 2009
12:39:25 +0200
lisajohn66 [at] gmail.com
- kjz
Unaufhörlich, ohn' Unterlaß:
Received: from reseller4.isq.aleto.nl (reseller4.isq.aleto.nl
[195.248.77.7])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 43ABF789B39D
for xxxxx; Tue, 4 Aug 2009 08:07:53 +0200 (CEST)
Received: from [82.128.0.54] (port=4180 helo=User)
by reseller4.isq.aleto.nl with esmtpa (Exim 4.67)
(envelope-from <mrs.sherrywilliams1 [at] yahoo.com>)
id 1MY6yU-0005m2-RB; Tue, 04 Aug 2009 01:29:51 +0200
IP: 82.128.0.54 ---> Multilinks Telecommunications Limited, Nigeria
mrs.sherrywilliams1 [at] yahoo.com
alfredmorris4 [at] asterx.com
Muguphon: +234 80 250 600 71 ---> Celtel Nigeria Limited/Zain
Muguphon: +234 80 355 156 19 ---> MTN Nigeria Communications Ltd.
die Madrid-Konnektion:
Received: from IMPaqm5.telefonica.net (impaqm5.telefonica.net
[213.4.129.20])
by xxxxx (Postfix) with ESMTP id 319C1789C2BF
for xxxxx; Tue, 4 Aug 2009 03:45:40 +0200 (CEST)
Received: from IMPmailhost5.adm.correo ([10.20.102.126])
by IMPaqm5.telefonica.net with bizsmtp
id Pz1h1c0672jdgqJ3R1lgGF; Tue, 04 Aug 2009 03:45:40 +0200
Received: from marion.infes ([77.211.71.44])
by IMPmailhost5.adm.correo with BIZ IMP
id Q1lb1c0020xKNQD1l1ldRK; Tue, 04 Aug 2009 03:45:40 +0200
IP: 77.211.71.44 ---> VODAFONE_SPAIN_NETWORK
seguromtua [at] terra.es
marion.infes [at] terra.es
Muguphon: + 34 634 176 182 ---> Vodafone España, S.a.
wieder Madrid:
Received: from sccmmhc92.asp.att.net (sccmmhc92.asp.att.net
[204.127.203.212])
by xxxxx (Postfix) with ESMTP id 05AA6789B359
for xxxxx; Wed, 5 Aug 2009 03:01:29 +0200 (CEST)
DKIM-Signature: v=1; q=dns/txt; d=mchsi.com; s=dkim01;
i=stanleyy127 [at] mchsi.com; a=rsa-sha256; c=relaxed/relaxed;
t=1249434089; h=Content-Type:MIME-Version:Message-Id:Date:From;
bh=nx6lCGWv/4+I91yFE0ghGvQxjsF2EKs/2Yp8qw4kSkg=; b=viQ7lYJjhy/s06m
wSXe+kBiR2eOGKL1Uf5vm1zKIR88R0zsmOolqEmFubRCj7Faw3uD7ZqmL5KhrO8DJDq
CZAQ==
Received: from sccqwbc17 (scommcenter17.asp.att.net[204.127.203.179])
by mchsi.com (sccmmhc92) with SMTP
id <20090805005951m9200r6m1be>; Wed, 5 Aug 2009 01:01:28 +0000
Received: from [95.16.106.28] by sccqwbc17;
Wed, 05 Aug 2009 00:59:51 +0000
IP: 95.16.106.28 ---> 28.106.16.95.dynamic.jazztel.es
stanleyy127 [at] mchsi.com
thomasstanleyss [at] aol.com
Received: from mail.gxu.cn (unknown [210.36.16.37])
by xxxxx (Postfix) with SMTP id 66D0978A1312
for xxxxx; Wed, 5 Aug 2009 14:13:25 +0200 (CEST)
Received: (eqmail ); 3 Aug 2009 21:05:39 -0000
Received: from unknown (HELO user) (system [at] 82.128.26.76)
by localhost with SMTP; 3 Aug 2009 21:05:39 -0000
IP: 82.128.26.76 ---> Multilinks Telecommunications Limited, Nigeria
chiedu.amaka69 [at] yahoo.com
chiedu amaka [at] aol.com (chieduamaka [at] aol.com)
Received: from cpanel3.intnet.mu (unknown [202.123.27.136])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 392B978A12F0
for xxxxx; Wed, 5 Aug 2009 13:23:39 +0200 (CEST)
Received: from [59.154.25.30] (helo=User)
by cpanel3.intnet.mu with esmtpa (Exim 4.68)
(envelope-from <office.secret-shopper.contacts [at] att.net>)
id 1MYZmb-0001ZY-9B; Wed, 05 Aug 2009 10:15:35 +0400
office.secret-shopper.contacts [at] att.net
sshopper0109 [at] aol.com
- kjz
Noch etwas zur Recreation:
Received: from mail.qmsf.org.qa (smtp.qmsf.org.qa [212.77.209.131])
by xxxxx (Postfix) with ESMTP id 034CA78A1289
for xxxxx; Mon, 3 Aug 2009 18:13:00 +0200 (CEST)
Received: from User ([82.128.32.236]) by mail.qmsf.org.qa with Microsoft
SMTPSVC(6.0.3790.3959);
Mon, 3 Aug 2009 16:43:12 +0300
IP: 82.128.32.236 ---> Multilinks Telecommunications Limited, Nigeria
jameswang.citibankofficed [at] gmail.com
inlandrevenueedb1 [at] gmail.com
Muguphon: +447024064951 ---> Magrathea Telecommunications Limited, UK
Muguphon: +447045761496 ---> Open Telecom International Ltd., UK
Received: from mxi2.callplus.net.nz (mxi2.callplus.net.nz [202.180.66.204])
by xxxxx (Postfix) with ESMTP id A044078A0CEB
for xxxxx; Tue, 4 Aug 2009 18:58:59 +0200 (CEST)
Message-Id: <7udn25$13sn2p [at] ismtp02.callplus.net.nz>
Received: from unknown (HELO User) ([212.6.39.179])
by ismtp02.callplus.net.nz with ESMTP; 04 Aug 2009 15:21:52 +1200
IP: 212.6.39.179 ---> Baghdad-isp
jjhuan_16 [at] yahoo.com.hk
junhuan123 [at] yahoo.com.hk
jjhuan16 [at] yahoo.com.hk
und noch einer aus DE via gecracktem ISH-Account:
Received: from mail01.ish.de (wsmip252.ish.de [80.69.98.252])
by xxxxx (Postfix) with ESMTP id BD14E78A0F0F
for xxxxx; Wed, 5 Aug 2009 20:10:54 +0200 (CEST)
Received: from [41.211.230.142] (account colinst [at] unitybox.de HELO User)
by mail-fe-01.mail01.ish.de (CommuniGate Pro SMTP 5.2.12)
with ESMTPA id 281258105; Wed, 05 Aug 2009 19:59:36 +0200
IP: 41.211.230.142 ---> Direct-on-PC Limited, Nigeria
colinst [at] unitybox.de
ifinanceltd [at] yahoo.in
officialinfo008 [at] yahoo.com.hk
infomails2008 [at] gmail.com
- kjz
Dear Dauer-Mugu braucht Nachschub als Spamschleuder und geht auf Phishing-Tour (natürlich mal wieder per gecracktem SqirrelMail):
Received: from mail.enet.vn (unknown [203.190.163.7])
by xxxxx (Postfix) with ESMTP id 896D478A139E
for xxxxx; Fri, 7 Aug 2009 11:33:27 +0200 (CEST)
Received: from webmail.enet.vn ([203.190.165.98])
by HNI-MTAOUT-02.enet.vn (Sun Java System Messaging Server 6.2-6.01
(built Apr
3 2006)) with ESMTPA id <0KNZ00FJ1ZRHLU10 [at] HNI-MTAOUT-02.enet.vn> for
xxxxx; Fri, 07 Aug 2009 15:33:17 +0700 (ICT)
Received: from 41.220.75.3 (SquirrelMail authenticated user ha.dao [at] enet.vn)
by webmail.enet.vn with HTTP; Fri, 07 Aug 2009 04:23:17 -0400 (EDT)
IP: 41.220.75.3 ---> MTN Nigeria
ha.dao [at] enet.vn
nvwebprogram [at] yahoo.com.vn
Dear Account User
This Email is from webmail Customer Care and we are sending it to every
webmail Email User Accounts Owner for safety. we are having congestion's
due to the anonymous registration of web mail accounts so we are shutting
down some webmail accounts and your account was among those to be deleted.
We are sending you this email so that you can verify and let us know if
you still want to use this account. If you are still interested please
confirm your account by filling the space below. Your User
name,password,date of birth and your country information would be needed
to verify your account. Due to the congestion in all mail users and
removal of all unused webmail Accounts, webmail would be shutting down all
unused Accounts, You will have to confirm your E-mail by filling out your
Log in Information below after clicking the reply button, or your account
will be suspended within 48 hours for security reasons.
*Email Username :..............
*Email Password :..............
*Date of Birth :..................
*Country or Territory: .........
Alternative email: (............)
After following the instructions in the sheet, your account will not be
interrupted and will continue as normal. Thanks for your attention to this
request. We apologize for any inconveniences. Warning!!! Account owner
that refuses to update his/her account after 72 Hours of receiving this
warning will lose his or her account permanently.
Thanks.
webMail Program
- kjz
Noch einige Mugus:
Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6323A789AE3B
for xxxxx; Thu, 6 Aug 2009 06:57:32 +0200 (CEST)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout2.freenet.de with esmtpa (ID mrsjulianaetim [at] bossmail.de) (port
25) (Exim 4.69 #92)
id 1MYv1v-00032e-Sv; Thu, 06 Aug 2009 06:56:43 +0200
Received: from [82.128.27.41] (port=2012 helo=User)
by 4.mx.freenet.de with esmtpa (ID mrsjulianaetim [at] bossmail.de) (port
25) (Exim 4.69 #93)
id 1MYv1p-0003tv-H6; Thu, 06 Aug 2009 06:56:43 +0200
IP: 82.128.27.41 ---> Multilinks Telecommunications Limited, Nigeria
mrsjulianaetim [at] bossmail.de
jamesokoro111 [at] gmail.com
Received: from bo02.smartseries.jp (www202.exxcom.jp [61.211.234.202])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7DE6478A0F15
for xxxxx; Thu, 6 Aug 2009 08:25:46 +0200 (CEST)
Received: from User (ml82.128.23.12.multilinks.com [82.128.23.12])
(authenticated bits=0)
by bo02.smartseries.jp (8.13.8/8.13.8) with ESMTP id n765wUEe004043;
Thu, 6 Aug 2009 14:58:45 +0900
IP: ml82.128.23.12.multilinks.com, Nigeria
project5transaction [at] yahoo.co.jp
karlwillman45 [at] yahoo.co.jp
Received: from mail.e.gov.kz (mail.e.gov.kz [82.200.162.243])
by xxxxx (Postfix) with ESMTP id 5914E78A12B2
for xxxxx; Thu, 6 Aug 2009 10:42:31 +0200 (CEST)
Received: from User ([59.154.25.30])
by mail.e.gov.kz (Sun Java System Messaging Server 6.2-3.04 (built Jul 15
2005)) with ESMTPA id <0KNY002FX006Q910 [at] mail.e.gov.kz> for
xxxxx; Thu, 06 Aug 2009 12:45:09 +0600
IP: 59.154.25.30 ---> OPTUS Customer Network
office.secret-shopper.contacts [at] att.net
secret.shopper_1 [at] sify.com
per gecracktem SquirrelMail:
Received: from balam.unicach.edu.mx (unknown [201.116.104.145])
by xxxxx (Postfix) with ESMTP id 85DDE789B359
for xxxxx; Fri, 7 Aug 2009 03:09:17 +0200 (CEST)
Received: from webmail.unicach.edu.mx (unknown [10.12.7.14])
by balam.unicach.edu.mx (Postfix) with ESMTP id 1CF8BE729;
Wed, 5 Aug 2009 22:45:24 -0500 (CDT)
Received: from 213.255.218.244
(SquirrelMail authenticated user seguimiento)
by webmail.unicach.edu.mx with HTTP;
Thu, 6 Aug 2009 05:14:32 +0100 (BST)
IP: 213.255.218.244 ---> Cyberspace, Nigeria
dr.matt_ads [at] live.com
seguimiento [at] unicach.edu.mx
Muguphon: +234 806 527 8460 ---> MTN Nigeria Communications Ltd.
- kjz
Und wieder ein Mugu-Phishki:
Received: from swip.net (mailfe14.swip.net [212.247.155.161])
by xxxxx (Postfix) with ESMTP id 4E96C789A48E
for xxxxx; Fri, 7 Aug 2009 16:51:32 +0200 (CEST)
X-Cloudmark-Score: 0.000000 []
X-Cloudmark-Analysis: v=1.0 c=1 a=R-J0Ad40Z9MA:10 a=BSdAxmG-c4oA:10
a=SIapg4jNq7wA:10 a=R8jYiNc5PBM6A+N6g63kaQ==:17 a=hytm48Ig-vK9WIpcxPkA:9
a=o6GRYVwxq7Or-UsDyf8A:7 a=1isTEDvPUE4tu74S4ij3Nng2W8IA:4
a=9Fo2eobAl8vFlb0B:21 a=_kEQ5tlQrTWPxZ-u:21
Received: from [198.54.202.3] (account cxu-77p-jwe [at] tele2.nl)
by mailbe01.swip.net (CommuniGate Pro WEBUSER 5.2.13)
with HTTP id 146972304; Fri, 07 Aug 2009 16:51:31 +0200
IP: 198.54.202.3 ---> Saix, ZA
cxu-77p-jwe [at] tele2.nl
web-upgradell [at] live.com
Dear University Email Account Owner,
This message is from UPGRADING messaging Department to all University WEBMAIL
Email account owners.
We are currently upgrading our data base and e-mail account Centre due to the
unusual activities
That was recently identified in our Data Base. We are deleting all nor upgraded
and unused email
Account to create space for new accounts and also to prevent spam mails. To
prevent your account
From being deactivated you will have to update it by sending us the Following info.
CONFIRM YOUR EMAIL ACCOUNT
Email Username: ...............
Email Password: ..............
Date of Birth: ..................
Country or Territory: .........
Warning!!! All Email Account owner that refuses to update his or her account
within Seven days of
Receiving this email will lose his or her account permanently.
Email Warning Code: USV64MT1
Thank you for using our Web mail service as it is intended to improve your email
Security!
Thanks for your understanding as we sincerely apologize for the inconveniences,
Sincerely,
University Email UPGRADING TEAM
Online Web Masters
WEBMAIL EDU TEAM
- kjz
Völlig untätig waren die Mugu-Boyz natürlich nicht:
Received: from haeo.co.kr (unknown [59.150.255.98])
by xxxxx (Postfix) with ESMTP id 8369278A12A7
for xxxxx; Sat, 8 Aug 2009 19:36:09 +0200 (CEST)
Received: (from sysop [at] localhost)
by haeo.co.kr (8.12.8/8.12.8) id n78EwXWv025024;
Sat, 8 Aug 2009 23:58:33 +0900 (KST)
frank_duke1111 [at] yahoo.cn
sysop [at] haeo.co.kr
Die Europa Scammer von der Madrid-Konnektion mal wieder:
Received: from 85.Red-88-22-225.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [88.22.225.85]
by mx0.gmx.net (mx065) with SMTP; 08 Aug 2009 16:56:04 +0200
eullotto [at] aol.com
unisecc [at] aim.com
Muguphon: +34-672 509 598 ---> mobile number, Spain
Received: from mail.igeprev.to.gov.br (mail.igeprev.to.gov.br
[200.181.109.36])
by xxxxx (Postfix) with ESMTP id B7CA4789B359
for xxxxx; Sun, 9 Aug 2009 15:50:14 +0200 (CEST)
Received: from igeprev.to.gov.br (localhost.localdomain [127.0.0.1])
by mail.igeprev.to.gov.br (Postfix) with ESMTP id D55BE8B80AF;
Sun, 9 Aug 2009 10:23:44 -0300 (BRT)
X-OriginatingIP: 212.100.70.4 (dionisia) ---> eth4.beta-computers.com/Cyberspace Network Limited, Nigeria
liusantonio [at] live.cn
dionisia [at] igeprev.to.gov.br
Da steht beim Apachen wohl der Hosenlatz offen:
Received: from a-wireless.hdo.net (unknown [63.81.252.1])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0580A789C28C
for xxxxx; Sun, 9 Aug 2009 16:20:02 +0200 (CEST)
Received: from a-wireless.hdo.net (localhost.localdomain [127.0.0.1])
by a-wireless.hdo.net (8.13.8/8.13.8) with ESMTP id n77DaPI0030958
for xxxxx; Fri, 7 Aug 2009 06:36:26 -0700
Received: (from apache [at] localhost)
by a-wireless.hdo.net (8.13.8/8.13.8/Submit) id n77DaOLI030925;
Fri, 7 Aug 2009 06:36:24 -0700
profasodiq11 [at] gmail.com
apache [at] a-wireless.hdo.net
Received: from WA2EHSNDR005.bigfish.com (unknown [204.231.192.41])
(using TLSv1 with cipher RC4-MD5 (128/128 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 069EA78A12F9
for xxxxx; Sun, 9 Aug 2009 18:37:01 +0200 (CEST)
Received: from VA3EHSOBE004.bigfish.com (10.2.40.3) by
WA2EHSNDR005.bigfish.com (10.2.40.25) with Microsoft SMTP Server (TLS) id
8.1.340.0; Sun, 9 Aug 2009 16:36:59 +0000
Received: from mail10-va3-R.bigfish.com (10.7.14.238) by
VA3EHSOBE004.bigfish.com (10.7.40.24) with Microsoft SMTP Server id
8.1.340.0; Sun, 9 Aug 2009 16:36:59 +0000
Received: from mail10-va3 (localhost.localdomain [127.0.0.1]) by
mail10-va3-R.bigfish.com (Postfix) with ESMTP id 63D6EC98208; Sun, 9 Aug
2009 16:36:59 +0000 (UTC)
recruitsments.exercices [at] gmail.com
- kjz
neue/alte Mugus an der Front:
Received: from alcor.bg (unknown [213.91.217.92])
by xxxxx (Postfix) with ESMTP id 29AA9789C28E
for xxxxx; Mon, 10 Aug 2009 16:01:36 +0200 (CEST)
Received: from User ([41.211.238.187]) by alcor.bg with Microsoft
SMTPSVC(6.0.3790.3959);
Mon, 10 Aug 2009 16:37:52 +0300
IP: 41.211.238.187 ---> Direct-on-PC Limited, Nigeria
dr.umarmohd [at] sify.com
zum ersten:
Received: from mail10.filnet.fr (mail10.filnet.fr [194.187.193.16])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6DDCF789C276
for xxxxx; Tue, 11 Aug 2009 02:37:14 +0200 (CEST)
Received: (qmail 9327 invoked by uid 89); 10 Aug 2009 23:32:40 -0000
Received: by simscan 1.3.1 ppid: 4454, pid: 8999, t: 9.9476s
scanners: regex: 1.3.1 attach: 1.3.1
Received: from unknown (HELO User) (apache [at] filnet.fr@82.128.26.211)
by mail10.filnet.fr with ESMTPA; 10 Aug 2009 23:32:30 -0000
IP: 82.128.26.211 ---> Multilinks Telecommunications Limited, Nigeria
revjohnsonyogb117 [at] gmail.com
oceanicbankinternationalplc171 [at] gmail.com
apache [at] filnet.fr
Muguphon: +234-8063129283 ---> MTN Nigeria Communications Ltd.
zum zweiten:
Received: from mail10.filnet.fr (mail10.filnet.fr [194.187.193.16])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 57B58789C28E
for xxxxx; Tue, 11 Aug 2009 13:23:33 +0200 (CEST)
Received: (qmail 17915 invoked by uid 89); 11 Aug 2009 11:18:42 -0000
Received: by simscan 1.3.1 ppid: 13040, pid: 17751, t: 5.3039s
scanners: regex: 1.3.1 attach: 1.3.1
Received: from unknown (HELO User) (apache [at] filnet.fr@82.128.27.17)
by mail10.filnet.fr with ESMTPA; 11 Aug 2009 11:18:36 -0000
IP: 82.128.27.17 ---> Multilinks Telecommunications Limited, Nigeria
revjohnsonyogb11 [at] gmail.com
oceanicbankinternationalplc171 [at] gmail.com
- kjz
Und wieder gibt's Nachschlag:
Received: from mta1.glocalnet.net (mta1.glocalnet.net [213.163.128.203])
by xxxxx (Postfix) with ESMTP id E366D78A13CE
for xxxxx; Mon, 10 Aug 2009 17:48:09 +0200 (CEST)
Received: from User (41.217.0.4) by mta1.glocalnet.net (7.3.140.3)
(authenticated as wallman [at] glocalnet.net)
id 4A55A377003F2D5A; Mon, 10 Aug 2009 17:43:38 +0200
IP: 41.217.0.4 ---> ZOOM Mobile Nigeria Ltd.
chief.james.ibori [at] googlemail.com
chiefj_ibori [at] yahoo.co.uk
wallman [at] glocalnet.net
Und dann wieder die Europa-Scammer der Madrid-Konnektion:
Received: from 85.Red-88-22-225.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [88.22.225.85]
by mx0.gmx.net (mx104) with SMTP; 10 Aug 2009 16:49:06 +0200
mrshashadakk [at] aim.com
- kjz
Jetzt gibt's Nachschlag:
Received: from mail.reacciun.ve (neblina.reacciun.ve [150.188.4.200])
by xxxxx (Postfix) with ESMTP id 72F6B78A12BD
for xxxxx; Wed, 12 Aug 2009 17:19:35 +0200 (CEST)
Received: from reacciun.ve (localhost [127.0.0.1])
by mail.reacciun.ve (Postfix) with ESMTP
id 51F843D54; Wed, 12 Aug 2009 04:46:25 -0430 (VET)
X-OriginatingIP: 78.138.3.237 (forja) ---> Goodnews Oriabor, Nigeria/Sky-Vision
jholder001 [at] live.co.uk
Muguphon: +447023054673 ---> Magrathea Telecommunications Limited, UK
Received: from www.xmb.com (unknown [220.241.198.135])
by xxxxx (Postfix) with ESMTP id 12267789B36A
for xxxxx; Thu, 13 Aug 2009 18:57:19 +0200 (CEST)
Received: from User [58.1.244.33] by www.xmb.com with ESMTP
(SMTPD32-7.07) id AB831435012E; Thu, 13 Aug 2009 09:25:23 +0800
IP: 58.1.244.33 ---> fntkngw021001.kngw.fnt.ftth.ppp.infoweb.ne.jp
secret.shopper_2 [at] sify.com
Received: from n11.bullet.mail.re1.yahoo.com
(n11.bullet.mail.re1.yahoo.com [69.147.103.138])
by xxxxx (Postfix) with SMTP id 7501678A13CB
for xxxxx; Fri, 14 Aug 2009 15:38:46 +0200 (CEST)
Received: from [68.142.237.88] by n11.bullet.mail.re1.yahoo.com with
NNFMP; 14 Aug 2009 13:38:45 -0000
Date: 14 Aug 2009 06:38:45 -0700
X-yahoo-newman-property: null
X-yahoo-newman-id:
Received: from [69.147.113.10] by t4.bullet.re3.yahoo.com with NNFMP; 14
Aug 2009 13:38:45 -0000
barristerernestkruger5 [at] yahoo.com
barriernestkruger [at] live.com
Received: from mail.mentzermedia.com (mail.mentzermedia.com [70.88.136.197])
by xxxxx (Postfix) with ESMTP id 38E6878A1288
for xxxxx; Fri, 14 Aug 2009 20:47:51 +0200 (CEST)
Received: from User ([41.222.68.14] RDNS failed) by
mail.mentzermedia.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 14 Aug 2009 14:32:00 -0400
IP: 41.222.68.14 ---> Swift Networks Ltd., Nigeria
sr.sjeremiah2h [at] yahoo.gr
sr.sjeremiah01 [at] gmail.com
Received: from calpop.advancelitigation.com (mail.advancelitigation.com
[216.240.145.241])
by xxxxx (Postfix) with ESMTP id 09CBC78A0F0F
for xxxxx; Sat, 15 Aug 2009 01:23:49 +0200 (CEST)
Received: from 59-120-71-35.HINET-IP.hinet.net [59.120.71.35] by
calpop.advancelitigation.com with SMTP;
Thu, 13 Aug 2009 10:43:51 -0700
martinpexton [at] live.com
mpexton [at] centrum.cz
Received: from smtp23.orange.fr (smtp23.orange.fr [80.12.242.97])
by xxxxx (Postfix) with ESMTP id 5DE7578A12B2
for xxxxx; Sat, 15 Aug 2009 10:44:08 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2309.orange.fr (SMTP Server) with ESMTP id 25F11700008D
for xxxxx; Sat, 15 Aug 2009 10:44:08 +0200 (CEST)
Received: from FS-bio (LPuteaux-156-15-58-53.w82-127.abo.wanadoo.fr
[82.127.117.53])
by mwinf2309.orange.fr (SMTP Server) with ESMTP id E93AB7000086
for xxxxx; Sat, 15 Aug 2009 10:44:07 +0200 (CEST) X-ME-UUID: 20090815084407955.E93AB7000086 [at] mwinf2309.orange.fr
Received: from User
(host71-125-static.28-87-b.business.telecomitalia.it [87.28.125.71])
by FS-bio; Sat, 15 Aug 2009 02:42:22 +0200
petersmth21 [at] sify.com
gabsone4227 [at] metoda.it
Received: from acn.net (mail.acn.net [208.215.25.223])
by xxxxx (Postfix) with ESMTP id AE79D789B135
for xxxxx; Sat, 15 Aug 2009 09:54:29 +0200 (CEST)
Received: from User [82.128.1.198] by acn.net with ESMTP
(SMTPD-9.23) id A7A20494; Sat, 15 Aug 2009 01:29:06 -0400
IP: 82.128.1.198 ---> Multilinks Telecommunications Limited, Nigeria
henrysiulau [at] gmail.com
hsiuchuen [at] yahoo.com.hk
Received: from www.skywayusa.com (skywayusa.com [206.114.158.70])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 00B0378A12A2
for xxxxx; Sat, 15 Aug 2009 08:36:19 +0200 (CEST)
Received: from User ([41.211.238.190])
(authenticated bits=0)
by www.skywayusa.com (8.13.8/8.13.8/Debian-3) with ESMTP id n7F64Gq5016504;
Sat, 15 Aug 2009 02:04:28 -0400
IP: 41.211.238.190 ---> Direct-on-PC Limited, Nigeria
robertirving1 [at] hotmail.com
Received: from relay.mail.sohu.net (relay.mail.sohu.net [61.135.132.71])
by xxxxx (Postfix) with ESMTP id AB6B478A0F0F
for xxxxx; Sat, 15 Aug 2009 18:41:16 +0200 (CEST)
Received: from User (unknown [218.28.192.10])
by relay.mail.sohu.net (Postfix) with ESMTP id 8D7B82D512;
Sat, 15 Aug 2009 16:07:23 +0800 (CST)
IP: 218.28.192.10 ---> pc0.zz.ha.cn
undpexesec [at] aim.com
lasawanbao [at] sohu.net
Received: from smtp1web.tin.it (smtp1web.tin.it [212.216.176.195])
by xxxxx (Postfix) with ESMTP id 542DD789B000
for xxxxx; Sat, 15 Aug 2009 22:14:36 +0200 (CEST)
Received: from pswm8.cp.tin.it (192.168.70.29) by smtp1web.tin.it (8.5.113)
id 4A41DF0303487DE7; Sat, 15 Aug 2009 21:51:34 +0200
X-Originating-IP: 41.211.232.169 ---> Direct-on-PC Limited, Nigeria
sanusi.lamido159 [at] virgilio.it
atm_paymentcentercbn2341 [at] yahoo.com.hk
Muguphon: +234 80 227 408 62 ---> Celtel Nigeria Limited/Zain
Received: from mensagens.al.mt.gov.br (unknown [200.252.51.133])
by xxxxx (Postfix) with ESMTP id D32E878A0EDC
for xxxxx; Sun, 16 Aug 2009 12:26:02 +0200 (CEST)
Received: by mensagens.al.mt.gov.br (Postfix, from userid 48)
id 0A10139A02; Sun, 16 Aug 2009 05:56:10 +0000 (UTC)
Received: from 62.56.132.17.satcom-systems.net
(62.56.132.17.satcom-systems.net [62.56.132.17]) by webmail.al.mt.gov.br
(Horde MIME library) with HTTP; Sun, 16 Aug 2009 02:56:09 -0300
Roseibrahim16 [at] yahoo.com
roseibrahim [at] live.com
- kjz
Nachschub läßt grüßen:
Received: from smtp4m5.poczta.onet.pl (smtp4m5.poczta.onet.pl
[213.180.138.35])
by xxxxx (Postfix) with ESMTP id 4297478019BA
for xxxxx; Wed, 12 Aug 2009 00:02:46 +0200 (CEST)
Received: from [41.211.238.140] ([41.211.238.140]:3272 "EHLO hotmail.com"
rhost-flags-FAIL-FAIL-OK-FAIL) by ps4.mod5.onet with ESMTPA
id S33506AbZHKWCpqVuE5 (ORCPT <rfc822;xxxxx);
Wed, 12 Aug 2009 00:02:45 +0200
IP: 41.211.238.140 ---> Direct-on-PC Limited, Nigeria
dallas.lee.williams.h.s.b.ck [at] live.co.uk
fransissoslenz1o [at] poczta.onet.pl
Muguphon: +44 702 409 5564 ---> Magrathea Telecommunications Limited, UK
Received: from extend2.lnk.telstra.net (EHLO
2000server.extendedhand.local) [203.45.83.107]
by mx0.gmx.net (mx023) with SMTP; 12 Aug 2009 00:56:38 +0200
Received: from User ([94.102.51.37])
(authenticated user admin [at] extendedhand.com.au)
by 2000server.extendedhand.local (Kerio MailServer 6.0.8);
Wed, 12 Aug 2009 02:08:49 +1000
admin [at] extendedhand.com.au
mlamin [at] voila.fr
Muguphon: +23321247006 ---> Ghana Telecom, GH
gecracktes SquirrelMail vom Dauer-Mugu:
Received: from webmail.unud.ac.id (unknown [222.124.220.227])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9746778A128F
for xxxxx; Thu, 13 Aug 2009 08:15:00 +0200 (CEST)
Received: (qmail 13827 invoked by uid 507); 12 Aug 2009 07:17:18 +0000
Received: from unknown (HELO webmail.unud.ac.id) (127.0.0.1)
by webmail.unud.ac.id with SMTP; 12 Aug 2009 07:17:18 +0000
Received: from 200.65.129.2 (proxying for 41.220.75.3)
(SquirrelMail authenticated user liejasa [at] unud.ac.id)
by webmail.unud.ac.id with HTTP;
Wed, 12 Aug 2009 15:17:18 +0800 (HKT)
IP: 41.220.75.3 ---> MTN Nigeria
liejasa [at] unud.ac.id
msnnotice001 [at] gala.net
Received: from 5udf.com (unknown [60.191.49.243])
by xxxxx (Postfix) with ESMTP id 59ACA78019BA
for xxxxx; Fri, 14 Aug 2009 00:55:13 +0200 (CEST)
Received: from User [82.128.69.79] by 5udf.com with ESMTP
(SMTPD-8.22) id A72E01D4; Thu, 23 Jul 2009 23:52:14 +0800
IP: 82.128.69.79 ---> Multilinks Telecommunications Limited, Nigeria
adams.briggs [at] hotmail.ru
adams.briggs [at] hotmail.com
Received: from farizej.centrum.cz (EHLO farizej.centrum.cz) [90.183.38.130]
by mx0.gmx.net (mx096) with SMTP; 14 Aug 2009 09:41:54 +0200
Received: by mail255.centrum.cz id S50347190AbZHNHlP (ORCPT
<rfc822;xxxxx + 49 others); Fri, 14 Aug 2009 09:41:15 +0200
Received: from 148.233.159.58 (X-Forwarded-For: 41.202.75.27)
by mail06-sk.centrum.cz (Centrum Mail) with HTTP
IP: 41.202.75.27 ---> AVISONET, CI
jacksonkillman [at] centrum.sk
jacksongillman2 [at] gmail.com
die Madrid-Konnektion:
eceived: from smtp.benet.ru (smtp.benet.ru [83.167.4.66])
by xxxxx (Postfix) with ESMTP id 97D3F78A0EDC
for xxxxx; Mon, 17 Aug 2009 03:38:51 +0200 (CEST)
Received: by smtp.benet.ru (Postfix, from userid 426)
id 65D7E529D0E; Sun, 16 Aug 2009 16:53:05 +0600 (YEKST)
Received: from User (unknown [77.208.188.142])
by smtp.benet.ru (Postfix) with ESMTP id 169125E7DEA;
Sun, 16 Aug 2009 08:22:28 +0600 (YEKST)
IP: 77.208.188.142 ---> VODAFONE_SPAIN_NETWORK
barbarahandoff [at] aol.com
donovanclinton [at] aol.com
Muguphon: + 34 646 151 216 ---> Telef, ES
Received: from mcps-mail.mcdowell.12.nc.us (mail.mcdowell.k12.nc.us
[68.142.71.34])
by xxxxx (Postfix) with ESMTP id A1BF778A0EE9
for xxxxx; Mon, 17 Aug 2009 02:33:17 +0200 (CEST)
Received: from User (ml82.128.15.209.multilinks.com [82.128.15.209])
by mcps-mail.mcdowell.12.nc.us with ESMTP; Sat, 15 Aug 2009 02:06:33 -0400
IP: 82.128.15.209 ---> Multilinks, Nigeria
moneygramoffice [at] aol.com
Hier war der Mugu so rummeldumm und hat einen Zahlendreher eingebaut:
Phone: +243-7032233870 ---> Congo
soll heissen:
Muguphon: +234-7032233870 ---> MTN Nigeria Communications Ltd.
der Dauer-Mugu:
Received: from freebsd.rges.tpc.edu.tw (freebsd.rges.tpc.edu.tw
[163.20.121.65])
by xxxxx (Postfix) with ESMTP id BDC6F78A12B1
for xxxxx; Sun, 16 Aug 2009 22:42:36 +0200 (CEST)
Received: from freebsd.rges.tpc.edu.tw (localhost [127.0.0.1])
by freebsd.rges.tpc.edu.tw (Postfix) with ESMTP id 8B659E53B6;
Mon, 17 Aug 2009 04:01:20 +0800 (CST)
Received: from www.rges.tpc.edu.tw (localhost [127.0.0.1])
by freebsd.rges.tpc.edu.tw (Postfix) with ESMTP id A147FE53B0;
Mon, 17 Aug 2009 04:01:19 +0800 (CST)
X-OriginatingIP: 41.220.75.3 (academic) ---> MTN Nigeria
upscourierservice99 [at] yahoo.com.hk
die Madrid-Konnektion
Kennzeichen der Ratware: nach dem Betreff viele Leerzeichen und dann eine Identifikation, also z. Bsp.:
Subject: PLEASE I NEED YOUR HELP
uzhdfz
Received: from 40.red.171.225.212.user.ptvtelecom.com (EHLO
mx4.hotmail.com) [212.225.171.40]
by mx0.gmx.net (mx022) with SMTP; 17 Aug 2009 12:58:43 +0200
kingsleyrose31 [at] gmail.com
- kjz
Und weiter mit Yuchuuu:
Received: from n7-vm3.bullet.mail.sp2.yahoo.com
(n7-vm3.bullet.mail.sp2.yahoo.com [67.195.135.85])
by xxxxx (Postfix) with SMTP id 3FECD789C2BF
for xxxxx; Wed, 19 Aug 2009 10:00:07 +0200 (CEST)
Received: from [67.195.134.238] by n7.bullet.mail.sp2.yahoo.com with
NNFMP; 19 Aug 2009 08:00:06 -0000
Received: from [69.147.84.144] by t3.bullet.mail.sp2.yahoo.com with
NNFMP; 19 Aug 2009 07:41:48 -0000
Received: from [68.142.230.28] by t6.bullet.mail.sp1.yahoo.com with
NNFMP; 19 Aug 2009 07:41:48 -0000
(früher wurde da maul die einliefernde IP mitgeliefert, anscheinend hat man das analog zu Google jetzt auch spammerfreundlich gestrichen)
chukwuekea [at] yahoo.com
anthonychukwueke001 [at] yahoo.com.hk
Received: from www.kaotda.org.tw (unknown [202.55.249.88])
by xxxxx (Postfix) with ESMTP id B0B9F789A99C
for xxxxx; Wed, 19 Aug 2009 14:09:04 +0200 (CEST)
Received: by www.kaotda.org.tw (Postfix, from userid 104)
id 5500026C4BD; Wed, 19 Aug 2009 20:07:36 +0800 (GMT-8)
Received: from User (unknown [113.115.57.139])
by www.kaotda.org.tw (Postfix) with ESMTP
id 0632A26C484; Wed, 19 Aug 2009 20:07:18 +0800 (GMT-8)
IP: 113.115.57.139 ---> CHINANET Guangdong province network
johnsmile88 [at] hotmail.com
johnsmilebros2001 [at] yahoo.cn
Received: from mail.skat.bg (mail.skat.bg [213.16.56.12])
by xxxxx (Postfix) with ESMTP id 474BA78A13F3
for xxxxx; Wed, 19 Aug 2009 14:42:19 +0200 (CEST)
Received: by mail.skat.bg (Postfix, from userid 81)
id 7673D230A8B; Wed, 19 Aug 2009 13:03:50 +0300 (EEST)
Received: from 83.138.172.72 (proxying for 78.138.3.235)
(SKAT Web Mail authenticated user news [at] skat.bg)
by mail.skat.bg with HTTP;
Wed, 19 Aug 2009 13:03:50 +0300 (EEST)
IP: 78.138.3.235 ---> Goodnews Oriabor, Nigeria/Sky-Vision
contact [at] bonfincom.com
news [at] skat.bg
Und wieder Yuchuuu:
Received: from n9a.bullet.mail.re3.yahoo.com
(n9a.bullet.mail.re3.yahoo.com [68.142.236.47])
by xxxxx (Postfix) with SMTP id B50DE78A1281
for xxxxx; Wed, 19 Aug 2009 14:43:52 +0200 (CEST)
Received: from [68.142.237.87] by n9.bullet.re3.yahoo.com with NNFMP; 19
Aug 2009 12:43:51 -0000
martinsrevfather [at] yahoo.com
Received: from HoangNgoc.hoangngoc-resort.com (mail.hoangngoc-resort.com
[118.69.206.149])
by xxxxx (Postfix) with ESMTP id 7E64A78A13E3
for xxxxx; Wed, 19 Aug 2009 15:43:31 +0200 (CEST)
Received: from User ([82.128.26.14]) by HoangNgoc.hoangngoc-resort.com
with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 19 Aug 2009 20:04:21 +0700
IP: 82.128.26.14 ---> Multilinks Telecommunications Limited, Nigeria
eke8 [at] o2.pl
ekepatrick11 [at] terra.es
Muguphon: +2348033351759 ---> MTN Nigeria Communications Ltd.
Tja, und wenn man mal die Suche bemüht:
http://www.antispam-ev.de/forum/showthread.php?p=223043&highlight=hoangngoc-resort#post223043
dann sieht man, dass diese Dreckskiste in Vietnam nun schon seit mindestens dem 28. 6. 09 sperrangelweit offen steht. Also fürs Protokoll:
http://hoangngoc-resort.com
vunc [at] fpt.com.vn
info [at] hoangngoc-resort.com
hoangngoc [at] hoangngoc-resort.com
Fürs Webdesign verantwortlich zeichnet sich dort:
http://www.mtnconcept.com
Fällt etwas auf? (mal mit dem Muguphon vergleichen....) Honi soit qui mal y pense.
- kjz
Hoffentlich reichen die Zeilen aus, diesmal kamen sie im Rudel. :)
X-Envelope-From: <info [at] britishlottery.com>
X-Envelope-To: <meins>
X-Delivery-Time: 1250635764
X-UID: 17527
Return-Path: <info [at] britishlottery.com>
X-RZG-FWD-BY: meins
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (ahmed-mailin mi46) (RZmta 20.5)
for <meins>; Wed, 19 Aug 2009 00:49:24 +0200 (MEST)
To: meins
X-RZG-CLASS-ID: mi
Received: from hcmut.edu.vn (sunsite.hcmut.edu.vn [203.162.44.74])
by mailin.webmailer.de (ahmed-mailin mi46) (RZmta 20.5)
with ESMTP id E05c26l7IMjsl2 for <meins>;
Wed, 19 Aug 2009 00:49:22 +0200 (MEST)
Received: (qmail 30483 invoked from network); 18 Aug 2009 19:30:34 -0000
Received: from unknown (HELO webmail.hcmut.edu.vn) ([127.0.0.1])
(envelope-sender <info [at] britishlottery.com>)
by hcmut.edu.vn (qmail-ldap-1.03) with SMTP
for <HENSEL [at] MUSICFARM.DE>; 18 Aug 2009 19:30:34 -0000
Received: from 62.56.132.17 (proxying for 10.250.50.134)
(SquirrelMail authenticated user huynhblan)
by webmail.hcmut.edu.vn with HTTP;
Wed, 19 Aug 2009 02:30:34 +0700 (ICT)
Message-ID: <3154aacf1b8942e6bd5a9688ce3faf95.squirrel [at] webmail.hcmut.edu.vn>
Date: Wed, 19 Aug 2009 02:30:34 +0700 (ICT)
Subject: Ticket-Nummer :05-08-10-18-20-46-(43).
From: "British Lottery" <info [at] britishlottery.com>
Reply-To: s.dgrams01 [at] googlemail.com
User-Agent: SquirrelMail/1.4.15
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-BK-MailScanner-OpenProtect-Information: Please contact the ISP for more information
X-BK-MailScanner-OpenProtect: Found to be clean
X-BK-MailScanner-OpenProtect-MCPCheck:
X-BK-MailScanner-OpenProtect-SpamCheck: not spam, SpamAssassin (score=-1.117,
required 5, ALL_TRUSTED -1.44, MISSING_HEADERS 0.19,
TO_CC_NONE 0.13)
X-BK-MailScanner-OpenProtect-From: info [at] britishlottery.com
Wir glücklich mitteilen zu Ihnen der Auslosung der britischen Lotterie,
Online Sweepstakes International Program am 16.
August 2009. Ihre E-Mail-Adresse an ein Ticket
Zahl hat die Ticket-Nummer :05-08-10-18-20-46-(43).
Sie wurden an Anspruch auf eine Summe von £710,000.00 GBP
(siebenhundert und zehntausend Pfund) in bar gutgeschrieben Datei.
Sie sind, um die angeforderten Informationen für die Ansprüche auf
Kontakt Name: Barr. Daniel Grams.
E-Mail: s.dgrams01 [at] googlemail.com
s.dgrams01 [at] irr.ir
* 1.YOUR NAME:
* 2 Ihre Kontaktadresse:
* 3 Alter:
* 4 GESCHLECHT:
* 5 TEL / MOBIL:
* 6 BERUF:
Mit freundlichen Grüßen.
Kate Brown
Die Online-Koordinator.
--
This message has been scanned for viruses and
dangerous content by OpenProtect(http://www.openprotect.com), and is
believed to be clean.
Nummer 2:
X-Envelope-From: <andreasantos63 [at] aol.com>
X-Envelope-To: <ich>
X-Delivery-Time: 1249955825
X-UID: 17436
Return-Path: <andreasantos63 [at] aol.com>
X-RZG-FWD-BY: ich
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (ahmed-mailin mi29) (RZmta 20.4)
for <ich>; Tue, 11 Aug 2009 03:57:05 +0200 (MEST)
To: ich
X-RZG-CLASS-ID: mi
Received: from bo02.smartseries.jp (www202.exxcom.jp [61.211.234.202])
by mailin.webmailer.de (ahmed-mailin mi29) (RZmta 20.4)
with ESMTP id x06f30l7B1qiG6 for <ich>;
Tue, 11 Aug 2009 03:57:04 +0200 (MEST)
Received: from User (82.158.0.14.dyn.user.ono.com [82.158.0.14])
(authenticated bits=0)
by bo02.smartseries.jp (8.13.8/8.13.8) with ESMTP id n7B1rY06005089;
Tue, 11 Aug 2009 10:53:37 +0900
Message-Id: <200908110153.n7B1rY06005089 [at] bo02.smartseries.jp>
Reply-To: <oonlnclm009 [at] aol.com>
From: "JOSE MANUEL SANTOS."<andreasantos63 [at] aol.com>
Subject: ''Spanish Online Cyber Lottery award program''Read acrefuly and contact your argent for your claim
Date: Tue, 11 Aug 2009 03:54:07 +0200
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Und dann geht es um lächerliche 915, 810,00 Euronen.
Kontaktadresse des Menschen:
COMPANY NAME: SANTALUZ SECURITY COMPANY SL.
Name: FREDRICK LUCAS
Phone: +34-63-413-7-628
Fax: +34-91-291-95-24
Email: { oonlnclm009 [at] aol.com
Gruß,
- syntax
Zum Wochenende:
Received: from ms5.clps.tpc.edu.tw (ms5.clps.tpc.edu.tw [163.20.61.5])
by xxxxx (Postfix) with ESMTP id C8EBA78A0F1E
for xxxxx; Wed, 19 Aug 2009 22:05:16 +0200 (CEST)
Received: from localhost (ms5 [127.0.0.1])
by ms5.clps.tpc.edu.tw (Postfix) with ESMTP id E87ADAED06E;
Thu, 20 Aug 2009 03:39:15 +0800 (CST)
Received: from ms5.clps.tpc.edu.tw ([127.0.0.1])
by localhost (ms5.clps.tpc.edu.tw [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 28472-05; Thu, 20 Aug 2009 03:39:15 +0800 (CST)
Received: from User (unknown [78.138.29.98])
by ms5.clps.tpc.edu.tw (Postfix) with ESMTP id 4BA1CAED02B;
Thu, 20 Aug 2009 03:38:20 +0800 (CST)
IP: 78.138.29.98 ---> LinkCom, Nigeria
kennwaiboko [at] sify.com
kennwaiboko [at] gmail.com
der 'Dating-Scammer', leicht zu erkennen, da die Ratware immer 'Dating 101' im Betreff einfügt. Versand über Yuchuuuu, Dropbox bei Sify:
Received: from n27.bullet.mail.mud.yahoo.com
(n27.bullet.mail.mud.yahoo.com [68.142.206.222])
by xxxxx (Postfix) with SMTP id D165A789B25C
for xxxxx; Thu, 20 Aug 2009 00:38:12 +0200 (CEST)
Received: from [68.142.194.244] by n27.bullet.mail.mud.yahoo.com with
NNFMP; 19 Aug 2009 22:38:09 -0000
ecrimecommission39 [at] yahoo.com
die Madrid-Konnektion:
Received: from IMPaqm4.telefonica.net (impaqm4.telefonica.net
[213.4.129.19])
by xxxxx (Postfix) with ESMTP id 7B0B378019BA
for xxxxx; Thu, 20 Aug 2009 10:59:19 +0200 (CEST)
Received: from IMPmailhost2.adm.correo ([10.20.102.39])
by IMPaqm4.telefonica.net with bizsmtp
id WY4A1c00h0r0BT63QYzK7v; Thu, 20 Aug 2009 10:59:19 +0200
Received: from User ([81.202.7.5])
by IMPmailhost2.adm.correo with BIZ IMP
id WYzJ1c00306WjWR1iYzJCT; Thu, 20 Aug 2009 10:59:19 +0200
IP: 81.202.7.5 ---> Ono, ES
globalmgtspain [at] terra.es
globaplatagents [at] terra.es
globalplatloans [at] aol.com
Muguphon: +34-672-841-313 ---> mobile number, ES
Mugufax: +34-911-011-085 ---> Duocom Europe, S.l., ES/Telefacil
Received: from postoffice.liquidprint.com (host201.liquidprint.com
[63.236.78.201])
by xxxxx (Postfix) with ESMTP id B6FD678A3BBE
for xxxxx; Fri, 21 Aug 2009 06:19:32 +0200 (CEST)
Received: from [63.139.27.35] (account test HELO User)
by postoffice.liquidprint.com (CommuniGate Pro SMTP 4.3.10)
with ESMTPA id 20058081; Thu, 20 Aug 2009 22:19:15 -0500
claimfundss [at] i12.com
o2telecommunication14 [at] live.com
Received: from cbj5-kusanagi.secure-xp.net (unknown [72.18.131.186])
by xxxxx (Postfix) with ESMTP id 6E8ED78A3DD1
for xxxxx; Fri, 21 Aug 2009 07:23:38 +0200 (CEST)
Received: from delphinium.mschosting.com ([210.48.145.201]) by
cbj5-kusanagi.secure-xp.net with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 20 Aug 2009 23:05:27 -0600
Received: from ml82.128.22.87.multilinks.com ([82.128.22.87]:1032 helo=User)
by delphinium.mschosting.com with esmtpa (Exim 4.69)
(envelope-from <diplomaticdeliveryng2 [at] aliceadsl.fr>)
id 1MeMJV-0006Qj-JC; Fri, 21 Aug 2009 13:05:24 +0800
IP: 82.128.22.87 ---> Multilinks, Nigeria
diploomaticdeliveryng [at] yahoo.com.hk
diplomaticdeliveryng2 [at] aliceadsl.fr
Der Dating-Scammer:
Received: from n29.bullet.mail.mud.yahoo.com
(n29.bullet.mail.mud.yahoo.com [68.142.207.48])
by xxxxx (Postfix) with SMTP id 248CD78A0EFF
for xxxxx; Fri, 21 Aug 2009 08:47:27 +0200 (CEST)
Received: from [209.191.108.96] by n29.bullet.mail.mud.yahoo.com with
NNFMP; 21 Aug 2009 06:47:26 -0000
abdullahhaji86 [at] yahoo.com
abdullahsulaiman [at] sify.com
Muguphon: +60-163627209 ---> DiGi Telecom, Malaysia
Mugufax: +60321784713 ---> Selangor, Malaysia
die Madrid-Konnektion drückt auf die Tränendrüse:
Received: from smtp.benet.ru (ns2.benet.ru [83.167.4.66])
by xxxxx (Postfix) with ESMTP id 7A93378A13A1
for xxxxx; Fri, 21 Aug 2009 14:21:23 +0200 (CEST)
Received: by smtp.benet.ru (Postfix, from userid 426)
id C54946B14A9; Mon, 17 Aug 2009 22:48:22 +0600 (YEKST)
Received: from User (62-87-82-186.red-acceso.airtel.net [62.87.82.186])
by smtp.benet.ru (Postfix) with ESMTP id 2E27A4F494F;
Mon, 17 Aug 2009 16:48:37 +0600 (YEKST)
IP: 62.87.82.186 ---> Vodafone, ES
donovanclinton [at] aol.com
barbarahandoff [at] aol.com
Muguphon: + 34 646 151 216 ---> Telef(onica?), ES
- kjz
Zum Abend:
Wieder der Dating 101 Scammer:
Received: from n30-vm3.bullet.mail.sp1.yahoo.com
(n30-vm3.bullet.mail.sp1.yahoo.com [98.136.44.247])
by xxxxx (Postfix) with SMTP id 0D1C378A0F14
for xxxxx; Mon, 17 Aug 2009 17:45:04 +0200 (CEST)
Received: from [69.147.84.144] by n30.bullet.mail.sp1.yahoo.com with
NNFMP; 17 Aug 2009 15:45:03 -0000
Received: from [68.142.230.28] by t6.bullet.mail.sp1.yahoo.com with
NNFMP; 17 Aug 2009 15:45:03 -0000
jamesmorgand9 [at] yahoo.com
jamesmorgand9 [at] googlemail.com
Muguphon: +2347062448455 ---> MTN Nigeria Communications Ltd.
Received: from zcs-mta2.zmb.com (mail-z1.multilinks.com [212.165.142.253])
by xxxxx (Postfix) with ESMTP id EFD5578A130E
for xxxxx; Tue, 18 Aug 2009 20:26:07 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by zcs-mta2.zmb.com (Postfix) with ESMTP id 942C180561;
Tue, 18 Aug 2009 11:54:43 +0100 (WAT)
X-Virus-Scanned: amavisd-new at zmb.com
Received: from zcs-mta2.zmb.com ([127.0.0.1])
by localhost (zcs-mta2.zmb.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Cb42DWBGtNR2; Tue, 18 Aug 2009 11:54:43 +0100 (WAT)
Received: from User (ml82.128.21.196.multilinks.com [82.128.21.196])
by zcs-mta2.zmb.com (Postfix) with ESMTP id 583E980530;
Tue, 18 Aug 2009 11:54:34 +0100 (WAT)
IP: 82.128.21.196 ---> Multilinks, Nigeria
anthonyowens [at] mail2anthony.com
anthonyowen [at] mail2anthony.com
Received: from relay.inca.it (EHLO inca-mta1.inca.it) [151.1.155.99]
by mx0.gmx.net (mx114) with SMTP; 19 Aug 2009 16:35:44 +0200
Received: from User ([66.55.8.51])
by inca-mta1.inca.it (Sun Java System Messaging Server 6.2-7.05 (built
Sep 5
2006)) with ESMTPA id <0KOM00NWEO8U1J40 [at] inca-mta1.inca.it>; Wed,
19 Aug 2009 16:31:25 +0200 (CEST)
herinquez [at] googlemail.com
herinquez1 [at] googlemail.com
Und wieder der Dating 101 Scammer:
Received: from n9a.bullet.mail.re3.yahoo.com
(n9a.bullet.mail.re3.yahoo.com [68.142.236.47])
by xxxxx (Postfix) with SMTP id 7B59978A13A4
for xxxxx; Thu, 20 Aug 2009 21:48:56 +0200 (CEST)
Received: from [68.142.237.90] by n9.bullet.re3.yahoo.com with NNFMP; 20
Aug 2009 19:48:53 -0000
mrbensbernanke.bnkofamerica11 [at] yahoo.com
mrben.bnkofa002 [at] gmail.com
Received: from asp-fe19.asp-telepac.local (fe19.tasp.pt [213.13.158.94])
by xxxxx (Postfix) with ESMTP id C44E278A0ECB
for xxxxx; Thu, 20 Aug 2009 21:54:11 +0200 (CEST)
Received: from flywhite.com ([62.28.0.77]) by asp-fe19.asp-telepac.local
with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 20 Aug 2009 20:54:10 +0100
Received: from User ([220.199.6.26]) by flywhite.com with Microsoft
SMTPSVC(6.0.3790.3959);
Thu, 20 Aug 2009 20:54:44 +0100
IP: 220.199.6.26 ---> China United Network
lampteyandanii [at] gmail.com
mrlkwameiccbbgh [at] live.com
Und wieder der Dating 101 Scammer, von dem sich Yuchuuu am Nasenring bereitwillig durch die Manege führen läßt....:
Received: from n29.bullet.mail.mud.yahoo.com
(n29.bullet.mail.mud.yahoo.com [68.142.207.48])
by xxxxx (Postfix) with SMTP id 6D9B4789C2AC
for xxxxxx; Fri, 21 Aug 2009 18:19:47 +0200 (CEST)
Received: from [68.142.200.226] by n29.bullet.mail.mud.yahoo.com with
NNFMP; 21 Aug 2009 16:19:46 -0000
Received: from [68.142.237.87] by t7.bullet.mud.yahoo.com with NNFMP; 21
Aug 2009 16:19:44 -0000
richardstephensassociates [at] yahoo.com
kelly-adams [at] live.com
- kjz
Es ist wieder Mugu-Wochenende:
doppelt gemoppelt:
Received: from gallofinancial.com (mail.gallofinancial.com [72.82.237.5])
by xxxxx (Postfix) with ESMTP id 1DC1178A130E
for xxxxx; Sat, 22 Aug 2009 08:22:10 +0200 (CEST)
Received: from User ([82.128.32.46]) by gallofinancial.com with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 21 Aug 2009 15:00:35 -0400
Received: from catlystg-srv.catalyst.local
(static-71-244-81-31.ny325.east.verizon.net [71.244.81.31])
by xxxxx (Postfix) with ESMTP id 4E54878A0F15
for xxxxx; Sat, 22 Aug 2009 02:25:16 +0200 (CEST)
Received: from User ([82.128.34.60]) by catlystg-srv.catalyst.local with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 21 Aug 2009 20:14:44 -0400
IP: 82.128.32.46 ---> Multilinks Telecommunications Limited, Nigeria
fareedusman3 [at] live.com
fareedusman89 [at] live.com
Diese Kiste in TW steht auch schon seit Wochen offen:
Received: from ms5.clps.tpc.edu.tw (ms5.clps.tpc.edu.tw [163.20.61.5])
by xxxxx (Postfix) with ESMTP id C93A378A0F16
for xxxxx; Fri, 21 Aug 2009 23:16:19 +0200 (CEST)
Received: from localhost (ms5 [127.0.0.1])
by ms5.clps.tpc.edu.tw (Postfix) with ESMTP id 52E00AEFD1E;
Fri, 21 Aug 2009 20:02:57 +0800 (CST)
Received: from ms5.clps.tpc.edu.tw ([127.0.0.1])
by localhost (ms5.clps.tpc.edu.tw [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 09742-06; Fri, 21 Aug 2009 20:02:57 +0800 (CST)
Received: from User (unknown [82.128.68.141])
by ms5.clps.tpc.edu.tw (Postfix) with ESMTP id 66E5EAEFCF2;
Fri, 21 Aug 2009 20:02:26 +0800 (CST)
IP: 82.128.68.141 ---> Multilinks Telecommunications Limited, Nigeria
mrkennwaiboko [at] yahoo.co.jp
kennwaiboko [at] airsoftmail.com
Received: from mail.cyberzone.tj (cyberzone.tj [193.111.11.12])
by xxxxx (Postfix) with ESMTP id 13A5E78A0EFF
for xxxxx; Sat, 22 Aug 2009 04:21:29 +0200 (CEST)
Received: from localhost (localhost.tojikiston.com [127.0.0.1])
by mail.cyberzone.tj (Postfix) with ESMTP id E384D1228BD4;
Sat, 22 Aug 2009 06:23:24 +0500 (TJT)
X-Virus-Scanned: amavisd-new at cyberzone.tj
Received: from mail.cyberzone.tj ([127.0.0.1])
by localhost (mail.cyberzone.tj [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 4caZ3bxArVe9; Sat, 22 Aug 2009 06:23:24 +0500 (TJT)
Received: from User (unknown [41.221.171.161])
by mail.cyberzone.tj (Postfix) with ESMTPA id D811412279A6;
Sat, 22 Aug 2009 06:22:42 +0500 (TJT)
IP: 41.221.171.161 ---> SWIFT NETWORKS LIMITED, Nigeria
brigs75 [at] gmail.com
Received: from www.trio-net.biz (EHLO srv.trio.local) [199.203.242.67]
by mx0.gmx.net (mx037) with SMTP; 22 Aug 2009 15:13:06 +0200
Received: from User ([82.128.35.75]) by srv.trio.local with Microsoft
SMTPSVC(6.0.3790.3959);
Sat, 22 Aug 2009 16:07:47 +0200
IP: 82.128.35.75 ---> Multilinks Telecommunications Limited, Nigeria
ho_ming100 [at] hotmail.com
ho_ming1000 [at] yahoo.cn
Received: from ps215.technowave.ne.jp (EHLO ps215.technowave.ne.jp)
[202.211.45.25]
by mx0.gmx.net (mx110) with SMTP; 22 Aug 2009 15:15:22 +0200
Received: from User (81.199.42.26.satcom-systems.net [81.199.42.26] (may
be forged))
(authenticated bits=0)
by ps215.technowave.ne.jp (8.13.1/8.13.1) with ESMTP id n7MD9Bnq022550;
Sat, 22 Aug 2009 22:09:34 +0900
rrrrmo2 [at] gmail.com
mmmjohn06 [at] gmail.com
Received: from smtp4.uk2.net (EHLO smtp4.uk2.net) [83.170.81.184]
by mx0.gmx.net (mx110) with SMTP; 22 Aug 2009 15:25:59 +0200
Received: from genkt-048-082.t-mobile.co.uk ([149.254.48.82] helo=User)
by smtp4.uk2.net with esmtpa (Exim 4.60)
(envelope-from <noreply [at] johnlewis.com>)
id 1MeqbT-0003Of-6D; Sat, 22 Aug 2009 14:25:55 +0100
johnlewis147 [at] gmail.com
Received: from batelco.com.bh (cgpfe2.batelco.com.bh [193.188.97.110])
by xxxxx (Postfix) with ESMTP id 8061B78A0CEB
for xxxxx; Sat, 22 Aug 2009 19:31:29 +0200 (CEST)
Received: from [59.175.187.36] (account ahgharib [at] batelco.com.bh HELO User)
by cgpfe2.batelco.com.bh (CommuniGate Pro SMTP 5.2.13)
with ESMTPA id 239864604; Sat, 22 Aug 2009 20:31:11 +0300
ahgharib [at] batelco.com.bh
smslive247s [at] kandmtowingandrepair.com
Received: from smtp3.uk2.net (smtp3.uk2.net [83.170.81.183])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 56C9278A0F16
for xxxxx; Sun, 23 Aug 2009 04:46:34 +0200 (CEST)
Received: from [82.128.32.4] (helo=User)
by smtp3.uk2.net with esmtpa (Exim 4.60)
(envelope-from <frdcbng1 [at] gmail.com>)
id 1Mf36A-0001rL-Pk; Sun, 23 Aug 2009 03:46:29 +0100
IP: 82.128.32.4 ---> ---> Multilinks Telecommunications Limited, Nigeria
mrsvivianmensah [at] live.com
frdcbng1 [at] gmail.com
Muguphon: +234-8030547 417 ---> MTN Nigeria Communications Ltd.
Received: from eagle.globehosting.net (eagle.globehosting.net
[209.59.143.94])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9A623789B755
for xxxxx; Sun, 23 Aug 2009 08:02:00 +0200 (CEST)
Received: from nobody by eagle.globehosting.net with local (Exim 4.69)
(envelope-from <nobody [at] eagle.globehosting.net>)
id 1MewGt-00067x-3z
for xxxxx; Sat, 22 Aug 2009 22:29:03 +0300
kllowkelvin2 [at] gmail.com
Received: from web37407.mail.mud.yahoo.com (web37407.mail.mud.yahoo.com
[209.191.91.139])
by xxxxx (Postfix) with SMTP id 6627078A128C
for xxxxx; Sat, 22 Aug 2009 23:48:24 +0200 (CEST)
Received: (qmail 69595 invoked by uid 60001); 22 Aug 2009 21:48:15 -0000
Received: from [41.222.192.70] by web37407.mail.mud.yahoo.com via HTTP;
Sat, 22 Aug 2009 14:48:14 PDT
IP: 41.222.192.70 ---> ISOCEL SARL, BJ
jerrid40 [at] yahoo.com
unclaiming_atm_department1 [at] live.fr
Muguphon: +229-985-82-778 ---> Benin
- kjz
Mugus in Hülle und Fülle (am Wochenende war wohl mal wieder Mugu-Flashmob):
Mugu-Phiski braucht Nachschub:
Received: from smtp2.titaninternet.co.uk (centaur.titaninternet.co.uk
[217.77.187.18])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 19D0F78A0F13
for xxxxx; Sun, 23 Aug 2009 23:00:08 +0200 (CEST)
Received: from User ([41.211.239.4])
by smtp2.titaninternet.co.uk (Merak 7.6.4) with ASMTP id GNG39351;
Sun, 23 Aug 2009 21:59:31 +0100
IP: 41.211.239.4 ---> Direct-on-PC Limited, Nigeria
In order to confirm you your University Web-Mail identity, you are to
provide the following data;.....
web-upgrades [at] live.com
Received: from smtp5m5.poczta.onet.pl (smtp5m5.poczta.onet.pl
[213.180.138.36])
by xxxxx (Postfix) with ESMTP id 7E60178A0F15
for xxxxx; Mon, 24 Aug 2009 06:30:24 +0200 (CEST)
Received: from 193.228.211.41.client193.directonpc.net
([41.211.228.193]:4118
"EHLO hotmail.com" rhost-flags-OK-FAIL-OK-FAIL) by ps5.mod5.onet
with ESMTPA id S50339118AbZHXEaYIWdTq (ORCPT
<rfc822;xxxxx); Mon, 24 Aug 2009 06:30:24 +0200
IP: 41.211.228.193 ---> Direct-on-PC Limited, Nigeria
charlesndub1zz [at] poczta.onet.pl
fedex-9 [at] live.co.uk
Received: from gate.drughuman.ru (unknown [83.149.245.68])
by xxxxx (Postfix) with ESMTP id 139A978A12AA
for xxxxx; Mon, 24 Aug 2009 08:20:01 +0200 (CEST)
Received: from User ([82.128.33.184]) by gate.drughuman.ru with
Microsoft SMTPSVC(6.0.3790.1830);
Mon, 24 Aug 2009 10:03:41 +0400
IP: 82.128.33.184 ---> Multilinks Telecommunications Limited, Nigeria
fareedusman2 [at] live.com
fareedusman89 [at] live.com
Received: from SERVER1.Livingstone.local (living11.lnk.telstra.net
[165.228.146.105])
by xxxxx (Postfix) with ESMTP id AE13F78662EC
for xxxxx; Mon, 24 Aug 2009 10:52:41 +0200 (CEST)
Received: from User ([76.244.83.124]) by SERVER1.Livingstone.local with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 24 Aug 2009 18:27:34 +1000
IP: 76.244.83.124 ---> adsl-76-244-83-124.dsl.skt2ca.sbcglobal.net
psalamieyesigha [at] turk.tc
sp.alamieyesigha [at] sify.com
Received: from www.surbis.ru (smtp.surbis.ru [195.54.18.199])
by xxxxx (Postfix) with ESMTP id A142378A13BC
for xxxxx; Mon, 24 Aug 2009 12:16:16 +0200 (CEST)
Received: from User (unknown [60.207.242.252])
by www.surbis.ru (Postfix) with ESMTP id CAD0815379D;
Mon, 24 Aug 2009 15:37:57 +0600 (YEKST)
IP: 60.207.242.252 ---> Beijing Bitone United Networks
kelgrant [at] libero.it
kelgrant01 [at] i12.com
gecracktes Squirrel-Mail:
Received: from mymail.abacus.com.ph (mymail.abacus.com.ph [202.57.123.29])
by xxxxx (Postfix) with ESMTP id CD9D5789C2B6
for xxxxx; Tue, 25 Aug 2009 05:13:46 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mymail.abacus.com.ph (Postfix) with ESMTP id E2BEB4772D8B;
Sat, 1 Jan 2000 08:06:12 +0800 (PHT)
Received: from mymail.abacus.com.ph ([127.0.0.1])
by localhost (mymail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 32732-09; Sat, 1 Jan 2000 08:06:12 +0800 (PHT)
Received: from mymail.abacus.com.ph (localhost [127.0.0.1])
by mymail.abacus.com.ph (Postfix) with ESMTP id 97E724772D7C;
Sat, 1 Jan 2000 08:05:38 +0800 (PHT)
Received: from 41.217.2.7
(SquirrelMail authenticated user helpdesk);
by mymail.abacus.com.ph with HTTP;
Sat, 1 Jan 2000 08:05:40 +0800 (PHT)
IP: 41.217.2.7 ---> ZOOM Mobile Nigeria Ltd.
apostlechristianadave [at] gmail.com
apostlechristianadave [at] yahoo.com.hk
helpdesk [at] abacus.com.ph
Received: from mail.concordhk.com (mail.concordhk.com [203.98.136.55])
by xxxxx (Postfix) with ESMTP id EEC46789C254
for xxxxx Mon, 24 Aug 2009 21:23:50 +0200 (CEST)
Received: from User (ml82.128.6.239.multilinks.com [82.128.6.239]) by
mail.concordhk.com
(Rockliffe SMTPRA 8.0.3) with ESMTP id <B0006664192 [at] mail.concordhk.com>;
Tue, 25 Aug 2009 03:13:15 +0800
IP: 82.128.6.239 ---> Multilinks, Nigeria
edmondyoung101 [at] yahoo.co.jp
edmondyoung100 [at] yahoo.co.jp
Received: from mail.domain.com (mail.vgp.smrtlc.ru [217.66.70.35])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0396678662EC
for xxxxx; Tue, 25 Aug 2009 07:03:11 +0200 (CEST)
Received: from User ([82.128.32.62])
by mail.domain.com (IceWarp 9.1.0) with ASMTP id GMX87515;
Tue, 25 Aug 2009 09:50:15 +0500
IP: 82.128.32.62 ---> Multilinks Telecommunications Limited, Nigeria
alfrd.dotun [at] yahoo.com.hk
alfreddotun01 [at] yahoo.co.jp
Passt zwar nicht ganz ins Schema, ist aber laut IP auch ein Mugu:
Received: from mta3.glocalnet.net (mta3.glocalnet.net [213.163.128.207])
by xxxxx (Postfix) with ESMTP id BFC2C78662EC
for xxxxx; Tue, 25 Aug 2009 06:06:04 +0200 (CEST)
Received: from User (82.128.32.3) by mta3.glocalnet.net (7.3.140.3)
(authenticated as gittantholin [at] glocalnet.net)
id 4A55A3830073839A; Tue, 25 Aug 2009 06:01:38 +0200
IP: 82.128.32.3 ---> Multilinks Telecommunications Limited, Nigeria
SALARY/WAGES
=============
Ridgway® will pay you $300 for each evaluation you carry out, this pay
includes transportation and other expenses need when shopping. NB:
Ridgway will provide all funds for the evaluation, you don't have to pay
for anything, just shop and get paid.
To get started kindly Fill Out the application form below and reply it
back to us.
gittantholin [at] glocalnet.net
jpridgwayshopper [at] live.com
Received: from s1.imediacast.net (83-144-1-234.viapass.net [83.144.1.234])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0E9BF78979CC
for xxxxx; Tue, 25 Aug 2009 03:23:33 +0200 (CEST)
Received: from User ([82.128.32.241])
(authenticated user info [at] imediacast.net)
by s1.imediacast.net (Kerio MailServer 6.5.1);
Mon, 24 Aug 2009 23:25:50 +0200
IP: 82.128.32.241 ---> Multilinks Telecommunications Limited, Nigeria
info [at] imediacast.net
fareedusman2 [at] gmx.com
fareedusman1 [at] gmx.com
Received: from blu0-omc3-s20.blu0.hotmail.com (EHLO
blu0-omc3-s20.blu0.hotmail.com) [65.55.116.95]
by mx0.gmx.net (mx111) with SMTP; 25 Aug 2009 05:50:55 +0200
Received: from BLU137-W1 ([65.55.116.72]) by
blu0-omc3-s20.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 24 Aug 2009 20:49:41 -0700
X-Originating-IP: [41.194.53.89] ---> Cobranet
d-m----0148 [at] msn.com
denzel_murphy0001 [at] imfihouse.com
Received: from blu0-omc1-s21.blu0.hotmail.com
(blu0-omc1-s21.blu0.hotmail.com [65.55.116.32])
by xxxxx (Postfix) with ESMTP id DEC9A78A1397
for xxxxx; Tue, 25 Aug 2009 09:35:38 +0200 (CEST)
Received: from BLU112-W21 ([65.55.116.7]) by
blu0-omc1-s21.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 25 Aug 2009 00:35:38 -0700
X-Originating-IP: [41.203.231.12] ---> ONATEL, BF
adel.naba01 [at] pisem.net
adel.naba4 [at] msn.com
Received: from penguin.dnsmaster.net (penguin.dnsmaster.net
[212.84.189.133])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 74E1078A13A1
for xxxxx; Tue, 25 Aug 2009 15:20:18 +0200 (CEST)
Received: (qmail 19101 invoked by uid 89); 25 Aug 2009 13:13:34 -0000
Received: by simscan 1.3.1 ppid: 18932, pid: 19082, t: 0.9568s
scanners: clamav: 0.95.2
/m:51/d:9634 spam: 3.2.5
Received: from unknown (HELO kaymich.com) (82.68.3.166)
by 0 with SMTP; 25 Aug 2009 13:13:33 -0000
Received: from User ([174.129.203.72]) by kaymich.com with Microsoft
SMTPSVC(6.0.3790.3959);
Sat, 22 Aug 2009 22:42:54 +0100
garysh01 [at] mail.mn
garysh001 [at] mail.mn
- kjz
Nabend,
X-Envelope-From: <be0900 [at] ebullici.com>
X-Envelope-To: <ich>
X-Delivery-Time: 1251000159
X-UID: 17591
Return-Path: <be0900 [at] ebullici.com>
X-RZG-FWD-BY: ich
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (ahmed-mailin mi58) (RZmta 21.0)
for <ich>; Sun, 23 Aug 2009 06:02:39 +0200 (MEST)
X-RZG-CLASS-ID: mi
Received: from mail.izzi.com.my ([116.206.0.33])
by mailin.webmailer.de (ahmed-mailin mi58) (RZmta 21.0)
with ESMTP id 600243l7N3kuM6 for <ich>;
Sun, 23 Aug 2009 06:02:39 +0200 (MEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.izzi.com.my (Postfix) with ESMTP id 40DF27B981B;
Sun, 23 Aug 2009 10:29:05 +0800 (MYT)
X-Spam-Flag: YES
X-Spam-Score: 11.77
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.77 tagged_above=-10 required=6.6
tests=[ADVANCE_FEE_1=0, ADVANCE_FEE_2=1.392, AWL=0.588, BAYES_99=3.5,
FORGED_MUA_OUTLOOK=4.056, MSGID_FROM_MTA_ID=1.393,
UNDISC_RECIPS=0.841]
Received: from mail.izzi.com.my ([127.0.0.1])
by localhost (mail.izzi.com.my [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id q-ZbR4zHV5vo; Sun, 23 Aug 2009 10:29:03 +0800 (MYT)
Received: from User (unknown [82.128.33.111])
by mail.izzi.com.my (Postfix) with ESMTP id 8CF7E7B9819;
Sun, 23 Aug 2009 10:27:49 +0800 (MYT)
Reply-To: <drtonytom [at] yahoo.com.hk>
From: "Dr Tony Tom"<be0900 [at] ebullici.com>
Subject: I am presently at JFK International Airport
Date: Sun, 23 Aug 2009 03:37:06 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20090823022750.8CF7E7B9819 [at] mail.izzi.com.my>
To: undisclosed-recipients:;
Kurzzusammenfassung: Es geht um 10,5 Millionen Dollar von "Dr. Tony Tom" und er will die normalen Sachen (Full Name, Residential Address, Age, Occupation, Direct Telephone Numbers, A Copy of Your Identification)
Der Nächste kam gleich im Anschluß:
X-Envelope-From: <simonw76 [at] yahoo.es>
X-Envelope-To: <ich>
X-Delivery-Time: 1250969535
X-UID: 17589
Return-Path: <simonw76 [at] yahoo.es>
X-RZG-FWD-BY: ich
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (bertie mi41) (RZmta 21.0)
for <ich>; Sat, 22 Aug 2009 21:32:15 +0200 (MEST)
To: ich
X-RZG-CLASS-ID: mi
Received: from www.elancer.co.kr ([211.174.60.152])
by mailin.webmailer.de (bertie mi41) (RZmta 21.0)
with ESMTP id D04a8dl7MJJsoE for <ich>;
Sat, 22 Aug 2009 21:32:13 +0200 (MEST)
Received: from User ([81.195.209.242])
(authenticated bits=0)
by www.elancer.co.kr (8.12.8/8.12.8) with ESMTP id n7MFRLtD005857;
Sun, 23 Aug 2009 00:27:38 +0900
Message-Id: <200908221527.n7MFRLtD005857 [at] www.elancer.co.kr>
Reply-To: <wsimon223 [at] yahoo.com.hk>
From: "WILLIAMS"<simonw76 [at] yahoo.es>
Subject: DEAR BELOVED, MY WARM GREETINGS !!
Date: Sat, 22 Aug 2009 16:29:17 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Der (?) "ärmste" liegt in Dubai mit Krebs und sucht jemanden, der 30% von 8 Millionen Flocken gebrauchen kann. Antworten will "William Simon" an wsimon223 [at] yahoo.com.hk
Gruß,
- syntax
Es muguiert wieder:
Received: from DALI.esad.ipleiria.pt (unknown [193.137.98.100])
by xxxxx (Postfix) with ESMTP id C5D9378A13C3
for xxxxx; Tue, 25 Aug 2009 17:09:47 +0200 (CEST)
frank.powelldesk [at] hotmail.co.uk
pedro [at] esad.ipleiria.pt
Muguphon: +44 703 593 0585 ---> Open Telecom International Ltd., UK
Received: from web80802.mail.mud.yahoo.com (web80802.mail.mud.yahoo.com
[209.191.72.106])
by xxxxx (Postfix) with SMTP id 13D9578A13A5
for xxxxx; Tue, 25 Aug 2009 18:10:27 +0200 (CEST)
Received: (qmail 64587 invoked by uid 60001); 25 Aug 2009 16:09:54 -0000
Received: from [41.191.85.209] by web80802.mail.mud.yahoo.com via HTTP;
Tue, 25 Aug 2009 09:09:54 PDT
IP: 41.191.85.209 ---> MICRO-NET_CYBER, Benin
natbullchipchamp91 [at] yahoo.com
globexdelieverlycompany [at] in.com
Muguphon: +229 93642655 ---> BBCom, Benin
Received: from host.semiosi.com (host.semiosi.com [72.52.194.188])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxx (Postfix) with ESMTP id 7607478A1289
for xxxxx; Tue, 25 Aug 2009 21:10:54 +0200 (CEST)
Received: from ml82.128.23.179.multilinks.com ([82.128.23.179] helo=User)
by host.semiosi.com with esmtpa (Exim 4.69)
(envelope-from <feligate2000 [at] gmail.com>)
id 1MftdC-0004kL-6M; Tue, 25 Aug 2009 06:52:07 -0400
IP: 82.128.23.179 ---> Multilinks, Nigeria
samuelbrown80 [at] yahoo.com.hk
feligate2000 [at] gmail.com
Received: from mail.gcarles.es (57.Red-217-126-32.staticIP.rima-tde.net
[217.126.32.57])
by xxxxx (Postfix) with ESMTP id 1E93178A0F16
for xxxxx; Wed, 26 Aug 2009 00:49:18 +0200 (CEST)
Received: from User ([83.229.48.149]) by mail.gcarles.es with Microsoft
SMTPSVC(5.0.2195.6713);
Wed, 26 Aug 2009 00:37:04 +0200
IP: 83.229.48.149 ---> Cyberspace Link 4 PHC, Nigeria
alatkinz [at] i12.com
al.atk3 [at] yahoo.com.hk
Muguphon: +447045738816 ---> Open Telecom International Ltd., UK
der Freenet-Mugu zum Ersten:
Received: from mout3.freenet.de (mout3.freenet.de [195.4.92.93])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 92CFD789AD92
for xxxxx; Wed, 26 Aug 2009 03:01:31 +0200 (CEST)
Received: from [195.4.92.26] (helo=16.mx.freenet.de)
by mout3.freenet.de with esmtpa (ID martinsnnerodeycumooo [at] moneymail.de)
(port 25) (Exim 4.69 #92)
id 1Mg6sG-0001YC-N1; Wed, 26 Aug 2009 03:00:28 +0200
Received: from [196.3.183.73] (port=51092 helo=User)
by 16.mx.freenet.de with esmtpa (ID martinsnnerodeycumooo [at] moneymail.de)
(port 587) (Exim 4.69 #94)
id 1Mg6s9-00051k-0c; Wed, 26 Aug 2009 03:00:28 +0200
IP: 196.3.183.73 ---> Suburban Telecom, Nigeria
martinsnnerodeycumooo [at] moneymail.de
henrycarr20092 [at] hotmail.com
henrycarr1111 [at] yahoo.com
eceived: from frontend3.inteligweb.com.br
(slbnatpool14.inteligweb.com.br [201.12.41.233])
by xxxxx (Postfix) with ESMTP id D0C7378A13EA
for xxxxx; Wed, 26 Aug 2009 12:32:29 +0200 (CEST)
Received: from User (unknown [196.3.183.73])
by frontend3.inteligweb.com.br (Postfix) with ESMTP id 4D211E7FCD8;
Wed, 26 Aug 2009 07:18:03 -0300 (BRT)
IP: 196.3.183.73 ---> Suburban Telecom, Nigeria
mr.emmanueldoji076 [at] yahoo.com.hk
mremmanueldoji [at] yahoo.com
der Freenet-Mugu zum Zweiten (das kommt davon, wenn man meint, Logins von Mugu-Providern nicht direkt auf den Routern zu blocken):
Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 05F2478A13B2
for xxxxx; Wed, 26 Aug 2009 19:25:20 +0200 (CEST)
Received: from [195.4.92.20] (helo=10.mx.freenet.de)
by mout2.freenet.de with esmtpa (ID franc.sdom [at] moneymail.de) (port 25)
(Exim 4.69 #92)
id 1MgMC3-0004kY-1I; Wed, 26 Aug 2009 19:21:55 +0200
Received: from [82.128.73.176] (port=1293 helo=User)
by 10.mx.freenet.de with esmtpa (ID franc.sdom [at] moneymail.de) (port 587)
(Exim 4.69 #94)
id 1MgMC2-0006Y1-4t; Wed, 26 Aug 2009 19:21:54 +0200
IP: 82.128.73.176 ---> Multilinks Telecommunications Limited, Nigeria
franc.sdom [at] moneymail.de
infoadmin [at] sify.com
infoadminn [at] aol.com
- kjz
Die Mugus treiben's immer doller:
Received: from chipmail.snodgrasscpa.com (mail.snodgrasscpa.com
[70.89.228.81])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0E10C78662EC
for xxxxx; Wed, 26 Aug 2009 22:57:05 +0200 (CEST)
Received: from User ([82.128.71.163])
(authenticated user admin [at] carecpas.com)
by chipmail.snodgrasscpa.com (Kerio MailServer 6.6.2);
Sat, 22 Aug 2009 03:11:46 -0400
IP: 82.128.71.163 ---> Multilinks Telecommunications Limited, Nigeria
admin [at] carecpas.com
engrcohenr [at] sify.com
engrcohenr1 [at] sify.com
Die Dreckskiste aus Vietnam rotzt weiter durchs Netz:
http://www.antispam-ev.de/forum/showthread.php?p=223043&highlight=hoangngoc#post223043
Received: from HoangNgoc.hoangngoc-resort.com (mail.hoangngoc-resort.com
[118.69.206.149])
by xxxxx (Postfix) with ESMTP id 77A0678A13E1
for xxxxx; Thu, 27 Aug 2009 10:44:46 +0200 (CEST)
Received: from User ([82.128.34.117]) by HoangNgoc.hoangngoc-resort.com
with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 27 Aug 2009 15:28:25 +0700
IP: 82.128.34.117 ---> Multilinks Telecommunications Limited, Nigeria
mrsjoywilliams [at] ibibo.com
info.charityfoundation [at] gawab.com
http://hoangngoc-resort.com
vunc [at] fpt.com.vn
info [at] hoangngoc-resort.com
hoangngoc [at] hoangngoc-resort.com
Received: from mail.pressingplastic.it (mail.pressingplastic.it
[87.25.231.221])
by xxxxx (Postfix) with ESMTP id 67AF078979CC
for xxxxx; Thu, 27 Aug 2009 14:17:00 +0200 (CEST)
Received: from User ([74.94.171.49]) by mail.pressingplastic.it with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 27 Aug 2009 14:09:18 +0200
IP: 74.94.171.49 ---> 74-94-171-49-NewEngland.hfc.comcastbusiness.net
mrswaziriefccchairperson30 [at] gmail.com
waziri [at] yahoo.com
Muguphon: +234-8053817390 ---> Globacom Ltd., Nigeria
Received: from mail.serverpair.com (mail.serverpair.com [216.45.49.90])
by xxxxx (Postfix) with ESMTP id D6AC378A13B4
for xxxxx; Thu, 27 Aug 2009 14:35:40 +0200 (CEST)
Received: from dsl-146-50-61.telkomadsl.co.za [165.146.50.61] by
mail.serverpair.com with SMTP;
Thu, 27 Aug 2009 03:48:15 -0700
phillipmorgan [at] gawab.com
Euro-Afro-American [at] live.co.uk
Muguphon: +27 788 429 100 ---> MTN, ZA
Received: from n6b.bullet.mail.ac4.yahoo.com
(n6b.bullet.mail.ac4.yahoo.com [76.13.13.76])
by xxxxx (Postfix) with SMTP id 13B6278A13DA
for xxxxx; Thu, 27 Aug 2009 15:31:31 +0200 (CEST)
Received: from [76.13.13.26] by n6.bullet.mail.ac4.yahoo.com with NNFMP;
27 Aug 2009 13:31:31 -0000
Received: from [76.13.10.182] by t3.bullet.mail.ac4.yahoo.com with
NNFMP; 27 Aug 2009 13:31:31 -0000
Received: from [127.0.0.1] by omp123.mail.ac4.yahoo.com with NNFMP; 27
Aug 2009 13:31:31 -0000
Received: (qmail 9759 invoked by uid 60001); 27 Aug 2009 13:28:51 -0000
Message-ID: <20090827132850.9757.qmail [at] web111609.mail.gq1.yahoo.com>
Received: from [81.91.239.60] by web111609.mail.gq1.yahoo.com via HTTP;
Thu, 27 Aug 2009 06:28:50 PDT
IP: 81.91.239.60 ---> PHARAON TELECOM, BJ
olga.symonenko5 [at] web2mail.com
otfsc [at] pobox.sk
Muguphon: +229 98 476 036 ---> Benin
Received: from itwsf.com (www.itwsf.com [83.206.5.187])
by xxxxx (Postfix) with ESMTP id 9A1A178A13B4
for xxxxx; Thu, 27 Aug 2009 17:22:27 +0200 (CEST)
Received: from User ([82.128.6.217]) by itwsf.com with Microsoft
SMTPSVC(6.0.3790.1830);
Thu, 27 Aug 2009 17:13:33 +0200
IP: 82.128.6.217 ---> Multilinks Telecommunications Limited, Nigeria
wangpeter76 [at] yahoo.com.hk
key7 [at] yahoo.com
- kjz
Das Wochenende naht, und was heißt das? Natürlich: Mugu-Flashmob....
gecracktes SquirrelMail mal wieder mit der Madrid-Konnektion:
Received: from qau.edu.pk (mail.qau.edu.pk [121.52.146.212])
by xxxxx (Postfix) with ESMTP id 2D513789ACE5
for xxxxx; Fri, 28 Aug 2009 08:22:42 +0200 (CEST)
Received: from (unknown [10.10.10.10]) by sig.qau.edu.pk with smtp
id 6a57_c995d83a_9397_11de_a422_00188b332b9d;
Fri, 28 Aug 2009 10:58:20 +0500
Received: (qmail 17977 invoked by uid 507); 26 Aug 2009 15:32:55 +0500
Received: from localhost (HELO mail.qau.edu.pk) (127.0.0.1)
by qau.edu.pk with SMTP; 26 Aug 2009 15:32:55 +0500
Received: from 213.37.214.189
(SquirrelMail authenticated user librarian [at] qau.edu.pk)
by mail.qau.edu.pk with HTTP;
Wed, 26 Aug 2009 15:32:55 +0500 (PKT)
IP: 213.37.214.189 ---> 213.37.214.189.dyn.user.ono.com
librarian [at] qau.edu.pk
redboathfinancia [at] aim.com
lutherzhiri [at] aim.com
Received: from mail.unsoed.ac.id (mail.unsoed.ac.id [222.124.206.68])
by xxxxx (Postfix) with ESMTP id A3BFC78A0F16
for xxxxx; Fri, 28 Aug 2009 06:40:14 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mail.unsoed.ac.id (Postfix) with ESMTP id F1E3A2F4647;
Fri, 28 Aug 2009 11:34:29 +0700 (WIT)
X-DKIM: Sendmail DKIM Filter v2.8.1 mail.unsoed.ac.id F1E3A2F4647
X-Virus-Scanned: Debian amavisd-new at mail.unsoed.ac.id
Received: from mail.unsoed.ac.id ([127.0.0.1])
by localhost (mail2.unsoed.ac.id [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 58ymi2dvMIgF; Fri, 28 Aug 2009 11:34:29 +0700 (WIT)
claimsdepartment [at] euro-pw.com
dept23 [at] 9.cn
Muguphon: +31 (0) 84 740 8620 ---> J2 Global (Netherlands) B.V.
gleich doppelt gemoppelt:
Received: from techw1.futureus.com (techw1.futureus.com [67.192.49.90])
by xxxxx (Postfix) with ESMTP id D9197789B135
for xxxxx; Fri, 28 Aug 2009 03:27:04 +0200 (CEST)
Received: by techw1.futureus.com (Postfix, from userid 48)
id B509D28BEED4; Thu, 27 Aug 2009 18:25:21 -0500 (CDT)
Received: from techw1.futureus.com (techw1.futureus.com [67.192.49.90])
by xxxxx (Postfix) with ESMTP id 678BD789B8E0
for xxxxx; Fri, 28 Aug 2009 02:17:18 +0200 (CEST)
Received: by techw1.futureus.com (Postfix, from userid 48)
id 3562828AAC1F; Thu, 27 Aug 2009 18:50:37 -0500 (CDT)
nicfay300 [at] i12.com
Received: from mail.uchkun.kg (unknown [195.38.182.208])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1A7B578A1417
for xxxxx; Fri, 28 Aug 2009 13:46:53 +0200 (CEST)
Received: from User ([41.191.85.37])
(authenticated user root [at] uchkun.kg)
by mail.uchkun.kg (Kerio MailServer 6.3.1);
Fri, 28 Aug 2009 05:21:27 +0800
IP: 41.191.85.37 ---> Cyberlary maxim, BJ
root [at] uchkun.kg
w_esterunion01 [at] live.fr
chikwadoguy [at] yahoo.com
Muguphon: +22998139688 ---> Benin
Received: from server.megacceso.com (server.megacceso.com [195.77.201.4])
by xxxxx (Postfix) with ESMTP id 9D368789C2B2
for xxxxx; Fri, 28 Aug 2009 13:57:25 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by server.megacceso.com (Postfix) with ESMTP id 2E55188F557;
Fri, 28 Aug 2009 00:13:17 +0200 (CEST)
Received: from server.megacceso.com ([127.0.0.1])
by localhost (server.megacceso.com [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id 07766-01-20; Fri, 28 Aug 2009 00:13:17 +0200 (CEST)
Received: from User (unknown [41.191.109.130])
by server.megacceso.com (Postfix) with ESMTP id 6622388F2C1;
Fri, 28 Aug 2009 00:05:36 +0200 (CEST)
IP: 41.191.109.130 ---> Suburban Telecom, Nigeria
claimsoffice.dept [at] gmx.co.uk
Muguphon: +44 704 570 3256 ---> Open Telecom International Ltd., UK
die Madrid-Konnektion zum Zweiten:
Received: from 207.Red-88-22-229.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [88.22.229.207]
by mx0.gmx.net (mx043) with SMTP; 28 Aug 2009 15:59:17 +0200
eullotto [at] aol.com
unisecc [at] aim.com
Muguphon: +34-656462003 ---> France Telecom Espana
Received: from web35802.mail.mud.yahoo.com (web35802.mail.mud.yahoo.com
[66.163.179.171])
by xxxxx (Postfix) with SMTP id D65C878A142E
for xxxxx; Fri, 28 Aug 2009 16:48:42 +0200 (CEST)
Received: (qmail 33053 invoked by uid 60001); 28 Aug 2009 14:48:17 -0000
Received: from [41.216.52.20] by web35802.mail.mud.yahoo.com via HTTP;
Fri, 28 Aug 2009 07:48:17 PDT
IP: 41.216.52.20 ---> Benin Telecoms SA
fedextranscorp2 [at] yahoo.com.hk
twistawrench [at] yahoo.com
Muguphon: +229-97988072 ---> Benin
die Madrid-Konnektion zum Dritten:
Received: from 40.red.171.225.212.user.ptvtelecom.com (EHLO
mx4.hotmail.com) [212.225.171.40]
by mx0.gmx.net (mx037) with SMTP; 28 Aug 2009 16:14:01 +0200
UNIVERSALDELIVERYSERVICES [at] GMAIL.COM
Muguphon: +34 639 054 096 ---> Telefonica, ES
Die Madrid-Konnektion zum Vierten:
Received: (qmail invoked by alias); 28 Aug 2009 14:38:12 -0000
Received: from 207.Red-88-22-229.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [88.22.229.207]
by mx0.gmx.net (mx055) with SMTP; 28 Aug 2009 16:38:12 +0200
eullotto [at] aol.com
unisecc [at] aim.com
Muguphon: +34-656462003 ---> France Telecom Espana
Received: from n20.bullet.mail.ukl.yahoo.com
(n20.bullet.mail.ukl.yahoo.com [87.248.110.137])
by xxxxx (Postfix) with SMTP id 1641F78A1289
for xxxxx; Fri, 28 Aug 2009 19:08:37 +0200 (CEST)
Received: from [217.12.4.214] by n20.bullet.mail.ukl.yahoo.com with
NNFMP; 28 Aug 2009 17:08:36 -0000
Received: from [87.248.110.113] by t1.bullet.ukl.yahoo.com with NNFMP;
28 Aug 2009 17:08:36 -0000
Received: from [127.0.0.1] by omp218.mail.ukl.yahoo.com with NNFMP; 28
Aug 2009 17:08:36 -0000
Received: from [41.220.75.16] by web87002.mail.ird.yahoo.com via HTTP;
Fri, 28 Aug 2009 17:08:33 GMT
IP: 41.220.75.16 ---> MTN Nigeria
mrlorenzo101 [at] btinternet.com
atoion_8771 [at] yahoo.co.jp
Muguphon: +44-701-118-3680 ---> PNC Telecom Services Limited, UK/Vanguard
- kjz
Der Flahmob geht weiter:
Die Madrid-Konnektion:
Received: from static-72-230-224-77.ipcom.comunitel.net (EHLO
mx4.hotmail.com) [77.224.230.72]
by mx0.gmx.net (mx087) with SMTP; 29 Aug 2009 15:44:38 +0200
intercontilotto [at] sify.com
Muguphon: 0034 672 591 035 ---> mobile number, Spain
Mugufax: 0034 911 881 493 ---> Jazz Telecom, S.a.u., Spain
der Dauer-Mugu:
Received: from iServer.hsieh-kang.com.tw
(61-218-134-205.HINET-IP.hinet.net [61.218.134.205])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id B5836789ACE5
for xxxxx; Sun, 30 Aug 2009 08:37:20 +0200 (CEST)
Received: from User (chromium.onspeed.com [83.138.172.76])
(authenticated bits=0)
by iServer.hsieh-kang.com.tw (8.12.10/8.12.10) with ESMTP id
n7PF0Qoj027368;
Tue, 25 Aug 2009 23:00:34 +0800
Received: from mtnngprs.com (trwKDgKdhT [at] mtnngprs.com [41.220.75.3])
by chromium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Tue, 25 Aug 2009 16:00:50 +0100
(BST)
X-Originating-IP: [41.220.75.3] ---> MTN, Nigeria
antoniolorenzo71 [at] yahoo.com.hk
atoion_8771 [at] yahoo.co.jp
Muguphon: +44-701-118-3680 ---> PNC Telecom Services Limited, UK
Der Mugu als Webmail-Account-Phishki:
Received: from chichen.crodemerida.edu.mx (unknown [148.208.243.1])
by xxxxx (Postfix) with ESMTP id 20DAA789B35F
for xxxxx; Sun, 30 Aug 2009 08:56:00 +0200 (CEST)
Received: by chichen.crodemerida.edu.mx (Postfix, from userid 30)
id 5EAED71341; Fri, 28 Aug 2009 04:05:19 -0500 (CDT)
X-IPAddress: 62.56.141.8 ---> 62.56.141.8.satcom-systems.net
matain.site [at] ymail.com
wieder die Madrid-Konnektion:
Received: from av.mwmail.com.br (av.mwmail.com.br [189.17.75.147])
by xxxxx (Postfix) with ESMTP id 11F2C78A0CEB
for xxxxx; Sun, 30 Aug 2009 05:34:34 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by av.mwmail.com.br (Postfix) with ESMTP id A3F2F5DCE3;
Sat, 29 Aug 2009 14:17:00 -0300 (BRT)
X-Virus-Scanned: amavisd-new at mwmail.com.br
Received: from av.mwmail.com.br ([127.0.0.1])
by localhost (av.mwmail.com.br [127.0.0.1]) (amavisd-new, port 10024)
with SMTP id GytnnTvKl1V2; Sat, 29 Aug 2009 14:17:00 -0300 (BRT)
Received: from 77.209.159.72 (unknown [189.17.75.134])
(Authenticated sender: cismarg [at] mwmail.com.br)
by av.mwmail.com.br (Postfix) with ESMTPA id 5BEAE5DCC1;
Sat, 29 Aug 2009 14:16:58 -0300 (BRT)
Received: from phpmailer ([77.209.159.72])
by 77.209.159.72 with HTTP (UebiMiau);
Sat, 29 Aug 2009 14:17:30 -0300
IP: 77.209.159.72 ---> VODAFONE_SPAIN_NETWORK
cismarg [at] mwmail.com.br
claimoffice34 [at] aim.com
claimoffice313 [at] aim.com
Muguphon: +34672822938 ---> mobile number, Spain
Received: from smtp1m5.poczta.onet.pl (smtp1m5.poczta.onet.pl
[213.180.138.32])
by xxxxx (Postfix) with ESMTP id 52F15789747A
for xxxxx; Sat, 29 Aug 2009 22:02:26 +0200 (CEST)
Received: from 95.227.211.41.client95.directonpc.net ([41.211.227.95]:2972
"EHLO pkkkkk [at] poczta.onet.pl" rhost-flags-OK-FAIL-FAIL-FAIL)
by ps1.mod5.onet with ESMTPA id S50334761AbZH2UCZqXDTi (ORCPT
<rfc822;xxxxx); Sat, 29 Aug 2009 22:02:25 +0200
IP: 41.211.227.95 ---> Direct-on-PC Limited, Nigeria
robiscoff254 [at] sify.com
rbff145 [at] sify.com
Mugufax: +44 870 286 0893 ---> Netkonect Communications Ltd., UK
Muguphon: +44 70359 56311 ---> Open Telecom International Ltd., UK
+44 702 406 3921 ---> Magrathea Telecommunications Limited, UK
Received: from hds21.co.kr (unknown [59.24.49.35])
by spammotel.com (Postfix) with ESMTPS id 5987F799A39
for xxxxx; Sat, 29 Aug 2009 22:30:17 -0400 (EDT)
Received: from hds21.co.kr (localhost.localdomain [127.0.0.1])
by hds21.co.kr (8.13.8/8.13.8) with ESMTP id n7U2GBuV010106
for xxxxx; Sun, 30 Aug 2009 11:16:11 +0900
Received: (from nobody [at] localhost)
by hds21.co.kr (8.13.8/8.13.8/Submit) id n7U2GAef010105;
Sun, 30 Aug 2009 11:16:10 +0900
jrjr776 [at] gmail.com
- kjz
Es geht weiter:
Received: from adv.techscape4.com (unknown [203.130.242.60])
by xxxxx (Postfix) with SMTP id 45C097892F21
for xxxxx; Mon, 7 Sep 2009 01:01:27 +0200 (CEST)
Received: (qmail 16771 invoked by uid 745); 6 Sep 2009 05:10:18 -0000
X-IPAddress: 41.191.109.130 ---> Suburban Telecom, Nigeria
roseibr_12 [at] yahoo.com.hk
webmaster [at] msk.co.id
roseib_12 [at] yahoo.com.hk
Received: from mail.peaksystems.com (dragontail.peaksystems.com
[63.251.15.26])
by xxxxx (Postfix) with SMTP id 2D2A278940EB
for xxxxx; Mon, 7 Sep 2009 11:05:46 +0200 (CEST)
Received: by mail.peaksystems.com (Postfix, from userid 2335)
id D17952FEB6; Mon, 7 Sep 2009 01:26:21 -0700 (PDT)
Received: from localhost by dragontail.peaksystems.com
with SpamAssassin (version 3.1.7);
Mon, 07 Sep 2009 01:26:21 -0700
premiumsshop1 [at] gmail.com
jack [at] mail.peaksystems.com
Received: from mail.sevengables.com (mail.sevengables.com [12.200.108.200])
by xxxxx (Postfix) with ESMTP id 098C978A1928
for xxxxx; Mon, 7 Sep 2009 13:36:28 +0200 (CEST)
Received: from User ([82.128.68.123] RDNS failed) by
mail.sevengables.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 7 Sep 2009 01:33:03 -0700
IP: 82.128.68.123 ---> Multilinks Telecommunications Limited, Nigeria
steverreed004 [at] gmail.com
Muguphon: +44 703 599 0525 ---> Open Telecom International Ltd., UK
Received: from omr13.networksolutionsemail.com
(omr13.networksolutionsemail.com [205.178.146.63])
by xxxxx (Postfix) with ESMTP id 02EA778A1402
for xxxxx; Mon, 7 Sep 2009 19:48:49 +0200 (CEST)
Received: from mail.networksolutionsemail.com
(ns-omr13.mgt.hosting.dc2.netsol.com [10.49.6.76])
by omr13.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
n87HmmhP018953
for xxxxx; Mon, 7 Sep 2009 13:48:49 -0400
Message-Id: <200909071748.n87HmmhP018953 [at] omr13.networksolutionsemail.com>
Received: (qmail 28617 invoked by uid 78); 7 Sep 2009 17:48:47 -0000
Received: from unknown (HELO User) (go6 [at] oneweb1.com@202.96.159.221)
by ns-omr13.lb.hosting.dc2.netsol.com with SMTP; 7 Sep 2009 17:48:47 -0000
garryschulz [at] uku.co.uk
Received: from vsmtp4.tin.it (vsmtp4.tin.it [212.216.176.224])
by xxxxx (Postfix) with ESMTP id 0CA0378662EC
for xxxxx; Tue, 8 Sep 2009 05:54:09 +0200 (CEST)
Received: from User (82.128.71.230) by vsmtp4.tin.it (8.5.113)
(authenticated as paulaka570 [at] virgilio.it)
id 4AA5189C001A15A1; Tue, 8 Sep 2009 05:41:11 +0200
IP: 82.128.71.230 ---> Multilinks Telecommunications Limited, Nigeria
paulaka570 [at] virgilio.it
kwakusteven [at] sify.com
stkwaku [at] sify.com
Received: from 83-103-25-104.ip.fastwebnet.it (EHLO
cassandra.localdomain) [83.103.25.104]
by mx0.gmx.net (mx085) with SMTP; 08 Sep 2009 08:48:47 +0200
Received: from cassandra.localdomain (localhost [127.0.0.1])
by localhost (Postfix) with SMTP id C54CB1BE14C;
Tue, 8 Sep 2009 08:40:21 +0200 (CEST)
Received: from 192.168.0.249 (unknown [192.168.0.249])
by cassandra.localdomain (Postfix) with ESMTP id 4F4AA1BE021;
Tue, 8 Sep 2009 08:40:10 +0200 (CEST)
X-Originating-IP: 196.1.177.4 ---> Nigerian Telecommunications Ltd.
resolutionpanel71 [at] live.com
der Dauer-Mugu:
Received: from web80605.mail.mud.yahoo.com (web80605.mail.mud.yahoo.com
[209.191.72.75])
by xxxxx (Postfix) with SMTP id AECDD78A13E8
for xxxxx; Tue, 8 Sep 2009 17:18:55 +0200 (CEST)
Received: (qmail 48468 invoked by uid 60001); 8 Sep 2009 15:18:43 -0000
Received: from [41.220.75.3] by web80605.mail.mud.yahoo.com via HTTP;
Tue, 08 Sep 2009 08:18:42 PDT
IP: 41.220.75.3 ---> MTN Nigeria
illiniturtle [at] sbcglobal.net
fds_nig2009 [at] yahoo.com.hk
Muguphon: +23480-65131249 ---> MTN Nigeria Communications Ltd.
Muguphon: +234 803 678 0389 ---> MTN Nigeria Communications Ltd.
Received: from email.wirenetics.com (email.wirenetics.com [66.218.40.210])
by xxxxx (Postfix) with ESMTP id 3536378A13A4
for xxxxx; Wed, 9 Sep 2009 02:25:58 +0200 (CEST)
Received: from User (colorc5.lnk.telstra.net [165.228.100.208])
by email.wirenetics.com (Postfix) with ESMTP id D43A725D0C73;
Fri, 4 Sep 2009 18:34:10 -0700 (PDT)
robcarman010 [at] yahoo.co.jp
robcarman102 [at] yahoo.co.jp
Muguphon: +447031875852 ---> Magrathea Telecommunications Limited, UK
Received: from aim.com (ip204-178-208-87.adsl2.static.versatel.nl
[87.208.178.204])
by spammotel.com (Postfix) with SMTP id 5AF257CF6FF
for xxxxx; Tue, 8 Sep 2009 18:06:02 -0400 (EDT)
Received: from wahofer-ba929df ([127.0.0.1]) by wahofer-ba929df
([127.0.0.1]) with SMTPSVC;
Wed, 09 Sep 2009 00:06:01 +0200
pjowor [at] aim.com
profjosephowor [at] mcom.com
Received: from web86411.mail.ird.yahoo.com (web86411.mail.ird.yahoo.com
[217.146.188.202])
by xxxxx (Postfix) with SMTP id 15B1B78A13A0
for xxxxx; Wed, 9 Sep 2009 00:32:44 +0200 (CEST)
Received: (qmail 17868 invoked by uid 60001); 8 Sep 2009 22:32:44 -0000
Received: from [41.220.75.16] by web86411.mail.ird.yahoo.com via HTTP;
Tue, 08 Sep 2009 22:32:44 GMT
IP: 41.220.75.16 ---> MTN Nigeria
ferg.lismore [at] btinternet.com
nokiaclaimsprocessing [at] hotmail.co.uk
Muguphon: +44 7024019718 ---> Magrathea Telecommunications Limited, UK
Received: from omr-m32.mx.aol.com (omr-m32.mx.aol.com [64.12.143.152])
by xxxxx (Postfix) with ESMTP id EA2BF78A13E2
for xxxxx; Wed, 9 Sep 2009 08:36:56 +0200 (CEST)
Received: from imo-da03.mx.aol.com (imo-da03.mx.aol.com [205.188.169.201])
by omr-m32.mx.aol.com (8.14.1/8.14.1) with ESMTP id n896Y0Mv016067;
Wed, 9 Sep 2009 02:34:00 -0400
Received: from Ghrstudy [at] aol.com
by imo-da03.mx.aol.com (mail_out_v42.5.) id i.d04.5ffc9591 (37591);
Wed, 9 Sep 2009 02:33:56 -0400 (EDT)
Received: from User ([82.128.32.27]) by cia-mb06.mx.aol.com (v125.7)
with ESMTP id MAILCIAMB064-92d74aa74c2b2ac; Wed, 09 Sep 2009 02:33:51
-0400
IP: 82.128.32.27 ---> Multilinks Telecommunications Limited, Nigeria
williamwildman2005 [at] yahoo.cn
ghrstudy [at] aol.com
Received: from zist.edu.cn (mailgw.zstu.edu.cn [218.108.82.171])
by xxxxx (Postfix) with SMTP id 2654F789B987
for xxxxx; Wed, 9 Sep 2009 01:33:46 +0200 (CEST)
X-EYOU-SPAMVALUE:0
X-EYOU-DEALDRC:
Received: (eyou anti_spam gateway 3.0); Wed, 09 Sep 2009 06:16:47 +0800
Message-ID: <452448207.02683 [at] zist.edu.cn>
X-EYOUMAIL-SMTPAUTH: @
Received: from 82.128.34.64 by 192.168.101.2 with SMTP; Wed, 09 Sep 2009
06:16:45 +0800
IP: 82.128.34.64 ---> Multilinks Telecommunications Limited, Nigeria
investigationunitt1 [at] gmail.com
Received: from mail.vcmedu.com (unknown [61.145.122.218])
by xxxxx (Postfix) with ESMTP id 3EC1278A12A7
for xxxxx; Wed, 9 Sep 2009 15:09:18 +0200 (CEST)
Received: from User (unknown [41.191.85.49])
by mail.vcmedu.com (Postfix) with ESMTP id 9F720C64675;
Wed, 9 Sep 2009 20:57:14 +0800 (CST)
IP: 41.191.85.49 ---> Omnium des Telecom et de l'internet, BJ
shipment.agent [at] sify.com
www.dhlsends [at] yahoo.com
- kjz
Es ist wieder Mugu-Time:
Received: from smtp23.services.sfr.fr (smtp23.services.sfr.fr
[93.17.128.19])
by xxxxx (Postfix) with ESMTP id 82536789783D
for xxxxx; Wed, 9 Sep 2009 23:20:40 +0200 (CEST)
Received: from User (unknown [115.134.221.71])
by msfrf2303.sfr.fr (SMTP Server) with ESMTP id 5D1AE7000084;
Wed, 9 Sep 2009 23:20:11 +0200 (CEST)
IP: 115.134.221.71 ---> TELEKOM MALAYSIA BERHAD
barrbdauwat01 [at] gmail.com
barr_b_dauwat [at] sify.com
die Madrid-Konnektion:
Received: from 30.Red-88-25-45.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [88.25.45.30]
by mx0.gmx.net (mx035) with SMTP; 10 Sep 2009 00:10:54 +0200
unisecc [at] aim.com
Muguphon: +34-656462003 ---> France Telecom Espana
gecrackter Uni-Account der Amsterdam-Mafia:
Received: from puma.mail.utk.edu (puma.mail.utk.edu [160.36.178.106])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2E28078A128F
for xxxxx; Thu, 10 Sep 2009 00:17:42 +0200 (CEST)
Received: from User (ip254-30-210-87.adsl2.static.versatel.nl
[87.210.30.254])
(authenticated bits=0)
by puma.mail.utk.edu (8.13.6/8.13.4) with ESMTP id n89MGh35001801;
Wed, 9 Sep 2009 18:16:44 -0400
ininfoname8 [at] gmail.com
johnmalik822 [at] aim.com
Received: from mail.fjord.eu
(host131-66-static.114-81-b.business.telecomitalia.it [81.114.66.131])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1F92478A1422
for xxxxx; Thu, 10 Sep 2009 09:35:47 +0200 (CEST)
Received: from User ([82.128.70.218])
(authenticated user info [at] fjord.eu)
by mail.fjord.eu;
Thu, 10 Sep 2009 02:55:05 +0200
IP: 82.128.70.218 ---> Multilinks Telecommunications Limited, Nigeria
info [at] fjord.eu
patriciadune [at] aol.co.uk
die Madrid-Konnektion:
Received: from dns1.imagechem.com.tw (unknown [210.243.245.250])
by xxxxx (Postfix) with ESMTP id E53AE789A7B5
for xxxxx; Thu, 10 Sep 2009 02:13:32 +0200 (CEST)
Received: by dns1.imagechem.com.tw (Postfix, from userid 104)
id 06C70268A21; Thu, 10 Sep 2009 03:12:01 +0800 (GMT-8)
Received: from User (unknown [77.209.165.215])
by dns1.imagechem.com.tw (Postfix) with ESMTP
id 102AD268A55; Thu, 10 Sep 2009 03:10:49 +0800 (GMT-8)
IP: 77.209.165.215 ---> VODAFONE_SPAIN_NETWORK
santoszuma1950 [at] aol.co.uk
szuma07 [at] gmail.com
Da steht beim Server mal wieder der Hosenlatz offen:
Received: from ds00000199.customer-net.de (ds00000199.customer-net.de
[62.116.166.199])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id B1AEA78A1419
for xxxxx; Thu, 10 Sep 2009 16:13:28 +0200 (CEST)
Received: from ds00000199.customer-net.de (localhost [127.0.0.1])
by ds00000199.customer-net.de (8.13.4/8.13.4/Debian-3sarge3) with ESMTP
id n8ABQdIw011128
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
for xxxxx; Thu, 10 Sep 2009 13:26:39 +0200
Received: (from www-data [at] localhost)
by ds00000199.customer-net.de (8.13.4/8.13.4/Submit) id n8ABQdRE011125;
Thu, 10 Sep 2009 13:26:39 +0200
ubnbkobi [at] gmail.com
workkoffi [at] sify.com
www-data [at] ds00000199.customer-net.de
Received: from ardweb01.ardit.lv (mail.ardit.lv [62.85.27.11])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 343DD78A1429
for xxxxx; Fri, 11 Sep 2009 10:50:14 +0200 (CEST)
Received: from User (unknown [82.128.33.2])
by ardweb01.ardit.lv (Postfix) with ESMTP id 05A9083B5F8;
Thu, 10 Sep 2009 00:23:20 +0300 (EEST)
IP: 82.128.33.2 ---> Multilinks Telecommunications Limited, Nigeria
united_nation1215 [at] yahoo.co.jp
united_nation1217 [at] yahoo.co.jp
Muguphon: 1-772 778 6138 ---> Bellsouth Telecom Inc Dba Southern Bell Tel
Mugufax: 1-772 778 6091 ---> Bellsouth Telecom Inc Dba Southern Bell Tel
Received: from mail.millenniumforum.co.uk (mail.millenniumforum.co.uk
[81.137.52.9])
by xxxxx (Postfix) with ESMTP id EFC21789783D
for xxxxx; Sat, 12 Sep 2009 02:02:26 +0200 (CEST)
Received: from User ([82.128.32.64]) by mail.millenniumforum.co.uk with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 12 Sep 2009 00:51:14 +0100
IP: 82.128.32.64 ---> Multilinks Telecommunications Limited, Nigeria
mawunxx007 [at] yahoo.com.hk
bobcooks6597 [at] yahoo.com.hk
Muguphon: +44-704-570-4369 ---> Open Telecom International Ltd., UK
Received: from apsem1.atlanta.k12.ga.us (mail2.atlanta.k12.ga.us
[207.203.164.19])
by xxxxx (Postfix) with ESMTP id CFF7F789A7B5
for xxxxx; Sat, 12 Sep 2009 13:21:28 +0200 (CEST)
cpope [at] atlanta.k12.ga.us
bryan.green1 [at] live.com
der Dauer-Mugu:
Received: from n21.bullet.mail.ukl.yahoo.com
(n21.bullet.mail.ukl.yahoo.com [87.248.110.138])
by xxxxx (Postfix) with SMTP id 0504478A13F0
for xxxxx; Sat, 12 Sep 2009 14:33:04 +0200 (CEST)
Received: from [217.146.182.180] by n21.bullet.mail.ukl.yahoo.com with
NNFMP; 12 Sep 2009 12:33:04 -0000
Received: from [87.248.110.111] by t6.bullet.ukl.yahoo.com with NNFMP;
12 Sep 2009 12:33:04 -0000
Received: from [127.0.0.1] by omp216.mail.ukl.yahoo.com with NNFMP; 12
Sep 2009 12:33:04 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 825329.92240.bm [at] omp216.mail.ukl.yahoo.com
Received: (qmail 78306 invoked by uid 60001); 12 Sep 2009 12:33:01 -0000
Received: from [41.220.75.3] by web87005.mail.ird.yahoo.com via HTTP;
Sat, 12 Sep 2009 12:33:00 GMT
IP: 41.220.75.3 ---> MTN Nigeria
lorenzo099 [at] btinternet.com
atoion_8771 [at] yahoo.co.jp
Muguphon: +44-701-118-3680 ---> PNC Telecom Services Limited, UK
Received: from mail.sumiden-zs.com (unknown [59.33.121.42])
by xxxxx (Postfix) with ESMTP id 08F13789A99C
for xxxxx; Sat, 12 Sep 2009 16:51:44 +0200 (CEST)
Received: from User ([82.128.33.107]) by mail.sumiden-zs.com with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 12 Sep 2009 22:32:55 +0800
IP: 82.128.33.107 ---> Multilinks Telecommunications Limited, Nigeria
michgary3 [at] gmail.com
michgary3 [at] gmail.com
der Dauer-Mugu via gecracktem Squirrel-Mail:
Received: from webmail1.one.com (webmail1.b-one.net [195.47.247.29])
by xxxxx (Postfix) with ESMTP id 15C7778019BA
for xxxxx; Sat, 12 Sep 2009 19:50:18 +0200 (CEST)
Received: from webmail01.one.com (localhost [127.0.0.1])
by webmail1.one.com (Postfix) with ESMTP id 7BE437B4CC7F;
Sat, 12 Sep 2009 19:47:03 +0200 (CEST)
Received: from 212.116.219.112 (proxying for 41.220.75.3)
(SquirrelMail authenticated user renrik [at] renrik.dk)
by webmail01.one.com with HTTP;
Sat, 12 Sep 2009 19:47:03 +0200
IP: 41.220.75.3 ---> MTN Nigeria
renrik [at] renrik.dk
mrbenham.cole [at] msn.com
die Madrid-Konnektion:
Received: from loteria (mx.loteriadecordoba.com.ar [200.123.130.145])
by spammotel.com (Postfix) with ESMTP id E0D5D7D6739
for xxxxx; Sat, 12 Sep 2009 20:47:17 -0400 (EDT)
Received: from User ([88.0.71.138])
by loteriadecordoba.com.ar ([172.16.0.16])
with SMTP (MDaemon.PRO.v6.5.1.R)
for xxxxx; Sat, 12 Sep 2009 16:14:21 -0300
IP: 88.0.71.138 ---> Telefonica de Espana SAU
barrister.teddywilliams2009 [at] gmail.com
barrister_teddychambers [at] rocketmail.com
Muguphon: +34-658-654-308 ---> France Telecom Espana
Mugufax: +34911414351 ---> Jazz Telecom, S.a.u.
wieder ein gecrackter Uni-Account:
Received: from jaguar.mail.utk.edu (jaguar.mail.utk.edu [160.36.0.84])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C2A11789B88B
for xxxxx; Sun, 13 Sep 2009 00:11:13 +0200 (CEST)
Received: from User ([82.128.82.127])
(authenticated bits=0)
by jaguar.mail.utk.edu (8.13.6/8.13.4) with ESMTP id n8CM8Rj7017362;
Sat, 12 Sep 2009 18:08:30 -0400
IP: 82.128.82.127 ---> Multilinks Telecommunications Limited, Nigeria
Received: from puma.mail.utk.edu (puma.mail.utk.edu [160.36.178.106])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 41215789B25C
for xxxxx; Sun, 13 Sep 2009 01:04:00 +0200 (CEST)
Received: from User (58.228.211.41.client58.directonpc.net
[41.211.228.58] (may be forged))
(authenticated bits=0)
by puma.mail.utk.edu (8.13.6/8.13.4) with ESMTP id n8CMxIwo030802;
Sat, 12 Sep 2009 18:59:29 -0400
IP: 41.211.228.58 ---> Direct-on-PC Limited, Nigeria
cpshire [at] gmail.com
cpshire11 [at] gmail.com
aderemer [at] utk.edu
Received: from omr17.networksolutionsemail.com
(omr17.networksolutionsemail.com [205.178.146.67])
by xxxxx (Postfix) with ESMTP id 65EF4789B63F
for xxxxx; Sun, 13 Sep 2009 10:02:11 +0200 (CEST)
Received: from mail.networksolutionsemail.com
(ns-omr17.mgt.hosting.dc2.netsol.com [10.49.6.80])
by omr17.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
n8D7fe4K018304
for xxxxx; Sun, 13 Sep 2009 03:41:40 -0400
Message-Id: <200909130741.n8D7fe4K018304 [at] omr17.networksolutionsemail.com>
Received: (qmail 4754 invoked by uid 78); 13 Sep 2009 07:41:39 -0000
Received: from unknown (HELO User)
(makemoni1 [at] willyg-gardens.net@196.207.234.226)
by ns-omr17.lb.hosting.dc2.netsol.com with SMTP; 13 Sep 2009 07:41:39
-0000
IP: 196.207.234.226 ---> SONATELNET, SN
garrettkg4 [at] sify.com
drkgarett [at] sify.com
makemoni1 [at] willyg-gardens.net
Muguphon: +44-703 185 5725 ---> Magrathea Telecommunications Limited, UK
Tja, und hier kriegt ein Möchtegern-Admin mal wieder seine Kiste nicht dicht:
Received: from mailout08.t-online.de (mailout08.t-online.de [194.25.134.20])
by xxxxx (Postfix) with ESMTP id CC17478A13BA
for xxxxx; Sun, 13 Sep 2009 16:41:01 +0200 (CEST)
Received: from fwd02.aul.t-online.de
by mailout08.t-online.de with smtp
id 1MmeWz-0004up-02; Sun, 13 Sep 2009 04:09:33 +0200
Received: from User
(SOU5IMZpot+d2MCIyUyRS1rlrJNVs1wS9KrFZWWnrd-DebAbfdteVS2eqj8ltDH1ifpoD3gAIz@[82.128.71.98])
by fwd02.t-online.de
with esmtp id 1MmeKQ-2HZA4e0; Sun, 13 Sep 2009 03:56:34 +0200
IP: 82.128.71.98 ---> Multilinks Telecommunications Limited, Nigeria
m.fbiugov [at] sify.com
admin [at] wf026581x.homepage.t-online.de
und wieder mal gecracktes SquirrelMail:
Received: from mail.hrline.ro (mail.hrline.ro [195.225.40.8])
by spammotel.com (Postfix) with ESMTP id 24F497B55B6
for xxxxx; Sun, 13 Sep 2009 09:20:40 -0400 (EDT)
Received: from mail.hrline.ro (mail.hrline.ro [127.0.0.1])
by mail.hrline.ro (Postfix) with ESMTP id CB4FD179C5FE;
Sun, 13 Sep 2009 12:51:56 +0300 (EEST)
Received: from 64.255.180.66 (proxying for 41.217.2.8)
(SquirrelMail authenticated user tradepiramis [at] hrline.ro)
by mail.hrline.ro with HTTP;
Sun, 13 Sep 2009 12:51:56 +0300 (EEST)
IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.
tradepiramis [at] hrline.ro
volkswagenpromotion [at] yandex.ru
Und die Moral von der Geschicht': die IPs von MTN Nigeria, Multilinks, Zoom Nigeria, Direct-on-PC Limited sollten eigentlich in jedem gut gepflegtem Filter verrotten, bis die Hölle zufriert. Denn diese 'Provider' sind entweder inkompetent bis zum es-geht-nicht-mehr oder anscheinend fest in der Hand krimineller Banden. Mich wundert, dass denen noch irgendein ISP überhaupt Peering anbietet...
- kjz
Baldrian
13.09.2009, 21:38
Passt das auch hierher?
Hier stimmt nicht mal meine eMail-Adresse im Header.
Ich hoffe, ich habe alles rausgelöscht, was raus gehört. ;)
Received: from [194.25.134.84] (helo=mailout09.t-online.de)
by mx26.web.de with esmtp (WEB.DE 4.110 #314)
id 1MmrwS-0007NX-00; Sun, 13 Sep 2009 18:28:44 +0200
Received: from fwd02.aul.t-online.de
by mailout09.t-online.de with smtp
id 1Mmo3a-0004Ir-00; Sun, 13 Sep 2009 14:19:50 +0200
Received: from User (r3VaNvZbwtbdVIrlI-pNHC1tjjskrRAfPbOA9+qXrYjTFZC1HJbv47WmcvYj2EpyT1k1iwDZOg [ at ] [41.184.50.118]) by fwd02.t-online.de
with esmtp id 1MmnXf-0MG8Su0; Sun, 13 Sep 2009 13:46:51 +0200
Reply-To: <ateketom56 [ at ] gmail.com>
From: "Ateke Tom" <admin [ at ] w8cq0y2b6.homepage.t-online.de>
Subject: Private Memo
Date: Sun, 13 Sep 2009 12:44:27 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Message-ID: <1MmnXf-0MG8Su0 [ at ] fwd02.t-online.de>
X-ID: r3VaNvZbwtbdVIrlI-pNHC1tjjskrRAfPbOA9+qXrYjTFZC1HJbv47WmcvYj2EpyT1k1iwDZOg
X-TOI-MSGID: 11f93187-e444-490d-a00a-6de4886687d0
Return-Path: admin [ at ] w8cq0y2b6.homepage.t-online.de
Private Memo
Cry for Help
My name is Ateke Tom, I am in charge of Niger Delta Vigilante Force (NDVP). The present government of Alhaji Umaru Musa Yar, Adua has just granted us an amnesty to stop fighting and embrace peace with promises to rehabilitate and better our lives. We have agreed to lay down our arms under constructive negotiations with all the stalk holders of the government of Nigeria. We suspect fowl play due to the insincerity in governance and also because of the greed of politicians seeking for political positions without considering the plight of the commoners in our society. I have evidence to proof my claims through publications on the Nigeria news papers which I will educate you on how to log in and read by yourself in case if you doubt my statements and proposal.Niger deltas over the years have suffered humiliations, incarcerations in the hands of the government of Nigeria, despite the fact that %80 PERCENT of Nigeria oil emancipates from our region yet we have nothing to show for it rather government kills,
Finally, we had a joint meeting with some key members of different militants' camps to search for a reliable and a trustworthy foreigner who will assist us keep the sum of $50.5m dollars into his or her bank account, we generated these funds from sells of oil blocks in our region and the funds was deposited into a private security fault owned by expatriates that works with Shell Group of companies. We got your email through the Nigeria chambers of commerce, although we don't know you in person but we have a lawyer who will assist you with the procedure of releasing the funds to you as our offshore business partner, sharing terms will be discussed between you and the lawyer, I will provide his contact one I receive your positive response. Please keep this as a secret to avoid lapses, is between you and us. We will soon leave the creek to observe the amnesty after due consultations so your earliest response will help us conclude as soon as possible.
Thanks for your understanding
Alhaji Ateke Tom
Der Name ist dieses mal neu, aber das Märchen ist das gleiche.
50 Milliönchen sind das jetzt schon.
Wurde wohl sehr gut angelegt. :clown:
Wieder so ein Möchtegern-Admin:
Received: from mailout07.t-online.de (mailout07.t-online.de [194.25.134.83])
by xxxxx (Postfix) with ESMTP id 2CB9178A138F
for xxxxx; Sun, 13 Sep 2009 23:22:18 +0200 (CEST)
Received: from fwd01.aul.t-online.de
by mailout07.t-online.de with smtp
id 1Mmj7e-0007qX-01; Sun, 13 Sep 2009 09:03:42 +0200
Received: from User
(S+Zq6sZVotX++V+4zUb2jEK9CzQO7+O4blEa1cWH6mIj5zEZ7gkQReTw+OqThw0Fh6eNPBqEOI@[82.128.71.245])
by fwd01.t-online.de
with esmtp id 1MmiYe-0dYI9g0; Sun, 13 Sep 2009 08:27:32 +0200
IP: 82.128.71.245 ---> Multilinks Telecommunications Limited, Nigeria
admin [at] w8n6ab53p.homepage.t-online.de
mrlouisgoodman55 [at] gmail.com
Muguphon: +44-703-195-4050 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44-700-580-1043 ---> PNC Telecom Services Limited, UK
Received: from zimbra.ministeriodecultura.gov.ec (unknown [201.219.3.117])
by xxxxx (Postfix) with ESMTP id 32D29789C2B2
for xxxxx; Sun, 13 Sep 2009 21:29:42 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by zimbra.ministeriodecultura.gov.ec (Postfix) with ESMTP id 7497B754388;
Sun, 13 Sep 2009 13:11:50 -0500 (ECT)
X-Virus-Scanned: amavisd-new at ministeriodecultura.gov.ec
Received: from zimbra.ministeriodecultura.gov.ec ([127.0.0.1])
by localhost (zimbra.ministeriodecultura.gov.ec [127.0.0.1])
(amavisd-new, port 10024)
with ESMTP id Xgd23uebstyF; Sun, 13 Sep 2009 13:11:50 -0500 (ECT)
Received: from zimbra.ministeriodecultura.gov.ec
(zimbra.ministeriodecultura.gov.ec [10.80.6.150])
by zimbra.ministeriodecultura.gov.ec (Postfix) with ESMTP id 56EC6754301;
Sun, 13 Sep 2009 13:09:40 -0500 (ECT)
X-Originating-IP: [196.1.177.115] ---> Nigerian Telecommunications Ltd.
informacion [at] ministeriodecultura.gov.ec
johnson_omohatitoee [at] hotmail.com
Received: from mail.tunyi.com.tw (mail.tunyi.com.tw [60.251.195.37])
by xxxxx (Postfix) with ESMTP id C031A78A14DD
for xxxxx; Mon, 14 Sep 2009 14:36:36 +0200 (CEST)
Received: from mail.tunyi.com.tw (localhost [127.0.0.1])
by mail.tunyi.com.tw (Postfix) with ESMTP id 1BBC0196DAF;
Mon, 14 Sep 2009 20:12:52 +0800 (CST)
Received: from mail.tunyi.com.tw (localhost [127.0.0.1])
by mail.tunyi.com.tw (Postfix) with ESMTP id 5BB45196D03;
Mon, 14 Sep 2009 20:12:51 +0800 (CST)
X-OriginatingIP: 41.221.37.101 (test) ---> SimbaNET, TZ
jerryntaionline2 [at] yahoo.com.hk
jerryntaionlineprivate [at] yahoo.com.hk
Und wieder die Madrid-Konnektion mit der Betreff-Kodierung der Ratware:
Received: from 254.Red-88-22-224.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [88.22.224.254]
by mx0.gmx.net (mx046) with SMTP; 14 Sep 2009 17:08:22 +0200
eullotto [at] aol.com
unisecc [at] aim.com
Phone: +34-656462003 ---> France Telecom Espana
man vergleiche mit 10. 9.:
01: Received: from 30.Red-88-25-45.staticIP.rima-tde.net (EHLO
02: mx4.hotmail.com) [88.25.45.30]
03: by mx0.gmx.net (mx035) with SMTP; 10 Sep 2009 xx:xx:xx +0200
unisecc [at] aim.com
Muguphon: +34-656462003 ---> France Telecom Espana
oder 28.8.:
01: Received: from 207.Red-88-22-229.staticIP.rima-tde.net (EHLO
02: mx4.hotmail.com) [88.22.229.207]
03: by mx0.gmx.net (mx043) with SMTP; 28 Aug 2009 xx:xx:xx +0200
eullotto [at] aol.com
unisecc [at] aim.com
Muguphon: +34-656462003 ---> France Telecom Espana
- kjz
Da hätten wir noch:
Einmal gecracktes SquirrelMail:
Received: from mail.hrline.ro (mail.hrline.ro [195.225.40.8])
by spammotel.com (Postfix) with ESMTP id DED277BE404
for xxxxx; Mon, 14 Sep 2009 05:27:54 -0400 (EDT)
Received: from mail.hrline.ro (mail.hrline.ro [127.0.0.1])
by mail.hrline.ro (Postfix) with ESMTP id 570AB17A1169;
Mon, 14 Sep 2009 08:55:02 +0300 (EEST)
Received: from 41.217.2.8
(SquirrelMail authenticated user tradepiramis [at] hrline.ro)
by mail.hrline.ro with HTTP;
Mon, 14 Sep 2009 08:55:02 +0300 (EEST)
IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.
tradepiramis [at] hrline.ro
vancouverolympicwintergames [at] yahoo.ca
Muguphon: 1-604 -767-5963 ---> Fido Solutions Inc., CA
Received: from rtdata.cn (unknown [61.191.25.42])
by xxxxx (Postfix) with ESMTP id 52C0278940EB
for xxxxx; Tue, 15 Sep 2009 05:30:49 +0200 (CEST)
Received: from User (vfbb207224.4u.com.gh [41.218.207.224])
by rtdata.cn (Postfix) with ESMTP id CF3193AB20;
Mon, 14 Sep 2009 22:32:35 +0800 (CST)
IP: 41.218.207.224 ---> Ghana Telecom ADSL
john55eng [at] sify.com
johnen22 [at] sify.com
die Madrid-Konnektion:
Received: from outgoing.artisan.com.cn (unknown [218.4.54.101])
by spammotel.com (Postfix) with ESMTP id 385AB78ED6B
for xxxxx; Tue, 15 Sep 2009 05:12:11 -0400 (EDT)
Message-Id: <7q4qi2$79kes [at] outgoing.artisan.com.cn>
X-IronPort-AV: E=Sophos;i="4.44,388,1249228800";
d="scan'208";a="7655900"
Received: from 237.16.222.87.dynamic.jazztel.es (HELO User)
([87.222.16.237])
by outgoing.artisan.com.cn with ESMTP; 15 Sep 2009 17:11:34 +0800
IP: 87.222.16.237 ---> Jazztel, ES
williams.chambersesq [at] gmail.com
Muguphon: +34-658-654-308 ---> France Telecom Espana
Mugufax: +34911414351 ---> Jazz Telecom, S.a.u.
Und wieder mal die offene Dreckskiste in Vietnam:
Received: from HoangNgoc.hoangngoc-resort.com (mail.hoangngoc-resort.com
[118.69.206.149])
by xxxxx (Postfix) with ESMTP id AB5CC78A14FE
for xxxxx; Wed, 16 Sep 2009 08:49:53 +0200 (CEST)
Received: from User ([41.211.226.119]) by HoangNgoc.hoangngoc-resort.com
with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 16 Sep 2009 13:34:15 +0700
IP: 41.211.226.119 ---> Direct-on-PC Limited, Nigeria
martha.manili [at] sify.com
mrsmartha.manili [at] gmail.com
hoangngoc [at] hoangngoc-resort.com
info [at] hoangngoc-resort.com
vunc [at] fpt.com.vn
Und wieder die Madrid-Konnektion:
Received: from www.upcom.it (mail.upcom.it [151.11.181.2])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 362D478A1432
for xxxxx; Wed, 16 Sep 2009 10:25:24 +0200 (CEST)
Received: from User ([77.211.67.215])
(authenticated bits=0)
by www.upcom.it (8.13.1/8.13.1) with ESMTP id n8G66t5f030004;
Wed, 16 Sep 2009 08:06:57 +0200
IP: 77.211.67.215 ---> VODAFONE_SPAIN_NETWORK
barr.marcusandreen [at] live.co.uk
barr.marcus_andreenesq [at] yahoo.com.hk
Received: from winmail.marketroot.com.my (mail.marketroot.com
[210.48.144.42])
by xxxxx (Postfix) with SMTP id A522E78A158E
for xxxxx; Wed, 16 Sep 2009 11:38:45 +0200 (CEST)
Received: from User ([82.128.23.236])
(envelope-sender <diplomaticdeliveryng4 [at] aliceadsl.fr>)
by 10.65.7.42 with ESMTP
for <kzgxgdeswooi [at] justice.co>; Wed, 16 Sep 2009 03:02:20 +0800
IP: 82.128.23.236 ---> Multilinks Telecommunications Limited, Nigeria
diplomaticdeliveryng4 [at] aliceadsl.fr
diplomaticdeliveryng [at] aliceadsl.fr
- kjz
Bißchen Müll aus meinem Postfach:
- - - -
X-Envelope-From: <paul [at] shqp.net.cn>
X-Envelope-To: <ich>
X-Delivery-Time: 1251742601
X-UID: 17694
Return-Path: <paul [at] shqp.net.cn>
X-RZG-FWD-BY: ich
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (bertie mi36) (RZmta 21.0)
for <ich>; Mon, 31 Aug 2009 20:16:41 +0200 (MEST)
To: ich
Message-ID: <A04461l7VIA78G.RZmta [at] mailin.rzone.de>
X-RZG-CLASS-ID: mi
Received: from mail3.carrenza.com (mail.kja.co.uk [195.225.219.133])
by mailin.webmailer.de (bertie mi36) (RZmta 21.0)
with ESMTP id A04461l7VIA78G for <ich>;
Mon, 31 Aug 2009 20:16:41 +0200 (MEST)
Received: from User ([196.3.183.72])
by mail3.carrenza.com (Merak 7.6.4) with ASMTP id XNT86372;
Mon, 31 Aug 2009 19:15:41 +0100
Reply-To: <simmons.john15 [at] yahoo.com>
From: "JOHN SIMMONS"<paul [at] shqp.net.cn>
Subject: Attn Sir/Madam
Date: Mon, 31 Aug 2009 19:15:24 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Gekürzter Inhalt:
Metro Plaza, Plot 991/992
Zakari Maimalari Street
Cadastral Zone AO,
Central Business District, Abuja.
(...)
$2,500,000.00 USD each.
(...)
Mr John Simmons
- - - -
X-Envelope-From: <info [at] zenithbank.org>
X-Envelope-To: <ich>
X-Delivery-Time: 1252887978
X-UID: 17825
Return-Path: <info [at] zenithbank.org>
X-RZG-FWD-BY: ich
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (lemon mi29) (RZmta 21.0)
for <ich>; Mon, 14 Sep 2009 02:26:18 +0200 (MEST)
To: ich
X-RZG-CLASS-ID: mi
Received: from chef.broadway.net.au ([203.20.88.3])
by mailin.webmailer.de (lemon mi29) (RZmta 21.0)
with ESMTP id x01442l8E0AAsW for <ich>;
Mon, 14 Sep 2009 02:26:16 +0200 (MEST)
Received: from broadway.net.au (chef.broadway.net.au [127.0.0.1])
by chef.broadway.net.au (8.13.7/8.13.7) with ESMTP id n8DMjoq1001155;
Mon, 14 Sep 2009 08:45:50 +1000
From: "Mr. Boye Oni" <info [at] zenithbank.org>
Reply-To: boyeoni [at] live.com
Subject: Important Notification & Read carefully.
Date: Mon, 14 Sep 2009 08:15:50 +0930
Message-Id: <20090913223814.M44245 [at] zenithbank.org>
X-Mailer: Open WebMail 2.51 20050228
X-OriginatingIP: 196.1.177.66 (rosemary)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
Gekürzter Inhalt:
We are writing to know if it's true that you are DEAD? Because we received a
notification from one MR. GERSHON SHAPIRO of USA stating that you are DEAD and
that you have giving him the right to claim your funds. He stated you died on
a CAR accident.
(...)
Name:====
Address:====
City:====
State:====
Zip Code:====
Phone Number:====
(...)
$ 2.500,000.00
(...)
Receiver's Name: Boye Oni
Location: Lagos State, Nigeria.
Text Question: blue
Text Answer: Red
Und die wollten gleich eine "Clearance Fee" von $50 per WU haben...
Naja, nächster...
- - - -
Hier ist wohl ein Romantiker am Werke:
X-Envelope-From: <0-kv [at] dub2-56k-039.tpgi.com.au>
X-Envelope-To: <ich>
X-Delivery-Time: 1252896696
X-UID: 17826
Return-Path: <0-kv [at] dub2-56k-039.tpgi.com.au>
X-RZG-FWD-BY: ich
Received: from RZmta-intern (client mail forwarder)
by mailin.webmailer.de (plinge mi36) (RZmta 21.0)
for <ich>; Mon, 14 Sep 2009 04:51:36 +0200 (MEST)
X-RZG-CLASS-ID: mi
Received: from dub2-56k-039.tpgi.com.au ([203.29.139.39])
by mailin.webmailer.de (plinge mi36) (RZmta 21.0)
with ESMTP id A0041fl8E2aN8F for <ich>;
Mon, 14 Sep 2009 04:41:48 +0200 (MEST)
Received: from [244.224.245.219] (account 0-kv [at] dub2-56k-039.tpgi.com.au HELO cmcfmprcmlhtype.gqijzqucj.va)
by dub2-56k-039.tpgi.com.au (CommuniGate Pro SMTP 5.2.3)
with ESMTPA id 901122223 for ich; Mon, 14 Sep 2009 12:41:48 +1000
Message-ID: <1245949073.HK3B9NTM477942 [at] ivsbfhpcbojxi.wurgetqfgoc.su>
From: "Isiah Harmon" <0-kv [at] dub2-56k-039.tpgi.com.au>
To: <ich>
Subject: Do you want to get acquainted?
Date: Mon, 14 Sep 2009 12:41:48 +1000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0006_01CA3538.B9FDA910"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 4.71.2730.2
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.2730.2
Hello! My name is Antonina. I want to get acquainted with you. I'm 27 years old. And I am lonely, and seeking long-term relations. I wish to find my second half which I have not met before. May be you? I hope, that you will answer me and it will be the beginning of our relations. I send you a picture, that you see who I'm. More about myself I with pleasure will write you, if you answer me. I will be waiting for your answer. I hope, that you will not keep me waiting for a long time.
Please answer only to my personal e-mail: eremantonina82 [at] yahoo.com
- - - -
Jau, und das war's auch schon (?) wieder...
Gruß,
- syntax
Auch hier ist wieder Mugu-Time:
gecrackter Uni-Account:
Received: from remote.pba.edu (remote.pba.edu [151.185.60.250])
by xxxxx (Postfix) with SMTP id 3275078A1589
for xxxxx; Thu, 17 Sep 2009 18:35:32 +0200 (CEST)
jack.parkinson34 [at] live.com
BRETT_COOK [at] pba.edu
Nr. 1:
Received: from hm855.locaweb.com.br (hm855-2.locaweb.com.br [201.76.49.5])
by xxxxx (Postfix) with ESMTP id 9594D78940EC
for xxxxx; Fri, 18 Sep 2009 19:37:55 +0200 (CEST)
Received: from hm1587 (hm1587.locaweb.com.br [201.76.59.5])
by hm855.locaweb.com.br (Postfix) with SMTP id D39B967432F
for xxxxx; Fri, 18 Sep 2009 14:23:58 -0300 (BRT)
drtbullard [at] gmail.com
Muguphon: +4470-240-53529 ---> Magrathea Telecommunications Limited, UK
die Madrid-Konnektion via gecracktem Server:
Received: from s15333703.onlinehome-server.info
(s15333703.onlinehome-server.info [87.106.255.140])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx with ESMTP id 36F337825738
for xxxxx; Sat, 19 Sep 2009 04:33:07 +0200 (CEST)
Received: (qmail 7768 invoked from network); 17 Sep 2009 10:19:41 +0100
Received: from unknown (HELO User) (77.211.67.215)
by s15333703.onlinehome-server.info with SMTP; 17 Sep 2009 10:19:41
+0100
IP: 77.211.67.215 ---> VODAFONE_SPAIN_NETWORK
barr.marcusandreen2009 [at] livemail.tw
barr.marcus_andreenesq [at] yahoo.com.hk
Received: from mx4.hotmail.com ([68.68.34.137])
by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis)
id 0MKpV6-1MovBP29hB-000k8u for xxxxx; Sat, 19 Sep 2009
10:22:28 +0200
IP: 68.68.34.137 ---> Reliablehosting.com, CA
bar.ianfisher.lee [at] live.com
Muguphon: +447536345725 ---> Orange, UK
Nr. 2:
Received: from hm855.locaweb.com.br (hm855-2.locaweb.com.br [201.76.49.5])
by xxxxx (Postfix) with ESMTP id A869378982C7
for xxxxx; Sat, 19 Sep 2009 14:39:35 +0200 (CEST)
Received: from hm1587 (hm1587.locaweb.com.br [201.76.59.5])
by hm855.locaweb.com.br (Postfix) with SMTP id 57693172846
for xxxxx; Sat, 19 Sep 2009 09:29:55 -0300 (BRT)
drtbullard1 [at] sify.com
Den Rest kennen wir ja schon...
Received: from smtp827.mail.ird.yahoo.com (smtp827.mail.ird.yahoo.com
[217.146.189.241])
by xxxxx (Postfix) with SMTP id 79562782573A
for xxxxx; Sat, 19 Sep 2009 18:20:21 +0200 (CEST)
Received: (qmail 30128 invoked from network); 19 Sep 2009 16:20:20 -0000
Received: from unknown (HELO User) (cust_serv [at] 82.128.38.80 with login)
by smtp827.mail.ird.yahoo.com with SMTP; 19 Sep 2009 16:19:29 -0000
IP: 82.128.38.80 ---> Multilinks Telecommunications Limited, Nigeria
l.jack [at] sify.com
cust_serv [at] 82.128.38.80
Muguphon: +44-704-570-4659 ---> Open Telecom International Ltd., UK
Mugufax: +44-844-774-3834 ---> Magrathea Telecommunications Limited, UK
Received: from web34406.mail.mud.yahoo.com (web34406.mail.mud.yahoo.com
[66.163.178.155])
by xxxxx (Postfix) with SMTP id 50480789827C
for xxxxx; Sun, 20 Sep 2009 02:44:54 +0200 (CEST)
Received: (qmail 87912 invoked by uid 60001); 20 Sep 2009 00:44:34 -0000
Message-ID: <523240.87702.qm [at] web34406.mail.mud.yahoo.com>
Received: from [82.128.32.233] by web34406.mail.mud.yahoo.com via HTTP;
Sat, 19 Sep 2009 17:44:34 PDT
IP: 82.128.32.233 ---> Multilinks Telecommunications Limited, Nigeria
mrsvictoriaballi9 [at] gmail.com
james_cole_lawfirm [at] mail2ohio.com
Muguphon: +44 702-405-2752 ---> Magrathea Telecommunications Limited, UK
Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.27])
by xxxxx (Postfix) with ESMTP id 68472789831F
for xxxxx; Sun, 20 Sep 2009 10:50:22 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2008.orange.fr (SMTP Server) with ESMTP id 145CF1C00082;
Sun, 20 Sep 2009 10:50:22 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2008.orange.fr (SMTP Server) with ESMTP id ED17F1C000A4;
Sun, 20 Sep 2009 10:50:21 +0200 (CEST)
Received: from User (LMontsouris-156-26-12-153.w80-14.abo.wanadoo.fr
[80.14.59.153])
by mwinf2008.orange.fr (SMTP Server) with SMTP id 42B0B1C00082;
Sun, 20 Sep 2009 10:50:15 +0200 (CEST)
valleyloanlender [at] gmail.com
gecrackter Account:
Received: from omr2.bezeqint.net (omr2.bezeqint.net [192.115.104.10])
by xxxxx (Postfix) with ESMTP id 6709A78810D6
for xxxxx; Sun, 20 Sep 2009 18:04:44 +0200 (CEST)
Received: from mr8.bezeqint.net (mr8.bezeqint.net [192.115.104.78])
by omr2.bezeqint.net (Bezeq International SMTP out Mail Server) with
ESMTP id 5EA9917E1;
Sun, 20 Sep 2009 17:48:50 +0300 (IDT)
Received: from 41.214.120.223 (EHLO User) ([41.214.120.223])
by mr8.bezeqint.net (MOS 3.10.3-GA FastPath queued)
with ESMTP id PDN35824 (AUTH avohana [at] bezeqint.net);
Sun, 20 Sep 2009 17:51:10 +0300 (IDT)
IP: 41.214.120.223 ---> SONATEL, SN
avohana [at] bezeqint.net
petersbarry02 [at] gmail.com
Möchtegern-Admin mit gecracktem Server:
Received: from mailout11.t-online.de (mailout11.t-online.de [194.25.134.85])
by xxxxx (Postfix) with ESMTP id C0DFD7825738
for xxxxx; Sun, 20 Sep 2009 15:55:28 +0200 (CEST)
Received: from fwd05.aul.t-online.de
by mailout11.t-online.de with smtp
id 1MpMqH-00035T-02; Sun, 20 Sep 2009 15:52:41 +0200
Received: from User
(Z4fva6Z-gt5IH4cKfOdcHG+7+IPGtO4UiTC2Bx8+-BjrTTWD0WrIeaCQaacoTsFNhWgtv8w040@[202.67.153.17])
by fwd05.t-online.de
with esmtp id 1MpMBF-0Gaz0i0; Sun, 20 Sep 2009 15:10:17 +0200
IP: 202.67.153.17 ---> ip153017.hknet.com
pp16 [at] w767js87n.homepage.t-online.de
cladexter02 [at] sify.com
- kjz
Nochmal Nachschub:
Received: from evolutiondigital.net (evolutiondigital.net [216.226.17.208])
by xxxxx (Postfix) with ESMTP id EB1E678A14FD
for xxxxx; Wed, 16 Sep 2009 22:43:39 +0200 (CEST)
Received: from User [72.252.215.30] by evolutiondigital.net with ESMTP
(SMTPD32-8.05) id A4596AF0100; Thu, 10 Sep 2009 22:30:33 -0500
pedro.mat2 [at] sify.com
Muguphon: +34-615-711-231 ---> France Telecom Espana/Orange
der Dauer-Mugu:
Received: from eyou.net (mail.qdu.edu.cn [211.64.175.61])
by xxxxx (Postfix) with SMTP id 171CF78A1402
for xxxxx; Wed, 16 Sep 2009 23:31:43 +0200 (CEST)
X-EYOU-SPAMVALUE:0
X-EYOU-DEALDRC:
Received: (eyou anti_spam gateway 3.0); Thu, 17 Sep 2009 03:52:48 +0800
Message-ID: <453130768.31796 [at] eyou.net>
X-EYOUMAIL-SMTPAUTH: @
Received: from 83.138.172.76 by 172.20.0.18 with SMTP; Thu, 17 Sep 2009
03:52:46 +0800
Received: from mtnngprs.com (trwKDgKdhT [at] mtnngprs.com [41.220.75.3])
by chromium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Wed, 16 Sep 2009 18:08:52 +0100
(BST)
X-Originating-IP: [41.220.75.3] ---> MTN, Nigeria
atoion_8771 [at] yahoo.co.jp
lorenzo_mr.antonio [at] yahoo.com.hk
Muguphon: +44-701-118-3680 ---> PNC Telecom Services Limited, UK
Received: from webmail.logical.net (webmail.logical.net [209.23.116.200])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4DAF078A157D
for xxxxx; Thu, 17 Sep 2009 08:31:25 +0200 (CEST)
Received: from localhost (webmail.logical.net [127.0.0.1])
by webmail.logical.net (8.13.8/8.13.8) with ESMTP id n8GNRSxh031498;
Wed, 16 Sep 2009 19:27:29 -0400
Received: from 41.217.2.8 (41.217.2.8 [41.217.2.8]) by webmail.logical.net
(Horde Framework) with HTTP; Wed, 16 Sep 2009 19:27:28 -0400
IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.
application.process [at] live.co.uk
johnson.parker [at] live.co.uk
gecrackter Uni-Account:
Received: from fw.marygrove.edu (fw.marygrove.edu [207.74.192.1])
by xxxxx (Postfix) with ESMTP id ED6A478A13C9
for xxxxx; Thu, 17 Sep 2009 06:15:35 +0200 (CEST)
michealleyden.chambers [at] yahoo.com.hk
jgold [at] marygrove.edu
die Madrid-Konnektion via Amsterdam:
Received: from cpsmtpb-ews06.kpnxchange.com
(cpsmtpb-ews06.kpnxchange.com [213.75.39.9])
by xxxxx (Postfix) with ESMTP id 5328F7892F21
for xxxxx; Thu, 17 Sep 2009 06:04:35 +0200 (CEST)
Received: from cpbrm-ews17.kpnxchange.com ([10.94.84.148]) by
cpsmtpb-ews06.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 17 Sep 2009 06:04:35 +0200
Received: from CPSMTPM-EML07.kpnxchange.com ([213.75.39.77]) by
cpbrm-ews17.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 17 Sep 2009 06:04:34 +0200
Received: from localhost ([10.94.77.200]) by
CPSMTPM-EML07.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Thu, 17 Sep 2009 06:04:34 +0200
P.Heijden19 [at] kpnplanet.nl
linksgrupobilbaoclaims [at] yahoo.com.hk
Muguphon: +34-693-572-703 ---> France Telecom Espana/Orange
Mugufax: +1-801-858-5741 ---> Electric Lightwave, Llc Dba Integra Telecom -
Ut/Eli
die Madrid-Konnektion:
Received: from mail.rayhome.com.tw (60-250-76-146.HINET-IP.hinet.net
[60.250.76.146])
by spammotel.com (Postfix) with ESMTPS id CB5977E21E4
for xxxxx; Wed, 16 Sep 2009 07:22:14 -0400 (EDT)
Received: from User (7.17.222.87.dynamic.jazztel.es [87.222.17.7])
(authenticated bits=0)
by mail.rayhome.com.tw (8.12.10/8.12.10) with ESMTP id n8GB8o3b004590;
Wed, 16 Sep 2009 19:08:54 +0800
chambers.esq2009 [at] gmail.com
barrister_teddychambers [at] rocketmail.com
Muguphon: +34-658-654-308 ---> France Telecom Espana/Orange
Mugufax: +34911414351 ---> Jazz Telecom, S.a.u.
Received: from zhengchenggong.cn (unknown [211.156.87.14])
by xxxxx (Postfix) with SMTP id BC2B378A13D4
for xxxxx; Fri, 18 Sep 2009 01:50:21 +0200 (CEST)
Received: from User ([217.30.32.58])
(envelope-sender <info [at] statelottery.com>)
by 211.156.87.14 with ESMTP
for <kyy [at] tpu.ru>; Fri, 18 Sep 2009 01:03:01 +0800
stevereed [at] xpmail.net
Muguphon: +44 (0) 703 599 0525 ---> Open Telecom International Ltd., UK
- kjz
Frische Mugu-Kost:
Nr. 1:
Received: from mail.pronov.com (mail.pronov.com [91.210.116.210])
by xxxxx (Postfix) with ESMTP id 789BE7810DA9
for xxxxx; Mon, 21 Sep 2009 01:52:37 +0200 (CEST)
Received: from User
by mail.pronov.com (Merak 8.0.3) with ASMTP id AHQ88343;
Sun, 20 Sep 2009 05:39:25 +0300
final.payment01 [at] gmail.com
final.payment [at] gmail.com
Received: from n2.bullet.mail.re3.yahoo.com
(n2.bullet.mail.re3.yahoo.com [68.142.237.109])
by xxxxx (Postfix) with SMTP id EA3F878A0EC2
for xxxxx; Tue, 22 Sep 2009 16:42:10 +0200 (CEST)
Received: from [68.142.230.28] by n2.bullet.mail.re3.yahoo.com with
NNFMP; 22 Sep 2009 14:42:10 -0000
Received: from [67.195.9.83] by t1.bullet.re2.yahoo.com with NNFMP; 22
Sep 2009 14:42:10 -0000
Received: from [67.195.9.108] by t3.bullet.mail.gq1.yahoo.com with
NNFMP; 22 Sep 2009 14:42:10 -0000
Received: from [127.0.0.1] by omp112.mail.gq1.yahoo.com with NNFMP; 22
Sep 2009 14:42:10 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 177647.9039.bm [at] omp112.mail.gq1.yahoo.com
Received: (qmail 10087 invoked by uid 60001); 22 Sep 2009 14:42:09 -0000
Received: from [212.183.134.129] by web180515.mail.gq1.yahoo.com via
HTTP; Tue, 22 Sep 2009 07:42:09 PDT
yikwan.4231 [at] yahoo.com.hk
Received: from mail.tlpt.net.cn (unknown [218.22.181.219])
by xxxxx (Postfix) with SMTP id 0512978990EA
for xxxxx; Tue, 22 Sep 2009 23:46:39 +0200 (CEST)
Received: from User ([61.134.60.254])
(envelope-sender <kolbricht [at] helpinghand.com>)
by 218.22.181.219 with ESMTP
for xxxxx; Mon, 21 Sep 2009 21:28:12 +0800
helpinghands232 [at] live.com
Nr. 2:
Received: from mail.itservice.com.pe (mail.itservice.com.pe
[200.31.104.106])
by xxxxx (Postfix) with ESMTP id F39B878982E3
for xxxxx; Wed, 23 Sep 2009 02:40:29 +0200 (CEST)
Received: from User ([41.211.233.152]) by mail.itservice.com.pe with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 22 Sep 2009 18:16:00 -0500
IP: 41.211.233.152 ---> Direct-on-PC Limited, Nigeria
final.payment01 [at] gmail.com
wunion.w780 [at] gmail.com
Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.4])
by xxxxx (Postfix) with ESMTP id 3E1F578982E6
for xxxxx; Wed, 23 Sep 2009 02:39:17 +0200 (CEST)
Received: from user-9c5ffa8225 (unknown [121.121.237.197])
by msfrf2116.sfr.fr (SMTP Server) with ESMTP id A6C8D7000081;
Wed, 23 Sep 2009 02:38:52 +0200 (CEST)
ayong [at] sify.com
aliyong [at] sify.com
Muguphon: +60-166-307-074 ---> DiGi Telecom, MY
Received: from n9.bullet.re3.yahoo.com (n9.bullet.re3.yahoo.com
[68.142.237.94])
by xxxxx (Postfix) with SMTP id 2DC8378A128F
for xxxxx; Wed, 23 Sep 2009 11:45:33 +0200 (CEST)
Received: from [68.142.230.28] by n9.bullet.re3.yahoo.com with NNFMP; 23
Sep 2009 09:45:32 -0000
Received: from [67.195.9.81] by t1.bullet.re2.yahoo.com with NNFMP; 23
Sep 2009 09:45:30 -0000
Received: from [67.195.9.104] by t1.bullet.mail.gq1.yahoo.com with
NNFMP; 23 Sep 2009 09:45:23 -0000
Received: from [127.0.0.1] by omp108.mail.gq1.yahoo.com with NNFMP; 23
Sep 2009 09:45:23 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 932148.29557.bm [at] omp108.mail.gq1.yahoo.com
Received: (qmail 36802 invoked by uid 60001); 23 Sep 2009 09:45:17 -0000
Received: from [41.245.26.202] by web113003.mail.gq1.yahoo.com via HTTP;
Wed, 23 Sep 2009 02:45:17 PDT
IP: 41.245.26.202 ---> dsl-245-26-202.telkomadsl.co.za
henrycheney78 [at] yahoo.co.nz
jole.jole [at] gala.net
Received: from canbo.cn (unknown [218.13.34.138])
by xxxxx (Postfix) with SMTP id 54C58789A12A
for xxxxx; Wed, 23 Sep 2009 15:40:45 +0200 (CEST)
Received: from User ([82.128.34.249])
(envelope-sender <mr.agigoodluck [at] gmail.com>)
by 218.13.34.138 with ESMTP
for <kzharris [at] localnet.com>; Wed, 23 Sep 2009 06:34:58 +0800
IP: 82.128.34.249 ---> Multilinks Telecommunications Limited, Nigeria
mr.agigoodluck [at] gmail.co.za
mr.agigoodluck [at] gmail.com
Muguphon: +234-709-236-7031 ---> Multilinks Telecommunications Ltd., Nigeria
- kjz
Es nimmt nie ein Ende:
Received: from n20.bullet.mail.mud.yahoo.com
(n20.bullet.mail.mud.yahoo.com [68.142.206.147])
by xxxxx (Postfix) with SMTP id E807F782573C
for xxxxx; Mon, 21 Sep 2009 16:52:41 +0200 (CEST)
Received: from [68.142.200.227] by n20.bullet.mail.mud.yahoo.com with
NNFMP; 21 Sep 2009 14:52:40 -0000
Received: from [76.13.13.26] by t8.bullet.mud.yahoo.com with NNFMP; 21
Sep 2009 14:52:40 -0000
Received: from [76.13.10.183] by t3.bullet.mail.ac4.yahoo.com with
NNFMP; 21 Sep 2009 14:52:40 -0000
Received: from [127.0.0.1] by omp124.mail.ac4.yahoo.com with NNFMP; 21
Sep 2009 14:52:40 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 720230.18686.bm [at] omp124.mail.ac4.yahoo.com
Received: (qmail 41826 invoked by uid 60001); 21 Sep 2009 14:21:38 -0000
Received: from [81.91.229.133] by web19003.mail.hk2.yahoo.com via HTTP;
Mon, 21 Sep 2009 22:21:38 HKT
IP: 81.91.229.133 ---> Benin Telecoms SA
echidon91 [at] yahoo.com.hk
Muguphon: +229 96625338 ---> Benin
gecracktes SquirrelMail:
Received: from mail.regionlambayeque.gob.pe
(sede.regionlambayeque.gob.pe [200.60.14.130])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 72B467898240
for xxxxx; Mon, 21 Sep 2009 21:12:39 +0200 (CEST)
Received: from sede.regionlambayeque.gob.pe (localhost [127.0.0.1])
by mail.regionlambayeque.gob.pe (Postfix) with ESMTP id E17464A5E2;
Mon, 21 Sep 2009 11:55:55 -0500 (PET)
Received: from 196.3.183.88
(SquirrelMail authenticated user lluenarchivo)
by sede.regionlambayeque.gob.pe with HTTP;
Mon, 21 Sep 2009 09:55:55 -0700 (MST)
IP: 196.3.183.88 ---> Zoom, Nigeria
lewismore205 [at] yahoo.com.hk
lewismore203 [at] yahoo.com.hk
lluenarchivo [at] regionlambayeque.gob.pe
edwardbobo3 [at] yahoo.com.hk
Muguphon: +22996552667 ---> Benin
Received: from mail.maritimeemployment.com (mail.maritimeemployment.com
[64.251.205.171])
by xxxxx (Postfix) with ESMTP id 4AFD178982E4
for xxxxx; Mon, 21 Sep 2009 21:24:34 +0200 (CEST)
Received: from 82.128.35.71 [82.128.35.71] by
mail.maritimeemployment.com with SMTP;
Mon, 21 Sep 2009 13:57:54 -0500
IP: 82.128.35.71 ---> Multilinks Telecommunications Limited, Nigeria
martinlee_1965 [at] yahoo.co.jp
Received: from mail.gdet.gov.cn (cz.gdet.gov.cn [61.145.114.16])
by xxxxx (Postfix) with ESMTP id 7A28978983BE
for xxxxx; Thu, 24 Sep 2009 17:11:49 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.gdet.gov.cn (tmailer) with ESMTP id 269ABC3EAC6;
Thu, 24 Sep 2009 23:06:51 +0800 (CST)
X-Virus-Scanned: theinterface-new at gdet.gov.cn
Received: from mail.gdet.gov.cn ([127.0.0.1])
by localhost (mail.gdet.gov.cn [127.0.0.1]) (theinterface-new, port 10024)
with ESMTP id Sc-muumJZH-g; Thu, 24 Sep 2009 23:06:47 +0800 (CST)
Received: from User (unknown [82.128.35.114])
by mail.gdet.gov.cn (tmailer) with ESMTP id 2FD07C3EA10;
Thu, 24 Sep 2009 23:05:44 +0800 (CST)
IP: 82.128.35.114 ---> Multilinks Telecommunications Limited, Nigeria
richanderson891 [at] sify.com
richanderson891 [at] yahoo.co.uk
Received: from n68a.bullet.mail.sp1.yahoo.com
(n68a.bullet.mail.sp1.yahoo.com [98.136.45.15])
by xxxxx (Postfix) with SMTP id 492FE789833D
for xxxxx; Thu, 24 Sep 2009 19:36:43 +0200 (CEST)
Received: from [69.147.84.145] by n68.bullet.mail.sp1.yahoo.com with
NNFMP; 24 Sep 2009 17:36:42 -0000
Received: from [69.147.65.167] by t8.bullet.mail.sp1.yahoo.com with
NNFMP; 24 Sep 2009 17:31:03 -0000
Received: from [127.0.0.1] by omp502.mail.sp1.yahoo.com with NNFMP; 24
Sep 2009 17:31:03 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 930072.78560.bm [at] omp502.mail.sp1.yahoo.com
Received: (qmail 84898 invoked by uid 60001); 24 Sep 2009 17:31:03 -0000
Received: from [196.201.74.112] by web1214.biz.mail.gq1.yahoo.com via
HTTP; Thu, 24 Sep 2009 10:31:02 PDT
IP: 196.201.74.112 ---> AVISONET, CI
bcr [at] uunoert.com
caseeebrian [at] yahoo.co.jp
- kjz
Nachschub zum Wochenende:
Auch diese Dreckkiste in Brasilien ist immer noch am Netz:
Received: from hm855.locaweb.com.br (hm855-2.locaweb.com.br [201.76.49.5])
by xxxxx (Postfix) with ESMTP id DFFFB7897809
for xxxxx; Thu, 24 Sep 2009 02:10:40 +0200 (CEST)
Received: from hm1587 (hm1587.locaweb.com.br [201.76.59.5])
by hm855.locaweb.com.br (Postfix) with SMTP id A1E0B677C79
for xxxxx; Wed, 23 Sep 2009 20:56:46 -0300 (BRT)
mrpaulwhite2009 [at] sify.com
Muguphon: +234-7028561075 ---> Starcomms PLC, Nigeria
Received: from vsmtp6.jaring.my (vsmtp6.jaring.my [192.228.250.86])
by xxxxx (Postfix) with ESMTP id 2DC0478990F9
for xxxxx; Thu, 24 Sep 2009 07:47:32 +0200 (CEST)
Received: from localhost (localhost.jaring.my [127.0.0.1])
by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP id n8O5fHxQ003548;
Thu, 24 Sep 2009 13:41:17 +0800 (MYT)
(envelope-from adbank_donald [at] indiatimes.com)
X-Virus-Scanned: by JARING Malware Filters (jaring.my)
Received: from vsmtp6.jaring.my ([127.0.0.1])
by localhost (vsmtp6.jaring.my [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id 7gw-cLc3v1rw; Thu, 24 Sep 2009 13:41:17 +0800 (MYT)
Received: from User (ml82.128.20.233.multilinks.com [82.128.20.233])
(authenticated bits=0)
by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP id n8O5daax003277;
Thu, 24 Sep 2009 13:39:51 +0800 (MYT)
(envelope-from adbank_donald [at] indiatimes.com)
IP: 82.128.20.233 ---> Multilinks, Nigeria
adbank_donald [at] indiatimes.com
africandevelopmentbank [at] indiatimes.com
Muguphon: +234-805-2722898 ---> Globacom Ltd., Nigeria
Received: from smtp22.services.sfr.fr (smtp22.services.sfr.fr
[93.17.128.10])
by xxxxx (Postfix) with ESMTP id 5E4BB789832E
for xxxxx; Thu, 24 Sep 2009 16:17:20 +0200 (CEST)
Received: from User (unknown [118.101.4.20])
by msfrf2218.sfr.fr (SMTP Server) with ESMTP id 441217000180;
Thu, 24 Sep 2009 16:16:49 +0200 (CEST)
davidloh_deng [at] sify.com
Received: from web32608.mail.mud.yahoo.com (web32608.mail.mud.yahoo.com
[68.142.207.235])
by xxxxx (Postfix) with SMTP id 5AD7578982CE
for xxxxx; Thu, 24 Sep 2009 23:42:36 +0200 (CEST)
Received: (qmail 94255 invoked by uid 60001); 24 Sep 2009 21:42:23 -0000
Received: from [41.191.85.37] by web32608.mail.mud.yahoo.com via HTTP;
Thu, 24 Sep 2009 14:42:23 PDT
IP: 41.191.85.37 ---> Cyberlary maxim, BJ
sidewine55 [at] yahoo.com
westernunionoff4 [at] sify.com
Muguphon: +22998139688 ---> Benin
- kjz
Das Mugu-Wochenende:
Received: from unknown (EHLO cfea.org.cn) [211.136.185.231]
by mx0.gmx.net (mx051) with SMTP; 25 Sep 2009 16:40:31 +0200
Received: from User [41.211.226.2] by cfea.org.cn with ESMTP
(SMTPD32-8.05) id A45246304BA; Fri, 25 Sep 2009 22:31:46 +0800
IP: 41.211.226.2 ---> 2.226.211.41.client2.directonpc.net, Nigeria
ukjmorgan [at] sify.com
Received: from studio-fix.com (211.10.131.183.wide.ne.jp [211.10.131.183])
by xxxxx (Postfix) with SMTP id 3E26978983A8
for xxxxx; Sun, 27 Sep 2009 00:49:46 +0200 (CEST)
Received: (qmail 5465 invoked from network); 27 Sep 2009 07:39:29 +0900
Received: from unknown (HELO User) (admin [at] 41.222.192.89)
by 211.10.131.183.wide.ne.jp with SMTP; 27 Sep 2009 07:39:29 +0900
IP: 41.222.192.89 ---> ISOCEL SARL, BJ
mallamsurubasun6 [at] yahoo.co.nz
mrdennisgaguh [at] e-mail.ua
Received: from dns.okumura.to (218-228-196-207.eonet.ne.jp
[218.228.196.207])
by xxxxx (Postfix) with ESMTP id 710D178990EA
for xxxxx; Sun, 27 Sep 2009 12:45:22 +0200 (CEST)
Received: from User (unknown [82.128.33.48])
by dns.okumura.to (Postfix) with ESMTP id C54C416E126;
Sun, 27 Sep 2009 17:19:24 +0900 (JST)
IP: 82.128.33.48 ---> Multilinks Telecommunications Limited, Nigeria
issahmohamed1 [at] gmail.com
issahmohamed [at] aol.com
Muguphon: 234- 803-2282171 ---> MTN Nigeria Communications Ltd.
- kjz
Auch hier wieder Nachschub:
Received: from sgabxowa.abxlogistics.com.sg (unknown [203.126.254.86])
by xxxxx (Postfix) with ESMTP id E7ABD78983A6
for xxxxx; Mon, 28 Sep 2009 14:34:54 +0200 (CEST)
Received: from User ([82.128.33.184]) by sgabxowa.abxlogistics.com.sg
with Microsoft SMTPSVC(5.0.2195.6713);
Wed, 9 Sep 2009 16:06:53 +0800
lawf02 [at] yahoo.com.hk
lawfish001 [at] yahoo.com.hk
Muguphon: +44 704-577-5962 ---> Open Telecom International Ltd., UK
Mugufax: +44 709-284-0444 ---> YAC Ltd., UK
Received: from n9.bullet.mail.mud.yahoo.com (HELO
n9.bullet.mail.mud.yahoo.com) [209.191.86.157]
by mx0.gmx.net (mx099) with SMTP; 29 Sep 2009 01:00:08 +0200
Received: from [68.142.200.227] by n9.bullet.mail.mud.yahoo.com with
NNFMP; 28 Sep 2009 18:02:03 -0000
Received: from [67.195.9.83] by t8.bullet.mud.yahoo.com with NNFMP; 28
Sep 2009 18:02:02 -0000
Received: from [98.137.27.217] by t3.bullet.mail.gq1.yahoo.com with
NNFMP; 28 Sep 2009 18:02:02 -0000
Received: from [127.0.0.1] by omp127.mail.gq1.yahoo.com with NNFMP; 28
Sep 2009 18:02:01 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 979647.96504.bm [at] omp127.mail.gq1.yahoo.com
Received: (qmail 72580 invoked by uid 60001); 28 Sep 2009 18:01:56 -0000
Message-ID: <20090928180156.72578.qmail [at] web112508.mail.gq1.yahoo.com>
X-YMail-OSG:
XIbluykVM1mBz86aYJJY2tSfrxJGoN8_URSoq8PRevGkDHO6Fy3uiikgBVB_0WH.56FSkCoQ3m40JUI-
Received: from [165.146.49.233] by web112508.mail.gq1.yahoo.com via
HTTP; Mon, 28 Sep 2009 11:01:55 PDT
IP: 165.146.49.233 ---> dsl-146-49-233.telkomadsl.co.za
agentoffice11 [at] gala.net
lottlott00447047 [at] gmail.com
agentoffice01 [at] gala.net
Muguphon: +27-78-053-1122 ---> MTN, ZA
Received: from jjbakerysystem.jjbakeryusa.local
(static-71-177-252-152.lsanca.dsl-w.verizon.net [71.177.252.152])
by xxxxx (Postfix) with ESMTP id BEFF678940EB
for xxxxx; Tue, 29 Sep 2009 14:51:30 +0200 (CEST)
Received: from User ([66.46.180.156]) by
jjbakerysystem.jjbakeryusa.local with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 29 Sep 2009 05:33:58 -0700
frandezrichardo [at] yahoo.com.hk
Received: from ktserver.ktrealestate.com
(static-70-21-121-176.res.east.verizon.net [70.21.121.176])
by xxxxx (Postfix) with ESMTP id 5E0EA789833F
for xxxxx; Tue, 29 Sep 2009 22:24:43 +0200 (CEST)
Received: from User ([41.222.69.236] RDNS failed) by
ktserver.ktrealestate.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 29 Sep 2009 11:50:05 -0400
IP: 41.222.69.236 ---> SWIFT NETWORKS, Nigeria
metropol [at] eyou.com
metropolonline [at] eyou.com
Muguphon: +44 70457 17275 ---> Open Telecom International Ltd., UK
Mugufax: +44 8709 743597 ---> Magrathea Telecommunications Limited, UK
Und wieder mal die Dreckskiste aus BR:
Received: from hm1480-18.locaweb.com.br (hm1480-18.locaweb.com.br
[201.76.49.115])
by xxxxx (Postfix) with ESMTP id DD98778982C1
for xxxxx; Wed, 30 Sep 2009 04:32:19 +0200 (CEST)
Received: from localhost (189.126.112.90) by hm1480-23.locaweb.com.br
(PowerMTA(TM) v3.5r13) id hob1j80nva4u for xxxxx;
Tue, 29 Sep 2009 23:01:25 -0300 (envelope-from
<grant.ikobos [at] consignauto.com.br>)
X-LW-Scanned: by Locaweb Mail Filter at locaweb.com.br
Received: from hm1975.locaweb.com.br ([127.0.0.1])
by localhost (hm1975.locaweb.com.br [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id CyW6a1HAr5FL; Tue, 29 Sep 2009 23:01:25 -0300 (BRT)
Received: from hm1980.locaweb.com.br (unknown [10.1.0.251])
by hm1975.locaweb.com.br (Postfix) with SMTP id 4197C10FB081;
Tue, 29 Sep 2009 23:01:25 -0300 (BRT)
Received: from unknown (HELO User)
(grant.ikobos [at] consignauto.com.br@41.211.228.207)
by hm1980.locaweb.com.br with SMTP; 30 Sep 2009 01:55:03 -0000
IP: 41.211.228.207 ---> 207.228.211.41.client207.directonpc.net, Nigeria
grant.ikobos [at] consignauto.com.br
regcom [at] locaweb.com.br
jonmaxwelll [at] yahoo.cn
Received: from athena.serverdns.net (EHLO oralrehab.co.uk) [80.94.196.11]
by mx0.gmx.net (mx048) with SMTP; 30 Sep 2009 10:42:27 +0200
Received: from User [165.146.30.248] by oralrehab.co.uk with ESMTP
(SMTPD32-6.06) id A93C8AE6008E; Wed, 30 Sep 2009 09:39:24 +0100
IP: 165.146.30.248 ---> dsl-146-30-248.telkomadsl.co.za
christkular [at] kenn.zeichen.ws
mullers_p [at] yahoo.co.nz
kularchrist [at] kenn.zeichen.ws
Muguphon: 00 27 71 041 9494 ---> MTN, ZA
Received: from unknown (EHLO mail.cubic-tianjin.com.cn) [60.29.141.190]
by mx0.gmx.net (mx095) with SMTP; 30 Sep 2009 11:32:17 +0200
Received: from User (unknown [188.72.206.109])
by mail.cubic-tianjin.com.cn (Postfix) with ESMTP id 2D27E237A43;
Wed, 30 Sep 2009 14:10:51 +0800 (CST)
james [at] jejeti.info
hoodsjames5 [at] yahoo.com
- kjz
Weiter geht's:
Received: from n10.bullet.mail.mud.yahoo.com
(n10.bullet.mail.mud.yahoo.com [209.191.125.208])
by xxxxx (Postfix) with SMTP id D5AFD78A12AE
for xxxxx; Tue, 29 Sep 2009 17:31:57 +0200 (CEST)
Received: from [68.142.200.224] by n10.bullet.mail.mud.yahoo.com with
NNFMP; 29 Sep 2009 15:31:56 -0000
Received: from [67.195.9.82] by t5.bullet.mud.yahoo.com with NNFMP; 29
Sep 2009 15:31:56 -0000
Received: from [98.137.27.213] by t2.bullet.mail.gq1.yahoo.com with
NNFMP; 29 Sep 2009 15:31:56 -0000
Received: from [127.0.0.1] by omp123.mail.gq1.yahoo.com with NNFMP; 29
Sep 2009 15:31:56 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 622928.10808.bm [at] omp123.mail.gq1.yahoo.com
Received: (qmail 11291 invoked by uid 60001); 29 Sep 2009 15:31:35 -0000
Received: from [196.213.229.97] by web113101.mail.gq1.yahoo.com via
HTTP; Tue, 29 Sep 2009 08:31:35 PDT
IP: 196.213.229.97 ---> net-229-97.mweb.co.za
unitednationslotterprogram [at] yahoo.co.nz
unitednationlotteryprogram3 [at] yahoo.com.hk
Received: from n23b.bullet.mail.mud.yahoo.com
(n23b.bullet.mail.mud.yahoo.com [68.142.206.142])
by xxxxx (Postfix) with SMTP id 3A0F6789820F
for xxxxx; Tue, 29 Sep 2009 20:09:29 +0200 (CEST)
Received: from [209.191.108.96] by n23.bullet.mail.mud.yahoo.com with
NNFMP; 29 Sep 2009 18:09:29 -0000
Received: from [68.142.201.253] by t3.bullet.mud.yahoo.com with NNFMP;
29 Sep 2009 18:09:29 -0000
Received: from [127.0.0.1] by omp414.mail.mud.yahoo.com with NNFMP; 29
Sep 2009 18:09:29 -0000
Received: from [81.91.228.100] by web112812.mail.gq1.yahoo.com via HTTP;
Tue, 29 Sep 2009 11:09:27 PDT
IP: 81.91.228.100 ---> Office des Postes et Telecommunications (OPT), BJ
mrsrosemartins78 [at] yahoo.co.nz
mrphilipuba [at] inMail.sk
Muguphon: +229-98 80 80 92 ---> Benin
Received: from jupiter.metabo.com.ar (mail.metabo.com.ar [200.42.61.250])
by xxxxx (Postfix) with ESMTP id CE149789832A
for xxxxx; Wed, 30 Sep 2009 17:06:21 +0200 (CEST)
X-Virus-Scanned: by BluePex IE at metabo.com.ar
Received: from User (chromium.onspeed.com [83.138.172.76])
(authenticated bits=0)
by jupiter.metabo.com.ar (8.13.8/8.13.1) with ESMTP id n8Q4Qq01012381;
Sat, 26 Sep 2009 01:27:22 -0300
Received: from 81.222.64.211 (trWkDgkdhT [at] 81.222.64.211 [81.222.64.211])
by chromium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Sat, 26 Sep 2009 04:32:20 +0100
(BST)
X-Originating-IP: [81.222.64.211] ---> RETN Ltd.
al.atk3 [at] yahoo.com.hk
alatkinz [at] i12.com
Muguphon: +447045738816 ---> Open Telecom International Ltd., UK
Received: from 179.122.DSNET (EHLO hotsales.net) [203.110.179.122]
by mx0.gmx.net (mx064) with SMTP; 01 Oct 2009 16:45:25 +0200
Received: from User [82.128.39.80] by hotsales.net with ESMTP
(SMTPD-8.22) id ADFC0D74; Thu, 01 Oct 2009 22:34:36 +0800
IP: 82.128.39.80 ---> Multilinks Telecommunications Limited, Nigeria
firstflight_controller [at] yahoo.com
shegxxy_sregun [at] yahoo.com
Received: from exchng-191.Strong-sf3.reliablehosting.com (EHLO
mx4.hotmail.com) [216.131.110.191]
by mx0.gmx.net (mx101) with SMTP; 02 Oct 2009 11:58:54 +0200
ian.fisher.lee [at] live.co.uk
Muguphon: +447536345725 ---> Orange, UK
Received: from unknown (EHLO cfea.org.cn) [211.136.185.231]
by mx0.gmx.net (mx106) with SMTP; 02 Oct 2009 19:36:48 +0200
Received: from User [82.128.37.173] by cfea.org.cn with ESMTP
(SMTPD32-8.05) id A99A3E50442; Wed, 30 Sep 2009 21:14:02 +0800
IP: 82.128.37.173 ---> Multilinks Telecommunications Limited, Nigeria
mrslawson1 [at] sify.com
mrsjoannalawson1 [at] sify.com
gecracktes SquirrelMail:
Received: from net.lg.ua (relay.net.lg.ua [195.189.45.14])
by xxxxx (Postfix) with ESMTP id CFB5578990EF
for xxxxx; Sat, 3 Oct 2009 09:22:30 +0200 (CEST)
Received: from localhost ([127.0.0.1] helo=mail.net.lg.ua)
by net.lg.ua with esmtp (Exim 4.69)
(envelope-from <dellis2998 [at] sify.com>)
id 1MtkdC-0000hJ-GF; Fri, 02 Oct 2009 19:05:18 +0300
Received: from 82.128.39.125
(SquirrelMail authenticated user vanessa)
by mail.net.lg.ua with HTTP;
Fri, 2 Oct 2009 08:05:18 -0800 (AKDT)
IP: 82.128.39.125 ---> Multilinks Telecommunications Limited, Nigeria
dellis2998 [at] sify.com
dellis275 [at] gmail.com
Received: from driveltd.org.uk (unknown [212.57.240.9])
by xxxxx (Postfix) with ESMTP id 220ED78667A0
for xxxxx; Sat, 3 Oct 2009 21:09:46 +0200 (CEST)
Received: from User ([124.81.243.138]) by driveltd.org.uk with Microsoft
SMTPSVC(6.0.3790.3959);
Wed, 30 Sep 2009 23:58:45 +0100
mosewong11 [at] yahoo.com.hk
it.frankom [at] fachtnaroe.net
mosewong [at] 9.cn
ein übereifriger Yahoo-Boy:
Received: from imta-38.everyone.net (EHLO omta0105.mta.everyone.net)
[216.200.145.38]
by mx0.gmx.net (mx097) with SMTP; 03 Oct 2009 20:59:51 +0200
Received: from dm0207.mta.everyone.net (sj1-slb03-gw2 [172.16.1.96])
by omta0105.mta.everyone.net (Postfix) with ESMTP id 4E5427311B5;
Sat, 3 Oct 2009 11:59:29 -0700 (PDT)
X-Eon-Dm: dm0207
Received: by dm0207.mta.everyone.net (EON-AUTHRELAY2 - 4dd03d40)
id dm0207.4ac3924e.905234; Sat, 3 Oct 2009 11:59:28 -0700
angel.sharon [at] btinternet.com
angel79 [at] btinternet.com
mrsjuliebryant [at] btinternet.com
eduardo.daniel [at] btinternet.com
mr.eduardodaniel [at] gmx.com
angelsharon [at] rediffmail.com
- kjz
Nächste Runde:
Received: from tomts18-srv.bellnexxia.net (tomts18.bellnexxia.net
[209.226.175.72])
by xxxxx (Postfix) with ESMTP id 5C14C789830D
for xxxxx; Thu, 1 Oct 2009 03:48:56 +0200 (CEST)
Received: from User ([76.115.75.194]) by tomts18-srv.bellnexxia.net
(InterMail vM.5.01.06.10 201-253-122-130-110-20040306) with ESMTP
id <20091001014855.SOSE10585.tomts18-srv.bellnexxia.net [at] User>;
Wed, 30 Sep 2009 21:48:55 -0400
IP: 76.115.75.194 ---> c-76-115-75-194.hsd1.wa.comcast.net
officeprenigeria [at] gmail.com
preofficenigernew [at] gmail.com
Muguphon: +234-80304-763-34 ---> MTN Nigeria Communications Ltd.
Received: from mail.istitutoisac.it
(host98-17-static.46-85-b.business.telecomitalia.it [85.46.17.98])
(using SSLv3 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5F6FB7897867
for xxxxx; Thu, 1 Oct 2009 04:48:40 +0200 (CEST)
Received: from User ([82.128.34.187])
by mail.istitutoisac.it (VisNetic.MailServer.v5.5.8.3) with SMTP
id 13C4GP;
Mon, 28 Sep 2009 07:17:53 +0200
IP: 82.128.34.187 ---> Multilinks Telecommunications Limited, Nigeria
andymaynard2009 [at] gmail.com
andy.tw.maynard [at] web2mail.com
Received: from hankookit.co.kr (unknown [211.224.55.130])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 742DC78667A0
for xxxxx; Fri, 2 Oct 2009 01:12:50 +0200 (CEST)
Received: from hankookit.co.kr (localhost.localdomain [127.0.0.1])
by hankookit.co.kr (8.13.1/8.13.1) with ESMTP id n91I3rxK028471
for xxxxx; Fri, 2 Oct 2009 03:03:54 +0900
Received: (from nobody [at] localhost)
by hankookit.co.kr (8.13.1/8.13.1/Submit) id n91I3qZY028467;
Fri, 2 Oct 2009 03:03:52 +0900
abbasaliyunnpc [at] sify.com
Received: from exchng-159.Strong-sf3.reliablehosting.com (EHLO
mx4.hotmail.com) [216.131.110.159]
by mx0.gmx.net (mx039) with SMTP; 02 Oct 2009 02:51:32 +0200
ian.fisher.lee [at] live.co.uk
Muguphon: +447536345725 ---> Orange, UK
- kjz
neue alte Aktivitäten:
Die Madrid-Konnektion:
Received: from msgmmp-2.gci.net (msgmmp-2.gci.net [209.165.130.12])
by xxxxx (Postfix) with ESMTP id 2738C7899100
for xxxxx; Mon, 5 Oct 2009 03:44:24 +0200 (CEST)
Disposition-notification-to: dfields [at] gci.net
Received: from webmailvm-1 ([209.165.130.81])
by msgmmp-1.gci.net (Sun Java System Messaging Server 6.2-3.03 (built
Jun 27
2005)) with ESMTP id <0KQZ00KL3Q1CVY10 [at] msgmmp-1.gci.net> for
xxxxx; Sun, 04 Oct 2009 04:44:15 -0800 (AKDT)
Received: from [77.209.198.40] by preview.webmail.gci.net with HTTP; Sun,
04 Oct 2009 04:44:00 -0800
X-Originating-IP: [77.209.198.40] ---> VODAFONE_SPAIN_NETWORK
dfields [at] gci.net
overseasunit [at] aim.com
customerservice [at] forestconsultancy.org
Muguphon: +34671792471 ---> mobile number, Spain
Received: from mail.coreprogram.org (mail.coreprogram.org [174.141.6.168])
by xxxxx (Postfix) with ESMTP id 6272478A14F5
for xxxxx; Mon, 5 Oct 2009 14:37:55 +0200 (CEST)
Received: from User ([222.170.106.202] RDNS failed) by
mail.coreprogram.org with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 5 Oct 2009 08:24:43 -0400
IP: 222.170.106.202 ---> JIAMUSI JIANGJIXIN PERSONAL USER
albertkohl.lim [at] live.com
albertkohl4 [at] sify.com
eceived: from moneysukh.com (unknown [58.68.96.148])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C4A7D7810DAA
for xxxxx; Tue, 6 Oct 2009 12:59:55 +0200 (CEST)
Received: (qmail 29161 invoked by uid 109); 5 Oct 2009 11:20:47 -0000
Received: from 83.229.48.148 by mail (envelope-from
<alatkinz [at] accamail.com>, uid 112) with qmail-scanner-1.25st
(clamdscan: 0.94/9866. spamassassin: 3.1.7-deb. perlscan: 1.25st.
Clear:RC:1(83.229.48.148):.
Processed in 1.499853 secs); 05 Oct 2009 11:20:47 -0000
Received: from unknown (HELO User) (test@[83.229.48.148])
(envelope-sender <alatkinz [at] accamail.com>)
by moneysukh.com (qmail-ldap-1.03) with SMTP
for <kzetter [at] lps.org>; 5 Oct 2009 11:20:45 -0000
IP: 83.229.48.148 --> Cyberspace Link 4 PHC, Nigeria/Sky-Vision
alatkinz [at] accamail.com
alatkinz [at] i12.com
Muguphon: +447045738816 ---> Open Telecom International Ltd., UK
Received: from raq9.hiwaay.net (raq9.hiwaay.net [216.180.95.9])
(using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2D2AB78A1403
for xxxxx; Tue, 6 Oct 2009 12:17:48 +0200 (CEST)
Received: from www.coblemetalworks.com (localhost [127.0.0.1])
by localhost (8.11.6/8.11.6) with ESMTP id n969B8a20419;
Tue, 6 Oct 2009 04:11:08 -0500
X-OriginatingIP: 82.128.21.18 (frank [at] www.coblemetalworks.com) ---> ml82.128.21.18.multilinks.com, Nigeria
johnnanny35 [at] gmail.com
Muguphon: +234 805 055 4499 ---> Globacom Ltd., Nigeria
Received: from mail.hcgc.com.tw (60-251-171-188.HINET-IP.hinet.net
[60.251.171.188])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4B0A17898334
for xxxxx; Wed, 7 Oct 2009 01:32:57 +0200 (CEST)
Received: from User ([80.253.249.14])
by mail.hcgc.com.tw (Merak 8.5.0-8) with ASMTP id NZX06316;
Tue, 06 Oct 2009 23:17:16 +0800
IP: 80.253.249.14 ---> GIGABITWEB-NET1, TR
contactdom [at] tlen.pl
Muguphon: +447045771973 ---> Open Telecom International Ltd., UK
Mugufax: +44704567786 ---> Sound Telecom (UK) Ltd.
Received: from srv01.sulprom.corp (unknown [200.123.162.29])
by xxxxx (Postfix) with ESMTP id 01D2378983D2
for xxxxx; Wed, 7 Oct 2009 01:38:05 +0200 (CEST)
Received: from User ([192.168.0.2]) by srv01.sulprom.corp with Microsoft
SMTPSVC(6.0.3790.3959);
Tue, 6 Oct 2009 20:21:36 -0300
consulting_90 [at] yahoo.com.hk
mubadalaconsulting [at] rocketmail.com
consulting.90 [at] hotmail.com
Muguphon: +971509952275 ---> Etisalat, AE
die Madrid-Konnektion:
Received: from IMPaqm5.telefonica.net (impaqm5.telefonica.net
[213.4.129.25])
by xxxxx (Postfix) with ESMTP id 0657B78990F2
for xxxxx; Tue, 6 Oct 2009 21:14:23 +0200 (CEST)
Received: from IMPmailhost2.adm.correo ([10.20.102.39])
by IMPaqm5.telefonica.net with bizsmtp
id pQ951c00E0r0BT63RVSs6Q; Tue, 06 Oct 2009 19:26:52 +0200
Received: from User ([81.202.186.149])
by IMPmailhost2.adm.correo with BIZ IMP
id pVSp1c00P3DpqkZ1iVSqmf; Tue, 06 Oct 2009 19:26:51 +0200
IP: 81.202.186.149 ---> 81.202.186.149.dyn.user.ono.com, ES
sphg.comision [at] terra.es
james.brown [at] inMail24.com
jamesbrown001 [at] aol.es
gecracktes SquirrelMail:
Received: from vastu3.nic.in (smtpgw.nic.in [164.100.17.13])
by xxxxx (Postfix) with ESMTP id 96CE178971D2
for xxxxx; Tue, 6 Oct 2009 21:11:48 +0200 (CEST)
Received: from vastu3.nic.in (localhost.localdomain [127.0.0.1])
by vastu3.nic.in (8.12.10/8.12.10) with ESMTP id n96G6TIC019188
for xxxxx; Tue, 6 Oct 2009 21:37:21 +0530
Received: from mail.tn.nic.in (mail.tn.nic.in [164.100.167.2])by
vastu3.nic.in (8.12.10/8.12.10) with ESMTP id n96G4kek017711;Tue, 6 Oct
2009 21:34:48 +0530
Received: from localhost (localhost [127.0.0.1])by mail.tn.nic.in (Postfix)
with ESMTP id 28CAA28EA06;Tue, 6 Oct 2009 22:39:35 +0530 (IST)
X-Virus-Scanned: amavisd-new at tn.nic.in
Received: from mail.tn.nic.in ([127.0.0.1])by localhost (mail.tn.nic.in
[127.0.0.1]) (amavisd-new, port 10024)with ESMTP id 4fsZtmFiZZ28; Tue, 6
Oct 2009 22:39:35 +0530 (IST)
Received: from mail.tn.nic.in (localhost [127.0.0.1])by mail.tn.nic.in
(Postfix) with ESMTP id BF15828E9E1;Tue, 6 Oct 2009 22:39:34 +0530 (IST)
Received: from 41.204.224.12 (SquirrelMail authenticated user
jdgftmdu) by mail.tn.nic.in with HTTP; Tue, 6 Oct 2009 22:39:34
+0530 (IST)
IP: 41.204.224.12 ---> 12.224.204.41.client12.directonpc.net, Nigeria
susancole21 [at] yahoo.com.hk
Received: from n61.bullet.mail.sp1.yahoo.com
(n61.bullet.mail.sp1.yahoo.com [98.136.44.37])
by xxxxx (Postfix) with SMTP id 1B81F78A1590
for xxxxx; Wed, 7 Oct 2009 14:15:53 +0200 (CEST)
Received: from [216.252.122.219] by n61.bullet.mail.sp1.yahoo.com with
NNFMP; 07 Oct 2009 12:15:53 -0000
Received: from [67.195.9.81] by t4.bullet.sp1.yahoo.com with NNFMP; 07
Oct 2009 12:15:53 -0000
Received: from [98.137.27.218] by t1.bullet.mail.gq1.yahoo.com with
NNFMP; 07 Oct 2009 12:15:53 -0000
Received: from [127.0.0.1] by omp128.mail.gq1.yahoo.com with NNFMP; 07
Oct 2009 12:15:53 -0000
Received: (qmail 54657 invoked by uid 60001); 7 Oct 2009 12:15:52 -0000
Received: from [81.91.227.12] by web113113.mail.gq1.yahoo.com via HTTP;
Wed, 07 Oct 2009 05:15:51 PDT
IP: 81.91.227.12 ---> Office des Postes et Telecommunications (OPT), BJ
edwinwilliams1951 [at] yahoo.co.nz
expresscompany_f [at] yahoo.com.hk
Muguphon: +229 -966-62355 ---> Benin
Received: from n11c.bullet.mail.mud.yahoo.com
(n11c.bullet.mail.mud.yahoo.com [209.191.125.180])
by xxxxx (Postfix) with SMTP id 7329A78A1FEB
for xxxxx; Wed, 7 Oct 2009 14:49:33 +0200 (CEST)
Received: from [209.191.108.96] by n11.bullet.mail.mud.yahoo.com with
NNFMP; 07 Oct 2009 12:49:32 -0000
Received: from [68.142.201.247] by t3.bullet.mud.yahoo.com with NNFMP;
07 Oct 2009 12:49:32 -0000
Received: from [127.0.0.1] by omp408.mail.mud.yahoo.com with NNFMP; 07
Oct 2009 12:49:32 -0000
Received: (qmail 59590 invoked by uid 60001); 7 Oct 2009 12:49:31 -0000
Received: from [41.191.85.221] by web112910.mail.gq1.yahoo.com via HTTP;
Wed, 07 Oct 2009 05:49:31 PDT
IP: 41.191.85.221 ---> COS_CYBER, BJ
william.peter48 [at] yahoo.co.nz
dhlcouriercom01 [at] sify.com
dhlcouriercom [at] sify.com
Muguphon: +229-9886-0041 ---> Benin
- kjz
Und wieder weiter:
der Dauer-Mugu:
Received: from egw.bjut.edu.cn (egw.bjut.edu.cn [219.239.98.77])
by xxxxx (Postfix) with SMTP id C4EE878982C7
for xxxxx; Thu, 8 Oct 2009 03:11:45 +0200 (CEST)
X-EYOU-SPAMVALUE:10
X-EYOU-DEALDRC:
Received: (eyou anti_spam gateway 3.0); Thu, 08 Oct 2009 09:03:21 +0800
Message-ID: <454963801.24343 [at] egw.bjut.edu.cn>
X-EYOUMAIL-SMTPAUTH: @
Received: from 83.138.172.76 by 10.10.10.11 with SMTP; Thu, 08 Oct 2009
09:03:20 +0800
Received: from mtnngprs.com (prince45 [at] mtnngprs.com [41.220.75.3])
by chromium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Thu, 08 Oct 2009 01:03:32 +0100
(BST)
X-Originating-IP: [41.220.75.3] ---> mtnngprs.com, MTN/Nigeria
prince45 [at] mtnngprs.com
xparcel [at] yahoo.cn
Received: from mout4.freenet.de (mout4.freenet.de [195.4.92.94])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id BD38978A1912
for xxxxx; Thu, 8 Oct 2009 13:22:27 +0200 (CEST)
Received: from [195.4.92.27] (helo=17.mx.freenet.de)
by mout4.freenet.de with esmtpa (ID bzxbbxzbbxz [at] freakmail.de) (port 25)
(Exim 4.69 #92)
id 1Mvr4Z-00023t-5P; Thu, 08 Oct 2009 13:22:15 +0200
Received: from [82.128.38.18] (port=55868 helo=User)
by 17.mx.freenet.de with esmtpa (ID bzxbbxzbbxz [at] freakmail.de) (port 25)
(Exim 4.69 #94)
id 1Mvr4X-0000Th-Hb; Thu, 08 Oct 2009 13:22:15 +0200
IP: 82.128.38.18 ---> Multilinks Telecommunications Limited, Nigeria
bzxbbxzbbxz [at] freakmail.de
fbi_usawashingtondc111 [at] yahoo.co.jp
Received: from mail.adco.com.tw (unknown [61.59.108.239])
by xxxxx (Postfix) with ESMTP id 4BD2178982C8
for xxxxx; Thu, 8 Oct 2009 23:03:19 +0200 (CEST)
Received: from User (dsl-202-173-176-14.qld.westnet.com.au [202.173.176.14])
by mail.adco.com.tw (Postfix) with ESMTP id F1E231591FFD;
Mon, 5 Oct 2009 17:08:14 +0800 (CST)
petertony92 [at] yahoo.com.hk
fedexcourier.1 [at] live.co.uk
Muguphon: +234 706-784-0862 ---> MTN Nigeria Communications Ltd.
Received: from drim13053.drim.com (EHLO drim13053.drim.com) [193.34.130.53]
by mx0.gmx.net (mx062) with SMTP; 09 Oct 2009 04:34:53 +0200
Received: from [82.128.32.52] (helo=User)
by drim13053.drim.com with esmtpa (Exim 4.69)
(envelope-from <katevellaz02 [at] yahoo.com>)
id 1Mw54y-0004XZ-Ku; Fri, 09 Oct 2009 04:19:42 +0200
IP: 82.128.32.52 ---> Multilinks Telecommunications Limited, Nigeria
katevellaz02 [at] yahoo.com
phil.ziglar77 [at] gmail.com
- kjz
Und nochmals Nachschub:
Received: from isp-mailsrv.MAIL.FPT.VN (isp-vmail.fpt.vn [210.245.86.20])
by xxxxx (Postfix) with ESMTP id D9DD178A1FCB
for xxxxx; Fri, 9 Oct 2009 15:47:35 +0200 (CEST)
Received: from User ([222.96.156.157] RDNS failed) by
isp-mailsrv.MAIL.FPT.VN with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 9 Oct 2009 20:35:24 +0700
IP: 222.96.156.157 ---> Kornet, KR
doctorjosephohia001 [at] hotmail.com
doctorjoseph001 [at] o2.pl
Muguphon: +447035936597 ---> Open Telecom International Ltd., UK
Mugufax: +447006076097 ---> Call Sciences Limited, UK/Yac
Die Madrid-Konnektion:
Received: from cl-t177-031cl.privatedns.com
(ip-70-38-71-102.static.privatedns.com [70.38.71.102])
by spammotel.com (Postfix) with ESMTPS id 4C77F82751A
for xxxxx; Fri, 25 Sep 2009 12:46:58 -0400 (EDT)
Received: from 108.16.222.87.dynamic.jazztel.es ([87.222.16.108] helo=User)
by cl-t177-031cl.privatedns.com with esmtpa (Exim 4.69)
(envelope-from <barrister.williamschambers2009 [at] gmail.com>)
id 1MrDvw-0003Ah-FT; Fri, 25 Sep 2009 12:46:12 -0400
barrister.williamschambers2009 [at] gmail.com
barrister.barristerteddy [at] yahoo.de
barrister_teddychambers [at] rocketmail.com
Muguphon: +34658654308 ---> France Telecom Espana/Orange
Mugufax: +34911414351 ---> Jazz Telecom, S.a.u., ES
Received: from mx.rimed.cu (mx.rimed.cu [200.55.156.169])
by xxxxx (Postfix) with ESMTP id C9E4D78971D2
for xxxxx; Fri, 9 Oct 2009 22:25:24 +0200 (CEST)
Received: from mailer.rimed.cu (mailer.rimed.cu [200.55.156.173])
by mx.rimed.cu (Postfix) with ESMTP id 77116A326AB;
Sat, 10 Oct 2009 11:57:33 -0400 (CDT)
Received: from localhost (unknown [200.55.156.163])
by mailer.rimed.cu (Postfix) with ESMTP id A9292C10CD;
Fri, 9 Oct 2009 17:13:01 +0200 (CEST)
Received: from 41.217.2.7 ([41.217.2.7]) by webmail.rimed.cu (Horde
Framework) with HTTP; Fri, 09 Oct 2009 11:15:44 -0400
IP: 41.217.2.7 ---> ZOOM Mobile Nigeria Ltd.
mrs.joanborg [at] sify.com
payment.unit212 [at] gmail.com
Received: from smtp.mailcorp.net.br (smtp8.mailcorp.net.br [200.143.7.49])
(using TLSv1 with cipher AES128-SHA (128/128 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 138017899B60
for xxxxx; Sat, 10 Oct 2009 00:13:33 +0200 (CEST)
Received: from User (196.1.177.242) by HUBTB3487.corpmail.net (200.143.7.49)
with Microsoft SMTP Server id 8.1.393.1; Fri, 9 Oct 2009 19:06:23 -0300
IP: 196.1.177.242 ---> Nigerian Telecommunications Ltd.
mrslindahills0006 [at] yahoo.com.hk
mrslindahills00005 [at] gmail.com
Muguphon: +2348037193625 ---> MTN Nigeria Communications Ltd.
Received: from bookuu.com (unknown [60.191.110.104])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9BADA789B038
for xxxxx; Sat, 10 Oct 2009 19:08:55 +0200 (CEST)
Received: from ([82.128.38.167])
by ironmail.bookuu.com with ESMTP id 0744B01239.816566;
Fri, 09 Oct 2009 16:37:01 +0800
IP: 82.128.38.167 ---> Multilinks Telecommunications Limited, Nigeria
4mrdavidwalker [at] gmail.com
davidwalker [at] rainydrops.com
Received: from tomts18-srv.bellnexxia.net (tomts18.bellnexxia.net
[209.226.175.72])
by xxxxx (Postfix) with ESMTP id 5D9977898249
for xxxxx; Sun, 11 Oct 2009 08:14:09 +0200 (CEST)
Received: from User ([71.75.93.8]) by tomts18-srv.bellnexxia.net
(InterMail vM.5.01.06.10 201-253-122-130-110-20040306) with ESMTP
id <20091011061407.SYP25005.tomts18-srv.bellnexxia.net [at] User>;
Sun, 11 Oct 2009 02:14:07 -0400
IP: 71.75.93.8 ---> cpe-071-075-093-008.carolina.res.rr.com
mgmike01 [at] hotmail.com
Muguphon: +234-8028264968 ---> Celtel Nigeria Limited/Zain
Received: from marvin.zoothost.com (unknown [174.133.194.98])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1324A78A14E0
for xxxxx; Sun, 11 Oct 2009 18:06:26 +0200 (CEST)
Received: from pnbmaili by marvin.zoothost.com with local (Exim 4.69)
(envelope-from <pnbmaili [at] marvin.zoothost.com>)
id 1Mwcgs-0005TA-L2
for xxxxx; Sat, 10 Oct 2009 09:12:58 -0500
usatreasurywashingtonusa [at] halic.org
pnbmaili [at] marvin.zoothost.com
infohsbcbank [at] mail2uk.com
Muguphon: +44-703598686 ---> Open Telecom International Ltd., UK
Mugufax: +447005800671 ---> PNC Telecom Services Limited, UK
Trend: auch die Mugus kübeln teilweise vermehrt per Bot(Proxy) ihren Müll auf den MX ab....
- kjz
Die Mugus zum Wochenanfang, 1. Teil:
Received: from storm.office.goapple.com
(75-149-52-195-SFBA.hfc.comcastbusiness.net [75.149.52.195])
by xxxxx (Postfix) with ESMTP id DDDCD78A1593
for xxxxx; Mon, 12 Oct 2009 23:26:58 +0200 (CEST)
Received: from User ([82.128.39.223]) by storm.office.goapple.com with
Microsoft SMTPSVC(6.0.3790.1830);
Mon, 12 Oct 2009 14:17:32 -0700
IP: 82.128.39.223 ---> Multilinks Telecommunications Limited, Nigeria
mr.andrewmiguel [at] yahoo.com.hk
Muguphon: +447035931859 ---> Open Telecom International Ltd., UK
ausgerechnet die EFCC will Mugulein vortäuschen:
Received: from tomts18-srv.bellnexxia.net (tomts18.bellnexxia.net
[209.226.175.72])
by xxxxx (Postfix) with ESMTP id D6DBE78A210F
for xxxxx; Tue, 13 Oct 2009 11:27:28 +0200 (CEST)
Received: from User ([76.18.234.61]) by tomts18-srv.bellnexxia.net
(InterMail vM.5.01.06.10 201-253-122-130-110-20040306) with ESMTP
id <20091013092726.XZI29167.tomts18-srv.bellnexxia.net [at] User>;
Tue, 13 Oct 2009 05:27:26 -0400
IP: 76.18.234.61 ---> c-76-18-234-61.hsd1.fl.comcast.net
efcc.nig [at] msn.com
Muguphon: +234-8028264968 ---> Celtel Nigeria Limited/Zain
Received: from mail-yw0-f115.google.com (EHLO mail-yw0-f115.google.com)
[209.85.211.115]
by mx0.gmx.net (mx026) with SMTP; 13 Oct 2009 11:01:54 +0200
Received: by ywh13 with SMTP id 13so152963ywh.30
for xxxxx; Tue, 13 Oct 2009 02:01:53 -0700 (PDT)
Received: by 10.91.97.9 with SMTP id z9mr4240136agl.46.1255424513811;
Tue, 13 Oct 2009 02:01:53 -0700 (PDT)
abdulrahman.abdulrahmanmustafa [at] gmail.com
Received: from ibirapuera.cosnet.com.br
(189-039-012-212.static.spo.ctbc.com.br [189.39.12.212])
by xxxxx (Postfix) with ESMTP id 62ED778982C2
for xxxxx; Tue, 13 Oct 2009 21:05:38 +0200 (CEST)
Received: from User (unknown [208.88.7.26])
by ibirapuera.cosnet.com.br (Postfix) with ESMTP id 5D57B104847B;
Tue, 13 Oct 2009 10:43:09 -0200 (BRST)
IP: 208.88.7.26 ---> test.ultek.ca (auch Testserver sollte man absichern....)
rfrandez [at] blumail.org
auch die Kubaner sind nicht sicher, die Dreckskiste ist noch immer offen, siehe der Mugu vom 9./10. Okt.:
Received: from mx.rimed.cu (mx.rimed.cu [200.55.156.166])
by xxxxx (Postfix) with ESMTP id EF7CE78A142E
for xxxxx; Wed, 14 Oct 2009 00:30:14 +0200 (CEST)
Received: from mailer.rimed.cu (mailer.rimed.cu [200.55.156.173])
by mx.rimed.cu (Postfix) with ESMTP id 3F08BAD3B03;
Tue, 13 Oct 2009 11:47:56 -0400 (CDT)
Received: from localhost (unknown [200.55.156.163])
by mailer.rimed.cu (Postfix) with ESMTP id EEC02C115C;
Tue, 13 Oct 2009 16:56:57 +0200 (CEST)
Received: from 41.217.2.8 ([41.217.2.8]) by webmail.rimed.cu (Horde
Framework) with HTTP; Tue, 13 Oct 2009 11:00:31 -0400
IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.
nancy.wester [at] sify.com
nancy.webster [at] sify.com
Received: from smh03.opentransfer.com (smh03.opentransfer.com
[98.130.1.171])
by xxxxx (Postfix) with ESMTP id C43877898216
for xxxxx; Tue, 13 Oct 2009 22:01:13 +0200 (CEST)
Received: by smh03.opentransfer.com (Postfix, from userid 8)
id 4471E6E3566; Tue, 13 Oct 2009 15:26:14 -0400 (EDT)
Received: from webmail5.opentransfer.com (unknown [69.49.230.6])
by smh03.opentransfer.com (Postfix) with ESMTP id 02A806E3534;
Tue, 13 Oct 2009 15:26:13 -0400 (EDT)
Received: from webmail5.opentransfer.com (localhost [127.0.0.1] (may be
forged))
by webmail5.opentransfer.com (8.13.8/8.13.8) with ESMTP id n9DJPiDt009384;
Tue, 13 Oct 2009 14:26:13 -0500
Received: (from nobody [at] localhost)
by webmail5.opentransfer.com (8.13.8/8.13.8/Submit) id n9DJK1s8009099;
Tue, 13 Oct 2009 19:20:01 GMT
X-Authentication-Warning: webmail5.opentransfer.com: nobody set sender
to atmoffice [at] atm.net using -f
Received: from 41.189.6.244 ([41.189.6.244]) by webmail.opentransfer.com
(Horde MIME library) with HTTP; for <destelle [at] mountain-websites.com>; Tue,
13 Oct 2009 19:19:59 +0000
IP: 41.189.6.244 ---> SWIFT NETWORKS LIMITED, Nigeria
intl_remittance007 [at] yahoo.fr
Muguphon: +234-8021022189 ---> Celtel Nigeria Limited/Zain
Auch diese Dreckskiste kommt mir so bekannt vor:
Received: from iat01.iatra.local (mail.iatra.com [66.241.129.65])
by xxxxx (Postfix) with ESMTP id 7ADD578A1FC5
for xxxxx; Wed, 14 Oct 2009 15:17:04 +0200 (CEST)
Received: from User ([82.128.33.61]) by iat01.iatra.local with Microsoft
SMTPSVC(6.0.3790.1830);
Wed, 14 Oct 2009 09:01:18 -0400
IP: 82.128.33.61 ---> Multilinks Telecommunications Limited, Nigeria
m.cintl [at] ymail.com
- kjz
Die Mugus zum Wochenanfang, 2. Teil:
da ist die Dreckskiste wieder:
Received: from iat01.iatra.local (mail.iatra.com [66.241.129.65])
by xxxxx (Postfix) with ESMTP id 203B678A1FFC
for xxxxx; Tue, 13 Oct 2009 19:41:23 +0200 (CEST)
Received: from User ([121.204.0.20]) by iat01.iatra.local with Microsoft
SMTPSVC(6.0.3790.1830);
Tue, 13 Oct 2009 11:24:42 -0400
IP: 121.204.0.20 ---> 20.0.204.121.board.fz.fj.dynamic.163data.com.cn
jerdwards105 [at] gmail.com
jerdwards102 [at] aim.com
Received: from pip44.ptt.js.cn (HELO jlonline.com) [61.155.13.220]
by mx0.gmx.net (mx044) with SMTP; 13 Oct 2009 18:40:22 +0200
Received: from User([41.215.160.134]) by ptt.js.cn(AIMC 3.2.0.0)
with SMTP id jm1014ad4b82d; Wed, 14 Oct 2009 00:35:57 +0800
IP: 41.215.160.134 ---> Millicom Ghana Limited
barrkkoffi [at] buzonabc.com
sunkof [at] jsmail.com.cn
Muguphon: +233272926604 ---> Mobitel, Ghana/Millicom Ghana/Tigo
und wieder:
Received: (qmail invoked by alias); 13 Oct 2009 16:40:22 -0000
Received: from pip44.ptt.js.cn (HELO jlonline.com) [61.155.13.220]
by mx0.gmx.net (mx044) with SMTP; 13 Oct 2009 18:40:22 +0200
Received: from User([41.215.160.134]) by ptt.js.cn(AIMC 3.2.0.0)
with SMTP id jm1014ad4b82d; Wed, 14 Oct 2009 00:35:57 +0800
barrkkoffi [at] buzonabc.com
Received: from squarephillips.com (webmail.squarephillips.com
[66.110.128.118])
by xxxxx (Postfix) with ESMTP id F0D0B78A158E
for xxxxx; Wed, 14 Oct 2009 18:08:40 +0200 (CEST)
Received: from User ([41.189.6.244]) by squarephillips.com with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 13 Oct 2009 20:15:59 -0400
IP: 41.189.6.244 ---> SWIFT NETWORKS LIMITED, Nigeria
millerwilliamj [at] yahoo.com
key63 [at] yahoo.com
Received: from mail.tim.ro (relay-1.tim.ro [85.204.149.12])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AE06478A192F
for xxxxx; Wed, 14 Oct 2009 20:22:59 +0200 (CEST)
Received: from tim.ro (localhost [127.0.0.1])
by mail.tim.ro (8.13.8/8.13.8/Debian-3) with ESMTP id n9EHwWrg021575;
Wed, 14 Oct 2009 20:58:32 +0300
X-OriginatingIP: 62.56.141.15 (metalnav) ---> 62.56.141.15.satcom-systems.net
scam_victim202 [at] sify.com
dr_shola [at] sify.com
Muguphon: +234-8055409597 ---> Globacom Ltd., Nigeria
- kjz
Das Wochenende zum ersten:
Wieviele 'Peter Chambers' mag es wohl geben...
Received: from hukum.uns.ac.id (unknown [222.124.162.151])
by xxxxx (Postfix) with ESMTP id 39D2A7810DA9
for xxxxx; Thu, 15 Oct 2009 00:54:32 +0200 (CEST)
Received: from [82.128.32.215] (account data [at] ict.uns.ac.id HELO User)
by hukum.uns.ac.id (CommuniGate Pro SMTP 5.0.9)
with ESMTPA id 5084638; Thu, 15 Oct 2009 04:32:20 +0000
IP: 82.128.32.215 ---> Multilinks Telecommunications Limited, Nigeria
isaac.peters292 [at] googlemail.com
chamberspeters2 [at] live.com
data [at] ict.uns.ac.id
die Amsterdam-Konnektion:
Received: from n2b.bullet.mail.sg1.yahoo.com (HELO
n2b.bullet.mail.sg1.yahoo.com) [124.108.114.196]
by mx0.gmx.net (mx037) with SMTP; 16 Oct 2009 11:32:13 +0200
Received: from [124.108.115.243] by n2.bullet.mail.sg1.yahoo.com with
NNFMP; 16 Oct 2009 09:32:10 -0000
Received: from [124.108.114.85] by t2.bullet.mail.sg1.yahoo.com with
NNFMP; 16 Oct 2009 09:32:10 -0000
Received: from [127.0.0.1] by omp105.mail.sg1.yahoo.com with NNFMP; 16
Oct 2009 09:32:10 -0000
Received: from [92.61.247.66] by web19004.mail.hk2.yahoo.com via HTTP;
Fri, 16 Oct 2009 17:32:09 HKT
IP: 92.61.247.66 ---> ISPrime BV, NL
mikeamah44 [at] yahoo.com.hk
rev.mikeamah [at] uku.co.uk
rev.mikeamah.mission [at] discuz.org
- kjz
Das Mugu Wochenende zum zweiten:
Received: from smtp.csonline.net (smtp.csonline.net [68.234.57.130])
by xxxxx (Postfix) with ESMTP id 5366178A2111
for xxxxx; Thu, 15 Oct 2009 17:48:37 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by smtp.csonline.net (Postfix) with ESMTP id 1C5AB74105;
Thu, 15 Oct 2009 11:08:57 -0400 (EDT)
Received: from smtp.csonline.net ([127.0.0.1])
by localhost (smtp.csonline.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 23283-02; Thu, 15 Oct 2009 11:08:57 -0400 (EDT)
Received: from User (dsl-245-18-89.telkomadsl.co.za [41.245.18.89])
by smtp.csonline.net (Postfix) with ESMTP id D161574109;
Thu, 15 Oct 2009 11:08:32 -0400 (EDT)
kevin [at] gala.net
kevintowns29 [at] gmail.com
Received: from mail.dte.org.in (unknown [121.244.82.20])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1ABB378A1912
for xxxxx; Thu, 15 Oct 2009 19:12:48 +0200 (CEST)
Received: from 41.202.18.172 ([41.202.18.172])
by mail.dte.org.in (Kerio MailServer 6.5.0);
Wed, 14 Oct 2009 23:10:53 +0530
IP: 41.202.18.172 ---> dhcp18172.myzipnet.com, Ghana
mrdanielkwasi01 [at] aol.com
mrdanielkwasi01 [at] rediffmail.com
Received: from sl1.irserverland.com (EHLO server3.visshost.com)
[66.197.202.64]
by mx0.gmx.net (mx117) with SMTP; 16 Oct 2009 16:44:05 +0200
Received: from [222.95.22.44] (helo=User)
by server3.visshost.com with esmtpa (Exim 4.69)
(envelope-from <angelazhou55 [at] gmail.com>)
id 1Myo21-0007KH-1l; Fri, 16 Oct 2009 14:43:49 +0000
IP: 222.95.22.44 ---> CHINANET jiangsu
angelazhou55 [at] gmail.com
stevezhong47 [at] gmail.com
wieder die Dreckskiste aus Kuba, zudem: gibt's noch einen Freemailer, den der Mugu nicht missbraucht hat....:
Received: from mx.rimed.cu (mx.rimed.cu [200.55.156.166])
by xxxxx (Postfix) with ESMTP id 2BACE78A1931
for xxxxx; Fri, 16 Oct 2009 19:20:59 +0200 (CEST)
Received: from mailer.rimed.cu (mailer.rimed.cu [200.55.156.173])
by mx.rimed.cu (Postfix) with ESMTP id 02F15AAF241;
Thu, 15 Oct 2009 10:19:16 -0400 (CDT)
Received: from localhost (unknown [200.55.156.163])
by mailer.rimed.cu (Postfix) with ESMTP id 5949FC104F;
Thu, 15 Oct 2009 15:27:58 +0200 (CEST)
Received: from 41.217.2.7 ([41.217.2.7]) by webmail.rimed.cu (Horde
Framework) with HTTP; Thu, 15 Oct 2009 09:32:00 -0400
IP: 41.217.2.7 ---> ZOOM Mobile Nigeria Ltd.
hlfxbankplc6 [at] googlemail.com
mrsagueda.carlos2 [at] gmail.com
internatioanltransfer [at] halifaxbnkplc.co.uk
mrjohn.kerryhalifaxbnk [at] live.com
Muguphon: +447024074742 ---> Magrathea Telecommunications Limited, UK
Mugufax: +448447743247 ---> Magrathea Telecommunications Limited, UK
Ms. Abacha ist auch mal wieder dabei, die Story hat doch schon soooon Bart:
Received: from rmutt.ac.th (unknown [203.158.253.29])
by xxxxx (Postfix) with ESMTP id 8FC1B7825738
for xxxxx; Sat, 17 Oct 2009 01:36:27 +0200 (CEST)
Received: from User [82.128.32.132] by rmutt.ac.th with ESMTP
(SMTPD32-8.15) id A1143E601BC; Sat, 10 Oct 2009 02:37:56 +0700
IP: 82.128.32.132 ---> Multilinks Telecommunications Limited, Nigeria
abachamariam11 [at] gmail.com
abacha_mariam101 [at] yahoo.com.hk
Zweimal:
Received: from homeliferomano.com (unknown [206.108.180.94])
by xxxxx (Postfix) with ESMTP id C63BD78A3C33
for xxxxx; Fri, 16 Oct 2009 22:30:44 +0200 (CEST)
Received: from User ([8.9.209.2]) by homeliferomano.com with Microsoft
SMTPSVC(6.0.3790.3959);
Thu, 15 Oct 2009 13:35:45 -0400
Received: from ismu.baikal.ru (unknown [80.237.126.83])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 124DA78A1906
for xxxxx; Sat, 17 Oct 2009 21:20:33 +0200 (CEST)
Received: from User ([8.9.209.2])
(authenticated user administrator [at] ismu.baikal.ru)
by ismu.baikal.ru (Kerio MailServer 6.6.2);
Wed, 14 Oct 2009 09:20:05 +0900
upsx [at] inmail24.com
ups01 [at] post.ro
administrator [at] ismu.baikal.ru
Muguphon: +234-8134779191 ---> Nigeria
Received: from cluster-d.mailcontroller.altohiway.com
(clusterd.mailcontroller.co.uk [213.83.66.161])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2E23678982C1
for xxxxx; Sat, 17 Oct 2009 21:08:43 +0200 (CEST)
Received: from rlya6d.mailcontroller.altohiway.com
(localhost.localdomain [127.0.0.1])
by rlya6d.mailcontroller.altohiway.com (MailController) with ESMTP id
n9HH1no1011993
for xxxxx; Sat, 17 Oct 2009 18:02:33 +0100
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
by rlya6d.mailcontroller.altohiway.com (MailControl) id n9HH1jTi011189
for xxxxx; Sat, 17 Oct 2009 18:01:45 +0100
Received: from server1.thisworks.com ([91.85.153.249])
by rlya6d-eth0.mailcontroller.altohiway.com (envelope-sender
<91.85.153.249 [at] thisworks.com>) (MIMEDefang) with ESMTP id
n9HH1abe009912; Sat, 17 Oct 2009 18:01:45 +0100 (BST)
Received: from User ([41.210.3.219]) by server1.thisworks.com with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 17 Oct 2009 18:01:32 +0100
IP: 41.210.3.219 ---> Ghana Telecommunications Ltd.
paulrichard1 [at] hotmail.co.uk
paulrichard003 [at] yahoo.com
Auch dieser Pharaonen-Mugu weiss kaum noch, welchen Freemailer er denn noch missbrauchen soll:
Received: from www.cdnavigator.ru (mail.cdnavigator.ru [217.23.137.226])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A184778A190C
for xxxxx; Sun, 18 Oct 2009 04:40:12 +0200 (CEST)
Received: from [196.205.200.12] (helo=User)
by www.cdnavigator.ru with esmtpa (Exim 4.50)
id 1My6ct-0008vq-8C; Wed, 14 Oct 2009 20:23:11 +0400
IP: 196.205.200.12 ---> host-196-205-200-12.static.link.com.eg
fbialertfundsgov [at] aim.com
NBECONTRACTORS [at] AOL.COm
NBECONTRACTORPAYLINES [at] LIVE.COM
NBEFOREIGNCONTRACTPAYMENT [at] GMAIL.COM
Muguphon: +20117409022 ---> Etisalat, Egypt
Mugufax: +20118303233 ---> Etisalat, Egypt
die Madrid-Konnektion:
Received: from mail.ontwerp.tv (unknown [196.3.166.165])
by xxxxx (Postfix) with ESMTP id 48B8178A192A
for xxxxx; Sun, 18 Oct 2009 13:08:12 +0200 (CEST)
Received: from User (84.125.255.250.dyn.user.ono.com [84.125.255.250])
by mail.ontwerp.tv (Postfix) with ESMTP
id 770D35316A; Fri, 28 Mar 2003 17:37:54 +0200 (SAST)
repseek_lee09 [at] yahoo.com.hk
willleecomuk [at] live.com
lwilliam67 [at] yahoo.com.hk
Muguphon: +447031973788 ---> Magrathea Telecommunications Limited, UK
gecracktes SquirrelMail:
Received: from server.moestab.gov.bd (server.moestab.gov.bd [123.49.32.76])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 55A2C78940E6
for xxxxx; Sun, 18 Oct 2009 15:02:02 +0200 (CEST)
Received: from server.moestab.gov.bd (localhost.localdomain [127.0.0.1])
by server.moestab.gov.bd (8.13.1/8.13.1) with ESMTP id n9HKGQfV015152;
Sun, 18 Oct 2009 02:16:26 +0600
Received: (from apache [at] localhost)
by server.moestab.gov.bd (8.13.1/8.13.1/Submit) id n9HKFrWJ015129;
Sun, 18 Oct 2009 02:15:53 +0600
X-Authentication-Warning: server.moestab.gov.bd: apache set sender to
sgthunt1 [at] inmail24.com using -f
Received: from 41.189.6.245
(SquirrelMail authenticated user dcpirojpur)
by www.moestab.gov.bd with HTTP;
Sun, 18 Oct 2009 02:15:53 +0600 (BDT)
IP: 41.189.6.245 ---> SWIFT NETWORKS LIMITED, Nigeria
sgthunt1 [at] inmail24.com
sgtrwhunt22 [at] aim.com
dcpirojpur [at] moestab.gov.bd
- kjz
So, dann wollen wir mal wieder, zum ersten:
die Madrid-Konnektion:
Received: from 174.160.216.87.static.jazztel.es (EHLO mx4.hotmail.com)
[87.216.160.174]
by mx0.gmx.net (mx118) with SMTP; 21 Oct 2009 16:15:44 +0200
euro20098 [at] aim.com
bxbljzpuw [at] hotmail.com
winningdesk2000 [at] aim.com
Muguphon: +34-634-075-732 ---> mobile number, Spain
Received: from ss68.shared.server-system.net (EHLO
ss68.shared.server-system.net) [216.70.70.3]
by mx0.gmx.net (mx054) with SMTP; 21 Oct 2009 16:37:06 +0200
Received: from User ([59.154.25.30])
(authenticated bits=0)
by ss68.shared.server-system.net (8.12.11.20060308/8.12.11) with ESMTP
id n9LEXQkC028184;
Wed, 21 Oct 2009 07:33:43 -0700
IP: 59.154.25.30 ---> OPTUS Customer Network
samego1 [at] sify.com
gecracktes SquirrelMail:
Received: from hosting2.ticinocom.com (hosting2.ticinocom.com
[195.190.166.23])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id EC20478A226E
for xxxxx; Wed, 21 Oct 2009 18:14:40 +0200 (CEST)
X-ClientAddr: 127.0.0.1
Received: from www.overlandtravel.com (localhost.localdomain [127.0.0.1])
by hosting2.ticinocom.com (8.12.11/8.12.11) with ESMTP id n9LFOqpI031155;
Wed, 21 Oct 2009 17:24:52 +0200
Received: from 200.110.32.114 (proxying for 196.1.177.97)
(SquirrelMail authenticated user test [at] overlandtravel.com)
by www.overlandtravel.com with HTTP;
Wed, 21 Oct 2009 17:26:07 +0200 (CEST)
IP: 196.1.177.97 ---> Nigerian Telecommunications Ltd.
test [at] overlandtravel.com
shellfedearcredit [at] ireland.ir
shellfedearcredit [at] tokyo.ir
Muguphon: +(44)702-406-5927 ---> Magrathea Telecommunications Limited, UK
Einmal:
Received: from mailout06.t-online.de (mailout06.t-online.de [194.25.134.19])
by xxxxx (Postfix) with ESMTP id 6766D78982C5
for xxxxx; Wed, 21 Oct 2009 19:13:26 +0200 (CEST)
Received: from fwd05.aul.t-online.de
by mailout06.t-online.de with smtp
id 1N0eT1-0001By-01; Wed, 21 Oct 2009 18:55:19 +0200
Received: from User
(bLi0AiZrZhTxkwIgMqZnEU3sf9D6-z3VuNnkxxp7fJwhMnGagHzOShNOooEBTNSQYr@[68.184.93.21])
by fwd05.t-online.de
with esmtp id 1N0dOs-0p8Xtw0; Wed, 21 Oct 2009 17:46:58 +0200
IP: 68.184.93.21 ---> 68-184-93-21.dhcp.smyr.ga.charter.com
fbiworldunit1 [at] yahoo.co.jp
beckmann.p [at] t-online.de
Zweimal:
Received: from mailout06.t-online.de (mailout06.t-online.de [194.25.134.19])
by xxxxx (Postfix) with ESMTP id 3A2FF78982CB
for xxxxx; Wed, 21 Oct 2009 21:00:11 +0200 (CEST)
Received: from fwd09.aul.t-online.de
by mailout06.t-online.de with smtp
id 1N0gMG-00005w-00; Wed, 21 Oct 2009 20:56:28 +0200
Received: from User
(GQlUcwZe8h8SN8O09cR2PlsrLSq4DVcjQavWcIHyIs7X7yY5Do+Qi3OoGqKf1RpZ6N@[68.184.93.21])
by fwd09.t-online.de
with esmtp id 1N0ep1-1uNYO00; Wed, 21 Oct 2009 19:18:03 +0200
gsmsa.ha [at] t-online.de
- kjz
und zum Zweiten:
Received: from cluster-d.mailcontroller.altohiway.com
(clusterd.mailcontroller.co.uk [213.83.66.161])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id DCDCE78A192D
for xxxxx; Sun, 18 Oct 2009 23:37:52 +0200 (CEST)
Received: from rlya6d.mailcontroller.altohiway.com
(localhost.localdomain [127.0.0.1])
by rlya6d.mailcontroller.altohiway.com (MailController) with ESMTP id
n9ILXxwd022518
for xxxxx; Sun, 18 Oct 2009 22:37:52 +0100
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
by rlya6d.mailcontroller.altohiway.com (MailControl) id n9ILXCUw012465
for xxxxx; Sun, 18 Oct 2009 22:33:12 +0100
Received: from server1.thisworks.com ([91.85.153.249])
by rlya6d-eth0.mailcontroller.altohiway.com (envelope-sender
<91.85.153.249 [at] thisworks.com>) (MIMEDefang) with ESMTP id
n9ILUWSY021065; Sun, 18 Oct 2009 22:33:12 +0100 (BST)
Received: from User ([41.210.27.181]) by server1.thisworks.com with
Microsoft SMTPSVC(6.0.3790.3959);
Sun, 18 Oct 2009 22:32:06 +0100
IP: 41.210.27.181 ---> adsl27181.4u.com.gh
attn.paulrichard [at] sify.com
paulrichard001 [at] live.com
der Dauer-Mugu:
Received: from llwa693.servidoresdns.net (dns1.progresoweb.com
[217.76.155.37])
by xxxxx (Postfix) with ESMTP id D149D78A2284
for xxxxx; Mon, 19 Oct 2009 12:38:02 +0200 (CEST)
Received: from User (aluminium.onspeed.com [212.100.250.217])
by llwa693.servidoresdns.net (Postfix) with ESMTP
id 064501BDF9D; Mon, 19 Oct 2009 12:07:55 +0200 (CEST)
Received: from mtnngprs.com (trwKDgKdhT [at] mtnngprs.com [41.220.75.3])
by aluminium.onspeed.com (SlipStream SP Server 6.0.19
built 2007/11/22 15:27:31 -0500 (EST)); Mon, 19 Oct 2009 10:08:17 +0100
(BST)
X-Originating-IP: [41.220.75.3] ---> MTN, Nigeria
lorenzo_mr.antonio [at] yahoo.com.hk
atoion_8771 [at] yahoo.co.jp
Muguphon: +44-701-118-3680 ---> PNC Telecom Services Limited, UK
Received: from ns1.daddyfixit.net (unknown [207.36.201.86])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 77F6078940EB
for xxxxx; Tue, 20 Oct 2009 02:59:43 +0200 (CEST)
Received: (qmail 2969 invoked from network); 13 Oct 2009 02:58:05 -0000
Received: from unknown (HELO User) (66.46.180.180)
by ns1.daddyfixit.net with SMTP; 13 Oct 2009 02:58:05 -0000
workkoffi4 [at] sify.com
workkoffi2 [at] sify.com
Received: from ctrealtor.com (mail.ctrealtor.com [69.0.22.54])
by xxxxx (Postfix) with ESMTP id 5CB3278810D5
for xxxxx; Tue, 20 Oct 2009 06:53:55 +0200 (CEST)
Received: from User ([41.189.6.245] RDNS failed) by ctrealtor.com with
Microsoft SMTPSVC(6.0.3790.3959);
Sun, 18 Oct 2009 12:51:38 -0400
IP: 41.189.6.245 ---> SWIFT NETWORKS LIMITED, Nigeria
yagomailsss2009 [at] sbcglobal.net
yagolottomailsss [at] sify.com
crawwffordanderson [at] hotmail.com
Muguphon: +221-778-026 728 ---> Orange Sénégal (Sonatel Mobiles)
Received: from mail.tcm.pa.gov.br (ns2.tcm.pa.gov.br [200.242.199.80])
by xxxxx (Postfix) with ESMTP id AF94078810D5
for xxxxx; Tue, 20 Oct 2009 04:27:57 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mail.tcm.pa.gov.br (Postfix) with ESMTP id 9F2F38403A;
Mon, 19 Oct 2009 23:18:56 -0300 (BRT)
Received: from mail.tcm.pa.gov.br ([127.0.0.1])
by localhost (web.tcm.pa.gov.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id b11yJfKHkURn; Mon, 19 Oct 2009 23:18:56 -0300 (BRT)
Received: from User (unknown [77.104.239.1])
by mail.tcm.pa.gov.br (Postfix) with ESMTPA id 6040D84031;
Mon, 19 Oct 2009 23:18:08 -0300 (BRT)
IP: 77.104.239.1 ---> minaretnet.cz
evelynmartins16 [at] yahoo.com.hk
mschoolfees [at] ymail.com
Received: from rlmailsrv.rantrans.local (mail.rantrans.com.tr
[195.128.35.13])
by xxxxx (Postfix) with ESMTP id 698D5789825F
for xxxxx; Tue, 20 Oct 2009 05:00:09 +0200 (CEST)
Received: from User ([192.168.16.200]) by rlmailsrv.rantrans.local with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 20 Oct 2009 05:30:43 +0300
atmcard.cb01 [at] gmail.com
jeffreylowis0 [at] gmail.com
gecracktes SquirrelMail:
Received: from stdwww.iimahd.ernet.in (stdwww.iimahd.ernet.in
[202.41.76.247])
by xxxxx (Postfix) with ESMTP id 2A1E678A1FF0
for xxxxx; Tue, 20 Oct 2009 08:02:54 +0200 (CEST)
Received: (from apache [at] localhost)
by stdwww.iimahd.ernet.in (8.11.6/8.11.6) id n9K3tQO14631;
Tue, 20 Oct 2009 09:25:26 +0530
X-Authentication-Warning: stdwww.iimahd.ernet.in: apache set sender to
drgoodman2009 [at] yahoo.com.hk using -f
Received: from 41.211.233.159
(SquirrelMail authenticated user jpsingh);
by stdwww.iimahd.ernet.in with HTTP;
Mon, 19 Oct 2009 20:55:26 -0700 (PDT)
IP: 41.211.233.159 ---> Direct-on-PC Limited, Nigeria
drgoodman2009 [at] yahoo.com.hk
drernestobi009 [at] gmail.com
jpsingh [at] iimahd.ernet.in
Received: from webmail1.one.com (webmail1.b-one.net [195.47.247.29])
by xxxxx (Postfix) with ESMTP id A516E78A2270
for xxxxx; Wed, 21 Oct 2009 11:33:55 +0200 (CEST)
Received: from webmail01.one.com (localhost [127.0.0.1])
by webmail1.one.com (Postfix) with ESMTP id 14976784B67D;
Wed, 21 Oct 2009 11:29:57 +0200 (CEST)
Received: from 148.233.239.24 (proxying for 41.220.75.16)
(SquirrelMail authenticated user inge [at] rahbekterapi.dk)
by webmail01.one.com with HTTP;
Wed, 21 Oct 2009 11:29:57 +0200
IP: 41.220.75.16 ---> MTN Nigeria
mr.benhamcole001 [at] msn.com
2009thebigbiglotto [at] gmail.com
gecracktes SquirrelMail, die Madrid-Konnektion:
Received: from mail.nau.edu.ua (mail.nau.edu.ua [193.178.34.9])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C812978A2301
for xxxxx; Wed, 21 Oct 2009 14:27:31 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.nau.edu.ua (Postfix) with ESMTP id F30F4E222E1;
Tue, 20 Oct 2009 15:19:53 +0300 (EEST)
X-Virus-Scanned: amavisd-new at nau.du.ua
Received: from mail.nau.edu.ua ([127.0.0.1])
by localhost (mail.nau.edu.ua [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 2ET4Y-Ic63Uu; Tue, 20 Oct 2009 15:19:53 +0300 (EEST)
Received: from mail.nau.edu.ua (localhost.localdomain [127.0.0.1])
by mail.nau.edu.ua (Postfix) with ESMTP id 55C31E221C8;
Tue, 20 Oct 2009 15:19:53 +0300 (EEST)
Received: from 77.208.44.210
(SquirrelMail authenticated user stp [at] nau.edu.ua)
by mail.nau.edu.ua with HTTP;
Tue, 20 Oct 2009 15:19:53 +0300 (EEST)
IP: 77.208.44.210 ---> 77-208-44-210.red-acceso.airtel.net/Vodafone, ES
stp [at] nau.edu.ua
Euromillionjacjport.com [at] nau.edu.ua
euro2009 [at] latinmail.com
Muguphon: + 34 - 680 - 349 - 414 ---> Telefónica Móviles España, S.a.u.
Mugufax: + 34 - 679 - 551 - 377 ---> Telefónica Móviles España, S.a.u.
- kjz
Das Mugu-Wochenende, erster Teil:
gecrackter Uni-Account der Amsterdam-Konnektion:
Received: from securemail.missouristate.edu
(securemail.MissouriState.edu [146.7.7.161])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0C80378982CB
for xxxxx; Thu, 22 Oct 2009 10:51:21 +0200 (CEST)
Received: from evh1-et1.EDUBEAR.NET (evh1-et1.MissouriState.edu
[146.7.6.101])
by securemail.missouristate.edu (8.13.8/8.13.8) with ESMTP id
n9JD0puX008445;
Mon, 19 Oct 2009 08:00:51 -0500
Received: from evh1-ht1.EDUBEAR.NET (146.7.6.102) by evh1-et1.EDUBEAR.NET
(146.7.6.101) with Microsoft SMTP Server (TLS) id 8.1.240.5; Mon, 19
Oct 2009
08:00:51 -0500
Received: from evh1-ms1.EDUBEAR.NET ([2002:9207:667::9207:667]) by
evh1-ht1.EDUBEAR.NET ([2002:9207:666::9207:666]) with mapi; Mon, 19 Oct
2009
08:00:49 -0500
SusanDollar [at] MissouriState.edu
claimrep.lewis [at] live.nl
Muguphon: +31 626 006 051 ---> Telfort B.V., NL
Received: from bridge3.bridge.com.br (151027.bridge.com.br [200.150.151.27])
by xxxxx (Postfix) with ESMTP id 897DF78A2367
for xxxxx; Thu, 22 Oct 2009 11:26:04 +0200 (CEST)
Received: from User (unverified [69.197.177.156]) by bridge3.bridge.com.br
(Vircom SMTPRS 4.5.186) with ESMTP id <B0238257847 [at] bridge3.bridge.com.br>;
Thu, 22 Oct 2009 07:57:28 -0200
st1923n [at] googlemail.com
st1924a [at] googlemail.com
st1923a [at] gmail.com
gecrackter Account:
Received: from mail2.mt.net (mail2.mt.net [206.127.64.145])
by xxxxx (Postfix) with ESMTP id 1F9A578A2127
for xxxxx; Thu, 22 Oct 2009 12:01:33 +0200 (CEST)
Received: from mail2.mt.net (mail2.mt.net [206.127.64.145])
by mail2.mt.net (Postfix) with ESMTP id CC8E31420CD;
Thu, 22 Oct 2009 09:38:08 +0000 (UTC)
Received: from 41.217.2.8 ([41.217.2.8]) by mail2.mt.net (Horde MIME
library) with HTTP; Thu, 22 Oct 2009 09:38:07 +0000
IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.
judycmic [at] lewistown.net
mr.vincentcheng13 [at] yahoo.com.hk
Received: from imsm057dat.netvigator.com (imsm057.netvigator.com
[218.102.48.210])
by xxxxx (Postfix) with ESMTP id DA8F378A23CC
for xxxxx; Fri, 23 Oct 2009 12:35:55 +0200 (CEST)
Received: from User ([60.208.119.2]) by imsm058dat.netvigator.com
(InterMail vM.7.05.01.01 201-2174-106-103-20060222) with ESMTP
id <20091023101255.BCIG22710.imsm058dat.netvigator.com [at] User>;
Fri, 23 Oct 2009 18:12:55 +0800
IP: 60.208.119.2 ---> CNC Group CHINA169 Shandong
okorojames66 [at] gmail.com
robert.devise [at] blueyonder.co.uk
- kjz
Das Mugu-Wochenende, zweiter Teil:
Received: from mail.morselli.com
(host247-197-149-62.serverdedicati.aruba.it [62.149.197.247])
by xxxxx (Postfix) with ESMTP id 6B01978A191D
for xxxxx; Fri, 23 Oct 2009 20:08:11 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.morselli.com (Postfix) with ESMTP id E6C2E1F5A6D;
Fri, 23 Oct 2009 19:51:52 +0200 (CEST)
Received: from mail.morselli.com ([127.0.0.1])
by localhost (server.morselli.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id SrzzTgKH9OrT; Fri, 23 Oct 2009 19:51:52 +0200 (CEST)
Received: from User (vfbb21470.4u.com.gh [41.218.214.70])
by mail.morselli.com (Postfix) with ESMTPA id 5C4C61F5A61;
Fri, 23 Oct 2009 19:51:42 +0200 (CEST)
frankwuddah2009 [at] volny.cz
frankwuddahh [at] sify.com
Received: from telkomsa.net (unknown [196.25.211.124])
by xxxxx (Postfix) with ESMTP id 3989A78A232A
for xxxxx; Fri, 23 Oct 2009 19:45:44 +0200 (CEST)
Received: (qmail 3548 invoked from network); 23 Oct 2009 16:14:36 -0000
Received: from unknown (HELO User)
(online318874 [at] telkomsa.net@[218.25.99.135])
(envelope-sender <mr.petermensah05 [at] tro.net>)
by O (qmail-ldap-1.03) with SMTP
for <kzfevl [at] buzzlanka.com>; 23 Oct 2009 16:14:33 -0000
IP: 218.25.99.135 ---> China Unicom Liaoning
mrpetermensah04 [at] yahoo.com
mr.petermensah05 [at] tro.net
mrpetermensah06 [at] gmail.com
online318874 [at] telkomsa.net
Received: from mail.zjqtly.com (unknown [60.191.0.36])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7244478A23C0
for xxxxx; Sat, 24 Oct 2009 11:44:32 +0200 (CEST)
Received: from User ([82.128.33.237])
(authenticated user admin [at] zjqtly.com)
by mail.zjqtly.com (Kerio MailServer 6.7.0 patch 1);
Fri, 23 Oct 2009 05:07:07 +0800
IP: 82.128.33.237 ---> Multilinks Telecommunications Limited, Nigeria
admin [at] zjqtly.com
info [at] fmfforeignpaymentregistry-nig.com
visacard [at] intercontinentalbankplc-nig.com
Muguphon: +234-704-235-3306 ---> Visafone Communications Ltd., Nigeria
Received: from web84008.mail.mud.yahoo.com (web84008.mail.mud.yahoo.com
[68.142.206.178])
by xxxxx (Postfix) with SMTP id A19007825737
for xxxxx; Sat, 24 Oct 2009 13:51:45 +0200 (CEST)
Received: (qmail 10802 invoked by uid 60001); 24 Oct 2009 11:51:44 -0000
Received: from [41.191.86.105] by web84008.mail.mud.yahoo.com via HTTP;
Sat, 24 Oct 2009 04:51:43 PDT
IP: 41.191.86.105 ---> NETLAND, BJ
kbblown50 [at] yahoo.com
western_union.04 [at] sify.com
Muguphon: +229 98455352 ---> Benin
Received: from smtpcom.263xmail.com (smtpcom.263xmail.com [211.150.64.22])
by xxxxx (Postfix) with ESMTP id C885978810D5
for xxxxx; Sat, 24 Oct 2009 19:00:12 +0200 (CEST)
Received: from smtpcom.263xmail.com (localhost.localdomain [127.0.0.1])
by smtpcom.263xmail.com (Postfix) with ESMTP id E5DB84C9A8;
Sun, 25 Oct 2009 00:32:10 +0800 (CST)
X-ABS-CHECKED:1
X-KSVirus-check:0
Received: from User (localhost.localdomain [127.0.0.1])
by smtpcom.263xmail.com (Postfix) with ESMTP id 477213C815C;
Sun, 25 Oct 2009 00:31:17 +0800 (CST)
X-SENDER-IP: 82.128.32.55 ---> Multilinks Telecommunications Limited, Nigeria
zyjsxx [at] gongmeigroup.com.cn
robinpaish [at] maktoob.com
mr.robinparish [at] yahoo.com
inter.detelexdept1 [at] live.com
Muguphon: 07026359572 ---> Bouvet Island
Received: from server.kamtec.com (kamtest.com [213.8.123.20])
by xxxxx (Postfix) with ESMTP id 129D678A2105
for xxxxx; Sat, 24 Oct 2009 22:17:40 +0200 (CEST)
Received: from User ([82.128.20.6] RDNS failed) by server.kamtec.com
with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 24 Oct 2009 22:03:37 +0200
IP: 82.128.20.6 ---> Multilinks Telecommunications Limited, Nigeria
drandynwaeze1 [at] yahoo.com.hk
andynwaeze [at] yahoo.com.au
Muguphon: +234 8058137764 ---> Globacom Ltd., Nigeria
Received: from mailhosting.pi.se (mailhosting.pi.se [195.7.64.8])
by xxxxx (Postfix) with ESMTP id 1AE9278A2281
for xxxxx; Sat, 24 Oct 2009 23:49:00 +0200 (CEST)
Received: from s4k.se (mail.s4k.se [195.149.159.204])
by mailhosting.pi.se (Postfix) with SMTP id A20AA137C2F;
Sat, 24 Oct 2009 23:38:43 +0200 (CEST)
test [at] s4k.com
euromillion1550 [at] luckymail.com
Muguphon: +32-489-603-804 ---> mobile phone, Belgium
die Madrid-Konnektion, zweimal:
Received: from mail2.icmc.usp.br (mail.icmc.usp.br [143.107.231.3])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A204878A2120
for xxxxx; Sun, 25 Oct 2009 10:16:54 +0100 (CET)
Received: by mail2.icmc.usp.br (Postfix, from userid 10033)
id F4150E2D7; Sun, 25 Oct 2009 06:37:17 -0200 (BRST)
Received: from mail2.icmc.usp.br (localhost [127.0.0.1])
by mail2.icmc.usp.br (Postfix) with ESMTP id A9F7FE293;
Sun, 25 Oct 2009 06:37:16 -0200 (BRST)
Received: from 212.166.64.10
by mail2.icmc.usp.br with HTTP;
Sun, 25 Oct 2009 06:37:16 -0200 (BRST)
Received: from mail2.icmc.usp.br (mail.icmc.usp.br [143.107.231.3])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 99C837810DAA
for xxxxx; Sun, 25 Oct 2009 10:56:24 +0100 (CET)
Received: by mail2.icmc.usp.br (Postfix, from userid 10033)
id 630DD18DA0; Sun, 25 Oct 2009 07:41:35 -0200 (BRST)
Received: from mail2.icmc.usp.br (localhost [127.0.0.1])
by mail2.icmc.usp.br (Postfix) with ESMTP id 9ACFD18CF4;
Sun, 25 Oct 2009 07:41:33 -0200 (BRST)
Received: from 212.166.64.10
by mail2.icmc.usp.br with HTTP;
Sun, 25 Oct 2009 07:41:33 -0200 (BRST)
IP: 212.166.64.10 ---> 10.64.166.212.ibercom.com
mr.benhamcole [at] live.co.uk
arraut [at] icmc.usp.br
2009thebigbiglotto [at] gmail.com
wieder mal der Dauer-Mugu:
Received: from discover.discover-net.net (domain1.ec.wi.discover-net.net
[208.75.152.8])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 42C7278A230C
for xxxxx; Sun, 25 Oct 2009 14:30:15 +0100 (CET)
Received: from discover-net.net (discover.discover-net.net [127.0.0.1])
by discover.discover-net.net (Postfix) with ESMTP id 20C0B4A8958;
Sun, 25 Oct 2009 04:20:41 -0500 (CDT)
X-OriginatingIP: 41.220.75.3 (bleis) ---> mtnngprs.com/MTN, Nigeria
ptr.wallace101 [at] gmail.com
mellisa [at] lewis.com
- kjz
Received: from mail.zjqtly.com (unknown [60.191.0.36])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7244478A23C0
for xxxxx; Sat, 24 Oct 2009 11:44:32 +0200 (CEST)
Received: from User ([82.128.33.237])
(authenticated user admin [at] zjqtly.com)
by mail.zjqtly.com (Kerio MailServer 6.7.0 patch 1);
Fri, 23 Oct 2009 05:07:07 +0800
IP: 82.128.33.237 ---> Multilinks Telecommunications Limited, Nigeria
admin [at] zjqtly.com
info [at] fmfforeignpaymentregistry-nig.com
visacard [at] intercontinentalbankplc-nig.com
Muguphon: +234-704-235-3306 ---> Visafone Communications Ltd., Nigeria
intercontinentalbankplc-nig.com ist schon sehr tot, aber das Finanzministerium lebt noch.
AA419: http://db.aa419.org/fakebanksview.php?key=41080
-> http://liquidnetltd.net/?lang=en&action=aboutus&submenu=contactus für den Abschuß
frische Mugus, die jedoch ganz die alten sind:
Received: from nschwmtas06p.mx.bigpond.com (nschwmtas06p.mx.bigpond.com
[61.9.189.152])
by xxxxx (Postfix) with ESMTP id E87467825738
for xxxxx; Mon, 26 Oct 2009 04:57:37 +0100 (CET)
Received: from nschwotgx02p.mx.bigpond.com ([165.228.117.68])
by nschwmtas06p.mx.bigpond.com with ESMTP
id
<20091026035734.JFCH22839.nschwmtas06p.mx.bigpond.com [at] nschwotgx02p.mx.bigpond.com>;
Mon, 26 Oct 2009 03:57:34 +0000
Received: from internetonlycarousel.com.au ([165.228.117.68])
by nschwotgx02p.mx.bigpond.com with ESMTP
id
<20091026035734.IPYB9934.nschwotgx02p.mx.bigpond.com [at] internetonlycarousel.com.au>;
Mon, 26 Oct 2009 03:57:34 +0000
Received: from User ([82.128.32.161]) by internetonlycarousel.com.au
with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 25 Oct 2009 00:09:01 +0800
IP: 82.128.32.161 ---> Multilinks Telecommunications Limited, Nigeria
tonybright [at] orange.pl
tonybright [at] doda.uz
Received: from m1.ndb.com.tw (220-130-151-29.HINET-IP.hinet.net
[220.130.151.29])
by xxxxx (Postfix) with ESMTP id 7E9687825734
for xxxxx; Tue, 27 Oct 2009 11:52:11 +0100 (CET)
Received: from User ([41.211.239.178]) by m1.ndb.com.tw with Microsoft
SMTPSVC(5.0.2195.6713);
Tue, 27 Oct 2009 18:38:55 +0800
IP: 41.211.239.178 ---> 178.239.211.41.client178.directonpc.net, Nigeria
bank.draft20 [at] googlemail.com
wunion.m01 [at] live.com
die Amsterdam-Konnektion, zweimal:
Received: from cpsmtpb-ews04.kpnxchange.com
(cpsmtpb-ews04.kpnxchange.com [213.75.39.7])
by xxxxx (Postfix) with ESMTP id D14D07825734
for xxxxx; Tue, 27 Oct 2009 23:55:19 +0100 (CET)
Received: from cpbrm-ews02.kpnxchange.com ([10.94.84.133]) by
cpsmtpb-ews04.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 27 Oct 2009 23:55:19 +0100
Received: from CPSMTPM-EML04.kpnxchange.com ([213.75.39.74]) by
cpbrm-ews02.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 27 Oct 2009 23:55:19 +0100
Received: from localhost ([10.94.77.199]) by
CPSMTPM-EML04.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Tue, 27 Oct 2009 23:55:14 +0100
Received: from cpsmtpb-ews02.kpnxchange.com
(cpsmtpb-ews02.kpnxchange.com [213.75.39.5])
by xxxxx (Postfix) with ESMTP id A4FA578A1585
for xxxxx; Wed, 28 Oct 2009 01:21:02 +0100 (CET)
Received: from cpbrm-ews07.kpnxchange.com ([10.94.84.138]) by
cpsmtpb-ews02.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 28 Oct 2009 01:21:02 +0100
Received: from CPSMTPM-EML07.kpnxchange.com ([213.75.39.77]) by
cpbrm-ews07.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 28 Oct 2009 01:21:01 +0100
Received: from localhost ([10.94.77.199]) by
CPSMTPM-EML07.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Wed, 28 Oct 2009 01:20:58 +0100
ber739pn [at] kpnmail.nl
richardtang177 [at] yahoo.com.hk
aus Ghana, ebenfalls zweimal:
Received: from kalhajewelry.com (EHLO vps.graphicslava.com) [76.12.246.117]
by mx0.gmx.net (mx113) with SMTP; 28 Oct 2009 08:31:26 +0100
Received: (qmail 3450 invoked from network); 27 Oct 2009 15:34:55 -0400
Received: from unknown (HELO User) (41.215.160.135)
by kalhajewelry.com with SMTP; 27 Oct 2009 15:34:38 -0400
Received: from kalhajewelry.com (EHLO vps.graphicslava.com) [76.12.246.117]
by mx0.gmx.net (mx059) with SMTP; 28 Oct 2009 08:31:26 +0100
Received: (qmail 3450 invoked from network); 27 Oct 2009 15:34:55 -0400
Received: from unknown (HELO User) (41.215.160.135)
by kalhajewelry.com with SMTP; 27 Oct 2009 15:34:38 -0400
IP: 41.215.160.135 ---> Millicom Ghana Limited
mineassc2009 [at] buzonabc.com
glennichol [at] aol.com
Muguphon: +233272926604 ---> Mobitel, Ghana/Millicom/Tigo
auch Netsol läßt Missbrauch zu:
Received: from omr4.networksolutionsemail.com (EHLO
omr4.networksolutionsemail.com) [205.178.146.54]
by mx0.gmx.net (mx087) with SMTP; 28 Oct 2009 01:09:08 +0100
Received: from mail.networksolutionsemail.com
(mail.networksolutionsemail.com [205.178.146.50])
by omr4.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
n9S098X7022828
for xxxxx; Tue, 27 Oct 2009 20:09:08 -0400
Message-Id: <200910280009.n9S098X7022828 [at] omr4.networksolutionsemail.com>
Received: (qmail 8539 invoked by uid 78); 28 Oct 2009 00:09:07 -0000
Received: from unknown (HELO User) (money2 [at] payreason.org@41.208.139.104)
by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 28 Oct 2009 00:09:07
-0000
IP: 41.208.139.104 ---> SONATEL, SN
msariana [at] i12.com
- kjz
Und es gibt nochmal Nachschub:
Received: from mout7.freenet.de (mout7.freenet.de [195.4.92.97])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4056F78A23CB
for xxxxx; Tue, 27 Oct 2009 16:43:31 +0100 (CET)
Received: from [195.4.92.26] (helo=16.mx.freenet.de)
by mout7.freenet.de with esmtpa (ID benbernanke40003 [at] freakmail.de)
(port 25) (Exim 4.69 #92)
id 1N2oCg-0001aU-FA; Tue, 27 Oct 2009 16:43:22 +0100
Received: from [41.211.233.190] (port=62608 helo=User)
by 16.mx.freenet.de with esmtpa (ID benbernanke40003 [at] freakmail.de)
(port 25) (Exim 4.69 #94)
id 1N2oCa-0008EH-ER; Tue, 27 Oct 2009 16:43:22 +0100
IP: 41.211.233.190 ---> 190.233.211.41.client190.directonpc.net, Nigeria
benbernanke40003 [at] freakmail.de
mrbenbernanke2251 [at] gmail.com
bernankeben26 [at] yahoo.com
Und im Doppelpack, 2 versch. 'Märchen', aber 1 Mugu:
Received: from cvda-dc1.cvda.local
(68-190-176-86.static.reno.nv.charter.com [68.190.176.86])
by xxxxx (Postfix) with ESMTP id 25D0278A235A
for xxxxx; Thu, 29 Oct 2009 17:43:41 +0100 (CET)
Received: from User ([116.206.175.83]) by cvda-dc1.cvda.local with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 29 Oct 2009 09:29:37 -0800
IP: 116.206.175.83 ---> iZZinet Sdn. Bhd., MY
markllopez [at] sify.com
susaroy [at] sify.com
sussanroy [at] sify.com
Received: from kolhamusica.com (mail.kolhamusica.com [199.203.111.240])
by xxxxx (Postfix) with ESMTP id B064D789B5F5
for xxxxx; Thu, 29 Oct 2009 19:49:59 +0100 (CET)
Received: from User ([116.206.147.91]) by kolhamusica.com with Microsoft
SMTPSVC(6.0.3790.3959);
Wed, 28 Oct 2009 00:32:54 +0200
IP: 116.206.147.91 ---> iZZinet Sdn. Bhd.
markllopez [at] sify.com
mark1lopez [at] sify.com
- kjz
Ich stelle fest: von der Strafaktion mit Sprengung von 18 "Syndikaten" (waren wohl nur Klein-Gangs...) war dieser Ring hier nicht betroffen. Die machen lustig weiter wie bisher. Obwohl die Mails wohl sicher aus Nigeria kommen.
auch Netsol läßt Missbrauch zu:
Normalerweise verschwinden solche für das Spammen registrierte Domains dort sehr schnell und gründlich. payreason.org dürfte bald das gleiche Schicksal erleiden. Hatte die Seite einen aussagekräftigen Namen in der Mail?
Ach ja, das FMF von oben ist bereits ganz tot.
Mein Beitrag zum Thema 'EFCC/Nigeria greift gegen 419-Scammer' durch, erster Teil.....
Received: from yourdomain.com (60-248-108-193.HINET-IP.hinet.net
[60.248.108.193])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D804678A2100
for xxxxx; Thu, 29 Oct 2009 06:13:41 +0100 (CET)
Received: by yourdomain.com (Postfix, from userid 401)
id 9D6244A1E8F; Thu, 29 Oct 2009 12:45:43 +0800 (CST)
Received: from ETIZENA-PC
(62-31-227-158.cable.ubr07.dals.blueyonder.co.uk [62.31.227.158])
by yourdomain.com (Postfix) with ESMTP id B87AF4A1E73
for xxxxx; Thu, 29 Oct 2009 12:45:41 +0800 (CST)
mleewoo [at] ymail.com
wmianglee [at] yahoo.cn
mianglee [at] yahoo.cn
Received: from correo.zacatecas.gob.mx
(customer-148-233-65-141.uninet-ide.com.mx [148.233.65.141])
by xxxxx (Postfix) with ESMTP id 0E0FB78810D4
for xxxxx; Fri, 30 Oct 2009 02:22:38 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by correo.zacatecas.gob.mx (Postfix) with ESMTP id 9E8122F3007F;
Thu, 29 Oct 2009 19:02:37 -0600 (CST)
X-Virus-Scanned: amavisd-new at zacatecas.gob.mx
Received: from correo.zacatecas.gob.mx ([127.0.0.1])
by localhost (correo.zacatecas.gob.mx [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 7BeVKH2uP4Zs; Thu, 29 Oct 2009 19:02:37 -0600 (CST)
Received: from correo.zacatecas.gob.mx (correo.zacatecas.gob.mx
[10.110.6.19])
by correo.zacatecas.gob.mx (Postfix) with ESMTP id 080442F3007D;
Thu, 29 Oct 2009 19:02:37 -0600 (CST)
agarcia [at] zacatecas.gob.mx
bmw.group083 [at] live.com
Muguphon: +44(0) 7031925534 ---> Magrathea Telecommunications Limited, UK
Received: from omr4.networksolutionsemail.com (EHLO
omr4.networksolutionsemail.com) [205.178.146.54]
by mx0.gmx.net (mx087) with SMTP; 28 Oct 2009 01:09:08 +0100
Received: from mail.networksolutionsemail.com
(mail.networksolutionsemail.com [205.178.146.50])
by omr4.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
n9S098X7022828
for xxxxx; Tue, 27 Oct 2009 20:09:08 -0400
Message-Id: <200910280009.n9S098X7022828 [at] omr4.networksolutionsemail.com>
Received: (qmail 8539 invoked by uid 78); 28 Oct 2009 00:09:07 -0000
Received: from unknown (HELO User) (money2 [at] payreason.org@41.208.139.104)
by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 28 Oct 2009 00:09:07
-0000
IP: 41.208.139.104 ---> SONATEL, SN
msariana [at] i12.com
money2 [at] payreason.org
richardson559 [at] msn.com
http://payreason.org
Received: from rbcbioscience.local (unknown [61.221.166.51])
by xxxxx (Postfix) with ESMTP id 7691A78A2C62
for xxxxx>; Fri, 30 Oct 2009 09:46:18 +0100 (CET)
Received: from User ([82.128.32.137] RDNS failed) by rbcbioscience.local
with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 30 Oct 2009 04:26:56 +0800
IP: 82.128.32.137 ---> Multilinks Telecommunications Limited, Nigeria
michaelelliott8 [at] gmx.com
michaelelliott111 [at] gmx.com
Received: from 208.43.83.29-static.strong-sl2.reliablehosting.com (EHLO
mx4.hotmail.com) [208.43.83.29]
by mx0.gmx.net (mx007) with SMTP; 30 Oct 2009 12:22:10 +0100
gonzalod [at] hotmail.es
Received: from mx4.hotmail.com ([87.212.231.169])
by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
id 0M26oN-1MAMBF14up-00toCN for xxxxx; Fri, 30 Oct 2009
13:27:54 +0100
obersiri_65 [at] aol.in
ma_gollmann65 [at] yahoo.com
- kjz
Mein Beitrag zum Thema 'EFCC/Nigeria greift gegen 419-Scammer' durch, zweiter Teil.....
zum ersten:
Received: from cvda-dc1.cvda.local
(68-190-176-86.static.reno.nv.charter.com [68.190.176.86])
by xxxxx (Postfix) with ESMTP id 25D0278A235A
for xxxxx; Thu, 29 Oct 2009 17:43:41 +0100 (CET)
Received: from User ([116.206.175.83]) by cvda-dc1.cvda.local with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 29 Oct 2009 09:29:37 -0800
susaroy [at] sify.com
markllopez [at] sify.com
sussanroy [at] sify.com
zum zweiten:
Received: from kolhamusica.com (mail.kolhamusica.com [199.203.111.240])
by xxxxx (Postfix) with ESMTP id B064D789B5F5
for xxxxx; Thu, 29 Oct 2009 19:49:59 +0100 (CET)
Received: from User ([116.206.147.91]) by kolhamusica.com with Microsoft
SMTPSVC(6.0.3790.3959);
Wed, 28 Oct 2009 00:32:54 +0200
mark1lopez [at] sify.com
markllopez [at] sify.com
'Peter Chambers' zum dreihundertzwölfzigsten Mal via gecracktem Account:
Received: from mail.parenttoparentofga.org (mail.parenttoparentofga.org
[64.238.124.203])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 42FE278A1597
for xxxxxx; Sat, 31 Oct 2009 06:44:43 +0100 (CET)
Received: from User ([82.128.32.6])
(authenticated user douglas [at] parenttoparentofga.org)
by mail.parenttoparentofga.org;
Thu, 29 Oct 2009 05:56:16 -0400
IP: 82.128.32.6 ---> Multilinks Telecommunications Limited, Nigeria
isaac.peters292 [at] googlemail.com
douglas [at] parenttoparentofga.org
douglas [at] parenttoparentofga.org
Received: from smtp19.orange.fr (smtp19.orange.fr [80.12.242.18])
by xxxxx (Postfix) with ESMTP id 19A637810DAA
for xxxxx; Sat, 31 Oct 2009 02:11:31 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf1916.orange.fr (SMTP Server) with ESMTP id 92F2320002EE;
Sat, 31 Oct 2009 02:11:31 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf1916.orange.fr (SMTP Server) with ESMTP id 7AE2920000B1;
Sat, 31 Oct 2009 02:11:31 +0100 (CET)
Received: from User (LMontsouris-152-61-15-199.w80-13.abo.wanadoo.fr
[80.13.142.199])
by mwinf1916.orange.fr (SMTP Server) with SMTP id C235220000B2;
Sat, 31 Oct 2009 02:11:25 +0100 (CET)
paramfinancialloan [at] gmail.com
die Klette zum ersten:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx117) with SMTP; 31 Oct 2009 01:59:57 +0100
Received: from User (93-39-51-58.ip74.fastwebnet.it [93.39.51.58])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id n9V0wbOB008183;
Sat, 31 Oct 2009 09:58:39 +0900
giovsutherland [at] yahoo.com.hk
sgiovani [at] email.it
zum zweiten:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx117) with SMTP; 31 Oct 2009 01:59:57 +0100
Received: from User (93-39-51-58.ip74.fastwebnet.it [93.39.51.58])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id n9V0wbOB008183;
Sat, 31 Oct 2009 09:58:39 +0900
giovsutherland [at] yahoo.com.hk
sgiovani [at] email.it
Received: from mx4.hotmail.com ([87.212.231.169])
by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
id 0LhM2K-1MQVUS16uG-00mVd2 for xxxxx; Sat, 31 Oct 2009
00:51:24 +0100
obersiri_65 [at] aol.in
ma_gollmann65 [at] yahoo.com
Received: from srv-mess.tca.fr (unknown [83.206.20.28])
by xxxxx (Postfix) with ESMTP id 37CF57810DAA
for xxxxx; Sat, 31 Oct 2009 06:38:57 +0100 (CET)
Received: from User ([41.218.200.149]) by srv-mess.tca.fr with Microsoft
SMTPSVC(6.0.3790.1830);
Sat, 31 Oct 2009 06:26:48 +0100
IP: 41.218.200.149 ---> vfbb200149.4u.com.gh
margaretjacob00 [at] gmx.de
Received: from www.alterwest.ru (alterwest.ru [217.23.152.22])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 79EA27810DAA
for xxxxx; Sat, 31 Oct 2009 19:49:32 +0100 (CET)
Received: from [196.1.177.154] (helo=User)
by www.alterwest.ru with esmtpa (Exim 4.66)
(envelope-from <b.iod31212 [at] gmail.com>)
id 1N4CnB-000MZY-Rb; Sat, 31 Oct 2009 15:10:50 +0300
IP: 196.1.177.154 ---> Nigerian Telecommunications Ltd.
b.iod31212 [at] gmail.com
Received: from homer.bridgewater.it (unknown [195.177.192.197])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 001C7789827C
for xxxxx; Sun, 1 Nov 2009 07:04:31 +0100 (CET)
Received: from User (203-59-226-222.perm.iinet.net.au [203.59.226.222])
(authenticated bits=0)
by homer.bridgewater.it (8.13.8/8.13.1) with ESMTP id nA10DXRl008875;
Sun, 1 Nov 2009 00:13:38 GMT
tadams5556 [at] hotmail.com
tadams5556 [at] gmail.com
Received: from smtp829.mail.ird.yahoo.com (smtp829.mail.ird.yahoo.com
[217.146.189.243])
by xxxxx (Postfix) with SMTP id 99C1278A235A
for xxxxx; Sun, 1 Nov 2009 09:50:05 +0100 (CET)
Received: (qmail 97141 invoked from network); 1 Nov 2009 08:50:04 -0000
Received: from unknown (HELO User) (info [at] 211.141.87.67 with login)
by smtp829.mail.ird.yahoo.com with SMTP; 1 Nov 2009 08:50:00 -0000
IP: 211.141.87.67 ---> China Mobile Communications Corporation - jiangxi company
info.whitefinanceltd [at] gmail.com
Received: from mail.kembo.com (EHLO mx4.hotmail.com) [202.155.234.18]
by mx0.gmx.net (mx047) with SMTP; 01 Nov 2009 13:27:57 +0100
pjw30333 [at] mail2world.com
die Klette zum dritten:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx112) with SMTP; 01 Nov 2009 21:08:43 +0100
Received: from User (93-39-36-42.ip74.fastwebnet.it [93.39.36.42])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA1K7RQo005231;
Mon, 2 Nov 2009 05:07:29 +0900
suthlandgiovani [at] yahoo.com.hk
sgiovani [at] email.it
giovsutherland [at] yahoo.com.hk
und zum vierten:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx112) with SMTP; 01 Nov 2009 21:08:43 +0100
Received: from User (93-39-36-42.ip74.fastwebnet.it [93.39.36.42])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA1K7RQo005231;
Mon, 2 Nov 2009 05:07:29 +0900
suthlandgiovani [at] yahoo.com.hk
sgiovani [at] email.it
giovsutherland [at] yahoo.com.hk
Received: from ns1.jys.com.tw (unknown [203.69.243.74])
by xxxxx (Postfix) with ESMTP id 5A1D1789826D
for xxxxx; Sun, 1 Nov 2009 21:31:58 +0100 (CET)
Received: from User (unknown [81.91.232.194])
by ns1.jys.com.tw (Postfix) with ESMTP
id 4CD4CA2274; Mon, 2 Nov 2009 05:50:45 +0800 (GMT-8)
IP: 81.91.232.194 ---> PHARAON TELECOM, BJ
wuservice_department [at] administrativos.com
wucustomerdept [at] sify.com
die Klette zum fünften:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx099) with SMTP; 02 Nov 2009 17:56:19 +0100
Received: from User (93-39-33-27.ip74.fastwebnet.it [93.39.33.27])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA2Gsct7026973;
Tue, 3 Nov 2009 01:54:41 +0900
suthlandgiovani [at] yahoo.com.hk
gsutherland [at] email.it
und zum sechsten:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx099) with SMTP; 02 Nov 2009 17:56:19 +0100
Received: from User (93-39-33-27.ip74.fastwebnet.it [93.39.33.27])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA2Gsct7026973;
Tue, 3 Nov 2009 01:54:41 +0900
suthlandgiovani [at] yahoo.com.hk
gsutherland [at] email.it
Soviel zum Märchen, die EFCC/Nigeria täte irgendetwas Wirkungsvolles gegen die Scam- und Schmiergeld-Kings....
- kjz
Im weiteren:
gecracktes SquirrelMail vom Dauer-Mugu:
Received: from hosting.vidin.net (mbox.vidin.net [93.155.236.5])
by xxxxx (Postfix) with ESMTP id 2B10678982C5
for xxxxx; Mon, 2 Nov 2009 05:13:55 +0100 (CET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by hosting.vidin.net (Postfix) with ESMTP id 869CC156BF;
Mon, 2 Nov 2009 05:36:41 +0200 (EET)
X-Virus-Scanned: [OK] at mbox.vidin.net
Received: from hosting.vidin.net ([127.0.0.1])
by localhost (hosting.vidin.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Qmw1FhHPVNtO; Mon, 2 Nov 2009 05:36:41 +0200 (EET)
Received: from mbox.vidin.net (localhost.localdomain [127.0.0.1])
by hosting.vidin.net (Postfix) with ESMTP id 7630F14B14;
Mon, 2 Nov 2009 05:36:32 +0200 (EET)
Received: from 41.220.75.3 (proxying for 41.220.75.3)
by mbox.vidin.net with HTTP;
Mon, 2 Nov 2009 05:36:35 +0200 (EET)
IP: 41.220.75.3 ---> MTN, Nigeria
vidin1 [at] mail.vidin.net
sen.nnie [at] yahoo.com.hk
Received: from mail.image-d.com (mail.image-d.com [220.248.51.162])
by xxxxx (Postfix) with ESMTP id 131AA78A23F6
for xxxxx; Mon, 2 Nov 2009 11:26:32 +0100 (CET)
Received: from User ([41.211.239.187]) by mail.image-d.com with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 2 Nov 2009 18:11:09 +0800
IP: 41.211.239.187 ---> DIRECTONPC-ISP-NETBLK, Nigeria
andywalker.011 [at] gmail.com
gues [at] yahoo.com
Muguphon: +2348038251899 ---> MTN Nigeria Communications Ltd.
Received: from web95108.mail.in2.yahoo.com (web95108.mail.in2.yahoo.com
[203.104.18.160])
by xxxxx (Postfix) with SMTP id 255757898231
for xxxxx; Mon, 2 Nov 2009 13:53:45 +0100 (CET)
Received: (qmail 20338 invoked by uid 60001); 2 Nov 2009 12:53:41 -0000
Received: from [196.28.251.5] by web95108.mail.in2.yahoo.com via HTTP;
Mon, 02 Nov 2009 18:23:41 IST
IP: 196.28.251.5 ---> ONATEL, BF
salifmido [at] sify.com
die Madrid-Konnektion:
Received: from mail.spammotel.com (EHLO spammotel.com) [209.190.47.10]
by mx0.gmx.net (mx059) with SMTP; 03 Nov 2009 01:13:49 +0100
Received: by spammotel.com (Postfix, from userid 0)
id F3C498434B8; Mon, 2 Nov 2009 18:41:38 -0500 (EST)
Old-Return-Path: <noreplyt [at] mail2winner.com>
Received: from [192.168.1.101] (unknown [212.225.155.215])
by spammotel.com (Postfix) with SMTP id B5F0884365F
for xxxxx; Mon, 2 Nov 2009 08:43:32 -0500 (EST)
IP: 192.168.1.101 ---> ptvtelecom, ES
noreplyt [at] mail2winner.com
awistly_delivery [at] mail2madrid.com
Und wieder die Klette:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx048) with SMTP; 03 Nov 2009 03:37:47 +0100
Received: from User (93-39-33-27.ip74.fastwebnet.it [93.39.33.27])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA32aTbX009254;
Tue, 3 Nov 2009 11:36:32 +0900
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx048) with SMTP; 03 Nov 2009 03:37:47 +0100
Received: from User (93-39-33-27.ip74.fastwebnet.it [93.39.33.27])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA32aTbX009254;
Tue, 3 Nov 2009 11:36:32 +0900
suthlandgiovani [at] yahoo.com.hk
gsutherland [at] email.it
wieder die Madrid-Konnektion, spezialisiert auf Lotto-Betrug:
Received: from server.optimumhosting.net (server.optimumhosting.net
[67.228.200.67])
by spammotel.com (Postfix) with ESMTPS id DBCA9835E99
for xxxxx; Mon, 2 Nov 2009 22:56:24 -0500 (EST)
Received: from [77.211.203.157] (helo=User)
by server.optimumhosting.net with esmtpa (Exim 4.69)
(envelope-from <elbacoseguros10 [at] yahoo.com>)
id 1N5AUc-0002pP-RV; Mon, 02 Nov 2009 21:55:39 -0600
IP: 77.211.203.157 ---> VODAFONE_SPAIN_NETWORK
elbacosegurossp [at] aol.es
elbacoseguros10 [at] yahoo.com
Muguphon: 0034-672593808 ---> mobile phone, ES
Received: from hcm-cp15.vnn.vn (EHLO hcm-cp15.vnn.vn) [222.255.124.15]
by mx0.gmx.net (mx023) with SMTP; 03 Nov 2009 05:26:09 +0100
Received: from User (62.60.136.28) by hcm-cp15.vnn.vn (8.5.107)
(authenticated as cepimex)
id 4ADC879600255A16; Tue, 3 Nov 2009 18:28:46 +0700
mrsvillacarloselpidi [at] gmail.com
yhkevin [at] hcm.vnn.vn
cepimex [at] hcm.vnn.vn
Received: from mail.designersspecialty.com (mail.designersspecialty.com
[70.147.51.46])
by xxxxx (Postfix) with ESMTP id DD99578982C6
for xxxxx; Tue, 3 Nov 2009 22:30:36 +0100 (CET)
Received: from User ([41.218.207.24]) by mail.designersspecialty.com
with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 2 Nov 2009 20:33:10 -0500
IP: 41.218.207.24 ---> vfbb20724.4u.com.gh
p.a [at] live.com
portia.alberto [at] sify.com
gecracktes Squirrel-Mail:
Received: from mail.maseno.ac.ke (mail.maseno.ac.ke [41.204.177.252])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5051878A237F
for xxxxx; Wed, 4 Nov 2009 15:21:27 +0100 (CET)
Received: (qmail 22541 invoked by uid 508); 3 Nov 2009 15:28:20 +0300
Received: from localhost (HELO mail.maseno.ac.ke)
(mitc [at] maseno.ac.ke@127.0.0.1)
by mail.maseno.ac.ke with SMTP; 3 Nov 2009 15:28:20 +0300
Received: from 41.220.75.16
(SquirrelMail authenticated user mitc [at] maseno.ac.ke)
by mail.maseno.ac.ke with HTTP;
Tue, 3 Nov 2009 15:28:20 +0300 (EAT)
IP: 41.220.75.16 ---> MTN Nigeria
mitc [at] maseno.ac.ke
msl-departmentclaims [at] live.hk
Muguphon: +447-(0)-2309-8662 ---> Magrathea Telecommunications Limited, UK
- kjz
Natürlich gibt es weiter lecker Mugu-Futter:
die Klette:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx099) with SMTP; 02 Nov 2009 17:56:19 +0100
Received: from User (93-39-33-27.ip74.fastwebnet.it [93.39.33.27])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA2Gsct7026973;
Tue, 3 Nov 2009 01:54:41 +0900
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx099) with SMTP; 02 Nov 2009 17:56:19 +0100
Received: from User (93-39-33-27.ip74.fastwebnet.it [93.39.33.27])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nA2Gsct7026973;
Tue, 3 Nov 2009 01:54:41 +0900
suthlandgiovani [at] yahoo.com.hk
gsutherland [at] email.it
- kjz
Als da wir mal wieder hätten:
Received: from [82.151.90.30] (unknown [82.151.90.30])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C79E97800D56
for xxxxx; Fri, 6 Nov 2009 05:58:36 +0100 (CET)
Received: from User [82.145.240.37] by localhost.localdomain (Axigen)
with ESMTPA id 029B81; Thu, 5 Nov 2009 11:47:05 +0100
IP: 82.145.240.37 ---> Kibrisonline Ltd., TR
mah [at] mauritel.mr
mosewong11 [at] yahoo.com.hk
moseswong11 [at] gmail.com
Received: from arquitectura.campus.uveritas.ac.cr (unknown [190.10.50.10])
by xxxxx (Postfix) with ESMTP id D558878A2330
for xxxxx; Fri, 6 Nov 2009 07:38:33 +0100 (CET)
Received: from User ([41.189.6.244] RDNS failed) by
arquitectura.campus.uveritas.ac.cr with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 5 Nov 2009 20:51:21 -0600
IP: 41.189.6.244 ---> SWIFT NETWORKS LTD, Nigeria
craigbenkohin1 [at] gmail.com
craigbenkohin [at] gmail.com
cbenkohin [at] yahoo.com.hk
Received: from twms1.teamworld (twms1.teamworld.com.tw [60.250.44.116])
by xxxxx (Postfix) with ESMTP id B386C78971D2
for xxxxx; Fri, 6 Nov 2009 13:00:27 +0100 (CET)
Received: from User ([69.57.47.222]) by twms1.teamworld with Microsoft
SMTPSVC(6.0.3790.3959);
Fri, 6 Nov 2009 19:47:07 +0800
IP: 69-57-47-222.opencom.net
markanderson [at] greetamerica.com
mkandsn [at] gmail.com
Received: from mainserver.WhatleyHealth.local (mail.whatleyhealth.org
[64.247.229.154])
by xxxxx (Postfix) with ESMTP id A750278A23E8
for xxxxx; Fri, 6 Nov 2009 13:34:38 +0100 (CET)
Received: from User ([86.156.139.79]) by mainserver.WhatleyHealth.local
with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 5 Nov 2009 16:04:19 -0600
IP: 86.156.139.79 --> host86-156-139-79.range86-156.btcentralplus.com
marketingoffers [at] switched.com
marketing [at] switched.com
- kjz
Wenn man mal schon dabei ist:
Received: from zodiaconline.com (mail.zodiaconline.com [203.199.114.173])
by xxxxx (Postfix) with ESMTP id BACBA78A2121
for xxxxx; Thu, 5 Nov 2009 07:33:23 +0100 (CET)
Received: from User [41.217.2.8] by zodiaconline.com with ESMTP
(SMTPD32-8.15) id AE248B130116; Wed, 04 Nov 2009 16:27:40 +0530
IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.
usatreasurywashingto [at] mail2world.com
infohsbcbank [at] mail2uk.com
Muguphon: +44-703598686 ---> Open Telecom International Ltd., UK
Mugufax: +447005800671 ---> PNC Telecom Services Limited, UK
der Mugu plant wohl einen Rundumschlag:
Received: from mail.amorngroup.com (unknown [202.44.52.189])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A115B78940E5
for xxxxx; Thu, 5 Nov 2009 10:24:01 +0100 (CET)
Received: from User ([115.184.90.98])
(authenticated user test [at] amorngroup.com)
by mail.amorngroup.com;
Wed, 4 Nov 2009 18:28:48 +0700
Received: from mail.amorngroup.com (unknown [202.44.52.189])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1B68678990EA
for xxxxx; Thu, 5 Nov 2009 17:00:02 +0100 (CET)
Received: from User ([115.184.107.123])
(authenticated user test [at] amorngroup.com)
by mail.amorngroup.com;
Thu, 5 Nov 2009 05:17:32 +0700
IP: 115.184.90.98 ---> Reliance Communication Ltd., IN
cpdc9 [at] hotmail.co.uk
test [at] amorngroup.com
msngamecorner [at] msn.com
msngamecorner [at] hotmail.co.uk
Muguphone: +44-701-4275-967 ---> FleXtel Limited, UK
Mugufax: +44-700-6042-853 ---> Call Sciences Limited, UK/Yac
Received: from mail.opentransfer.com (mail1.opentransfer.com [76.162.254.1])
by xxxxx (Postfix) with SMTP id F37EE7894B58
for xxxxx; Thu, 5 Nov 2009 07:21:45 +0100 (CET)
Received: (qmail 16147 invoked by uid 399); 5 Nov 2009 06:21:43 -0000
Received: from unknown (HELO User) (teach2009 [at] my-sic.com@116.206.149.18)
by mail.opentransfer.com with SMTP; 5 Nov 2009 06:21:43 -0000
ooi_tek1 [at] yahoo.com.hk>
newooi [at] yahoo.com
teach2009 [at] my-sic.com
Received: from smtp-ext-04.mx.pitdc1.expedient.net
(smtp-ext-04.mx.pitdc1.expedient.net [206.210.69.144])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 77DA978A3084
for xxxxx; Thu, 5 Nov 2009 16:50:02 +0100 (CET)
Received: from User (unknown [78.83.29.89])
by smtp-ext-04.mx.pitdc1.expedient.net (Postfix) with ESMTPA id 7B90CE512F;
Thu, 5 Nov 2009 10:41:17 -0500 (EST)
IP: 78.83.29.89 ---> Spectrum NET, BG
shell.privatedesk [at] yahoo.com
shellprivatedesk002 [at] yahoo.com
Auch Juchuu gibt den Müllwerfer preis:
Received: from n2b.bullet.mail.ac4.yahoo.com
(n2b.bullet.mail.ac4.yahoo.com [76.13.13.72])
by xxxxx (Postfix) with SMTP id B7C7F7810DAA
for xxxxx; Fri, 6 Nov 2009 19:54:14 +0100 (CET)
Received: from [76.13.13.25] by n2.bullet.mail.ac4.yahoo.com with NNFMP;
06 Nov 2009 18:54:14 -0000
Received: from [67.195.9.83] by t4.bullet.mail.ac4.yahoo.com with NNFMP;
06 Nov 2009 18:54:14 -0000
Received: from [98.137.27.219] by t3.bullet.mail.gq1.yahoo.com with
NNFMP; 06 Nov 2009 18:54:13 -0000
Received: from [127.0.0.1] by omp129.mail.gq1.yahoo.com with NNFMP; 06
Nov 2009 18:54:13 -0000
Received: (qmail 57950 invoked by uid 60001); 6 Nov 2009 18:54:13 -0000
Received: from [41.207.28.18] by web1204.biz.mail.gq1.yahoo.com via
HTTP; Fri, 06 Nov 2009 10:54:13 PST
IP: 41.207.28.18 ---> AVISONET, CI
aishahaifa123 [at] goodsmails.com
aisha0haifa [at] yahoo.co.jp
Received: from ns.ieee.bg (unknown [193.68.156.11])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id BEB6E7810DAA
for xxxxx; Fri, 6 Nov 2009 19:20:31 +0100 (CET)
Received: from ms.ieee.bg (localhost [127.0.0.1])
by ns.ieee.bg (8.14.3/8.14.3) with ESMTP id nA6FGbRC068395;
Fri, 6 Nov 2009 17:16:38 +0200 (EET)
susancolecharity [at] gmail.com
natwebnk [at] advir.com
die Madrid-Konnektion, spezialisiert auf Fake-Gewinne:
Received: from 46.Red-88-22-69.staticIP.rima-tde.net (EHLO
mx4.hotmail.com) [88.22.69.46]
by mx0.gmx.net (mx094) with SMTP; 07 Nov 2009 17:30:54 +0100
CAJALABORAL200 [at] AOL.COM
savebadcirdit [at] yahoo.com
Muguphon: +34680391034 ---> Telefónica Móviles España, S.a.u.
Mugufax: +34911817338 ---> Jazz Telecom, S.a.u.
Received: from altos600.yuguann.com.tw
(220-128-133-55.HINET-IP.hinet.net [220.128.133.55])
by xxxxx (Postfix) with ESMTP id B6E1B78A2282
for xxxxx; Sun, 8 Nov 2009 07:50:03 +0100 (CET)
Received: by altos600.yuguann.com.tw with Internet Mail Service
(5.5.2653.19)
id <WNDCVYAY>; Sat, 7 Nov 2009 10:50:32 +0800
Received: from User (vfbb213248.4u.com.gh [41.218.213.248]) by
altos600.yuguann.com.tw with SMTP (Microsoft Exchange Internet Mail
Service Version 5.5.2653.13)
id WNDCVYAC; Sat, 7 Nov 2009 10:50:03 +0800
IP: 41.218.213.248 ---> Ghana Telecom ADSL DYNAMIC ADDRESS EXPANDED POOL
emr.desmond20099 [at] live.com
emr.desmond1 [at] live.com
Received: from ntop.uem.mz (unknown [196.3.96.35])
by xxxxx (Postfix) with ESMTP id 8418478A231F
for xxxxx; Sun, 8 Nov 2009 10:34:23 +0100 (CET)
Received: from mail.acipol.ac.mz (unknown [196.28.237.131])
by ntop.uem.mz (Postfix) with ESMTP id 2EFF9519BE;
Sun, 8 Nov 2009 02:37:54 +0000 (UTC)
Received: from mail.acipol.ac.mz (localhost.acipol.ac.mz [127.0.0.1])
by mail.acipol.ac.mz (Postfix) with ESMTP id 8DC2A489982;
Sun, 8 Nov 2009 02:43:46 +0200 (CAT)
Received: from acipol.ac.mz (localhost.acipol.ac.mz [127.0.0.1])
by mail.acipol.ac.mz (Postfix) with ESMTP id 442AE489980;
Sun, 8 Nov 2009 02:43:46 +0200 (CAT)
msft_claims.uk [at] live.com
f.tsucana [at] acipol.ac.mz
die Madrid-Konnektion again:
Received: from IMPaqm1.telefonica.net (impaqm1.telefonica.net
[213.4.129.21])
by xxxxx (Postfix) with ESMTP id 6344978990EA
for xxxxx; Sun, 8 Nov 2009 19:58:32 +0100 (CET)
Received: from IMPmailhost2.adm.correo ([10.20.102.39])
by IMPaqm1.telefonica.net with bizsmtp
id 2grZ1d01S0r0BT601iyYyP; Sun, 08 Nov 2009 19:58:32 +0100
Received: from amadagomez [at] terra.es ([84.123.65.89])
by IMPmailhost2.adm.correo with BIZ IMP
id 2iyW1d00G1vYi7G1iiyX9f; Sun, 08 Nov 2009 19:58:32 +0100
IP: 84.123.65.89 ---> 84.123.65.89.dyn.user.ono.com
amadagomez [at] terra.es
pross [at] aim.com
Muguphon: +34 672 552 735 ---> mobile phone, Spain
Received: from smtp-out4.blueyonder.co.uk (smtp-out4.blueyonder.co.uk
[195.188.213.7])
by xxxx (Postfix) with ESMTP id 067F078A2292
for xxxxx; Sun, 8 Nov 2009 21:36:31 +0100 (CET)
Received: from [172.23.170.146] (helo=anti-virus03-09)
by smtp-out4.blueyonder.co.uk with smtp (Exim 4.52)
id 1N7EOS-0000Zv-Qk; Sun, 08 Nov 2009 20:29:49 +0000
Received: from [217.149.52.5] (helo=User)
by asmtp-out3.blueyonder.co.uk with esmtpa (Exim 4.52)
id 1N7EOP-0003ZA-CZ; Sun, 08 Nov 2009 20:29:46 +0000
IP: 217.149.52.5 ---> web5.futuron.fi
elizabeth.jacob [at] indiatimes.com
elizabeth.jacob [at] captreepuretech.com
diplojohnsunshine [at] yahoo.co.jp
- kjz
Dann wollen wir mal wieder:
die Amsterdam-Konnektion:
Received: from mail.maxnet.ua (EHLO mail.maxnet.ua) [79.171.120.18]
by mx0.gmx.net (mx081) with SMTP; 09 Nov 2009 15:51:52 +0100
Received: from localhost (mail.maxnet.ua [79.171.120.18])
by mail.maxnet.ua (Postfix) with ESMTP id 41C741C211B2;
Mon, 9 Nov 2009 16:03:59 +0200 (EET)
X-Virus-Scanned: amavisd-new at maxnet.ua
Received: from mail.maxnet.ua ([79.171.120.18])
by localhost (mail.maxnet.ua [79.171.120.18]) (amavisd-new, port 10024)
with LMTP id LclR1ILASaxI; Mon, 9 Nov 2009 16:03:58 +0200 (EET)
Received: from User (a178085.upc-a.chello.nl [62.163.178.85])
by mail.maxnet.ua (Postfix) with ESMTPA id F0B671C211B5;
Mon, 9 Nov 2009 16:03:52 +0200 (EET)
arthurbretton [at] aim.com
arthurbrettoon [at] aim.com
Received: from mail1.ftvrussia.com (unknown [213.79.100.187])
by xxxxx (Postfix) with ESMTP id 88EE078990E7
for xxxxx; Tue, 10 Nov 2009 18:35:19 +0100 (CET)
Received: from User ([82.128.71.79])
(authenticated user test [at] ftvrussia.com)
by mail1.ftvrussia.com (Kerio MailServer 6.4.0);
Tue, 10 Nov 2009 18:12:45 +0300
IP: 82.128.71.79 ---> Multilinks Telecommunications Limited, Nigeria
test [at] ftvrussia.com
wu_controlboard [at] live.com
wu_controlunit [at] administrativos.com
Muguphon: +234 8038222978 ---> MTN Nigeria Communications Ltd.
- kjz
Und wieder:
Received: from mail.trncpio.org (mail.trncpio.org [212.175.153.90])
by xxxxx (Postfix) with ESMTP id C6FED78A230B
for xxxxx; Mon, 9 Nov 2009 08:07:45 +0100 (CET)
Received: from mail.trncpio.org [82.128.33.53] by mail.trncpio.org with
ESMTP
(SMTPD32-7.05) id A6B27E2062C; Mon, 09 Nov 2009 02:47:46 +0200
IP: 82.128.33.53 ---> Multilinks Telecommunications Limited, Nigeria
info [at] installationmastersinc.com
kjones.mmjl2009 [at] live.co.uk
Muguphon: +44-702-304-3768 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44-871-572-0847 ---> 7Tel Ltd., UK
Mugufax: +44-700-598-3040 ---> PNC Telecom Services Limited, UK/Vanguard
Mugufax: +44-844-417-2557 ---> Netkonect Communications Ltd, UK/Mistral
Received: from web4105.mail.ogk.yahoo.co.jp
(web4105.mail.ogk.yahoo.co.jp [124.83.200.67])
by xxxxx (Postfix) with SMTP id 391EF78A3189
for xxxxx; Mon, 9 Nov 2009 11:47:52 +0100 (CET)
Received: (qmail 3595 invoked by uid 60001); 9 Nov 2009 10:40:29 -0000
Received: from [82.128.34.150] by web4105.mail.ogk.yahoo.co.jp via HTTP;
Mon, 09 Nov 2009 19:40:29 JST
auch hier liefer Juchuu die UrsprungsIP mit:
IP: 82.128.34.150 ---> Multilinks Telecommunications Limited, Nigeria
obahalamu0000000000000000000102 [at] yahoo.co.jp
lrvinbrown35 [at] yahoo.com.hk
auch T-Offline wird gecrackt:
Received: from mailout09.t-online.de (EHLO mailout09.t-online.de)
[194.25.134.84]
by mx0.gmx.net (mx107) with SMTP; 09 Nov 2009 11:02:17 +0100
Received: from fwd09.aul.t-online.de
by mailout09.t-online.de with smtp
id 1N7CvX-0000BE-01; Sun, 08 Nov 2009 19:55:51 +0100
Received: from User
(S8VeK6ZfotAnnNaq4jmaUsm8N6n-iW3F45uo+1RraU0fZ33SzNTc16tNIzhAxf2exEvvK6gB6E@[41.189.6.244])
by fwd09.t-online.de
with esmtp id 1N7Cb0-0nWj9E0; Sun, 8 Nov 2009 19:34:38 +0100
IP: 41.189.6.244 ---> SWIFT NETWORKS LTD, Nigeria
nadmin4 [at] megafastmail.com
msbark02 [at] sify.com
Muguphon: +234-803-461-9743 ---> MTN Nigeria Communications Ltd.
Received: from mail.bahlas.com.sa (EHLO mail-server.bahlas.com.sa)
[212.116.216.252]
by mx0.gmx.net (mx053) with SMTP; 09 Nov 2009 11:47:48 +0100
Received: from User ([41.210.3.247]) by mail-server.bahlas.com.sa with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 9 Nov 2009 11:14:43 +0300
IP: 41.210.3.247 --> adsl3247.4u.com.gh
babalothaba2009 [at] mail.mn
babalothaba [at] jmail.co.za
gecracktes SquirrelMail:
Received: from dhcp209.mof.gov.bt (EHLO mail.mof.gov.bt) [202.144.158.209]
by mx0.gmx.net (mx041) with SMTP; 10 Nov 2009 01:57:50 +0100
Received: from 212.100.250.227 (proxying for 80.226.16.155)
(SquirrelMail authenticated user sonam)
by www.mof.gov.bt with HTTP;
Tue, 10 Nov 2009 06:38:40 +0600 (BTT)
IP: 80.226.16.155 ---> ip-80-226-16-155.vodafone-net.de
b.spenceroffice [at] yahoo.co.uk
agt.robertarcher [at] live.co.uk
sonam [at] mof.gov.bt
Muguphon: +44-703-1744-440 ---> Magrathea Telecommunications Limited, UK
Received: from smtp.bluecom.no (EHLO smtp.bluecom.no) [193.75.75.28]
by mx0.gmx.net (mx031) with SMTP; 10 Nov 2009 23:10:46 +0100
Received: from localhost (webmail.ventelo.no [193.69.57.23])
by smtp.bluecom.no (Postfix) with ESMTP id C2E5A20C4;
Tue, 10 Nov 2009 23:09:37 +0100 (CET)
Received: from static.66.210.47.78.clients.your-server.de
(static.66.210.47.78.clients.your-server.de [78.47.210.66]) by
webmail.ventelo.no (Horde) with HTTP for <steinar.bastesen [at] bluezone.no>;
Tue, 10 Nov 2009 23:08:42 +0100
steinar.bastesen [at] bluezone.no
s.stephencampbell1 [at] yahoo.com.hk
wieder mal T-Offline:
Received: from mailout10.t-online.de (mailout10.t-online.de [194.25.134.21])
by xxxxx (Postfix) with ESMTP id ED68A7894B60
for xxxxx; Wed, 11 Nov 2009 03:00:19 +0100 (CET)
Received: from fwd07.aul.t-online.de
by mailout10.t-online.de with smtp
id 1N7zat-00052V-00; Tue, 10 Nov 2009 23:53:47 +0100
Received: from User
(EY+fjQZXYtLoT0WuA-zJ8Jxp1WKCrI4rlLB0nJrxR2QG4PKmbU5F8L1fEc3N4G4ofbQkAprp+F@[67.249.196.37])
by fwd07.t-online.de
with esmtp id 1N7z4g-01ndr60; Tue, 10 Nov 2009 23:20:30 +0100
IP: 67.249.196.37 ---> cpe-67-249-196-37.twcny.res.rr.com
westernunionb2 [at] googlemail.com
Received: from bolten.pccon.net (bolten.pccon.net [209.5.194.106])
by xxxxx (Postfix) with ESMTP id 1885578A191A
for xxxxx; Wed, 11 Nov 2009 08:13:05 +0100 (CET)
Received: from localhost ([209.5.194.50]) by orval.can.rogers.com
(InterMail vM.5.01.02.00 201-253-122-103-101-20001108) with ESMTP
id <20091111042507.YZKV29497.orval.can.rogers.com [at] localhost>;
Tue, 10 Nov 2009 23:25:07 -0500
Received: from 41.218.195.9 ([41.218.195.9])
by mymail.rogerstelecom.ca (IMP) with HTTP
for <raymc [at] pop3.can.rogers.com>; Tue, 10 Nov 2009 23:35:37 -0500
Received: from orval.can.rogers.com (orval.can.rogers.com [209.5.194.98])
by xxxxx (Postfix) with ESMTP id 124177894B62
for xxxxx; Wed, 11 Nov 2009 06:02:37 +0100 (CET)
Received: from localhost ([209.5.194.50]) by orval.can.rogers.com
(InterMail vM.5.01.02.00 201-253-122-103-101-20001108) with ESMTP
id <20091111050236.ZGSW29497.orval.can.rogers.com [at] localhost>;
Wed, 11 Nov 2009 00:02:36 -0500
Received: from 41.218.195.9 ([41.218.195.9])
by mymail.rogerstelecom.ca (IMP) with HTTP
for <raymc [at] pop3.can.rogers.com>; Wed, 11 Nov 2009 00:13:09 -0500
IP: 41.218.195.9 ---> vfbb1959.4u.com.gh
raymc [at] can.rogers.com
atm_cardonline [at] yahoo.com.hk
parkerich [at] webmail.co.za
der Mugu mit Mail und Phon-Rundumschlag:
Received: from mail.uphcm.edu.vn (unknown [210.245.122.6])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id DC8C578A3171
for xxxxx; Wed, 11 Nov 2009 12:49:10 +0100 (CET)
Received: from User ([41.189.98.108])
by mail.uphcm.edu.vn (IceWarp 9.2.1) with ASMTP id SWV90642;
Wed, 11 Nov 2009 18:36:42 +0700
IP: 41.189.98.108 ---> Alink Cote D'Ivoire
dr.michaelowen3 [at] hotmail.com
drmichaelowen55 [at] hotmail.com
mr.george_landry [at] yahoo.com
excelsecuritiescompa [at] hotmail.com
Muguphon: +225 45491697 ---> MTN, CI
Muguphon: +12293808751 ---> Nextel Communications, Inc., USA/Sprint
- kjz
Dann woll'n wir mal wieder:
Received: from mail.ferrotec.sh.cn (unknown [222.73.237.142])
by xxxxx (Postfix) with ESMTP id 1695F7894B61
for xxxxx; Thu, 12 Nov 2009 01:58:28 +0100 (CET)
Received: from User ([82.128.21.218]) by mail.ferrotec.sh.cn with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 12 Nov 2009 08:45:13 +0800
IP: 82.128.21.218 ---> ml82.128.21.218.multilinks.com, Nigeria
faridawaziri.efcc1 [at] yahoo.com.hk
faridawazi.efcc [at] yahoo.com.hk
wazirifarida [at] w.cn
Muguphon: +2348053150336 ---> Globacom Ltd., Nigeria
Received: from mx.ccp.pl (mx.ccp.pl [194.246.124.196])
by xxxxx (Postfix) with ESMTP id 94FC878A2313
for xxxxx; Thu, 12 Nov 2009 05:26:42 +0100 (CET)
Received: from [62.60.136.28] (helo=User)
by mx.ccp.pl with esmtpa (Exim 4.66)
(envelope-from <delivery [at] fedex.com>)
id 1N8OMD-0000AZ-5R; Thu, 12 Nov 2009 02:20:26 +0100
fedexinstant_services [at] live.com
fedexinstant_delivery [at] live.com
Muguphon: +234-709-079-4076 ---> Multilinks Telecommunications Ltd., Nigeria
- kjz
Hier kommt kein Mugu zu kurz:
Received: from faserv01.fouleaccess.com (faserv01.fouleaccess.com
[84.14.43.227])
by xxxxx (Postfix) with ESMTP id 7D92C78A233A
for xxxxx; Fri, 13 Nov 2009 23:44:23 +0100 (CET)
Received: from User ([82.128.33.135] RDNS failed) by
faserv01.fouleaccess.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 13 Nov 2009 23:31:12 +0100
IP: 82.128.33.135 ---> Multilinks Telecommunications Limited, Nigeria
gdduarte03 [at] yahoo.com.hk
gdduarte06 [at] yahoo.com.hk
Den Mugu aus Ghana hat auch LazyDog:
Received: from juniper.invision.net (juniper.invision.net [69.18.136.146])
by xxxxx (Postfix) with SMTP id 8AC8878981A4
for xxxxx; Sat, 14 Nov 2009 03:16:13 +0100 (CET)
Received: (qmail 17091 invoked by uid 99); 13 Nov 2009 09:11:08 -0000
Cc: recipient list not shown: ;
Received: from vfbb215109.4u.com.gh (vfbb215109.4u.com.gh [41.218.215.109])
by webmail.americandental.com (IMP) with HTTP
for <spagnotta [at] americandental.com@sycamore.invision.net>; Fri, 13 Nov
2009 04:11:07 -0500
X-Originating-IP: 41.218.215.109 ---> vfbb215109.4u.com.gh
kwadwoafari3 [at] sify.com
kwadwoafari12 [at] yahoo.com.hk
die Spezialität der Madrid-Konnektion: Lotto-Scams (klar, das Skript von wegen korrupter Diktatoren-Witwe kommt halt in ES nicht so gut...)
Received: from mhost.dnex.co.kr (unknown [124.217.222.57])
by xxxxx (Postfix) with ESMTP id 228CA78A23EF
for xxxxx; Sat, 14 Nov 2009 09:37:38 +0100 (CET)
Received: from User ([85.137.158.221]) by mhost.dnex.co.kr with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 14 Nov 2009 03:44:02 +0900
IP: 85.137.158.221 ---> 85.137.158.221.dyn.user.ono.com
winningdesk2000 [at] aim.com
euro200988 [at] aim.com
Muguphon: 0034-634-075-732 ---> Vodafone Espana
Received: from capitallanka.com (unknown [222.165.141.19])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 08F517894B5B
for xxxxx; Sat, 14 Nov 2009 06:27:53 +0100 (CET)
Received: (qmail 19169 invoked by uid 81); 14 Nov 2009 03:31:03 +0530
Received: from syd-ult-slb1-vlan5.ii.net (syd-ult-slb1-vlan5.ii.net
[203.215.17.58]) by www.capitallanka.com (Horde MIME library) with HTTP;
Sat, 14 Nov 2009 03:31:01 +0530
diamonddiplomaticfinanceplc [at] post.ro
diplomaticfinanceplc2002 [at] gmail.com
Muguphon: +234-7081581021 ---> Celtel Nigeria Limited/Zain
die Masche mit dem 'Mystery Shopper':
Received: from omr8.networksolutionsemail.com
(omr8.networksolutionsemail.com [205.178.146.58])
by xxxxx (Postfix) with ESMTP id 0287778810D4
for xxxxx; Sat, 14 Nov 2009 13:08:42 +0100 (CET)
Received: from mail.networksolutionsemail.com
(mail.networksolutionsemail.com [205.178.146.50])
by omr8.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
nAEC8fax018480
for xxxxx; Sat, 14 Nov 2009 07:08:42 -0500
Message-Id: <200911141208.nAEC8fax018480 [at] omr8.networksolutionsemail.com>
Received: (qmail 31892 invoked by uid 78); 14 Nov 2009 12:08:41 -0000
Received: from unknown (HELO User) (cri [at] erringtonhomes.net@196.207.239.37)
by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 14 Nov 2009 12:08:41
-0000
IP: 196.207.239.37 ---> SONATELNET, SN
mp232009 [at] sify.com
mp23200 [at] googlemail.com
Received: from slcd079.piensasolutions.com (slcd079.piensasolutions.com
[217.76.150.162])
by xxxxx (Postfix) with ESMTP id 962CA78A211A
for xxxxx; Sat, 14 Nov 2009 04:19:06 +0100 (CET)
Received: from mail.vbfutbolbase.es (localhost.localdomain [127.0.0.1])
by slcd079.piensasolutions.com (Postfix) with ESMTP id 8DDBC1BCC3B9;
Fri, 13 Nov 2009 23:24:56 +0100 (CET)
Received: from 196.46.246.21
by mail.vbfutbolbase.es with HTTP;
Fri, 13 Nov 2009 23:24:56 +0100 (CET)
IP: 196.46.246.21 ---> Vee Networks Ltd, Nigeria
cox [at] vbfutbolbase.es
lindbugher [at] yahoo.com.hk
Received: from mail.txol.net (mail.txol.net [206.82.112.7])
by xxxxx (Postfix) with ESMTP id 8123B78A2288
for xxxxx; Sun, 15 Nov 2009 00:16:48 +0100 (CET)
Received: from User ([82.128.36.207])
(authenticated bits=0)
by mail.txol.net (8.13.8/8.13.8) with ESMTP id nAEJtwuG022944;
Sat, 14 Nov 2009 13:56:03 -0600
IP: 82.128.36.207 ---> Multilinks Telecommunications Limited, Nigeria
ahmedsambo20 [at] gmail.com
ahmedsambo20 [at] gmail.com
ahmedsambo [at] megamail.pt
wieder die Madrid-Konnektion mit Scammer-Lotto, und AOL/AIM sitzt auf den Ohren und läßt die Scam-Mailadressen schon seit Wochen offen:
Received: from mx4.hotmail.com ([89.128.148.158])
by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
id 0Mdd1A-1MkIzB06wu-00PzjX for xxxxx; Sun, 15 Nov 2009
06:50:45 +0100
IP: 89.128.148.158 ---> YACOMNET, ES/Orange, ES
eullotto [at] aol.com
unisecc [at] aim.com
Muguphon: +34-672 509 598 ---> Vodafone Espana
die Amsterdam-Konnektion (lange nicht gesehen, vielleicht hat es wirklich was genutzt, dass dort die Polizei mal durchgegriffen hat...):
Received: from cpsmtpb-ews03.kpnxchange.com
(cpsmtpb-ews03.kpnxchange.com [213.75.39.6])
by xxxxx (Postfix) with ESMTP id 6560C78A23F2
for xxxxx; Sun, 15 Nov 2009 17:46:13 +0100 (CET)
Received: from cpbrm-ews07.kpnxchange.com ([10.94.84.138]) by
cpsmtpb-ews03.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 15 Nov 2009 17:46:13 +0100
Received: from CPSMTPM-EML03.kpnxchange.com ([213.75.39.73]) by
cpbrm-ews07.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 15 Nov 2009 17:46:12 +0100
Received: from localhost ([10.94.77.199]) by
CPSMTPM-EML03.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Sun, 15 Nov 2009 17:45:54 +0100
sabu88 [at] hetnet.nl
mathewphollo [at] gmail.com
Received: from mail1.oolz.net (mail1.oolz.net [202.146.193.141])
by xxxxx (Postfix) with SMTP id 366A77894B46
for xxxxx; Sun, 15 Nov 2009 18:58:50 +0100 (CET)
Received: (qmail 15077 invoked by uid 101); 15 Nov 2009 16:49:17 -0000
Received: from 41.184.74.15 ([41.184.74.15]) by 202.146.193.141 (Horde MIME
library) with HTTP; Sun, 15 Nov 2009 22:19:14 +0530
IP: 41.184.74.15 ---> ipNX NIGERIA LIMITED
barclaysbankuk0111 [at] yahoo.com
princmoree [at] mail2uk.com
princeemoree [at] mail2uk.com
Muguphon: +447011173166 ---> PNC Telecom Services Limited, UK
- kjz
Was hätten wir da denn wieder:
Received: from vsmtp3.jaring.my (vsmtp3.jaring.my [192.228.250.83])
by xxxxx (Postfix) with ESMTP id C737F78A191A
for xxxxx; Mon, 16 Nov 2009 01:19:09 +0100 (CET)
Received: from localhost (localhost.jaring.my [127.0.0.1])
by vsmtp3.jaring.my (8.14.3/8.14.3) with ESMTP id nAFNrTqD087758;
Mon, 16 Nov 2009 07:53:29 +0800 (MYT)
(envelope-from mnjjj1321 [at] fairbairnpb.com)
X-Virus-Scanned: by JARING Malware Filters (jaring.my)
Received: from vsmtp3.jaring.my ([127.0.0.1])
by localhost (vsmtp3.jaring.my [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id eTDKuWI5KXfN; Mon, 16 Nov 2009 07:53:28 +0800 (MYT)
Received: from User ([8.9.209.2])
(authenticated bits=0)
by vsmtp3.jaring.my (8.14.3/8.14.3) with ESMTP id nAFNqsKe087691;
Mon, 16 Nov 2009 07:52:58 +0800 (MYT)
(envelope-from mnjjj1321 [at] fairbairnpb.com)
mnjjj1321 [at] fairbairnpb.com
mnjjj1321 [at] yahoo.cn
gecrackter T-Offline-Account:
Received: from mailout07.t-online.de (mailout07.t-online.de [194.25.134.83])
by xxxxx (Postfix) with ESMTP id 9D4F57894108
for xxxxx; Mon, 16 Nov 2009 01:36:42 +0100 (CET)
Received: from fwd05.aul.t-online.de
by mailout07.t-online.de with smtp
id 1N9pYv-0005w7-00; Mon, 16 Nov 2009 01:35:21 +0100
Received: from User
(XKPC3rZbQtnnYd2OhIcgvJzJRKfI0niThFDDSXhR6YeGSFYiv05XtPxVgnrNFqFLFLBzwv-TRg@[116.206.161.21])
by fwd05.t-online.de
with esmtp id 1N9osp-0YTzFo0; Mon, 16 Nov 2009 00:51:51 +0100
IP: 116.206.161.21 ---> Mobile Wireless Broadband, MY
oke25 [at] w0y18e77l.homepage.t-online.de
ahajisulaiman1 [at] live.com
Muguphon: +60-1-6376-9743 ---> DiGi Telecom, MY
Mugufax: +60-3-2178-4944 ---> Selangor, MY
Received: from mailfront-7.ars-sth.se.crystone.se
(mailfront-7.ars-sth.se.crystone.se [83.168.245.45])
by xxxxx (Postfix) with SMTP id 7808F789407A
for xxxxx; Mon, 16 Nov 2009 15:57:40 +0100 (CET)
Received: (qmail 15898 invoked by uid 89); 16 Nov 2009 14:23:21 -0000
Received: from 82.128.71.152 by mailfront-7 (envelope-from
<leif [at] leasfoto.se>, uid 89) with qmail-scanner-1.25
(clamdscan: 0.82/960. spamassassin: 2.64.
Clear:RC:0(82.128.71.152):SA:1(10.2/5.0):.
Processed in 7.681793 secs); Mon Nov 16 15:23:21 2009
Received: from unknown (HELO User) (leif [at] leasfoto.se@82.128.71.152)
by 0 with SMTP; 16 Nov 2009 14:23:13 -0000
IP: 82.128.71.152 ---> Multilinks Telecommunications Limited, Nigeria
leif [at] leasfoto.se
aminasalah276 [at] yahoo.ie
die Madrid-Konnektion via geracktem SquirrelMail, gibt's noch mehr Freemailer....:
Received: from static-139-142-194-115.gtcust.grouptelecom.net (EHLO
mail.clearwave.ca) [139.142.194.115]
by mx0.gmx.net (mx017) with SMTP; 16 Nov 2009 23:45:29 +0100
Received: from localhost (localhost.clearwave.ca [127.0.0.1])
by mail.clearwave.ca (Postfix) with ESMTP id 888CA42309B;
Mon, 16 Nov 2009 15:31:39 -0700 (MST)
Received: from mail.clearwave.ca ([127.0.0.1])
by localhost (mail.clearwave.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id x3DIcs4-z2PY; Mon, 16 Nov 2009 15:31:37 -0700 (MST)
Received: from webmail.clearwave.ca (localhost.clearwave.ca [127.0.0.1])
by mail.clearwave.ca (Postfix) with ESMTP id 22D80423009;
Mon, 16 Nov 2009 15:29:43 -0700 (MST)
Received: from 77.211.69.206
(SquirrelMail authenticated user wlazaruk [at] clearwave.ca)
by webmail.clearwave.ca with HTTP;
Mon, 16 Nov 2009 15:29:45 -0700 (MST)
Received: from localhost (localhost.clearwave.ca [127.0.0.1])
by mail.clearwave.ca (Postfix) with ESMTP id 888CA42309B;
Mon, 16 Nov 2009 15:31:39 -0700 (MST)
Received: from mail.clearwave.ca ([127.0.0.1])
by localhost (mail.clearwave.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id x3DIcs4-z2PY; Mon, 16 Nov 2009 15:31:37 -0700 (MST)
Received: from webmail.clearwave.ca (localhost.clearwave.ca [127.0.0.1])
by mail.clearwave.ca (Postfix) with ESMTP id 22D80423009;
Mon, 16 Nov 2009 15:29:43 -0700 (MST)
Received: from 77.211.69.206
(SquirrelMail authenticated user wlazaruk [at] clearwave.ca)
by webmail.clearwave.ca with HTTP;
Mon, 16 Nov 2009 15:29:45 -0700 (MST)
IP: 77.211.69.206 ---> VODAFONE_SPAIN_NETWORK
wlazaruk [at] clearwave.ca
wooyoung90 [at] yahoo.com.hk
www.metallurgicalcomp [at] live.cn.com
chinametallurgical.import [at] live.cn.com
metallurgical_chinaproduct [at] live.cn.com
die Amsterdam-Konnektion:
Received: from mail.tcm.pa.gov.br (ns2.tcm.pa.gov.br [200.242.199.80])
by xxxxx (Postfix) with ESMTP id CAD5D78A13BA
for xxxxx; Wed, 18 Nov 2009 05:05:52 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by mail.tcm.pa.gov.br (Postfix) with ESMTP id AD3101677BC;
Fri, 13 Nov 2009 18:36:45 -0300 (BRT)
Received: from mail.tcm.pa.gov.br ([127.0.0.1])
by localhost (web.tcm.pa.gov.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 4Ny14fBxlCC9; Fri, 13 Nov 2009 18:36:45 -0300 (BRT)
Received: from User (j117224.upc-j.chello.nl [24.132.117.224])
by mail.tcm.pa.gov.br (Postfix) with ESMTPA id ABD1B841B9;
Fri, 13 Nov 2009 03:02:53 -0300 (BRT)
IP: 24.132.117.224 ---> Chello, NL
kebbelemajavu [at] aim.com
kebelemajavu [at] yahoo.com
per Freenet-Account in DE (BTW: Wieviele reguläre Accounts hat Freemail eigentlich in Nigeria, als dass man die Mugu-Provider-IPs nicht blacklisten könnte...):
Received: from mout7.freenet.de (mout7.freenet.de [195.4.92.97])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 59FDE78A2357
for xxxxx; Wed, 18 Nov 2009 02:47:30 +0100 (CET)
Received: from [195.4.92.27] (helo=17.mx.freenet.de)
by mout7.freenet.de with esmtpa (ID fdfsfdsdfewfs25 [at] geekmail.de) (port
25) (Exim 4.70 #1)
id 1NAZdh-0003mB-Ou; Wed, 18 Nov 2009 02:47:21 +0100
Received: from [82.128.70.73] (port=4851 helo=User)
by 17.mx.freenet.de with esmtpa (ID fdfsfdsdfewfs25 [at] geekmail.de) (port
25) (Exim 4.69 #94)
id 1NAZdg-0008Ll-St; Wed, 18 Nov 2009 02:47:21 +0100
IP: 82.128.70.73 ---> Multilinks Telecommunications Limited, Nigeria
fdfsfdsdfewfs25 [at] geekmail.de
mddhabbmdd210 [at] gmail.com
mrmadidahabahmed11 [at] live.com
mrmadidahabahmed [at] rocketmail.com
Muguphon: +447024028806 ---> Magrathea Telecommunications Limited, UK
Received: from mail.innovadora.com.co (unknown [200.14.42.254])
by xxxxx (Postfix) with ESMTP id F1BBD78A3187
for xxxxx; Wed, 18 Nov 2009 12:49:19 +0100 (CET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.innovadora.com.co (Postfix) with ESMTP id 9891AC01103;
Wed, 18 Nov 2009 04:21:26 -0500 (COT)
X-Virus-Scanned: amavisd-new at
Received: from mail.innovadora.com.co ([127.0.0.1])
by localhost (mail.innovadora.com.co [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id n0PZlXW9o5-9; Wed, 18 Nov 2009 04:21:25 -0500 (COT)
Received: from User (fntkngw021001.kngw.fnt.ftth.ppp.infoweb.ne.jp
[58.1.244.33])
by mail.innovadora.com.co (Postfix) with ESMTP id 89009C010B1;
Wed, 18 Nov 2009 04:19:19 -0500 (COT)
bensonedward18 [at] gala.net
- kjz
Die nächste Ladung:
zweimal der Dauer-Mugu:
Received: from web83812.mail.sp1.yahoo.com (web83812.mail.sp1.yahoo.com
[69.147.85.87])
by xxxxx (Postfix) with SMTP id A871B789407A
for xxxxx; Tue, 17 Nov 2009 15:52:11 +0100 (CET)
Received: (qmail 9950 invoked by uid 60001); 17 Nov 2009 14:52:10 -0000
Received: from [41.220.75.3] by web83812.mail.sp1.yahoo.com via HTTP;
Tue, 17 Nov 2009 06:52:10 PST
Received: from web83813.mail.sp1.yahoo.com (web83813.mail.sp1.yahoo.com
[69.147.85.89])
by xxxxx (Postfix) with SMTP id 0EE5D789407A
for xxxxx; Tue, 17 Nov 2009 15:53:28 +0100 (CET)
Received: (qmail 293 invoked by uid 60001); 17 Nov 2009 14:53:27 -0000
Received: from [41.220.75.3] by web83813.mail.sp1.yahoo.com via HTTP;
Tue, 17 Nov 2009 06:53:27 PST
IP: 41.220.75.3 ---> MTN Nigeria
wilcox.william [at] live.hk
william_wilcox [at] live.hk
Received: from ajofm.anofm.ro (unknown [80.97.213.165])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7D49178A3C58
for xxxxx; Tue, 17 Nov 2009 20:22:28 +0100 (CET)
Received: from ajofm.anofm.ro (localhost.localdomain [127.0.0.1])
by ajofm.anofm.ro (8.12.8/8.12.8) with ESMTP id nAGLgSmK032126;
Mon, 16 Nov 2009 23:42:28 +0200
X-OriginatingIP: 115.240.10.215 (ab_eures) ---> Reliance Communications
williamstuart47 [at] hotmail.com
william.stuart99 [at] googlemail.com
- kjz
Neues von der Front:
über Freenet:
Received: from mout4.freenet.de (mout4.freenet.de [195.4.92.94])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7A0E978A30B9
for xxxxx; Thu, 19 Nov 2009 13:46:14 +0100 (CET)
Received: from [195.4.92.25] (helo=15.mx.freenet.de)
by mout4.freenet.de with esmtpa (ID bdzbxcv [at] justmail.de) (port 25)
(Exim 4.70 #1)
id 1NB6NV-00089G-92; Thu, 19 Nov 2009 13:44:49 +0100
Received: from [41.211.232.149] (port=63139 helo=User)
by 15.mx.freenet.de with esmtpa (ID bdzbxcv [at] justmail.de) (port 25)
(Exim 4.69 #94)
id 1NB6NT-0001uV-6Z; Thu, 19 Nov 2009 13:44:49 +0100
IP: 41.211.232.149 ---> 149.232.211.41.client149.directonpc.net, Nigeria
bdzbxcv [at] justmail.de
jeffreydean009 [at] gmail.com
hdjdhdjje [at] hotmail.com
jeffreydeanhsbcbank [at] gmail.com
Muguphon: +44-702-401-0191 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44-702-401-0191
Received: from mail.ggsibahamas.com (ggsibahamas.com [24.244.158.69])
by xxxxx (Postfix) with ESMTP id 1D8767894108
for xxxxx; Fri, 20 Nov 2009 08:55:00 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by mail.ggsibahamas.com (Postfix) with ESMTP id 280E911DF116;
Thu, 19 Nov 2009 05:55:36 -0500 (EST)
X-Virus-Scanned: amavisd-new at www.ggsibahamas.com
Received: from mail.ggsibahamas.com ([127.0.0.1])
by localhost (server.ggsibahamas.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id sdN+LGvaaaFS; Thu, 19 Nov 2009 05:55:36 -0500 (EST)
Received: from User (unknown [41.221.164.76])
by mail.ggsibahamas.com (Postfix) with ESMTP id 2E8A511DE1AF;
Thu, 19 Nov 2009 05:46:55 -0500 (EST)
IP: 41.221.164.76 ---> Swift Networks Ltd., Nigeria
mrstinaibru [at] yahoo.in
reply11 [at] yahoo.com
wiretransferunit663 [at] gmail.com
Muguphon: +234-705-985-1181 ---> Globacom Ltd., Nigeria
- kjz
Dann woll'n wir mal wieder für Nachschub sorgen:
über T-Offline, da könnte bei einer Homepage der Hosenlatz offen stehen:
Received: from mailout01.t-online.de (mailout01.t-online.de [194.25.134.80])
by xxxxx (Postfix) with ESMTP id B451C7894084
for xxxxx; Fri, 20 Nov 2009 22:04:22 +0100 (CET)
Received: from fwd11.aul.t-online.de
by mailout01.t-online.de with smtp
id 1NBaZd-0004FH-06; Fri, 20 Nov 2009 21:59:21 +0100
Received: from User
(SrafVMZSgtClw537dFaFhl-0awPbcCD7rqzKlZXScgx-6q0fDYqgJx5+agi-bctZfA31mmcszL@[82.5.127.182])
by fwd11.t-online.de
with esmtp id 1NBZbg-0M6mno0; Fri, 20 Nov 2009 20:57:24 +0100
IP: 82.5.127.182 ---> cpc3-seve7-0-0-cust949.popl.cable.ntl.com
lucy_raphael [at] live.co.uk
hashley [at] iccbremen.de (Bremen?, das kennt man doch....)
raphlucy001 [at] live.co.uk
wieder T-Offline, diesmal über einen Tor-Proxy abgekippt:
Received: from mailout06.t-online.de (mailout06.t-online.de [194.25.134.19])
by xxxxx (Postfix) with ESMTP id 222E0789C263
for xxxxx; Sat, 21 Nov 2009 16:09:18 +0100 (CET)
Received: from fwd00.aul.t-online.de
by mailout06.t-online.de with smtp
id 1NBrXc-0008RV-03; Sat, 21 Nov 2009 16:06:24 +0100
Received: from User
(XjodtBZrQt1tqkepNZ2i0lnU3OLh-lS+4I-HGyiuOnNwW4gy3aoE9qjLQTw74U6w8h2B2Msyxo@[87.118.101.175])
by fwd00.t-online.de
with esmtp id 1NBqun-0FYucC0; Sat, 21 Nov 2009 15:26:17 +0100
IP: 87.118.101.175 ---> gpftor6.privacyfoundation.de
mr.markreeves [at] live.com
Muguphon: +44 702 406 5428 ---> Magrathea Telecommunications Limited, UK
Über Netsol kann man's auch:
Received: from omr13.networksolutionsemail.com
(omr13.networksolutionsemail.com [205.178.146.63])
by xxxxx (Postfix) with ESMTP id 3802B78A23F1
for xxxxx; Sat, 21 Nov 2009 17:27:48 +0100 (CET)
Received: from mail.networksolutionsemail.com
(mail.networksolutionsemail.com [205.178.146.50])
by omr13.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
nALGRlGZ005925
for xxxxx; Sat, 21 Nov 2009 11:27:47 -0500
Message-Id: <200911211627.nALGRlGZ005925 [at] omr13.networksolutionsemail.com>
Received: (qmail 30165 invoked by uid 78); 21 Nov 2009 16:27:46 -0000
Received: from unknown (HELO User) (win [at] erringtonhomes.net@196.207.218.47)
by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 21 Nov 2009 16:27:46
-0000
IP: 196.207.218.47 ---> SONATELNET, SN
win [at] erringtonhomes.net
gdonovanser2 [at] sify.com
gdonovanse [at] gmail.com
Received: from web83006.mail.mud.yahoo.com (web83006.mail.mud.yahoo.com
[209.191.87.12])
by xxxxx (Postfix) with SMTP id 7879778A2C5B
for xxxxx; Sat, 21 Nov 2009 20:36:10 +0100 (CET)
Received: (qmail 81765 invoked by uid 60001); 21 Nov 2009 19:36:09 -0000
Received: from [41.222.192.88] by web83006.mail.mud.yahoo.com via HTTP;
Sat, 21 Nov 2009 11:36:09 PST
IP: 41.222.192.88 ---> ISOCEL SARL, Benin
western.uniontransfer.2 [at] hotmail.fr
mugu_paul [at] yahoo.fr
Muguphon: +229-96222356 ---> Benin
wieder T-Offline:
Received: from mailout05.t-online.de (mailout05.t-online.de [194.25.134.82])
by xxxxx (Postfix) with ESMTP id BE90F78810D4
for xxxxx; Sun, 22 Nov 2009 02:55:38 +0100 (CET)
Received: from fwd07.aul.t-online.de
by mailout05.t-online.de with smtp
id 1NC1b8-0000RP-00; Sun, 22 Nov 2009 02:50:42 +0100
Received: from User
(XKjyOsZvwtdrFQzRY6Y4FKLvVSZUV3jrwEKeX3ORNOxfONjrHG1O4TJIZMSl9nYdzQcpiSlhnI@[208.104.207.222])
by fwd07.t-online.de
with esmtp id 1NC1Ns-1BEVYe0; Sun, 22 Nov 2009 02:37:00 +0100
IP: 208.104.207.222 ---> 208-104-207-222.fftp.comporium.net
pgates55 [at] sify.com
pgates63 [at] gmail.com
Die Amsterdam-Konnektion:
Received: from cpsmtpb-ews05.kpnxchange.com
(cpsmtpb-ews05.kpnxchange.com [213.75.39.8])
by xxxxx (Postfix) with ESMTP id 0832478973F8
for xxxxx; Sun, 22 Nov 2009 14:35:59 +0100 (CET)
Received: from cpbrm-ews24.kpnxchange.com ([10.94.84.155]) by
cpsmtpb-ews05.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 22 Nov 2009 14:35:59 +0100
Received: from CPSMTPM-EML03.kpnxchange.com ([213.75.39.73]) by
cpbrm-ews24.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 22 Nov 2009 14:35:59 +0100
Received: from localhost ([10.94.77.200]) by
CPSMTPM-EML03.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Sun, 22 Nov 2009 14:35:46 +0100
viktoralbert1 [at] aim.com
e.bv49 [at] kpnplanet.nl
gecracktes SquirrelMail:
Received: from csms.edu.mn (unknown [202.5.194.3])
by xxxxx (Postfix) with ESMTP id 08C2678990EF
for xxxxx; Sun, 22 Nov 2009 18:02:28 +0100 (CET)
Received: from mail.csms.edu.mn (localhost [127.0.0.1])
by csms.edu.mn (8.13.8/8.13.8) with ESMTP id nALFOp98016643;
Sat, 21 Nov 2009 23:24:52 +0800 (ULAT)
(envelope-from j.bradford1155 [at] yahoo.com)
Received: from 41.184.65.83
(SquirrelMail authenticated user erdene)
by mail.csms.edu.mn with HTTP;
Sat, 21 Nov 2009 23:25:47 +0800 (ULAT)
IP: 41.184.65.83 ---> ipNX NIGERIA
j.bradford1155 [at] yahoo.com
j.bradford [at] live.com
erdene [at] csms.edu.mn
- kjz
Es herrscht wieder 'high life' in Mugu-Town:
gecracktes Horde:
Received: from inmosor.com (84.127.226.150.static.user.ono.com
[84.127.226.150])
by xxxxx (Postfix) with SMTP id 00532789AD8A
for xxxxx; Tue, 24 Nov 2009 05:00:04 +0100 (CET)
Received: (qmail 8763 invoked by uid 453); 23 Nov 2009 19:50:10 -0000
Received: from localhost (HELO localhost) (127.0.0.1)
by inmosor.com (qpsmtpd/0.32) with ESMTP; Mon, 23 Nov 2009 20:50:10
+0100
Received: from 41.217.65.4 ([41.217.65.4]) by inmosor.com (Horde MIME
library) with HTTP; Mon, 23 Nov 2009 20:50:02 +0100
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
zenithbanknigeriaplc [at] web2mail.com
zenet.bank46 [at] gmail.com
Muguphon: +234-7081581021 ---> Celtel Nigeria Limited/Zain
gecracktes SquirrelMail:
Received: from mail.regionlambayeque.gob.pe
(sede.regionlambayeque.gob.pe [200.60.14.130])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2CF9578A3192
for xxxxx; Tue, 24 Nov 2009 13:48:19 +0100 (CET)
Received: from sede.regionlambayeque.gob.pe (localhost [127.0.0.1])
by mail.regionlambayeque.gob.pe (Postfix) with ESMTP id 7C836C5970;
Mon, 23 Nov 2009 04:04:24 -0500 (PET)
Received: from 41.217.65.3
(SquirrelMail authenticated user lluenarchivo)
by sede.regionlambayeque.gob.pe with HTTP;
Mon, 23 Nov 2009 02:04:24 -0700 (MST)
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
lluenarchivo [at] regionlambayeque.gob.pe
edwardbobo012 [at] yahoo.com
lewismore206 [at] yahoo.com.hk
edwardbobo10 [at] yahoo.com.hk
Freenet auch wieder dabei:
Received: from mout6.freenet.de (EHLO mout6.freenet.de) [195.4.92.96]
by mx0.gmx.net (mx081) with SMTP; 24 Nov 2009 14:07:13 +0100
Received: from [195.4.92.22] (helo=12.mx.freenet.de)
by mout6.freenet.de with esmtpa (ID polomenmen12 [at] 24h.de) (port 25)
(Exim 4.70 #1)
id 1NCv6p-0007P3-0j; Tue, 24 Nov 2009 14:07:07 +0100
Received: from [82.128.71.43] (port=60054 helo=User)
by 12.mx.freenet.de with esmtpa (ID polomenmen12 [at] 24h.de) (port 587)
(Exim 4.69 #94)
id 1NCv6n-00006T-PB; Tue, 24 Nov 2009 14:07:06 +0100
IP: 82.128.71.43 ---> Multilinks Telecommunications Limited, Nigeria
polomenmen12 [at] 24h.de
mshelenmitchell [at] gmail.com
Muguphon: +234-70 6052 7782 ---> MTN Nigeria Communications Ltd.
Crack in Ägypten:
Received: from mailsrv.cmrdi.sci.eg (mailsrv.cmrdi.sci.eg [195.43.3.76])
by xxxxx (Postfix) with ESMTP id BB9A078A242E
for xxxxx; Tue, 24 Nov 2009 15:00:28 +0100 (CET)
Received: from User ([82.128.34.238]) by mailsrv.cmrdi.sci.eg with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 23 Nov 2009 20:58:27 +0200
IP: 82.128.34.238 ---> Multilinks Telecommunications Limited, Nigeria
samueludo13 [at] gmail.com
nicholassai1 [at] live.com
wo auch nach Tagen der Hosenlatz noch offen steht und der Absue-Desk von Google anscheinend nur von Dave Null gelesen wird. Die (vielgescholtene) Firma Microsoft reagiert wenigstens. Soviel zum Google-Motto 'We are not evil'....:
Received: from mailsrv.cmrdi.sci.eg (mailsrv.cmrdi.sci.eg [195.43.3.76])
by xxxxx (Postfix) with ESMTP id 8F66478A324D
for xxxxx; Thu, 26 Nov 2009 13:30:25 +0100 (CET)
Received: from User ([82.128.25.238]) by mailsrv.cmrdi.sci.eg with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 25 Nov 2009 23:55:16 +0200
ga.bello112 [at] live.com
Juchuu auch dabei:
Received: from n2.bullet.mail.cnh.yahoo.com
(n2.bullet.mail.cnh.yahoo.com [203.209.250.220])
by xxxxx (Postfix) with SMTP id A648E78810D4
for xxxxx; Wed, 25 Nov 2009 03:12:06 +0100 (CET)
Received: from [203.209.250.223] by n2.bullet.mail.cnh.yahoo.com with
NNFMP; 25 Nov 2009 02:12:04 -0000
Received: from [203.209.250.217] by t2.bullet.mail.cnh.yahoo.com with
NNFMP; 25 Nov 2009 02:12:04 -0000
Received: from [127.0.0.1] by omp102.mail.cnh.yahoo.com with NNFMP; 25
Nov 2009 02:12:04 -0000
Received: (qmail 35406 invoked by uid 60001); 25 Nov 2009 02:12:03 -0000
Received: from [41.191.86.5] by web92105.mail.cnh.yahoo.com via HTTP;
Wed, 25 Nov 2009 10:12:02 CST
IP: 41.191.86.5 ---> MICROMEDIA, BJ
ezepeter1987 [at] yahoo.cn
western.customers_care [at] datviet.com
Die Madrid-Konnektion über die Schweiz, zum ersten:
Received: from mail.cmm.ch
(gw.ptr-80-238-195-98.customer.ch.netstream.com [80.238.195.98])
by xxxxx (Postfix) with ESMTP id 09CF178A31B1
for xxxxx; Wed, 25 Nov 2009 09:40:27 +0100 (CET)
Received: from User ([84.125.240.50])
by mail.cmm.ch (Merak 8.0.3) with ASMTP id UCJ40972;
Wed, 25 Nov 2009 09:41:00 +0100
IP: 84.125.240.50 ---> 84.125.240.50.dyn.user.ono.com
choi_hpacific [at] live.com
Natürlich auch T-Offline, sieht mir nach gecrackter Homepage aus:
Received: from mailout11.t-online.de (mailout11.t-online.de [194.25.134.85])
by xxxxx (Postfix) with ESMTP id 7906778A3087
for xxxxx; Wed, 25 Nov 2009 10:16:56 +0100 (CET)
Received: from fwd09.aul.t-online.de
by mailout11.t-online.de with smtp
id 1NDDuL-00036O-00; Wed, 25 Nov 2009 10:11:29 +0100
Received: from User
(STDG+-Zr8tsWxLQYJrpPD46kCr4aEDTDaqJdFXxIQds5gaaNG9l2PY1jB3W+F0w4mva0SCkBCZ@[76.225.31.34])
by fwd09.t-online.de
with esmtp id 1NDCt3-0je7M00; Wed, 25 Nov 2009 09:06:05 +0100
IP: 76.225.31.34 ---> adsl-76-225-31-34.dsl.irvnca.sbcglobal.net
office5 [at] zuchtrinder.eu
fbiheadquarters66 [at] yahoo.com
robert.mueller [at] hotmail.co.uk
Die Madrid-Konnektion via Schweiz zum zweiten:
Received: from mail.cmm.ch
(gw.ptr-80-238-195-98.customer.ch.netstream.com [80.238.195.98])
by xxxxx (Postfix) with ESMTP id 8E6AE78A31C7
for xxxxx; Wed, 25 Nov 2009 14:28:47 +0100 (CET)
Received: from User ([84.232.21.126])
by mail.cmm.ch (Merak 8.0.3) with ASMTP id UCJ40972;
Tue, 24 Nov 2009 12:21:13 +0100
Received: from node-plan42.smtp.com (node-plan42.smtp.com [174.120.164.212])
by xxxxx (Postfix) with ESMTP id DEF4278A31B3
for xxxxx; Wed, 25 Nov 2009 14:21:25 +0100 (CET)
Received: from fdob.biz (mylisthandler.com [174.34.159.218])
by node-plan42.smtp.com (Postfix) with ESMTPA id 407742B6BE1
for xxxxx; Wed, 25 Nov 2009 08:14:05 -0500 (EST)
X-SMTPCOM-Spam-Policy: node-plan42.smtp.com is a paid relay service.
We do not tolerate UCE of any kind.
Please report it ASAP to abuse [at] smtp.com
BTW: Der Header lügt, SMTP ist RFC-Ignorant.
http://www.rfc-ignorant.org/tools/lookup.php?domain=smtp.com
hbounce [at] frankform.com
promotions [at] frankdata.biz
Besonders 'nett', hier wurde ausgerechnet der Mailer vom NIC in Indien gecrackt.
NIC, the premier ICT organisation of Govt of India Soviel zum Thema Kompetenz.....
Received: from vastu3.nic.in (smtpgw.nic.in [164.100.17.13])
by xxxxx (Postfix) with ESMTP id 49C7178A1425
for xxxxx; Wed, 25 Nov 2009 14:55:23 +0100 (CET)
Received: from vastu3.nic.in (localhost.localdomain [127.0.0.1])
by vastu3.nic.in (8.12.10/8.12.10) with ESMTP id nAPCa4rk020804
for xxxxx; Wed, 25 Nov 2009 18:06:09 +0530
Received: from ori.nic.in (ori.nic.in [164.100.140.2])by vastu3.nic.in
(8.12.10/8.12.10) with ESMTP id nAOHAWqZ012891;Tue, 24 Nov 2009 23:03:15
+0530
Received: from mail.ori.nic.in (ori.nic.in [10.172.0.2])by ori.nic.in
(8.13.1/8.13.1) with SMTP id nAOI6GL8025486;Tue, 24 Nov 2009 23:36:16 +0530
Received: from 115.133.222.194 (NIC authenticated user sunderga)
by mail.ori.nic.in with HTTP; Tue, 24 Nov 2009 23:36:16 +0530
(IST)
IP: 115.133.222.194 ---> tm.net.my
sunderga [at] nic.in
esqjimleon [at] aim.com
- kjz
Der Mugu-Flashmob geht in die nächste Runde:
ad uno:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx086) with SMTP; 23 Nov 2009 19:57:07 +0100
Received: from User (93-41-221-71.ip83.fastwebnet.it [93.41.221.71])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nANItq2u001225;
Tue, 24 Nov 2009 03:55:58 +0900
ad due:
Received: from unknown (EHLO dns2.maxion.co.kr) [211.234.93.208]
by mx0.gmx.net (mx086) with SMTP; 23 Nov 2009 19:57:07 +0100
Received: from User (93-41-221-71.ip83.fastwebnet.it [93.41.221.71])
(authenticated bits=0)
by dns2.maxion.co.kr (8.13.1/8.13.1) with ESMTP id nANItq2u001225;
Tue, 24 Nov 2009 03:55:58 +0900
paultucker [at] live.it
network.vali [at] email.it
paultuckeruk67 [at] yahoo.com.hk
die Madrid-Konnektion:
Received: from mail.tao-it.com (mail.numeninsight.com [190.2.36.105])
by xxxxx (Postfix) with ESMTP id 4280C78A2E7D
for xxxxx; Mon, 23 Nov 2009 17:18:56 +0100 (CET)
Received: from User ([77.210.116.71])
by pomelo.in.tao-it.com (Sun Java System Messaging Server 6.2-6.01
(built Apr
3 2006)) with ESMTPA id <0KTK006YAIBC0C00 [at] pomelo.in.tao-it.com> for
xxxxx; Mon, 23 Nov 2009 13:14:25 -0200 (ARST)
IP: 77.210.116.71 ---> VODAFONE_SPAIN_NETWORK
lotterycompany [at] financier.com
agentmd [at] luckymail.com
Muguphon: +34634-085-164 ---> Vodafone Espana
Received: from 81-179-4-65.dsl.pipex.com (EHLO mx4.hotmail.com)
[81.179.4.65]
by mx0.gmx.net (mx009) with SMTP; 23 Nov 2009 16:34:28 +0100
maghatch5 [at] sify.com
Netsol mal wieder:
Received: from omr1.networksolutionsemail.com
(omr1.networksolutionsemail.com [205.178.146.51])
by xxxxx (Postfix) with ESMTP id 3377E78A237B
for xxxxx; Tue, 24 Nov 2009 21:00:02 +0100 (CET)
Received: from mail.networksolutionsemail.com
(mail.networksolutionsemail.com [205.178.146.50])
by omr1.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
nAOK00C2020044
for xxxxx; Tue, 24 Nov 2009 15:00:01 -0500
Message-Id: <200911242000.nAOK00C2020044 [at] omr1.networksolutionsemail.com>
Received: (qmail 7625 invoked by uid 78); 24 Nov 2009 19:59:59 -0000
Received: from unknown (HELO User) (win1 [at] erringtonhomes.net@41.208.159.65)
by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 24 Nov 2009 19:59:59
-0000
IP: 41.208.159.65 ---> SONATEL, SN
win1 [at] erringtonhomes.net
hawamacca [at] sify.com
Man beachte den Servernamen: antispam1.jfce.jus.br (Tja, Brasilien halt...)
Received: from antispam1.jfce.jus.br (antispam1.jfce.jus.br [200.166.132.2])
by xxxxx (Postfix) with ESMTP id 24BE978810D4
for xxxxx; Wed, 25 Nov 2009 16:53:31 +0100 (CET)
Received: from mail.jfce.gov.br (HELO jfce.jus.br) ([200.166.132.10])
by antispam1.jfce.jus.br with ESMTP; 25 Nov 2009 12:42:00 -0300
BrmaOutput: hn.kd.dhcp [61.54.28.20] (may be forged)
Received: from User (hn.kd.dhcp [61.54.28.20] (may be forged))
(authenticated bits=0)
by jfce.jus.br (8.12.11.20060308/8.12.11) with ESMTP id nAPEJUrQ019322;
Wed, 25 Nov 2009 11:19:48 -0300
IP: 61.54.28.20 ---> China Unicom Henan (wahrscheinlich Proxy-Zombie)
sanusimrlamido30 [at] gmail.com
mrlamidosanusi01 [at] sify.com
Muguphon: +234 802 398 0667 ---> Celtel Nigeria Limited/Zain
Und immer noch ist SquirrelMail beim NIC in Indien gecrackt, Netzwerkkompetenz vom Feinsten......
Received: from vastu1.nic.in (smtpgw.nic.in [164.100.17.12])
by xxxxx (Postfix) with ESMTP id 8616678A3177
for xxxxx; Wed, 25 Nov 2009 19:45:51 +0100 (CET)
Received: from vastu1.nic.in (localhost.localdomain [127.0.0.1])
by vastu1.nic.in (8.12.10/8.12.10) with ESMTP id nAPIgtan025026
for xxxxx; Thu, 26 Nov 2009 00:15:38 +0530
Received: from ori.nic.in (ori.nic.in [164.100.140.2])by vastu1.nic.in
(8.12.10/8.12.10) with ESMTP id nAOIWktb021626;Wed, 25 Nov 2009 00:26:52
+0530
Received: from mail.ori.nic.in (ori.nic.in [10.172.0.2])by ori.nic.in
(8.13.1/8.13.1) with SMTP id nAOI8fqt025609;Tue, 24 Nov 2009 23:38:41 +0530
Received: from 115.133.222.194 (NIC authenticated user sunderga)
by mail.ori.nic.in with HTTP; Tue, 24 Nov 2009 23:38:42 +0530
(IST)
Received: from vastu1.nic.in (smtpgw.nic.in [164.100.17.12])
by xxxxx (Postfix) with ESMTP id 7D31278A31A6
for xxxxx; Wed, 25 Nov 2009 19:45:13 +0100 (CET)
Received: from vastu1.nic.in (localhost.localdomain [127.0.0.1])
by vastu1.nic.in (8.12.10/8.12.10) with ESMTP id nAPIYChr020775
for xxxxx; Thu, 26 Nov 2009 00:15:00 +0530
Received: from ori.nic.in (ori.nic.in [164.100.140.2])by vastu1.nic.in
(8.12.10/8.12.10) with ESMTP id nAOIWmtc021639;Wed, 25 Nov 2009 00:26:52
+0530
Received: from mail.ori.nic.in (ori.nic.in [10.172.0.2])by ori.nic.in
(8.13.1/8.13.1) with SMTP id nAOI8hVW025613;Tue, 24 Nov 2009 23:38:43 +0530
Received: from 115.133.222.194 (NIC authenticated user sunderga)
by mail.ori.nic.in with HTTP; Tue, 24 Nov 2009 23:38:43 +0530 (IST)
Message-ID: <xxxxxxxxsquirrel [at] mail.ori.nic.in>
IP: 115.133.222.194 ---> TELEKOM MALAYSIA BERHAD
sunderga [at] nic.in
esqjimleon [at] aim.com
- kjz
Die Ahnungslosen vom NIC in Indien haben immer noch keine Peilung:
Received: from vastu3.nic.in (smtpgw.nic.in [164.100.17.13])
by xxxxx (Postfix) with ESMTP id B8AD878A2C51
for xxxxx; Thu, 26 Nov 2009 21:12:50 +0100 (CET)
Received: from vastu3.nic.in (localhost.localdomain [127.0.0.1])
by vastu3.nic.in (8.12.10/8.12.10) with ESMTP id nAOHbktE017766
for xxxxx; Tue, 24 Nov 2009 23:09:42 +0530
Received: from ori.nic.in (ori.nic.in [164.100.140.2])by vastu3.nic.in
(8.12.10/8.12.10) with ESMTP id nAOHD0qZ016406;Tue, 24 Nov 2009 23:05:22
+0530
Received: from mail.ori.nic.in (ori.nic.in [10.172.0.2])by ori.nic.in
(8.13.1/8.13.1) with SMTP id nAOI7i45025542;Tue, 24 Nov 2009 23:37:44 +0530
Received: from 115.133.222.194 (NIC authenticated user sunderga)
by mail.ori.nic.in with HTTP; Tue, 24 Nov 2009 23:37:45 +0530 (IST)
Received: from vastu3.nic.in (smtpgw.nic.in [164.100.17.13])
by xxxxx (Postfix) with ESMTP id 4A7E378810D4
for xxxxx; Thu, 26 Nov 2009 21:12:51 +0100 (CET)
Received: from vastu3.nic.in (localhost.localdomain [127.0.0.1])
by vastu3.nic.in (8.12.10/8.12.10) with ESMTP id nAOHbktE017765
for xxxxx; Tue, 24 Nov 2009 23:09:42 +0530
Received: from ori.nic.in (ori.nic.in [164.100.140.2])by vastu3.nic.in
(8.12.10/8.12.10) with ESMTP id nAOHCWqa015862;Tue, 24 Nov 2009 23:05:22
+0530
Received: from mail.ori.nic.in (ori.nic.in [10.172.0.2])by ori.nic.in
(8.13.1/8.13.1) with SMTP id nAOI8F4C025573;Tue, 24 Nov 2009 23:38:15 +0530
Received: from 115.133.222.194 (NIC authenticated user sunderga)
by mail.ori.nic.in with HTTP; Tue, 24 Nov 2009 23:38:15 +0530 (IST)
sunderga [at] nic.in
esqjimleon [at] aim.com
- kjz
Als wir da hätten, zum ersten:
Received: from unknown (EHLO mail.hmu.edu.vn) [203.162.18.26]
by mx0.gmx.net (mx078) with SMTP; 26 Nov 2009 04:00:51 +0100
Received: from localhost (mail.hmu.edu.vn [127.0.0.1])
by mail.hmu.edu.vn (Postfix) with ESMTP id 1BDDF317AC8;
Wed, 25 Nov 2009 19:21:45 +0700 (ICT)
X-Virus-Scanned: Debian amavisd-new at hmu.edu.vn
Received: from mail.hmu.edu.vn ([127.0.0.1])
by localhost (mail.hmu.edu.vn [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Tkfa7Rerp+tF; Wed, 25 Nov 2009 19:21:36 +0700 (ICT)
Received: from mail.hmu.edu.vn (mail.hmu.edu.vn [127.0.0.1])
by mail.hmu.edu.vn (Postfix) with ESMTP id 632FE101432;
Tue, 24 Nov 2009 15:16:54 +0700 (ICT)
Received: (qmail invoked by alias); 26 Nov 2009 03:39:54 -0000
Received: from unknown (EHLO mail.hmu.edu.vn) [203.162.18.26]
by mx0.gmx.net (mx073) with SMTP; 26 Nov 2009 04:39:54 +0100
Received: from localhost (mail.hmu.edu.vn [127.0.0.1])
by mail.hmu.edu.vn (Postfix) with ESMTP id 6CF99179F80;
Wed, 25 Nov 2009 15:38:55 +0700 (ICT)
X-Virus-Scanned: Debian amavisd-new at hmu.edu.vn
Received: from mail.hmu.edu.vn ([127.0.0.1])
by localhost (mail.hmu.edu.vn [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id DeP24emUFASW; Wed, 25 Nov 2009 15:38:46 +0700 (ICT)
Received: from mail.hmu.edu.vn (mail.hmu.edu.vn [127.0.0.1])
by mail.hmu.edu.vn (Postfix) with ESMTP id 882ED1366DE;
Tue, 24 Nov 2009 17:54:07 +0700 (ICT)
ladygrace434 [at] hotmail.com
Nein, nicht Sven, sondern Samuel Udo:
Received: from mailsrv.cmrdi.sci.eg (mailsrv.cmrdi.sci.eg [195.43.3.76])
by xxxxx (Postfix) with ESMTP id 8F66478A324D
for xxxxx; Thu, 26 Nov 2009 13:30:25 +0100 (CET)
Received: from User ([82.128.25.238]) by mailsrv.cmrdi.sci.eg with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 25 Nov 2009 23:55:16 +0200
IP: 82.128.25.238 ---> Multi-Links Telecommunications Limited, Nigeria
ga.bello112 [at] live.com
samueludo13 [at] gmail.com
Received: from www.notary.ru (notary.ru [217.23.156.171])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 3B96A78990E7
for xxxxx; Fri, 27 Nov 2009 06:19:47 +0100 (CET)
Received: from [82.128.20.201] (helo=User)
by www.notary.ru with esmtpa (Exim 4.66)
(envelope-from <andynwaeze [at] yahoo.com.au>)
id 1NDPn4-000978-Qy; Thu, 26 Nov 2009 00:52:48 +0300
IP: 82.128.20.201 ---> ml82.128.20.201.multilinks.com
andynwaeze [at] yahoo.com.au
andy.nwaeze01 [at] yahoo.com.hk
Muguphon: +234 8058137764 ---> Globacom Ltd., Nigeria
Received: from cstserver01.CST.local (unknown [210.17.224.84])
by xxxxx (Postfix) with ESMTP id 2E2CA78A2108
for xxxxx; Fri, 27 Nov 2009 01:13:55 +0100 (CET)
Received: from User ([41.217.65.3]) by cstserver01.CST.local with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 27 Nov 2009 07:58:24 +0800
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
james.o.ibori9090 [at] googlemail.com
chiefjamesibori65 [at] yahoo.co.uk
gecracktes Horde:
Received: from yaocelotl.df.gob.mx (yaocelotl.df.gob.mx [132.247.32.137])
by xxxxx (Postfix) with ESMTP id 820E778A1589
for xxxxx; Fri, 27 Nov 2009 02:17:16 +0100 (CET)
Received: from localhost (yaocelotl [127.0.0.1])
by yaocelotl.df.gob.mx (Postfix) with ESMTP id 82975A086E0;
Thu, 26 Nov 2009 19:01:44 -0600 (CST)
X-Virus-Scanned: Por amavisd-new usando ClamAV en correo.df.gob.mx
Received: from yaocelotl.df.gob.mx ([127.0.0.1])
by localhost (yaocelotl.df.gob.mx [127.0.0.1]) (amavisd-new, port 10025)
with ESMTP id rxxYgtjY26WF; Thu, 26 Nov 2009 19:01:44 -0600 (CST)
Received: from horde0.df.gob.mx (webmail.df.gob.mx [10.250.100.6])
by yaocelotl.df.gob.mx (Postfix) with ESMTP id 203B4A086DE;
Thu, 26 Nov 2009 19:01:43 -0600 (CST)
Received: from 41.220.75.16 ([41.220.75.16]) by horde0.df.gob.mx (Horde
MIME library) with HTTP; Thu, 26 Nov 2009 19:01:43 -0600
IP: 41.220.75.16 ---> MTN Nigeria
abu [at] arabmail.net
amrpop [at] live.com
- kjz
Da war doch noch was...., zum zweiten:
gecracktes SquirelMail aus IN, NIC India hat immer noch den Hosenlatz auf:
Received: from vastu3.nic.in (smtpgw.nic.in [164.100.17.13])
by xxxxx (Postfix) with ESMTP id B8AD878A2C51
for xxxxx; Thu, 26 Nov 2009 21:12:50 +0100 (CET)
Received: from vastu3.nic.in (localhost.localdomain [127.0.0.1])
by vastu3.nic.in (8.12.10/8.12.10) with ESMTP id nAOHbktE017766
for xxxxx; Tue, 24 Nov 2009 23:09:42 +0530
Received: from ori.nic.in (ori.nic.in [164.100.140.2])by vastu3.nic.in
(8.12.10/8.12.10) with ESMTP id nAOHD0qZ016406;Tue, 24 Nov 2009 23:05:22
+0530
Received: from mail.ori.nic.in (ori.nic.in [10.172.0.2])by ori.nic.in
(8.13.1/8.13.1) with SMTP id nAOI7i45025542;Tue, 24 Nov 2009 23:37:44 +0530
Received: from 115.133.222.194 (NIC authenticated user sunderga)
by mail.ori.nic.in with HTTP; Tue, 24 Nov 2009 23:37:45 +0530 (IST)
Received: from vastu3.nic.in (smtpgw.nic.in [164.100.17.13])
by deliver.uni-koblenz.de (Postfix) with ESMTP id 4A7E378810D4
for xxxxx; Thu, 26 Nov 2009 21:12:51 +0100 (CET)
Received: from vastu3.nic.in (localhost.localdomain [127.0.0.1])
by vastu3.nic.in (8.12.10/8.12.10) with ESMTP id nAOHbktE017765
for xxxxx; Tue, 24 Nov 2009 23:09:42 +0530
Received: from ori.nic.in (ori.nic.in [164.100.140.2])by vastu3.nic.in
(8.12.10/8.12.10) with ESMTP id nAOHCWqa015862;Tue, 24 Nov 2009 23:05:22
+0530
Received: from mail.ori.nic.in (ori.nic.in [10.172.0.2])by ori.nic.in
(8.13.1/8.13.1) with SMTP id nAOI8F4C025573;Tue, 24 Nov 2009 23:38:15 +0530
Received: from 115.133.222.194 (NIC authenticated user sunderga)
by mail.ori.nic.in with HTTP; Tue, 24 Nov 2009 23:38:15 +0530 (IST)
esqjimleon [at] aim.com
sunderga [at] nic.in
Da konnte wohl jemand den Proxy von Apache nicht richtig konfigurieren:
Received: from unknown (EHLO westchesterlibraries.org) [199.97.121.28]
by mx0.gmx.net (mx112) with SMTP; 27 Nov 2009 22:42:44 +0100
Received: by westchesterlibraries.org (Postfix, from userid 48)
id B50EF271265; Fri, 27 Nov 2009 16:39:14 -0500 (EST)
handerson.robert [at] yahoo.co.uk
apache [at] westchesterlibraries.org
mr_jeffpartrico [at] hotmail.com
robertmcainmcain [at] yahoo.co.uk
Received: from c2beaomr03.btconnect.com (c2beaomr03.btconnect.com
[213.123.26.181])
by xxxxx (Postfix) with ESMTP id 7606E78810D4
for xxxxx; Fri, 27 Nov 2009 22:58:28 +0100 (CET)
Received: from User ([211.153.33.12])
by c2beaomr03.btconnect.com
with ESMTP id LFH46826 (AUTH pka.peebles [at] btclick.com);
Fri, 27 Nov 2009 21:46:25 GMT
IP: 211.153.33.12 ---> YanQing committee network
pka.peebles [at] btclick.com
thomasjam14 [at] sify.com
Received: from mx03.bigwww.com (unknown [222.208.183.233])
by xxxxx (Postfix) with ESMTP id A04E678A1928
for xxxxx; Sat, 28 Nov 2009 00:14:33 +0100 (CET)
Received: from User (unknown [41.217.65.3])
by mx03.bigwww.com (Postfix) with ESMTPA id 5A3AA561BF;
Sat, 28 Nov 2009 07:00:19 +0800 (CST)
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
fedexstaffcosmosperry [at] yahoo.com.hk
Muguphon: +234 70-250-48121 ---> Visafone Communications Ltd., Nigeria
wohl derselbe Mugu:
Received: from mx03.bigwww.com (unknown [222.208.183.233])
by xxxxx (Postfix) with ESMTP id A4B2878990E7
for xxxxx; Sat, 28 Nov 2009 03:25:11 +0100 (CET)
Received: from User (unknown [41.217.65.4])
by mx03.bigwww.com (Postfix) with ESMTPA id 05E4A53D45;
Sat, 28 Nov 2009 10:20:26 +0800 (CST)
IP: 41.217.65.4
mrgoodluckmichael121 [at] yahoo.co.uk
die Amsterdam-Konnektion benutzt ausgerechnet einen gecrackten Spam- Und Viren-Filter-Server....
Received: from ironport2.cable.net.co (ironport2.cable.net.co
[200.118.2.78])
by xxxxx (Postfix) with ESMTP id 7BB5A7894B48
for xxxxx; Sat, 28 Nov 2009 10:56:09 +0100 (CET)
X-IronPort-AV: E=Sophos;i="4.47,305,1257138000";
d="doc'32?scan'32,208,32";a="174214497"
Received: from hefesto.cable.net.co ([200.118.2.58])
by ironport2.cable.net.co with ESMTP; 28 Nov 2009 04:55:56 -0500
Received: from User ([87.210.30.254])
by hefesto.cable.net.co (Sun Java System Messaging Server 6.2-7.06
(built Oct
6 2006)) with ESMTPA id <0KTT00KN8CUJ5I50 [at] hefesto.cable.net.co> for
xxxxx; Sat, 28 Nov 2009 04:55:55 -0500 (COT)
IP: 87.210.30.254 ---> ip254-30-210-87.adsl2.static.versatel.nl
claimagencydep [at] aim.com
Muguphon: +31-641-232-991 ---> T-Mobile Netherlands B.V.
Mugufax: +31-847-367-971 ---> J2 Global (Netherlands) B.V./Jump
gecrackter Server in CH:
Received: from mail.cmm.ch
(gw.ptr-80-238-195-98.customer.ch.netstream.com [80.238.195.98])
by xxxxx (Postfix) with ESMTP id 0EF7C7893CA4
for xxxxx; Sat, 28 Nov 2009 15:54:04 +0100 (CET)
Received: from User ([77.98.124.99])
by mail.cmm.ch (IceWarp 9.4.0) with ASMTP id JZF40606;
Sat, 28 Nov 2009 15:55:06 +0100
IP: 77.98.124.99 ---> 77-98-124-99.cable.ubr08.wolv.blueyonder.co.uk
choi_1pacific [at] live.com
Received: from commodorehomes.com (host-64-179-44-132.ind.choiceone.net
[64.179.44.132])
by xxxxx (Postfix) with ESMTP id 37B6D78A23E4
for xxxxx; Sat, 28 Nov 2009 20:12:34 +0100 (CET)
Received: from [81.91.238.59] (account info HELO User)
by commodorehomes.com (CommuniGate Pro SMTP 5.2.14)
with ESMTPA id 2107483; Sat, 28 Nov 2009 13:12:25 -0500
IP: 81.91.238.59 --> Glo Mobile BENIN
davidferguson [at] w.cn
dhldirectoffice [at] sify.com
Muguphon: +229 98823733 ---> Benin
Received: from server.trustme.info (HELO server.trustme.info)
[209.160.33.51]
by mx0.gmx.net (mx012) with SMTP; 29 Nov 2009 01:20:23 +0100
Received: from nvyzyzle (137.141.237.252)
by server.trustme.info; Sat, 28 Nov 2009 18:05:35 -0800
Received: from server.trustme.info (server.trustme.info [209.160.33.51])
by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)
id 0MK0x7-1NFMTD2BC1-002AeD for xxxxx; Sun, 29 Nov 2009
01:20:23 +0100
Received: from ocxfkw (62.203.72.27)
by server.trustme.info; Sat, 28 Nov 2009 18:05:33 -0800
Received: from server.trustme.info (HELO server.trustme.info)
[209.160.33.51]
by mx0.gmx.net (mx070) with SMTP; 29 Nov 2009 01:20:23 +0100
Received: from bqw (68.91.127.220)
by server.trustme.info; Sat, 28 Nov 2009 18:05:35 -0800
josevicentesoler [at] gmail.com
Received: from mail.tcm.pa.gov.br (ns2.tcm.pa.gov.br [200.242.199.80])
by xxxxx (Postfix) with ESMTP id 8D1FF789B905
for xxxxx; Sun, 29 Nov 2009 03:40:36 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by mail.tcm.pa.gov.br (Postfix) with ESMTP id 45BDB6D51B;
Sat, 28 Nov 2009 23:29:26 -0300 (BRT)
Received: from mail.tcm.pa.gov.br ([127.0.0.1])
by localhost (web.tcm.pa.gov.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id pLqx7NWaDVtB; Sat, 28 Nov 2009 23:29:25 -0300 (BRT)
Received: from User (unknown [77.104.239.1])
by mail.tcm.pa.gov.br (Postfix) with ESMTPA id 9AD866D518;
Sat, 28 Nov 2009 23:28:53 -0300 (BRT)
IP: 77.104.239.1 ---> minaretnet.cz
mschoolfees [at] ymail.com
evelynmartins77 [at] ymail.com
Received: from mail.willfly.org (unknown [222.73.17.50])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A111478A2C70
for xxxxx; Sun, 29 Nov 2009 19:35:08 +0100 (CET)
Received: from User (colorc5.lnk.telstra.net [165.228.100.208])
by mail.willfly.org (Postfix) with ESMTP id 3E1E1784814;
Sun, 29 Nov 2009 06:14:19 +0800 (CST)
howardcharles8222 [at] live.co.uk
howardcharles83 [at] yahoo.com.hk
- kjz
Und täglich grüßt das Murmeltier:
Received: from commodorehomes.com (host-64-179-44-132.ind.choiceone.net
[64.179.44.132])
by xxxxx (Postfix) with ESMTP id 9441578A2C71
for xxxxx; Mon, 30 Nov 2009 08:10:03 +0100 (CET)
Received: from [82.128.32.230] (account info HELO User)
by commodorehomes.com (CommuniGate Pro SMTP 5.2.14)
with ESMTPA id 26059; Sun, 29 Nov 2009 21:44:43 -0500
IP: 82.128.32.230 ---> Multilinks Telecommunications Limited, Nigeria
rosbrown [at] uku.co.uk
rancel [at] uku.co.uk
desbenize [at] uku.co.uk
Muguphon: +234 80 68011716 ---> MTN Nigeria Communications Ltd.
Received: from rmbb.net (mail.rmbb.net [206.123.81.66])
by xxxxx (Postfix) with ESMTP id E3A1578A32F0
for xxxxx; Mon, 30 Nov 2009 11:40:47 +0100 (CET)
Received: from User [41.211.249.171] by rmbb.net with ESMTP
(SMTPD32-8.15) id AF917BD100C4; Mon, 30 Nov 2009 04:33:53 -0600
IP: 41.211.249.171 ---> 171.249.211.41.client171.directonpc.net, Nigeria
Jamkenoffice [at] aol.com
info212 [at] europeanmail.com
Received: from mail.etiket-ka.com (mail.etiket-ka.com [212.90.170.242])
by xxxxx (Postfix) with ESMTP id D00357800C27
for xxxxx; Mon, 30 Nov 2009 23:33:18 +0100 (CET)
Received: from User (unknown [41.217.65.4])
by mail.etiket-ka.com (Postfix) with ESMTP id CD1AB9299D7;
Mon, 30 Nov 2009 23:36:33 +0200 (EET)
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
britishhighcommision234 [at] gmail.com
die Madrid-Konnektion, die Email-Dropbox ist schon seit Mitte August aktiv, soviel zum Thema AOL und Spambekämpfung...:
Received: from mx4.hotmail.com ([89.128.148.158])
by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
id 0LzdOI-1OB6la24jC-014nw4 for xxxxx; Mon, 30 Nov 2009
23:38:13 +0100
IP: 89.128.148.158 ---> YACOMNET, ES
unisecc [at] aim.com
eulloto [at] aol.com
Muguphon: +34 672 509 598 ---> Vodafone Espana
Received: from therentalconnection.com (unknown [67.52.171.226])
by xxxxx (Postfix) with ESMTP id 0EB6D78990E7
for xxxxx; Tue, 1 Dec 2009 09:24:17 +0100 (CET)
Received: from User ([82.128.32.70]) by therentalconnection.com with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 30 Nov 2009 12:18:48 -0800
IP: 82.128.32.70 ---> Multilinks Telecommunications Limited, Nigeria
joshuamensah [at] officeliveusers.com
mike [at] yahoo.com
derselbe Mugu mit anderer Dropbox:
Received: from therentalconnection.com (unknown [67.52.171.226])
by xxxxx (Postfix) with ESMTP id D5F0078A32D6
for xxxxx; Tue, 1 Dec 2009 14:39:30 +0100 (CET)
Received: from User ([82.128.35.85]) by therentalconnection.com with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 1 Dec 2009 03:47:39 -0800
IP: 82.128.35.85 ---> Multilinks Telecommunications Limited, Nigeria
alexander.011 [at] live.com
mike [at] yahoo.com
Muguphon: +447035974179 ---> Open Telecom International Ltd., UK
Der Schweizer Server hat immer noch den Hosenlatz offen:
Received: from mail.cmm.ch
(gw.ptr-80-238-195-98.customer.ch.netstream.com [80.238.195.98])
by xxxxx (Postfix) with ESMTP id C868F78A1905
for xxxxx; Tue, 1 Dec 2009 14:08:18 +0100 (CET)
Received: from User ([77.101.234.149])
by mail.cmm.ch (IceWarp 9.4.0) with ASMTP id IZJ26555;
Tue, 01 Dec 2009 14:08:55 +0100
IP: 77.101.234.149 ---> cpc2-haye12-0-0-cust660.haye.cable.virginmedia.com
choi112ho [at] googlemail.com
die Madrid-Konnektion auch aus deutschen Landen frisch auf den Tisch:
Received: from mail.laserdreams.de (EHLO monza.rheingoldcenter.de)
[217.237.180.106]
by mx0.gmx.net (mx111) with SMTP; 01 Dec 2009 23:00:30 +0100 --->
SHOP-2000-GMBH-NET/Telekom
Received: from User ([217.118.24.109]) by monza.rheingoldcenter.de with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 1 Dec 2009 22:21:28 +0100
IP: 217.118.24.109 ---> loft2323.serverloft.com
eusploto [at] airitts.com
Muguphon: +34-689-636-202 ---> Telefonica, ES
Mugufax: +34-917-905-000 ---> Colt Telecom Espana
- kjz
Teil 2:
Received: from smtpa2.aruba.it (smtpa2.aruba.it [62.149.128.211])
by xxxxx (Postfix) with SMTP id 6E1F478A3188
for xxxxx; Mon, 30 Nov 2009 18:11:01 +0100 (CET)
Received: (qmail 20495 invoked by uid 89); 30 Nov 2009 17:10:55 -0000
Received: from unknown (HELO User) (2347890 [at] aruba.it@78.146.239.54)
by smtpa2.aruba.it with SMTP; 30 Nov 2009 17:10:55 -0000
IP: 78.146.239.54 ---> Opal Telecom DSL, UK
flc [at] flconline.net
Received: from mail.itak.at (unknown [213.157.142.22])
by xxxxx (Postfix) with ESMTP id 2C0DC7800AF4
for xxxxx; Mon, 30 Nov 2009 22:05:08 +0100 (CET)
Received: from User [82.128.23.2] by mail.itak.at with ESMTP
(SMTPD32-8.15) id AE31AF012E; Mon, 30 Nov 2009 20:34:09 +0100
IP: 82.128.23.2 ---> ml82.128.23.2.multilinks.com, Nigeria
drthomasrichard2 [at] yahoo.co.jp
drthomasrichard20 [at] yahoo.co.jp
Muguphon: +234-806-752-8963 ---> MTN Nigeria Communications Ltd.
Received: from s15290587.onlinehome-server.info
(s15290587.onlinehome-server.info [87.106.222.235])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5608578A30A5
for xxxxx; Wed, 2 Dec 2009 20:40:29 +0100 (CET)
Received: (qmail 8121 invoked from network); 1 Dec 2009 10:45:13 +0000
Received: from unknown (HELO User) (41.217.65.3)
by s15290587.onlinehome-server.info with SMTP; 1 Dec 2009 10:45:12
+0000
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
james.o.ibori9090 [at] googlemail.com
gov.james.o.ibori [at] mycapitalsmail.com
zweimal:
Received: from relays.pccu.edu.tw (EHLO relays.pccu.edu.tw) [140.137.16.12]
by mx0.gmx.net (mx044) with SMTP; 02 Dec 2009 16:16:28 +0100
Received: from faculty.pccu.edu.tw (staff.pccu.edu.tw [140.137.16.1])
by relays.pccu.edu.tw (Postfix) with ESMTP id 15A121128D6;
Wed, 2 Dec 2009 23:12:33 +0800 (CST)
Received: from relays.pccu.edu.tw (EHLO relays.pccu.edu.tw) [140.137.16.12]
by mx0.gmx.net (mx049) with SMTP; 02 Dec 2009 16:16:28 +0100
Received: from faculty.pccu.edu.tw (staff.pccu.edu.tw [140.137.16.1])
by relays.pccu.edu.tw (Postfix) with ESMTP id 15A121128D6;
Wed, 2 Dec 2009 23:12:33 +0800 (CST)
sgtperryrice49 [at] gmail.com
- kjz
Die Mugus waren wieder fleissig:
Received: from cn.hungfung.com.hk (unknown [222.126.145.249])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A89DE7800C28
for xxxxx; Sat, 5 Dec 2009 04:24:12 +0100 (CET)
Received: from User ([61.137.93.80])
(authenticated user alex [at] cn.hungfung.com.hk)
by cn.hungfung.com.hk (Kerio MailServer 6.6.2 patch 2);
Fri, 4 Dec 2009 23:44:49 +0800
IP: 61.137.93.80 ---> channelf.5460.net
alex [at] cn.hungfung.com.hk
info_imf01 [at] sify.com
diplomaticmission [at] imf.org
Muguphon: +234-1-8207057 ---> Lagos, Nigeria
Über Freenet-Account:
Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 82C7A7855794
for xxxxx; Sat, 5 Dec 2009 17:58:12 +0100 (CET)
Received: from [195.4.92.18] (helo=8.mx.freenet.de)
by mout6.freenet.de with esmtpa (ID daniel.bayer13 [at] 24h.de) (port 25)
(Exim 4.70 #1)
id 1NGxwy-0006IZ-PW; Sat, 05 Dec 2009 17:57:40 +0100
Received: from mail.jewishfamilyservice.org ([66.180.127.10]:4803 helo=User)
by 8.mx.freenet.de with esmtpa (ID daniel.bayer13 [at] 24h.de) (port 587)
(Exim 4.69 #94)
id 1NGxwt-0002LU-Mm; Sat, 05 Dec 2009 17:57:40 +0100
daniel.bayer13 [at] 24h.de
marghayes [at] gala.net
versusbkci [at] dcil.net
donadams2009 [at] rocketmail.com
Muguphon: +267-5353-994 ---> Ramotswa, Botswana
Muguphon: +225-4950-5075 ---> Côte D'Ivoire
die Madrid-Konnektion:
Received: from IMPaqm3.telefonica.net (impaqm3.telefonica.net
[213.4.129.23])
by xxxxx (Postfix) with ESMTP id 2BD5078A2133
for xxxxx; Sat, 5 Dec 2009 20:14:37 +0100 (CET)
Received: from IMPmailhost2.adm.correo ([10.20.102.39])
by IMPaqm3.telefonica.net with bizsmtp
id DN0t1d00K0r0BT63PXDd6w; Sat, 05 Dec 2009 20:13:37 +0100
Received: from User ([87.221.119.149])
by IMPmailhost2.adm.correo with BIZ IMP
id DXDb1d0073DVYPr1iXDcg3; Sat, 05 Dec 2009 20:13:37 +0100
IP: 87.221.119.149 ---> 149.119.221.87.dynamic.jazztel.es
bsantander102 [at] terra.es
mengfeiwu [at] aol.com
phill [at] administrativos.com
Muguphon: +34 634 035 049 ---> Vodafone Espana
Received: from kingsc3.lnk.telstra.net (EHLO kingscliffbeachclub.com.au)
[165.228.239.151]
by mx0.gmx.net (mx001) with SMTP; 05 Dec 2009 20:18:12 +0100
Received: from User ([165.228.2.249]) by kingscliffbeachclub.com.au with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 2 Dec 2009 10:48:55 +1100
IP: 165.228.2.249 ---> mfooil.lnk.telstra.net
bankkkkkinfo11 [at] yahoo.com.hk
bankkkkinfo11 [at] yahoo.com.hk
uchepetero [at] aol.com
Received: from szpital-otwock.med.pl (mail.szpital-otwock.med.pl
[213.77.23.18])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4750178A212A
for xxxxxx; Sun, 6 Dec 2009 06:36:14 +0100 (CET)
Received: from [116.204.102.131] (helo=User)
by szpital-otwock.med.pl with esmtpa (Exim 4.70)
(envelope-from <ste_phentan [at] 126.com>)
id 1NGuNi-00018l-IT; Sat, 05 Dec 2009 14:09:02 +0100
ste_phentan [at] 126.com
die Amsterdam-Konnektion:
Received: from ns1.kandooey.com (EHLO secure.trigohost.com) [66.79.163.50]
by mx0.gmx.net (mx032) with SMTP; 06 Dec 2009 02:11:04 +0100
Received: from [77.62.16.165] (helo=QZ1-PC)
by secure.trigohost.com with esmtpa (Exim 4.69)
(envelope-from <auto [at] mail.com>)
id 1NH5eM-0008Dd-8l; Sat, 05 Dec 2009 17:11:06 -0800
IP: 77.62.16.165 ---> host77-62-16-165.kpn-gprs.nl
national.claim [at] games.com
Received: from iserver.massag.com (EHLO iserver.massag.com)
[217.196.213.200]
by mx0.gmx.net (mx057) with SMTP; 06 Dec 2009 09:08:32 +0100
Received: from User ([218.94.25.206])
by iserver.massag.com (IceWarp 9.4.2) with ASMTP id NUO56216;
Sun, 06 Dec 2009 09:08:16 +0100
IP: 218.94.25.206 ---> CHINANET jiangsu
drtundelemo66 [at] live.com
Muguphon: +234-7042144483 ---> Visafone Communications Ltd, Nigeria
die Amsterdam-Konnektion:
Received: from mail.parmainform.ru (mail.parmainform.ru [217.24.112.9])
by xxxxx (Postfix) with SMTP id 13F5A78A30A4
for xxxxx; Sun, 6 Dec 2009 18:38:44 +0100 (CET)
Received: (qmail 5898 invoked by uid 88); 6 Dec 2009 20:18:23 +0300
Received: from unknown (HELO User) (test [at] parmainform.ru@87.210.90.216)
by localhost with SMTP; 6 Dec 2009 20:18:23 +0300
IP: 87.210.90.216 ---> ip216-90-210-87.adsl2.static.versatel.nl
test [at] parmainform.ru
bernardrusse [at] aim.com
BernardRussel [at] aim.com
Muguphon: +31 634 666 457 ---> T-Mobile Netherlands B.V.
Mugufax: +31-847-320-284 ---> J2 Global (Netherlands) B.V.
Und wieder läßt sich Freenet übertölpeln:
Received: from mout3.freenet.de (mout3.freenet.de [195.4.92.93])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4E2AE78A30BA
for xxxxx; Sun, 6 Dec 2009 19:43:46 +0100 (CET)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout3.freenet.de with esmtpa (ID am-baessler6 [at] bossmail.de) (port 25)
(Exim 4.70 #1)
id 1NHM3m-0002w2-U3; Sun, 06 Dec 2009 19:42:18 +0100
Received: from [82.128.35.186] (port=3326 helo=User)
by 4.mx.freenet.de with esmtpa (ID am-baessler6 [at] bossmail.de) (port 25)
(Exim 4.69 #94)
id 1NHM3g-0003bx-SZ; Sun, 06 Dec 2009 19:42:18 +0100
IP: 82.128.35.186 ---> Multilinks Telecommunications Limited, Nigeria
am-baessler6 [at] bossmail.de
usa.director.2 [at] sify.com
Muguphon: +44 702 4087 661 ---> Magrathea Telecommunications Limited, UK
Langsam erkennt man einen Trend: auch die Mugus kübeln ihren Mist über Bots ab, die einliefernden IPs in Nigeria sind wohl weltweit bis ans Ende aller Tage verbrannt....
- kjz
Die Proxy-Ressourcen sind eben auch nicht unerschöpflich. Da werden die Mugus von den Russen Botnetz-Kapazität mieten müssen.
Die Proxy-Ressourcen sind eben auch nicht unerschöpflich. Da werden die Mugus von den Russen Botnetz-Kapazität mieten müssen.
Nein, nein, zusätzlich.......
Also nicht Mugu-ISP in NG, SN, BJ, GH ----> Mailproxy/gecrackter Mailserver
sondern
Mugu-ISP ---> Bot (oft in CN, als Anonymisierungsproxy) ---> Mailproxy/gecrackter Mailserver
Die Mugus schalten vor den Proxy/Mailserver noch einen Bot zur Verschleierung der eigentlichen IP in Westafrika vor. Bedeutet natürlich zusätzliche Kosten für die Mugus, zeigt aber anscheinend auch, dass denen die Filterung bzw. die Beschwerden 'weh' zu tun scheinen, sonst würden die nicht zusätzlich investieren...
- kjz
Eine nie endende Flut.....
über Spamadoo:
Received: from smtp2e.orange.fr (EHLO smtp2e.orange.fr) [80.12.242.111]
by mx0.gmx.net (mx028) with SMTP; 07 Dec 2009 07:34:16 +0100
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2e28.orange.fr (SMTP Server) with ESMTP id 7E13470010D8;
Mon, 7 Dec 2009 07:33:54 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2e28.orange.fr (SMTP Server) with ESMTP id 6FC0270010DB;
Mon, 7 Dec 2009 07:33:54 +0100 (CET)
Received: from mail.gilbertgaillard.com
(LNeuilly-152-23-26-50.w217-128.abo.wanadoo.fr [217.128.73.50])
by mwinf2e28.orange.fr (SMTP Server) with ESMTP id 0EFC770010D8;
Mon, 7 Dec 2009 07:33:54 +0100 (CET)
X-ME-UUID: 20091207063354614.0EFC770010D8 [at] mwinf2e28.orange.fr
Received: from User ([124.121.219.224]) by mail.gilbertgaillard.com with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 7 Dec 2009 07:33:52 +0100
IP: 124.121.219.224 ---> ppp-124-121-219-224.revip2.asianet.co.th
cenbank.th [at] gmail.com
Muguphon: +66870070587 ---> mobile number, Thailand
über T-Offline:
Received: from mailout03.t-online.de (EHLO mailout03.t-online.de)
[194.25.134.81]
by mx0.gmx.net (mx017) with SMTP; 07 Dec 2009 13:17:37 +0100
Received: from fwd00.aul.t-online.de
by mailout03.t-online.de with smtp
id 1NHcS8-0000aS-00; Mon, 07 Dec 2009 13:12:32 +0100
Received: from User
(T5RpGZZQYtYhBK2WcunLPj9HiqHGJCOnDKcFyP4dBLhRtqB0IJDDjoed70hIc3eZl-aboYS23A@[77.22.3.24])
by fwd00.t-online.de
with esmtp id 1NHcAZ-1RuRRw0; Mon, 7 Dec 2009 12:54:23 +0100
IP: 77.22.3.24 ---> 77-22-3-24-dynip.superkabel.de
firstborn2 [at] centrum.cz
wieder T-Offline, da hat man wohl Probleme mit gecrackten Homepages:
Received: from mailout11.t-online.de (mailout11.t-online.de [194.25.134.85])
by xxxxx (Postfix) with ESMTP id 71B59789745B
for xxxxx; Mon, 7 Dec 2009 15:06:46 +0100 (CET)
Received: from fwd02.aul.t-online.de
by mailout11.t-online.de with smtp
id 1NHeDn-0008RN-02; Mon, 07 Dec 2009 15:05:51 +0100
Received: from User
(XNjvavZrwt0rWaXA5R34PQIxQjen4R195h3wvOmvEeXXmElIThmWBde2k3yW3e7HGvszl8BcLL@[67.210.39.82])
by fwd02.t-online.de
with esmtp id 1NHdpO-0tQB960; Mon, 7 Dec 2009 14:40:38 +0100
IP: 67.210.39.82 ---> 67-210-39-82.ul.warwick.net
mrben_federalreserveboard211 [at] live.com
benssbb4 [at] wvja04i69.homepage.t-online.de
und wieder mal 'Peter Chambers':
Received: from mail.china368.com (unknown [61.135.202.67])
by xxxxx (Postfix) with ESMTP id 8B5C0789742A
for xxxxx; Mon, 7 Dec 2009 19:05:39 +0100 (CET)
Received: from User (unknown [41.217.65.3])
by mail.china368.com (Postfix) with ESMTP id 22EA65045;
Mon, 7 Dec 2009 19:06:51 +0800 (CST)
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
chamberspeters2 [at] live.com
isaac.peters292 [at] googlemail.com
Received: from ntsr.asia-arch.com.tw (59-124-200-121.HINET-IP.hinet.net
[59.124.200.121])
by xxxxx (Postfix) with ESMTP id 6E92A78019CB
for xxxxx; Mon, 7 Dec 2009 21:04:22 +0100 (CET)
Received: from User ([82.128.39.89]) by ntsr.asia-arch.com.tw with
Microsoft SMTPSVC(5.0.2195.6713);
Tue, 8 Dec 2009 01:03:05 +0800
IP: 82.128.39.89 ---> Multilinks Telecommunications Limited, Nigeria
frankalbert777 [at] gmail.com
frankalbert01 [at] live.com
per China-Proxy anonymisiert:
Received: from ns1.alshayaegypt.com (unknown [82.129.248.220])
by xxxxx (Postfix) with ESMTP id 9CF0978810D5
for xxxxx; Tue, 8 Dec 2009 02:49:26 +0100 (CET)
Received: from User ([222.184.100.19])
by ns1.alshayaegypt.com (IceWarp 9.1.0) with ASMTP id PNQ62550;
Tue, 08 Dec 2009 03:34:50 +0200
IP: 222.184.100.19 ---> HUAIAN-FINANCE-ECONOMICS-COLLEGE, CN
mr.paul.jackson01 [at] micro.lt
masif [at] masif.com.my
der Dauer-Mugu via gecracktem SquirrelMail:
Received: from mail.vsvu.sk (mail.vsvu.sk [193.87.57.9])
by xxxxx (Postfix) with ESMTP id 22AB678008E4
for xxxxx; Tue, 8 Dec 2009 06:55:47 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by mail.vsvu.sk (Postfix) with ESMTP id 08ABD12A43BA;
Tue, 8 Dec 2009 07:11:29 +0100 (CET)
X-Virus-Scanned: amavisd-new at afad.sk
Received: from mail.vsvu.sk ([127.0.0.1])
by localhost (bull.afad.sk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id C6je0vQanmzN; Tue, 8 Dec 2009 07:11:28 +0100 (CET)
Received: from webmail.afad.sk (localhost [127.0.0.1])
by mail.vsvu.sk (Postfix) with ESMTP id 6F6AF12A43B3;
Tue, 8 Dec 2009 07:11:28 +0100 (CET)
Received: from 41.220.75.3
(SquirrelMail authenticated user rest)
by webmail.afad.sk with HTTP;
Tue, 8 Dec 2009 07:11:28 +0100 (CET)
IP: 41.220.75.3 ---> MTN Nigeria
ddkwok [at] mail2china.com
ddkwk [at] yahoo.cn
auch Freenet bekommt's nicht in den Griff:
Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AF26078A31A5
for xxxxx; Wed, 9 Dec 2009 14:29:14 +0100 (CET)
Received: from [195.4.92.25] (helo=15.mx.freenet.de)
by mout1.freenet.de with esmtpa (ID sadi3 [at] freakmail.de) (port 25) (Exim
4.70 #1)
id 1NIMaJ-0003T6-AZ; Wed, 09 Dec 2009 14:28:03 +0100
Received: from [82.128.38.251] (port=1907 helo=User)
by 15.mx.freenet.de with esmtpa (ID sadi3 [at] freakmail.de) (port 25) (Exim
4.69 #94)
id 1NIMaI-0000Bh-4I; Wed, 09 Dec 2009 14:28:03 +0100
IP: 82.128.38.251 ---> Multilinks Telecommunications Limited, Nigeria
sadi3 [at] freakmail.de
jaobi79 [at] live.com
cgroot [at] gmail.com
Via 'China-Kracher':
Received: from mail.china368.com (unknown [61.135.202.67])
by xxxxx (Postfix) with ESMTP id 2743678A3181
for xxxxx; Wed, 9 Dec 2009 00:49:40 +0100 (CET)
Received: from User (unknown [116.10.198.42])
by mail.china368.com (Postfix) with ESMTP id 7E727D009;
Wed, 9 Dec 2009 01:49:48 +0800 (CST)
IP: 116.10.198.42 ---> CHINANET Guangxi
iscpeters5 [at] gmail.com
Received: from iserver.massag.com (EHLO iserver.massag.com)
[217.196.213.200]
by mx0.gmx.net (mx017) with SMTP; 09 Dec 2009 06:11:20 +0100
Received: from User ([82.128.32.31])
by iserver.massag.com (IceWarp 9.4.2) with ASMTP id QRU78001;
Wed, 09 Dec 2009 06:11:01 +0100
Received: from iserver.massag.com (EHLO iserver.massag.com)
[217.196.213.200]
by mx0.gmx.net (mx016) with SMTP; 09 Dec 2009 06:11:20 +0100
Received: from User ([82.128.32.31])
by iserver.massag.com (IceWarp 9.4.2) with ASMTP id QRU78001;
Wed, 09 Dec 2009 06:11:01 +0100
IP: 82.128.32.31 ---> Multilinks Telecommunications Limited, Nigeria
fbirobertmuellergov [at] gmail.com
elvistankoatm [at] sify.com
- kjz
Die nächste Mugu-Runde:
Received: from jingrui.hk (unknown [61.143.101.72])
by xxxxx (Postfix) with ESMTP id CD0DF78019C7
for xxxxx; Thu, 10 Dec 2009 08:57:13 +0100 (CET)
Received: from User [41.138.180.205] by jingrui.hk with ESMTP
(SMTPD-8.22) id A12102D4; Thu, 10 Dec 2009 09:38:41 +0800
IP: 41.138.180.205 ---> Visafone Communications Limited, Nigeria
smith_mrbarry [at] yahoo.com
smith_mrbarry [at] yahoo.com.hk
Anscheinend in PL durch Spamassassin gejagt, als positiv erkannt und trotzdem weitergeleitet. Hirnloser geht's nimmer...
Content analysis details: (9.4 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
-1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
0.0 MISSING_MID Missing Message-Id: header
2.1 SUBJ_ALL_CAPS Subject is all capitals
1.3 MISSING_HEADERS Missing To: header
2.0 BAYES_80 BODY: Bayesian spam probability is 80 to 95%
[score: 0.8667]
1.2 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
1.4 ADVANCE_FEE_3 Appears to be advance fee fraud (Nigerian 419)
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Received: from poczta.otvk.pl (unknown [195.68.233.235])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5EF6278A1905
for xxxxx; Thu, 10 Dec 2009 22:14:42 +0100 (CET)
Received: by poczta.otvk.pl (Postfix, from userid 58)
id 203466F74; Thu, 10 Dec 2009 14:13:38 +0100 (CET)
Received: from localhost by poczta.otvk.pl
with SpamAssassin (version 3.2.5);
Thu, 10 Dec 2009 14:13:38 +0100
mshelia [at] upmail.us
davidshelia [at] live.co.uk
ahmed_kabo231 [at] upmail.us
ahmed_kabo231 [at] yahoo.co.uk
Muguphon: +234-7025685280 ---> Visafone Communications Ltd., Nigeria
und wieder:
Content analysis details: (7.4 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
-1.8 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.0 MISSING_MID Missing Message-Id: header
2.1 SUBJ_ALL_CAPS Subject is all capitals
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
-0.0 AWL AWL: From: address is in the auto white-list
Received: from poczta.otvk.pl (unknown [195.68.233.235])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A52D378004C5
for xxxxx; Fri, 11 Dec 2009 06:53:42 +0100 (CET)
Received: by poczta.otvk.pl (Postfix, from userid 58)
id 3D4A781B7; Thu, 10 Dec 2009 15:37:50 +0100 (CET)
Received: from localhost by poczta.otvk.pl
with SpamAssassin (version 3.2.5);
Thu, 10 Dec 2009 15:37:50 +0100
Received: from poczta.otvk.pl (unknown [195.68.233.235])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D3D5B78004C5
for xxxxx; Fri, 11 Dec 2009 01:01:22 +0100 (CET)
Received: by poczta.otvk.pl (Postfix, from userid 58)
id 4A4187722; Thu, 10 Dec 2009 17:09:29 +0100 (CET)
Received: from localhost by poczta.otvk.pl
with SpamAssassin (version 3.2.5);
Thu, 10 Dec 2009 17:09:29 +0100
mrsheleenhowell [at] live.com
mrsheleenhowell [at] sify.com
Received: from srv-aol-02.byalnet.com.br (unknown [200.202.201.4])
by xxxxx (Postfix) with SMTP id B9FC67811256
for xxxxx; Fri, 11 Dec 2009 06:10:03 +0100 (CET)
Received: (qmail 24222 invoked by uid 0); 10 Dec 2009 21:22:59 -0200
Received: from 59.154.25.30 by srv-aol-02.byalnet.com.br (envelope-from
<mrscedric [at] gala.net>, uid 82) with qmail-scanner-1.25
(uvscan: v4.4.00/v4999. spamassassin: 3.0.4.
Clear:RC:1(59.154.25.30):.
Processed in 17.491534 secs); 10 Dec 2009 23:22:59 -0000
Received: from unknown (HELO User) (adm [at] 59.154.25.30)
by arv-aol-02.byalnet.com.br with SMTP; 10 Dec 2009 21:22:39 -0200
IP: 59.154.25.30 ---> OPTUS Customer Network, AU
mrscedric [at] gala.net
mrsjusan [at] gala.net
versusbkci [at] dcil.net
dip.donadams [at] gmail.com
Muguphon: +22549505075 ---> Côte D'Ivoire
Muguphon: +2675353994 ---> Botswana
Received: from smtpgate2.pacific.net.sg (smtpgate2.pacific.net.sg
[203.120.90.32])
by xxxxx (Postfix) with SMTP id AB0C27811250
for xxxxx; Fri, 11 Dec 2009 09:11:35 +0100 (CET)
Received: (qmail 17821 invoked from network); 11 Dec 2009 08:11:31 -0000
Received: from c-76-105-54-210.hsd1.ca.comcast.net (HELO User)
(debandmike [at] pacific.net.sg@76.105.54.210)
by smtpgate2.pacific.net.sg with ESMTPA; 11 Dec 2009 08:11:29 -0000
noreenoung [at] yahoo.co.jp
debandmike [at] pacific.net.sg
Received: from mail.sulanet.net (EHLO mail.sulanet.hn) [190.6.192.12]
by mx0.gmx.net (mx022) with SMTP; 11 Dec 2009 20:13:22 +0100
Received: from (unknown [190.6.192.12]) by webshield.sulanet.net with smtp
id 2984_8c8f79c8_e653_11de_96c8_00188b3345cd;
Fri, 11 Dec 2009 06:56:40 -0600
Received: from sulanet.hn ([127.0.0.1])
by mail.sulanet.hn (Servidor ESMTP - SULANET)
with ESMTP id <0KUI00MZZ4D05E40 [at] mail.sulanet.hn>; Fri,
11 Dec 2009 12:51:00 -0600 (CST)
Received: from [190.6.192.12] by mail.sulanet.hn (mshttpd); Fri,
11 Dec 2009 19:51:00 +0100
clinicasmedicas [at] sulanet.net
floanin [at] gmail.com
Received: from Mail.unionradio.com.ve (mail.unionradio.com.ve
[190.60.40.17])
by xxxxx (Postfix) with ESMTP id 21FE17800B16
for xxxxx; Sat, 12 Dec 2009 08:54:25 +0100 (CET)
Received: from User [41.217.2.8] by Mail.unionradio.com.ve with ESMTP
(SMTPD-10.02) id A0960BA8; Fri, 11 Dec 2009 12:55:42 -0430
IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.
agentjohnsimmons [at] gmail.com
scam_notice_2 [at] sify.com
Muguphon: +234 803 514 8270 ---> MTN Nigeria Communications Ltd.
Horde gecrackt:
Received: from mx1.sunstar.com.ph (mail.sunstar.com.ph [203.177.140.155])
by xxxxx (Postfix) with ESMTP id A613278A3193
for xxxxx; Sat, 12 Dec 2009 08:28:11 +0100 (CET)
Received: by mx1.sunstar.com.ph (Postfix, from userid 500)
id E8C4D4D0A6B; Sat, 12 Dec 2009 14:00:53 +0800 (PHT)
Received: from mx1.sunstar.com.ph (localhost.sunstar.com.ph [127.0.0.1])
by mx1.sunstar.com.ph (Postfix) with ESMTP id CA8604D09D8;
Sat, 12 Dec 2009 13:58:29 +0800 (PHT)
Received: from 41.138.180.208 ([41.138.180.208]) by mail.sunstar.com.ph
(Horde MIME library) with HTTP for <recruitment [at] mail.sunstar.com.ph>; Sat,
12 Dec 2009 13:58:28 +0800
IP: 41.138.180.208 ---> Visafone Communications Limited, Nigeria
recruitment [at] mail.sunstar.com.ph
unitedkingdombanana [at] gmail.com
mrriggscole [at] yahoo.com.hk
Muguphon: +44 704 570 4952 ---> Open Telecom International Ltd., UK
Received: from lucky-int.com (114.223.76.219.static.netvigator.com
[219.76.223.114])
by xxxxx (Postfix) with SMTP id 0032378004C5
for xxxxx; Sun, 13 Dec 2009 09:51:15 +0100 (CET)
Received: (qmail 30070 invoked from network); 12 Dec 2009 13:26:51 -0000
Received: from unknown (HELO User) (test [at] 82.128.36.213)
by 0 with SMTP; 12 Dec 2009 13:26:51 -0000
IP: 82.128.36.213 ---> Multilinks Telecommunications Limited, Nigeria
frankalbertoffice [at] gmail.com
Received: from mail.insivumeh.gob.gt (mail.insivumeh.gob.gt [200.49.167.82])
by xxxxx (Postfix) with ESMTP id F360878A1905
for xxxxx; Sun, 13 Dec 2009 03:19:40 +0100 (CET)
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; charset=Windows-1251
Received: from User ([82.128.68.239])
by mail.insivumeh.gob.gt (Sun Java(tm) System Messaging Server 6.3-0.15
(built
Feb 9 2007)) with ESMTPA id <0KU600D043YL6E20 [at] mail.insivumeh.gob.gt> for
xxxxx; Sat, 05 Dec 2009 01:11:46 -0600 (CST)
IP: 82.128.68.239 ---> Multilinks Telecommunications Limited, Nigeria
jdinfooffer6 [at] gmail.com
james.dunn [at] post.ro
Received: from CENTRALSEGSRV.centralseg.local
(195-23-29-78.static.net.novis.pt [195.23.29.78])
by xxxxx (Postfix) with ESMTP id 7B77F78A3167
for xxxxx; Sun, 13 Dec 2009 06:41:25 +0100 (CET)
Received: from User ([67.224.95.178]) by CENTRALSEGSRV.centralseg.local
with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 13 Dec 2009 05:37:40 +0000
jacksonbill4054556 [at] yahoo.co.jp
jacksonbill4050004556 [at] yahoo.co.jp
Muguphon: +44-702-405-4556 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44-702-404-4756 ---> Magrathea Telecommunications Limited, UK
die Amsterdam-Konnektion:
Received: from cpsmtpb-ews04.kpnxchange.com
(cpsmtpb-ews04.kpnxchange.com [213.75.39.7])
by xxxxx (Postfix) with ESMTP id 45C6F78019C2
for xxxxx; Sun, 13 Dec 2009 15:04:45 +0100 (CET)
Received: from cpbrm-ews20.kpnxchange.com ([10.94.84.151]) by
cpsmtpb-ews04.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 13 Dec 2009 15:04:45 +0100
Received: from CPSMTPM-EML03.kpnxchange.com ([213.75.39.73]) by
cpbrm-ews20.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 13 Dec 2009 15:04:45 +0100
Received: from localhost ([10.94.77.199]) by
CPSMTPM-EML03.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Sun, 13 Dec 2009 15:04:42 +0100
s.de.hoop [at] hetnet.nl
jlawsontg [at] aim.com
jlawson [at] live.nl
- kjz
nie enden wollender Nachschub:
Received: from mail.ttba.twbbs.org (60-251-66-150.HINET-IP.hinet.net
[60.251.66.150])
by xxxxx (Postfix) with ESMTP id 7F026789AAAC
for xxxxx; Wed, 2 Dec 2009 23:29:40 +0100 (CET)
Received: from localhost (mail [127.0.0.1])
by mail.ttba.twbbs.org (Postfix) with ESMTP id EFF165FF4C7;
Tue, 1 Dec 2009 21:19:57 +0800 (CST)
Received: from mail.ttba.twbbs.org ([127.0.0.1])
by localhost (mail.ttba.twbbs.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 26029-02; Tue, 1 Dec 2009 21:19:54 +0800 (CST)
Received: from User (unknown [82.128.69.196])
by mail.ttba.twbbs.org (Postfix) with ESMTP id B5B8C2FD269;
Sat, 7 Nov 2009 16:14:59 +0800 (CST)
IP: 82.128.69.196 ---> Multilinks Telecommunications Limited, Nigeria
despatchhome [at] hotmail.com
inoceanic [at] hotmail.com
Muguphon: +234-7025222071 ---> Visafone Communications Ltd., Nigeria
auch bei Fidel stehen die Hosenlätze (gecracktes SquirrelMail) offen:
Received: from mail.ssp.co.cu (unknown [200.55.186.59])
by xxxxx (Postfix) with ESMTP id 1983D78004C5
for xxxxx; Thu, 3 Dec 2009 04:01:58 +0100 (CET)
Received: from 200.55.186.59 (localhost.localdomain [127.0.0.1])
by mail.ssp.co.cu (Postfix) with ESMTP id 3FBD819B8C2;
Wed, 2 Dec 2009 21:39:48 -0500 (CST)
Received: from 82.128.21.184
(SquirrelMail authenticated user antonio)
by 200.55.186.59 with HTTP;
Wed, 2 Dec 2009 21:39:48 -0500 (CST)
IP: 82.128.21.184 ---> Multilinks Telecommunications Limited, Nigeria
mark_aku2009 [at] yahoo.com
john_simpson [at] in.com
antonio [at] ssp.co.cu
Received: from kyx365003.kumyoung.com (unknown [218.38.77.12])
by xxxxx (Postfix) with ESMTP id 12E8878A23E4
for xxxxx; Thu, 3 Dec 2009 15:22:06 +0100 (CET)
Received: from User ([81.91.238.59]) by kyx365003.kumyoung.com with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 3 Dec 2009 21:52:11 +0900
IP: 81.91.238.59 ---> Glo Mobile BENIN
dhldirectoffice [at] sify.com
davidferguson [at] w.cn
Muguphon: +229 98823733 ---> Benin
Received: from cmserver.careermovebangalore.com (unknown [122.166.47.11])
by xxxxx (Postfix) with ESMTP id 087A178A3175
for xxxxx; Fri, 4 Dec 2009 09:28:47 +0100 (CET)
Received: from merlin ([41.124.134.152]) by
cmserver.careermovebangalore.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 4 Dec 2009 12:48:44 +0530
IP: 41.124.134.152 ---> MTN Network Solutions, ZA
agentnelson2009 [at] gmail.com
agenttomnelson [at] gmail.com
- kjz
Kein Gewinn, aber immer wieder Spass mit Mugus:
die Amsterdam-Konnektion:
Received: from ns1.kandooey.com (EHLO secure.trigohost.com) [66.79.163.50]
by mx0.gmx.net (mx014) with SMTP; 14 Dec 2009 05:28:53 +0100
Received: from [77.62.214.162] (helo=QZ1-PC)
by secure.trigohost.com with esmtpa (Exim 4.69)
(envelope-from <auto [at] games.com>)
id 1NK2Y8-0004af-Vf; Sun, 13 Dec 2009 20:28:49 -0800
IP: 77.62.214.162 ---> host77-62-214-162.kpn-gprs.nl
national.claim [at] games.com
die Madrid-Konnektion:
Received: from 102.red.172.225.212.user.ptvtelecom.com (EHLO
mx4.hotmail.com) [212.225.172.102]
by mx0.gmx.net (mx025) with SMTP; 14 Dec 2009 14:41:07 +0100
lottoespp [at] aol.com
axasecuriity [at] aol.com
Muguphon: +34-671 972 414 ---> Vodafone Espana
Mugufax: +1-678 805 4915 ---> Xo Georgia, Inc.
gecrackter Uni-Account:
Received: from transport.villanova.edu (vuexcas2.vuad.villanova.edu
[153.104.6.146])
(using TLSv1 with cipher RC4-MD5 (128/128 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 012C97894B60
for xxxxx; Tue, 15 Dec 2009 12:58:42 +0100 (CET)
Received: from User (204.188.198.8) by vuexcas2.vuad.villanova.edu
(153.104.6.6) with Microsoft SMTP Server id 8.1.375.2; Tue, 15 Dec 2009
04:59:21 -0500
michrow [at] villanova.edu
clarkwolfe1 [at] sify.com
Received: from mail.magocs.hu (EHLO mail.magocs.hu) [82.150.36.183]
by mx0.gmx.net (mx079) with SMTP; 15 Dec 2009 22:05:23 +0100
Received: from localhost (unknown [127.0.0.1])
by mail.magocs.hu (Postfix) with ESMTP id A49151CAE33;
Tue, 15 Dec 2009 20:58:44 +0000 (UTC)
X-Virus-Scanned: amavisd-new at magocs.hu
Received: from mail.magocs.hu ([127.0.0.1])
by localhost (mail.magocs.hu [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id FSw7qEk+HBgR; Tue, 15 Dec 2009 21:58:44 +0100 (CET)
Received: from User (unknown [202.52.235.238])
by mail.magocs.hu (Postfix) with ESMTPA id DAAA41CDCD0;
Tue, 15 Dec 2009 21:58:11 +0100 (CET)
Received: from mail.magocs.hu (EHLO mail.magocs.hu) [82.150.36.183]
by mx0.gmx.net (mx050) with SMTP; 17 Dec 2009 04:41:18 +0100
Received: from localhost (unknown [127.0.0.1])
by mail.magocs.hu (Postfix) with ESMTP id 190551CE5FA;
Thu, 17 Dec 2009 02:09:13 +0000 (UTC)
X-Virus-Scanned: amavisd-new at magocs.hu
Received: from mail.magocs.hu ([127.0.0.1])
by localhost (mail.magocs.hu [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id bM5HEyNpOC82; Thu, 17 Dec 2009 03:09:12 +0100 (CET)
Received: from User (unknown [202.52.235.238])
by mail.magocs.hu (Postfix) with ESMTPA id 50A7D1CE60B;
Thu, 17 Dec 2009 03:08:24 +0100 (CET)
IP: 202.52.235.238 ---> Mercantile Communications Pvt. Ltd, NP
ericjohn1155 [at] live.com
Muguphon: +44 7523 657426 ---> O2 (UK) Limited
Muguphon: +44 7024 031538 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 7024 044576 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 7024 087647 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44 8447 743637 ---> Magrathea Telecommunications Limited, UK
auch Freenet bekommt es zum wiederholten Male nicht auf die Reihe:
Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9A310789B98F
for xxxxx; Tue, 15 Dec 2009 22:41:40 +0100 (CET)
Received: from [195.4.92.23] (helo=13.mx.freenet.de)
by mout1.freenet.de with esmtpa (ID gggggggggg1 [at] chefmail.de) (port 25)
(Exim 4.70 #1)
id 1NKf8H-0004GZ-AH; Tue, 15 Dec 2009 22:40:37 +0100
Received: from [82.128.33.194] (port=3585 helo=User)
by 13.mx.freenet.de with esmtpa (ID gggggggggg1 [at] chefmail.de) (port 25)
(Exim 4.69 #94)
id 1NKf8F-0001nA-5Z; Tue, 15 Dec 2009 22:40:37 +0100
IP: 82.128.33.194 ---> Multilinks, Nigeria
gggggggggg1 [at] chefmail.de
monitoringunit1 [at] megamail.pt
- kjz
Etwas Nachschlag hab' ich noch:
Received: from atlanticsportswear.com (mail.atlanticsportswear.com
[24.97.162.11])
by xxxxx (Postfix) with ESMTP id 3BF4578A33BE
for xxxxx; Mon, 14 Dec 2009 17:45:09 +0100 (CET)
Received: from User ([82.128.71.139]) by atlanticsportswear.com with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 14 Dec 2009 10:46:24 -0500
IP: 82.128.71.139 ---> Multilinks Telecommunications Limited, Nigeria
monckkeye [at] yahoo.co.jp
monncer [at] yahoo.co.jp
die Amsterdam-Konnektion:
Received: from gw.benet.ru (EHLO smtp.benet.ru) [83.167.6.1]
by mx0.gmx.net (mx068) with SMTP; 16 Dec 2009 14:35:15 +0100
Received: by smtp.benet.ru (Postfix, from userid 426)
id A8BAF507A89; Tue, 15 Dec 2009 09:14:06 +0500 (YEKT)
Received: from User (dhcp-077-250-043-054.chello.nl [77.250.43.54])
by smtp.benet.ru (Postfix) with ESMTP id B2E2F50A7AE;
Tue, 15 Dec 2009 09:13:41 +0500 (YEKT)
holmeclaim [at] aol.nl
Muguphon: 00 31 64 519 7491 ---> Telfort B.V., NL/Tiscali
Mugufax: 00 31 84 732 3701 ---> J2 Global (Netherlands) B.V./Jump
Bisher hielten sich die Russkis an die goldene Regel, dass der Vogel nie direkt neben das eigene Nest sch...sst; aber jetzt scheinen die auch die letzten Skrupel fallenzulassen und verkaufen den Mugus offene Proxies im Heimatland.
- kjz
So, da wären wieder:
Received: from mail.lol.ba (mail.lol.ba [217.75.192.5])
by xxxxx (Postfix) with ESMTP id 2EED178A2E63
for xxxxx; Wed, 16 Dec 2009 23:21:51 +0100 (CET)
Received: from User ([82.128.20.210] RDNS failed) by mail.lol.ba with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 16 Dec 2009 23:08:40 +0100
IP: 82.128.20.210 ---> ml82.128.20.210.multilinks.com, Nigeria
wazirfarida [at] w.cn
Muguphon: +2348059506675 ---> Globacom Ltd., Nigeria
Received: from smtp.knology.net (smtp.knology.net [24.214.63.101])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0B9BD789745B
for xxxxx; Thu, 17 Dec 2009 00:16:36 +0100 (CET)
Received: (qmail 11560 invoked by uid 0); 16 Dec 2009 23:14:05 -0000
Received: from unknown (HELO User) (ssisupply [at] knology.net@207.98.153.83)
by smtp2.knology.net with ESMTPA; 16 Dec 2009 23:14:07 -0000
IP: 207.98.153.83 ---> dynamic-207-98-153-83.knology.net
ssisupply [at] knology.net
atmcenter.de [at] mail.com
atmcenter.dept111 [at] gmail.com
Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria
Received: from bristol.britain.nsu.ru (HELO hermes.nsu.ru) [212.192.164.28]
by mx0.gmx.net (mx039) with SMTP; 17 Dec 2009 03:33:20 +0100
Received: from [82.128.33.57] (account bbedward [at] gorodok.net HELO User)
by hermes.nsu.ru (CommuniGate Pro SMTP 4.2)
with ESMTP id 89191721; Tue, 15 Dec 2009 23:07:10 +0600
IP: 82.128.33.57 ---> Multilinks Telecommunications Limited, Nigeria
bbedward [at] gorodok.net
mrtundelemo690 [at] gmail.com
auch den Server aus Nepal hatten wir schon:
Received: from mail.magocs.hu (EHLO mail.magocs.hu) [82.150.36.183]
by mx0.gmx.net (mx050) with SMTP; 17 Dec 2009 04:41:18 +0100
Received: from localhost (unknown [127.0.0.1])
by mail.magocs.hu (Postfix) with ESMTP id 190551CE5FA;
Thu, 17 Dec 2009 02:09:13 +0000 (UTC)
X-Virus-Scanned: amavisd-new at magocs.hu
Received: from mail.magocs.hu ([127.0.0.1])
by localhost (mail.magocs.hu [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id bM5HEyNpOC82; Thu, 17 Dec 2009 03:09:12 +0100 (CET)
Received: from User (unknown [202.52.235.238])
by mail.magocs.hu (Postfix) with ESMTPA id 50A7D1CE60B;
Thu, 17 Dec 2009 03:08:24 +0100 (CET)
IP: 202.52.235.238 ---> Mercantile Communications Pvt. Ltd, NP
eric.john1155 [at] live.com
Muguphon: +447024044576 ---> Magrathea Telecommunications Limited, UK
Muguphon: +447024087647 ---> Magrathea Telecommunications Limited, UK
Muguphon: +447523657426 ---> O2 (UK) Limited
Muguphon: +447024031538 ---> Magrathea Telecommunications Limited, UK
Mugufax: +448447743637 ---> Magrathea Telecommunications Limited, UK
gecracktes Horde:
Received: from mail.cosett.com.bo (unknown [200.13.152.5])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D6C567894117
for xxxxx; Thu, 17 Dec 2009 09:33:53 +0100 (CET)
Received: from mail.cosett.com.bo ([200.13.152.5] helo=localhost)
by mail.cosett.com.bo with esmtp (Exim 4.63)
(envelope-from <anekweuba236 [at] yahoo.com>)
id 1NL8bu-0006xT-Pn; Thu, 17 Dec 2009 01:09:10 -0400
Received: from 81.91.228.78 ([81.91.228.78]) by mail.cosett.com.bo (Horde
Framework) with HTTP; Thu, 17 Dec 2009 01:09:08 -0400
IP: 81.91.228.78 ---> Benin Télécoms S.A.
anekweuba236 [at] yahoo.com
agent_eric_brown41 [at] yahoo.fr
Received: from mail.silverstonetek.com.tw (mail.silverstonetek.com.tw
[59.124.100.55])
by xxxxx (Postfix) with ESMTP id 8A8C678A3501
for xxxxx; Thu, 17 Dec 2009 13:29:48 +0100 (CET)
Received: from silverstonetek.com.tw (mail.silverstonetek.com.tw
[127.0.0.1])
by mail.silverstonetek.com.tw (Postfix) with ESMTP id 20E01C72B6;
Thu, 17 Dec 2009 17:40:18 +0800 (CST)
maryyoung [at] sbcglobal.net
sandrawilliams31 [at] gmail.com
der Dauer-Mugu:
Received: from web84416.mail.ac2.yahoo.com (web84416.mail.ac2.yahoo.com
[68.180.158.112])
by xxxxx (Postfix) with SMTP id E7DE1789B012
for xxxxx; Thu, 17 Dec 2009 15:02:22 +0100 (CET)
Received: (qmail 72236 invoked by uid 60001); 17 Dec 2009 14:02:22 -0000
Message-ID: <8358.71952.qm [at] web84416.mail.ac2.yahoo.com>
X-YMail-OSG: kRK58s0VM1kpE6LkVZ3EVl60CjfCCs9YkmCb7Ncb_k..O0d44OJ.rLLa
Received: from [41.220.75.3] by web84416.mail.ac2.yahoo.com via HTTP;
Thu, 17 Dec 2009 06:02:21 PST
IP: 41.220.75.3 ---> mtnngprs.com, Nigeria
hazem.zaidan [at] live.com
Received: from toroondcbauth02-srv.bellnexxia.net
(toroondcbauth02.bellnexxia.net [207.236.237.44])
by xxxxx (Postfix) with ESMTP id B202C789B012
for xxxxx; Fri, 18 Dec 2009 09:06:09 +0100 (CET)
Received: from User ([121.14.153.239])
by toroondcbauth02-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id
<20091218080428.GOKQ12061.toroondcbauth02-srv.bellnexxia.net [at] User>;
Fri, 18 Dec 2009 03:04:28 -0500
IP: 121.14.153.239 ---> Guangdong Network of ChinaTelecom
kingsideleasing [at] bellnet.ca
roysmith247 [at] gmail.com
Wie man sieht, auch Bellnexxia bekommt den Missbrauch nicht in den Griff:
Received: from toroondcbauth01-srv.bellnexxia.net
(toroondcbauth01.bellnexxia.net [207.236.237.43])
by xxxxx (Postfix) with ESMTP id D9BB178A32DC
for xxxxx; Mon, 21 Dec 2009 12:09:26 +0100 (CET)
Received: from User ([98.219.183.253])
by toroondcbauth01-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id
<20091221110746.EFQT18636.toroondcbauth01-srv.bellnexxia.net [at] User>;
Mon, 21 Dec 2009 06:07:46 -0500
IP: 98.219.183.253 ---> c-98-219-183-253.hsd1.pa.comcast.net
rogermillette [at] bellnet.ca
elvispaul.email [at] gmail.com
gecrackter Uni-Account:
Received: from aspirin.dii.utk.edu (aspirin.dii.utk.edu [160.36.0.81])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D0B187811247
for xxxxx; Thu, 17 Dec 2009 23:10:54 +0100 (CET)
Received: from User (savpn4-32.ns.utk.edu [10.65.4.32])
by aspirin.dii.utk.edu (8.13.6/8.13.4) with SMTP id nBHM9tXQ016980;
Thu, 17 Dec 2009 17:09:55 -0500
paulwilliams [at] atmcardcenter.com
atmcenter.dept111 [at] gmail.com
Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria
der Mugu bedient sich nochmal:
Received: from jaguar.mail.utk.edu (jaguar.mail.utk.edu [160.36.0.84])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9602178A318F
for xxxxx; Fri, 18 Dec 2009 02:16:45 +0100 (CET)
Received: from User (savpn4-32.ns.utk.edu [10.65.4.32])
by jaguar.mail.utk.edu (8.13.6/8.13.4) with SMTP id nBI1Fd67030243;
Thu, 17 Dec 2009 20:15:39 -0500
bensonedward08 [at] gala.net
Muguphon: +234-808-250-7237 ---> Celtel Nigeria Limited/Zain
die Madrid-Konnektion:
Received: from llsd478-a03.servidoresdns.net
(llsd478-a03.servidoresdns.net [82.223.190.30])
by xxxxx (Postfix) with ESMTP id 7C02C789B012
for xxxxx; Fri, 18 Dec 2009 02:09:59 +0100 (CET)
Received: from pcAdministrador (108.168.217.87.dynamic.jazztel.es
[87.217.168.108])
by smtp-03.servidoresdns.net (Postfix) with ESMTP id A742262639F
for xxxxx; Fri, 18 Dec 2009 02:09:58 +0100 (CET)
award2009 [at] millinet.es
axasegurosagencyoffice [at] luckymail.com
Muguphon: +34-693-362-062 ---> France Telecom Espana/Orange
Mugufax: +34-911-820-312 ---> Jazz Telecom, S.a.u.
Und natürlich ist auch Freenet wieder dabei. Hat Freenet wirklich so viele Kunden in NG, dass man die IPs auf dem Mailserver nicht schmerzlos blocken kann?
Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id CEA3378A33C4
for xxxxx; Fri, 18 Dec 2009 13:29:47 +0100 (CET)
Received: from [195.4.92.11] (helo=1.mx.freenet.de)
by mout2.freenet.de with esmtpa (ID bcxbcxbcxqqqq [at] bossmail.de) (port
25) (Exim 4.70 #1)
id 1NLbxf-0003uJ-FK; Fri, 18 Dec 2009 13:29:35 +0100
Received: from [82.128.71.123] (port=53675 helo=User)
by 1.mx.freenet.de with esmtpa (ID bcxbcxbcxqqqq [at] bossmail.de) (port 25)
(Exim 4.69 #94)
id 1NLbxa-0008Um-UK; Fri, 18 Dec 2009 13:29:35 +0100
IP: 82.128.71.123 ---> Multilinks Telecommunications Limited, Nigeria
bcxbcxbcxqqqq [at] bossmail.de
fbi1 [at] pisem.net
- kjz
Aber nicht genug, sondern noch:
ad 1 vom taiwanesischen Frickelserver:
Received: from dataexpress.com.tw (60-250-42-53.HINET-IP.hinet.net
[60.250.42.53])
by xxxxx (Postfix) with ESMTP id 792FD789B012
for xxxxx; Fri, 18 Dec 2009 23:03:36 +0100 (CET)
Received: from User (unknown [41.211.232.162])
by dataexpress.com.tw (Postfix) with ESMTP id 620D3804630;
Fri, 18 Dec 2009 21:19:18 +0800 (CST)
IP: 41.211.232.162 ---> oregun-ck.oregunck.com/Direct-on-PC Limited, Nigeria
jeffrice [at] hotmail.com
jeffrice0 [at] sify.com
Mugufax: +44 871 263 6731 ---> Call Sciences Limited, UK/YAC
Received: from aphhk.com (unknown [211.148.137.201])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 032CC78A32C8
for xxxxx; Sat, 19 Dec 2009 00:50:25 +0100 (CET)
Received: (qmail 3324 invoked by uid 89); 18 Dec 2009 16:18:56 -0000
Received: by simscan 1.2.0 ppid: 2895, pid: 3317, t: 2.5474s
scanners: attach: 1.2.0
Received: from unknown (HELO User) (backup [at] 41.211.227.249)
by 0 with ESMTPA; 18 Dec 2009 16:18:54 -0000
IP: 41.211.227.249 ---> Direct-on-PC Limited, Nigeria
backup [at] 41.211.227.249
kimon.sflyc12 [at] gmail.com
kimon.sflyc01 [at] gmail.com
gecrackter Uni-Account:
Received: from smtp.stanford.edu (smtp4.Stanford.EDU [171.67.219.84])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 71F6078A30BC
for xxxxx; Sat, 19 Dec 2009 20:17:47 +0100 (CET)
Received: from smtp.stanford.edu (localhost.localdomain [127.0.0.1])
by localhost (Postfix) with SMTP id 4C500C6A7;
Sat, 19 Dec 2009 11:17:45 -0800 (PST)
Received: from zm04.stanford.edu (zm04.Stanford.EDU [171.67.219.154])
by smtp.stanford.edu (Postfix) with ESMTP id A92FEC6A6;
Sat, 19 Dec 2009 11:17:32 -0800 (PST)
X-Originating-IP: [75.109.190.56] ---> c75-109-190-56.mtplcmta01.mnpltx.tl.dh.suddenlink.net
chad116 [at] stanford.edu
raymondcheng [at] sify.com
Received: from mx4.hotmail.com (exchng-72.wn45.reliablehosting.com
[216.131.102.72])
by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
id 0LhMEi-1NqzEB0via-00mwjH for xxxxx; Sat, 19 Dec 2009
22:03:32 +0100
bobby.marklottclaims [at] live.co.uk
Muguphon: +44-774-899-2079 ---> Vodafone Ltd., UK
Mugufax: +44-207-526-2226 ---> Cable & Wireless (Energis), UK
Received: from mail.passagemaker.com (mail.passagemaker.com [173.8.2.34])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 51C8A7800B16
for xxxxx; Sun, 20 Dec 2009 05:20:57 +0100 (CET)
Received: from User ([41.217.65.4])
(authenticated user christine [at] passagemaker.com)
by mail.passagemaker.com (Kerio MailServer 6.7.2);
Sat, 19 Dec 2009 16:52:39 -0500
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
pete34obii1 [at] sify.com
atmdeptoficce [at] yahoo.com.hk
christine [at] passagemaker.com
Received: from asmtpout024.mac.com (asmtpout024.mac.com [17.148.16.99])
by xxxxx (Postfix) with ESMTP id 6851678940C8
for xxxxx; Sun, 20 Dec 2009 07:04:26 +0100 (CET)
MIME-version: 1.0
Content-type: multipart/mixed;
boundary="Boundary_(ID_/6HSZ2+f+Frs3kax8aKr9g)"
Received: from spool003.mac.com ([10.150.69.53])
by asmtp024.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01
(built Dec
16 2008; 32bit)) with ESMTP id <0KUX00ERBSUPIK00 [at] asmtp024.mac.com> for
xxxxx; Sat, 19 Dec 2009 22:04:13 -0800 (PST)
Received: from webmail020 ([10.13.128.20])
by spool003.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01
(built Dec
16 2008; 32bit)) with ESMTP id <0KUX002T9SUMOY60 [at] spool003.mac.com>; Sat,
19 Dec 2009 22:04:01 -0800 (PST)
hmakabaaa40 [at] me.com
Wie war das noch mal mit Bellnexxia?
Received: from toroondcbque03-srv.bellnexxia.net
(toroondcbque03.bellnexxia.net [207.236.237.49])
by xxxxx (Postfix) with ESMTP id 95EEA7862866
for xxxxx; Sun, 20 Dec 2009 16:59:08 +0100 (CET)
Received: from User ([85.170.159.150])
by toroondcbauth02-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id
<20091218060132.FROU12061.toroondcbauth02-srv.bellnexxia.net [at] User>;
Fri, 18 Dec 2009 01:01:32 -0500
IP: 85.170.159.150 ---> 5-170-159-150.rev.numericable.fr
kingsideleasing [at] bellnet.ca
ben247a [at] gmail.com
Received: from mail.lloyddaniel.com (ftp.lloyddaniel.com [205.136.92.109])
by xxxxx (Postfix) with ESMTP id 7401878A2C5A
for xxxxx; Sun, 20 Dec 2009 20:06:20 +0100 (CET)
Received: from User [82.128.34.30] by mail.lloyddaniel.com with ESMTP
(SMTPD-9.21) id AD7D0298; Sun, 20 Dec 2009 04:25:17 -0500
IP: 82.128.34.30 ---> Multilinks Telecommunications Limited, Nigeria
ga.las2 [at] rediffmail.com
Muguphon: +447045781942 ---> Open Telecom International Ltd., UK
Received: from PRESTIGETR.prestigetransilvania.ro (unknown [83.103.137.118])
by xxxxx (Postfix) with ESMTP id 89D3078A1905
for xxxxx; Sun, 20 Dec 2009 22:01:52 +0100 (CET)
Received: from User ([41.202.16.116]) by prestigetransilvania.ro with
MailEnable ESMTP; Thu, 17 Dec 2009 07:17:09 +0200
IP: 41.202.16.116 ---> dhcp16116.myzipnet.com, Ghana
westerunioncode2331 [at] o2.pl
westerunioncode2233 [at] o2.pl
Muguphon: +233205141684 ---> ONETouch, Ghana/Vodafone
- kjz
Fröhliche Mugu-Bescherung:
Received: from jingrui.hk (unknown [61.143.101.72])
by xxxxx (Postfix) with ESMTP id 9CE31781124A
for xxxxx; Mon, 21 Dec 2009 07:15:53 +0100 (CET)
Received: from User [41.138.179.153] by jingrui.hk with ESMTP
(SMTPD-8.22) id A7450118; Mon, 21 Dec 2009 12:19:17 +0800
IP: 41.138.179.153 ---> Visafone Communications Limited, Nigeria
mr_barry_smith1 [at] yahoo.com.hk
mr_barry_smith1 [at] yahoo.com
Muguphon: +447024027864 ---> Magrathea Telecommunications Limited, UK
Mugufax: +447006045403 ---> Call Sciences Limited, UK/Yac
Und wieder Bellnexxia über Spamcast-Zombie, die bekommen ihr Leck nicht dicht:
Received: from toroondcbauth01-srv.bellnexxia.net
(toroondcbauth01.bellnexxia.net [207.236.237.43])
by xxxxx (Postfix) with ESMTP id D9BB178A32DC
for xxxxx; Mon, 21 Dec 2009 12:09:26 +0100 (CET)
Received: from User ([98.219.183.253])
by toroondcbauth01-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id
<20091221110746.EFQT18636.toroondcbauth01-srv.bellnexxia.net [at] User>;
Mon, 21 Dec 2009 06:07:46 -0500
IP: 98.219.183.253 ---> c-98-219-183-253.hsd1.pa.comcast.net
rogermillette [at] bellnet.ca
elvispaul.email [at] gmail.com
auch hier ein Dauer-Leck in Taiwan:
Received: from dataexpress.com.tw (60-250-42-53.HINET-IP.hinet.net
[60.250.42.53])
by xxxxx (Postfix) with ESMTP id 3434D78A2E7D
for xxxxx; Mon, 21 Dec 2009 13:59:32 +0100 (CET)
Received: from User (unknown [41.211.229.88])
by dataexpress.com.tw (Postfix) with ESMTP id 96F28A2031B;
Mon, 21 Dec 2009 20:04:33 +0800 (CST)
IP: 41.211.229.88 ---> 88.229.211.41.client88.directonpc.net, Nigeria
jeffrice0 [at] sify.com
jeffrice [at] hotmail.com
Muguphon: +44 871 263 6731 ---> Call Sciences Limited, UK/Yac
Bellnexxia via China-Zombie:
Received: from toroondcbmts04-srv.bellnexxia.net
(toroondcbmts04.bellnexxia.net [207.236.237.38])
by xxxxx (Postfix) with ESMTP id BA06878A3197
for xxxxx; Tue, 22 Dec 2009 05:58:55 +0100 (CET)
Received: from User ([60.211.25.22]) by toroondcbauth02-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id
<20091221045402.GYLX29583.toroondcbauth02-srv.bellnexxia.net [at] User>;
Sun, 20 Dec 2009 23:54:02 -0500
IP: 60.211.25.22 ---> China Unicom Shandong
rogermillette [at] bellnet.ca
roysmith22aa [at] gmail.com
Received: from rdlscientific.com (81-86-12-78.dsl.pipex.com [81.86.12.78])
by xxxxx (Postfix) with ESMTP id 3611A78A1928
for xxxxx; Mon, 21 Dec 2009 23:31:28 +0100 (CET)
Received: from User ([62.135.93.225] RDNS failed) by rdlscientific.com
with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 21 Dec 2009 14:29:41 +0000
IP: 62.135.93.225 ---> LINK, EG
bernisecharityfoundation [at] hotmail.com
IMF [at] inMail24.com
Muguphon: +20116618850 ---> Etisalat, EG
auch hier ein Dauer-Mugu:
Received: from ozhmx0.ozhosting.com (ozhmx0.ozhosting.com [203.30.164.223])
by xxxxx (Postfix) with ESMTP id 9A6DE78A3257
for xxxxx; Mon, 21 Dec 2009 23:45:41 +0100 (CET)
Received: from User (unknown [125.46.73.45])
by ozhmx0.ozhosting.com (Postfix) with ESMTP
id EACF23A964; Tue, 22 Dec 2009 05:21:00 +1100 (EST)
IP: 125.46.73.45 ---> hn.kd.ny.adsl/China Unicom Henan
westerunioncode233 [at] fastwebmail.it
westerunioncode2233 [at] o2.pl
Muguphon: +233205141684 ---> ONETouch, Ghana/Vodafone
Received: from mwasala.ahad-ahad.com (EHLO mwasala.ahad-ahad.com)
[63.223.110.144]
by mx0.gmx.net (mx110) with SMTP; 23 Dec 2009 10:28:34 +0100
Received: from [92.63.15.98] (helo=User)
by mwasala.ahad-ahad.com with esmtpa (Exim 4.69)
(envelope-from <elizaberg1954 [at] gmail.com>)
id 1NMqxR-0000Q7-Te; Mon, 21 Dec 2009 14:42:31 -0800
elizaberg1954 [at] gmail.com
elizaberg [at] myself.com
- kjz
Die Weihnachtsmugus:
die Taiwan-Kiste:
Received: from dataexpress.com.tw (60-250-42-53.HINET-IP.hinet.net
[60.250.42.53])
by xxxxx (Postfix) with ESMTP id C881E78A32D6
for xxxxx; Mon, 21 Dec 2009 17:37:30 +0100 (CET)
Received: from User (unknown [41.211.229.88])
by dataexpress.com.tw (Postfix) with ESMTP id 589DEA3CBC0;
Mon, 21 Dec 2009 23:37:14 +0800 (CST)
IP: 41.211.229.88 ---> 88.229.211.41.client88.directonpc.net, Nigeria
jeffrice [at] hotmail.com
jeffrice0 [at] sify.com
Muguphon: +44 871 263 6731 ---> Call Sciences Limited/Yac
die Madrid-Konnektion:
Received: from ns2.etime.co.za (unknown [196.25.216.138])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id BF09E78A1905
for xxxxx; Mon, 21 Dec 2009 19:07:39 +0100 (CET)
Received: from User (unknown [77.211.204.34])
by ns2.etime.co.za (Postfix) with ESMTP id C3C48543B83;
Thu, 17 Dec 2009 19:30:57 +0200 (SAST)
IP: 77.211.204.34 ---> VODAFONE_SPAIN_NETWORK
maita_cristale [at] yahoo.com
maita_emmanuel [at] rocketmail.com
abgekübelt über China-Zombie:
Received: from ozhmx0.ozhosting.com (ozhmx0.ozhosting.com [203.30.164.223])
by xxxxx (Postfix) with ESMTP id EBE3F78019C2
for xxxxxx; Tue, 22 Dec 2009 17:54:36 +0100 (CET)
Received: from User (unknown [125.46.73.45])
by ozhmx0.ozhosting.com (Postfix) with ESMTP
id 4E1F6B3627; Wed, 23 Dec 2009 02:45:17 +1100 (EST)
IP: 125.46.73.45 ---> hn.kd.ny.adsl/China Unicom Henan
westerunioncode233 [at] fastwebmail.it
westerunioncode2233 [at] o2.pl
Muguphon: +233205141684 ---> ONETouch, Ghana/Vodafone
Received: from hm1481-5.locaweb.com.br (hm1481-5.locaweb.com.br
[201.76.49.127])
by xxxxx (Postfix) with ESMTP id 17B94789B012
for xxxxx; Thu, 24 Dec 2009 10:00:39 +0100 (CET)
Received: from localhost (189.126.112.72) by hm1481-5.locaweb.com.br
(PowerMTA(TM) v3.5r13) id h6cmre0nvas6 for xxxxx;
Thu, 24 Dec 2009 06:12:21 -0200 (envelope-from
<johnsheade57 [at] vilania.com.br>)
X-LW-Scanned: by Locaweb Mail Filter at locaweb.com.br
Received: from hm2076.locaweb.com.br ([127.0.0.1])
by localhost (hm2076.locaweb.com.br [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id NtXJS-t5v3iG; Thu, 24 Dec 2009 06:09:15 -0200 (BRST)
Received: from hm401.locaweb.com.br (unknown [10.1.10.37])
by hm2076.locaweb.com.br (Postfix) with SMTP id C46CAC99C47;
Thu, 24 Dec 2009 06:08:52 -0200 (BRST)
Received: from unknown (HELO User) (rafael [at] vilania.com.br@41.217.65.4)
by hm401.locaweb.com.br with SMTP; 24 Dec 2009 08:11:57 -0000
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
rafael [at] vilania.com.br
johnsheade57 [at] vilania.com.br
johnsheade57 [at] aol.co.uk
Muguphon: +44 871 504 9889 ---> Magrathea Telecommunications Limited, UK
Received: from mastercontractors.net
(static-71-241-56-86.nrflva.east.verizon.net [71.241.56.86])
by xxxxx (Postfix) with ESMTP id ABBBD78A2C6F
for xxxxx; Thu, 24 Dec 2009 10:01:51 +0100 (CET)
Received: from User ([82.128.70.51]) by mastercontractors.net with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 23 Dec 2009 18:51:42 -0500
Received: from mastercontractors.net
(static-71-241-56-86.nrflva.east.verizon.net [71.241.56.86])
by xxxxx (Postfix) with ESMTP id F25C8789B5C6
for xxxxx; Thu, 24 Dec 2009 10:01:50 +0100 (CET)
Received: from User ([82.128.70.24]) by mastercontractors.net with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 24 Dec 2009 01:44:21 -0500
IP: 82.128.70.51 ---> Multilinks Telecommunications Limited, Nigeria
awardmicrosoft34 [at] yahoo.com
microsoftemailaward2009 [at] yahoo.co.jp
Muguphon: + 44 70457 35768 ---> Open Telecom International Ltd., UK
die Madrid-Konnektion:
Received: from IMPaqm3.telefonica.net (impaqm3.telefonica.net
[213.4.129.23])
by xxxxx (Postfix) with ESMTP id 2862278A3251
for xxxxx; Thu, 24 Dec 2009 15:19:57 +0100 (CET)
Received: from IMPmailhost2.adm.correo ([10.20.102.39])
by IMPaqm3.telefonica.net with bizsmtp
id M24v1d00H0r0BT63P2KxXM; Thu, 24 Dec 2009 15:19:57 +0100
Received: from User ([81.34.178.216])
by IMPmailhost2.adm.correo with BIZ IMP
id M2Kv1d00G4gXFnV1i2KvPH; Thu, 24 Dec 2009 15:19:56 +0100
IP: 81.34.178.216 ---> 216.Red-81-34-178.dynamicIP.rima-tde.net
cliffjohns [at] terra.es
george777magnus [at] aol.com
- kjz
Leider kehrt auch zur Weihnacht keine Ruhe ein:
Received: from mail.m-rinternationalhosting.com (unknown [208.106.153.92])
by xxxxx (Postfix) with ESMTP id DE68D78A1FD0
for xxxxx; Thu, 24 Dec 2009 23:40:47 +0100 (CET)
Received: from ml82.128.20.112.multilinks.com [82.128.20.112] by
mail.m-rinternationalhosting.com with SMTP;
Tue, 22 Dec 2009 07:09:31 +0100
IP: 82.128.20.112 ---> Multilinks, Nigeria
e_br187 [at] yahoo.co.jp
per Zombie:
Received: from rubidio.sol3.it (web.fastgate.it [84.33.51.13])
by xxxxx (Postfix) with ESMTP id DE31F78990E6
for xxxxx; Fri, 25 Dec 2009 08:07:13 +0100 (CET)
Received: from localhost (rubidio.local [127.0.0.1])
by rubidio.sol3.it (Postfix) with ESMTP id 4AD81F9351;
Thu, 24 Dec 2009 02:53:04 +0100 (CET)
Received: from rubidio.sol3.it ([127.0.0.1])
by localhost (rubidio.sol3.it.sol3.it [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 21258-08; Thu, 24 Dec 2009 02:53:04 +0100 (CET)
Received: from User (channelf.5460.net [61.137.93.80])
by rubidio.sol3.it (Postfix) with ESMTP id 2976BF92D8;
Thu, 24 Dec 2009 02:49:53 +0100 (CET)
IP: 61.137.93.80 ---> CHINANET Hunan
ikobomastercard [at] clicknigeria.com
ikobomastercard [at] ikobo.com
Muguphon: +2347061930084 ---> MTN Nigeria Communications Ltd
Received: from mail.xiami.com (unknown [221.12.127.14])
by xxxxx (Postfix) with ESMTP id C2763789B62D
for xxxxx; Thu, 24 Dec 2009 19:26:27 +0100 (CET)
Received: from User (unknown [211.142.24.122])
by mail.xiami.com (Postfix) with ESMTP id 0EC3452633;
Thu, 24 Dec 2009 17:22:54 +0800 (CST)
princeadam2009 [at] live.com
prince [at] yahoo.com
Muguphon: +233-243-564-564 ---> MTN, Ghana
gecracktes Horde:
Received: from smtpgate4.pacific.net.sg (smtpgate4.pacific.net.sg
[203.120.68.34])
by xxxxx (Postfix) with SMTP id 7D25B78004C5
for xxxxx; Thu, 24 Dec 2009 20:04:04 +0100 (CET)
Received: (qmail 11068 invoked from network); 24 Dec 2009 18:26:20 -0000
Received: from wm3.pacific.net.sg (HELO localhost) (lcloh [at] 192.169.41.133)
by smtpgate4.pacific.net.sg with ESMTPA; 24 Dec 2009 18:26:20 -0000
Received: from 172.16.0.221 (172.16.0.221 [172.16.0.221]) by
wm3.web.pacific.net.sg (Horde MIME library) with HTTP; Fri, 25 Dec 2009
02:26:17 +0800
fedexcourierservices [at] hmail.ae
Muguphon: +2347033057569 ---> MTN Nigeria Communications Ltd.
- kjz
Noch im alten Jahr:
die Kühltruhe leckt:
Received: from dns.refrigerant.com.tw (60-249-196-178.HINET-IP.hinet.net
[60.249.196.178])
by xxxxx (Postfix) with ESMTP id 81D6E78004C5
for xxxxx; Mon, 28 Dec 2009 21:51:31 +0100 (CET)
Received: from User (unknown [82.128.32.178])
by dns.refrigerant.com.tw (Postfix) with ESMTP
id 3CD161B33F7; Mon, 28 Dec 2009 06:14:34 +0800 (CST)
IP: 82.128.32.178 ---> Multilinks Telecommunications Limited, Nigeria
us.fbi.washington.dc [at] in.com
fbi24 [at] mail.mn
die Madrid-Konnektion:
Received: from 66-197-149-208.hostnoc.net.149.197.66.in-addr.arpa (EHLO
server-1.hostsos.com) [66.197.149.208]
by mx0.gmx.net (mx034) with SMTP; 29 Dec 2009 20:01:19 +0100
Received: from [77.211.67.185] (helo=User)
by server-1.hostsos.com with esmtpa (Exim 4.69)
(envelope-from <ramon.jason1950 [at] gmail.com>)
id 1NPhHP-0002Wq-LG; Tue, 29 Dec 2009 18:58:52 +0000
IP: 77.211.67.185 ---> VODAFONE_SPAIN_NETWORK
madrid.ramon [at] sify.com
ramon.jason1950 [at] gmail.com
Muguphon: +34 634 140 773 ---> Vodafone Espana
Received: from wjhqmw1.wicaksana.co.id (unknown [202.47.75.152])
by xxxxx (Postfix) with ESMTP id DBF3078982CE
for xxxxx; Wed, 30 Dec 2009 12:34:27 +0100 (CET)
Received: from User ([82.128.32.89]) by wjhqmw1.wicaksana.co.id with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 30 Dec 2009 18:15:47 +0700
IP: 82.128.32.89 ---> Multilinks Telecommunications Limited, Nigeria
drjamesobiaccgen [at] gmail.com
jaesaegs [at] gmail.com
gecracktes Horde:
Received: from mail.loze.net (mx2.loze.net [194.63.136.6])
by xxxxx (Postfix) with ESMTP id CE14878004C5
for xxxxx; Wed, 30 Dec 2009 15:08:19 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by mail.loze.net (Postfix) with ESMTP id 09E4F4436A;
Wed, 30 Dec 2009 15:28:34 +0200 (EET)
X-Virus-Scanned: amavisd-new at mail.valerii.com
Received: from mail.loze.net ([127.0.0.1])
by localhost (mail.loze.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id vdHhl2bleKSP; Wed, 30 Dec 2009 15:28:33 +0200 (EET)
Received: by mail.loze.net (Postfix, from userid 33)
id 7D7DA44363; Wed, 30 Dec 2009 15:28:31 +0200 (EET)
Received: from 41.216.44.207 ([41.216.44.207]) by mail.loze.net (Horde MIME
library) with HTTP; Wed, 30 Dec 2009 15:28:29 +0200
IP: 41.216.44.207 ---> Benin Telecoms SA
officef33 [at] gmail.com
w.u.paymentcenter045 [at] gmail.com
Muguphon: +229-966-663-50 ---> Benin
- kjz
Und im Neuen geht's weiter:
Received: from nameservices.net (EHLO officefurnitureman.com)
[216.117.138.216]
by mx0.gmx.net (mx108) with SMTP; 01 Jan 2010 18:04:46 +0100
Received: from User [82.128.21.188] by officefurnitureman.com with ESMTP
(SMTPD32-8.05) id A61F72E50072; Fri, 01 Jan 2010 07:10:07
IP: 82.128.21.188 ---> ml82.128.21.188.multilinks.com, Nigeria
efcc_nig39 [at] post.ro
honorablemrs.faridawaziri [at] yahoo.com
Received: from rubidio.sol3.it (web.fastgate.it [84.33.51.13])
by xxxxx (Postfix) with ESMTP id 70C2578A3173
for xxxxx; Sat, 2 Jan 2010 07:32:20 +0100 (CET)
Received: from localhost (rubidio.local [127.0.0.1])
by rubidio.sol3.it (Postfix) with ESMTP id C228E8A0A4;
Sat, 2 Jan 2010 07:16:36 +0100 (CET)
Received: from rubidio.sol3.it ([127.0.0.1])
by localhost (rubidio.sol3.it.sol3.it [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 26250-09; Sat, 2 Jan 2010 07:16:36 +0100 (CET)
Received: from User (unknown [82.128.86.37])
by rubidio.sol3.it (Postfix) with ESMTP id 914AA89FC7;
Sat, 2 Jan 2010 07:15:50 +0100 (CET)
IP: 82.128.86.37 ---> Multilinks Telecommunications Limited, Nigeria
mrsannie1997 [at] yahoo.com.hk
anitafung81 [at] yahoo.com.hk
Received: from qwebsites.com (qwebsites.com [75.125.18.18])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 3C8A678990F4
for xxxxx; Fri, 1 Jan 2010 21:07:13 +0100 (CET)
Received: (qmail 3441 invoked by uid 10023); 1 Jan 2010 13:33:24 -0500
Received: from by server04.q-surf.com (envelope-from
<catherinehoover [at] sbcglobal.net>, uid 48) with qmail-scanner-2.08st
(clamdscan: 0.95.3/10246. spamassassin: 3.2.5. perlscan: 2.08st.
Clear:RC:1(127.0.0.1):.
Processed in 0.017778 secs); 01 Jan 2010 18:33:24 -0000
catherinehoover [at] sbcglobal.net
raymondwilson63 [at] gmail.com
die Madrid-Konnektion:
Received: from ffcm-mailserver.favellefavco.com.my
(ffcm-mailserver.favellefavco.com.my [124.82.167.98])
by xxxxx (Postfix) with ESMTP id DD6FA78A30BC
for xxxxx; Sat, 2 Jan 2010 22:09:55 +0100 (CET)
Received: from User ([213.37.214.129] unverified) by
ffcm-mailserver.favellefavco.com.my with Microsoft SMTPSVC(5.0.2195.6713);
Sun, 3 Jan 2010 05:07:12 +0800
IP: 213.37.214.129 ---> 213.37.214.129.dyn.user.ono.com, ES
globalsseguros [at] gmail.com
lottoespana [at] gmail.com
über China-Zombie:
Received: from mail.mceodoherty.ie (EHLO mceodoherty.ie) [83.70.118.15]
by mx0.gmx.net (mx042) with SMTP; 02 Jan 2010 22:21:48 +0100
Received: from User ([60.208.119.2] RDNS failed) by mceodoherty.ie with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 26 Dec 2009 09:26:08 +0000
IP: 60.208.119.2 ---> JINAN xinyu Net Bar
mrbenpeters044 [at] yahoo.co.jp
sean.ne [at] msn.com
Received: from themar20.lnk.telstra.net (EHLO
wombat.mariaislandwalk.com.au) [165.228.181.155]
by mx0.gmx.net (mx103) with SMTP; 03 Jan 2010 02:32:16 +0100
Received: from User ([165.228.2.249]) by wombat.mariaislandwalk.com.au
with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 30 Dec 2009 23:05:47 +1100
bankinfo1 [at] yahoo.com.hk
bankkkinfo11 [at] yahoo.com.hk
uchepetero [at] aol.com
die Amsterdam-Konnektion:
Received: from mail.maxnet.ua (mail.maxnet.ua [79.171.120.18])
by xxxxx (Postfix) with ESMTP id 876BA78A319B
for xxxxx; Sun, 3 Jan 2010 01:18:07 +0100 (CET)
Received: from localhost (mail.maxnet.ua [79.171.120.18])
by mail.maxnet.ua (Postfix) with ESMTP id 84B3A1C2111C;
Sat, 2 Jan 2010 10:22:25 +0200 (EET)
X-Virus-Scanned: amavisd-new at maxnet.ua
Received: from mail.maxnet.ua ([79.171.120.18])
by localhost (mail.maxnet.ua [79.171.120.18]) (amavisd-new, port 10024)
with LMTP id Oj+Sj4P0gFCI; Sat, 2 Jan 2010 10:22:25 +0200 (EET)
Received: from User (a90019.upc-a.chello.nl [62.163.90.19])
by mail.maxnet.ua (Postfix) with ESMTPA id C5FE01C21131;
Sat, 2 Jan 2010 10:22:18 +0200 (EET)
euro.finance [at] aol.nl
staatslotto [at] sify.com
Muguphon: +31 621 632 518 ---> Vodafone Libertel B.V., NL
Mugufax: +31 84 733 1775 ---> J2 Global (Netherlands) B.V.
Received: from smtp28.orange.fr (smtp28.orange.fr [80.12.242.99])
by xxxxx (Postfix) with ESMTP id B9A207811245
for xxxxx; Sun, 3 Jan 2010 13:12:52 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2802.orange.fr (SMTP Server) with ESMTP id 752DB8001D2B;
Sun, 3 Jan 2010 13:12:52 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2802.orange.fr (SMTP Server) with ESMTP id 545FC8001D32;
Sun, 3 Jan 2010 13:12:52 +0100 (CET)
Received: from User (LSt-Amand-152-31-18-235.w193-253.abo.wanadoo.fr
[193.253.221.235])
by mwinf2802.orange.fr (SMTP Server) with ESMTP id B3D038001D0B;
Sun, 3 Jan 2010 13:12:28 +0100 (CET)
PaulStraus [at] aol.com
kelvinwilliams75 [at] gmail.com
jossange [at] orange.fr
- kjz
Weiteres von den Mugus:
Received: from wjhqmw1.wicaksana.co.id (unknown [202.47.75.152])
by xxxxx (Postfix) with ESMTP id 55BED78A3171
for xxxxx; Mon, 4 Jan 2010 06:31:20 +0100 (CET)
Received: from User ([82.128.35.179]) by wjhqmw1.wicaksana.co.id with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 4 Jan 2010 12:12:44 +0700
IP: 82.128.35.179 ---> Multilinks Telecommunications Limited, Nigeria
jaobi96 [at] live.com
junecolemone.hge [at] gmail.com
Muguphon: +2347092367810 ---> Multilinks Telecommunications Ltd., Nigeria
Received: from postmail.alexa-soft.com (mail.alexa-soft.com [213.8.129.83])
by xxxxx (Postfix) with ESMTP id 3519178990EA
for xxxxx; Mon, 4 Jan 2010 13:11:59 +0100 (CET)
Received: from User ([89.238.165.138] RDNS failed) by
postmail.alexa-soft.com with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 4 Jan 2010 13:52:28 +0200
d.deaninc [at] i12.com
Received: from domino.intermax-ag.com (mail.imaxclub.com [195.39.8.139])
by xxxxx (Postfix) with ESMTP id 93E8978A32F6
for xxxxx; Tue, 5 Jan 2010 02:48:11 +0100 (CET)
Received: from User ([82.128.32.100])
by domino.intermax-ag.com (Lotus Domino Release 8.5FP1)
with ESMTP id 2010010500223808-3977 ;
Tue, 5 Jan 2010 00:22:38 +0100
IP: 82.128.32.100 --> Multilinks Telecommunications Limited, Nigeria
tulem001 [at] yahoo.com.hk
t-lemo1 [at] excite.it
Received: from imsantv23.netvigator.com (imsantv23.netvigator.com
[210.87.247.11])
by xxxxx (Postfix) with ESMTP id 47B1E78A32D3
for xxxxx; Tue, 5 Jan 2010 04:39:36 +0100 (CET)
Received: from imsantv36.netvigator.com (imsantv36b.netvigator.com
[210.87.247.29])
by imsantv23.netvigator.com (8.14.2/8.14.2) with ESMTP id o052bcJC026527
for xxxxx; Tue, 5 Jan 2010 10:37:50 +0800
Received: from [210.87.253.68] ([210.87.253.68:59610]
helo=imsantv61.netvigator.com)
by imsantv36 (envelope-from <info [at] fbi.org>)
(ecelerity 2.2.2.40 r(29895/29896)) with ESMTP
id BA/46-21612-EF5A24B4; Tue, 05 Jan 2010 10:37:50 +0800
Received: from mail.icm.com.hk (n220246006218.netvigator.com
[220.246.6.218])
by imsantv61.netvigator.com (8.14.3/8.14.3) with ESMTP id o052awJ7018439;
Tue, 5 Jan 2010 10:36:58 +0800
Received: from User ([59.154.25.30]) by mail.icm.com.hk with Microsoft
SMTPSVC(6.0.3790.3959);
Tue, 5 Jan 2010 10:36:30 +0800
federalbureauinvestigationsfed [at] gmail.com
Muguphon: +2348137537045 ---> Nigeria
Received: from servidor1.mittalriopreto.com.br (servidor1.ciadoaco.net
[189.20.219.154])
by xxxxx (Postfix) with ESMTP id 39F2578A2C5A
for xxxxx; Mon, 4 Jan 2010 23:20:37 +0100 (CET)
Received: from User (unknown [41.217.65.4])
by servidor1.mittalriopreto.com.br (Postfix) with ESMTP id 4FE3ABDB8DF;
Mon, 4 Jan 2010 10:21:01 -0200 (BRST)
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
enqury2120 [at] gmail.com
enqury2123 [at] gmail.com
- kjz
Und aus der anderen Wundertüte hätten wir noch:
Received: from servidor1.mittalriopreto.com.br (servidor1.ciadoaco.net
[189.20.219.154])
by xxxxx (Postfix) with ESMTP id 04C3778A33B3
for xxxxx; Mon, 4 Jan 2010 19:26:33 +0100 (CET)
Received: from User (unknown [41.217.65.4])
by servidor1.mittalriopreto.com.br (Postfix) with ESMTP id 47F051AFDE4;
Mon, 4 Jan 2010 11:36:38 -0200 (BRST)
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
enqury2120 [at] gmail.com
enqury2123 [at] gmail.com
Received: from mail.silverstonetek.com.tw (mail.silverstonetek.com.tw
[59.124.100.55])
by xxxxx (Postfix) with ESMTP id 8EFFC78A34AF
for xxxxx; Mon, 4 Jan 2010 21:42:31 +0100 (CET)
Received: from silverstonetek.com.tw (mail.silverstonetek.com.tw
[127.0.0.1])
by mail.silverstonetek.com.tw (Postfix) with ESMTP id 6621C165FE5;
Tue, 5 Jan 2010 03:55:26 +0800 (CST)
Received: from mail.silverstonetek.com.tw (mail.silverstonetek.com.tw
[59.124.100.55])
by xxxxx (Postfix) with ESMTP id 4D76778A33C2
for xxxxx; Mon, 4 Jan 2010 21:26:54 +0100 (CET)
Received: from silverstonetek.com.tw (mail.silverstonetek.com.tw
[127.0.0.1])
by mail.silverstonetek.com.tw (Postfix) with ESMTP id 4D4C6165FF0;
Tue, 5 Jan 2010 03:55:27 +0800 (CST)
catherinehoover [at] sbcglobal.net
raymondwilson63 [at] gmail.com
gecracktes Horde:
Received: from smtpgate4.pacific.net.sg (smtpgate4.pacific.net.sg
[203.120.68.34])
by xxxxx (Postfix) with SMTP id 8C51F78A34A4
for xxxxx; Mon, 4 Jan 2010 21:43:22 +0100 (CET)
Received: (qmail 8934 invoked from network); 4 Jan 2010 20:23:53 -0000
Received: from wm4.pacific.net.sg (HELO localhost) (yuon [at] 203.120.90.134)
by smtpgate4.pacific.net.sg with ESMTPA; 4 Jan 2010 20:23:53 -0000
Received: from 217.175.73.5 ([217.175.73.5]) by wm4.web.pacific.net.sg
(Horde MIME library) with HTTP; Tue, 05 Jan 2010 04:23:51 +0800
IP: 217.175.73.5 ---> Arqiva Communications Ltd., UK
williams_rom [at] rock.com
websurf12 [at] sify.com
pleasereplyto [at] live.com
- kjz
Die Mugu-Parade, Teil 1:
Spamcast-Zombie in Florida:
Received: from mta03.eastlink.ca (smtpout.eastlink.ca [24.222.0.30])
by xxxxx (Postfix) with ESMTP id 3A63978A1905
for xxxxx; Thu, 7 Jan 2010 21:10:40 +0100 (CET)
Received: from ip05.eastlink.ca ([unknown] [24.222.39.68])
by mta03.eastlink.ca (Sun Java(tm) System Messaging Server 7.3-11.01 64bit
(built Sep 1 2009)) with ESMTP id
<0KVW007SX7PI0020 [at] mta03.eastlink.ca>; Thu,
07 Jan 2010 16:03:18 -0400 (AST)
Received: from me02.eastlink.ca (HELO eastlink.ca) ([24.224.136.25])
by ip05.eastlink.ca with ESMTP; Thu, 07 Jan 2010 16:08:24 -0400
Received: from [76.18.8.63] by me02.eastlink.ca (mshttpd); Thu,
07 Jan 2010 21:03:04 +0100
IP: 24.224.136.25 ---> c-76-18-8-63.hsd1.fl.comcast.net
nelwhynot [at] eastlink.ca
allreplyto3721 [at] att.net
ADD-DETAILS847162 [at] ATT.NET
die Amsterdam-Konnektion:
Received: from vhost1.tyc.edu.tw (relay2.tyc.edu.tw [163.28.50.24])
by xxxxx (Postfix) with ESMTP id 6F0DA78004C5
for xxxxx; Sat, 9 Jan 2010 05:52:05 +0100 (CET)
Received: from User (d126141.upc-d.chello.nl [213.46.126.141])
by vhost1.tyc.edu.tw (Postfix) with ESMTP id EDD3451163;
Wed, 6 Jan 2010 15:15:35 +0800 (CST)
atlanticfzv [at] aol.com
atlanticfinnl [at] aol.com
Muguphon: +31- 645 141 466 ---> Telfort B.V., NL
Mugufax: +31- 847 323 886 ---> J2 Global (Netherlands) B.V.
Received: from universe.uohyd.ernet.in (EHLO universe1.uohyd.ernet.in)
[202.41.85.90]
by mx0.gmx.net (mx013) with SMTP; 09 Jan 2010 05:31:23 +0100
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AtX/AHWTR0usEAEL/2dsb2JhbAAIQnSIWIUkCwEIijmBBIEqExCGBKYVCIp1giIFEQcIgWgE
Subject: [SPAM] URGENT REPLY !!!!!!
X-IronPort-AV: E=Sophos;i="4.49,246,1262543400";
d="scan'208";a="123765"
Received: from unknown (HELO node1.uohyd.ernet.in) ([172.16.1.11])
by universe1.uohyd.ernet.in with ESMTP; 09 Jan 2010 09:55:15 +0530
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; CHARSET=US-ASCII
Received: from User ([unknown] [82.128.23.123])
by node1.uohyd.ernet.in (Sun Java(tm) System Messaging Server 7.3-11.01
64bit
(built Sep 1 2009)) with ESMTPA id
<0KVY006D4PN5LPY0 [at] node1.uohyd.ernet.in>;
Sat, 09 Jan 2010 09:58:30 +0530 (IST)
IP: 82.128.23.123 ---> Multilinks Telecommunications Limited, Nigeria
doje1003 [at] o2.pl
aicl2009 [at] uohyd.ernet.in
gecrackter Orange-Account via Spamadoo:
Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.26])
by xxxxx (Postfix) with ESMTP id 052BE78A33DE
for xxxxx; Sat, 9 Jan 2010 08:18:18 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2028.orange.fr (SMTP Server) with ESMTP id A073020035B4;
Sat, 9 Jan 2010 08:15:35 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2028.orange.fr (SMTP Server) with ESMTP id 8BD1A200368B;
Sat, 9 Jan 2010 08:15:35 +0100 (CET)
Received: from User (LRouen-151-72-19-84.w80-13.abo.wanadoo.fr
[80.13.178.84])
by mwinf2028.orange.fr (SMTP Server) with ESMTP id 1A25F2003A08;
Sat, 9 Jan 2010 08:13:34 +0100 (CET)
Received: from smtp20.orange.fr (smtp20.orange.fr [193.252.22.31])
by xxxxx (Postfix) with ESMTP id D44E27811242
for xxxxx; Sun, 10 Jan 2010 04:00:01 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2021.orange.fr (SMTP Server) with ESMTP id C945020041A6;
Sun, 10 Jan 2010 03:56:18 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2021.orange.fr (SMTP Server) with ESMTP id A61072004269;
Sun, 10 Jan 2010 03:56:18 +0100 (CET)
Received: from User (LRouen-151-72-19-84.w80-13.abo.wanadoo.fr
[80.13.178.84])
by mwinf2021.orange.fr (SMTP Server) with ESMTP id EEA6E20041A6;
Sun, 10 Jan 2010 03:55:36 +0100 (CET)
colewalters01 [at] excite.co.uk
colewalters [at] excite.co.uk
morfeo25000 [at] orange.fr
hier hat man Horde bei der Uni Ulm gecrackt:
Received: from mail.uni-ulm.de (mail.uni-ulm.de [134.60.1.11])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1BF9F78A34F3
for xxxxx; Sun, 10 Jan 2010 14:36:56 +0100 (CET)
Received: from poseidon.rz.uni-ulm.de (localhost [127.0.0.1])
by smtp.uni-ulm.de (8.14.3/8.14.2) with ESMTP id o0AAqjtU026744;
Sun, 10 Jan 2010 11:52:45 +0100 (MET)
Received: (from cyrus [at] localhost)
by poseidon.rz.uni-ulm.de (8.14.3/8.14.2/Submit) id o0AAoQ3s020545;
Sun, 10 Jan 2010 11:50:26 +0100 (MET)
Received: from 41.138.180.15 ([41.138.180.15]) by imap.uni-ulm.de (Horde
MIME library) with HTTP; Sun, 10 Jan 2010 11:50:24 +0100
IP: 41.138.180.15 ---> Visafone Communications Limited, Nigeria
fedex_ng2010 [at] live.com
Muguphon: +2347032957777 ---> MTN Nigeria Communications Ltd.
über China-Zombie:
Received: from dns.okumura.to (218-228-196-207.eonet.ne.jp
[218.228.196.207])
by xxxxx (Postfix) with ESMTP id 35F9678A34E2
for xxxxx; Sun, 10 Jan 2010 17:21:42 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by dns.okumura.to (Postfix) with ESMTP id 96EEE1346C84;
Mon, 11 Jan 2010 01:11:15 +0900 (JST)
X-Quarantine-ID: <LLtDlRNo827V>
X-Virus-Scanned: amavisd-new at okumura.to
Received: from dns.okumura.to ([127.0.0.1])
by localhost (dns.okumura.to [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id LLtDlRNo827V; Mon, 11 Jan 2010 01:11:15 +0900 (JST)
Received: from User (unknown [218.25.59.156])
by dns.okumura.to (Postfix) with ESMTP id 58B9D134652A;
Mon, 11 Jan 2010 01:07:35 +0900 (JST)
IP: 218.25.59.156 ---> China Unicom Liaoning
patandyou [at] pat-chambers.com
Patterson [at] patchamber.com
Received: from ns11.wistee.fr (dns-ns11.wistee.fr [94.124.84.11])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 56B9278A34C4
for xxxxx; Sun, 10 Jan 2010 18:24:08 +0100 (CET)
Received: from vfbb233239.4u.com.gh ([41.218.233.239] helo=User)
by ns11.wistee.fr with esmtpa (Exim 4.67)
(envelope-from <imfor_555 [at] sify.com>)
id 1NU1Uw-0003gp-Df; Sun, 10 Jan 2010 18:22:44 +0100
imfor_2000 [at] sify.com
imfor_555 [at] sify.com
barrlamine_kofi [at] neu.com.cn
- kjz
Die Mugu-Parade, Teil 2:
Received: from mail1.rbj.com (EHLO mail.rbj.com) [65.60.124.151]
by mx0.gmx.net (mx079) with SMTP; 07 Jan 2010 12:13:59 +0100
Received: from User ([66.197.202.107] RDNS failed) by mail.rbj.com with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 7 Jan 2010 03:13:34 -0800
IP: 66.197.202.107 ---> 66-197-202-107.hostnoc.net
Taylor.Robert [at] mymeteor.ie
rbt_tayy [at] hotmail.com
Received: from hartronserver.hartron.cc (hartronserver.hartron.cc
[203.92.44.78])
by xxxxx (Postfix) with ESMTP id 06F9578A34A4
for xxxxx; Thu, 7 Jan 2010 23:38:44 +0100 (CET)
Received: from localhost (unknown [127.0.0.1])
by hartronserver.hartron.cc (Postfix) with ESMTP id 346C098AB4;
Thu, 7 Jan 2010 21:54:34 +0000 (UTC)
Received: from hartronserver.hartron.cc ([127.0.0.1])
by localhost (hartronserver.hartron.cc [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 20913-06; Fri, 8 Jan 2010 03:24:33 +0530 (IST)
Received: from User (unknown [82.128.81.242])
by hartronserver.hartron.cc (Postfix) with ESMTP id B35C1984FB;
Fri, 8 Jan 2010 03:23:29 +0530 (IST)
IP: 82.128.81.242 ---> Multilinks Telecommunications Limited, Nigeria
Tja, würde jemand mal bei Multilinks den Stecker ziehen, hätte sich die Hälfte allen Mugu-Spams schlagartig erledigt.... Mal wieder ein Beweis für meine Signatur.
frankalbert2010 [at] live.com
albertfrank1960 [at] gmail.com
Received: from mail4.onnetsecure.net (unknown [207.154.30.253])
by xxxxx (Postfix) with ESMTP id 9C1B37894055
for xxxxx; Thu, 7 Jan 2010 23:19:09 +0100 (CET)
Received: (qmail 30802 invoked by uid 399); 7 Jan 2010 17:13:51 -0500
Received: from unknown (HELO User) (bcordell [at] cordellcom.com@82.128.70.145)
by mail4.onnetsecure.net with ESMTPAM; 7 Jan 2010 17:13:51 -0500
X-Originating-IP: 82.128.70.145
IP: 82.128.70.145 ---> Multilinks Telecommunications Limited, Nigeria
canegreensister [at] i12.com
bcordell [at] cordellcom.com
- kjz
die unendliche Geschichte:
Received: from usaenv.com (216-201-190-74.res.logixcom.net [216.201.190.74])
by xxxxx (Postfix) with ESMTP id 8E18678A34AB
for xxxxx; Mon, 11 Jan 2010 00:29:41 +0100 (CET)
Received: from User ([82.128.32.81]) by usaenv.com with Microsoft
SMTPSVC(6.0.3790.3959);
Fri, 8 Jan 2010 16:58:08 -0600
IP: 82.128.32.81 ---> Multilinks Telecommunications Limited, Nigeria
mrpeterbrown00 [at] hotmail.com
Muguphon: +44 703 1928177 ---> Magrathea Telecommunications Limited, UK
Received: from dns.okumura.to (218-228-196-207.eonet.ne.jp
[218.228.196.207])
by xxxxx (Postfix) with ESMTP id E514C78A34AB
for xxxxx; Sun, 10 Jan 2010 21:19:24 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by dns.okumura.to (Postfix) with ESMTP id AD130135E5FD;
Mon, 11 Jan 2010 05:19:19 +0900 (JST)
X-Quarantine-ID: <wolsfVpKLnRC>
X-Virus-Scanned: amavisd-new at okumura.to
Received: from dns.okumura.to ([127.0.0.1])
by localhost (dns.okumura.to [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id wolsfVpKLnRC; Mon, 11 Jan 2010 05:19:19 +0900 (JST)
Received: from User (unknown [218.25.59.156])
by dns.okumura.to (Postfix) with ESMTP id 6EDC9135E306;
Mon, 11 Jan 2010 05:16:06 +0900 (JST)
IP: 218.25.59.156 --> China Unicom Liaoning
Patterson [at] patchamber.com
Received: from www.oapz.ru (unknown [217.23.157.185])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 29B6478990E6
for xxxxx; Tue, 12 Jan 2010 05:15:36 +0100 (CET)
Received: from [196.205.201.162] (helo=User)
by www.oapz.ru with esmtpa (Exim 4.66)
(envelope-from <Intrmonetaryfund [at] aol.com>)
id 1NUKFq-0001YJ-Gl; Mon, 11 Jan 2010 16:24:23 +0300
IP: 196.205.201.162 ---> host-196-205-201-162.static.link.com.eg
Intrmonetaryfund [at] aol.com
Bernisecharityfoundationimf [at] gmail.com
Muguphon: +20118203233 ---> Etisalat, EG
Muguphon: +1319-522-2148 ---> Mediapolis Telephone Co., US
Mugufax: +20118303234 ---> Etisalat, EG
Received: from at360.com (unknown [209.126.192.59])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id DABBD78A3C08
for xxxxx; Tue, 12 Jan 2010 08:16:06 +0100 (CET)
Received: (qmail 1383 invoked by uid 1007); 11 Jan 2010 18:30:01 -0800
Received: from unknown (HELO User) (test [at] at360.com@41.217.65.4)
by at360.com with SMTP; 11 Jan 2010 18:30:01 -0800
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
cosmosperry02 [at] emailclick.com
janet.cole65 [at] yahoo.com
Muguphon: +234-70250-48-121 ---> Visafone Communications Ltd., NG
Received: from smtp1-pc.aruba.it (smtp190-pc.aruba.it [62.149.157.190])
by xxxxx (Postfix) with SMTP id 8889D7800AD7
for xxxxx>; Wed, 13 Jan 2010 04:00:48 +0100 (CET)
Received: (qmail 11121 invoked by uid 89); 13 Jan 2010 02:53:57 -0000
Received: from unknown (HELO localhost) (10.10.176.105)
by smtp1-pc.ad.aruba.it with SMTP; 13 Jan 2010 02:53:57 -0000
jamestyler [at] go.badgers.com
jamestyler020 [at] katamail.com
Received: from mail.roxx.se (EHLO mail.roxx.se) [195.67.110.9]
by mx0.gmx.net (mx039) with SMTP; 13 Jan 2010 12:20:20 +0100
Received: from User [82.128.34.57] by mail.roxx.se with ESMTP
(SMTPD32-7.07) id ADD827200CC; Wed, 13 Jan 2010 01:03:36 +0100
IP: 82.128.34.57 ---> Multilinks Telecommunications Limited, Nigeria
htuk [at] live.com
ht [at] msn.com
Muguphon: +447024032605 ---> Magrathea Telecommunications Limited, UK
- kjz
Der Nächste, bitte.....
Received: from mail.sdm.kompasgramedia.com (unknown [202.146.0.140])
by xxxxx (Postfix) with ESMTP id B6AA078A33C7
for xxxxx; Mon, 11 Jan 2010 19:28:04 +0100 (CET)
Received: from User ([82.128.72.36]) by mail.sdm.kompasgramedia.com with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 12 Jan 2010 01:20:41 +0700
IP: 82.128.72.36 ---> Multilinks Telecommunications Limited, Nigeria
cbn.bank19700 [at] yahoo.com.hk
dr.jameseze1 [at] gmail.com
Muguphon: +234 706-155-9469 ---> MTN Nigeria Communications Ltd.
Received: from mail.megapack.net.ph (unknown [125.60.233.195])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9CE9B7894B62
for xxxxx; Mon, 11 Jan 2010 21:07:43 +0100 (CET)
Received: from User ([82.128.34.20])
(authenticated user postmaster [at] megapack.net.ph)
by mail.megapack.net.ph (Kerio MailServer 6.4.2);
Mon, 11 Jan 2010 16:36:27 +0800
IP: 82.128.34.20 ---> Multilinks Telecommunications Limited, Nigeria
postmaster [at] megapack.net.ph
kentoxford1 [at] mail2world.com
Muguphon: +17652520479 ---> Level 3 Communications, Llc
Muguphon: +447035930944 ---> Open Telecom International Ltd., UK
Muguphon: +2347092430073 ---> Multilinks Telecommunications Ltd., NG
ein sehr 'geschwätziger' Mailserver:
Received: from WA2EHSNDR006.bigfish.com (unknown [204.231.192.41])
(using TLSv1 with cipher RC4-MD5 (128/128 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 8E0CE78A32C8
for xxxxx; Thu, 14 Jan 2010 19:10:27 +0100 (CET)
Received: from TX2EHSOBE005.bigfish.com (10.2.40.5) by
WA2EHSNDR006.bigfish.com (10.2.40.26) with Microsoft SMTP Server (TLS) id
8.1.340.0; Thu, 14 Jan 2010 18:10:26 +0000
Received: from mail59-tx2-R.bigfish.com (10.9.14.252) by
TX2EHSOBE005.bigfish.com (10.9.40.25) with Microsoft SMTP Server id
8.1.340.0; Thu, 14 Jan 2010 18:10:24 +0000
Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by
mail59-tx2-R.bigfish.com (Postfix) with ESMTP id 8FA8C6C83A2; Thu, 14 Jan
2010 18:10:24 +0000 (UTC)
X-BigFish: VPS97(zz9cddh18a9Kzz1202hzzz2ei6bh87ha7iu221ln)
X-FB-OUTBOUND-SPAM: yes
X-SpamScore: 97
X-FB-DOMAIN-IP-MATCH: fail
Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by mail59-tx2
(MessageSwitch) id 126349261069606_26722; Thu, 14 Jan 2010 18:10:10 +0000
(UTC)
Received: from TX2EHSMHS033.bigfish.com (unknown [10.9.14.253]) by
mail59-tx2.bigfish.com (Postfix) with ESMTP id 40B4011780F4; Thu, 14
Jan 2010
18:10:08 +0000 (UTC)
Received: from mail.kbcallc.com (24.182.31.196) by TX2EHSMHS033.bigfish.com
(10.9.99.133) with Microsoft SMTP Server id 14.0.482.32; Thu, 14 Jan 2010
18:10:07 +0000
Received: from User ([41.217.65.4]) by mail.kbcallc.com with Microsoft
SMTPSVC(6.0.3790.3959); Thu, 14 Jan 2010 10:08:29 -0800
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
atmcardcenter7777 [at] gmail.com
atmcenter1 [at] gmail.com
Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria
- kjz
Der Nachschub rollt:
Received: from fairfieldsvr.Fairfield.local (unknown [213.190.165.72])
by xxxxx (Postfix) with ESMTP id 15A4D78A30A6
for xxxxx; Thu, 14 Jan 2010 00:15:00 +0100 (CET)
Received: from User ([41.217.65.4]) by fairfieldsvr.Fairfield.local with
Microsoft SMTPSVC(5.0.2195.6713);
Wed, 13 Jan 2010 23:08:37 +0000
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
payment [at] ozu.es
Muguphon: +234-806-603-7830 ---> MTN Nigeria Communications Ltd.
Received: from rs26s1.datacenter.cha.cantv.net
(rs26s1.datacenter.cha.cantv.net [200.11.173.17])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 8382478A34FA
for xxxxx; Thu, 14 Jan 2010 16:12:07 +0100 (CET)
X-Virus-Scanned: amavisd-new at cantv.net
X-DNSBL-MILTER: Passed
Received: from cantv.net (rs20s8.datacenter.cha.cantv.net [200.109.127.75])
by rs26s1.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id
o0EEUhWw006257;
Thu, 14 Jan 2010 10:00:43 -0430
X-ORIGINATOR-IP: 41.207.198.182 ---> Adsl-41.207.198.182.aviso.ci
floraaziz [at] cantv.net
die Madrid-Konnektion:
Received: from . (EHLO mx4.hotmail.com) [66.90.109.42]
by mx0.gmx.net (mx039) with SMTP; 14 Jan 2010 23:52:15 +0100
ramonjason1950 [at] aim.com
jasonoliva1950 [at] aim.com
Muguphon: +34 634 140 773 ---> Vodafone España, S.a.u.
Und hier mal ein Mugu-Phiski, der deutsche Uni-Accounts cracken will (abgekübelt wiederum über gecracktes SquirrelMail):
Received: from logan.fop.unicamp.br (logan.fop.unicamp.br [143.106.235.49])
by xxxxx (Postfix) with ESMTP id A66DC78A34B3;
Fri, 15 Jan 2010 09:05:59 +0100 (CET)
Received: from mail.fop.unicamp.br (logan.fop.unicamp.br [143.106.235.49])
by logan.fop.unicamp.br (Postfix) with ESMTP id 00318503A81;
Fri, 15 Jan 2010 04:49:00 -0200 (BRST)
Received: from 41.138.180.200
(SquirrelMail authenticated user ludtavares)
by logan.fop.unicamp.br with HTTP;
Fri, 15 Jan 2010 04:49:00 -0200 (BRST)
IP: 41.138.180.200 ---> Visafone Communications Limited, NG
helpdesk-2010 [at] live.com
ludtavares [at] logan.fop.unicamp.br
Sehr geehrter User Account,
Ihre E-Mail muss mit dem neuen F-Secure ® aktualisiert werden
Anti-virus/Anti-spam HTK4S Version 2010.
Zum Schutz und aktualisieren Sie Ihr Konto mit unserem neuen
Anti-virus/Anti-spam Version, füllen Sie die Spalten aus und klicken Sie
Antwort auf Post zurück oder Ihr Konto wird gesperrt
vorübergehend aus unserem Domain-Services über das Internet.
Benutzername:
Passwort:
Telefon:
Uni-xxxxx.deWeb-Admin
Greg Acheson
https: / / www. webmail.uni-xxxxx.de
- kjz
Return-Path: <drnelmalevu [at] yahoo.com.hk>
X-Original-To: allana [at] xxx...de
Received: from smtp.srv711.twosteps.net (localhost.localdomain [127.0.0.1])
by smtp.srv711.twosteps.net (Postfix) with ESMTP id D982D105CCEF
for <allana [at] xxx..de>; Sun, 17 Jan 2010 09:56:08 +0100 (CET)
X-DKIM: Sendmail DKIM Filter v2.6.0 smtp.srv711.twosteps.net D982D105CCEF
X-Greylist: delayed 701 seconds by postgrey-1.31 at srv711.twosteps.net; Sun, 17 Jan 2010 09:55:47 CET
X-DKIM: Sendmail DKIM Filter v2.6.0 smtp.srv711.twosteps.net DABF5105CCE8
Received: from gamebridge.com.cn (unknown [202.142.17.69])
by smtp.srv711.twosteps.net (Postfix) with ESMTP id DABF5105CCE8
for <allana [at] xxx..de>; Sun, 17 Jan 2010 09:55:47 +0100 (CET)
Received: from User [82.128.22.169] by gamebridge.com.cn with ESMTP
(SMTPD-8.22) id A44B021C; Sat, 16 Jan 2010 03:38:51 +0800
Reply-To: <drnelmalevu [at] live.co.za>
From: "Dr.Nelson Malevu"<drnelmalevu [at] yahoo.com.hk>
Subject: Komplimente der Jahreszeit und des Geschäftsangebots
Date: Fri, 15 Jan 2010 20:39:32 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <201001160339281.SM00472 [at] User>
To: undisclosed-recipients:;
X-AV-Checked: srv208.twosteps.net Inhfr665T
Dr.Nelson Malevu
Pretoria
Südafrika
E-Mail: drnelmalevu [at] live.co.za
FÜR IHRE FREUNDLICHE AUFMERKSAMKEIT:
Ich bin Dr Nelson Malevu, ein Eingeborener Kapstadts in Südafrika, das mit der Südafrikanischen Abteilung des Bergbaus und der Energie arbeitet.
In erster Linie entschuldige ich mich, um dieses Medium zu verwenden, um Sie für eine Transaktion dieses Umfangs zu erreichen, aber das ist wegen der Vertraulichkeit, und schneller Zugang ruhte auf diesem Medium.
Werden Sie informiert, dass ein Mitglied des Handels und der Investition Südafrika (TISA) Promotionsagentur, die ein Teil meiner Regierungsdelegation zu Ihrem Land während einer neuen Handelsausstellung war, Ihren beneidenswerten Ausweis/Einzelheiten mir gab, indem es mich auf Ihrer Befähigung versicherte, eine Geschäftstransaktion zu behandeln, die einen großen Geldbetrag mit der absoluten Vertraulichkeit einschließt.
Deshalb habe ich mich dafür entschieden, eine vertrauliche Zusammenarbeit mit Ihnen in der Ausführung des Geschäfts beschrieben nachstehend zu Gunsten aller Parteien zu suchen, und indem ich hoffe, dass Sie es als Spitzengeheimnis wegen der Natur dieser Transaktion behalten werden.
Innerhalb der Abteilung des Bergbaus und der Energie, wo ich als ein Direktor und mit der Zusammenarbeit von zwei anderen Spitzenbeamten arbeite, haben wir in unserem Besitz, den eine überfällige Vertragszahlung dem Belaufen Sechzehn Millionen, Vierhunderttausend USA-Dollars (16,400,000.00) in Rechnung stellt. Dieses Geld, das wir vorhaben, seine Übertragung als eine Form der Vertragszahlung in eine zuverlässige Rechnung der Gesellschaft/Person abhängig von Ihrer Einrichtung zu bearbeiten.
Ihre Hilfe und Zusammenarbeit sind wegen der Verhältnisse erforderlich, die unsere Arbeit als Staatsangestellte umgeben, wodurch der südafrikanische Code des Öffentlichen Dienstes des Verhaltens uns nicht erlaubt, ein Auslandsbankkonto folglich Ihre Wichtigkeit in der ganzen Transaktion zu bedienen.
Jetzt dieser Betrag (16.4M) führte das Darstellen des Gleichgewichtes des Totalvertragswerts im Auftrag meiner Abteilung durch ein Auslandsvertragsunternehmen durch, das wir, die die Beamten absichtlich überfakturierten, nicht beansprucht im Regierungsübertragungsurkunde-Bankkonto mit der Reservebank Südafrikas lügen. Wir suchen hiermit Ihre Hilfe und Zusammenarbeit, die uns ermöglichen wird, diesen Geldbetrag zu Ihnen als eine Form der Vertragszahlung zu bearbeiten.
Wir haben die notwendige Gewalt gültig zu machen, und Billigungen des hervorragenden Vertrags nachzuschicken, fordert zur Regierung für die Restzahlung zur Ansicht durch die Reservebank Südafrikas (RSBA).
Alle Partner stimmten zu, indem sie mich beauftragten, um vorzuhaben, der Sie sollte, bereit sein, uns bei der Transaktion zu helfen, wird Ihr Anteil der Summe 25 % der 16.4 Millionen sein, 70 % werden für uns und 5 % für irgendwelche Ausgaben zugezogen im Laufe dieses Projektes einschließlich des Telefons sein und Rechnungen faxen.
Das Geschäft selbst ist Safe von 100 % eurerseits, vorausgesetzt dass Sie es mit der am meisten äußersten Geheimhaltung und Vertraulichkeit behandeln. Bemerken Sie auch, dass Ihr Gebiet der Spezialisierung nicht eine Hindernis für die erfolgreiche Ausführung dieser Transaktion ist.
Ich habe mein Vertrauen zu Ihnen geruht, indem ich Ihre schnelle Antwort durch die private E-Mail-Adresse erwarte: drnelmalevu [at] live.co.za oben, um mich Ihrer Fähigkeit bekanntzugeben, uns beim Erzielen des Erfolgs in dieser Transaktion zu helfen.
Schließlich eurerseits werden wir Sie schätzen behandeln diese Transaktion als ein sehr vertraulicher, während wir Sie eines sicheren und vollen Beweises von 100 % freie Transaktion versichern, vorausgesetzt dass Sie unseren Instruktionen völlig folgen.
Ich erwarte Ihre Bestätigung meiner Nachricht, indem ich bete, dass das der Anfang einer lebenslänglichen Partnerschaft zwischen uns sein wird.
Vielen Dank für Ihre Zusammenarbeit.
Hochachtungsvoll,
Dr.Nelson Malevu
Dr.Nelson Malevu
Pretoria
South Africa
Email:drnelmalevu [at] live.co.za
FOR YOUR KIND ATTENTION:
I am Dr.Nelson Malevu, a Native of Cape Town in South Africa working with the South African Department of Mining & Energy.
First and foremost I apologise for using this medium to reach you for a transaction of this magnitude but this is due to confidentiality and prompt access reposed on this medium.
Be informed that a member of the Trade and Investment South Africa (TISA) Promotion Agency, who was part of my government delegation to your country during a recent Trade Exhibition, gave your enviable credentials/particulars to me while assuring me on your competence to handle a business transaction involving a large sum of money with absolute confidentiality.
Therefore I have decided to seek a confidential co-operation with you in the execution of the deal described hereunder for the benefit of all parties and while hoping you will keep it as top secret because of the nature of this transaction.
Within the Department of Mining & Energy where I work as a Director and with the cooperation of two other top officials, we have in our possession an overdue contract payment bills totaling Sixteen Million, Four Hundred Thousand united states dollars (16,400,000.00). This money which we intend to process its transfer as a form of contract payment into a reliable company/individual account depending on your convenience.
Your assistance and co-operation is required due to the circumstances surrounding our work as government officials whereby the South African Civil Service Code of Conduct does not allow us to operate a foreign Bank account hence your importance in the whole transaction.
Presently, this amount (16.4M) representing the balance of the total contract value executed on behalf of my Department by a foreign contracting firm which we the officials over-invoiced deliberately is lying unclaimed in the government escrow bank account with Reserve Bank of South Africa. We hereby seek your assistance and co-operation that will enable us to process this sum of money to you as a form of contract payment.
We have the necessary authority to validate and forward approvals of outstanding contract claims to the government for final payment on approval through the Reserve Bank of South Africa (RSBA).
All partners agreed while mandating me to propose that should you be willing to assist us in the transaction, your share of the sum will be 25% of the 16.4 million,70% will be for us and 5% for any expenses incurred in the course of this project including telephone and fax bills.
The business itself is 100% safe on your part provided you treat it with utmost secrecy and confidentiality. Also note that your area of specialisation is not an hindrance to the successful execution of this transaction.
I have reposed my confidence in you while awaiting your prompt response through the private email address: drnelmalevu [at] live.co.za above to notify me of your capability to assist us in achieving success in this transaction.
Finally on your part, we will appreciate you treat this transaction as a very confidential one while we assure you of a 100% safe and full proof free transaction provided you follow our instructions totally.
I await your confirmation of my message while praying that this will be the beginning of a lifelong partnership between us.
Thank you for your co-operation.
Yours faithfully,
Dr.Nelson Malevu
IP: http://www.ip-adress.com/whois/82.128.22.169
Den Namen hat er wohl gewählt, damit man an Nelson Mandela denkt und gleich Vertrauen hat ... Ich könnte nur k***n ....
VG
Allana
Immer weiter....
Received: from WA2EHSNDR006.bigfish.com (unknown [204.231.192.41])
(using TLSv1 with cipher RC4-MD5 (128/128 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 8E0CE78A32C8
for xxxxx; Thu, 14 Jan 2010 19:10:27 +0100 (CET)
Received: from TX2EHSOBE005.bigfish.com (10.2.40.5) by
WA2EHSNDR006.bigfish.com (10.2.40.26) with Microsoft SMTP Server (TLS) id
8.1.340.0; Thu, 14 Jan 2010 18:10:26 +0000
Received: from mail59-tx2-R.bigfish.com (10.9.14.252) by
TX2EHSOBE005.bigfish.com (10.9.40.25) with Microsoft SMTP Server id
8.1.340.0; Thu, 14 Jan 2010 18:10:24 +0000
Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by
mail59-tx2-R.bigfish.com (Postfix) with ESMTP id 8FA8C6C83A2; Thu, 14 Jan
2010 18:10:24 +0000 (UTC)
Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by mail59-tx2
(MessageSwitch) id 126349261069606_26722; Thu, 14 Jan 2010 18:10:10 +0000
(UTC)
Received: from TX2EHSMHS033.bigfish.com (unknown [10.9.14.253]) by
mail59-tx2.bigfish.com (Postfix) with ESMTP id 40B4011780F4; Thu, 14
Jan 2010
18:10:08 +0000 (UTC)
Received: from mail.kbcallc.com (24.182.31.196) by TX2EHSMHS033.bigfish.com
(10.9.99.133) with Microsoft SMTP Server id 14.0.482.32; Thu, 14 Jan 2010
18:10:07 +0000
Received: from User ([41.217.65.4]) by mail.kbcallc.com with Microsoft
SMTPSVC(6.0.3790.3959); Thu, 14 Jan 2010 10:08:29 -0800
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
atmcenter1 [at] gmail.com
atmcardcenter7777 [at] gmail.com
Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria
Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1])
by xxxxx (Postfix) with ESMTP id 4D24A78A234F
for xxxxx; Sat, 16 Jan 2010 01:10:56 +0100 (CET)
Received: from filter.sfr.fr (localhost [127.0.0.1])
by msfrf2102.sfr.fr (SMTP Server) with ESMTP id 2387D7000087;
Sat, 16 Jan 2010 01:10:56 +0100 (CET)
Received: from User (unknown [124.237.86.62])
by msfrf2102.sfr.fr (SMTP Server) with ESMTP id B063C7000086;
Sat, 16 Jan 2010 01:10:21 +0100 (CET)
IP: 124.237.86.62 ---> CHINANET hebei
hannahstone0 [at] gmail.com
stonehannah70 [at] yahoo.com
Muguphon: +60176957004 ---> Maxis Mobile (Binariang), Malaysia
Received: from mail.vinacafebienhoa.com (EHLO
VinaCafe.vinacafebienhoa.com) [210.245.121.42]
by mx0.gmx.net (mx110) with SMTP; 17 Jan 2010 09:00:57 +0100
Received: from User ([41.217.65.4]) by VinaCafe.vinacafebienhoa.com with
Microsoft SMTPSVC(6.0.3790.3959);
Sun, 17 Jan 2010 14:47:07 +0700
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
barrygregory663 [at] gmail.com
roqzba111 [at] gmail.com
Received: from n78.bullet.mail.sp1.yahoo.com
(n78.bullet.mail.sp1.yahoo.com [98.136.44.42])
by xxxxx (Postfix) with SMTP id 2188578940B4
for xxxxx; Sun, 17 Jan 2010 15:02:33 +0100 (CET)
Received: from [216.252.122.219] by n78.bullet.mail.sp1.yahoo.com with
NNFMP; 17 Jan 2010 14:02:33 -0000
Received: from [67.195.9.83] by t4.bullet.sp1.yahoo.com with NNFMP; 17
Jan 2010 14:02:33 -0000
Received: from [67.195.9.99] by t3.bullet.mail.gq1.yahoo.com with NNFMP;
17 Jan 2010 14:02:33 -0000
Received: from [127.0.0.1] by omp103.mail.gq1.yahoo.com with NNFMP; 17
Jan 2010 14:02:33 -0000
Received: from [41.203.228.63] by web112902.mail.gq1.yahoo.com via HTTP;
Sun, 17 Jan 2010 06:02:32 PST
IP: 41.203.228.63 ---> ONATEL, BF
shalom_sankara01 [at] sify.com
shalom_sankara [at] sify.com
- kjz
Die Woche fängt wieder gut an....
gecracktes SquirrelMail:
Received: from mail.jkm.gov.my (HELO mail.jkm.gov.my) [202.190.74.101]
by mx0.gmx.net (mx002) with SMTP; 18 Jan 2010 08:40:30 +0100
Received: (qmail 26111 invoked by uid 1009); 17 Jan 2010 14:57:34 -0000
Received: from 127.0.0.1 by mail (envelope-from <yukking [at] jkm.gov.my>,
uid 89) with qmail-scanner-1.25-st-qms
(clamdscan: 0.67. spamassassin: 2.63. perlscan: 1.25-st-qms.
Clear:RC:1(127.0.0.1):.
Processed in 0.05967 secs); 17 Jan 2010 14:57:34 -0000
X-Antivirus-MYDOMAIN-Mail-From: yukking [at] jkm.gov.my via mail
X-Antivirus-MYDOMAIN: 1.25-st-qms (Clear:RC:1(127.0.0.1):. Processed in
0.05967 secs Process 26105)
Received: from localhost (HELO mailjkm.jkm.gov.my) (127.0.0.1)
by mail.jkm.gov.my with SMTP; 17 Jan 2010 14:57:34 -0000
Received: from 80.239.242.62 (proxying for 82.128.86.38)
(SquirrelMail authenticated user yukking)
by mailjkm.jkm.gov.my with HTTP;
Sun, 17 Jan 2010 22:57:34 +0800 (MYT)
Received: from mail.jkm.gov.my (HELO mail.jkm.gov.my) [202.190.74.101]
by mx0.gmx.net (mx015) with SMTP; 18 Jan 2010 08:47:35 +0100
Received: (qmail 26285 invoked by uid 1009); 17 Jan 2010 14:58:16 -0000
Received: from 127.0.0.1 by mail (envelope-from <yukking [at] jkm.gov.my>,
uid 89) with qmail-scanner-1.25-st-qms
(clamdscan: 0.67. spamassassin: 2.63. perlscan: 1.25-st-qms.
Clear:RC:1(127.0.0.1):.
Processed in 0.059812 secs); 17 Jan 2010 14:58:16 -0000
X-Antivirus-MYDOMAIN-Mail-From: yukking [at] jkm.gov.my via mail
X-Antivirus-MYDOMAIN: 1.25-st-qms (Clear:RC:1(127.0.0.1):. Processed in
0.059812 secs Process 26279)
Received: from localhost (HELO mailjkm.jkm.gov.my) (127.0.0.1)
by mail.jkm.gov.my with SMTP; 17 Jan 2010 14:58:16 -0000
Received: from 80.239.242.62 (proxying for 82.128.86.38)
(SquirrelMail authenticated user yukking)
by mailjkm.jkm.gov.my with HTTP;
Sun, 17 Jan 2010 22:58:16 +0800 (MYT)
IP: 82.128.86.38 ---> Multilinks Telecommunications Limited, Nigeria
yukking [at] jkm.gov.my
emirate.jamesstewart [at] advir.com
claims.emirates.authentication [at] advir.com
Received: from mail.jinqiuzhu.com (unknown [58.222.254.37])
by xxxxx (Postfix) with SMTP id 7AFE078A4320
for xxxxx; Mon, 18 Jan 2010 13:24:45 +0100 (CET)
Received: from User ([41.221.166.146])
(envelope-sender <undirector [at] un.org>)
by 58.222.254.37 with ESMTP
for <kzicrunch [at] yahoo.com>; Mon, 18 Jan 2010 18:23:22 +0800
IP: 41.221.166.146 ---> SWIFT NETWORKS, Nigeria
john-tucker-un [at] live.com
Muguphon: +1-202-552-1589 ---> Paetec Communications, Inc.
Received: from w2k3server.hongfok.com.sg (mail1.hongfok.com.sg
[58.185.27.218])
by xxxxx (Postfix) with SMTP id 676777800AD7
for xxxxx; Tue, 19 Jan 2010 05:00:23 +0100 (CET)
Received: from User ([82.128.20.43]) by w2k3server.hongfok.com.sg with
Microsoft SMTPSVC(6.0.3790.1830);
Tue, 19 Jan 2010 06:56:32 +0800
IP: 82.128.20.43 ---> Multilinks Telecommunications Limited, Nigeria
sgtarthurhugo111 [at] aim.com
arxsghu001 [at] live.com
Received: from mail.mindresearch.net (unknown [216.39.110.199])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C300C78A2C4E
for xxxxx; Wed, 20 Jan 2010 05:37:08 +0100 (CET)
Received: from test ([196.46.246.21])
(authenticated user test [at] mindresearch.net)
by mail.mindresearch.net (Kerio MailServer 6.7.2);
Tue, 19 Jan 2010 15:35:15 -0800
IP: 196.46.246.21 ---> Vee Network Limited, Nigeria
test [at] mindresearch.net
lg.org [at] sify.com
lg-uk [at] i12.com
die Madrid-Konnektion:
Received: from mail.oblpo.ru (mail.oblpo.ru [77.106.20.158])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 758BC7894084
for xxxxx; Wed, 20 Jan 2010 09:00:21 +0100 (CET)
Received: from User (230.96.219.87.dynamic.jazztel.es [87.219.96.230])
by mail.oblpo.ru (Postfix) with ESMTPA id 46064254FB3;
Sun, 17 Jan 2010 02:39:31 +0300 (MSK)
IP: 87.219.96.230 ---> Jazztel, ES
petrovvladimirrazduk [at] hotmail.ru
petrovladimirrazduk [at] hotmail.ru
Received: from insurancecheapquotes.com (insurancecheapquotes.com
[67.212.226.115])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A8B9B78A3D17
for xxxxx; Wed, 20 Jan 2010 11:33:35 +0100 (CET)
Received: from User (mail.eufemis.com.ar [200.49.143.226])
(authenticated bits=0)
by insurancecheapquotes.com (8.13.1/8.13.1) with ESMTP id o0K3g1Yv018683;
Tue, 19 Jan 2010 20:42:17 -0700
accessjohn [at] consultant.com
Muguphon: +886-3-6661188 ---> Chunan (Tchou-Nan), TW
Received: from w2k3server.hongfok.com.sg (mail1.hongfok.com.sg
[58.185.27.218])
by xxxxx (Postfix) with SMTP id 25A1878A34F9
for xxxxx; Wed, 20 Jan 2010 14:16:50 +0100 (CET)
Received: from User ([82.128.22.214]) by w2k3server.hongfok.com.sg with
Microsoft SMTPSVC(6.0.3790.1830);
Wed, 20 Jan 2010 09:48:50 +0800
IP: 82.128.22.214 ---> ml82.128.22.214.multilinks.com, Nigeria
sgt.arthurhugo1001 [at] aol.in
sgt.athurhugo [at] aol.in
Und eines wird allmählich auch immer deutlicher: Multilinks in Nigeria hat entweder den Überblick über den eigenen Laden praktisch vollständig verloren oder man macht vorsätzlich Geschäfte mit Kriminellen bzw. ist von diesen völlig unterwandert.
- kjz
Es gibt wieder Nachschub:
Dauermugu Nr.2:
Received: from WA2EHSNDR006.bigfish.com (unknown [204.231.192.41])
(using TLSv1 with cipher RC4-MD5 (128/128 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 8E0CE78A32C8
for xxxxx; Thu, 14 Jan 2010 19:10:27 +0100 (CET)
Received: from TX2EHSOBE005.bigfish.com (10.2.40.5) by
WA2EHSNDR006.bigfish.com (10.2.40.26) with Microsoft SMTP Server (TLS) id
8.1.340.0; Thu, 14 Jan 2010 18:10:26 +0000
Received: from mail59-tx2-R.bigfish.com (10.9.14.252) by
TX2EHSOBE005.bigfish.com (10.9.40.25) with Microsoft SMTP Server id
8.1.340.0; Thu, 14 Jan 2010 18:10:24 +0000
Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by
mail59-tx2-R.bigfish.com (Postfix) with ESMTP id 8FA8C6C83A2; Thu, 14 Jan
2010 18:10:24 +0000 (UTC)
Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by mail59-tx2
(MessageSwitch) id 126349261069606_26722; Thu, 14 Jan 2010 18:10:10 +0000
(UTC)
Received: from TX2EHSMHS033.bigfish.com (unknown [10.9.14.253]) by
mail59-tx2.bigfish.com (Postfix) with ESMTP id 40B4011780F4; Thu, 14
Jan 2010
18:10:08 +0000 (UTC)
Received: from mail.kbcallc.com (24.182.31.196) by TX2EHSMHS033.bigfish.com
(10.9.99.133) with Microsoft SMTP Server id 14.0.482.32; Thu, 14 Jan 2010
18:10:07 +0000
Received: from User ([41.217.65.4]) by mail.kbcallc.com with Microsoft
SMTPSVC(6.0.3790.3959); Thu, 14 Jan 2010 10:08:29 -0800
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
atmcardcenter7777 [at] gmail.com
atmcenter1 [at] gmail.com
Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria
Received: from mail.hzbank.com.cn (mail.hzbank.com.cn [60.191.117.248])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9174478019C2
for xxxxx; Sat, 23 Jan 2010 04:20:41 +0100 (CET)
Received: (qmail 2041 invoked by uid 89); 22 Jan 2010 01:11:33 -0000
Received: from unknown (HELO User) (test [at] 41.217.65.3)
by 0 with SMTP; 22 Jan 2010 01:11:33 -0000
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
clarakaplin1 [at] gmail.com
Muguphon: +234-808-026-0723 ---> Celtel Nigeria Limited/Zain
Received: from mail.uphcm.edu.vn (unknown [210.245.122.6])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AA09978A34F9
for xxxxx; Sun, 24 Jan 2010 06:45:15 +0100 (CET)
Received: from User ([41.217.65.3])
by mail.uphcm.edu.vn (IceWarp 9.2.1) with ASMTP id EFY78134;
Fri, 22 Jan 2010 11:02:34 +0700
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
mariocarlosesq [at] sify.com
Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6B23278A3252
for xxxxx; Sun, 24 Jan 2010 10:10:46 +0100 (CET)
Received: (qmail 30407 invoked by uid 1542); 23 Jan 2010 10:59:59 -0000
Received: by simscan 1.3.1 ppid: 28543, pid: 30344, t: 0.3872s
scanners: attach: 1.3.1 clamav: 0.92.1
/m:
Received: from unknown (HELO User) (summer [at] 80.194.50.173)
by smtp4.digitalpath.net with ESMTPA; 23 Jan 2010 10:59:58 -0000
IP: 80.194.50.173 ---> sw1capital.com/virginmedia.co.uk
andwalter11 [at] gala.net
andwalter [at] yahoo.co.uk
Received: from dns.okumura.to (218-228-196-207.eonet.ne.jp
[218.228.196.207])
by xxxxx (Postfix) with ESMTP id 8CD9478A34BB
for xxxxx; Sun, 24 Jan 2010 01:28:51 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by dns.okumura.to (Postfix) with ESMTP id 6C27F179BE5C;
Sun, 24 Jan 2010 07:24:01 +0900 (JST)
X-Virus-Scanned: amavisd-new at okumura.to
Received: from dns.okumura.to ([127.0.0.1])
by localhost (dns.okumura.to [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id WlYrzywcKwM7; Sun, 24 Jan 2010 07:24:01 +0900 (JST)
Received: from User (unknown [82.128.35.206])
by dns.okumura.to (Postfix) with ESMTP id 488E8179BDC2;
Sun, 24 Jan 2010 07:22:37 +0900 (JST)
IP: 82.128.35.206 ---> Multilinks Telecommunications Limited, Nigeria
dav.stitson [at] googlemail.com
dav.stitson [at] gmail.com
die Madrid-Konnektion:
Received: from mail.oblpo.ru (mail.oblpo.ru [77.106.20.158])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A01A678A32C8
for xxxxx; Sun, 24 Jan 2010 05:46:08 +0100 (CET)
Received: from User (230.96.219.87.dynamic.jazztel.es [87.219.96.230])
by mail.oblpo.ru (Postfix) with ESMTPA id 8503032B27C;
Fri, 22 Jan 2010 01:54:50 +0300 (MSK)
petrovvladimirrazduk [at] hotmail.ru
wieder die Madrid-Konnektion:
Received: from impaqm1.telefonica.net (EHLO IMPaqm1.telefonica.net)
[213.4.129.21]
by mx0.gmx.net (mx036) with SMTP; 24 Jan 2010 02:08:14 +0100
Received: from IMPmailhost2.adm.correo ([10.20.102.39])
by IMPaqm1.telefonica.net with bizsmtp
id ZCZW1d00S0r0BT601D8EGN; Sun, 24 Jan 2010 02:08:14 +0100
Received: from User ([95.16.201.169])
by IMPmailhost2.adm.correo with BIZ IMP
id ZD8C1d0023fndLX1iD8C6K; Sun, 24 Jan 2010 02:08:14 +0100
IP: 95.16.201.169 ---> 169.201.16.95.dynamic.jazztel.es
lotfeliznavid [at] terra.es
atlanticogrupo [at] mycin.net
Muguphon: +34 634 127 318 ---> Vodafone España, S.a.u.
Mugufax: +34 917 692 707 ---> Colt Telecom España, S.a.
die Amsterdam-Konnektion:
Received: from imsantv72.netvigator.com (imsantv72.netvigator.com
[210.87.250.172])
by xxxxx (Postfix) with ESMTP id AFD1378019C2
for xxxxx; Sat, 23 Jan 2010 22:52:12 +0100 (CET)
Received: from imsantv35.netvigator.com (imsantv35b.netvigator.com
[210.87.247.27])
by imsantv72.netvigator.com (8.14.2/8.14.2) with ESMTP id o0NLGwk4021570
for xxxxx; Sun, 24 Jan 2010 05:17:16 +0800
Received: from [210.87.253.108] ([210.87.253.108:40538]
helo=imsantv51.netvigator.com)
by imsantv35 (envelope-from <grantawdpzdesk2 [at] live.nl>)
(ecelerity 2.2.2.40 r(29895/29896)) with ESMTP
id 87/38-24078-B576B5B4; Sun, 24 Jan 2010 05:17:15 +0800
Received: from mailserver.eternal.com.hk
(162.180.198.203.static.netvigator.com [203.198.180.162])
by imsantv51.netvigator.com (8.14.3/8.14.3) with ESMTP id o0NLGhU2001995;
Sun, 24 Jan 2010 05:16:43 +0800
Received: from User ([80.56.1.175] RDNS failed) by
mailserver.eternal.com.hk with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 24 Jan 2010 05:16:20 +0800
IP: 80.56.1.175 ---> f1175.upc-f.chello.nl
grantawdpzdesk1 [at] live.com
grantawdpzdesk2 [at] live.nl
carlandersondesk7 [at] live.com
Muguphon: +31 644 225 020 ---> Telfort B.V., NL
Mugufax: +31 847 385 694 ---> J2 Global (Netherlands) B.V./Jump/efax
- kjz
Im weiteren:
Received: from svr02.SCO_SIN.local (unknown [203.120.246.243])
by xxxxx (Postfix) with SMTP id 785BD78A2C72
for xxxxx; Fri, 22 Jan 2010 02:05:58 +0100 (CET)
Received: from User ([117.25.131.138]) by svr02.SCO_SIN.local with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 22 Jan 2010 08:23:33 +0800
Ausnahmsweise auch mal der Text, da so schön perfide....
Dearest,
My name is Rosemary Collins, I live at 8763 Pelican Dr.La Grange IL
60525,United States.
I am one of those that executed a contract in Nigeria years ago and they
refused to pay me, I had paid over $70,000USD trying to get my payment
all to no avail.
Somebody directed me to travel down to Nigeria with all my contract
documents to meet Barrister Mat Oto who is the member of CONTRACT
PAYMENT COMMITTEE and LEGAL ADVISER to the COMMITTEE, and I contacted
him and he explained everything to me on telephone and advised me to
come down to Nigeria which I did.
He said that those contacting us through emails are fake. Then he took
me to the paying bank, which is Oceanic Bank Plc, and I am the happiest
woman on this earth because I have received my contract funds of
$8.2Million USD.
On the process of searching for my file,I saw your information on
awaiting payment list in the office of Barrister Mat Oto.Though I did
not capture all your information lest your fax number.
Am sorry contacting you late as I planed doing it as soon as I arrive
back USA.
I have been so busy because we are trying to set up a factory here with
the money we received.
So if you care,do contact Barrister Mat Oto with the information below
and just explain yourself to him as I know he is honest and humble person.
Alternatively mention my name to him he will attend to you.
Name: Barrister John Aboh
Email: rev.john12aboh [at] gala.com
phone number +234-709-079-4076
Address: 123,Palm Avenue Palm Grove,
Lagos Nigeria.
IP: 117.25.131.138 ---> CHINANET Fujian
rosemarycollins [at] gala.net
rev.john12aboh [at] gala.net
Muguphon: +234-709-079-4076 ---> Multilinks Telecommunications Ltd., Nigeria
Received: from n14-vm0.bullet.mail.in.yahoo.com
(n14-vm0.bullet.mail.in.yahoo.com [202.86.5.219])
by xxxxx (Postfix) with SMTP id E621D7800AD7
for xxxxx; Fri, 22 Jan 2010 04:52:30 +0100 (CET)
Received: from [202.43.219.99] by n14.bullet.mail.in.yahoo.com with
NNFMP; 22 Jan 2010 03:52:29 -0000
Received: from [203.104.18.55] by t3.bullet.in.yahoo.com with NNFMP; 22
Jan 2010 03:52:29 -0000
Received: from [127.0.0.1] by omp107.mail.in2.yahoo.com with NNFMP; 22
Jan 2010 03:52:29 -0000
Received: (qmail 41439 invoked by uid 60001); 22 Jan 2010 03:52:29 -0000
Received: from [41.203.230.144] by web95704.mail.in.yahoo.com via HTTP;
Fri, 22 Jan 2010 09:22:29 IST
IP: 41.203.230.144 ---> ONATEL, BF
mazenmalaki1 [at] hotmail.com
malakimazen2000 [at] gmail.com
Received: from CharlotteAMA.com (mail.charlotteama.com [75.77.82.74])
by xxxxx (Postfix) with ESMTP id DAF2178A3BCE
for xxxxx; Fri, 22 Jan 2010 11:36:11 +0100 (CET)
Received: from User [41.138.183.159] by CharlotteAMA.com with ESMTP
(SMTPD-8.21) id A89012684; Fri, 22 Jan 2010 01:41:20 -0500
IP: 41.138.183.159 ---> Visafone Communications Limited, Nigeria
crystalfinances [at] gmail.com
crystalfinances [at] gmail.com
Muguphon: +447011120916 ---> PNC Telecom Services Limited, UK
Muguphon: +1-206-339-1057 ---> International Telcom, Ltd.
Mugufax: +1-206-309-3625 ---> International Telcom, Ltd.
- kjz
Die Reihe setzt sich fort mit:
der 'gelbe' Mugu ist wohl doch etwas dunkler:
Received: from mailout05.server.ibbs.com (mailout05.ibbsonline.com
[209.55.3.209])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 147E678A3BA9
for xxxxx; Mon, 25 Jan 2010 02:21:34 +0100 (CET)
Received: from ex-relay-out01.server.ibbs.com ([10.1.200.80]
helo=ex-relay-out01.server.ibssonline.com)
by mailout05.server.ibbs.com with esmtp (Exim 4.69)
(envelope-from <liu.tsai04 [at] yahoo.com.hk>)
id 1NYwJK-0004nn-Lb; Sat, 23 Jan 2010 22:51:02 -0800
Received: from [209.55.3.59] (helo=atmail)
by ex-relay-out01.server.ibssonline.com with SMTP (eXpurgate 3.1.2)
(envelope-from <liu.tsai04 [at] yahoo.com.hk>)
id 4b5bed9e-4fe6-d137033be488-2
for <multiple-recipients>; Sat, 23 Jan 2010 22:50:06 -0800
X-Origin: 41.218.233.72 ---> vfbb23372.4u.com.gh
liu.tsai04 [at] yahoo.com.hk
liu-tsai [at] live.hk
über Mugu-Satellit in IL:
Received: from 81.199.151.11.satcom-systems.net (EHLO mx4.hotmail.com)
[81.199.151.11]
by mx0.gmx.net (mx036) with SMTP; 25 Jan 2010 02:36:47 +0100
benning_1o1 [at] yahoo.com
der Dauer-Mugu 2:
Received: from serrurierlacroix.com
(s82.n39.n84.n66.static.myhostcenter.com [66.84.39.82])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 35EB778A33D9
for xxxxx; Mon, 25 Jan 2010 04:04:19 +0100 (CET)
Received: from User ([41.217.65.4])
(authenticated bits=0)
by serrurierlacroix.com (8.13.1/8.13.1) with ESMTP id o0P32P1I021047;
Sun, 24 Jan 2010 22:02:29 -0500
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
atmcenter1 [at] gmail.com
atmcardcenter0011 [at] gmail.com
Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria
wieder vom Mugu-Satellit in IL:
Received: from 81.199.151.11.satcom-systems.net (EHLO mx4.hotmail.com)
[81.199.151.11]
by mx0.gmx.net (mx038) with SMTP; 25 Jan 2010 23:25:41 +0100
david_benning20 [at] yahoo.com.hk
Received: from smtp19.orange.fr (EHLO smtp19.orange.fr) [80.12.242.18]
by mx0.gmx.net (mx001) with SMTP; 27 Jan 2010 04:46:41 +0100
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf1924.orange.fr (SMTP Server) with ESMTP id A91B82007A64;
Wed, 27 Jan 2010 03:36:34 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf1924.orange.fr (SMTP Server) with ESMTP id B2AE22036423;
Wed, 27 Jan 2010 01:57:56 +0100 (CET)
Received: from ciid.fr
(LAubervilliers-151-12-1-144.w193-252.abo.wanadoo.fr [193.252.48.144])
by mwinf1924.orange.fr (SMTP Server) with ESMTP id 51C322042605;
Tue, 26 Jan 2010 23:01:48 +0100 (CET)
Received: from User ([174.89.149.219]) by ciid.fr with Microsoft
SMTPSVC(6.0.3790.3959);
Tue, 26 Jan 2010 23:01:47 +0100
customsofficials1 [at] yahoo.co.jp
Received: from mail.sh-telecom.com (unknown [202.109.112.29])
by xxxxx (Postfix) with ESMTP id 40E1078A3BD8
for xxxxx; Wed, 27 Jan 2010 14:04:23 +0100 (CET)
Received: from [41.138.180.24] (account lisa [at] sh-telecom.com HELO User)
by mail.sh-telecom.com (CommuniGate Pro SMTP 3.5.9)
with ESMTP id 21549649; Wed, 27 Jan 2010 04:04:28 +0800
IP: 41.138.180.24 ---> Visafone Communications Limited, NG
lisa [at] sh-telecom.com
cbn.wire [at] i12.com
m.osa1 [at] i12.com
Muguphon: +234-702-535-6240 ---> Visafone Communications Ltd., Nigeria
- kjz
Und immer, immer wieder sind die Muuuugus daaa...
Dauer-Mugu 2 sollte sich auch mal was Neues einfallen lassen:
Received: from serrurierlacroix.com
(s82.n39.n84.n66.static.myhostcenter.com [66.84.39.82])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 3689D78A318F
for xxxxx; Mon, 25 Jan 2010 17:53:13 +0100 (CET)
Received: from User ([41.217.65.3])
(authenticated bits=0)
by serrurierlacroix.com (8.13.1/8.13.1) with ESMTP id o0PGp81w007390;
Mon, 25 Jan 2010 11:51:12 -0500
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
atmcenter1 [at] gmail.com
atmcardcenter999 [at] gmail.com
Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria
Received: from server.wb.local (fuwah.org [121.15.254.218])
by xxxxx (Postfix) with ESMTP id AD2D078A3CEF
for xxxxx; Mon, 25 Jan 2010 18:39:27 +0100 (CET)
Received: from User ([41.217.65.3] RDNS failed) by server.wb.local with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 26 Jan 2010 01:10:52 +0800
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
Interessant auch das Whois für diese IP:
remarks: +---------------------------------------+
remarks: | |
remarks: | ATTENTION !! |
remarks: | ============ |
remarks: | |
remarks: | THIS RESOURCE WILL BE DELETED AND |
remarks: | RECLAIMED ON 24-JAN-2010. PLEASE |
remarks: | CONTACT BILLING [at] AFRINIC.NET FOR |
remarks: | ADDITIONAL INFORMATION. |
remarks: | |
remarks: +---------------------------------------+
Ihre Rechnungen bezahlen die Mugu-Provider natürlich auch nicht.
(warum auch, das ganze 'Geschäftsmodell' baut ja auf Lug und Trug auf...)
ab_debe27 [at] yahoo.com.hk
ab_debe18 [at] yahoo.com.hk
adebe90 [at] yahoo.com
die Madrid-Konnektion:
Received: from User ([84.77.129.55])
(authenticated bits=0)
by www.elanbase.com (8.14.3/8.14.3) with ESMTP id o0PAxQnW027825;
Mon, 25 Jan 2010 18:59:30 +0800 (CST)
IP: 84.77.129.55 ---> YACOMNET, ES/Orange
davidc [at] councellor.com
Muguphon: +34-692283669 ---> France Telecom España, S.a./Orange
Mugufax: +34 912919842 ---> Jazz Telecom, S.a.u.
Received: from w2k3server.hongfok.com.sg (mail1.hongfok.com.sg
[58.185.27.218])
by xxxxx (Postfix) with SMTP id F0DF37811250
for xxxxx; Wed, 27 Jan 2010 17:06:54 +0100 (CET)
Received: from User ([82.128.22.203]) by w2k3server.hongfok.com.sg with
Microsoft SMTPSVC(6.0.3790.1830);
Wed, 27 Jan 2010 20:28:07 +0800
IP: 82.128.22.203 ---> ml82.128.22.203.multilinks.com, Nigeria
webboffice011 [at] yahoo.co.th
rev_chrismartin [at] sify.com
- kjz
So, die nächste Lieferung rollt:
die Amsterdam-Konnektion mit gecracktem SquirrelMail, da hilft dann weder Sophos noch Ironport:
Received: from mx.educacional.com.br (ironport1-mx.educacional.com.br
[200.186.179.64])
by xxxxx (Postfix) with ESMTP id DC6AD78A3C4F
for xxxxx; Thu, 28 Jan 2010 17:40:49 +0100 (CET)
X-IronPort-AV: E=Sophos;i="4.49,361,1262570400";
d="scan'208";a="86096924"
Received: from 82.179.186.200.sta.positivo.com.br (HELO
webmail.up.edu.br) ([200.186.179.82])
by smtp.educacional.com.br with ESMTP; 28 Jan 2010 14:40:40 -0200
Received: from 192.168.100.35 (proxying for 92.67.178.66)
(SquirrelMail authenticated user practice [at] up.edu.br);
by webmail.up.edu.br with HTTP;
Thu, 28 Jan 2010 14:19:34 -0200 (BRST)
Received: from mx.educacional.com.br (ironport1-mx.educacional.com.br
[200.186.179.64])
by xxxxx (Postfix) with ESMTP id 9080F78A32D7
for xxxxx; Thu, 28 Jan 2010 15:58:50 +0100 (CET)
X-IronPort-AV: E=Sophos;i="4.49,360,1262570400";
d="scan'208";a="86084731"
Received: from 82.179.186.200.sta.positivo.com.br (HELO
webmail.up.edu.br) ([200.186.179.82])
by smtp.educacional.com.br with ESMTP; 28 Jan 2010 12:47:31 -0200
Received: from 192.168.100.35 (proxying for 92.67.178.66)
(SquirrelMail authenticated user practice [at] up.edu.br);
by webmail.up.edu.br with HTTP;
Thu, 28 Jan 2010 12:26:24 -0200 (BRST)
IP: 92.67.178.66 ---> static.kpn.net
practice [at] up.edu.br
fdjeulot [at] aim.com
fdfileofficer [at] aol.com
Muguphon: +31-619-221-392 ---> Telfort B.V.,NL
Mugufax: +31-84 717 1925 ---> J2 Global (Netherlands) B.V.
Auch Freenet ist dabei:
Received: from mout3.freenet.de (EHLO mout3.freenet.de) [195.4.92.93]
by mx0.gmx.net (mx069) with SMTP; 29 Jan 2010 17:24:11 +0100
Received: from [195.4.92.11] (helo=1.mx.freenet.de)
by mout3.freenet.de with esmtpa (ID addition4 [at] goldmail.de) (port 25)
(Exim 4.70 #1)
id 1Natdh-0000dC-VQ; Fri, 29 Jan 2010 17:24:09 +0100
Received: from h-213-80-118-132.na.cust.bahnhof.se
([213.80.118.132]:1660 helo=User)
by 1.mx.freenet.de with esmtpa (ID addition4 [at] goldmail.de) (port 25)
(Exim 4.69 #94)
id 1Natdh-0000zV-9J; Fri, 29 Jan 2010 17:24:09 +0100
addition4 [at] goldmail.de
infoboc.china1 [at] gmail.com
bankofchina2010 [at] sify.com
Received: from ns3.9experts.com
(static-54-6.worldinternetworkcorporation.com [202.44.54.6])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5A90078810D5
for xxxxx; Fri, 29 Jan 2010 21:36:06 +0100 (CET)
Received: (qmail 14806 invoked from network); 27 Jan 2010 22:40:40 -0000
Received: from unknown (HELO User) (41.217.65.4)
by static-54-7.worldinternetworkcorporation.com with SMTP; 27 Jan 2010
22:40:40 -0000
Received: from ns3.9experts.com
(static-54-6.worldinternetworkcorporation.com [202.44.54.6])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 92C7178A30BC
for xxxxx; Sat, 30 Jan 2010 20:29:21 +0100 (CET)
Received: (qmail 30744 invoked from network); 29 Jan 2010 22:38:17 -0000
Received: from unknown (HELO User) (41.217.65.4)
by static-54-7.worldinternetworkcorporation.com with SMTP; 29 Jan 2010
22:38:17 -0000
Received: from pgengineering.com
(s41.n57.n84.n66.static.myhostcenter.com [66.84.57.41])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0196E789AA08
for xxxxx; Sat, 30 Jan 2010 23:11:53 +0100 (CET)
Received: from User ([41.217.65.4])
(authenticated bits=0)
by pgengineering.com (8.13.1/8.13.1) with ESMTP id o0UM9ppj007474;
Sat, 30 Jan 2010 17:09:57 -0500
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
barredward.godwin40 [at] gmail.com
ed.godwin010 [at] yahoo.com
Muguphon: +2348038828069 ---> MTN Nigeria Communications Ltd.
Received: from mail.clhb.com.bo (unknown [200.87.203.102])
by xxxxx (Postfix) with ESMTP id 78218789AA14;
Sat, 30 Jan 2010 04:14:15 +0100 (CET)
mirenaradu [at] live.com
clhb [at] clhb.com.bo
dia Amsterdam-Konnektion:
Received: from fletcherandfriends.com (unknown [216.117.140.151])
by xxxxx (Postfix) with ESMTP id D478978A3BA8
for xxxxx; Sat, 30 Jan 2010 11:23:37 +0100 (CET)
Received: from User [62.140.137.153] by fletcherandfriends.com with ESMTP
(SMTPD32-8.05) id A7E512D000C4; Fri, 29 Jan 2010 22:30:45 -0500
IP: 62.140.137.153 ---> VODAFONE-NL
sarahmay2001 [at] aol.com
infosahmay1 [at] aol.com
Received: from barracuda.lead-mgt.com (unknown [203.125.0.146])
by xxxxx (Postfix) with ESMTP id BB40F78A30BC
for xxxxx; Sat, 30 Jan 2010 20:34:08 +0100 (CET)
X-ASG-Debug-ID: 1264878233-50b001740001-c6xLB0
Received: from lmserver1.lead-mgt.local ([192.168.100.1]) by
barracuda.lead-mgt.com with ESMTP id 5wqwxxBGJlgIUXjZ for
xxxxx; Sun, 31 Jan 2010 03:03:55 +0800 (SGT)
X-Barracuda-Envelope-From: wangyan.2010 [at] sify.com
Received: from User ([125.21.254.134]) by lmserver1.lead-mgt.local with
Microsoft SMTPSVC(6.0.3790.3959);
Sun, 31 Jan 2010 02:41:54 +0800
wangyan.2010 [at] sify.com
die Madrid-Konnektion:
Received: from IMPaqm4.telefonica.net (impaqm4.telefonica.net
[213.4.129.24])
by xxxxx (Postfix) with ESMTP id 682B578A3BEE
for xxxxx; Sun, 31 Jan 2010 17:43:55 +0100 (CET)
Received: from IMPmailhost4.adm.correo ([10.20.102.125])
by IMPaqm4.telefonica.net with bizsmtp
id cGFv1d0032iL0W23QGjvyw; Sun, 31 Jan 2010 17:43:55 +0100
Received: from User ([59.167.217.114])
by IMPmailhost4.adm.correo with BIZ IMP
id cGjm1d00C2Uggln1kGjokY; Sun, 31 Jan 2010 17:43:55 +0100
IP: 59.167.217.114 ---> ppp217-114.static.internode.on.net
wendylisa1 [at] terra.es
yanex222 [at] aim.com
Muguphon: +34-615-711-231 ---> France Telecom España, S.a./Orange
- kjz
Neue Runde, Teil 1:
Received: from blu0-omc1-s27.blu0.hotmail.com
(blu0-omc1-s27.blu0.hotmail.com [65.55.116.38])
by xxxxx (Postfix) with ESMTP id 98C0878A3C2B
for xxxxx; Thu, 28 Jan 2010 08:42:33 +0100 (CET)
Received: from BLU0-SMTP101 ([65.55.116.7]) by
blu0-omc1-s27.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 27 Jan 2010 23:42:32 -0800
Received: from user-1d8b9555b1 ([41.203.234.236]) by
BLU0-SMTP101.blu0.hotmail.com over TLS secured channel with Microsoft
SMTPSVC(6.0.3790.3959);
Wed, 27 Jan 2010 23:42:30 -0800
X-Originating-IP: [41.203.234.236] ---> ONATEL, BF
malik4aliff [at] sify.com
aliff_871 [at] msn.com
aliff_malik2 [at] hotmail.fr
Muguphon: +22675145555 ---> Celtel Burkina Faso S.A./Zain
hier wurde wohl ein deutscher Account gecrackt:
Received: from mailout10.t-online.de (mailout10.t-online.de [194.25.134.21])
by xxxxx (Postfix) with ESMTP id DB941789AA29
for xxxxx>; Fri, 29 Jan 2010 03:29:18 +0100 (CET)
Received: from fwd06.aul.t-online.de (fwd06.aul.t-online.de )
by mailout10.t-online.de with smtp
id 1Nagb9-0002El-JO; Fri, 29 Jan 2010 03:28:39 +0100
Received: from User
(SgULaEZJwtFPeLvcYUFrdMLhjFZ+kb4qyyHbNCIL6A4FzAiMyvBM53LUEmMRJVgOS37gYswxuA@[208.86.156.230])
by fwd06.t-online.de
with esmtp id 1Nag3b-1PVx2W0; Fri, 29 Jan 2010 02:53:59 +0100
IP: 208.86.156.230 ---> host2.allfreelancework.com
fraobi5 [at] ferienwohnung-hartmann-odernheim.de
drtundelemon212 [at] gmail.com
atmcardpaycenter12 [at] officeliveusers.com
Muguphon: +234 708 515 0758 ---> Celtel Nigeria Limited/Zain
Fallback-Server werden bei der Sicherheit wohl auch mal gerne vergessen und schon ist SquirrelMail gecrackt:
Received: from fallback.cbn.net.id (fallback.cbn.net.id [202.158.3.74])
by xxxxx (Postfix) with ESMTP id 42E4E78A23C3
for xxxxx; Fri, 29 Jan 2010 05:36:37 +0100 (CET)
Received: from ip5.cbn.net.id (ip5.cbn.net.id [210.210.145.66])
by fallback.cbn.net.id (Postfix) with ESMTP id 6DA182D0B5C6;
Fri, 29 Jan 2010 05:06:16 +0700 (WIT)
Received: from ip89-68.cbn.net.id (HELO mail.litbang.deptan.go.id)
([202.158.89.68])
by ip5-smtp.int.cbn.net.id with ESMTP; 29 Jan 2010 05:06:11 +0700
Received: from localhost (localhost [127.0.0.1])
by mail.litbang.deptan.go.id (Postfix) with ESMTP id 0D9833FF53C;
Fri, 29 Jan 2010 05:04:36 +0700 (WIT)
X-Virus-Scanned: Debian amavisd-new at mail.litbang.deptan.go.id
Received: from mail.litbang.deptan.go.id ([127.0.0.1])
by localhost (umar.litbang.deptan.go.id [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 6i1Yol+VGIPb; Fri, 29 Jan 2010 05:04:35 +0700 (WIT)
Received: by mail.litbang.deptan.go.id (Postfix, from userid 33)
id 928A53FF4C1; Fri, 29 Jan 2010 05:04:31 +0700 (WIT)
Received: from 41.220.75.18
(SquirrelMail authenticated user balitklimat)
by mail.litbang.deptan.go.id with HTTP;
Fri, 29 Jan 2010 05:04:31 +0700 (WIT)
IP: 41.220.75.18 ---> MTN Nigeria
balitklimat [at] litbang.deptan.go.id
gtbank [at] gala.net
- kjz
Neues von der Mugu-Front:
Received: from mail.unfps.ntct.edu.tw (mail.unfps.ntct.edu.tw
[163.22.120.3])
by xxxxx (Postfix) with SMTP id 2B13278A3D41
for xxxxx; Thu, 4 Feb 2010 09:24:20 +0100 (CET)
Received: from 82.128.81.201
by mail.unfps.ntct.edu.tw with Mail2000 ESMTP Server
V2.71S(190:0:AUTH_LOGIN)
Tue, 26 Jan 2010 15:22:10 +0800 (CST);
(envelope-from <cpshire2 [at] gmail.com>)
IP: 82.128.81.201 ---> Multilinks Telecommunications Limited, Nigeria
cpshire2 [at] gmail.com
cpshire11 [at] gmail.com
Freenet auch dabei:
Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id F35FB78A3BBC
for xxxxx; Thu, 4 Feb 2010 15:02:40 +0100 (CET)
Received: from [195.4.92.16] (helo=6.mx.freenet.de)
by mout6.freenet.de with esmtpa (ID r443433e [at] bossmail.de) (port 25)
(Exim 4.70 #1)
id 1Nd2GV-0006gH-A5; Thu, 04 Feb 2010 15:01:03 +0100
Received: from [41.217.65.4] (port=49976 helo=User)
by 6.mx.freenet.de with esmtpa (ID r443433e [at] bossmail.de) (port 587)
(Exim 4.72 #1)
id 1Nd2GT-0007u7-EA; Thu, 04 Feb 2010 15:01:03 +0100
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
r443433e [at] bossmail.de
johnsimmons234 [at] movmail.com
johnsimmons46 [at] hushmail.com
auch wieder T-Offline mit der Ferienwohnung:
Received: from mailout09.t-online.de (mailout09.t-online.de [194.25.134.84])
by xxxxx (Postfix) with ESMTP id 5CF87789B8A5
for xxxxx; Fri, 5 Feb 2010 02:14:10 +0100 (CET)
Received: from fwd11.aul.t-online.de (fwd11.aul.t-online.de )
by mailout09.t-online.de with smtp
id 1NdCdr-0007CE-SS; Fri, 05 Feb 2010 02:05:51 +0100
Received: from User
(EAEmrcZDgtV285Z09gAOAF+Q5fODyv4nd3948dtoEHtTPrX+Hb3-2j97xYkJJRSkUvebFe-2Th@[208.98.29.125])
by fwd11.t-online.de
with esmtp id 1NdBlh-174qjQ0; Fri, 5 Feb 2010 01:09:53 +0100
IP: 208.98.29.125 ---> Sharktech
why4 [at] ferienwohnung-hartmann-odernheim.de
drtundelemon1 [at] aol.in
atmcardpaycenter12 [at] officeliveusers.com
Muguphon: +234 708 515 0758 ---> Celtel Nigeria Limited/Zain
BTW: ach waren das noch Zeiten, als Web.de noch per Briefpost(!) Bestätigungscodes verschickte, mit denen man eine Freemail-Adresse erst freischalten musste...
- kjz
die nächste Ladung:
Received: from mail.ros.gov.my (imap4.ros.gov.my [202.60.56.101])
by xxxxx (Postfix) with ESMTP id 809FC78A443F
for xxxxx; Thu, 4 Feb 2010 18:28:47 +0100 (CET)
Received: from User ([82.128.34.230])
by mail.ros.gov.my (MOS 3.8.6-GA)
with ESMTP id AGN28677 (AUTH adam);
Wed, 3 Feb 2010 10:39:25 +0800 (MYT)
IP: 82.128.34.230 ---> Multilinks Telecommunications Limited, Nigeria
solomonmich [at] gmail.com
michealslmn11 [at] gmail.com
Muguphon: +447749693780 ---> O2 (UK) Limited
Received: from mail.kz (frontend03n.mail.kz [92.46.53.18])
by xxxxx (Postfix) with ESMTP id E02DE78A34F9
for xxxxx; Sat, 6 Feb 2010 18:34:01 +0100 (CET)
Received: from [41.217.65.4] (account frankobi4 [at] mail.kz HELO User)
by frontend03n.mail.kz (CommuniGate Pro SMTP 5.2.13)
with ESMTPA id 35199496; Sat, 06 Feb 2010 22:33:33 +0600
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
frankobi4 [at] mail.kz
drtundelemon1 [at] aol.in
drtunln21 [at] yahoo.com
Muguphon: +234 708 515 0758 ---> Celtel Nigeria Limited/Zain
gecracktes SquirrelMail:
Received: from admn.jdvu.ac.in (EHLO mail2.jdvu.ac.in) [203.197.118.100]
by mx0.gmx.net (mx099) with SMTP; 05 Feb 2010 22:04:32 +0100
Received: by mail2.jdvu.ac.in (Postfix, from userid 511)
id B89793D1B7C; Sat, 6 Feb 2010 02:14:49 +0530 (IST)
X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on mail2.jdvu.ac.in
X-Spam-Status: No, score=-0.6 required=5.0 tests=ADVANCE_FEE_1,ALL_TRUSTED,
UNDISC_RECIPS autolearn=failed version=3.1.9
Received: from mail.jdvu.ac.in (mail2.jdvu.ac.in [127.0.0.1])
by mail2.jdvu.ac.in (Postfix) with ESMTP id 353373D1B5B;
Sat, 6 Feb 2010 02:14:32 +0530 (IST)
Received: from 66.230.230.230
(SquirrelMail authenticated user psengupta [at] geology.jdvu.ac.in)
by mail.jdvu.ac.in with HTTP;
Sat, 6 Feb 2010 02:14:46 +0530
psengupta [at] geology.jdvu.ac.in
programme [at] ig.com.br
Muguphon: +44-703-196-2778 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44-702-404-2779 ---> Magrathea Telecommunications Limited, UK
Received: from mail.inetwerx.net (unknown [66.213.226.90])
by xxxxx (Postfix) with ESMTP id 43E3E78A33D7
for xxxxx; Sat, 6 Feb 2010 08:32:17 +0100 (CET)
Received: from User ([82.128.80.131]) by mail.inetwerx.net with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 6 Feb 2010 00:10:46 -0700
IP: 82.128.80.131 ---> Multilinks Telecommunications Limited, Nigeria
rw-chambers [at] hotmail.com
richardwilson2010k [at] rocketmail.com
Received: from smtp2a.orange.fr (smtp2a.orange.fr [80.12.242.139])
by xxxxx (Postfix) with ESMTP id A974278A3C5C
for xxxxx; Sat, 6 Feb 2010 13:48:28 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2a09.orange.fr (SMTP Server) with ESMTP id E40B87001FA7;
Sat, 6 Feb 2010 13:48:27 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2a09.orange.fr (SMTP Server) with ESMTP id D2C057000F13;
Sat, 6 Feb 2010 13:48:27 +0100 (CET)
Received: from serveur.DOMCONFIANCE.local
(LNeuilly-152-23-18-76.w217-128.abo.wanadoo.fr [217.128.65.76])
by mwinf2a09.orange.fr (SMTP Server) with ESMTP id 79CB17001FAF;
Sat, 6 Feb 2010 13:48:27 +0100 (CET)
X-ME-UUID: 20100206124827498.79CB17001FAF [at] mwinf2a09.orange.fr
Received: from User ([59.91.190.25]) by serveur.DOMCONFIANCE.local with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 6 Feb 2010 13:45:13 +0100
centralbankofnigeria1958 [at] financier.com
sanusigovcbn01 [at] yahoo.cn
Muguphon: +234-8020933903 ---> Celtel Nigeria Limited/Zain
die Amsterdam-Konnektion:
Received: from cpsmtpb-ews01.kpnxchange.com
(cpsmtpb-ews01.kpnxchange.com [213.75.39.4])
by xxxxx (Postfix) with ESMTP id A942478A3BDD
for xxxxx; Sun, 7 Feb 2010 17:21:53 +0100 (CET)
Received: from cpbrm-ews07.kpnxchange.com ([10.94.84.138]) by
cpsmtpb-ews01.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 7 Feb 2010 17:21:53 +0100
Received: from CPSMTPM-EML04.kpnxchange.com ([213.75.39.74]) by
cpbrm-ews07.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Sun, 7 Feb 2010 17:21:53 +0100
Received: from localhost ([10.94.77.199]) by
CPSMTPM-EML04.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Sun, 7 Feb 2010 17:21:44 +0100
rvandiggele [at] hetnet.nl
infosgasl [at] aim.com
Muguphon: +31-647-226-334 ---> Telfort B.V., NL/Tiscali
Received: from shanticyber.com (MAIL.ALANKITONLINE.com [125.18.240.67])
by xxxxx (Postfix) with ESMTP id 55DFB78A3BEB
for xxxxx; Sun, 7 Feb 2010 22:07:39 +0100 (CET)
Received: from Internal Mail-Server by PineAppMail-SeCure (envelope-from
richardwilson2010k [at] rocketmail.com) with SMTP; 8 Feb 2010 01:32:35 +0530
richardwilson2010k [at] rocketmail.com
richard-wilson2010 [at] hotmail.com
- kjz
So, da wäre wieder die Madrid-Konnektion:
Received: from cig-mx1.cig.local (commsintlgroup.claranet.co.uk
[212.169.11.47])
by xxxxx (Postfix) with ESMTP id 7F48B78A3C37
for xxxxx; Wed, 10 Feb 2010 21:23:14 +0100 (CET)
Received: from User ([87.219.96.58]) by cig-mx1.cig.local with Microsoft
SMTPSVC(6.0.3790.3959);
Wed, 10 Feb 2010 20:10:20 +0000
IP: 87.219.96.58 ---> 58.96.219.87.dynamic.jazztel.es
petrovvladimirrazduk [at] hotmail.ru
petrovladimirazdukho [at] hotmail.ru
Auch diesen Mugu hatten wir schon:
http://www.antispam-ev.de/forum/showpost.php?p=255037&postcount=407
- kjz
Weiter geht es mit:
Received: from sggs.hc.edu.tw (sggs.hc.edu.tw [140.126.151.1])
by xxxxx (Postfix) with ESMTP id 62F7378A3C1D
for xxxxx; Mon, 8 Feb 2010 09:23:18 +0100 (CET)
Received: by sggs.hc.edu.tw (Postfix, from userid 888)
id 1B122A28E6; Mon, 8 Feb 2010 13:18:34 +0800 (CST)
Received: from mail.sggs.hc.edu.tw (localhost [127.0.0.1])
by sggs.hc.edu.tw (Postfix) with ESMTP id 1B580A5666;
Mon, 8 Feb 2010 13:18:23 +0800 (CST)
X-OriginatingIP: 41.138.191.116 (josephine) ---> Visafone Communications
info.crystalloan003 [at] gmail.com
info.crystalloan007 [at] gmail.com
Muguphon: +1-206-339-1057 ---> International Telcom, Ltd.
Mugufax: +1-206-309-3625 ---> International Telcom, Ltd.
Received: from nettop.co.kr (EHLO nettop.co.kr) [61.100.6.41]
by mx0.gmx.net (mx069) with SMTP; 08 Feb 2010 13:00:14 +0100
Received: from User ([41.174.53.216])
(authenticated bits=0)
by nettop.co.kr (8.13.1/8.13.1) with ESMTP id o18BplRd017499;
Mon, 8 Feb 2010 20:51:58 +0900
IP: 41.174.53.216 ---> NEOTEL, ZA
lizzie.zweli [at] gmx.com
lizzie-zweli [at] gmx.com
Received: from KK.comedream.com (comedream.com [61.67.232.17])
by xxxxx (Postfix) with ESMTP id BC01D78A4062
for xxxxx; Mon, 8 Feb 2010 15:40:18 +0100 (CET)
Received: from User (unknown [41.138.189.57])
by KK.comedream.com (Postfix) with ESMTP
id 6731644CFB1; Mon, 8 Feb 2010 22:41:09 +0800 (CST)
IP: 41.138.189.57 ---> Visafone Communications Limited, Nigeria
choniam94 [at] yahoo.com.hk
niamcho [at] yahoo.com.hk
Received: from mail.cynex.co.kr (unknown [114.141.2.203])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 302D178A351F
for xxxxx; Mon, 8 Feb 2010 23:04:37 +0100 (CET)
Received: from User ([70.62.104.86])
(authenticated user test [at] cynex.co.kr)
by mail.cynex.co.kr (Kerio MailServer 6.4.0);
Mon, 8 Feb 2010 00:10:41 +0900
IP: 70.62.104.86 ---> rrcs-70-62-104-86.midsouth.biz.rr.com
test [at] cynex.co.kr
euro-millionslottery [at] i12.com
rashy.finance [at] discuz.org
Received: from host.neolabs.kz (chost.neolabs.kz [195.93.153.46])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C547D78A34F9
for xxxxx; Tue, 9 Feb 2010 05:20:08 퍝 (CET)
Received: from chello089075012058.chello.pl ([89.75.12.58]:2522 helo=User)
by host.neolabs.kz with esmtpa (Exim 4.71)
(envelope-from <jackharshman [at] sify.com>)
id 1NeLtn-0000ej-0b; Mon, 08 Feb 2010 11:11:04
jackharshman [at] sify.com
jackharshman2 [at] yahoo.com.hk
wieder die Madrid-Konnektion:
Received: from server.scorewell.co.uk (unknown [78.129.158.110])
by spammotel.com (Postfix) with ESMTPS id BB9B99F76D7
for xxxxx; Mon, 8 Feb 2010 10:52:18 -0500 (EST)
Received: from [84.77.135.33] (helo=User)
by server.scorewell.co.uk with esmtpa (Exim 4.69)
(envelope-from <admin [at] caturelang.co.id>)
id 1NeVs1-0005Ph-EX; Mon, 08 Feb 2010 15:49:54 +0000
IP: 84.77.135.33 ---> Ya.com Internet Factory, ES
carlosc5853 [at] aim.com
Dazu kommt dann noch, dass AIM/AOL wohl auf allen Ohren taub für Complaints ist. Die sind wohl eher mit ihrem Rückzug aus DE beschäftigt.
Muguphon: +34-692283669 ---> France Telecom España, S.a./Orange
Mugufax: +34-912919842 ---> Jazz Telecom, S.a.u.
Received: from mx1.zajil.net (mx1.zajil.net [212.24.224.46])
by xxxxx (Postfix) with ESMTP id 5391D7894B46
for xxxxx; Wed, 10 Feb 2010 07:13:05 +0100 (CET)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AsEaAGvacUvUGOA9XWdsb2JhbAB9jXSKcS5gIyMjrwoIhQcCAYhmgjsFGAiBdQSDDYEjiW8C
X-IronPort-AV: E=Sophos;i="4.49,441,1262552400";
d="scan'208";a="99981654"
Received: from mail.helalmadina.org.sa (HELO pop.zajil.net)
([212.24.224.61])
by mx1.zajil.net with ESMTP; 10 Feb 2010 09:02:36 +0300
Received: from localhost ([212.24.224.61])
by pop.zajil.net (Merak 8.3.6) with SMTP id SIR60909;
Wed, 10 Feb 2010 09:07:09 +0300
mariam [at] zajil.net
GTBank [at] gala.net
Und wieder die Madrid-Konnektion:
Received: from server.scorewell.co.uk (unknown [78.129.158.110])
by spammotel.com (Postfix) with ESMTPS id B7A4FA060FC
for xxxxx; Wed, 10 Feb 2010 06:40:56 -0500 (EST)
Received: from [84.77.143.234] (helo=User)
by server.scorewell.co.uk with esmtpa (Exim 4.69)
(envelope-from <admin [at] caturelang.co.id>)
id 1NfAvf-0006Il-6p; Wed, 10 Feb 2010 11:40:23 +0000
IP: 84.77.143.234 ---> YACOMNET, ES
carlosc5853 [at] aim.com
Muguphon: +34-692283669 ---> France Telecom España, S.a./Orange
Mugufax: +34-912919842 ---> Jazz Telecom, S.a.u.
- kjz
Übers Wochenende so eingetrudelt:
die Amsterdam-Konnektion über gecrackten Uni-Account:
Received: from mongoose.sinclair.edu (mx.sinclair.edu [140.106.192.23])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id E506978A32D8
for xxxxx; Fri, 12 Feb 2010 19:58:56 +0100 (CET)
Received: from cedar.scc-nt.sinclair.edu (sourwood.scc-nt.sinclair.edu
[140.106.51.214])
by mongoose.sinclair.edu (8.13.8/8.13.8/Debian-3) with ESMTP id
o1BA1mmk019945;
Thu, 11 Feb 2010 05:01:48 -0500
infosgasl [at] aim.com
Sue.Alderman [at] sinclair.edu
Muguphon: +31-647-226-334 ---> Telfort B.V., NL/Tiscali
wieder gecrackter Uni-Account:
Received: from ohm.utp.edu.co (ohm.utp.edu.co [200.21.217.54])
by xxxxx (Postfix) with ESMTP id 079BE78A3D4C
for xxxxx; Fri, 12 Feb 2010 18:35:04 +0100 (CET)
Received: from ohm.utp.edu.co (ohm.utp.edu.co [127.0.0.1])
by ohm.utp.edu.co (8.12.9/8.12.9) with ESMTP id o1CGZfqK016951;
Fri, 12 Feb 2010 11:35:41 -0500 (COT)
millavic_brian99 [at] yahoo.com.hk
barr.b.millavic2010 [at] admin.in.th
Mugulein 1:
Received: from LedwidgeIT.com (unknown [89.127.250.100])
by xxxxx (Postfix) with ESMTP id E276778A3BFE
for xxxxx; Sat, 13 Feb 2010 22:12:12 +0100 (CET)
Received: from User ([41.217.66.4]) by LedwidgeIT.com with Microsoft
SMTPSVC(6.0.3790.3959);
Fri, 12 Feb 2010 23:27:05 +0000
IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.
Besonders pikant: http://www.LedwidgeIT.com bietet 'IT Consultancy' und 'Email Solutions' an. Ein IT Consultant, dem sein eigener Mail-Server gecrackt wird. Noch dazu wegen fehlendem Abuse-Account bei RFC-Ignorant gelistet. Das spricht doch mal für absolute Fachkompetenz.....
reed7steve [at] gmail.com
Muguphon: +44 702 407 3956 ---> Magrathea Telecommunications Limited, UK
Received: from smtp-ext-02.mx.pitdc1.expedient.net
(smtp-ext-02.mx.pitdc1.expedient.net [206.210.69.142])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 812F278A3C03
for xxxxx; Sat, 13 Feb 2010 22:40:05 +0100 (CET)
Received: from User (unknown [82.128.84.103])
by smtp-ext-02.mx.pitdc1.expedient.net (Postfix) with ESMTPA id CC6E67CC3D;
Sat, 13 Feb 2010 16:32:45 -0500 (EST)
IP: 82.128.84.103 ---> Multilinks Telecommunications Limited, Nigeria
fecdept [at] gmail.com
Muguphon: +44 703 194 2575 ---> Magrathea Telecommunications Limited, UK
Mugulein 1a:
Received: from smtp-out01.msg.oleane.net (smtp-out01.msg.oleane.net
[62.161.3.10])
by xxxxx (Postfix) with ESMTP id AD82A78A3C3D
for xxxxx; Sat, 13 Feb 2010 22:46:50 +0100 (CET)
Received: from smtp04.msg.oleane.net (smtp04.mail.priv [172.17.20.113])
by smtp-out01.msg.oleane.net with ESMTP id o1DLjeOo028105;
Sat, 13 Feb 2010 22:45:40 +0100
Received: from amilton-am.com (mail.amilton-am.fr [81.80.217.90])
(authenticated)
by smtp04.msg.oleane.net (MTA) with ESMTP id o1DLiqjM009513;
Sat, 13 Feb 2010 22:45:38 +0100
Received: from User ([41.217.66.5]) by amilton-am.com with Microsoft
SMTPSVC(6.0.3790.1830);
Sat, 13 Feb 2010 22:45:30 +0100
IP: 41.217.66.5 ---> ZOOM Mobile Nigeria Ltd.
srsteve8reed [at] gmail.com
Muguphon: +44 702 407 3956 ---> Magrathea Telecommunications Limited, UK
Received: from mail.kepidbill.co.kr (unknown [211.233.40.243])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 269C978A454A
for xxxxx; Sun, 14 Feb 2010 14:32:20 +0100 (CET)
Received: from User ([83.229.48.148])
by mail.kepidbill.co.kr (IceWarp 9.4.1) with ASMTP id WOA98413;
Sun, 14 Feb 2010 21:12:13 +0900
IP: 83.229.48.148 ---> Cyberspace, Nigeria
pin_fs2021 [at] yahoo.com.hk
pin_fs01 [at] yahoo.co.uk
- kjz
kurzer Nachschlag:
Received: from ns1.ksog.org (unknown [211.234.111.84])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 75B2F78A23C3
for xxxxx; Thu, 11 Feb 2010 00:04:34 +0100 (CET)
Received: (qmail 8334 invoked by uid 1001); 11 Feb 2010 07:43:31 +0900
Hanbiro-VS-Header: |||,UNKNOWN,41.26.109.133,2812,1265841809.8304
Received: from unknown (HELO User) (gabriel [at] 41.26.109.133)
by 0 (qmail 1.03 + ejcp v14) with SMTP;
11 Feb 2010 07:43:29 +0900
IP: 41.26.109.133 ---> Vodacom_UMTS_Gauteng_INTERNET_APN
auditdesk0010 [at] gmail.com
remitt [at] gmail.com
Muguphon: +27-73-312-1837 ---> MTN, ZA
ein penetranter Mugu der Madrid-Konnektion:
Received: from server.scorewell.co.uk (unknown [78.129.158.110])
by spammotel.com (Postfix) with ESMTPS id 99074A150DF
for xxxxx; Wed, 10 Feb 2010 13:25:45 -0500 (EST)
Received: from [84.77.143.234] (helo=User)
by server.scorewell.co.uk with esmtpa (Exim 4.69)
(envelope-from <admin [at] caturelang.co.id>)
id 1NfHFV-00072U-Fc; Wed, 10 Feb 2010 18:25:18 +0000
Received: from server.scorewell.co.uk (unknown [78.129.158.110])
by spammotel.com (Postfix) with ESMTPS id 99074A150DF
for xxxxx; Wed, 10 Feb 2010 13:25:45 -0500 (EST)
Received: from [84.77.143.234] (helo=User)
by server.scorewell.co.uk with esmtpa (Exim 4.69)
(envelope-from <admin [at] caturelang.co.id>)
id 1NfHFV-00072U-Fc; Wed, 10 Feb 2010 18:25:18 +0000
IP: 84.77.143.234 ---> Ya.com, ES
carlosc5853 [at] aim.com
- kjz
die nächsten Mugus, bitte:
Received: from mail.proteinlounge.com (unknown [174.132.133.130])
by xxxxx (Postfix) with ESMTP id 1630A78A3C4C
for xxxxx; Tue, 16 Feb 2010 06:30:35 +0100 (CET)
Received: from User [58.6.32.233] by mail.proteinlounge.com with ESMTP
(SMTPD32-8.15) id A1DA1CE00DC; Mon, 15 Feb 2010 15:51:22 -0600
IP: 58.6.32.233 ---> dsl-58-6-32-233.nsw.westnet.com.au
evaluationsurveys1 [at] gmail.com
gecracktes Squirrelmail vom Dauer-Mugu:
Received: from atl3.accelmail.com (uz027.managedbiz.net [63.111.11.27])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id E045778990F4
for xxxxx; Tue, 16 Feb 2010 05:14:57 +0100 (CET)
Received: (qmail 7742 invoked by uid 89); 16 Feb 2010 03:46:56 -0000
Received: from unknown (HELO mail.accelfrontline.in) (10.1.1.27)
by 0 with SMTP; 16 Feb 2010 03:46:56 -0000
Received: from 41.220.75.3
(SquirrelMail authenticated user ph.sreedas [at] accelfrontline.in)
by mail.accelfrontline.in with HTTP;
Tue, 16 Feb 2010 03:46:56 -0000 (GMT)
Received: from atl3.accelmail.com (uz027.managedbiz.net [63.111.11.27])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 58C7078990F4
for xxxxx; Tue, 16 Feb 2010 05:15:45 +0100 (CET)
Received: (qmail 8309 invoked by uid 89); 16 Feb 2010 03:47:10 -0000
Received: from unknown (HELO mail.accelfrontline.in) (10.1.1.27)
by 0 with SMTP; 16 Feb 2010 03:47:09 -0000
Received: from 41.220.75.3
(SquirrelMail authenticated user ph.sreedas [at] accelfrontline.in)
by mail.accelfrontline.in with HTTP;
Tue, 16 Feb 2010 03:47:09 -0000 (GMT)
Received: from atl3.accelmail.com (uz027.managedbiz.net [63.111.11.27])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id A1DD278990F4
for xxxxx; Tue, 16 Feb 2010 05:16:59 +0100 (CET)
Received: (qmail 9129 invoked by uid 89); 16 Feb 2010 03:47:51 -0000
Received: from unknown (HELO mail.accelfrontline.in) (10.1.1.27)
by 0 with SMTP; 16 Feb 2010 03:47:50 -0000
Received: from 41.220.75.3
(SquirrelMail authenticated user ph.sreedas [at] accelfrontline.in)
by mail.accelfrontline.in with HTTP;
Tue, 16 Feb 2010 03:47:50 -0000 (GMT)
IP: 41.220.75.3 ---> MTN Nigeria
ph.sreedas [at] accelfrontline.in
carleyalbert [at] gala.net
carleyalbert [at] info.net
Received: from mail.zonkesa.co.za (EHLO zonkesa.co.za) [196.15.204.74]
by mx0.gmx.net (mx118) with SMTP; 16 Feb 2010 04:19:51 +0100
Received: from User ([202.29.94.110]) by zonkesa.co.za with Microsoft
SMTPSVC(6.0.3790.3959);
Fri, 12 Feb 2010 18:57:40 +0200
IP: 202.29.94.110 ---> Unnop Viriyavit, TH
clarencetheodore_1155 [at] yahoo.co.jp
clarencetheodore_115 [at] yahoo.co.jp
Muguphon: +447024044576 ---> Magrathea Telecommunications Limited, UK
Muguphon: +447024087647 ---> Magrathea Telecommunications Limited, UK
die Madrid-Konnektion:
Received: from IMPaqm2.telefonica.net (impaqm2.telefonica.net
[213.4.129.22])
by xxxxx (Postfix) with ESMTP id 89C2E78A4DC9
for xxxxx; Tue, 16 Feb 2010 15:08:56 +0100 (CET)
Received: from IMPmailhost3.adm.correo ([10.20.102.124])
by IMPaqm2.telefonica.net with bizsmtp
id iZ1b1d00S2h2L9m3Md6fci; Tue, 16 Feb 2010 14:06:39 +0100
Received: from User ([81.202.3.254])
by IMPmailhost3.adm.correo with BIZ IMP
id id6e1d00R5Upunl1jd6eRL; Tue, 16 Feb 2010 14:06:39 +0100
IP: 81.202.3.254 ---> 81.202.3.254.dyn.user.ono.com, ES
es3419564esp [at] terra.es
national.es [at] luckymail.com
Muguphon: +34-634-130-267 ---> Vodafone España, S.a.u.
Received: from cmhk.com (unknown [219.134.60.79])
by xxxxx (Postfix) with SMTP id 14C5C78A3D34
for xxxxx; Wed, 17 Feb 2010 00:43:15 +0100 (CET)
Received: from User (unknown [82.128.18.221])
by bmail-app.cmhk.com (Coremail) with SMTP id
CmUFK5DLlQYiHHtLQEIPAA--.11605S3;
Wed, 17 Feb 2010 06:29:35 +0800 (CST)
IP: 82.128.18.221 ---> Multilinks Telecommunications Limited, Nigeria
desmond2001 [at] voila.fr
personnel [at] cmhk.com
Freenet, Teil 1:
Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5D02278A3CD9
for xxxxx; Wed, 17 Feb 2010 16:00:57 +0100 (CET)
Received: from [195.4.92.11] (helo=1.mx.freenet.de)
by mout6.freenet.de with esmtpa (ID adasdssds [at] 24h.de) (port 25) (Exim
4.72 #1)
id 1NhlOJ-00048H-HC; Wed, 17 Feb 2010 16:00:39 +0100
Received: from [82.128.83.85] (port=3370 helo=User)
by 1.mx.freenet.de with esmtpa (ID adasdssds [at] 24h.de) (port 25) (Exim
4.72 #1)
id 1NhlOH-0006It-U0; Wed, 17 Feb 2010 16:00:39 +0100
IP: 82.128.83.85 ---> Multilinks Telecommunications Limited, Nigeria
adasdssds [at] 24h.de (Freenet)
DirectorFBI [at] hotmail.com
federal_fbi34 [at] uz.tc
- kjz
Mugu-Nachschub:
Received: from studiomark.texnet.org (89-97-221-242.ip19.fastwebnet.it
[89.97.221.242])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7E02F78940CA
for xxxxx; Thu, 18 Feb 2010 00:04:54 +0100 (CET)
Received: from [41.217.66.5] (helo=User)
by studiomark.texnet.org with esmtpa (Exim 4.50)
id 1NhskV-0006lJ-Lo; Wed, 17 Feb 2010 23:52:05 +0100
IP: 41.217.66.5 ---> ZOOM Mobile Nigeria Ltd.
alimacharity [at] micro.lt
Freenet, Teil 2:
Received: from mout3.freenet.de (mout3.freenet.de [195.4.92.93])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C605F78A3D71
for xxxxx; Wed, 17 Feb 2010 22:35:54 +0100 (CET)
Received: from [195.4.92.12] (helo=2.mx.freenet.de)
by mout3.freenet.de with esmtpa (ID ncxnncnxnxxnxn [at] moneymail.de) (port
25) (Exim 4.72 #1)
id 1NhrYc-0007lK-JA; Wed, 17 Feb 2010 22:35:42 +0100
Received: from [82.128.36.168] (port=3173 helo=User)
by 2.mx.freenet.de with esmtpa (ID ncxnncnxnxxnxn [at] moneymail.de) (port
25) (Exim 4.72 #1)
id 1NhrYZ-0004jZ-QQ; Wed, 17 Feb 2010 22:35:42 +0100
IP: 82.128.36.168 ---> Multilinks Telecommunications Limited, Nigeria
ncxnncnxnxxnxn [at] moneymail.de (Freenet)
www.office.fbi2010 [at] gmail.com
Received: from mx.eontoys.com (unknown [87.227.160.74])
by xxxxx (Postfix) with ESMTP id 24FAE789A41B
for xxxxx; Thu, 18 Feb 2010 12:04:11 +0100 (CET)
Received: from User ([81.199.115.136] RDNS failed) by mx.eontoys.com
with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 18 Feb 2010 12:52:51 +0200
IP: 81.199.115.136 ---> 81.199.115.136.satcom-systems.net
issacjonn [at] googlemail.com
timiphills1960 [at] yahoo.com
Freenet, Teil 3:
Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 55ACA78A3E6B
for xxxxx; Thu, 18 Feb 2010 14:31:09 +0100 (CET)
Received: from [195.4.92.25] (helo=15.mx.freenet.de)
by mout0.freenet.de with esmtpa (ID thyyunb5 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1Ni6S1-0003fD-Gm; Thu, 18 Feb 2010 14:29:53 +0100
Received: from [66.90.109.42] (port=44177 helo=User)
by 15.mx.freenet.de with esmtpa (ID thyyunb5 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1Ni6Ru-0002dz-CX; Thu, 18 Feb 2010 14:29:53 +0100
IP: 66.90.109.42 ---> FDCservers.net
thyyunb5 [at] bossmail.de (Freenet)
hhhgrace [at] fastwebmail.it
iijjaggsuiijjuugg [at] virgilio.it
Freenet, Teil 4:
Received: from mout4.freenet.de (mout4.freenet.de [195.4.92.94])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 36D6178A351D
for xxxxx; Thu, 18 Feb 2010 15:07:56 +0100 (CET)
Received: from [195.4.92.18] (helo=8.mx.freenet.de)
by mout4.freenet.de with esmtpa (ID hdhfjgfjjj2 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1Ni72g-0006TJ-Nf; Thu, 18 Feb 2010 15:07:46 +0100
Received: from c-71-57-32-231.hsd1.in.comcast.net ([71.57.32.231]:24027
helo=User)
by 8.mx.freenet.de with esmtpa (ID hdhfjgfjjj2 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1Ni72I-0006iL-4g; Thu, 18 Feb 2010 15:07:27 +0100
hdhfjgfjjj2 [at] bossmail.de (Freenet)
mrs.ingabritt.un14 [at] w.cn
mrs.ingabrittahlenius66 [at] yahoo.com
Muguphon: +2347042166118 ---> Visafone Communications Ltd., Nigeria
Received: from sggs.hc.edu.tw (sggs.hc.edu.tw [140.126.151.1])
by xxxxx (Postfix) with ESMTP id E28257811245
for xxxxx; Fri, 19 Feb 2010 03:20:00 +0100 (CET)
Received: by sggs.hc.edu.tw (Postfix, from userid 888)
id 6A857A44EE; Fri, 19 Feb 2010 10:00:21 +0800 (CST)
Received: from mail.sggs.hc.edu.tw (localhost [127.0.0.1])
by sggs.hc.edu.tw (Postfix) with ESMTP id 36A50A4149;
Fri, 19 Feb 2010 10:00:12 +0800 (CST)
X-OriginatingIP: 41.138.181.91 (josephine) ---> Visafone Communications Limited, Nigeria
info.crystalloan011 [at] gmail.com
info.crystalloan012 [at] gmail.com
Muguphon: +1-206-339-1057 ---> International Telcom, Ltd.
Mugufax: +1-206-309-3625 ---> International Telcom, Ltd.
Freenet, Teil 5:
Received: from mout5.freenet.de (mout5.freenet.de [195.4.92.95])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9493178A3CD9
for xxxxx; Thu, 18 Feb 2010 23:30:14 +0100 (CET)
Received: from [195.4.92.21] (helo=11.mx.freenet.de)
by mout5.freenet.de with esmtpa (ID ookokk9 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1NiEsL-00034b-53; Thu, 18 Feb 2010 23:29:37 +0100
Received: from [66.90.109.42] (port=51786 helo=User)
by 11.mx.freenet.de with esmtpa (ID ookokk9 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1NiEsH-0005zs-Gd; Thu, 18 Feb 2010 23:29:37 +0100
IP: 66.90.109.42 ---> FDCservers.net
ookokk9 [at] bossmail.de (Freenet)
ustreasurydeptt [at] w.cn
iijjaggsuiijjuugg [at] virgilio.it
Received: from unknown (EHLO nm.mustek-hz.com.cn) [218.108.8.66]
by mx0.gmx.net (mx110) with SMTP; 18 Feb 2010 22:13:10 +0100
Received: from User ([82.128.33.7])
(authenticated bits=0)
by nm.mustek-hz.com.cn (8.13.8/8.13.8) with ESMTP id o1IL7cHX011549;
Fri, 19 Feb 2010 05:07:49 +0800
IP: 82.128.33.7 ---> Multilinks Telecommunications Limited, Nigeria
info.mcn [at] web2mail.com
clementdikeocha [at] web2mail.com
Muguphon: +234 8029912899 ---> Celtel Nigeria Limited/Zain
- kjz
die nächsten Mugus:
gecracktes SquirrelMail:
Received: from correo.sucre.udo.edu.ve (correo.sucre.udo.edu.ve
[150.186.92.253])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id DF5C378A3BDD
for xxxxx; Sat, 20 Feb 2010 06:22:22 +0100 (CET)
Received: (qmail 4896 invoked by uid 1010); 18 Feb 2010 11:58:06 -0430
Received: from 127.0.0.1 by correo (envelope-from <info [at] chan.com>, uid
1008) with qmail-scanner-1.25-st-qms
(clamdscan: 0.95.2/9450. spamassassin: 3.2.5. perlscan: 1.25-st-qms.
Clear:RC:1(127.0.0.1):.
Processed in 0.017782 secs); 18 Feb 2010 16:28:06 -0000
X-Antivirus-sucre.udo.edu.ve-Mail-From: info [at] chan.com via correo
X-Antivirus-sucre.udo.edu.ve: 1.25-st-qms (Clear:RC:1(127.0.0.1):.
Processed in 0.017782 secs Process 4890)
Received: from localhost (HELO correo.sucre.udo.edu.ve) (127.0.0.1)
by correo.sucre.udo.edu.ve with SMTP; 18 Feb 2010 11:58:06 -0430
Received: from 62.56.132.7
(SquirrelMail authenticated user rnaulin [at] sucre.udo.edu.ve)
by correo.sucre.udo.edu.ve with HTTP;
Thu, 18 Feb 2010 16:28:06 -0000
Received: from correo.sucre.udo.edu.ve (correo.sucre.udo.edu.ve
[150.186.92.253])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4459578A3CEA
for xxxxx; Sat, 20 Feb 2010 16:28:25 +0100 (CET)
Received: (qmail 12816 invoked by uid 1010); 19 Feb 2010 10:44:46 -0430
Received: from 127.0.0.1 by correo (envelope-from <info [at] chan.com>, uid
1008) with qmail-scanner-1.25-st-qms
(clamdscan: 0.95.2/9450. spamassassin: 3.2.5. perlscan: 1.25-st-qms.
Clear:RC:1(127.0.0.1):.
Processed in 0.017474 secs); 19 Feb 2010 15:14:46 -0000
X-Antivirus-sucre.udo.edu.ve-Mail-From: info [at] chan.com via correo
X-Antivirus-sucre.udo.edu.ve: 1.25-st-qms (Clear:RC:1(127.0.0.1):.
Processed in 0.017474 secs Process 12808)
Received: from localhost (HELO correo.sucre.udo.edu.ve) (127.0.0.1)
by correo.sucre.udo.edu.ve with SMTP; 19 Feb 2010 10:44:46 -0430
Received: from 62.56.132.7
(SquirrelMail authenticated user rnaulin [at] sucre.udo.edu.ve)
by correo.sucre.udo.edu.ve with HTTP;
Fri, 19 Feb 2010 15:14:46 -0000
IP: 62.56.132.7 ---> 62.56.132.7.satcom-systems.net
rnaulin [at] sucre.udo.edu.ve
jamiechan2011 [at] yahoo.com.hk
Muguphon: +60102034596 ---> Celcom, Malaysia
Freenet, Teil 6:
Received: from mout7.freenet.de (mout7.freenet.de [195.4.92.97])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id B723A78A34BF
for xxxxx; Sat, 20 Feb 2010 08:04:33 +0100 (CET)
Received: from [195.4.92.16] (helo=6.mx.freenet.de)
by mout7.freenet.de with esmtpa (ID rfvtgb [at] moneymail.de) (port 25)
(Exim 4.72 #1)
id 1NijMr-0005ES-JT; Sat, 20 Feb 2010 08:03:09 +0100
Received: from [82.128.83.217] (port=50861 helo=User)
by 6.mx.freenet.de with esmtpa (ID rfvtgb [at] moneymail.de) (port 25) (Exim
4.72 #1)
id 1NijMb-00050Q-Bk; Sat, 20 Feb 2010 08:03:09 +0100
IP: 82.128.83.217 ---> Multilinks Telecommunications Limited, Nigeria
rfvtgb [at] moneymail.de (Freenet)
fbicrimedivision1010 [at] gmail.com
Received: from omr4.networksolutionsemail.com
(omr4.networksolutionsemail.com [205.178.146.54])
by xxxxx (Postfix) with ESMTP id 439A378A3BC6
for xxxxx; Sat, 20 Feb 2010 10:00:18 +0100 (CET)
Received: from mail.networksolutionsemail.com
(mail.networksolutionsemail.com [205.178.146.50])
by omr4.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
o1K90HAM026003
for xxxxx; Sat, 20 Feb 2010 04:00:17 -0500
Message-Id: <201002200900.o1K90HAM026003 [at] omr4.networksolutionsemail.com>
Received: (qmail 12969 invoked by uid 78); 20 Feb 2010 09:00:16 -0000
Received: from unknown (HELO User) (lucky3 [at] cristlorenzo.net@196.207.229.153)
by ns-omr1.lb.hosting.dc2.netsol.com with SMTP; 20 Feb 2010 09:00:16
-0000
IP: 196.207.229.153 ---> ADSL-REGIONS, SN
lucky3 [at] cristlorenzo.net
missdiana [at] i12.com
crislorezon79 [at] aol.com
Received: from web1.nehp.net (unknown [63.108.130.10])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6F05D78940B4
for xxxxx; Sun, 21 Feb 2010 05:07:17 +0100 (CET)
Received: from User (unknown [82.128.84.76])
by web1.nehp.net (Postfix) with ESMTP id 0E7022003B6;
Sat, 20 Feb 2010 09:19:17 -0600 (CST)
Received: from web1.nehp.net (web1.nehp.net [63.108.130.10])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 6FE6B78A3D5F
for xxxxx; Sun, 21 Feb 2010 19:39:34 +0100 (CET)
Received: from User (unknown [82.128.84.147])
by web1.nehp.net (Postfix) with ESMTP id CB3BE22501A;
Sun, 21 Feb 2010 10:45:38 -0600 (CST)
IP: 82.128.84.76 ---> Multilinks Telecommunications Limited, Nigeria
fecdept [at] gmail.com
intl_remittance_dept [at] live.com
Muguphon: +44-7031-94-2575 ---> Magrathea Telecommunications Limited, UK
Muguphon: +1-360-216-1972 ---> Level 3 Communications, Llc
die Madrid-Konnektion:
Received: from 237.red.175.225.212.user.ptvtelecom.com (EHLO
mx4.hotmail.com) [212.225.175.237]
by mx0.gmx.net (mx043) with SMTP; 20 Feb 2010 21:07:46 +0100
Received: from mx4.hotmail.com (237.red.175.225.212.user.ptvtelecom.com
[212.225.175.237])
by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
id 0LmdsC-1NRtG42Loy-00hHqA for xxxxx; Sun, 21 Feb 2010
18:44:53 +0100
eurollott [at] aol.com
unisecc [at] madrid.com
Muguphon: +34 672 509 598 ---> Vodafone España, S.a.u.
gecracktes Horde:
Received: from mailrelay1.nl1.keenondots.net
(mailrelay2.nl1.keenondots.net [87.249.98.120])
by xxxxx (Postfix) with ESMTP id BCB0E78A351D
for xxxxx; Sat, 20 Feb 2010 23:11:07 +0100 (CET)
Received: from maildelivery1.nl1.keenondots.net
(maildelivery1.nl1.keenondots.net [87.249.98.12])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mailrelay1.nl1.keenondots.net (Postfix) with ESMTP id 2B9611E7231A;
Sat, 20 Feb 2010 23:13:45 +0100 (CET)
Received: from mailscanner6.nl1.keenondots.net
(mailscanner6.nl1.keenondots.net [87.249.98.18])
by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP id 4A0CC8BD618;
Sat, 20 Feb 2010 23:11:46 +0100 (CET)
X-Virus-Scanned: by Keenondots at mailscanner6.nl1.keenondots.net
Received: from maildelivery1.nl1.keenondots.net ([87.249.98.12])
by mailscanner6.nl1.keenondots.net (mailscanner6.nl1.keenondots.net
[87.249.98.18]) (amavisd-new, port 10024)
with LMTP id 0gVTwaptAGYY; Sat, 20 Feb 2010 23:09:19 +0100 (CET)
Received: from webmail.keenondots.com (www1.keenondots.com [87.249.98.10])
by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP id 01ECA8BD605;
Sat, 20 Feb 2010 23:11:44 +0100 (CET)
Received: from 92.46.55.46 ([92.46.55.46]) by webmail.keenondots.com (Horde
MIME library) with HTTP; Sat, 20 Feb 2010 23:11:43 +0100
IP: 92.46.55.46 ---> Kazakhtelecom
info.wong.2 [at] gmail.com
d.wong_001 [at] yahoo.com.hk
d.wong_8 [at] yahoo.com.hk
Received: from mail.tj.ro.gov.br (EHLO mail.tjro.jus.br) [200.101.66.115]
by mx0.gmx.net (mx002) with SMTP; 21 Feb 2010 18:46:04 +0100
Received: from User ([67.23.70.5])
by mail.tjro.jus.br (TJRO Mail Server 2009 PRO) with ASMTP id
DTK73449;
Sun, 21 Feb 2010 13:41:49 -0400
IP: 67.23.70.5 ---> host-67-23-70-5.biznesshosting.net
programme.coordinator [at] gala.net
janejohnson [at] tj.ro.gov.br
Muguphon: +44 1614083585 ---> Cable & Wireless Plc, UK
Received: from smtpgate2.pacific.net.sg (smtpgate2.pacific.net.sg
[203.120.90.32])
by xxxxx (Postfix) with SMTP id 7E20278A3C14
for xxxxx; Sun, 21 Feb 2010 21:12:51 +0100 (CET)
Received: (qmail 19620 invoked from network); 21 Feb 2010 20:12:49 -0000
Received: from c-174-55-137-174.hsd1.pa.comcast.net (HELO
smtp.pacific.net.sg) (aios [at] 174.55.137.174)
by smtpgate2.pacific.net.sg with ESMTPA; 21 Feb 2010 20:12:48 -0000
robertst_citibank1 [at] mail.mn
Muguphon: +44-700-5964577 ---> PNC Telecom Services Limited, UK/Tricor
Muguphon: +44-701-1138970 ---> PNC Telecom Services Limited
Mugufax: +44 870 288 7323 ---> Interweb Design Ltd, UK
Mugufax: +44 870 288 7101 ---> Interweb Design Ltd
- kjz
alte, neue Bekannte:
Received: from correio.sanol.com.br (sanol.sanol.com.br [200.232.10.19])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 17AAB78A3BC1
for xxxxx; Mon, 22 Feb 2010 04:19:40 +0100 (CET)
Received: by correio.sanol.com.br (Postfix, from userid 5002)
id EEDB076B23; Sun, 21 Feb 2010 23:51:54 -0300 (BRT)
Received: from User (unknown [41.138.176.249])
by correio.sanol.com.br (Postfix) with ESMTP id 46B6676B0B;
Sun, 21 Feb 2010 23:51:16 -0300 (BRT)
IP: 41.138.176.249 ---> Visafone Communications Limited, Nigeria
metcalf_sarah21 [at] yahoo.com.hk
Muguphon: +44 703 199 2662 ---> Magrathea Telecommunications Limited, UK
gecracktes Horde, zum Zweiten:
Received: from mailrelay1.nl1.keenondots.net
(mailrelay2.nl1.keenondots.net [87.249.98.120])
by xxxxx (Postfix) with ESMTP id 199C778A2C5A
for xxxxx; Mon, 22 Feb 2010 23:59:58 +0100 (CET)
Received: from maildelivery1.nl1.keenondots.net
(maildelivery1.nl1.keenondots.net [87.249.98.12])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mailrelay1.nl1.keenondots.net (Postfix) with ESMTP id 058E61E71EBE;
Tue, 23 Feb 2010 00:02:40 +0100 (CET)
Received: from mailscanner1.nl1.keenondots.net
(mailscanner1.nl1.keenondots.net [87.249.98.11])
by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP id 6BA5284CACD;
Tue, 23 Feb 2010 00:00:39 +0100 (CET)
X-Virus-Scanned: by Keenondots at mailscanner1.nl1.keenondots.net
Received: from maildelivery1.nl1.keenondots.net ([87.249.98.12])
by mailscanner1.nl1.keenondots.net (mailscanner1.nl1.keenondots.net
[87.249.98.11]) (amavisd-new, port 10024)
with LMTP id jiRkDQbMmHie; Mon, 22 Feb 2010 23:58:02 +0100 (CET)
Received: from webmail.keenondots.com (www1.keenondots.com [87.249.98.10])
by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP id F083E84CAAB;
Tue, 23 Feb 2010 00:00:38 +0100 (CET)
Received: from vpnserver2.ucnet.uoc.gr (vpnserver2.ucnet.uoc.gr
[147.52.151.2]) by webmail.keenondots.com (Horde MIME library) with HTTP;
Tue, 23 Feb 2010 00:00:38 +0100
info.wong.2 [at] gmail.com
d.wong_001 [at] yahoo.com.hk
d.wong_8 [at] yahoo.com.hk
Freenet, Teil 7:
Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C953478A410C
for xxxxx; Tue, 23 Feb 2010 14:30:31 +0100 (CET)
Received: from [195.4.92.27] (helo=17.mx.freenet.de)
by mout0.freenet.de with esmtpa (ID loo5 [at] bossmail.de) (port 25) (Exim
4.72 #1)
id 1Njupj-0007MT-8B; Tue, 23 Feb 2010 14:29:51 +0100
Received: from server1.nairahost.net ([75.126.213.58]:34430 helo=User)
by 17.mx.freenet.de with esmtpa (ID loo5 [at] bossmail.de) (port 587) (Exim
4.72 #2)
id 1Njupa-0004Rs-JR; Tue, 23 Feb 2010 14:29:51 +0100
loo5 [at] bossmail.de
efcconline1001 [at] gala.net
efcconline101 [at] gala.net
Schon blamabel, wie sich hier ein deutsches Unternehmen von Mugu-Kriminellen tagelang am Nasenring nach Belieben durch die Manege führen läßt....
gecracktes Horde im Zusammenspiel mit dem Mugu-Provider in Israel:
Received: from mail.freehost.com.ua (mail.freehost.com.ua [194.0.200.218])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 902FD78A3BCD
for xxxxx; Wed, 24 Feb 2010 06:16:05 +0100 (CET)
Received: from [127.0.0.1] (port=59701 helo=localhost)
by mail.freehost.com.ua with esmtp (Exim 4.68 (FreeBSD))
(envelope-from <noreply [at] gmail.com>)
id 1NjaMD-000K4b-Cj; Mon, 22 Feb 2010 17:38:01 +0200
Received: from 62.56.132.7.satcom-systems.net
(62.56.132.7.satcom-systems.net [62.56.132.7]) by mail.freehost.com.ua
(Horde MIME library) with HTTP; Mon, 22 Feb 2010 17:38:01 +0200
coordinator63 [at] hotmail.com
coordinator64 [at] hotmail.com
die Madrid-Konnektion zum x-ten Male:
Received: from mx4.hotmail.com (237.red.175.225.212.user.ptvtelecom.com
[212.225.175.237])
by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
id 0LpXla-1NK9cY2f06-00gdQ8 for xxxxx; Wed, 24 Feb 2010
01:58:08 +0100
eullotto [at] aol.com
unisecc [at] madrid.com
Muguphon: +34 672 509 598 ---> Vodafone España, S.a.u.
- kjz
Und auch hier:
Received: from 70.45.68.68.client.static.strong12.reliablehosting.com
(EHLO mx4.hotmail.com) [68.68.45.70]
by mx0.gmx.net (mx067) with SMTP; 22 Feb 2010 18:13:24 +0100
Received: from 112.43.68.68.client.static.strong11.reliablehosting.com
(EHLO mx4.hotmail.com) [68.68.43.112]
by mx0.gmx.net (mx080) with SMTP; 23 Feb 2010 19:33:35 +0100
fjperze [at] aim.com (AOL)
address.paul999999a [at] aol.com
Received: from webmail.hodaka.com.tw (61-218-15-30.HINET-IP.hinet.net
[61.218.15.30])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 98F7378A3DD2
for xxxxx; Tue, 23 Feb 2010 18:06:51 +0100 (CET)
Received: from mail.hodaka.com.tw (localhost [127.0.0.1])
by webmail.hodaka.com.tw (8.14.3/8.14.3) with ESMTP id o1NEcN1n046398;
Tue, 23 Feb 2010 22:38:25 +0800 (CST)
(envelope-from info [at] mevasbank.org.com.tw)
jerryntai [at] qatar.io
Received: from ns1.webhostingpool.com (ns1.webhostingpool.com
[203.113.25.78])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D911F78A3E66
for xxxxx; Wed, 24 Feb 2010 16:48:17 +0100 (CET)
Received: from User (unknown [41.191.85.209])
by ns1.webhostingpool.com (Postfix) with ESMTP id 662292FF22C;
Wed, 24 Feb 2010 11:55:18 +0700 (ICT)
IP: 41.191.85.209 ---> MICRO-NET_CYBER, BJ
jmreddy1950 [at] hosanna.net
jmreddy [at] hotmail.com
- kjz
alle unsere 'Lieblinge':
Freenet, Teil 8:
Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 3978178A31CE
for xxxxx; Thu, 25 Feb 2010 06:57:49 +0100 (CET)
Received: from [195.4.92.23] (helo=13.mx.freenet.de)
by mout0.freenet.de with esmtpa (ID hyyuoda [at] 24h.de) (port 25) (Exim
4.72 #1)
id 1NkWgt-0002Cu-U8; Thu, 25 Feb 2010 06:55:15 +0100
Received: from [66.90.109.42] (port=34641 helo=User)
by 13.mx.freenet.de with esmtpa (ID hyyuoda [at] 24h.de) (port 25) (Exim
4.72 #2)
id 1NkWgo-0001wF-45; Thu, 25 Feb 2010 06:55:15 +0100
IP: 66.90.109.42 ---> FDCservers.net
hyyuoda [at] 24h.de (Freenet)
grhbrank [at] fastwebmail.it
rrttyyyyyyssssa [at] virgilio.it
gecracktes SquirrelMail:
Received: from mail1a.ulab.edu.bd (unknown [116.68.200.35])
by xxxxx (Postfix) with SMTP id E2113789B279
for xxxxx; Thu, 25 Feb 2010 06:54:36 +0100 (CET)
Received: (qmail 12834 invoked by uid 89); 23 Feb 2010 17:24:20 -0000
Cc: recipient list not shown: ;
Received: from 41.184.20.137
(SquirrelMail authenticated user anwarul.islam [at] ulab.edu.bd)
by mail1a.ulab.edu.bd with HTTP;
Tue, 23 Feb 2010 23:24:20 +0600 (BDT)
IP: 41.184.20.137 ---> ipNX NIGERIA LIMITED
anwarul.islam [at] ulab.edu.bd
davidnwaorgu08 [at] yahoo.co.jp
fcicourier [at] yahoo.co.jp
Muguphon: +234-80-33067447 ---> MTN Nigeria Communications Ltd.
Received: from apparelnews.co.kr (unknown [221.143.46.124])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C25FA78A4136
for xxxxx; Thu, 25 Feb 2010 14:21:37 +0100 (CET)
Received: from apparelnews.co.kr (localhost [127.0.0.1])
by apparelnews.co.kr (8.13.1/8.13.1) with ESMTP id o1ONKx0w021135
for xxxxx; Thu, 25 Feb 2010 08:20:59 +0900
Received: (from nobody [at] localhost)
by apparelnews.co.kr (8.13.1/8.13.1/Submit) id o1ONKw0q021126;
Thu, 25 Feb 2010 08:20:58 +0900
debtcommitee [at] in.com
marcosalfred1 [at] emailclick.com
Received: from IMPaqm2.telefonica.net (impaqm2.telefonica.net [213.4.138.2])
by deliver.uni-koblenz.de (Postfix) with ESMTP id D53FF78A3DC1
for xxxxx; Thu, 25 Feb 2010 23:45:06 +0100 (CET)
Received: from IMPmailhost4.adm.correo ([10.20.102.125])
by IMPaqm2.telefonica.net with bizsmtp
id mLQT1d00P2iL0W23MM8ot5; Thu, 25 Feb 2010 22:08:48 +0100
Received: from User ([116.206.138.39])
by IMPmailhost4.adm.correo with BIZ IMP
id mM8D1d00M0rBL441kM8Hwh; Thu, 25 Feb 2010 22:08:48 +0100
hostalmeridiano [at] telefonica.net
privatemoneylender11 [at] gmail.com
privatemoneylender [at] yahoo.com.my
Muguphon: + (60) 142-385-704 ---> Maxis Mobile (Binariang)
Received: from sinu.unisinu.edu.co (unknown [200.21.232.66])
by xxxxx (Postfix) with ESMTP id E8F1A78A3CD9
for xxxxx; Fri, 26 Feb 2010 03:17:59 +0100 (CET)
Received: by sinu.unisinu.edu.co (Postfix, from userid 48)
id 713AFBC5372; Thu, 25 Feb 2010 18:34:32 -0500 (COT)
Received: from 41.210.4.0 ([41.210.4.0]) by www.unisinu.edu.co (Horde MIME
library) with HTTP; Thu, 25 Feb 2010 18:34:26 -0500
IP: 41.210.4.0 ---> Ghana Telecom ADSL
s0gt [at] web2mail.com
halifaxbankplcl [at] yahoo.com.hk
Received: from mail.nexcom.cn (unknown [218.241.81.77])
by xxxxx (Postfix) with ESMTP id 3C97978A4132
for xxxxx; Fri, 26 Feb 2010 13:23:22 +0100 (CET)
Received: from User (unknown [41.138.177.225])
by mail.nexcom.cn (Postfix) with ESMTPA id AE3E3C3136;
Fri, 26 Feb 2010 02:40:24 +0800 (CST)
IP: 41.138.177.225 ---> Visafone Communications Limited, Nigeria
g.jacobss [at] yahoo.com.hk
mrs.sharontanton [at] yahoo.com
Received: from mail7.delicook.com (HELO delicook.com) [211.116.225.82]
by mx0.gmx.net (mx059) with SMTP; 26 Feb 2010 12:07:30 +0100
Received: from User (41.218.229.223)
MX_Record =
(alt1.gmail-smtp-in.l.google.com;alt3.gmail-smtp-in.l.google.com;)
by delicook.com (211.116.225.82) with [Nmail V3.6 20051111(S)]
for xxxxx from <fmr1904 [at] gmail.com>;
Thu, 25 Feb 2010 15:36:52 +0900
Received: from mail7.delicook.com (HELO delicook.com) [211.116.225.82]
by mx0.gmx.net (mx099) with SMTP; 26 Feb 2010 13:39:01 +0100
Received: from User (41.218.229.223)
MX_Record =
(alt1.gmail-smtp-in.l.google.com;alt3.gmail-smtp-in.l.google.com;)
by delicook.com (211.116.225.82) with [Nmail V3.6 20051111(S)]
for xxxxx from <fmr1904 [at] gmail.com>;
Thu, 25 Feb 2010 18:05:48 +0900
IP: 211.116.225.82 ---> vfbb229223.4u.com.gh
fmr1904 [at] gmail.com
baiden1978 [at] mail.md
- kjz
In aller Kürze:
Received: from server1.mycustomrewards.com (EHLO
mail.mycustomrewards.com) [72.51.34.247]
by mx0.gmx.net (mx118) with SMTP; 27 Feb 2010 11:05:42 +0100
Received: from User ([64.207.13.178]) by mycustomrewards.com with
MailEnable ESMTP; Sat, 13 Feb 2010 06:49:45 -0600
IP: 64.207.13.178 ---> mail.compupros.com (soweit scheint es mit den 'COMPUter-PROfiS nicht her zu sein...)
auditorfdickson [at] i12.com
Muguphon: +44 702 408 8705 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44 207 785 9263 ---> Cable & Wireless (Energis), UK
Received: from unknown (EHLO mail.geosoft.co.kr) [218.236.24.2]
by mx0.gmx.net (mx024) with SMTP; 26 Feb 2010 23:21:25 +0100
Received: from User ([41.217.66.4])
by mail.geosoft.co.kr (Merak 8.0.3) with ASMTP id PTJ80197;
Sat, 27 Feb 2010 05:29:09 +0900
IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.
Received: from ns1.conticonti.com.br (EHLO mail.conticonti.com.br)
[200.138.194.194]
by mx0.gmx.net (mx110) with SMTP; 28 Feb 2010 09:17:13 +0100
Received: by mail.conticonti.com.br (Postfix, from userid 100)
id 532098D767; Sat, 27 Feb 2010 16:52:04 +0000 (UTC)
Received: from User (www.zmmae.gov.tr [81.215.14.21])
by mail.conticonti.com.br (Postfix) with ESMTPA id A17968D75E;
Sat, 27 Feb 2010 14:51:48 -0200 (BRST)
steve2reed [at] gmail.com
Muguphon: +44 702 406 5890 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 409 8797 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 407 3956 ---> Magrathea Telecommunications Limited, UK
Received: from mail.ema-env.com (EHLO ema-env.com) [64.199.148.154]
by mx0.gmx.net (mx113) with SMTP; 26 Feb 2010 23:18:02 +0100
Received: from User ([217.41.59.39]) by ema-env.com with Microsoft
SMTPSVC(6.0.3790.3959);
Fri, 26 Feb 2010 15:54:26 -0600
jamesdalejr23 [at] naseej.com
standardchartered [at] gala.net
die Madrid-Konnektion:
Received: from 213.27.202.49.es.colt.net (EHLO
BUSINET-KDR7XLA.mydomain.com) [213.27.202.49]
by mx0.gmx.net (mx079) with SMTP; 28 Feb 2010 08:52:37 +0100
Received: from User ([77.211.122.229]) by mydomain.com with MailEnable
ESMTP; Sat, 20 Feb 2010 17:17:46 +0100
IP: 77.211.122.229 ---> VODAFONE_SPAIN_NETWORK
grupobilbaosa [at] aim.com
lottocomissio1 [at] aim.com
Muguphon: +34 672 552 862 ---> Vodafone España, S.a.u.
Muguphon: +34 634 054 351 ---> Vodafone España, S.a.u.
Mugufax: +34 911 414 370 ---> Jazz Telecom, S.a.u.
Received: from web57410.mail.re1.yahoo.com (web57410.mail.re1.yahoo.com
[66.196.100.61])
by xxxxx (Postfix) with SMTP id 7D7257818961
for xxxxx; Sun, 28 Feb 2010 11:05:44 +0100 (CET)
Received: (qmail 94548 invoked by uid 60001); 28 Feb 2010 10:05:44 -0000
Received: from [41.222.192.88] by web57410.mail.re1.yahoo.com via HTTP;
Sun, 28 Feb 2010 02:05:43 PST
IP: 41.222.192.88 ---> ISOCEL SARL, BJ
faatin20062007 [at] yahoo.com
yokadossa [at] mailmeasap.com
Freenet, Teil 8:
Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id EBA0978A3D3C
for xxxxx; Sun, 28 Feb 2010 16:50:10 +0100 (CET)
Received: from [195.4.92.11] (helo=1.mx.freenet.de)
by mout1.freenet.de with esmtpa (ID webmaster [at] vom-katte-schloss.de)
(port 25) (Exim 4.72 #1)
id 1NllOo-000465-9W; Sun, 28 Feb 2010 16:49:42 +0100
Received: from [41.211.226.198] (port=1288 helo=User)
by 1.mx.freenet.de with esmtpa (ID webmaster [at] vom-katte-schloss.de)
(port 587) (Exim 4.72 #2)
id 1NllOm-0007SR-MT; Sun, 28 Feb 2010 16:49:42 +0100
IP: 41.211.226.198 ---> Direct-on-PC Limited, Nigeria
webmaster [at] vom-katte-schloss.de (Freenet)
info.fbiusa555 [at] gmail.com
- kjz
Es hört nie auf:
Freenet ist Mugus Liebling, Teil 9:
Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 0B8F178A3D45
for xxxxx; Mon, 1 Mar 2010 18:26:07 +0100 (CET)
Received: from [195.4.92.13] (helo=3.mx.freenet.de)
by mout2.freenet.de with esmtpa (ID aungabeng5 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1Nm9NL-0007RW-G4; Mon, 01 Mar 2010 18:25:47 +0100
Received: from [82.128.36.73] (port=3958 helo=User)
by 3.mx.freenet.de with esmtpa (ID aungabeng5 [at] bossmail.de) (port 25)
(Exim 4.72 #2)
id 1Nm9NI-0007fb-K1; Mon, 01 Mar 2010 18:25:47 +0100
IP: 82.128.36.73 ---> Multilinks Telecommunications Limited, Nigeria
aungabeng5 [at] bossmail.de (Freenet)
dr.tundelemon3 [at] hotmail.com
gamesmith94134 [at] yahoo.com
Muguphon: +234-7068019880 ---> MTN Nigeria Communications Ltd.
Received: from mail.scottissue.com (EHLO STSRV01.scottissue.com)
[216.68.96.82]
by mx0.gmx.net (mx085) with SMTP; 01 Mar 2010 20:11:21 +0100
Received: from User ([41.115.221.190]) by STSRV01.scottissue.com with
Microsoft SMTPSVC(6.0.3790.1830);
Mon, 1 Mar 2010 14:11:09 -0500
IP: 41.115.221.190 ---> MTN Network Solutions (Pty) Ltd., ZA
zhiwong3 [at] mail2hongkong.com
zhiwong [at] mail2hongkong.com
zhiwong7 [at] mail2Hongkong.com
Received: from mailserver.media.gov.kw (mailserver.media.gov.kw
[168.187.134.79])
by xxxxx (Postfix) with ESMTP id 5F76478019E5
for xxxxx; Tue, 2 Mar 2010 16:56:23 +0100 (CET)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mailserver.media.gov.kw (Postfix) with ESMTP id 48DF941BB04;
Sat, 27 Feb 2010 12:08:55 +0300 (AST)
X-Virus-Scanned: amavisd-new at media.gov.kw
Received: from mailserver.media.gov.kw ([127.0.0.1])
by localhost (mailserver.media.gov.kw [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id n0MPQ-vDbhzU; Sat, 27 Feb 2010 12:08:54 +0300 (AST)
Received: from User (unknown [195.216.245.10])
by mailserver.media.gov.kw (Postfix) with ESMTPA id B85FE41A688;
Sat, 27 Feb 2010 12:08:17 +0300 (AST)
IP: 195.216.245.10 ---> Peace_Global, Lagos, NG
philipdavid2010 [at] yahoo.co.jp
citibank [at] london.com
Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.2])
by xxxxx (Postfix) with ESMTP id 5304D78A3E46
for xxxxx; Tue, 2 Mar 2010 20:44:21 +0100 (CET)
Received: from filter.sfr.fr (localhost [127.0.0.1])
by msfrf2108.sfr.fr (SMTP Server) with ESMTP id 0B1597000092;
Tue, 2 Mar 2010 20:44:21 +0100 (CET)
Received: from User (unknown [116.206.143.193])
by msfrf2108.sfr.fr (SMTP Server) with ESMTP id 0436070000B8;
Tue, 2 Mar 2010 20:43:34 +0100 (CET)
IP: 116.206.143.193 ---> iZZinet Sdn. Bhd., MY
easyloanfirm0012 [at] mail2world.com
easyloanfirm [at] mail2world.com
Received: from ateks.co.yu (208.95.252.195.static.beotel.net
[195.252.95.208])
by xxxxx (Postfix) with ESMTP id 6BFC778019E9
for xxxxx; Wed, 3 Mar 2010 15:56:22 +0100 (CET)
Received: from User ([193.77.184.234]) by ateks.co.yu with Microsoft
SMTPSVC(5.0.2195.6713);
Wed, 3 Mar 2010 11:06:12 +0100
IP: 193.77.184.234 ---> BSN-77-184-234.static.dsl.siol.net
rishardwilson2010 [at] ankara.tc
richardwilson2010k [at] rocketmail.com
Received: from 191.45.68.68.client.static.strong12.reliablehosting.com
(EHLO mx4.hotmail.com) [68.68.45.191]
by mx0.gmx.net (mx098) with SMTP; 03 Mar 2010 16:39:51 +0100
address.paul999999a [at] aol.com
Received: from smtp-relay.pixius.net (smtp-res.pixius.net [64.39.208.235])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1DA457818960
for xxxxx; Wed, 3 Mar 2010 20:14:37 +0100 (CET)
Received: from User [41.217.65.4] by res-02-proxy.pixius.com (Axigen)
with ESMTPA id 3B6616; Wed, 3 Mar 2010 13:05:05 -0600
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
hamby357 [at] pixius.net
revbenson2010 [at] bellsouth.net
Muguphon: +234-808-702-9431 ---> Celtel Nigeria Limited/Zain
Received: from mail06.syd.optusnet.com.au (mail06.syd.optusnet.com.au
[211.29.132.187])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4EF6178A34F5
for xxxxx; Wed, 3 Mar 2010 21:15:39 +0100 (CET)
Received: from User ([59.154.190.46])
(authenticated sender ebrincat)
by mail06.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id o23KCLGY026841;
Thu, 4 Mar 2010 07:12:22 +1100
pausmith [at] blumail.org
- kjz
neue Folge:
Freenet, Teil 10:
Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 3378E78019E3
for xxxxx Sun, 28 Feb 2010 23:53:40 +0100 (CET)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout2.freenet.de with esmtpa (ID fghhh5 [at] bossmail.de) (port 25) (Exim
4.72 #1)
id 1NlryX-0002lv-8o; Sun, 28 Feb 2010 23:51:01 +0100
Received: from [82.128.84.215] (port=1226 helo=User)
by 4.mx.freenet.de with esmtpa (ID fghhh5 [at] bossmail.de) (port 25) (Exim
4.72 #2)
id 1NlryW-0006CM-B2; Sun, 28 Feb 2010 23:51:01 +0100
IP: 82.128.84.215 ---> Multilinks Telecommunications Limited, Nigeria
fghhh5 [at] bossmail.de (Freenet)
tundelommmn877 [at] hotmail.com
cbn9987 [at] hotmail.com
Received: from relay.mail.interoute.net (EHLO relay1.mail.interoute.net)
[154.15.246.50]
by mx0.gmx.net (mx080) with SMTP; 01 Mar 2010 04:45:13 +0100
Received: from [154.15.201.166] (helo=outbound1.psi.neteu.net)
by relay1.psi.neteu.net with esmtp (Exim 4.65)
(envelope-from <robertwrightt [at] gmail.com>)
id 1NlwZ2-0001HR-F4; Mon, 01 Mar 2010 04:45:00 +0100
Received: from 41.30.85.35 (EHLO User) ([41.30.85.35])
by outbound1.psi.neteu.net (MOS 3.8.2-GA FastPath queued)
with ESMTP id BCO45496 (AUTH frank);
Mon, 01 Mar 2010 04:44:51 +0100 (CET)
IP: 41.30.85.35 ---> Vodacom_UMTS_Gauteng_INTERNET_APN, ZA
robertwrightt [at] gmail.com
robertwright1 [at] gmx.us
gecrackter Uni-Account:
Received: from smtp.scut.edu.cn (EHLO smtp.scut.edu.cn) [202.38.193.34]
by mx0.gmx.net (mx002) with SMTP; 02 Mar 2010 00:49:57 +0100
Received: from User (unknown [202.157.184.60])
by smtp.scut.edu.cn (Postfix) with ESMTP id 9A276222F94;
Tue, 2 Mar 2010 02:17:34 +0800 (CST)
pnmboweni [at] gmx.com
jasmine [at] scut.edu.cn
Muguphon: +27710780349 ---> MTN, ZA
Mugufax: +27865711287 ---> premium rate number, South Africa
Received: from no-ptr.midphase.com (EHLO server33.gamesmail1.com)
[98.158.180.39]
by mx0.gmx.net (mx063) with SMTP; 02 Mar 2010 05:02:50 +0100
Received: from 95-168-182-116.internetserviceteam.com ([95.168.182.116]
helo=007-PC)
by server33.gamesmail1.com with esmtpa (Exim 4.69)
(envelope-from <auto [at] games.com>)
id 1NmJJe-00057b-Ur; Tue, 02 Mar 2010 04:02:39 +0000
claims2010 [at] games.com
Received: from mx.balloon.it (EHLO dns.blunauta.it) [82.112.199.214]
by mx0.gmx.net (mx072) with SMTP; 02 Mar 2010 09:27:48 +0100
Received: from User ([81.215.14.21]) by dns.blunauta.it with Microsoft
SMTPSVC(6.0.3790.3959);
Tue, 2 Mar 2010 09:18:56 +0100
moneytransfe [at] administrativos.com
Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.
Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.2])
by xxxxx (Postfix) with ESMTP id 8F17978019E9
for xxxxx; Tue, 2 Mar 2010 14:55:16 +0100 (CET)
Received: from filter.sfr.fr (localhost [127.0.0.1])
by msfrf2108.sfr.fr (SMTP Server) with ESMTP id 2F3AD700009D;
Tue, 2 Mar 2010 14:55:16 +0100 (CET)
Received: from User (unknown [116.206.143.193])
by msfrf2108.sfr.fr (SMTP Server) with ESMTP id CB16C700008F;
Tue, 2 Mar 2010 14:54:54 +0100 (CET)
IP: 116.206.143.193 ---> iZZinet Sdn. Bhd., MY
easyloanfirm [at] mail2world.com
easyloanfirm0012 [at] mail2world.com
Freenet, Teil 11:
Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 31F9778A34A8
for xxxxx; Tue, 2 Mar 2010 14:59:57 +0100 (CET)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout2.freenet.de with esmtpa (ID kpoli7 [at] bossmail.de) (port 25) (Exim
4.72 #1)
id 1NmSU1-0002eH-2q; Tue, 02 Mar 2010 14:49:57 +0100
Received: from server1.nairahost.net ([75.126.213.58]:36790 helo=User)
by 4.mx.freenet.de with esmtpa (ID kpoli7 [at] bossmail.de) (port 25) (Exim
4.72 #2)
id 1NmSTt-0003lc-BD; Tue, 02 Mar 2010 14:49:56 +0100
kpoli7 [at] bossmail.de (Freenet)
davidjamesmessages [at] yahoo.co.uk
djmess [at] yahoo.co.uk
Dauer-Mugu aus der Madrid-Konnektion:
Received: from mx4.hotmail.com (237.red.175.225.212.user.ptvtelecom.com
[212.225.175.237])
by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
id 0MVegt-1OEPYF16cx-00Yoch for xxxxx; Wed, 03 Mar 2010
02:56:48 +0100
eurollotto [at] aol.com
unisecc [at] madrid.com
Muguphon: +34 672 509 59 ---> Vodafone España, S.a.u.
Received: from mail.ssfeng.com (unknown [61.134.60.149])
by xxxxx (Postfix) with ESMTP id 041A978A4120
for xxxxx; Wed, 3 Mar 2010 10:11:14 +0100 (CET)
Received: (qmail 7255 invoked from network); 2 Mar 2010 10:25:11 -0000
Received: from unknown (HELO User) (hello [at] 82.128.39.224)
by mail.ssfeng.com with SMTP; 2 Mar 2010 10:25:11 -0000
IP: 82.128.39.224 ---> Multilinks Telecommunications Limited, Nigeria
martinlee_69 [at] yahoo.co.jp
martinlee_70 [at] yahoo.co.jp
- kjz
die große Mugu-Parade:
Received: from mail.cyberannex.com (mail.cyberannex.net [24.249.10.20])
by xxxxx (Postfix) with ESMTP id ACF8778A33A6
for xxxxx; Thu, 4 Mar 2010 05:44:51 +0100 (CET)
Received: from vc-41-17-98-235.umts.vodacom.co.za [41.17.98.235] by
mail.ocbis.com with SMTP;
Wed, 3 Mar 2010 20:21:21 -0800
IP: 41.17.98.235 ---> Vodacom_UMTS_Pretoria1, ZA
mystery1 [at] msassignment.com
Freenet, Teil 11:
Received: from mout5.freenet.de (mout5.freenet.de [195.4.92.95])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 51CD578A3BD0
for xxxxx; Thu, 4 Mar 2010 13:56:07 +0100 (CET)
Received: from [195.4.92.27] (helo=17.mx.freenet.de)
by mout5.freenet.de with esmtpa (ID hhghfdkjhfj7 [at] moneymail.de) (port
25) (Exim 4.72 #1)
id 1NnAYn-0002Qv-Hs; Thu, 04 Mar 2010 13:53:49 +0100
Received: from 96-32-4-201.dhcp.nwtn.ct.charter.com ([96.32.4.201]:3905
helo=User)
by 17.mx.freenet.de with esmtpa (ID hhghfdkjhfj7 [at] moneymail.de) (port
25) (Exim 4.72 #2)
id 1NnAYg-0000sz-Ih; Thu, 04 Mar 2010 13:53:48 +0100
hhghfdkjhfj7 [at] moneymail.de (Freenet)
hsbcbank2 [at] mail.mn
gecracktes SquirrelMail:
Received: from mail.coperfil.com.br (mail.coperfil.com.br [189.109.43.18])
by xxxxx (Postfix) with ESMTP id 2FF5578019DE
for xxxxx; Thu, 4 Mar 2010 23:51:58 +0100 (CET)
Received: from 189.109.43.18 (localhost.localdomain [127.0.0.1])
by mail.coperfil.com.br (8.13.8/8.13.1) with SMTP id o24M7fv1021626;
Thu, 4 Mar 2010 19:07:41 -0300
Received: from 41.138.179.173
(SquirrelMail authenticated user administrativo)
by 189.109.43.18 with HTTP;
Thu, 4 Mar 2010 19:07:41 -0300 (BRT)
IP: 41.138.179.173 ---> Visafone Communications Limited, Nigeria
administrativo [at] coperfil.com.br
heritagelttry [at] admin.in.th
Muguphon: +44-7011134219 ---> PNC Telecom Services Limited, UK
Received: from gondor.tr.net (EHLO gondor.tr.net) [195.155.1.40]
by mx0.gmx.net (mx019) with SMTP; 05 Mar 2010 04:56:09 +0100
Received: from User ([41.217.65.4])
by gondor.tr.net (Sun Java System Messaging Server 6.2-5.04 (built Jan 24
2006)) with ESMTPA id <0KYR00GM4RANNL60 [at] gondor.tr.net>; Thu,
04 Mar 2010 20:01:36 +0200 (EET)
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
MrDavidOmo1 [at] sms.cz
mrdavidomo [at] i12.com
Muguphon: +234-809-128-8840 ---> EMTS, Nigeria/etisalat.ae
die Madrid-Konnektion:
Received: from relay.aragon.es (relay.aragon.es [195.55.229.47])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 75BD2789B974
for xxxxx; Fri, 5 Mar 2010 13:26:19 +0100 (CET)
Received: from midcorreo2.dga.es (midcorreo2.dga.es [172.27.12.76])
by relay.aragon.es (8.13.8/8.13.8/Debian-3) with ESMTP id o259sLso016323
for xxxxx; Fri, 5 Mar 2010 10:54:27 +0100
jerryntaimevas [at] qatar.io
cphgizaragoza [at] educa.aragon.es
nochmal die Madrid-Konnetion, über gecrackten Uni-Account:
Received: from mail.lism.catholic.edu.au (EHLO lism.catholic.edu.au)
[203.52.225.105]
by mx0.gmx.net (mx116) with SMTP; 08 Mar 2010 04:18:57 +0100
Received: from User jhodson [213.37.50.68]
by lism.catholic.edu.au with NetMail SMTP Agent $Revision: 12942 $ on
Linux;
Mon, 08 Mar 2010 14:15:24 +1100
IP: 213.37.50.68 ---> 213.37.50.68.static.user.ono.com, ES
sgtwi [at] yahoo.com
jhodson [at] lism.catholic.edu.au
Und eine etwas andere Masche, deshalb auch der Text:
Received: from bcc-dc1.BCC.local (mail.bouchillon-crossanlaw.com
[66.208.230.61])
by xxxxx (Postfix) with ESMTP id DF77B78019E6
for xxxxx; Mon, 8 Mar 2010 04:29:46 +0100 (CET)
Received: from User ([82.128.19.21]) by bcc-dc1.BCC.local with Microsoft
SMTPSVC(6.0.3790.1830);
Sun, 7 Mar 2010 21:50:54 -0500
IP: 82.128.19.21 ---> ml82.128.19.21.multilinks.com, Nigeria
MAKE MONEY BY SIMPLY DRIVING YOUR CAR
ADVERTISER WANTED FOR HOLMES&SELLERS
EARN NO LESS THAN $200 WEEKLY TO ADVERTISE ON YOUR CAR.
It is Very Easy and Simple
No Application fees required
How it works Here's the basic premise of the "paid to drive" concept:
HOLMES&Sellers seeks people -- regular citizens, not professional
drivers -- to go about their normal routine as they usually do, only
with a big advert for "HOLMES&SELLERS" plastered on your car.The ads are
typically vinyl decals, also known as "auto wraps," that almost seem to
be painted on the vehicle, and which will cover any portion of your
car's exterior surface.
What does the company get out of this type of ad strategy? Lots of
exposure and awareness.The auto wraps tend to be colorful and
eye-catching and attract lots of attention. Plus, it's a form of
advertising with a captive audience,meaning people who are stuck in
traffic and can't avoid seeing the wrapped car alongside them. This
program will last for 3 months and the minimum period you can
participate is 1 month.
You will be compensated with a $200 per Week,which is essentially a
"rental" payment for letting our company use the space.HOLMES&SELLERS
shall provide experts that would handle the advert placing on your
car.You will receive an up front payment of $400 inform of check for
accepting to carry this advert on your car and other weekly payments
will also come in the form of checks and delivered at your address weekly.
What you need to do is to contact the email below michealtyler200 [at] gamil.com
The following information below will be needed
Full Name:
Age:
Occupation:
Make of car/ year:
Address:
city:
State:
Zip code:
Phone Number(s) mobile/home :
Email Address:
We shall be contacting you as soon as we receive these information,
HOLMES&SELLERS looks forward to working with you.
micheal
Und da der Mugu so saublöd ist, um seine eigene Email-Adresse richtig zu schreiben, hier noch einmal richtig:
michealtyler200 [at] gmail.com
- kjz
IP: 213.37.50.68 ---> 213.37.50.68.static.user.ono.com, ES
sgtwi [at] yahoo.com
Putzi hat man wohl den Account geknackt, deshalb neuer Anlauf:
Received: from mail.lism.catholic.edu.au (EHLO lism.catholic.edu.au)
[203.52.225.105]
by mx0.gmx.net (mx073) with SMTP; 08 Mar 2010 16:40:54 +0100
Received: from User jhodson [213.37.50.68]
by lism.catholic.edu.au with NetMail SMTP Agent $Revision: 12942 $ on
Linux;
Tue, 09 Mar 2010 02:25:23 +1100
IP: 213.37.50.68 ---> 213.37.50.68.static.user.ono.com
sgtwi [at] yahoo.cn
dial2tom [at] comcast.net
jhodson [at] lism.catholic.edu.au
und auch im weiteren noch ein 'alter Bekannter':
Received: from ns1.conticonti.com.br (EHLO mail.conticonti.com.br)
[200.138.194.194]
by mx0.gmx.net (mx010) with SMTP; 08 Mar 2010 20:12:02 +0100
Received: by mail.conticonti.com.br (Postfix, from userid 100)
id 74D0D9EAFD7; Mon, 8 Mar 2010 17:18:08 +0000 (UTC)
Received: from User (unknown [41.217.66.4])
by mail.conticonti.com.br (Postfix) with ESMTPA id 6486C9EAFB0;
Mon, 8 Mar 2010 14:17:26 -0300 (BRT)
IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.
steve2reed [at] gmail.com
Muguphon: +44 702 406 5890 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 409 8797 ---> Magrathea Telecommunications Limited
Man sollte sich auch mal die Webseite von Magrathea anschauen:
http://www.magrathea-telecom.co.uk
Professioneller geht's kaum noch..... :D
Received: from SERVEX1.lucaprintgroup.local
(host98-112-static.223-217-b.business.telecomitalia.it [217.223.112.98])
by xxxxx (Postfix) with ESMTP id 1D96078019E7
for xxxxx; Sat, 6 Mar 2010 05:31:10 +0100 (CET)
Received: from User ([41.138.188.211]) by SERVEX1.lucaprintgroup.local
with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 5 Mar 2010 20:53:29 +0100
IP: 41.138.188.211 ---> Visafone Communications Limited, Nigeria
mrsjohnanglica [at] sify.com
angelicakingj [at] yahoo.com
Freenet, Teil 12:
Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7EEE978A3D3C
for xxxxx; Sat, 6 Mar 2010 11:34:16 +0100 (CET)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout6.freenet.de with esmtpa (ID open27 [at] geekmail.de) (port 25) (Exim
4.72 #1)
id 1NnrKZ-0005XX-U4; Sat, 06 Mar 2010 11:33:59 +0100
Received: from [41.211.238.254] (port=4913 helo=User)
by 4.mx.freenet.de with esmtpa (ID open27 [at] geekmail.de) (port 25) (Exim
4.72 #2)
id 1NnrKY-0002CP-Ri; Sat, 06 Mar 2010 11:33:59 +0100
IP: 41.211.238.254 ---> Direct-on-PC Limited, Nigeria
open27 [at] geekmail.de (Freenet)
ahmedsanusi11 [at] live.com
open20 [at] geekmail.de
ahmedsanusi3 [at] live.com
Received: from gate.bgemb.com.pl (EHLO mail.bgemb.com.pl) [80.55.28.218]
by mx0.gmx.net (mx079) with SMTP; 06 Mar 2010 14:26:44 +0100
Received: from ml82.128.23.78.multilinks.com [82.128.23.78] by
mail.bgemb.com.pl with SMTP;
Sat, 6 Mar 2010 14:31:18 +0100
IP: 82.128.23.78 ---> Multilinks, Nigeria
contact [at] united-nationspaymentcenter.org
slel [at] live.co.uk
Received: from vsmtp2.tin.it (vsmtp2.tin.it [212.216.176.222])
by xxxxx (Postfix) with ESMTP id 814EC78A3BB7
for xxxxx; Sat, 6 Mar 2010 21:49:56 +0100 (CET)
Received: from User (41.26.148.202) by vsmtp2.tin.it (8.0.022)
(authenticated as rosekatemadsen10 [at] virgilio.it)
id 49F5BE42174672E3; Sat, 6 Mar 2010 21:48:22 +0100
IP: 41.26.148.202 ---> vc-41-26-148-202.umts.vodacom.co.za
rosekatemadsen10 [at] virgilio.it
rosekatemadsen [at] gala.net
sekatemadsen [at] freenet.de
- kjz
Received: from gate.bgemb.com.pl (EHLO mail.bgemb.com.pl) [80.55.28.218]
by mx0.gmx.net (mx079) with SMTP; 06 Mar 2010 14:26:44 +0100
Received: from ml82.128.23.78.multilinks.com [82.128.23.78] by
mail.bgemb.com.pl with SMTP;
Sat, 6 Mar 2010 14:31:18 +0100
IP: 82.128.23.78 ---> Multilinks, Nigeria
contact [at] united-nationspaymentcenter.org
slel [at] live.co.uk
Kannst ja mal Google wegen united-nationspaymentcenter.org treten.
Kannst ja mal Google wegen united-nationspaymentcenter.org treten.
Das ist schon im Standardpreis mit einbegriffen. :D Leider reagiert Google oft nur sehr lahm, wenn überhaupt.
- kjz
Mugu-Fortsetzung:
Received: from relay.mail.sohu.net (EHLO relay.mail.sohu.net)
[61.135.132.71]
by mx0.gmx.net (mx054) with SMTP; 08 Mar 2010 21:44:16 퍝
Received: from User (unknown [74.7.210.92])
by relay.mail.sohu.net (Postfix) with ESMTPA id 93A1F353C13B;
Tue, 9 Mar 2010 04:41:37 폍 (CST)
thomaswale101 [at] live.com
burkert [at] sohu.net
Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 486787800AD7
for xxxxx; Tue, 9 Mar 2010 10:12:44 +0100 (CET)
Received: (qmail 24184 invoked by uid 1542); 9 Mar 2010 04:45:32 -0000
Received: by simscan 1.3.1 ppid: 20913, pid: 24055, t: 1.1219s
scanners: attach: 1.3.1 clamav: 0.92.1
/m:
Received: from unknown (HELO User) (summer [at] 196.22.137.194)
by smtp4.digitalpath.net with ESMTPA; 9 Mar 2010 04:45:31 -0000
Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 76A567818960
for xxxxx; Thu, 11 Mar 2010 03:04:39 +0100 (CET)
Received: (qmail 21414 invoked by uid 1542); 10 Mar 2010 19:32:21 -0000
Received: by simscan 1.3.1 ppid: 18477, pid: 21392, t: 0.7845s
scanners: attach: 1.3.1 clamav: 0.92.1
/m:
Received: from unknown (HELO User) (summer [at] 196.22.137.194)
by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 19:32:20 -0000
IP: 196.22.137.194 ---> Hetzner, ZA
andwalter11 [at] gala.net
andwalter [at] yahoo.com
jwellington01 [at] live.com
Received: from mout.perfora.net (mout.perfora.net [74.208.4.194])
by xxxxx (Postfix) with ESMTP id 293CA78A3CE8
for xxxxx; Tue, 9 Mar 2010 09:07:58 +0100 (CET)
Received: from ntxpwus92 (ntxpwus92.lxa.perfora.net [172.23.131.70])
by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis)
id 0McE1v-1O5CwW3AXv-00JjLI; Tue, 09 Mar 2010 03:07:57 -0500
shanemarie.white [at] gmail.com
Freenet, Teil 13. Anscheinend wird Freenet zur Zeit in Mugu-Foren als heisser Kandidat für den merkbefreitesten Provider Deutschlands gefeiert, den man nach belieben im Nasenring durch die Manege führen kann. Und Freenet wird wohl auch erst aus dem Tiefschlaf aufwachen, wenn deren Mailserver mal auf den richtigen großen Blacklists gelandet ist und kein Freenet-Kunde mehr seine Mails losbekommt. Dann ist das Geschreie und Geheule wahrscheinlich mal wieder groß....
Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C76DB78A34BF
for xxxxx; Tue, 9 Mar 2010 22:22:26 +0100 (CET)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout0.freenet.de with esmtpa (ID mariann02 [at] justmail.de) (port 25)
(Exim 4.72 #1)
id 1Np6nL-0006wF-S7; Tue, 09 Mar 2010 22:16:51 +0100
Received: from adsl10174.4u.com.gh ([41.210.10.174]:60709 helo=User)
by 4.mx.freenet.de with esmtpa (ID mariann02 [at] justmail.de) (port 25)
(Exim 4.72 #2)
id 1Np6nJ-0004Gz-9P; Tue, 09 Mar 2010 22:16:51 +0100
IP: 41.210.10.174 ---> adsl10174.4u.com.gh
mariann02 [at] justmail.de (Freenet)
msvicbriggs [at] aol.co.uk
msmaphss [at] adelphia.net
Received: from smtpout5.poczta.onet.pl (smtpout5.poczta.onet.pl
[213.180.147.165])
by xxxxx (Postfix) with ESMTP id 1BC277894063
for xxxxx; Wed, 10 Mar 2010 11:57:12 +0100 (CET)
Received: from [65.39.179.34] ([65.39.179.34]:1082 "EHLO my530-a"
rhost-flags-FAIL-FAIL-OK-FAIL) by ps1.m5r2.onet with ESMTPA
id S134224972Ab0CJK5LpDZuP (ORCPT <rfc822;xxxxx);
Wed, 10 Mar 2010 11:57:11 +0100
dseww45 [at] gmx.com
citibnk [at] gmx.com
Freenet, Teil 14:
Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C4C6D78A3CF5
for xxxxx; Wed, 10 Mar 2010 13:04:48 +0100 (CET)
Received: from [195.4.92.26] (helo=16.mx.freenet.de)
by mout0.freenet.de with esmtpa (ID bcvnbm [at] justmail.de) (port 25) (Exim
4.72 #1)
id 1NpKWI-0007lb-96; Wed, 10 Mar 2010 12:56:10 +0100
Received: from [41.211.238.95] (port=56601 helo=User)
by 16.mx.freenet.de with esmtpa (ID bcvnbm [at] justmail.de) (port 25) (Exim
4.72 #2)
id 1NpKWF-00056Q-OQ; Wed, 10 Mar 2010 12:56:09 +0100
IP: 41.211.238.95 ---> Direct-on-PC Limited, Nigeria
bcvnbm [at] justmail.de (Freenet)
kenneth.feagins [at] mail.mn
Muguphon: +44-702-401-8863 ---> Magrathea Telecommunications Limited, UK
- kjz
wieder mal Hetzner, ZA:
Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2DA4678A4115
for xxxxx; Wed, 10 Mar 2010 18:35:23 +0100 (CET)
Received: (qmail 21821 invoked by uid 1542); 10 Mar 2010 04:54:48 -0000
Received: by simscan 1.3.1 ppid: 18193, pid: 21730, t: 1.2257s
scanners: attach: 1.3.1 clamav: 0.92.1
/m:
Received: from unknown (HELO User) (summer [at] 196.22.137.194)
by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 04:54:47 -0000
IP: 196.22.137.194 ---> Hetz-Accessweb-Root, ZA
jwellington [at] gala.net
- kjz
und noch'en paar....
Received: from ricovideo.ru (77.221.138.234.addr.datapoint.ru
[77.221.138.234])
by xxxxx (Postfix) with ESMTP id 719EF783E8DA
for xxxxx; Sun, 14 Mar 2010 00:28:10 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by ricovideo.ru (Postfix) with ESMTP id 2557B25BE65;
Fri, 12 Mar 2010 04:21:04 +0300 (MSK)
Received: from ricovideo.ru ([127.0.0.1])
by localhost (ricovideo.ru [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Tj-hunRsEsB8; Fri, 12 Mar 2010 04:21:04 +0300 (MSK)
Received: from User (unknown [82.128.82.63])
(Authenticated sender: test)
by ricovideo.ru (Postfix) with ESMTPA id 5FC2325BE40;
Fri, 12 Mar 2010 04:20:29 +0300 (MSK)
IP: 82.128.82.63 ---> Multilinks Telecommunications Limited, Nigeria
dr.goodluckjonathan_ng [at] yahoo.com
mrsjuliew [at] aol.com
Muguphon: +234-7095-236-452 ---> Multilinks Telecommunications Ltd., Nigeria
Received: from eyou.net (mails.ccnu.edu.cn [202.114.32.23])
by xxxxx (Postfix) with SMTP id 402A0783E8DA
for xxxxx; Sun, 14 Mar 2010 08:06:04 +0100 (CET)
Received: (eyou anti_spam gateway 3.0); Sun, 14 Mar 2010 14:17:08 +0800
Received: from 41.245.37.71 by 202.114.32.23 with SMTP; Sun, 14 Mar 2010
14:16:59 +0800
IP: 41.245.37.71 ---> dsl-245-37-71.telkomadsl.co.za/Telkom SA Limited
princendebele [at] gala.net
pricendebele [at] gmail.com
hier ist auch der User der Russki-Kiste 'nett':
Received: (qmail invoked by alias); 14 Mar 2010 18:58:01 -0000
Received: from 85-159-0-18-dynamic.retail.datagroup.ua (EHLO adt.com.ua)
[85.159.0.18]
by mx0.gmx.net (mx091) with SMTP; 14 Mar 2010 19:58:01 +0100
Received: from User ([41.217.65.3])
(authenticated user spam [at] adt.com.ua)
by adt.com.ua (Kerio MailServer 6.4.0);
Mon, 1 Mar 2010 18:09:50 +0300
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
spam [at] adt.com.ua
cpltransport00 [at] live.co.uk
Muguphon: +44 703 189 2980 ---> Magrathea Telecommunications Limited, UK
- kjz
Da geht so richtig die Mugu-Post ab:
gecracktes SquirrelMail:
Received: from sites.chicagopicks.com (server22.integrityserver.net
[67.19.2.146])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id E8CA078A3D34
for xxxxx; Wed, 10 Mar 2010 23:34:19 +0100 (CET)
Received: from localhost ([127.0.0.1] helo=webmail.studioridge.com)
by sites.chicagopicks.com with esmtpa (Exim 4.69)
(envelope-from <douglasezit86 [at] yahoo.com>)
id 1Non0R-0008B4-PF; Mon, 08 Mar 2010 18:09:03 -0600
Received: from 41.124.209.55 ([41.124.209.55]) (proxying for 41.124.209.55)
(SquirrelMail authenticated user cheryl [at] studioridge.com)
by webmail.studioridge.com with HTTP;
Mon, 8 Mar 2010 18:09:03 -0600
IP: 41.124.209.55 ---> MTN Network Solutions, ZA
douglasezit86 [at] yahoo.com
cheryl [at] studioridge.com
douglasezit86 [at] sify.com
Received: from mail.apex.com.my (unknown [210.19.31.175])
by xxxxx (Postfix) with ESMTP id 8C94578A3CE8
for xxxxx; Thu, 11 Mar 2010 02:40:49 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by mail.apex.com.my (Postfix) with ESMTP id 6A8501AB2170;
Wed, 10 Mar 2010 22:02:45 +0800 (MYT)
Received: from mail.apex.com.my ([127.0.0.1])
by localhost (mail.apex.com.my [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 28432-02; Wed, 10 Mar 2010 22:02:40 +0800 (MYT)
Received: from User (unknown [82.128.85.169])
by mail.apex.com.my (Postfix) with ESMTP id 78F701AA216F;
Wed, 10 Mar 2010 20:36:28 +0800 (MYT)
IP: 82.128.85.169 ---> Multilinks Telecommunications Limited, Nigeria
samuelagbala [at] hosanna.net
admin [at] apex.com.my
Hetzner, ZA:
Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 76A567818960
for xxxxx; Thu, 11 Mar 2010 03:04:39 +0100 (CET)
Received: (qmail 21414 invoked by uid 1542); 10 Mar 2010 19:32:21 -0000
Received: by simscan 1.3.1 ppid: 18477, pid: 21392, t: 0.7845s
scanners: attach: 1.3.1 clamav: 0.92.1
/m:
Received: from unknown (HELO User) (summer [at] 196.22.137.194)
by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 19:32:20 -0000
IP: 196.22.137.194 ---> Hetz-Accessweb-Root, ZA
jwellington01 [at] live.com
gecracktes SquirrelMail:
Received: from mail.health.go.ke (unknown [62.24.109.214])
by xxxxx (Postfix) with ESMTP id 9564F78A3D55
for xxxxx; Thu, 11 Mar 2010 01:48:17 +0100 (CET)
Received: from webmail.health.go.ke (localhost [127.0.0.1])
by mail.health.go.ke (Postfix) with ESMTP id A27D680C85B;
Thu, 11 Mar 2010 02:07:47 +0300 (EAT)
Received: from 41.206.15.2
(SquirrelMail authenticated user dcdc)
by webmail.health.go.ke with HTTP;
Wed, 10 Mar 2010 23:07:48 -0000
Received: from mail.health.go.ke (unknown [62.24.109.214])
by xxxxx (Postfix) with ESMTP id D92D37826BC9
for xxxxx; Thu, 11 Mar 2010 22:02:56 +0100 (CET)
Received: from webmail.health.go.ke (localhost [127.0.0.1])
by mail.health.go.ke (Postfix) with ESMTP id 46E3180C6BC;
Thu, 11 Mar 2010 01:45:54 +0300 (EAT)
Received: from 41.206.15.1
(SquirrelMail authenticated user dcdc)
by webmail.health.go.ke with HTTP;
Wed, 10 Mar 2010 22:45:54 -0000
IP: 41.206.15.2 ---> MTN Nigeria
dcdc [at] health.go.ke
callymartins7 [at] yahoo.com.hk
Muguphon: +44-701-113-3045 ---> PNC Telecom Services Limited, UK
Mugufax: +44-707-505-5654 ---> Your Communications Ltd, UK
Received: from mx4.hotmail.com
(51.46.68.68.unassigned.reliablehosting.com [68.68.46.51])
by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
id 0Lo04G-1N9nrm4AdU-00fnSQ for xxxxx; Wed, 10 Mar 2010
23:25:17 +0100
address.paul999999a [at] aol.com
Received: from imr-da05.mx.aol.com (imr-da05.mx.aol.com [205.188.105.147])
by xxxxx (Postfix) with ESMTP id 3A14F78A3E60
for xxxxx; Thu, 11 Mar 2010 10:04:40 +0100 (CET)
Received: from mtaout-dc01.r1001.mx.aol.com
(mtaout-dc01.r1001.mx.aol.com [205.188.58.65])
by imr-da05.mx.aol.com (8.14.1/8.14.1) with ESMTP id o2B8x6cL002303;
Thu, 11 Mar 2010 03:59:06 -0500
Message-Id: <201003110859.o2B8x6cL002303 [at] imr-da05.mx.aol.com>
Received: from User (unknown [41.217.65.3])
by mtaout-dc01.r1001.mx.aol.com (WebSuites/MUA Thirdparty client
Interface) with ESMTPA id 454F51C000089;
Thu, 11 Mar 2010 03:57:38 -0500 (EST)
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
mcarlosrichard [at] googlemail.com
combity3 [at] mcom.com
Freenet, Teil 14:
Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id E156D78A3C4C
for xxxxx; Thu, 11 Mar 2010 12:00:00 +0100 (CET)
Received: from [195.4.92.14] (helo=4.mx.freenet.de)
by mout1.freenet.de with esmtpa (ID gon5 [at] freakmail.de) (port 25) (Exim
4.72 #1)
id 1Npfz8-0002Kz-Lc; Thu, 11 Mar 2010 11:51:22 +0100
Received: from [82.128.81.42] (port=1772 helo=User)
by 4.mx.freenet.de with esmtpa (ID gon5 [at] freakmail.de) (port 25) (Exim
4.72 #2)
id 1Npfz1-0006P9-LD; Thu, 11 Mar 2010 11:51:17 +0100
IP: 82.128.81.42 ---> Multilinks Telecommunications Limited, Nigeria
gon5 [at] freakmail.de (Freenet)
nigeriapolicefrc4 [at] gmail.com
npforce100000 [at] gmail.com
die Amsterdam-Madrid-Konnektion:
Received: from cpsmtpb-ews05.kpnxchange.com
(cpsmtpb-ews05.kpnxchange.com [213.75.39.8])
by xxxxx (Postfix) with ESMTP id 6449E78A3BFE
for xxxxx; Thu, 11 Mar 2010 12:33:14 +0100 (CET)
Received: from cpbrm-ews13.kpnxchange.com ([10.94.84.144]) by
cpsmtpb-ews05.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 11 Mar 2010 12:33:14 +0100
Received: from CPSMTPM-EML03.kpnxchange.com ([213.75.39.73]) by
cpbrm-ews13.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 11 Mar 2010 12:33:13 +0100
Received: from localhost ([10.94.77.200]) by
CPSMTPM-EML03.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Thu, 11 Mar 2010 12:33:08 +0100
V.Wit [at] kpnplanet.nl
vintagefn [at] aim.com
Muguphon: +34-672-514-048 ---> Vodafone España, S.a.u.
Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.48])
by xxxxx (Postfix) with ESMTP id BD15A783E8DA
for xxxxx; Fri, 12 Mar 2010 06:37:59 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2114.orange.fr (SMTP Server) with ESMTP id 8895A1C00715;
Fri, 12 Mar 2010 06:37:59 +0100 (CET)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2114.orange.fr (SMTP Server) with ESMTP id 740C11C00767;
Fri, 12 Mar 2010 06:37:59 +0100 (CET)
Received: from User (unknown [62.161.78.142])
by mwinf2114.orange.fr (SMTP Server) with ESMTP id DAC621C00715;
Fri, 12 Mar 2010 06:36:24 +0100 (CET)
2222_fine [at] orange.fr
johnsimmon1999 [at] yahoo.cn
lindatrave [at] yahoo.com
johnsimmon85 [at] yahoo.com.hk
Muguphon: +234-807-0627-501 ---> Globacom Ltd., Nigeria
Received: from mail1.legatum.com (EHLO mail.legatum.com) [87.83.216.42]
by mx0.gmx.net (mx046) with SMTP; 12 Mar 2010 07:16:24 +0100
Received: from unknown (HELO MERLIN.legatum.org) ([192.168.100.114])
by mail.legatum.com with ESMTP; 12 Mar 2010 06:16:17 +0000
Received: from thoth.legatum.org ([172.25.25.13]) by MERLIN.legatum.org
with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 12 Mar 2010 06:16:16 +0000
Received: from sneferu.legatum.org ([172.25.25.16]) by thoth.legatum.org
with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 12 Mar 2010 10:15:39 +0400
Received: from User ([119.51.93.162]) by sneferu.legatum.org with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 12 Mar 2010 10:15:36 +0400
IP: 119.51.93.162 ---> China Unicom Jilin
rfofficedesk [at] yahoo.co.jp
ludaversion [at] smoothkid2.co.cc
- kjz
Das neueste aus Afrika:
Received: from petrest.com.au (petres.lnk.telstra.net [203.45.31.131])
by xxxxx (Postfix) with ESMTP id 9917178A4175
for xxxxx; Tue, 16 Mar 2010 18:38:00 +0100 (CET)
Received: from nospam.petrest.local ([192.168.1.10]) by petrest.com.au
with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 16 Mar 2010 21:05:19 +1100
Received: from User ([82.128.85.216] helo=User) with IPv4:25 by
nospam.petrest.local; 16 Mar 2010 21:04:35 +1100
IP: 82.128.85.216 ---> Multilinks Telecommunications Limited, Nigeria
mrslynnsmith [at] inMail.sk
mrslynnsmith1960 [at] gmail.com
Received: from mail1.hcmute.edu.vn (EHLO mail1.hcmute.edu.vn)
[203.113.147.179]
by mx0.gmx.net (mx002) with SMTP; 17 Mar 2010 17:02:58 +0100
Received: from User (vc-41-29-79-102.umts.vodacom.co.za [41.29.79.102])
(authenticated bits=0)
by mail1.hcmute.edu.vn (8.14.2/8.14.2) with ESMTP id o2H3MlUF026197;
Wed, 17 Mar 2010 10:22:53 +0700
IP: 41.29.79.102 ---> Vodacom_UMTS_Gauteng
augustinedinga [at] sify.com
augustinedinga4 [at] sify.com
augustinedinga2 [at] sify.com
Muguphon: +27-834-515-403 ---> MTN, ZA
- kjz
als neue Kandidaten melden sich:
über gecracktes SquirrelMail:
Received: from mingob.gob.pa (unknown [200.46.243.242])
by xxxxx (Postfix) with ESMTP id 88EA57826BC9
for xxxxx; Mon, 15 Mar 2010 04:24:35 +0100 (CET)
nokiawin1 [at] gmail.com
winmoremobile [at] yahoo.com.hk
Muguphon: +447035946006 ---> Open Telecom International Ltd., UK
Received: from mail.craven-services.com (EHLO craven-services.co.uk)
[217.37.223.30]
by mx0.gmx.net (mx004) with SMTP; 15 Mar 2010 08:43:34 +0100
Received: from User ([81.215.14.21]) by craven-services.co.uk with
Microsoft SMTPSVC(6.0.3790.1830);
Sun, 14 Mar 2010 22:08:00 +0000
IP: 81.215.14.21 ---> www.zmmae.gov.tr
markjam1 [at] administrativos.com
Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.
die Amsterdam-Konnektion:
Received: from psmtp1.dnsg.net (psmtp1.dnsg.net [193.168.128.41])
by xxxxx (Postfix) with SMTP id 024C478A3CE8
for xxxxx; Tue, 16 Mar 2010 01:39:00 +0100 (CET)
Received: (qmail 4658 invoked from network); 15 Mar 2010 23:29:38 +0100
Received: from ip121-196-210-87.adsl2.static.versatel.nl (HELO User)
(morgenbrodt [at] 87.210.196.121)
by psmtp1.dnsg.net with SMTP; 15 Mar 2010 23:29:38 +0100
infosgasl [at] aim.com
laandaluss2 [at] gmail.com
Muguphon: +31-647-226-334 ---> Telfort B.V., NL/Tiscali
gecrackter Uni-Account:
Received: from mx1.umbc.edu (mx1.umbc.edu [130.85.25.76])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9D5F378A4156
for xxxxx; Tue, 16 Mar 2010 08:37:45 +0100 (CET)
Received: from smtp.umbc.edu (localhost [127.0.0.1])
by umbc.edu (mx1.umbc.edu) with ESMTP id o2G7amSt004517;
Tue, 16 Mar 2010 03:37:41 -0400 (EDT)
Received: from User (linux3.gl.umbc.edu [130.85.24.92])
by smtp.umbc.edu (mx1-relay.umbc.edu) with SMTP id o2G7XmJK003399;
Tue, 16 Mar 2010 03:33:50 -0400 (EDT)
andwalter11 [at] gala.net
andwalter [at] yahoo.com
Received: from ZixVPM03.firsthealth.com (zixvpm03.firsthealth.com
[12.10.217.76])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5EA1778A4188
for xxxxx; Tue, 16 Mar 2010 14:35:20 +0100 (CET)
Received: from ZixVPM03.firsthealth.com (ZixVPM [127.0.0.1])
by Outbound.firsthealth.com (Proprietary) with ESMTP id 9B3A9358F74
for xxxxx; Tue, 16 Mar 2010 06:24:30 -0700 (MST)
Received: from AZPH-SRV-MA07.cvty.com (unknown [10.40.249.134])
by ZixVPM03.firsthealth.com (Proprietary) with ESMTP id B260135884E;
Tue, 16 Mar 2010 06:24:19 -0700 (MST)
Received: from AZPH-SRV-MAIL03.cvty.com ([10.40.177.36]) by
AZPH-SRV-MA07.cvty.com with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 16 Mar 2010 06:34:48 -0700
PGWilkes [at] cvty.com
z.bank87 [at] gala.net
Muguphon: +(234)808 388 0641 ---> Celtel Nigeria Limited/Zain
Received: from 61-25-200-184.rev.home.ne.jp (EHLO ma.ctk23.ne.jp)
[61.25.200.184]
by mx0.gmx.net (mx084) with SMTP; 17 Mar 2010 08:10:07 +0100
Received: from User (biuro-masq.itv.com.pl [80.55.19.246])
by ma.ctk23.ne.jp (Postfix) with ESMTP id 22D0B4C28;
Wed, 17 Mar 2010 16:01:06 +0900 (JST)
Received: from 61-25-200-184.rev.home.ne.jp (EHLO ma.ctk23.ne.jp)
[61.25.200.184]
by mx0.gmx.net (mx084) with SMTP; 17 Mar 2010 08:10:07 +0100
Received: from User (biuro-masq.itv.com.pl [80.55.19.246])
by ma.ctk23.ne.jp (Postfix) with ESMTP id 22D0B4C28;
Wed, 17 Mar 2010 16:01:06 +0900 (JST)
jerycoeman599 [at] ok.kz
cj60223 [at] googlemail.com
Muguphon: +447031945911 ---> Magrathea Telecommunications Limited, UK
Received: from cpsmtpb-ews02.kpnxchange.com
(cpsmtpb-ews02.kpnxchange.com [213.75.39.5])
by xxxxx (Postfix) with ESMTP id 78D15783E8D7
for xxxxx; Wed, 17 Mar 2010 03:29:06 +0100 (CET)
Received: from cpbrm-ews10.kpnxchange.com ([10.94.84.141]) by
cpsmtpb-ews02.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 17 Mar 2010 03:28:40 +0100
Received: from CPSMTPM-EML07.kpnxchange.com ([213.75.39.77]) by
cpbrm-ews10.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 17 Mar 2010 03:28:40 +0100
Received: from localhost ([10.94.77.199]) by
CPSMTPM-EML07.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
Wed, 17 Mar 2010 03:28:00 +0100
infomsft [at] aol.com
keijs072 [at] planet.nl
Received: from 212.183.204.45.static.user.ono.com (EHLO
mail.coaatleon.es) [212.183.204.45]
by mx0.gmx.net (mx033) with SMTP; 17 Mar 2010 05:02:12 +0100
Received: from User ([41.217.65.14])
(authenticated bits=0)
by mail.coaatleon.es (8.12.5/8.12.8) with ESMTP id o2F15fbg015382;
Mon, 15 Mar 2010 02:06:54 +0100
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
n.sai12 [at] yahoo.com
samueludo13 [at] gmail.com
Muguphon: +23354 6155335 ---> MTN, Ghana
Received: from very-e.com (unknown [121.11.84.240])
by xxxxx (Postfix) with ESMTP id 6623E783E8DD
for xxxxx; Wed, 17 Mar 2010 01:26:06 +0100 (CET)
Received: from User [82.128.20.182] by very-e.com with ESMTP
(SMTPD32-8.01) id A3B21210140; Tue, 16 Mar 2010 06:24:50 +0800
Received: from very-e.com (unknown [121.11.84.240])
by xxxxx (Postfix) with ESMTP id 770B67800BCC
for xxxxx; Wed, 17 Mar 2010 07:06:21 +0100 (CET)
Received: from User [82.128.20.41] by very-e.com with ESMTP
(SMTPD32-8.01) id A8BF1840102; Tue, 16 Mar 2010 19:17:19 +0800
IP: 82.128.20.182 ---> ml82.128.20.182.multilinks.com, Nigeria
ibrahimtan77 [at] yahoo.co.uk
ibrahimtan777 [at] live.com
ibrahimtan [at] mail.com
Freenet, Teil 15:
Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 67382783E8DC
for xxxxx; Wed, 17 Mar 2010 11:01:46 +0100 (CET)
Received: from [195.4.92.22] (helo=12.mx.freenet.de)
by mout6.freenet.de with esmtpa (ID baloo10 [at] bossmail.de) (port 25)
(Exim 4.72 #1)
id 1Nrq4M-0007ZQ-9c; Wed, 17 Mar 2010 11:01:42 +0100
Received: from [41.217.65.14] (port=22772 helo=User)
by 12.mx.freenet.de with esmtpa (ID baloo10 [at] bossmail.de) (port 25)
(Exim 4.72 #2)
id 1Nrq4K-0005qQ-SK; Wed, 17 Mar 2010 11:01:42 +0100
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
baloo10 [at] bossmail.de (Freenet)
mariocarlos1002 [at] gmail.com
mariocarlos [at] yahoo.com
- kjz
Die Mugus legen los:
die Amsterdam-Konnektion:
Received: from cosr001.CORMANO.LOCAL
(host131-22-static.223-195-b.business.telecomitalia.it [195.223.22.131])
by xxxxx (Postfix) with ESMTP id C381A7800BE9
for xxxxx; Wed, 17 Mar 2010 23:56:34 +0100 (CET)
Received: from User ([87.210.95.21]) by cosr001.CORMANO.LOCAL with
Microsoft SMTPSVC(6.0.3790.3959);
Tue, 16 Mar 2010 16:41:44 +0100
IP: 87.210.95.21 ---> ip21-95-210-87.adsl2.static.versatel.nl
westerngroup7 [at] netscape.net
morganf [at] redhat.polarhome.com
Received: from slw.com.tw (220-130-52-115.HINET-IP.hinet.net
[220.130.52.115])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 038E178A3E6A
for xxxxx; Wed, 17 Mar 2010 21:26:15 +0100 (CET)
Received: from User (ml82.128.20.189.multilinks.com [82.128.20.189])
(authenticated bits=0)
by slw.com.tw (8.12.8/8.12.8) with ESMTP id o2HC7FVO021190;
Wed, 17 Mar 2010 20:07:25 +0800
IP: 82.128.20.189 ---> Multilinks, Nigeria
alexsmith46 [at] live.com
alex_smith4460 [at] yahoo.com.hk
Received: from nmsbs.normark.local (211-23-203-98.HINET-IP.hinet.net
[211.23.203.98])
by xxxxx (Postfix) with ESMTP id 3EB1D7897432
for xxxxx; Thu, 18 Mar 2010 11:18:00 +0100 (CET)
Received: from User ([192.168.1.1]) by nmsbs.normark.local with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 18 Mar 2010 18:09:04 +0800
paymasterdept [at] gmail.com
paymasterdept [at] centrum.cz
Muguphon: +44 702 4017 962 ---> Magrathea Telecommunications Limited, UK
Received: from mail.dynisys.net
(24-180-248-18.static.bycy.mi.charter.com [24.180.248.18])
by xxxxx (Postfix) with ESMTP id 3F49778A34F5
for xxxxx; Thu, 18 Mar 2010 22:04:20 +0100 (CET)
Received: from User [41.138.190.43] by mail.dynisys.net with ESMTP
(SMTPD32-7.15) id AB229018C; Thu, 18 Mar 2010 14:04:18 -0400
IP: 41.138.190.43 ---> Visafone Communications Limited, Nigeria
fbicotact2010 [at] hotmail.com
Muguphon: +44 702 4039830 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 4075668 ---> Magrathea Telecommunications Limited, UK
Received: from smtpout6.poczta.onet.pl (smtpout6.poczta.onet.pl
[213.180.147.166])
by xxxxx (Postfix) with ESMTP id 3C6B478A3BA8
for xxxxx; Thu, 18 Mar 2010 23:39:19 +0100 (CET)
Received: from [196.46.246.21] ([196.46.246.21]:30102 "EHLO d600-pc"
rhost-flags-FAIL-FAIL-OK-FAIL) by ps2.m5r2.onet with ESMTPA
id S134232748Ab0CRWjS41OuC (ORCPT <rfc822;xxxxx);
Thu, 18 Mar 2010 23:39:18 +0100
IP: 196.46.246.21 ---> Celtel Nigeria Limited/Zain
markanthony.anthony12 [at] gmail.com
markanthony447 [at] onet.pl
Muguphon: + 234-7056665788 ---> Globacom Ltd., Nigeria
Received: from mail.segynonc.net (EHLO mail.segynonc.net) [209.177.232.5]
by mx0.gmx.net (mx011) with SMTP; 19 Mar 2010 03:32:34 +0100
Received: from User ([203.31.191.226] RDNS failed) by mail.segynonc.net
with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 18 Mar 2010 22:29:11 -0400
mr.anthonymutari [at] yahoo.com
youssefkhalid112 [at] gmail.com
Und hier sieht man auch, wie Yahoo die Source-IP mitliefert:
Received: from n10.bullet.mail.mud.yahoo.com (HELO
n10.bullet.mail.mud.yahoo.com) [209.191.125.208]
by mx0.gmx.net (mx053) with SMTP; 19 Mar 2010 11:47:29 +0100
Received: from [68.142.200.225] by n10.bullet.mail.mud.yahoo.com with
NNFMP; 19 Mar 2010 10:47:28 -0000
Received: from [66.196.97.142] by t6.bullet.mud.yahoo.com with NNFMP; 19
Mar 2010 10:47:27 -0000
Received: from [127.0.0.1] by omp110.mail.re3.yahoo.com with NNFMP; 19
Mar 2010 10:47:27 -0000
Received: from [77.70.128.170] by web88008.mail.re2.yahoo.com via HTTP;
Fri, 19 Mar 2010 03:47:27 PDT
IP: 77.70.128.170 ---> Comgeo Services, Nigeria/Taide
agent.alfred12 [at] gmail.com
Muguphon: +447031883670 ---> Magrathea Telecommunications Limited, UK
- kjz
Der Nachschub geht nie aus:
Received: from ns.GmNex.com (unknown [220.90.213.57])
by xxxxx (Postfix) with ESMTP id 89D1178A3E79
for xxxxx; Sat, 20 Mar 2010 09:33:07 +0100 (CET)
Received: from User ([41.218.228.37]) by ns.GmNex.com with Microsoft
SMTPSVC(6.0.3790.3959);
Sat, 20 Mar 2010 17:27:03 +0900
IP: 41.218.228.37 ---> vfbb22837.4u.com.gh
mr.josephawusu1 [at] gmail.com
RevJosephArhinful [at] mail.com
mr.josephawusu [at] yahoo.com
Received: from ip179.208-100-3.static.steadfast.net (EHLO
mail.imageworldwide.com) [208.100.3.179]
by mx0.gmx.net (mx039) with SMTP; 20 Mar 2010 05:31:35 +0100
Received: from UnknownHost [41.217.65.14] by mail.imageworldwide.com
with SMTP;
Fri, 19 Mar 2010 15:28:52 -0500
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
unitedcouriers [at] rediffmail.com
maradams [at] yahoo.com
lindywilliams1 [at] rediffmail.com
Muguphon: +234-813-756-89-22 ---> Nigeria
Received: from etmail.namliong.com.tw (unknown [210.75.26.90])
by xxxxx (Postfix) with ESMTP id 00C9C78004A0
for xxxxx; Sat, 20 Mar 2010 12:51:30 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
by etmail.namliong.com.tw (Postfix) with ESMTP id 47DD27D621;
Sat, 20 Mar 2010 18:16:58 +0800 (CST)
X-Virus-Scanned: amavisd-new at namliong.com.tw
Received: from etmail.namliong.com.tw ([127.0.0.1])
by localhost (nat.namliong.com.tw [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 9nWwjlMTkjZ1; Sat, 20 Mar 2010 18:16:57 +0800 (CST)
Received: from etmail.namliong.com.tw (localhost [127.0.0.1])
by etmail.namliong.com.tw (Postfix) with ESMTP id 307387D8AF;
Sat, 20 Mar 2010 18:16:57 +0800 (CST)
X-OriginatingIP: 41.203.65.44 (test) ---> Globacom Ltd., Nigeria
johngrr30 [at] gmail.com
garry.john450 [at] gmail.com
Received: from 90.41.68.68.client.static.strong10.reliablehosting.com
(EHLO mx4.hotmail.com) [68.68.41.90]
by mx0.gmx.net (mx039) with SMTP; 20 Mar 2010 13:14:27 +0100
address.paulgomez9999 [at] aol.com
sbmjsvgizixisot [at] hotmail.com
Received: from smtp2web.tin.it (smtp2web.tin.it [212.216.176.236])
by xxxxx (Postfix) with ESMTP id C6A627800AD7
for xxxxx; Sat, 20 Mar 2010 14:53:42 +0100 (CET)
Received: from pswm15.cp.tin.it (192.168.70.60) by smtp2web.tin.it (8.5.113)
id 4B991DC500CD1583; Sat, 20 Mar 2010 14:41:04 +0100
X-Originating-IP: 41.184.6.30 ---> 41-184-6-30.rv.ipnxtelecoms.com/ipNX, Nigeria
hsbcbank2010 [at] blumail.org
Received: from smtpgate3.pacific.net.sg (smtpgate3.pacific.net.sg
[203.81.36.33])
by xxxxx (Postfix) with SMTP id C6A3F7826BCD
for xxxxx; Sat, 20 Mar 2010 22:14:01 +0100 (CET)
Received: (qmail 18053 invoked from network); 20 Mar 2010 20:06:55 -0000
Received: from unknown (HELO mail.pacific.net.sg)
(eelt [at] pacific.net.sg@93.174.138.75)
by smtpgate3.pacific.net.sg with ESMTPA; 20 Mar 2010 20:06:53 -0000
fcmbank [at] mail.mn
hightower_25 [at] hotmail.com
Received: from mail.inorogul.ro (mail.inorogul.ro [86.121.32.176])
by xxxxx (Postfix) with ESMTP id CF8BE78A3E7E
for xxxxx; Sun, 21 Mar 2010 12:43:36 +0100 (CET)
Received: from User (unknown [41.217.65.14])
by mail.inorogul.ro (Postfix) with ESMTP id 7F00D3BE0812;
Sat, 20 Mar 2010 09:04:14 +0200 (EET)
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
a.fatouma101 [at] gmail.com
a.fatouma102 [at] gmail.com
Muguphon: +229-96144885 ---> mobile number, Benin
- kjz
Neues aus der Mugu-Küche:
Received: from unknown (EHLO intzvill.com) [221.143.46.154]
by mx0.gmx.net (mx116) with SMTP; 22 Mar 2010 04:56:27 +0100
Received: from User (www.zmmae.gov.tr [81.215.14.21])
(authenticated bits=0)
by intzvill.com (8.13.8/8.13.8) with ESMTP id o2M3tdPS016838;
Mon, 22 Mar 2010 12:55:42 +0900
markjam1 [at] administrativos.com
Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.
Received: from mail.ncsamericas.com (EHLO ncsamericas.com) [146.82.90.20]
by mx0.gmx.net (mx007) with SMTP; 23 Mar 2010 07:30:40 +0100
Received: (qmail 8237 invoked from network); 17 Mar 2010 21:24:12 -0400
Received: from unknown (HELO User) (41.217.65.13)
by pbc.cl with SMTP; 17 Mar 2010 21:24:12 -0400
IP: 41.217.65.13 --> ZOOM Mobile Nigeria Ltd.
ma7766731 [at] yahoo.cn
Received: from smtpgate2.pacific.net.sg (smtpgate2.pacific.net.sg
[203.120.90.32])
by xxxxx (Postfix) with SMTP id EC5B278A4129
for xxxxx; Tue, 23 Mar 2010 01:47:35 +0100 (CET)
Received: (qmail 21415 invoked from network); 22 Mar 2010 20:22:27 -0000
Received: from unknown (HELO pacific.net.sg)
(jhpl [at] pacific.net.sg@124.160.67.70)
by smtpgate2.pacific.net.sg with ESMTPA; 22 Mar 2010 20:22:05 -0000
IP: 124.160.67.70 ---> China Unicom Zhejiang
revpatrickelvis104 [at] gmail.com
revpatrickelvis101 [at] gmail.com
revpatrickelvis103 [at] gmail.com
Received: from bowang.net (unknown [61.135.149.42])
by xxxxx (Postfix) with SMTP id A6C9F78A350E
for xxxxx; Tue, 23 Mar 2010 01:16:16 +0100 (CET)
Received: from User ([41.217.65.13])
(envelope-sender <capital_manager [at] yahoo.com>)
by 61.135.149.42 with ESMTP
for <kzela [at] rochester.rr.com>; Tue, 23 Mar 2010 07:18:23 +0800
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd. (siehe oben, da treten sich die Mugus im Café wohl die Füsse platt...)
mrsadiqalman_ngr [at] inMail24.com
capital_manager [at] yahoo.com
Muguphon: +234 702 986 5890 ---> Starcomms PLC, Nigeria
Received: from webmail.enter.net (www.entermail.net [216.193.128.33])
by xxxxx (Postfix) with ESMTP id 5485F7897432
for xxxxx; Mon, 22 Mar 2010 23:49:47 +0100 (CET)
Received: by webmail.enter.net (Postfix, from userid 1001)
id DC2B1125104; Mon, 22 Mar 2010 18:47:06 -0400 (EDT)
Received: from webmail.enter.net (www.entermail.net [216.193.128.33])
by webmail.enter.net (Postfix) with ESMTP id 527171252FC;
Mon, 22 Mar 2010 18:19:46 -0400 (EDT)
X-OriginatingIP: 120.29.240.2 (amadaday) ---> 240-2.tasmanet.com.au
mrssandrakorjev [at] kimo.com
Received: from unknown (HELO pop.cheayu.com) [61.28.41.51]
by mx0.gmx.net (mx022) with SMTP; 23 Mar 2010 13:54:08 +0100
Received: from User ([82.128.25.82])
(envelope-sender <ezewilliamoffice [at] terra.es>)
by 192.168.1.1 with ESMTP
for <kjurcisin [at] yahoo.com>; Tue, 23 Mar 2010 20:42:30 +0800
IP: 82.128.25.82 ---> MULTILINKS NETWORK & SYSTEM INFRASTRUCTURE - SUBNET 1, NG
ezewilliam7410 [at] yahoo.com.hk
ezewilliamoffice [at] terra.es
Muguphon: +234-706-292-3142 ---> MTN Nigeria Communications Ltd.
gecrackter T-Offline Account:
Received: from mailout04.t-online.de (mailout04.t-online.de [194.25.134.18])
by xxxxx (Postfix) with ESMTP id 53933783E8DA
for xxxxx; Tue, 23 Mar 2010 23:09:39 +0100 (CET)
Received: from fwd03.aul.t-online.de (fwd03.aul.t-online.de )
by mailout04.t-online.de with smtp
id 1NuCH3-0004I4-J1; Tue, 23 Mar 2010 23:08:33 +0100
Received: from User
(Vmij0MZXwt2xQhESUkfBwYPBJMnGGvdt1+1dqOnX5yYhc+1XgAOBlys83JDBnYINC493msq4Rz@[24.102.192.36])
by fwd03.t-online.de
with esmtp id 1NuBvh-2CyHPE0; Tue, 23 Mar 2010 22:46:29 +0100
IP: 24.102.192.36 ---> 24.102.192.36.res-cmts.tv13.ptd.net
morgansherrym12 [at] yahoo.com.hk
francis2 [at] wq0nzg3vk.homepage.t-online.de
Muguphon: +44 70 240 63740 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44 84 477 42856 ---> Magrathea Telecommunications Limited, UK
Received: from host2host.com (host2host.com [216.117.164.247])
by xxxxx (Postfix) with ESMTP id B3F417800AD7
for xxxxx; Wed, 24 Mar 2010 02:57:53 +0100 (CET)
Received: from User [82.128.70.148] by host2host.com with ESMTP
(SMTPD32-8.05) id AD5424EE011C; Tue, 23 Mar 2010 18:23:00 -0500
IP: 82.128.70.148 ---> Multilinks Telecommunications Limited, Nigeria
michealmoore200 [at] gamil.com
Tja, wenn der Mugu zu blöd ist, die Adresse richtig zu schreiben hier noch einmal:
michealmoore200 [at] gmail.com
Received: from user-kjr0o2k4ii.dailysteel.com (unknown [116.228.63.243])
by xxxxx (Postfix) with ESMTP id 1731478A3C37
for xxxxx; Wed, 24 Mar 2010 06:40:44 +0100 (CET)
Received: from User ([69.64.92.202]) by user-kjr0o2k4ii.dailysteel.com
with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 24 Mar 2010 13:28:13 +0800
IP: 69.64.92.202 ---> 69-64-92-202.dedicated.abac.net
paulmarshall56 [at] hotmail.com
paulmarsh423 [at] live.com
- kjz
Der Nachschub rollt:
Received: from NS1.afb.net.al (mail.itap.gov.al [213.149.101.66])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4F13E78A3CE8
for xxxxx; Thu, 25 Mar 2010 00:47:23 +0100 (CET)
Received: from www.afb.net.al (localhost [127.0.0.1])
by NS1.afb.net.al (8.13.1/8.13.1) with ESMTP id o2OKU7FV007088;
Wed, 24 Mar 2010 21:30:08 +0100
Received: from NS1.afb.net.al (mail.sicred.com.al [213.149.101.66])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AD4DD783E8DB
for xxxxx; Thu, 25 Mar 2010 00:26:03 +0100 (CET)
Received: from www.afb.net.al (localhost [127.0.0.1])
by NS1.afb.net.al (8.13.1/8.13.1) with ESMTP id o2OKVZRF007242;
Wed, 24 Mar 2010 21:31:35 +0100
X-OriginatingIP: 115.134.215.178 (mustafaj) ---> TELEKOM MALAYSIA BERHAD
francislim1 [at] hotmail.com
Received: from dns.astral.lodz.pl (EHLO dns.astral.lodz.pl) [194.106.210.5]
by mx0.gmx.net (mx047) with SMTP; 25 Mar 2010 09:00:47 +0100
Received: from User (unknown [41.217.65.13])
by dns.astral.lodz.pl (Postfix) with ESMTPA id A8FE43F8A03;
Thu, 25 Mar 2010 08:05:57 +0100 (CET)
IP: 41.217.65.13 --> ZOOM Mobile Nigeria Ltd.
unitedcourierservice123 [at] gmail.com
Muguphon: +234-813-756-89-22 ---> Nigeria
Received: from server1.topperconst.com
(static-70-16-191-87.hag.east.verizon.net [70.16.191.87])
by xxxxx (Postfix) with ESMTP id 40AA5783E8D7
for xxxxx; Fri, 26 Mar 2010 00:15:00 +0100 (CET)
Received: from User ([41.217.65.13]) by server1.topperconst.com with
Microsoft SMTPSVC(5.0.2195.6713);
Thu, 25 Mar 2010 18:13:53 -0500
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
anthonyduke1 [at] i12.com
adukelawq [at] i12.com
- kjz
Und rollt weiter:
die Madrid-Konnektion, spezialisiert auf Lotto-Betrug:
Received: from static-69-139-235-87.ipcom.comunitel.net (EHLO
mx4.hotmail.com) [87.235.139.69]
by mx0.gmx.net (mx081) with SMTP; 25 Mar 2010 20:44:03 +0100
lottoclaimm [at] aol.com
quinsyseguros [at] aim.com
Muguphon: +34-626-213-699 ---> Telefónica Móviles España, S.a.u.
Muguphon: +34-634 065 253 ---> Vodafone España, S.a.u.
Mugufax: +34-911-311-750 ---> Jazz Telecom, S.a.u., ES
wieder die Madrid-Lotto-Konnektion:
Received: from mk-filter-3-a-2.mail.uk.tiscali.com
(mk-filter-3-a-2.mail.uk.tiscali.com [212.74.100.50])
by xxxxx (Postfix) with ESMTP id A203778A4305
for xxxxx; Fri, 26 Mar 2010 17:41:21 +0100 (CET)
X-RemoteIP: 84.121.86.85 ---> 84.121.86.85.dyn.user.ono.com, Espana
barbara-spencer [at] tiscali.co.uk
super7bonazanotice [at] aol.be
Muguphon: +32-489-699-029 ---> mobile number, Belgium
Und wieder Espana:
Received: from dialog.sumy.ua (dialog.skm.com.ua [195.182.202.54])
by xxxxx (Postfix) with ESMTP id 624097826BC8
for xxxxx; Sat, 27 Mar 2010 02:09:54 +0100 (CET)
Received: from localhost (localhost.dialog.sumy.ua [127.0.0.1])
by dialog.sumy.ua (Postfix) with ESMTP id 061A51322A3D;
Fri, 26 Mar 2010 23:13:14 +0000 (UTC)
Received: from dialog.sumy.ua ([127.0.0.1])
by localhost (dialog.sumy.ua [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 58201-01; Fri, 26 Mar 2010 23:13:11 +0000 (UTC)
Received: from User (unknown [92.56.254.59])
by dialog.sumy.ua (Postfix) with ESMTP id 439C018CB1;
Fri, 26 Mar 2010 05:20:31 +0000 (UTC)
IP: 92.56.254.59 ---> YACOMNET, Espana
sirmarkjones [at] yahoo.de
sirmarkjons [at] yahoo.de
bensondr.paul [at] yahoo.de
gecracktes Horde:
Received: from mx1.riseup.net (mx1.riseup.net [204.13.164.18])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5E6387800BCC
for xxxxx; Fri, 26 Mar 2010 23:51:45 +0100 (CET)
Received: from auk.riseup.net (auk-pn.riseup.net [10.0.1.45])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(Client CN "*.riseup.net", Issuer "Gandi Standard SSL CA" (verified OK))
by mx1.riseup.net (Postfix) with ESMTPS id CC63C18C573;
Fri, 26 Mar 2010 15:51:36 -0700 (PDT)
Received: by auk.riseup.net (Postfix, from userid 33)
id DCDC35020; Fri, 26 Mar 2010 15:49:29 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])by auk.riseup.net (Horde
Framework) with HTTP; Fri, 26 Mar 2010 15:49:23 -0700
crystalfinances01 [at] gmail.com
crystalfinances02 [at] gmail.com
Muguphon: +1-206-339-1057 ---> International Telcom, Ltd.
Mugufax: +1-206-309-3625 ---> International Telcom, Ltd.
BTW: International Telcom, Ltd., bestens bekannt als Haus- und Hoflieferant für die 'diploma mill' Spammer. Ein Blick auf die Website dieser 'Weltfirma' sagt mehr als tausend Worte...
Received: from mta6.hosting.tp.pl (outgoing.hosting.tp.pl [193.110.120.20])
by xxxxx (Postfix) with ESMTP id 81AB778A3BB3
for xxxxx; Sat, 27 Mar 2010 02:39:53 +0100 (CET)
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Content-type: text/plain; charset=Windows-1251
Received: from User ([115.134.211.131]) by mta6.hosting.tp.pl (m6)
with ESMTPA id <0KZX0014039IQJ70 [at] mta6.hosting.tp.pl> for
xxxxx; Sat, 27 Mar 2010 02:39:53 +0100 (CET)
IP: 115.134.211.131 ---> TELEKOM MALAYSIA BERHAD
damian.kol [at] neostrada.pl
chanjamie112 [at] gmx.com
chanjamie [at] windowslive.com
Muguphon: +60102034596 ---> Celcom, Malaysia
Received: from mail.keithlawson.com (mail.keithlawson.com [74.92.250.45])
by xxxxx (Postfix) with ESMTP id 52507783E8D7
for xxxxx; Sat, 27 Mar 2010 08:02:13 +0100 (CET)
Received: from User ([41.138.177.150] RDNS failed) by
mail.keithlawson.com with Microsoft SMTPSVC(6.0.3790.211);
Sat, 27 Mar 2010 02:52:05 -0400
IP: 41.138.177.150 ---> Visafone Communications Limited, Nigeria
carlbillings-bnooc [at] bk.ru
Muguphon: +447031863044 ---> Magrathea Telecommunications Limited, UK
Received: from ichip.echem-semi.com.tw (ichip.echem-semi.com.tw
[61.219.241.90])
by spammotel.com (Postfix) with ESMTPS id 351752E1AA
for xxxxx; Sat, 27 Mar 2010 05:46:52 -0400 (EDT)
Received: from User (unknown [82.128.84.217])
(Authenticated sender: backup)
by ichip.echem-semi.com.tw (Postfix) with ESMTP id 3E3A211CA0;
Sat, 27 Mar 2010 17:38:01 +0800 (CST)
IP: 82.128.84.217 ---> Multilinks Telecommunications Limited, Nigeria
code54 [at] newministry.org
larrysmith [at] hosanna.net
Received: from 99-57-242-121.uvs.rcsntx.sbcglobal.net (EHLO
mail.ameri-sys.com) [99.57.242.121]
by mx0.gmx.net (mx046) with SMTP; 27 Mar 2010 16:24:05 +0100
Received: from User (unknown [41.217.65.13])
by mail.ameri-sys.com (Postfix) with ESMTPA id 727A264B28;
Mon, 22 Mar 2010 15:08:08 -0600 (MDT)
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
inter_remittance18 [at] yahoo.cn
dr.ueman23 [at] yahoo.com
Und wieder Hetzner, ZA:
Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C128578A3CE8
for xxxxx; Sat, 27 Mar 2010 19:29:32 +0100 (CET)
Received: (qmail 20743 invoked by uid 1542); 27 Mar 2010 09:34:47 -0000
Received: by simscan 1.3.1 ppid: 17507, pid: 20654, t: 0.7853s
scanners: attach: 1.3.1 clamav: 0.92.1
/m:
Received: from unknown (HELO User) (summer [at] 196.22.137.194)
by smtp4.digitalpath.net with ESMTPA; 27 Mar 2010 09:34:46 -0000
IP: 196.22.137.194 ---> Hetz-Accessweb-Root, ZA
derrick.wilson2 [at] gala.net
Muguphon: +2348123206901 ---> Celtel Nigeria Limited/Zain
Die Madrid-Lotto-Mugus:
Received: from bludomain15.bludomain15.com (EHLO server.bludomain15.com)
[66.7.214.63]
by mx0.gmx.net (mx005) with SMTP; 27 Mar 2010 19:53:32 +0100
Received: from [87.235.139.69] (port=63193 helo=User)
by server.bludomain15.com with esmtpa (Exim 4.69)
(envelope-from <lottoespp [at] aol.com>)
id 1Nvb8F-0007oa-8F; Sat, 27 Mar 2010 14:53:18 -0400
IP: 87.235.139.69 ---> static-69-139-235-87.ipcom.comunitel.net/Vodafone, ES
lottoespp [at] aol.com
lottoclaimm [at] aol.com
Muguphon: +34 675 147 113 ---> France Telecom España, S.a./Orange
Muguphon: +34 634 065 253 ---> Vodafone España, S.a.u.
Mugufax: +34 911 849 813 ---> Jazz Telecom, S.a.u.
Received: from tisha1.stginc.net (unknown [65.38.190.246])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 52349783E8D4
for xxxxx; Sun, 28 Mar 2010 05:19:57 +0200 (CEST)
Received: (qmail 18031 invoked from network); 26 Mar 2010 09:59:44 -0700
Received: from abts-north-static-010.206.160.122.airtelbroadband.in
(HELO User) (122.160.206.10)
by 65-38-190-254.static.data393.net with SMTP; 26 Mar 2010 09:59:42 -0700
jacquelinejones12 [at] emailclick.com
jacquelinejones12 [at] mail.com
Received: from mail.sandiegoschool.edu.mx (school16607.gemtel.com.mx
[201.130.1.226])
(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 63C297826BCF
for xxxxx; Sun, 28 Mar 2010 05:40:44 +0200 (CEST)
Received: from User ([64.247.155.19])
by mail.sandiegoschool.edu.mx (IceWarp 9.1.0) with ASMTP id
JVB87446;
Sat, 27 Mar 2010 10:52:46 -0800
drdonphilips2009 [at] yahoo.co.jp
drdonphilips209 [at] live.com
Muguphon: +234-8071926220 ---> Globacom Ltd., Nigeria
- kjz
Die Mugu-Boyz haben nichts besseres zu tun:
Received: from shogun777.startlogic.com
(vps005-16.vps.securehostserver.com [72.22.72.33])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 962BE7818960
for xxxxx; Mon, 29 Mar 2010 06:51:22 +0200 (CEST)
Received: (qmail 24526 invoked from network); 27 Mar 2010 16:46:36 -0500
Received: from unknown (HELO User) (41.217.66.4)
by paulhutcherson.com with SMTP; 27 Mar 2010 16:46:35 -0500
IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.
sisal.igovt [at] live.com
dariodenuzzo [at] mweb.co.za
gecracktes SquirrelMail:
Received: from mx2.portaldashortensias.com.br (EHLO
MX2.portaldashortensias.com.br) [201.7.252.8]
by mx0.gmx.net (mx098) with SMTP; 29 Mar 2010 12:57:26 +0200
Received: from webmail.pdh.com.br (localhost.localdomain [127.0.0.1])
by MX2.portaldashortensias.com.br (Postfix) with ESMTP id 660C657B0562;
Mon, 29 Mar 2010 07:52:39 -0300 (BRT)
Received: from 41.138.178.122
(SquirrelMail authenticated user rustik [at] pdh.com.br)
by webmail.pdh.com.br with HTTP;
Mon, 29 Mar 2010 10:52:39 -0000 (GMT)
IP: 41.138.178.122 ---> Visafone Communications Limited, Nigeria
rustik [at] pdh.com.br
sgthenrypeter7 [at] yahoo.com.hk
sgthenrypeter6 [at] yahoo.com.hk
sgthenrypeter1 [at] yahoo.com.hk
wieder SquirrelMail gecrackt:
Received: from mail.univ-ouaga.bf (mail.univ-ouaga.bf [212.52.131.4])
by xxxxx (Postfix) with ESMTP id 2EB1B78A4125;
Tue, 30 Mar 2010 02:41:28 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.univ-ouaga.bf (Postfix) with ESMTP id 7A1A242C0D3;
Fri, 26 Mar 2010 08:27:29 +0000 (GMT)
Received: from mail.univ-ouaga.bf ([127.0.0.1])
by localhost (mail.univ-ouaga.bf [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Chk-BVxHQFFZ; Fri, 26 Mar 2010 08:27:29 +0000 (GMT)
Received: from mail.univ-ouaga.bf (mail.univ-ouaga.bf [212.52.131.4])
by mail.univ-ouaga.bf (Postfix) with ESMTP id A324A42BB24;
Fri, 26 Mar 2010 05:41:07 +0000 (GMT)
Received: from 41.184.16.17
(SquirrelMail authenticated user badini)
by mail.univ-ouaga.bf with HTTP;
Fri, 26 Mar 2010 05:41:12 -0000 (GMT)
IP: 41.184.16.17 ---> 41-184-16-17.rv.ipnxtelecoms.com, Nigeria
badini [at] univ-ouaga.bf
hgareth73 [at] yahoo.com.hk
xiyangdeng [at] yahoo.com.hk
Mugufax: +852-3014-1829 ---> Wharf T&T Ltd, HK
Received: from sclottery.gov.cn (unknown [222.209.255.16])
by xxxxx (Postfix) with SMTP id 4DEE778A4331
for xxxxx; Tue, 30 Mar 2010 11:37:33 +0200 (CEST)
X-PushMail: __D4ALL__:ALL:1:-10|
Received: from User (unknown [41.217.65.13])
(Authenticated sender: test [at] sclottery.gov.cn)
by sclottery.gov.cn (E-Mail Server Xi) with ESMTP;
Sun, 28 Mar 2010 21:47:17 +0800 (UTC)
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
test [at] sclottery.gov.cn
agnesgeorge77 [at] gmail.com
motheragnesgeorge [at] webmail.co.za
wieder gecracktes SquirrelMail:
Received: from donat.unizd.hr (donat.unizd.hr [161.53.27.3])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 326467826BC8
for xxxxx; Wed, 31 Mar 2010 02:06:24 +0200 (CEST)
Received: from localhost (localhost.unizd.hr [127.0.0.1])
by donat.unizd.hr (Postfix) with ESMTP id 1851D135DEE;
Wed, 31 Mar 2010 01:59:03 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at donat.unizd.hr
Received: from donat.unizd.hr ([127.0.0.1])
by localhost (donat.unizd.hr [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id GnvDlWdUCmQY; Wed, 31 Mar 2010 01:59:02 +0200 (CEST)
Received: from personal.unizd.hr (localhost.unizd.hr [127.0.0.1])
by donat.unizd.hr (Postfix) with ESMTP id 8E154135DDA;
Wed, 31 Mar 2010 01:58:58 +0200 (CEST)
Received: from 75.125.163.148
(SquirrelMail authenticated user glavicic)
by personal.unizd.hr with HTTP;
Wed, 31 Mar 2010 01:58:58 +0200 (CEST)
IP: 75.125.163.148 ---> 94.a3.7d4b.static.theplanet.com
glavicic [at] unizd.hr
prom.managernokia01 [at] gmail.com
Muguphon: +44 704 577 7980 ---> Open Telecom International Ltd., UK
Received: from inetserver.netwebzone.cz (webzone-brn.customer.vol.cz
[212.20.119.140])
by xxxxx (Postfix) with ESMTP id 4CA7078A4144
for xxxxx; Wed, 31 Mar 2010 00:49:24 +0200 (CEST)
Received: from User ([121.11.80.142]) by inetserver.netwebzone.cz with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 31 Mar 2010 00:09:46 +0200
IP: 121.11.80.142 ---> Guangdong Network of ChinaTelecom
drtundelemoatcbn [at] gmail.com
Muguphon: +234-70-42177833 ---> Visafone Communications Ltd., Nigeria
Received: from ns.ilo.co.jp (F00-033.160.195.061.fs-user.net
[61.195.160.33])
by xxxxx (Postfix) with ESMTP id 4EE007826BCB
for xxxxx; Wed, 31 Mar 2010 08:31:31 +0200 (CEST)
Received: from User (unknown [41.138.186.169])
by ns.ilo.co.jp (Postfix) with ESMTP id 2991EE978D5;
Wed, 31 Mar 2010 14:42:38 +0900 (JST)
IP: 41.138.186.169 ---> Visafone Communications Limited, Nigeria
barr.collinsmartins [at] web2mail.com
barr.collins_martins [at] ymail.com
barrcollinsmartins [at] hotmail.com
Received: from tu134043.ip.tsinghua.edu.cn (EHLO
cslt.riit.tsinghua.edu.cn) [166.111.134.43]
by mx0.gmx.net (mx060) with SMTP; 31 Mar 2010 00:55:33 +0200
Received: from User (host250-168-149-62.serverdedicati.aruba.it
[62.149.168.250])
(authenticated bits=0)
by cslt.riit.tsinghua.edu.cn (8.13.8/8.13.8) with ESMTP id o2UMWddW032113;
Wed, 31 Mar 2010 06:32:46 +0800
contact.mutari2006 [at] inMail24.com
test [at] zufe.edu.cn
Received: from TDIWPro.com (tdiwpro.com [72.32.39.92])
by xxxxx (Postfix) with ESMTP id 5304C78A4349
for xxxxx; Wed, 31 Mar 2010 14:49:09 +0200 (CEST)
Received: from User [124.188.1.202] by TDIWPro.com with ESMTP
(SMTPD-9.23) id A8490390; Wed, 31 Mar 2010 03:31:05 -0500
IP: 124.188.1.202 ---> CPE-124-188-1-202.dccz1.win.bigpond.net.au
geraldjonesgj1 [at] googlemail.com
Und auch Juchuu (Header leicht um Unwesentliches gekürzt) mit Source-IP:
Received: from web35908.mail.mud.yahoo.com (web35908.mail.mud.yahoo.com
[66.163.179.192])
by xxxxx (Postfix) with SMTP id 17CFC78A4338
for xxxxx; Wed, 31 Mar 2010 14:44:45 +0200 (CEST)
Received: (qmail 24110 invoked by uid 60001); 31 Mar 2010 12:44:44 -0000
Received: from [41.208.186.193] by web35908.mail.mud.yahoo.com via HTTP;
Wed, 31 Mar 2010 05:44:44 PDT
IP: 41.208.186.193 ---> Pool-clients-ADSL-ARC-BAS4, SN
mamabeach2005 [at] yahoo.com
christianbarry50 [at] yahoo.co.uk
- kjz
Die Mugus legen wieder los:
Received: from mail.exceland.com.tw (unknown [203.70.66.98])
by xxxxx (Postfix) with ESMTP id 596BC78A3CF3
for xxxxx; Mon, 29 Mar 2010 16:32:59 +0200 (CEST)
Received: from User ([82.128.85.28] RDNS failed) by mail.exceland.com.tw
with Microsoft SMTPSVC(6.0.3790.3959);
Mon, 29 Mar 2010 22:27:35 +0800
IP: 82.128.85.28 ---> Multilinks Telecommunications Limited, Nigeria
mrslynnsmith [at] inMail.sk
mrslynnsmith1950 [at] gmail.com
mr.clementorbed [at] inMail.sk
Received: from ureach.com (mail34.ureach.com [63.236.74.71])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 7535978A412B
for xxxxx; Mon, 29 Mar 2010 17:08:39 +0200 (CEST)
Received: from User ([69.172.210.156])
(authenticated bits=0)
by ureach.com (8.13.6/8.13.6) with ESMTP id o2TEfnYY000322;
Mon, 29 Mar 2010 10:41:56 -0400
solomonidah.esq [at] web2mail.com
Received: from zetdz.gov.cn (unknown [218.14.214.220])
by xxxxx (Postfix) with SMTP id 815AD78A4160
for xxxxx; Tue, 30 Mar 2010 19:24:47 +0200 (CEST)
Received: from User ([41.17.241.197])
(envelope-sender <jobhunters20102013 [at] gmail.com>)
by 192.168.32.5 with ESMTP
for <kzgbnoiopnz [at] mnoc.com>; Wed, 31 Mar 2010 00:46:24 +0800
IP: 41.17.241.197 ---> vc-41-17-241-197.umts.vodacom.co.za
jobhunters20102013 [at] gmail.com
Muguphon: +447045749654 ---> Open Telecom International Ltd., UK
Muguphon: +27792607334 ---> Vodacom, ZA
- kjz
Noch ein paar Spezies:
Received: from westgate-honda.com
(host81-137-197-238.in-addr.btopenworld.com [81.137.197.238])
by xxxxx (Postfix) with ESMTP id 6FE307800BC5
for xxxxx; Fri, 2 Apr 2010 02:58:38 +0200 (CEST)
Received: from User ([41.138.183.77]) by westgate-honda.com with
Microsoft SMTPSVC(6.0.3790.3959);
Wed, 31 Mar 2010 12:45:20 +0100
IP: 41.138.183.77 ---> Visafone Communications Limited, Nigeria
moses_wong05 [at] yahoo.cn
moses_wong [at] live.com
moses_wong00 [at] yahoo.com.hk
Received: from web84008.mail.mud.yahoo.com (web84008.mail.mud.yahoo.com
[68.142.206.178])
by xxxxx (Postfix) with SMTP id 7CC3F7800BCC
for xxxxx; Thu, 1 Apr 2010 23:56:27 +0200 (CEST)
Received: (qmail 30119 invoked by uid 60001); 1 Apr 2010 21:56:26 -0000
Received: from [41.222.193.37] by web84008.mail.mud.yahoo.com via HTTP;
Thu, 01 Apr 2010 14:56:26 PDT
IP: 41.222.193.37 ---> ISOCEL SARL, BJ
mrssuzanamazi [at] w.cn
Received: from h250-210-64-253.seed.net.tw (EHLO mail.infonews.com.tw)
[210.64.253.250]
by mx0.gmx.net (mx073) with SMTP; 02 Apr 2010 05:24:30 +0200
Received: from User (host250-168-149-62.serverdedicati.aruba.it
[62.149.168.250])
by mail.infonews.com.tw (Postfix) with ESMTP id 641CA3EFA93;
Fri, 2 Apr 2010 11:50:01 +0800 (CST)
email.mutari007 [at] gmail.com
test [at] zufe.edu.cn
Received: from n63a.bullet.mail.sp1.yahoo.com
(n63a.bullet.mail.sp1.yahoo.com [98.136.45.10])
by xxxxx (Postfix) with SMTP id DB85278A4193
for xxxxx; Fri, 2 Apr 2010 11:36:28 +0200 (CEST)
Received: from [216.252.122.217] by n63.bullet.mail.sp1.yahoo.com with
NNFMP; 02 Apr 2010 09:36:27 -0000
Received: from [98.136.44.166] by t2.bullet.sp1.yahoo.com with NNFMP; 02
Apr 2010 09:36:27 -0000
Received: from [127.0.0.1] by omp607.mail.sp1.yahoo.com with NNFMP; 02
Apr 2010 09:36:27 -0000
Received: (qmail 63581 invoked by uid 60001); 2 Apr 2010 09:36:27 -0000
Received: from [41.245.46.251] by web180616.mail.sp1.yahoo.com via HTTP;
Fri, 02 Apr 2010 02:36:27 PDT
IP: 41.245.46.251 ---> dsl-245-46-251.telkomadsl.co.za
petergama2 [at] gala.net
Received: from mail.mywhistlermail.com (unknown [216.18.18.67])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id DB87178A34CC
for xxxxx; Sun, 4 Apr 2010 09:34:09 +0200 (CEST)
Received: from User (208-110-209-184.biz.houston.comcastbusiness.net
[208.110.209.184])
by mail.mywhistlermail.com (Postfix) with ESMTP id 023CF230DA2B;
Sat, 3 Apr 2010 16:00:33 -0700 (PDT)
verizonwirelessagent [at] ymail.com
- kjz
Die Mugu-Sammlung wird immer größer:
Received: from web3006.mail.tnz.yahoo.co.jp
(web3006.mail.tnz.yahoo.co.jp [203.216.249.206])
by xxxxx (Postfix) with SMTP id 21B3B78A432F
for xxxxx; Tue, 6 Apr 2010 11:47:55 +0200 (CEST)
Received: (qmail 30869 invoked by uid 60001); 6 Apr 2010 09:41:10 -0000
Received: from [82.128.117.45] by web3006.mail.tnz.yahoo.co.jp via HTTP;
Tue, 06 Apr 2010 18:41:10 JST
IP: 82.128.117.45 ---> Multilinks Telecommunications Limited, Nigeria
uknational_28thlotto_wininngs29 [at] yahoo.co.jp
jerrycoleman_06 [at] yahoo.co.jp
Received: from cacau.bitsnet.com.br (mail2.bitsnet.com.br [200.252.189.137])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 88D987897432
for xxxxx; Tue, 6 Apr 2010 11:55:26 +0200 (CEST)
Received: (qmail 15332 invoked by uid 99); 5 Apr 2010 00:57:27 -0000
Cc: recipient list not shown: ;
Received: from 41.220.68.1 ([41.220.68.1])
by www.bitsnet.com.br (IMP) with HTTP
for <info [at] pop.bitsnet.com.br>; Sun, 4 Apr 2010 21:57:26 -0300
IP: 41.220.68.1 ---> MTN Nigeria Communications Limited
fedexcourier_express_com [at] yahoo.com.cn
info [at] pop.bitsnet.com.br
Muguphon: +2348027974507 ---> Celtel Nigeria Limited/Zain
die Madrid-Konnektion:
Received: from mail.dreaminterface.com (unknown [218.50.0.99])
by spammotel.com (Postfix) with ESMTPS id 4A1BA3A486
for xxxxx; Tue, 6 Apr 2010 07:20:54 -0400 (EDT)
Received: from User ([81.202.6.155])
by mail.dreaminterface.com (Dream Dream) with ASMTP id D4088321;
Tue, 06 Apr 2010 20:18:27 +0900
IP: 81.202.6.155 ---> 81.202.6.155.dyn.user.ono.com, ES
segurosmutua [at] aol.es
dixonmark33 [at] gmail.com
Muguphon: + 34 672 981 172 ---> mobile number, Spain
Received: from static.167.203.40.188.clients.your-server.de (EHLO
mx4.hotmail.com) [188.40.203.167]
by mx0.gmx.net (mx110) with SMTP; 08 Apr 2010 02:27:41 +0200
gomezpaul1 [at] aim.com
Received: from elasmtp-masked.atl.sa.earthlink.net (EHLO
elasmtp-masked.atl.sa.earthlink.net) [209.86.89.68]
by mx0.gmx.net (mx092) with SMTP; 08 Apr 2010 12:22:18 +0200
Received: from [202.108.49.153] (helo=User)
by elasmtp-masked.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <paulmarshall [at] bluewin.com>)
id 1NzorU-0008Ge-LC; Thu, 08 Apr 2010 06:21:32 -0400
IP: 202.108.49.153 ---> Capital Network Ltd., CN
paulmarshall [at] bluewin.com
p_marshall24 [at] yahoo.com
gecrackter Uni-Account in TW:
Received: from webmail.tcvs.ilc.edu.tw (unknown [140.111.97.2])
by xxxxx (Postfix) with ESMTP id A4FD67894B62
for xxxxx; Thu, 8 Apr 2010 22:11:29 +0200 (CEST)
Received: from webmail.tcvs.ilc.edu.tw (localhost.localdomain [127.0.0.1])
by webmail.tcvs.ilc.edu.tw (Postfix) with ESMTP id 4A0E915B0DA6;
Thu, 8 Apr 2010 15:57:26 +0800 (CST)
X-OriginatingIP: 41.138.178.109 (fanny6533) ---> Visafone Communications Limited, Nigeria
mrsjoancole5 [at] yahoo.com.hk
compensation [at] webmail.tcvs.ilc.edu.tw
Muguphon: +447766822807 ---> Vodafone Ltd., UK
Received: from glohq.gloworksHQ.co.kr (unknown [61.105.180.74])
by xxxxx (Postfix) with ESMTP id A8304783E8D4
for xxxxx; Fri, 9 Apr 2010 03:33:49 +0200 (CEST)
Received: from User ([58.6.32.233]) by glohq.gloworksHQ.co.kr with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 9 Apr 2010 10:23:20 +0900
IP: 58.6.32.233 ---> dsl-58-6-32-233.nsw.westnet.com.au
habitathelp [at] blumail.org
Und noch ein gecrackter Uni-Account in TW:
Received: from dns.wljhs.tpc.edu.tw (dns.wljhs.tpc.edu.tw [163.20.21.130])
by xxxxx (Postfix) with ESMTP id 2D81F78A43A1
for xxxxx; Fri, 9 Apr 2010 10:32:15 +0200 (CEST)
Received: from dns.wljhs.tpc.edu.tw (localhost [127.0.0.1])
by dns.wljhs.tpc.edu.tw (Postfix) with ESMTP id 195123043145;
Fri, 9 Apr 2010 16:02:53 +0800 (CST)
Received: from dns.wljhs.tpc.edu.tw (localhost [127.0.0.1])
by dns.wljhs.tpc.edu.tw (Postfix) with ESMTP id D78DC3043142;
Fri, 9 Apr 2010 16:02:52 +0800 (CST)
X-OriginatingIP: 41.206.15.1 (wsh) ---> MTN Nigeria
mrssandra_k [at] kimo.com
- kjz
Und wieder geht es los:
gecracktes SquirrelMail:
Received: from mail.clri.res.in (mail.clri.res.in [218.248.17.153])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 159C378A4306
for xxxxx; Wed, 7 Apr 2010 18:20:14 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mail.clri.res.in (Postfix) with ESMTP id 787C0C8D6E;
Wed, 7 Apr 2010 19:10:29 +0530 (IST)
X-Virus-Scanned: Debian amavisd-new at clri.res.in
Received: from mail.clri.res.in ([127.0.0.1])
by localhost (mail.clri.res.in [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id TNRjtOrS5eb9; Wed, 7 Apr 2010 19:10:29 +0530 (IST)
Received: by mail.clri.res.in (Postfix, from userid 65534)
id 33739C8AFD; Wed, 7 Apr 2010 19:10:29 +0530 (IST)
Received: from mail.clri.res.in (localhost [127.0.0.1])
by mail.clri.res.in (Postfix) with ESMTP id 1DE37C8BEE;
Wed, 7 Apr 2010 19:08:36 +0530 (IST)
Received: from 81.199.48.132
(SquirrelMail authenticated user pro)
by mail.clri.res.in with HTTP;
Wed, 7 Apr 2010 19:08:36 +0530 (IST)
IP: 81.199.48.132 ---> rdns2.ipowerweb.net
callymartins7 [at] yahoo.com.hk
pro [at] clri.res.in
Muguphon: +44-701-113-3045 ---> PNC Telecom Services Limited, UK
Mugufax: +44-707-505-5654 ---> PNC Telecom Services Limited, UK
'Paul Marshall 1':
Received: from elasmtp-spurfowl.atl.sa.earthlink.net (EHLO
elasmtp-spurfowl.atl.sa.earthlink.net) [209.86.89.66]
by mx0.gmx.net (mx045) with SMTP; 07 Apr 2010 19:04:34 +0200
Received: from [202.108.49.153] (helo=User)
by elasmtp-spurfowl.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <paulmarshall [at] bluewin.com>)
id 1NzYeh-0005FS-MJ; Wed, 07 Apr 2010 13:03:17 -0400
IP: 202.108.49.153 ---> Capital Network Ltd., CN
paulmarshall [at] bluewin.com
p_marshall23 [at] yahoo.com
'Paul Marshall 2':
Received: from elasmtp-mealy.atl.sa.earthlink.net (EHLO
elasmtp-mealy.atl.sa.earthlink.net) [209.86.89.69]
by mx0.gmx.net (mx118) with SMTP; 11 Apr 2010 00:27:53 +0200
Received: from [202.108.49.153] (helo=User)
by elasmtp-mealy.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <paulmarshall [at] bluewin.com>)
id 1O0j8s-0000Zt-LR; Sat, 10 Apr 2010 18:27:11 -0400
p_marshall22 [at] hotmail.com
'Paul Marshall 3', der Mugu kann sich nicht mal ein anderes Märchen leisten:
Received: from elasmtp-banded.atl.sa.earthlink.net (EHLO
elasmtp-banded.atl.sa.earthlink.net) [209.86.89.70]
by mx0.gmx.net (mx013) with SMTP; 11 Apr 2010 17:14:51 +0200
Received: from [202.108.49.153] (helo=User)
by elasmtp-banded.atl.sa.earthlink.net with esmtpa (Exim 4.67)
(envelope-from <paulmarshall [at] bluewin.com>)
id 1O0yqx-0008TB-LY; Sun, 11 Apr 2010 11:13:47 -0400
p_marshall23 [at] hotmail.com
mal sehen, wann p_marshall24 [at] hotmail.com auf der Matte steht....
Received: from claranet-outbound-smtp05.uk.clara.net
(claranet-outbound-smtp05.uk.clara.net [195.8.89.38])
by xxxxx (Postfix) with ESMTP id 22AE378004A0
for xxxxx; Fri, 9 Apr 2010 18:57:41 +0200 (CEST)
Received: from lputeaux-151-43-5-43.w217-128.abo.wanadoo.fr
([217.128.244.43]:52835 helo=User)
by relay05.mail.eu.clara.net (relay.clara.net [213.253.3.45]:1025)
with esmtpa (authdaemon_login:carriejones [at] clara.co.uk) id 1O0HVl-0002xV-Gq
(return-path <internationalmonetary-fund [at] safe-mail.net>); Fri, 09 Apr
2010 16:56:53 +0000
internationalmonetary-fund [at] safe-mail.net
monetary_center [at] administrativos.com
carriejones [at] clara.co.uk
Received: from mail.corningpublishing.com (mail.corningpublishing.com
[12.168.161.5])
by xxxxx (Postfix) with ESMTP id 6B25278A131B
for xxxxx; Fri, 9 Apr 2010 22:00:36 +0200 (CEST)
thread-index: AcrYHiZNXO0j9ixHTA6m6yfK5ZYhIg==
Received: from User ([82.128.27.58]) by mail.corningpublishing.com with
Microsoft SMTPSVC(6.0.3790.3959); Fri, 9 Apr 2010 14:47:33 -0500
IP: 82.128.27.58 ---> Multilinks Telecommunications Limited, Nigeria
mensontok4u [at] yahoo.com
oceanicbnk00777 [at] gmail.com
Received: from smtpout5.poczta.onet.pl (smtpout5.poczta.onet.pl
[213.180.147.165])
by xxxxx (Postfix) with ESMTP id A1FB878A3CF4
for xxxxx; Sat, 10 Apr 2010 18:05:16 +0200 (CEST)
Received: from [82.128.33.204] ([82.128.33.204]:1921 "EHLO user-c116463ef8"
rhost-flags-FAIL-FAIL-OK-FAIL) by ps1.m5r2.onet with ESMTPA
id S134222909Ab0DJQBJ68gBS (ORCPT <rfc822;xxxxx);
Sat, 10 Apr 2010 18:01:09 +0200
IP: 82.128.33.204 ---> Multilinks Telecommunications Limited, Nigeria
drusman [at] inmail24.com
kieta70 [at] poczta.onet.eu
drusmankite20 [at] gmail.com
Muguphon: +234-7029841119 ---> Starcomms PLC, Nigeria
die Madrid-Konnektion:
Received: from smtp2e.orange.fr (smtp2e.orange.fr [80.12.242.112])
by xxxxx (Postfix) with ESMTP id 1FC3078A41A1
for xxxxx; Sat, 10 Apr 2010 17:49:18 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2e06.orange.fr (SMTP Server) with ESMTP id 007DE80006ED;
Sat, 10 Apr 2010 17:49:15 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2e06.orange.fr (SMTP Server) with ESMTP id DED6280006F7;
Sat, 10 Apr 2010 17:49:14 +0200 (CEST)
Received: from CASSIOPE.ICS76.FR
(LPuteaux-151-41-1-199.w217-128.abo.wanadoo.fr [217.128.16.199])
by mwinf2e06.orange.fr (SMTP Server) with ESMTP id 70DD780006F2;
Sat, 10 Apr 2010 17:49:14 +0200 (CEST)
X-ME-UUID: 20100410154914462.70DD780006F2 [at] mwinf2e06.orange.fr
Received: from User ([88.6.37.76] RDNS failed) by CASSIOPE.ICS76.FR with
Microsoft SMTPSVC(6.0.3790.3959);
Sat, 10 Apr 2010 17:46:28 +0200
IP: 88.6.37.76 ---> 76.Red-88-6-37.staticIP.rima-tde.net/Telefonica, ES
davidmark009 [at] aim.com
davidmark008 [at] aim.com
als Dauergast:
Received: from mail.dadi.ro (unknown [83.166.207.18])
by xxxxx (Postfix) with ESMTP id 4C71978A41B6
for xxxxx; Sun, 11 Apr 2010 13:19:37 +0200 (CEST)
Received: by mail.dadi.ro (Postfix, from userid 501)
id 7C4FDB7CF13; Wed, 7 Apr 2010 13:46:52 +0300 (EEST)
Received: from User (50.Red-88-6-46.staticIP.rima-tde.net [88.6.46.50])
by mail.dadi.ro (Postfix) with ESMTP id BD2F6B7AA98;
Wed, 7 Apr 2010 11:42:59 +0300 (EEST)
davidmark009 [at] aim.com
und wieder mal aus Espana:
Received: from band.kiwigaming.com.tw (unknown [122.147.84.157])
by spammotel.com (Postfix) with ESMTPS id 865CA481EB
for xxxxx; Sat, 10 Apr 2010 02:42:20 -0400 (EDT)
Received: from User ([84.77.132.108])
(authenticated bits=0)
by mail.tc.orz (8.14.2/8.14.2) with ESMTP id o0DA6A0M073291;
Wed, 13 Jan 2010 18:06:47 +0800 (CST)
IP: 84.77.132.108 ---> YACOMNET, Espana
carloscole [at] mail.com
admin [at] caturelang.co.id
Received: from toroondcbauth01-srv.bellnexxia.net
(toroondcbauth01.bellnexxia.net [207.236.237.43])
by xxxxx (Postfix) with ESMTP id B389078A4337
for xxxxx; Sun, 11 Apr 2010 08:38:41 +0200 (CEST)
Received: from User ([74.71.161.186]) by toroondcbauth01-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id
<20100410140504.YYR2384.toroondcbauth01-srv.bellnexxia.net [at] User>;
Sat, 10 Apr 2010 10:05:04 -0400
IP: 74.71.161.186 ---> cpe-74-71-161-186.twcny.res.rr.com
sanusilamid2 [at] yahoo.co.jp
woolwichphysio [at] bellnet.ca
Muguphon: +234-7057925550 ---> Globacom Ltd., Nigeria
Received: from web2805.mail.bbt.yahoo.co.jp
(web2805.mail.bbt.yahoo.co.jp [202.93.80.83])
by xxxxx (Postfix) with SMTP id 2A43C78A41B6
for xxxxx; Sun, 11 Apr 2010 12:25:22 +0200 (CEST)
Received: (qmail 15992 invoked by uid 60001); 11 Apr 2010 10:25:20 -0000
Received: from [82.128.20.229] by web2805.mail.bbt.yahoo.co.jp via HTTP;
Sun, 11 Apr 2010 19:25:20 JST
IP: 82.128.20.229 ---> ml82.128.20.229.multilinks.com, Nigeria
jerrycoleman_06 [at] yahoo.co.jp
uknational_28thlotto_wininngs20 [at] yahoo.co.jp
Received: from DesignerLimo.com (mail.designerlimo.com [71.167.141.26])
by xxxxx (Postfix) with ESMTP id 30F8B78A44E3
for xxxxx; Sun, 11 Apr 2010 12:51:03 +0200 (CEST)
Received: from User ([41.217.65.14]) by DesignerLimo.com with Microsoft
SMTPSVC(6.0.3790.3959);
Sun, 11 Apr 2010 05:58:36 -0400
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
agnesgeorge77 [at] gmail.com
Und in der Türkei herrscht immer noch 'Tag der offenen Tür':
Received: from mail.photic.com.tw (EHLO mail.photic.com.tw) [59.120.200.56]
by mx0.gmx.net (mx111) with SMTP; 11 Apr 2010 12:15:34 +0200
Received: from User (www.zmmae.gov.tr [81.215.14.21])
by mail.photic.com.tw (Postfix) with ESMTP id 28BF66F8AA0;
Sun, 11 Apr 2010 12:58:45 +0800 (CST)
remondsolicitors [at] administrativos.com
Muguphon: +234-8038659174 ---> MTN Nigeria Communications Ltd.
- kjz
Nach kurzer Pause geht die Mugu-Parade weiter:
Received: from cicarelli.securedge.com.br (cicarelli.securedge.com.br
[200.219.160.165])
by xxxxx (Postfix) with ESMTP id F179C78A440F
for xxxxx; Thu, 29 Apr 2010 09:26:49 +0200 (CEST)
Received: from mail.comsatweb.com.br (mail.comsatweb.com.br
[200.219.160.156])
by cicarelli.securedge.com.br (8.13.1/1.1) with ESMTP id o3SH6gD6019799;
Wed, 28 Apr 2010 14:06:45 -0300 (BRT)
Received: from smtp.concremat.com.br (200.219.168.210) by
mail.comsatweb.com.br (NPlex 6.0.021)
id 4BBFD8C40013AD5C; Wed, 28 Apr 2010 14:06:56 -0300
Received: from concremat.com.br (mailserver [192.168.0.1])
by smtp.concremat.com.br (ConcrematMail_XP) with ESMTP id 7F333174095;
Wed, 28 Apr 2010 14:03:12 -0300 (BRT)
p_dcole1 [at] aol.nl
Received: from mail.tld.net (EHLO mail.tld.net) [66.231.249.35]
by mx0.gmx.net (mx046) with SMTP; 29 Apr 2010 07:56:33 +0200
Received: from User [82.128.87.123] by mail.tld.net with ESMTP
(SMTPD-9.23) id A4EB0DFC; Wed, 28 Apr 2010 11:31:55 -0400
IP: 82.128.87.123 ---> Multilinks Telecommunications Limited, Nigeria
jjanetzaher1 [at] gmail.com
janetzaher [at] gmail.com
Received: from mail.northone.ca (EHLO mail.northone.ca) [69.26.65.197]
by mx0.gmx.net (mx003) with SMTP; 29 Apr 2010 05:56:47 +0200
Received: from User ([77.246.64.2]) by northone.local with MailEnable
ESMTP; Wed, 28 Apr 2010 12:55:11 -0500
IP: 77.246.64.2 ---> IDMI, LB
2010claimsboard1 [at] gmail.com
Received: from sisliadc.sislibelediyesi.local (mail.sisli.bel.tr
[88.255.82.25])
by xxxxx (Postfix) with ESMTP id 618AE78A3BB3
for xxxxx; Thu, 29 Apr 2010 04:24:17 +0200 (CEST)
Received: from User ([41.217.65.13]) by sisliadc.sislibelediyesi.local
with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 29 Apr 2010 05:10:54 +0300
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
fbifinancewatchdept [at] fastwebmail.it
Received: from IMPaqm1.telefonica.net (impaqm1.telefonica.net [213.4.138.1])
by xxxxx (Postfix) with ESMTP id 8BDF178A432F
for xxxxx; Thu, 29 Apr 2010 15:07:18 +0200 (CEST)
Received: from IMPmailhost2.adm.correo ([10.20.102.39])
by IMPaqm1.telefonica.net with bizsmtp
id BQ4a1e00n0r0BT601R7Cgj; Thu, 29 Apr 2010 15:07:12 +0200
Received: from User ([78.53.3.76])
by IMPmailhost2.adm.correo with BIZ IMP
id BR6y1e00M1eQ44W1iR725p; Thu, 29 Apr 2010 15:07:12 +0200
IP: 78.53.3.76 ---> f053003076.adsl.alicedsl.de
jm.moore29 [at] gmail.com
bravos [at] telefonica.net
auch diese türkische Spamschleuder steht schon seit Wochen offen wie ein Scheunentor:
Received: from mail.zhukovsky.net (EHLO mail.zhukovsky.net) [87.245.133.7]
by mx0.gmx.net (mx071) with SMTP; 30 Apr 2010 01:13:05 +0200
Received: from www.zmmae.gov.tr ([81.215.14.21]:63655 helo=User)
by mail.zhukovsky.net with esmtpa (Exim 4.69)
(envelope-from <root [at] kaums.ac.ir>)
id 1O7cum-0005V3-5B; Fri, 30 Apr 2010 03:13:04 +0400
revpastorandersonmoore [at] administrativos.com
- kjz
Nachschub droht:
Received: from omr-d32.mx.aol.com (omr-d32.mx.aol.com [205.188.249.130])
by xxxxx (Postfix) with ESMTP id 730BB78A43EA
for xxxxx; Thu, 29 Apr 2010 19:22:24 +0200 (CEST)
Received: from oms-ma01.r1000.mx.aol.com (oms-ma01.r1000.mx.aol.com
[64.12.140.129])
by omr-d32.mx.aol.com (8.14.1/8.14.1) with ESMTP id o3THDJRe026534;
Thu, 29 Apr 2010 13:13:19 -0400
Received: from mtaout-mb06.r1000.mx.aol.com
(mtaout-mb06.r1000.mx.aol.com [172.29.41.70])
by oms-ma01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
245413801D205;
Thu, 29 Apr 2010 06:09:44 -0400 (EDT)
Received: from User (unknown [62.193.165.120])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaout-mb06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
ESMTPSA id 0EDBAE0000AD;
Thu, 29 Apr 2010 06:07:18 -0400 (EDT)
X-AOL-IP: 62.193.165.120 ---> Monarch Communications Limited, Nigeria
richard.wales [at] mail.mn
exxclusive [at] aol.com
advocaterichard [at] lawyer.com
Muguphon: +234 803 820 8450 ---> MTN Nigeria Communications Ltd.
Received: from mx2.bangla.net (EHLO mx2.bangla.net) [203.188.252.14]
by mx0.gmx.net (mx106) with SMTP; 30 Apr 2010 21:11:00 +0200
Received: from mx2.bangla.net (localhost [127.0.0.1])
by mx2.bangla.net (Postfix) with ESMTP id 67AA4D00FA;
Sat, 1 May 2010 01:09:59 +0700 (BDST)
Received: (from apache [at] localhost)
by mx2.bangla.net (8.13.1/8.13.1/Submit) id o3UI9xCX003789;
Sat, 1 May 2010 01:09:59 +0700
X-Authentication-Warning: mx2.bangla.net: apache set sender to
br4006 [at] bangla.net using -f
Received: from ml82.128.20.125.multilinks.com
(ml82.128.20.125.multilinks.com [82.128.20.125])
by mx2.bangla.net (IMP) with HTTP
for <br4006 [at] mail.bangla.net>; Sat, 1 May 2010 01:09:43 +0700
IP: 82.128.20.125 ---> Multilinks, Nigeria
br4006 [at] mail.bangla.net
martinhuemailpersonal2008 [at] yahoo.co.jp
Muguphon: +44-7045706429 ---> Open Telecom International Ltd., UK
Received: from static-173-56-68-35.nycmny.fios.verizon.net (EHLO
ncicex.ncicmail) [173.56.68.35]
by mx0.gmx.net (mx105) with SMTP; 02 May 2010 04:26:14 +0200
Received: from User ([82.128.62.30]) by ncicex.ncicmail with Microsoft
SMTPSVC(6.0.3790.3959);
Fri, 30 Apr 2010 14:18:14 -0400
IP: 82.128.62.30 ---> Multilinks Telecommunications Limited, Nigeria
mrsmarysuedayton11 [at] yahoo.com.hk
mrsmarysuedayton1 [at] yahoo.com.hk
Received: from centoff-smtp7.eddept.wa.edu.au (EHLO
e7359svint068.det.wa.edu.au) [203.14.53.3]
by mx0.gmx.net (mx036) with SMTP; 02 May 2010 04:55:32 +0200
Received: from e7359avnai001.int.det.wa.edu.au (10.1.85.14) by
e7359svint068.det.wa.edu.au (7.0.024)
id 4B8F964A009A4D42; Sun, 2 May 2010 10:50:58 +0800
Received: from (unknown [10.1.142.91]) by
e7359avnai001.int.det.wa.edu.au with smtp
id 3e6a_1221_875408e6_5595_11df_98c8_001422154309;
Sun, 02 May 2010 10:50:58 +0800
martins.jones00 [at] yahoo.com.hk
Mark.Gledhill [at] det.wa.edu.au
Received: from IMPaqm3.telefonica.net (impaqm3.telefonica.net [213.4.138.3])
by xxxxx (Postfix) with ESMTP id 688CB78A43D6
for xxxxx; Sun, 2 May 2010 13:17:58 +0200 (CEST)
Received: from IMPmailhost3.adm.correo ([10.20.102.124])
by IMPaqm3.telefonica.net with bizsmtp
id CYvi1e01H2h2L9m3PbHyi3; Sun, 02 May 2010 13:17:58 +0200
Received: from User ([151.65.88.204])
by IMPmailhost3.adm.correo with BIZ IMP
id CbHh1e0064QXvZj1jbHlK5; Sun, 02 May 2010 13:17:58 +0200
IP: 151.65.88.204 ---> IUnet, IT
rabogar [at] telefonica.net
Privateloan1 [at] mail2finance.com
ploan [at] telefonica.net
- kjz
Alle meine Mugus, Teil 1:
Received: from smtp2.aster.pl (smtp2.aster.pl [212.76.33.47])
by xxxxx (Postfix) with ESMTP id BB10978A4543
for xxxxx; Mon, 3 May 2010 16:41:46 +0200 (CEST)
Received: from User (unknown [41.210.27.168])
by smtp2.aster.pl (sendmail) with ESMTPA id 42D3761D998;
Sun, 2 May 2010 22:17:51 +0200 (CEST)
IP: 41.210.27.16 ---> adsl27168.4u.com.gh
szkolahz [at] aster.pl
ernestpgordon [at] aol.com
Muguphon: +44 703 5997215 ---> Open Telecom International Ltd., UK
Mugufax: +44 700 5963248 ---> PNC Telecom Services Limited, UK
Received: from smtpout6.poczta.onet.pl (EHLO smtpout6.poczta.onet.pl)
[213.180.147.166]
by mx0.gmx.net (mx058) with SMTP; 03 May 2010 16:13:39 +0200
Received: from [125.71.28.237] ([125.71.28.237]:2560 "EHLO kate34"
rhost-flags-FAIL-FAIL-OK-FAIL) by ps2.m5r2.onet with ESMTPA
id S134221073Ab0ECONign50V (ORCPT <rfc822;xxxxx> + 1 other);
Mon, 3 May 2010 16:13:38 +0200
IP: 125.71.28.237 ---> CHINANET Sichuan
info [at] shelldevelopmentaward.co.cc
Muguphon: +447045744070 ---> Open Telecom International Ltd., UK
Received: from mail05.mail.esat.net (mail05.mail.esat.net [193.95.142.37])
(using TLSv1 with cipher AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D111078A4642
for xxxxx; Tue, 4 May 2010 16:20:31 +0200 (CEST)
Received: from mail.mckennalaw.ie (McKennaLaw.ie) [194.125.115.244]
by mail05.mail.esat.net with esmtp
id 1O9IaW-0006BL-U5; Tue, 04 May 2010 14:55:05 +0100
Received: from User ([82.128.37.180]) by McKennaLaw.ie with Microsoft
SMTPSVC(6.0.3790.3959);
Tue, 4 May 2010 13:38:19 +0100
IP: 82.128.37.180 ---> Multilinks Telecommunications Limited, Nigeria
kathie.wilkinx [at] gmail.com
Received: from ve2.dinama.com (mail.412.com.ve [200.32.77.228])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 645C078A43D7
for xxxxx; Tue, 4 May 2010 18:01:30 +0200 (CEST)
Received: from [82.128.81.228] (helo=User)
by ve2.dinama.com with esmtpa (Exim 4.63)
(envelope-from <paymastergeneralxxx [at] gmail.com>)
id 1O9Hva-0001tJ-7y; Tue, 04 May 2010 08:42:47 -0430
IP: 82.128.81.228 ---> Multilinks Telecommunications Limited, Nigeria
foreignoperationdeptx [at] gmail.com
paymastergeneralxxx [at] gmail.com
Muguphon: +234-7090-337390 ---> Multilinks Telecommunications Ltd., Nigeria
- kjz
Alle meine Mugus, Teil 2:
Received: from dns.adwic.co.jp (www.adwic.co.jp [58.13.180.92])
by xxxxx (Postfix) with ESMTP id 33C6E7800AD7
for xxxxx; Mon, 3 May 2010 14:54:46 +0200 (CEST)
Received: from User (mail.pdeeco.com [66.28.30.14])
by dns.adwic.co.jp (Postfix) with ESMTP id CC84A2B749;
Mon, 3 May 2010 05:37:55 +0900 (JST)
humanitysupport2 [at] gmail.com
Received: from host-89-144-99-130.nashirnet.com (EHLO vip.nashirnet.com)
[89.144.99.130]
by mx0.gmx.net (mx092) with SMTP; 03 May 2010 13:56:53 +0200
Received: from apache by vip.nashirnet.com with local (Exim 4.67)
(envelope-from <mkdyt556 [at] ghzl.com>)
id 1O8uGa-0005rX-QB
for xxxxx Mon, 03 May 2010 11:56:52 +0000
infoianreed [at] gmail.com
infoian.reed [at] gmail.com
mkdyt556 [at] ghzl.com
Muguphon: +447024035686 ---> Magrathea Telecommunications Limited, UK
Received: from smtpout6.poczta.onet.pl (EHLO smtpout6.poczta.onet.pl)
[213.180.147.166]
by mx0.gmx.net (mx058) with SMTP; 03 May 2010 16:13:39 +0200
Received: from [125.71.28.237] ([125.71.28.237]:2560 "EHLO kate34"
rhost-flags-FAIL-FAIL-OK-FAIL) by ps2.m5r2.onet with ESMTPA
id S134221073Ab0ECONign50V (ORCPT <rfc822;xxxxx> + 1 other);
Mon, 3 May 2010 16:13:38 +0200
IP: 125.71.28.237 ---> CHINANET Sichuan
info [at] shelldevelopmentaward.co.cc
shellaward1114 [at] poczta.onet.pl
Muguphon: +447045744070 ---> Open Telecom International Ltd., UK
Received: from ns.naturatins.to.gov.br (ns.naturatins.to.gov.br
[200.163.75.105])
by xxxxx (Postfix) with ESMTP id 4BB5B78A454F
for xxxxx; Tue, 4 May 2010 09:45:24 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by ns.naturatins.to.gov.br (Postfix) with ESMTP id E0D3671CD4;
Tue, 4 May 2010 03:29:04 -0300 (BRT)
X-Virus-Scanned: Debian amavisd-new at email.naturatins.to.gov.br
Received: from ns.naturatins.to.gov.br ([127.0.0.1])
by localhost (ns.naturatins.to.gov.br [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id TFtuEajyF-CP; Tue, 4 May 2010 03:29:04 -0300 (BRT)
Received: from naturatins.to.gov.br (localhost [127.0.0.1])
by ns.naturatins.to.gov.br (Postfix) with ESMTP id AD0EA71CC8;
Tue, 4 May 2010 03:28:45 -0300 (BRT)
X-OriginatingIP: 41.138.178.52 (murilo) ---> Visafone Communications Limited, Nigeria
man.murilo [at] web2mail.com
murilo [at] naturatins.to.gov.br
Received: from mo5.mail.sc.edu (mo5.mail.sc.edu [129.252.158.29])
by xxxxx (Postfix) with ESMTP id 056FF78A464D
for xxxxx; Tue, 4 May 2010 13:43:46 +0200 (CEST)
Received: from mo5.mail.sc.edu (127.0.0.1) by mo5.mail.sc.edu (MlfMTA
v3.2r9) id hs04760171sj for xxxxx>; Tue, 4 May 2010
07:28:27 -0400 (envelope-from <CBWILLIA [at] mailbox.sc.edu>)
Received: from cae145erlp01.ds.sc.edu ([172.27.7.166])
by mo5.mail.sc.edu (SonicWALL 7.2.1.2843)
with ESMTP (AIO); Tue, 04 May 2010 07:28:27 -0400
Received: from CAE145EVSP02.ds.sc.edu ([172.27.7.14]) by
cae145erlp01.ds.sc.edu with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 4 May 2010 07:28:27 -0400
royal.claimsunit10 [at] live.com
CBWILLIA [at] mailbox.sc.edu
Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.46])
by xxxxx (Postfix) with ESMTP id E4C6778A414D
for xxxxx; Tue, 4 May 2010 14:54:44 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2101.orange.fr (SMTP Server) with ESMTP id 5B4B51C005D1;
Tue, 4 May 2010 14:54:44 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2101.orange.fr (SMTP Server) with ESMTP id 472741C00876;
Tue, 4 May 2010 14:54:44 +0200 (CEST)
Received: from User (AAmiens-156-1-4-245.w90-7.abo.wanadoo.fr [90.7.59.245])
by mwinf2101.orange.fr (SMTP Server) with ESMTP id CFA8B1C00BDB;
Tue, 4 May 2010 14:53:29 +0200 (CEST)
gregg.don [at] orange.fr
bar.linkeljones2 [at] sify.com
info [at] interbwinonlines.com
businessinfo2000 [at] gmail.com
Muguphon: +447011140935 ---> PNC Telecom Services Limited, UK
Mugufax: +447077081751 ---> Digital Mail Limited, UK
Received: from omr-d32.mx.aol.com (omr-d32.mx.aol.com [205.188.249.130])
by xxxxx (Postfix) with ESMTP id 4359778A437B
for xxxxx; Wed, 5 May 2010 02:21:08 +0200 (CEST)
Received: from oms-db01.r1000.mx.aol.com (oms-db01.r1000.mx.aol.com
[205.188.58.1])
by omr-d32.mx.aol.com (8.14.1/8.14.1) with ESMTP id o44EiiiT017178;
Tue, 4 May 2010 10:44:55 -0400
Message-Id: <201005041444.o44EiiiT017178 [at] omr-d32.mx.aol.com>
Received: from mtaout-db01.r1000.mx.aol.com
(mtaout-db01.r1000.mx.aol.com [172.29.51.193])
by oms-db01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
50F151C00EACF;
Tue, 4 May 2010 09:15:06 -0400 (EDT)
Received: from User (unknown [41.189.2.71])
by mtaout-db01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
ESMTPA id 60B9DE000143;
Tue, 4 May 2010 09:14:35 -0400 (EDT)
IP: 41.189.2.71 ---> SWIFT NETWORKS, Nigeria
williamscott212 [at] gmail.com
braybon9support [at] aol.com
- kjz
info [at] shelldevelopmentaward.co.cc
Ist gestern verstorben worden. :D
gregg.don [at] orange.fr
bar.linkeljones2 [at] sify.com
info [at] interbwinonlines.com
businessinfo2000 [at] gmail.com
Muguphon: +447011140935 ---> PNC Telecom Services Limited, UK
Mugufax: +447077081751 ---> Digital Mail Limited, UK
War das wieder dieses (http://antifraudintl.org/showthread.php?t=36129) Format, bloß jetzt mit der neuen Domain als Reply-To?
Ist gestern verstorben worden.
Warum wohl..... ;)
War das wieder dieses (http://antifraudintl.org/showthread.php?t=36129) Format, bloß jetzt mit der neuen Domain als Reply-To?
Ja, genau diese Masche.
- kjz
Und immer, immer wieder schlägt der Mugu zu....
Auch Tor läßt sich missbrauchen:
Received: from dasrv03.hosted.net.my (dasrv03.hosted.net.my
[202.186.153.88])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id B84EF78A4369
for xxxxx; Fri, 7 May 2010 17:37:06 +0200 (CEST)
Received: from apache by dasrv03.hosted.net.my with local (Exim 4.60)
(envelope-from <l.kee [at] hkbea.com.sg>)
id 1OAM88-0006st-C0; Fri, 07 May 2010 19:54:08 +0800
Received: from gpftor2.privacyfoundation.de (gpftor2.privacyfoundation.de
[87.118.101.175]) by webmail.sainc.com.my (Horde MIME library) with HTTP;
Fri, 07 May 2010 19:54:03 +0800
l.kee [at] hkbea.com.sg
lkee1826 [at] yahoo.com.hk
Und Horde:
Received: from dasrv03.hosted.net.my (dasrv03.hosted.net.my
[202.186.153.88])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 13C0978A466E
for xxxxx; Fri, 7 May 2010 17:35:21 +0200 (CEST)
Received: from apache by dasrv03.hosted.net.my with local (Exim 4.60)
(envelope-from <l.kee [at] hkbea.com.sg>)
id 1OAMAW-000709-R4; Fri, 07 May 2010 19:56:36 +0800
Received: from anonymizer.blutmagie.de (anonymizer.blutmagie.de
[192.251.226.205]) by webmail.sainc.com.my (Horde MIME library) with HTTP;
Fri, 07 May 2010 19:56:32 +0800
Received: from metis.sjsu.edu (metis.sjsu.edu [130.65.3.15])
by xxxxx (Postfix) with ESMTP id EA61A78A3BD0
for xxxxx; Sat, 8 May 2010 09:06:51 +0200 (CEST)
Received: from cobmail-main.cob.sjsu.edu (cobmail-main.sjsu.edu
[130.65.2.16])
by metis.sjsu.edu (8.12.10+Sun/8.13.1) with ESMTP id o486ghW7028081;
Fri, 7 May 2010 23:44:52 -0700 (PDT)
Received: from cobmail-infstore.cob.sjsu.edu ([130.65.2.34]) by
cobmail-main.cob.sjsu.edu with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 7 May 2010 23:39:09 -0700
uknl_claimsdpt2010_result [at] live.com
davis_r [at] cob.sjsu.edu
Muguphon: +44 702 409 6449 ---> Magrathea Telecommunications Limited, UK
die türkische Dreckskiste ist schon seit Wochen undicht (oder verdient sich da
der Admin was nebenbei?)
Received: from mail.magnezi.co.il (EHLO magnezi.co.il) [212.150.167.212]
by mx0.gmx.net (mx102) with SMTP; 07 May 2010 23:12:45 +0200
Received: from User ([81.215.14.21] RDNS failed) by magnezi.co.il with
Microsoft SMTPSVC(6.0.3790.4675);
Tue, 4 May 2010 23:57:46 +0300
IP: 81.215.14.21 ---> http://www.zmmae.gov.tr
wumtcomp [at] gmail.com
Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.
gecracktes Horde:
Received: from cloud.smokyhosts.net (unknown [69.167.140.24])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 2963A78A4414
for xxxxx; Sat, 8 May 2010 17:39:45 +0200 (CEST)
Received: from localhost ([127.0.0.1]:34650)
by cloud.smokyhosts.net with esmtpa (Exim 4.69)
(envelope-from <hsbcbankplclondon02 [at] yahoo.co.uk>)
id 1O9aJh-0007sg-EJ; Wed, 05 May 2010 04:50:53 -0400
Received: from 41.189.2.7 ([41.189.2.7]) by cartoonzone.co.tv (Horde MIME
library) with HTTP; Wed, 05 May 2010 04:50:50 -0400
IP: 41.189.2.7 ---> SWIFT NETWORKS IP RANGE FOR OKOTA DHCP CLIENT, Nigeria
hsbcbankplclondon02 [at] yahoo.co.uk
hsbcbankplcuk09 [at] gmail.com
Muguphon: +44 70 24 082 786 ---> Magrathea Telecommunications Limited, UK
Received: from unknown (EHLO dns.caes.tc.edu.tw) [140.128.209.129]
by mx0.gmx.net (mx118) with SMTP; 09 May 2010 02:39:49 +0200
Received: from dns.caes.tc.edu.tw (localhost [127.0.0.1])
by dns.caes.tc.edu.tw (Postfix) with ESMTP id EE7AD40AD4;
Sun, 9 May 2010 08:03:58 +0800 (CST)
Received: from mail.caes.tc.edu.tw (localhost [127.0.0.1])
by dns.caes.tc.edu.tw (Postfix) with ESMTP id A4AB7408B5;
Sun, 9 May 2010 08:03:58 +0800 (CST)
X-OriginatingIP: 41.217.66.5 (an750) ---> ZOOM Mobile Nigeria Ltd.
sgt_williamsmoore [at] w.cn
Received: from smtp23.services.sfr.fr (EHLO smtp23.services.sfr.fr)
[93.17.128.22]
by mx0.gmx.net (mx018) with SMTP; 09 May 2010 01:31:25 +0200
Received: from smtp23.services.sfr.fr (msfrf2321 [10.18.27.35])
by msfrf2315.sfr.fr (SMTP Server) with ESMTP id 181CE7001921;
Sat, 8 May 2010 17:24:07 +0200 (CEST)
Received: from filter.sfr.fr (localhost [127.0.0.1])
by msfrf2321.sfr.fr (SMTP Server) with ESMTP id CF93870000BD;
Sat, 8 May 2010 17:24:06 +0200 (CEST)
Received: from User (unknown [41.121.5.229])
by msfrf2321.sfr.fr (SMTP Server) with ESMTP id C748570000A0;
Sat, 8 May 2010 17:23:39 +0200 (CEST)
IP: 41.121.5.229 ---> MTN Network Solutions, ZA
barijacobwalter [at] gmail.com
barjacobwalter [at] yahoo.com
- kjz
Neues aus Mugu-Land:
Received: from web83805.mail.sp1.yahoo.com (web83805.mail.sp1.yahoo.com
[69.147.85.73])
by xxxxx (Postfix) with SMTP id 2888478A2C72
for xxxxx; Mon, 10 May 2010 14:02:45 +0200 (CEST)
Received: (qmail 30818 invoked by uid 60001); 10 May 2010 12:02:45 -0000
Received: from [82.128.80.108] by web83805.mail.sp1.yahoo.com via HTTP;
Mon, 10 May 2010 05:02:44 PDT
IP: 82.128.80.108 ---> Multilinks Telecommunications Limited, Nigeria
nicholas.ugbane4 [at] gmail.com
Received: from msg-mx2.ac-corse.fr (msg-mx2.ac-corse.fr [195.221.142.232])
by xxxxx (Postfix) with ESMTP id 6529778A3E7F
for xxxxx; Tue, 11 May 2010 18:04:12 +0200 (CEST)
Date: Tue, 11 May 2010 08:28:26 -0700
francoise.demartini [at] ac-corse.fr
sutherlandloan [at] 9.cn
Freeserve ist jetzt gross am kommen:
Received: from smtp5.freeserve.com (smtp5.freeserve.com [193.252.22.152])
by xxxxx (Postfix) with ESMTP id AADA578A44DB
for xxxxx; Wed, 12 May 2010 17:08:26 +0200 (CEST)
Received: from smtp5.freeserve.com (localhost [127.0.0.1])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id 2479E1C0019E;
Wed, 12 May 2010 17:08:26 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id 16F8B1C00193;
Wed, 12 May 2010 17:08:26 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id 08DCB1C0019E;
Wed, 12 May 2010 17:08:26 +0200 (CEST)
Received: from User (dhcp-077-250-111-095.chello.nl [77.250.111.95])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id 7C40B1C00193;
Wed, 12 May 2010 17:08:20 +0200 (CEST)
IP: 77.250.111.95 ---> Chello, NL
seanw1975 [at] yahoo.cn
greghollins [at] wanadoo.co.uk
robertmueller [at] mcom.com
Auch Web.de mal wieder:
Received: from fmmailgate06.web.de (fmmailgate06.web.de [217.72.192.247])
by xxxxx (Postfix) with ESMTP id F02D278A4458
for xxxxx; Wed, 12 May 2010 18:10:51 +0200 (CEST)
Received: from mwmweb017 ( [172.20.18.26])
by fmmailgate06.web.de (Postfix) with ESMTP id C0AD01BBCEE;
Wed, 12 May 2010 18:10:49 +0200 (CEST)
Received: from [204.14.43.9] by mwmweb017 with HTTP; Wed May
12 18:10:49 CEST 2010
IP: 204.14.43.9 ---> mia-static-204-14-43-9.newcom-intl.com
drtomewing [at] hotmail.com
dr.tomewing50871 [at] web.de
Muguphon: +447045724545 ---> Open Telecom International Ltd., UK
- kjz
Aus meiner nie enden wollenden Sammlung:
Hier sieht man, wie anscheinend ein und dieselbe Bande verschiedene Skripte abspult:
Received: from 189.126.bnu.widc.com.br (EHLO neo.morus.com.br)
[189.126.3.105]
by mx0.gmx.net (mx075) with SMTP; 13 May 2010 04:48:57 +0200
Received: from static-151-204-174-85.ny325.east.verizon.net
([151.204.174.85] helo=User)
by neo.morus.com.br with esmtpa (Exim 4.69)
(envelope-from <saw [at] go.com>)
id 1OCOTS-0004ez-Ng; Wed, 12 May 2010 23:48:35 -0300
jamesscott8911 [at] yahoo.cn
Received: from smtp5.freeserve.com (EHLO smtp5.freeserve.com)
[193.252.22.152]
by mx0.gmx.net (mx021) with SMTP; 13 May 2010 13:17:47 +0200
Received: from smtp5.freeserve.com (localhost [127.0.0.1])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id C8AB51C008C7;
Thu, 13 May 2010 13:17:46 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id B78DD1C008C2;
Thu, 13 May 2010 13:17:46 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id A77F51C008C3;
Thu, 13 May 2010 13:17:46 +0200 (CEST)
Received: from User (static-151-204-174-85.NY325.east.verizon.net
[151.204.174.85])
by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP id 513B11C008C1;
Thu, 13 May 2010 13:17:42 +0200 (CEST)
marshy [at] fsnet.co.uk
jamesscott8911 [at] yahoo.cn
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id 458B978A44E3
for xxxxx; Thu, 13 May 2010 13:19:27 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id 16B661C007A4;
Thu, 13 May 2010 13:19:27 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id 0118C1C006B9;
Thu, 13 May 2010 13:19:27 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id D29291C007A3;
Thu, 13 May 2010 13:19:26 +0200 (CEST)
Received: from User (unknown [82.128.82.6])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id 066D51C006B9;
Thu, 13 May 2010 13:19:16 +0200 (CEST)
IP: 82.128.82.6 ---> Multilinks Telecommunications Limited, Nigeria
evans648 [at] fsnet.co.uk
fedexexpressdeliveryservice [at] yahoo.cn
jonathnbaily52 [at] aol.com
Muguphon: +234-8028018611 ---> Celtel Nigeria Limited/Zain
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id DBC6378A453C
for xxxxx; Thu, 13 May 2010 17:41:52 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id 8E40D7000F07;
Thu, 13 May 2010 17:41:52 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id 80CB87000EF5;
Thu, 13 May 2010 17:41:52 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id 733867000F07;
Thu, 13 May 2010 17:41:52 +0200 (CEST)
Received: from User (mail.westfirm.com [98.22.59.13])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id 85E4A7000EF5;
Thu, 13 May 2010 17:41:48 +0200 (CEST)
evans648 [at] fsnet.co.uk
mrs.alicehad [at] hotmail.com
gecracktes SquirrelMail:
Received: from vivosmail.intviv.com (dns2.ivivos.com [168.75.146.228])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id E5F1578A4455
for xxxxx; Thu, 13 May 2010 16:14:46 +0200 (CEST)
Received: (qmail 2547 invoked by uid 0); 13 May 2010 14:08:04 -0000
Received: from unknown (HELO mail.admagnets.com)
(info [at] admagnets.com@127.0.0.1)
by vivosmail.intviv.com with ESMTPA; 13 May 2010 14:08:04 -0000
Received: from 82.128.17.55
(SquirrelMail authenticated user info [at] admagnets.com)
by mail.admagnets.com with HTTP;
Thu, 13 May 2010 10:08:04 -0400
IP: 82.128.17.55 ---> ml82.128.17.55.multilinks.com, Nigeria
Received: from vivosmail.intviv.com (dns2.ivivos.com [168.75.146.228])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5F12F78A44E1
for xxxxx; Thu, 13 May 2010 16:18:26 +0200 (CEST)
Received: (qmail 7559 invoked by uid 0); 13 May 2010 14:11:41 -0000
Received: from unknown (HELO mail.admagnets.com)
(info [at] admagnets.com@127.0.0.1)
by vivosmail.intviv.com with ESMTPA; 13 May 2010 14:11:41 -0000
Received: from 82.128.17.55
(SquirrelMail authenticated user info [at] admagnets.com)
by mail.admagnets.com with HTTP;
Thu, 13 May 2010 10:11:41 -0400
info [at] admagnets.com
gxxxperkins [at] yahoo.com
georgebarrperkins [at] gmail.com
Received: from mx4.hotmail.com
(209.72.131.216.client.static.strong14.reliablehosting.com [216.131.72.209])
by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
id 0MWCab-1NoPNw1cWf-00XXkS for xxxxx; Fri, 14 May 2010
16:02:02 +0200
Received: from mx4.hotmail.com
(209.72.131.216.client.static.strong14.reliablehosting.com [216.131.72.209])
by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
id 0MWCab-1NoPNw1cWf-00XXkS for xxxxx; Fri, 14 May 2010
16:02:02 +0200
wopxrjolzhumredg [at] hotmail.com
alejandroluna4 [at] aol.com
Received: from smtp27.orange.fr (smtp27.orange.fr [80.12.242.95])
by xxxxx (Postfix) with ESMTP id 0CAC378A444D
for xxxxx; Fri, 14 May 2010 21:22:11 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2706.orange.fr (SMTP Server) with ESMTP id CE9D31C006E2;
Fri, 14 May 2010 21:22:10 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2706.orange.fr (SMTP Server) with ESMTP id BABD21C0077B;
Fri, 14 May 2010 21:22:10 +0200 (CEST)
Received: from User (ANantes-157-1-26-83.w86-214.abo.wanadoo.fr
[86.214.33.83])
by mwinf2706.orange.fr (SMTP Server) with ESMTP id A084A1C006E2;
Fri, 14 May 2010 21:20:38 +0200 (CEST)
mrjimbrown [at] dhlexpressuk.org
mrsrita [at] yahoo.co.uk
eurogout.production [at] wanadoo.fr
RitaRatnavale2000 [at] yahoo.cn
Muguphon: +44-702-401-0706 ---> Magrathea Telecommunications Limited, UK
Received: from mx4.hotmail.com
(181.38.68.68.client.static.strong-sf6.reliablehosting.com [68.68.38.181])
by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
id 0LfRA9-1NXloT3AF7-00p0fe for xxxxx; Sat, 15 May 2010
05:27:03 +0200
ouczvgfpbyzz [at] hotmail.com
claimprocessfiles2009 [at] gala.net
Muguphon: +27-78-654-9088 ---> MTN, ZA
Mugufax: +27-86-6581-659 ---> premium rate number, ZA
Received: from n5-vm0.bullet.mail.gq1.yahoo.com
(n5-vm0.bullet.mail.gq1.yahoo.com [67.195.8.62])
by xxxxx (Postfix) with SMTP id 9AEDF78A43F6
for xxxxx; Sat, 15 May 2010 13:04:28 +0200 (CEST)
Received: from [67.195.9.83] by n5.bullet.mail.gq1.yahoo.com with NNFMP;
15 May 2010 11:04:27 -0000
Received: from [98.137.27.217] by t3.bullet.mail.gq1.yahoo.com with
NNFMP; 15 May 2010 11:04:27 -0000
Received: from [127.0.0.1] by omp127.mail.gq1.yahoo.com with NNFMP; 15
May 2010 11:04:27 -0000
Received: from [41.203.79.249] by web180513.mail.gq1.yahoo.com via HTTP;
Sat, 15 May 2010 04:04:26 PDT
IP: 41.203.79.249 ---> Globacom Ltd., Nigeria
butterflieswings [at] att.net
scarltcouri1 [at] hosanna.net
Muguphon: +22999778840 ---> mobile number, Benin
Received: from postbode01.versateladsl.be (postbode01.c.iops.be
[212.53.5.91])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 9CB0678A43FB
for xxxxx; Sat, 15 May 2010 14:15:06 +0200 (CEST)
Received: (qmail 3680 invoked by uid 0); 14 May 2010 07:25:53 -0000
Received: from unknown (HELO webmail.base.be) ([10.190.0.57])
(envelope-sender <amadeus1 [at] base.be>)
by relay03.versateladsl.be (qmail-ldap-1.03) with SMTP
for < >; 14 May 2010 07:25:53 -0000
amadeus1 [at] base.be
contactbrian70 [at] yahoo.co.jp
Received: from aircloud.net (unknown [69.42.24.8])
by xxxxx (Postfix) with ESMTP id CFB4878A44F2
for xxxxx; Sun, 16 May 2010 10:31:41 +0200 (CEST)
Received: from User [82.128.68.186] by aircloud.net with ESMTP
(SMTPD32-8.13) id A9155D00EC; Sat, 15 May 2010 11:33:57 -0700
IP: 82.128.68.186 ---> Multilinks Telecommunications Limited, Nigeria
ottialex386 [at] gmail.com
ben.morris100 [at] btconnect.com
- kjz
mrjimbrown [at] dhlexpressuk.org
-> j_pt86 [at] yahoo.com -> http://www.facebook.com/profile.php?id=1068525195
Die Sammluing wird immer größer:
Received: from server1.magnaad.com (mail.magnagroup.com [218.189.190.123])
by xxxxx (Postfix) with ESMTP id B67EC78A414D
for xxxxx; Wed, 5 May 2010 22:01:17 +0200 (CEST)
Received: from User ([41.19.230.238]) by server1.magnaad.com with
Microsoft SMTPSVC(5.0.2195.6713);
Thu, 6 May 2010 03:54:10 +0800
IP: 41.19.230.238 ---> Vodacom_UMTS_Pretoria1_INTERNET_APN, ZA
jobhunters20102013 [at] gmail.com
Received: from mailhost.frickemanagement.com (mail.frickemanagement.com
[216.158.127.186])
by xxxxx (Postfix) with ESMTP id 6190378A44FA
for xxxxx; Thu, 6 May 2010 16:16:04 +0200 (CEST)
Received: from User ([124.120.132.123]) by mailhost.frickemanagement.com
with Microsoft SMTPSVC(6.0.3790.3959);
Wed, 5 May 2010 06:05:39 -0500
IP: 124.120.132.123 ---> ppp-124-120-132-123.revip2.asianet.co.th
officelottery2010 [at] yahoo.com
lotteryoffice51 [at] yahoo.com.hk
officelottery94 [at] yahoo.com.hk
Muguphon: +(66)811306729 ---> mobile number, Thailand
Received: from smtpout5.poczta.onet.pl (smtpout5.poczta.onet.pl
[213.180.147.165])
by xxxxx (Postfix) with ESMTP id 7B99078A4370
for xxxxx; Fri, 7 May 2010 01:28:08 +0200 (CEST)
Received: from 71-94-184-48.dhcp.knwk.wa.charter.com
([71.94.184.48]:9489 "EHLO
DONE" rhost-flags-OK-FAIL-OK-FAIL) by ps1.m5r2.onet with ESMTPA
id S134223036Ab0EFX2IQAaZO (ORCPT <rfc822;xxxxx);
Fri, 7 May 2010 01:28:08 +0200
adbgbank11adbg [at] inMail24.com
officeofunrevwilsonkp2 [at] poczta.onet.pl
adbgbankplc0adbg [at] inMail24.com
Muguphon: +2348074938857 ---> Globacom Ltd., Nigeria
Received: from hxmail.hxex.cn (unknown [218.249.32.159])
by xxxxx (Postfix) with ESMTP id D08AC78983A1
for xxxxx; Wed, 12 May 2010 03:10:55 +0200 (CEST)
Received: from User ([41.217.65.13]) by hxmail.hxex.cn with Microsoft
SMTPSVC(5.0.2195.7381);
Wed, 12 May 2010 07:16:16 +0800
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
christakoku01 [at] gmail.com
js1969w0001 [at] gmail.com
Received: from mail.zhukovsky.net (mail.zhukovsky.net [87.245.133.7])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AEC2E78A465A
for xxxxx; Wed, 12 May 2010 12:28:37 +0200 (CEST)
Received: from [94.78.75.195] (port=59111 helo=User)
by mail.zhukovsky.net with esmtpa (Exim 4.69)
(envelope-from <bbj [at] cs.buap.mx>)
id 1OBkwC-0004Jl-SE; Tue, 11 May 2010 12:35:37 +0400
IP: 94.78.75.195 ---> 94-78-75-195.nethouse.net
medicosloans [at] aim.com
bbj [at] cs.buap.mx
- kjz
Die Sammlung geht weiter:
gecracktes Horde:
Received: from ns5.orangemali.net (mail.orangemali.net [196.200.88.120])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5CE9B78A44DF
for xxxxx; Mon, 17 May 2010 05:48:02 +0200 (CEST)
Received: (qmail 23057 invoked by uid 48); 15 May 2010 10:57:51 -0000
Received: from syd-ult-slb1-vlan5.ii.net (syd-ult-slb1-vlan5.ii.net
[203.215.17.58]) by webmail.orangemali.net (Horde MIME library) with HTTP;
Sat, 15 May 2010 12:57:48 +0200
Received: from ns5.orangemali.net (mail.orangemali.net [196.200.88.120])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 763CC78A4448
for xxxxx; Mon, 17 May 2010 02:14:45 +0200 (CEST)
Received: (qmail 29881 invoked by uid 48); 15 May 2010 12:43:18 -0000
Received: from 41.217.65.14 ([41.217.65.14]) by webmail.orangemali.net
(Horde MIME library) with HTTP; Sat, 15 May 2010 14:43:15 +0200
sgtbgary [at] discuz.org
sgtbgary [at] katamail.com
Received: from mail-relay-02.mailcluster.net (EHLO
mail-relay-02.mailcluster.net) [77.221.130.214]
by mx0.gmx.net (mx025) with SMTP; 17 May 2010 05:35:36 +0200
Received: from in-relay-01.mailcluster.net
(77.221.130.242.addr.datapoint.ru [77.221.130.242])
by mail-relay-02.mailcluster.net (Postfix) with ESMTPA id D6E689019BA1;
Mon, 17 May 2010 07:35:29 +0400 (MSD)
Received: from gw.aes-group.kz (mail.ekrec.kz [89.28.130.42])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
(Authenticated sender: defaultmailbox [at] aes-group.kz)
by in-relay-01.mailcluster.net (Postfix) with ESMTPSA id E3B0018000910;
Mon, 17 May 2010 07:34:43 +0400 (MSD)
Received: from User (unknown [41.217.67.5])
by gw.aes-group.kz (Postfix) with ESMTPA id D8EB03A3EEAA;
Mon, 17 May 2010 09:37:40 +0600 (ALMT)
IP: 41.217.67.5 ---> ZOOM Mobile Nigeria Ltd.
sandra.wallys [at] googlemail.com
defaultmailbox [at] aes-group.kz
fedex_package [at] live.co.uk
Muguphon: +2348068494533 ---> MTN Nigeria Communications Ltd.
Received: from c2beaomr07.btconnect.com (c2beaomr07.btconnect.com
[213.123.26.185])
by xxxxx (Postfix) with ESMTP id F256978A131B
for xxxxx; Tue, 18 May 2010 01:56:00 +0200 (CEST)
Received: from User (246-161-136-186.fibertel.com.ar [186.136.161.246]
(may be forged))
by c2beaomr07.btconnect.com
with ESMTP id EUG48030 (AUTH mj.wiles [at] btconnect.com);
Tue, 18 May 2010 00:11:30 +0100 (BST)
mj.wiles [at] btconnect.com
paulanderson441 [at] gmail.com
Muguphon: +234-80-39236013 ---> MTN Nigeria Communications Ltd.
Received: from rocco.bae.uky.edu (EHLO rocco.bae.uky.edu) [128.163.197.12]
by mx0.gmx.net (mx054) with SMTP; 18 May 2010 13:07:50 +0200
Received: from pool-74-109-241-111.pitbpa.fios.verizon.net
[74.109.241.111] by rocco.bae.uky.edu with SMTP;
Tue, 18 May 2010 06:56:29 -0400
samuel.amu [at] cantv.net
samuel_amu [at] yahoo.cn
Muguphon: +022548500574 ---> Orange, Cote d'Ivoire
Received: from 209.72.131.216.client.static.strong14.reliablehosting.com
(EHLO mx4.hotmail.com) [216.131.72.209]
by mx0.gmx.net (mx009) with SMTP; 18 May 2010 14:01:33 +0200
alejandroluna4 [at] aol.com
kcbznvvlev [at] hotmail.com
auch Regierungsserver in Uruguay werden gecrackt:
Received: from mail.mides.gub.uy (r200-40-156-195.static.adinet.com.uy
[200.40.156.195])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 1618B78A4348
for xxxxx; Wed, 19 May 2010 12:00:06 +0200 (CEST)
Received: from apache by mail.mides.gub.uy with local (Exim 4.66)
(envelope-from <apache [at] mail.mides.gub.uy>)
id 1OEIZA-0004DN-0H; Tue, 18 May 2010 05:54:20 -0300
Received: from vfbb250134.4u.com.gh (vfbb250134.4u.com.gh [41.218.250.134])
by mail.mides.gub.uy (Horde MIME library) with HTTP; Tue, 18 May 2010
05:54:19 -0300
Received: from mail.mides.gub.uy (r200-40-156-195.static.adinet.com.uy
[200.40.156.195])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id E295578A41AE
for xxxxx; Wed, 19 May 2010 12:00:08 +0200 (CEST)
Received: from apache by mail.mides.gub.uy with local (Exim 4.66)
(envelope-from <apache [at] mail.mides.gub.uy>)
id 1OEIcm-0004Gn-62; Tue, 18 May 2010 05:58:04 -0300
Received: from vfbb250134.4u.com.gh (vfbb250134.4u.com.gh [41.218.250.134])
by mail.mides.gub.uy (Horde MIME library) with HTTP; Tue, 18 May 2010
05:58:03 -0300
IP: 41.218.250.134 ---> vfbb250134.4u.com.gh
apache [at] mail.mides.gub.uy
quaye01 [at] zworg.com
quaye [at] zworg.com
Muguphon: +233 (20) 7159635 ---> Vodafone Ghana
Mugufax: +233 (20) 3120017 ---> Vodafone Ghana
- kjz
Die Reihe wird fortgesetzt mit:
ein gecrackter Account, versch. Lügenmärchen:
Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.26])
by xxxxx (Postfix) with ESMTP id 9A86B78A46B9
for xxxxx; Mon, 17 May 2010 20:35:50 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2026.orange.fr (SMTP Server) with ESMTP id C618820035F1;
Mon, 17 May 2010 20:35:44 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2026.orange.fr (SMTP Server) with ESMTP id B345520035E9;
Mon, 17 May 2010 20:35:44 +0200 (CEST)
Received: from User (AOrleans-251-1-24-115.w90-19.abo.wanadoo.fr
[90.19.247.115])
by mwinf2026.orange.fr (SMTP Server) with ESMTP id 2D3B62003F85;
Mon, 17 May 2010 20:34:26 +0200 (CEST)
baba.god [at] orange.fr
mark.jude [at] hotmail.com
mmark.jude [at] hotmail.com
Muguphon: +234-702-99-09216 ---> Starcomms PLC, Nigeria
Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.48])
by xxxxx (Postfix) with ESMTP id 27C4278A454B
for xxxxx; Mon, 17 May 2010 21:16:10 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2116.orange.fr (SMTP Server) with ESMTP id A4D6A1C01665;
Mon, 17 May 2010 21:15:19 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2116.orange.fr (SMTP Server) with ESMTP id 8F28E1C01660;
Mon, 17 May 2010 21:15:19 +0200 (CEST)
Received: from User
(APlessis-Bouchard-153-1-13-117.w83-112.abo.wanadoo.fr [83.112.220.117])
by mwinf2116.orange.fr (SMTP Server) with ESMTP id C68041C0156A;
Mon, 17 May 2010 21:13:55 +0200 (CEST)
baba.god [at] orange.fr
smithwilliams11001 [at] yahoo.cn
guy4chidopie [at] yahoo.com
Muguphon: +234-8027385402 ---> Celtel Nigeria Limited/Zain
Received: from braintrust.tw (211-75-136-111.HINET-IP.hinet.net
[211.75.136.111])
by xxxxx (Postfix) with ESMTP id 8EAD978A46EA
for xxxxx; Tue, 18 May 2010 17:34:23 +0200 (CEST)
Received: from User (unknown [41.217.65.13])
(Authenticated sender: info)
by braintrust.tw (Postfix) with ESMTPA id D7A82928A0F;
Tue, 18 May 2010 17:29:35 +0800 (CST)
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
drt101231 [at] aol.com
Muguphon: +234-70-25729799 ---> Visafone Communications Ltd., Nigeria
Received: from hbmail.u-happy.com (unknown [211.94.190.124])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4F46E78A46BD
for xxxxx; Tue, 18 May 2010 18:28:41 +0200 (CEST)
Received: (qmail 15175 invoked by uid 89); 10 May 2010 11:39:12 -0000
Received: from unknown (HELO User) (service [at] 82.128.62.187)
by 0 with SMTP; 10 May 2010 11:39:12 -0000
IP: 82.128.62.187 ---> Multilinks Telecommunications Limited, Nigeria
austine.paymnt [at] neu.com.cn
imf.update [at] neu.com.cn
- kjz
Dann wollen wir die Sammlung wieder erweitern:
die unsägliche Dreckskiste aus TR (seit Monaten offen wie ein Scheunentor und kein Schwein kümmerts...):
Received: from unknown (EHLO mailserver.wandiantong.com) [59.40.78.180]
by mx0.gmx.net (mx056) with SMTP; 19 May 2010 22:57:31 +0200
Received: from User ([81.215.14.21]) by mailserver.wandiantong.com with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 20 May 2010 03:08:59 +0800
IP: 81.215.14.21 ---> www.zmmae.gov.tr
verantwortlich:
e_mail [at] zmmae.gov.tr
ziraimucadele [at] ziraimucadele.gov.tr
wumtcomp [at] secretarias.com
Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.
Received: from mailserver.yzjy.com.cn (unknown [218.106.98.69])
by xxxxx (Postfix) with ESMTP id F3DB778A3BB3
for xxxxx; Thu, 20 May 2010 06:03:53 +0200 (CEST)
Received: from User ([82.128.15.173]) by mailserver.yzjy.com.cn with
Microsoft SMTPSVC(5.0.2195.6713);
Thu, 20 May 2010 11:32:55 +0800
IP: 82.128.15.173 ---> ml82.128.15.173.multilinks.com, Nigeria
dewar.robert [at] sify.com
Received: from gumlog.net (cggateway.gumlog.net [12.166.245.62])
by xxxxx (Postfix) with SMTP id A2E0678A46B9
for xxxxx; Thu, 20 May 2010 16:27:59 +0200 (CEST)
Received: (qmail 10762 invoked by uid 453); 20 May 2010 09:48:34 -0000
Received: from localhost (HELO localhost) (127.0.0.1)
by gumlog.net (qpsmtpd/0.40) with ESMTP; Thu, 20 May 2010 05:48:34 -0400
Received: from 41.138.177.90 ([41.138.177.90]) by www.gumlog.net (Horde
Framework) with HTTP; Thu, 20 May 2010 05:48:29 -0400
IP: 41.138.177.90 ---> Visafone Communications, NG
microsoft.awards [at] verizon.net
Received: from ezcommindia.com (EHLO ezcommindia.com) [69.36.165.217]
by mx0.gmx.net (mx005) with SMTP; 20 May 2010 12:15:26 +0200
Received: from User ([82.128.38.225])
(authenticated bits=0)
by ezcommindia.com (8.13.1/8.13.1) with ESMTP id o4KAECam007253;
Thu, 20 May 2010 04:14:18 -0600
IP: 82.128.38.225 ---> Multilinks Telecommunications Limited, Nigeria
rickeytarfa [at] rickeytarfa.eu
rickeytarfalawoffice [at] mail.mn
Muguphon: +00234-874001004 ---> Calabar, Nigeria
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id ED91778A4699
for xxxxx; Thu, 20 May 2010 20:39:53 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3503.me.freeserve.com (SMTP Server) with ESMTP id B8A8F70040C3;
Thu, 20 May 2010 20:39:53 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3503.me.freeserve.com (SMTP Server) with ESMTP id ADA7D7003EBE;
Thu, 20 May 2010 20:39:53 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3503.me.freeserve.com (SMTP Server) with ESMTP id A03B57003EBD;
Thu, 20 May 2010 20:39:53 +0200 (CEST)
Received: from User (unknown [82.128.85.76])
by mwinf3503.me.freeserve.com (SMTP Server) with ESMTP id B63117003EBE;
Thu, 20 May 2010 20:39:33 +0200 (CEST)
IP: 82.128.85.76 ---> Multilinks Telecommunications Limited, Nigeria
western_union4us [at] yahoo.cn
ali_usman [at] yahoo.com
lillies [at] fsbusiness.co.uk
Muuphon: +234-8028018611 ---> Celtel Nigeria Limited/Zain
Received: from sniper.jiran.com (unknown [210.118.180.67])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id D9D8778A44E3
for xxxxx; Fri, 21 May 2010 20:18:59 +0200 (CEST)
Received: (snipe 4469 invoked by uid 0); 21 May 2010 22:37:04 +0900
Received: from info [at] senatehouse.com with Spamsniper 2.96.00 (Processed
in 3.311442 secs);
Received: from unknown (HELO User) (sys [at] 41.138.173.76)
by unknown with SMTP; 21 May 2010 22:37:01 +0900
IP: 41.138.173.76 ---> Visafone Communications Limited, NG
atm_deliveries101 [at] hotmail.com
atmdept101 [at] hotmail.com
Muguphon: +2348033670535 ---> MTN Nigeria Communications Ltd.
Received: from evercare.co.kr (mail.evercare.co.kr [211.56.251.23])
by xxxxx (Postfix) with ESMTP id 3C00678A245D
for xxxxx; Sat, 22 May 2010 02:01:35 +0200 (CEST)
Received: from User([220.168.57.132]) by evercare.co.kr with SMTP id
1005220216084BF0; Sat, 22 May 2010 02:16:08 +0900
IP: 220.168.57.132 ---> CHINANET-HN Changsha
trisha.jacobs83 [at] gmail.com
admin [at] evercare.co.kr
Received: from mercury.formis.net (mercury.formis.net [211.24.159.250])
by xxxxx (Postfix) with ESMTP id C99FC78A4446
for xxxxx; Sat, 22 May 2010 13:04:11 +0200 (CEST)
Received: from User ([82.128.84.15])
by mercury.formis.net (Ultimate Mail Server v2.0) with ASMTP id
EPN17123;
Sat, 22 May 2010 18:43:23 +0800
IP: 82.128.84.15 ---> Multilinks Telecommunications Limited, Nigeria
pastormrsjuan1 [at] hotmail.com
pastormrsjuan34 [at] live.com
pastorjuan97 [at] yahoo.com.au
Received: from max.turkeyhosting.net (max.turkeyhosting.net
[89.107.227.234])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id F0D5278A4447
for xxxxx; Sat, 22 May 2010 18:31:10 +0200 (CEST)
Received: (qmail 1070 invoked by uid 48); 22 May 2010 13:44:08 +0300
Date: 22 May 2010 13:44:08 +0300
sheikh.maher19 [at] gmail.com
Received: from mail.stenica.com (mail.stenica.com [200.62.176.78])
by xxxxx (Postfix) with ESMTP id 3BB3678A44EB
for xxxxx; Sun, 23 May 2010 06:45:28 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.stenica.com (Postfix) with ESMTP id E4FD8700BA;
Sat, 22 May 2010 15:00:24 -0500 (PET)
X-Virus-Scanned: amavisd-new at stenica.com
Received: from mail.stenica.com ([127.0.0.1])
by localhost (mail.stenica.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id Fls7BZpMoJ5z; Sat, 22 May 2010 15:00:24 -0500 (PET)
Received: from User (mail.seguroshorizonte.com [200.44.114.162])
by mail.stenica.com (Postfix) with ESMTPA id CD35E70097;
Sat, 22 May 2010 15:00:15 -0500 (PET)
mtws [at] w.cn
mtwss [at] w.cn
als Job/Mulisuche getarnt:
Re: Employment Opportunities
A new job opening in your area, its a work from home/office position
and you are not required to pay any registration fee or pay for any
application form before you get employed.
Our Company seeks the service of a payment processor who would act as a
medium of reaching our customers. If you choose to work with us, you do
not need to quit your present job, or have problems with your employers
as this is on a part time basis
THIS IS WHAT IT ENTAILS:
1. Get/receive payment from clients/Customers.
2. Process Payments at your Bank.
3. Deduct 10% which is your commission/Payment on check cashed.
4. Forward the remaining 90% to the information that will be provided
later on.
I will need you to provide me with your basic personal info such as:
Full Name:
Contact Address:
City:
State:
Zip Code:
Country:
Phone Number:
Fill the above application so as to qualify you for the position.
John Mathews
REPLY TO: mtws [at] w.cn
Director
- kjz
aus der Sammlung:
Received: from bitcore.in (unknown [68.71.41.43])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C3E4778A31CE
for xxxxx; Fri, 21 May 2010 04:40:44 +0200 (CEST)
Received: (qmail 16045 invoked by uid 0); 14 May 2010 10:53:36 -0000
Received: from unknown (HELO User)
(valencia [at] info10.bitcore.in@95.169.184.134)
by 68.71.41.43 with ESMTPA; 14 May 2010 10:53:36 -0000
IP: 95.169.184.134 ---> RU-KEYWEB-III
seguromutuaes [at] aol.es
caixaes [at] ozu.es
Received: from n3.bullet.mail.re3.yahoo.com
(n3.bullet.mail.re3.yahoo.com [68.142.237.110])
by xxxxx (Postfix) with SMTP id EC5E278A46B5
for xxxxx>; Fri, 21 May 2010 08:32:51 +0200 (CEST)
Received: from [68.142.237.87] by n3.bullet.mail.re3.yahoo.com with
NNFMP; 21 May 2010 06:32:51 -0000
Received: from [66.196.97.153] by t3.bullet.re3.yahoo.com with NNFMP; 21
May 2010 06:32:51 -0000
Received: from [127.0.0.1] by omp206.mail.re3.yahoo.com with NNFMP; 21
May 2010 06:32:51 -0000
Received: (qmail 64313 invoked by uid 60001); 21 May 2010 06:32:50 -0000
Received: from [41.138.176.191] by web88007.mail.re2.yahoo.com via HTTP;
Thu, 20 May 2010 23:32:50 PDT
IP: 41.138.176.191 ---> Visafone Communications Limited, NG
rayugo1211 [at] live.com
rayugo1210 [at] live.com
- kjz
De Mugus waren nicht faul:
Received: from psmtp09.wxs.nl (psmtp09.wxs.nl [195.121.247.23])
by xxxxx (Postfix) with ESMTP id 9519478A43D6
for xxxxx; Mon, 24 May 2010 00:17:38 +0200 (CEST)
Received: from hbpublishing.nl (static.kpn.net [92.67.128.83])
by psmtp09.wxs.nl
(iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14 2006))
with ESMTP id <0L2W00ASP8LA9Y [at] psmtp09.wxs.nl> for xxxxx;
Mon, 24 May 2010 00:17:38 +0200 (MEST)
Received: from User ([82.128.37.224]) by hbpublishing.nl with Microsoft
SMTPSVC(6.0.3790.4675); Mon, 24 May 2010 00:17:34 +0200
IP: 82.128.37.224 ---> Multilinks Telecommunications Limited, Nigeria
franklinalbert1960 [at] gmail.com
Received: from gddoftec.gov.cn (unknown [211.155.27.140])
by xxxxx (Postfix) with ESMTP id 5B53778A445B
for xxxxx; Mon, 24 May 2010 11:19:40 +0200 (CEST)
Received: from User [41.217.65.13] by gddoftec.gov.cn with ESMTP
(SMTPD32-8.01) id AFF07FF0152; Mon, 24 May 2010 07:53:20 +0800
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
abdulmmodd [at] gmail.com
abdmmmodal [at] gmail.com
Received: from smtp-cronos.etb.net.co (smtp-cronos.etb.net.co
[200.69.107.12])
byxxxxx (Postfix) with ESMTP id 3287878A47E3
for xxxxx; Tue, 25 May 2010 11:41:04 +0200 (CEST)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
Av//APJB+kvAqMrY/2dsb2JhbAAKbwEUggmGUoRpAYF4gl2HHoI6LAFZeY0IojoKh1mKKIEqBYFVHg8DATgEgiSKY4QY
Subject: [SPAM] RE: Job Opportunity...(Part Time)...
X-IronPort-AV: E=Sophos;i="4.53,292,1272862800";
d="scan'208";a="58209960"
Received: from unknown (HELO hosting09bg.etb.net.co) ([192.168.202.216])
by smtp-cronos.etb.net.co with ESMTP; 24 May 2010 11:08:41 -0500
Received: (qmail 13505 invoked from network); 23 May 2010 21:42:57 -0500
Received: from mail.seguroshorizonte.com (HELO User) (200.44.114.162)
by 192.168.180.40 with SMTP; 23 May 2010 21:42:57 -0500
mtwss [at] w.cn
mtws [at] w.cn
gecracktes Horde:
Received: from email.bien.com.pe (fw.bien.com.pe [64.76.128.196])
by xxxxx (Postfix) with ESMTP id 474AA78A4446
for xxxxx; Tue, 25 May 2010 05:24:37 +0200 (CEST)
Received: (qmail 10822 invoked by uid 2); 25 May 2010 02:50:07 -0000
Received: from lcrbnglosnse005.crb.apmoller.net
(lcrbnglosnse005.crb.apmoller.net [41.211.239.196]) by webmail.bien.com.pe
(Horde MIME library) with HTTP; Mon, 24 May 2010 21:50:07 -0500
IP: 41.211.239.196 ---> Direct-on-PC Limited, Nigeria
vcantuarias [at] bien.com.pe
mr_hwa24 [at] yahoo.com.tw
Received: from smtp1.cybercity.dk (smtp1.cybercity.dk [212.242.43.251])
by xxxxx (Postfix) with ESMTP id B18AE78A4448
for xxxxx; Tue, 25 May 2010 05:30:07 +0200 (CEST)
Received: from uf7.cybercity.dk (uf7.cybercity.dk [212.242.42.164])
by smtp1.cybercity.dk (Postfix) with ESMTP id 84DE25868AD;
Tue, 25 May 2010 05:33:00 +0200 (CEST)
Received: from User (mail.ufsystems.com [74.223.163.250])
(Authenticated sender: ttm153817a)
by uf7.cybercity.dk (Postfix) with ESMTPA id 372E7B85D4D;
Tue, 25 May 2010 05:29:50 +0200 (CEST)
mrsssmrcmpblll [at] gmail.com
lasseriis [at] mail.telenor.dk
alert.customer.information [at] gmail.com
Muguphon: +2348022659434 ---> Celtel Nigeria Limited/Zain
- kjz
Aus der Liste:
Received: from smtp-out01.msg.oleane.net (smtp-out01.msg.oleane.net
[62.161.3.10])
by xxxxx (Postfix) with ESMTP id 46F0178A466B
for xxxxx; Thu, 27 May 2010 03:35:38 +0200 (CEST)
Received: from smtp06.msg.oleane.net (smtp06.mail.priv [172.17.20.115])
by smtp-out01.msg.oleane.net with ESMTP id o4R1YQtS017536;
Thu, 27 May 2010 03:34:26 +0200
Received: from webmail.annedelajartre.com
(LMontsouris-156-25-20-18.w80-14.abo.wanadoo.fr [80.14.163.18])
(authenticated)
by smtp06.msg.oleane.net (MTA) with ESMTP id o4R1YNNq031911;
Thu, 27 May 2010 03:34:23 +0200
X-Oleane-Rep: REPC
Received: from User ([82.128.23.233]) by webmail.annedelajartre.com with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 27 May 2010 03:34:19 +0200
IP: 82.128.23.233 ---> ml82.128.23.233.multilinks.com, Nigeria
mr.idris.pelicanexpress [at] googlemail.com
Muguphon: +390699709651 ---> FastWeb S.p.A., IT
Muguphon: +390699709757 ---> FastWeb S.p.A., IT
Mugufax: +390699938363 ---> FastWeb S.p.A., IT
Received: from somalia.ti.ru (somalia.ti.ru [89.20.159.3])
by xxxxx (Postfix) with ESMTP id D460178A46D2
for xxxxx; Thu, 27 May 2010 11:06:38 +0200 (CEST)
Received: from [82.128.22.124] (account bass [at] dubki.ru HELO User)
by somalia.ti.ru (CommuniGate Pro SMTP 5.2.16)
with ESMTPA id 7041231; Thu, 27 May 2010 12:04:39 +0400
IP: 82.128.22.124 ---> ml82.128.22.124.multilinks.com, Nigeria
ashleygracia02 [at] hotmail.com
bass [at] dubki.ru
Received: from s1.knc.ac.th (unknown [61.19.30.170])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id C537878A4446
for xxxxx; Fri, 28 May 2010 02:15:05 +0200 (CEST)
Received: from User ([41.217.65.13])
(authenticated bits=0)
by s1.knc.ac.th (8.12.11/8.12.11) with ESMTP id o4RDS3wo009187;
Thu, 27 May 2010 20:28:12 +0700
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
cimorse [at] sify.com
lenny3290 [at] aol.com
Received: from smtp-out01.msg.oleane.net (smtp-out01.msg.oleane.net
[62.161.3.10])
by xxxxx (Postfix) with ESMTP id 4802678A43A5
for xxxxx; Fri, 28 May 2010 03:23:26 +0200 (CEST)
Received: from smtp03.msg.oleane.net (smtp03.mail.priv [172.17.20.112])
by smtp-out01.msg.oleane.net with ESMTP id o4S1LiSX000497;
Fri, 28 May 2010 03:21:44 +0200
Received: from webmail.annedelajartre.com
(LMontsouris-156-25-20-18.w80-14.abo.wanadoo.fr [80.14.163.18])
(authenticated)
by smtp03.msg.oleane.net (MTA) with ESMTP id o4S1LfkF022995;
Fri, 28 May 2010 03:21:42 +0200
X-Oleane-Rep: REPC
Received: from User ([82.128.80.39]) by webmail.annedelajartre.com with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 28 May 2010 03:21:41 +0200
IP: 82.128.80.39 ---> Multilinks Telecommunications Limited, Nigeria
mrsjuliewl [at] blumail.org
mrsjuliewl [at] aol.com
Received: from mail.sercm.org (unknown [203.193.155.67])
by xxxxx (Postfix) with ESMTP id 4577A78A46A2
for xxxxx; Fri, 28 May 2010 08:48:43 +0200 (CEST)
Received: by mail.sercm.org (Postfix, from userid 717)
id 04C9DA85536; Mon, 24 May 2010 19:33:29 +0530 (IST)
Received: from sercm.org (localhost.localdomain [127.0.0.1])
by mail.sercm.org (Postfix) with ESMTP id 9601FA854E1;
Mon, 24 May 2010 19:32:07 +0530 (IST)
info.cgsfuk [at] gmail.com
cgsfuk01 [at] live.com
sselvi [at] sercm.org
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id 7CCE378A47F9
for xxxxx; Fri, 28 May 2010 11:27:34 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3534.me.freeserve.com (SMTP Server) with ESMTP id DC5A81C01141;
Fri, 28 May 2010 11:27:33 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3534.me.freeserve.com (SMTP Server) with ESMTP id CF3991C00622;
Fri, 28 May 2010 11:27:33 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3534.me.freeserve.com (SMTP Server) with ESMTP id BE1481C01140;
Fri, 28 May 2010 11:27:33 +0200 (CEST)
Received: from User (unknown [86.125.14.19])
by mwinf3534.me.freeserve.com (SMTP Server) with ESMTP id EDBDF1C00622;
Fri, 28 May 2010 11:27:31 +0200 (CEST)
IP: 86.125.14.19 ---> static-86-125-14-19.rdsnet.ro
evans648 [at] fsnet.co.uk
scottwilliams23 [at] yahoo.cn
- kjz
Die Liste wird verlängert durch:
Received: from c2bthomr01.btconnect.com (EHLO c2bthomr01.btconnect.com)
[213.123.20.119]
by mx0.gmx.net (mx078) with SMTP; 28 May 2010 22:12:51 +0200
Received: from User (ppp-94-65-43-240.home.otenet.gr [94.65.43.240])
by c2bthomr01.btconnect.com
with ESMTP id NDW70549 (AUTH david.bohy01 [at] btconnect.com);
Fri, 28 May 2010 20:45:23 +0100 (BST)
Received: from c2bthomr02.btconnect.com (EHLO c2bthomr02.btconnect.com)
[213.123.20.120]
by mx0.gmx.net (mx091) with SMTP; 29 May 2010 03:24:24 +0200
Received: from User (dslb-084-058-014-100.pools.arcor-ip.net [84.58.14.100])
by c2bthomr02.btconnect.com
with ESMTP id MGF04696 (AUTH david.both03 [at] btconnect.com);
Sat, 29 May 2010 02:06:55 +0100 (BST)
david.bohy01 [at] btconnect.com
david.booth03 [at] live.com
david.both04 [at] live.com
david.both03 [at] btconnect.com
den hatten wir schon:
Received: from somalia.ti.ru (somalia.ti.ru [89.20.159.3])
by xxxxx (Postfix) with ESMTP id 88BCD78A4550
for xxxxx; Fri, 28 May 2010 23:10:20 +0200 (CEST)
Received: from [82.128.21.42] (account bass [at] dubki.ru HELO User)
by somalia.ti.ru (CommuniGate Pro SMTP 5.2.16)
with ESMTPA id 7214897; Sat, 29 May 2010 01:08:21 +0400
IP: 82.128.21.42 ---> ml82.128.21.42.multilinks.com, Nigeria
bass [at] dubki.ru
ashleygracia00 [at] hotmail.com
Received: from prometcoinc.com (unknown [64.122.168.194])
by xxxxx (Postfix) with ESMTP id 95DB278A455E
for xxxxx; Sat, 29 May 2010 09:12:27 +0200 (CEST)
Received: from User ([84.97.90.4]) by prometcoinc.com with Microsoft
SMTPSVC(6.0.3790.3959);
Thu, 27 May 2010 03:32:29 -0700
solicitors.cheng [at] yahoo.com.hk
iureiye734535 [at] yahoo.com.cn
Received: from host2host.com (host2host.com [216.117.164.247])
by xxxxx (Postfix) with ESMTP id F16F978A46C3
for xxxxx; Sat, 29 May 2010 11:20:57 +0200 (CEST)
Received: from User [67.205.103.119] by host2host.com with ESMTP
(SMTPD32-8.05) id A81C311A0122; Sat, 29 May 2010 05:02:20 -0400
collins [at] gala.net
Received: from Vina_Control.vinacontrol.com.vn (unknown [118.69.204.155])
by xxxxx (Postfix) with ESMTP id 5AEE678004A0
for xxxxx; Sat, 29 May 2010 13:52:27 +0200 (CEST)
Received: from User ([220.178.47.82]) by Vina_Control.vinacontrol.com.vn
with Microsoft SMTPSVC(6.0.3790.4675);
Sat, 29 May 2010 08:40:26 +0700
IP: 220.178.47.82 ---> CHINANET anhui
mike_red555 [at] yahoo.co.jp
mike_red [at] hotmail.com
Muguphon: +447024031574 ---> Magrathea Telecommunications Limited, UK
Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.48])
by xxxxx (Postfix) with ESMTP id 661D278A4695
for xxxxx; Sat, 29 May 2010 17:14:03 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2114.orange.fr (SMTP Server) with ESMTP id 3239A1C0089E;
Sat, 29 May 2010 17:14:03 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2114.orange.fr (SMTP Server) with ESMTP id 1AE5B1C00A06;
Sat, 29 May 2010 17:14:03 +0200 (CEST)
Received: from User (ARennes-554-1-176-181.w81-53.abo.wanadoo.fr
[81.53.52.181])
by mwinf2114.orange.fr (SMTP Server) with ESMTP id 8F05B1C0089E;
Sat, 29 May 2010 17:11:58 +0200 (CEST)
amc0110 [at] hosanna.net
isakovic.hand [at] orange.fr
Received: from lomond-cc.com (unknown [210.150.55.240])
by xxxxx (Postfix) with SMTP id B3A8278004A0
for xxxxx; Sun, 30 May 2010 05:53:09 +0200 (CEST)
Received: (qmail 17107 invoked by SAV 20100529.024 by uid 0); 30 May
2010 10:52:39 +0900
X-Authentication: info was authenticated by 210.150.55.240
at 30 May 2010 10:52:39 +0900
Received: from unknown (HELO User) (82.128.17.226)
by ps26.suite2.arena.ne.jp (210.150.55.240) with SMTP; 30 May 2010
10:52:39 +0900
IP: 82.128.17.226 ---> ml82.128.17.226.multilinks.com, Nigeria
dewar.robert [at] w.cn
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id B6FD478A46E5
for xxxxx; Sun, 30 May 2010 18:18:35 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3508.me.freeserve.com (SMTP Server) with ESMTP id 76EAA70000A2;
Sun, 30 May 2010 18:17:45 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3508.me.freeserve.com (SMTP Server) with ESMTP id 6C284700009A;
Sun, 30 May 2010 18:17:45 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3508.me.freeserve.com (SMTP Server) with ESMTP id 5E6F47000091;
Sun, 30 May 2010 18:17:45 +0200 (CEST)
Received: from User (unknown [41.218.252.30])
by mwinf3508.me.freeserve.com (SMTP Server) with ESMTP id 3408970081A0;
Sun, 30 May 2010 18:17:40 +0200 (CEST)
IP: 41.218.252.30 ---> vfbb25230.4u.com.gh
southgate71 [at] freeserve.co.uk
drfredscott12 [at] gmail.com
allenprince01 [at] aol.com
princeallen01 [at] aol.com
- kjz
Und - aus aktuellem Anlass - die Fußball WM läßt grüßen. Frisch aus deutschen Landen (Versatel und Kabel Deutschland) auf den Tisch.
Received: from mail06do.versatel.de (EHLO mail06do.versatel.de)
[89.245.129.26]
by mx0.gmx.net (mx101) with SMTP; 31 May 2010 20:50:24 +0200
Received: (qmail 5734 invoked from network); 31 May 2010 18:50:24 -0000
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
spamkill14do.versatel-west.de
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.6 required=5.0 tests=ALL_TRUSTED,DCC_CHECK,
DIGEST_MULTIPLE,FORGED_MUA_OUTLOOK,MISSING_HEADERS,MISSING_MID,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,
RAZOR2_CHECKautolearn=disabled version=3.2.5
Received: from 178-25-174-34-dynip.superkabel.de (HELO User)
(a-337479 [at] versanet.de@[178.25.174.34])
(envelope-sender <payment [at] fifa2010.com>)
by mail06do.versatel.de (qmail-ldap-1.03) with ESMTPA
for <kjwood35 [at] hotmail.com>; 31 May 2010 18:50:20 -0000
Received: from mail06do.versatel.de (EHLO mail06do.versatel.de)
[89.245.129.26]
by mx0.gmx.net (mx017) with SMTP; 31 May 2010 20:50:24 +0200
Received: (qmail 5734 invoked from network); 31 May 2010 18:50:24 -0000
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
spamkill14do.versatel-west.de
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.6 required=5.0 tests=ALL_TRUSTED,DCC_CHECK,
DIGEST_MULTIPLE,FORGED_MUA_OUTLOOK,MISSING_HEADERS,MISSING_MID,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,
RAZOR2_CHECKautolearn=disabled version=3.2.5
Received: from 178-25-174-34-dynip.superkabel.de (HELO User)
(a-337479 [at] versanet.de@[178.25.174.34])
(envelope-sender <payment [at] fifa2010.com>)
by mail06do.versatel.de (qmail-ldap-1.03) with ESMTPA
for <kjwood35 [at] hotmail.com>; 31 May 2010 18:50:20 -0000
2010fifaprize [at] gala.net
a-337479 [at] versanet.de
Wie 'hirntot' ist man eigentlich bei Versatel?
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
spamkill14do.versatel-west.de
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.6 required=5.0
Läßt das Ganze durch Spamassassin laufen, der erkennt es auch völlig richtig als Spam und Versatel bläst das trotzdem raus? Oh Herr, lass Hirn vom Himmel regnen....
- kjz
Die alten Neuigkeiten von der Mugu-Front:
Received: from tcabcmail.tcabc.local (wsip-98-190-34-3.tu.ok.cox.net
[98.190.34.3])
by xxxxx (Postfix) with SMTP id 346D078A4808
for xxxxx; Mon, 31 May 2010 21:40:18 +0200 (CEST)
Received: from User ([82.128.10.223]) by tcabcmail.tcabc.local with
Microsoft SMTPSVC(6.0.3790.4675);
Mon, 31 May 2010 14:29:39 -0500
IP: 82.128.10.223 ---> ml82.128.10.223.multilinks.com, Nigeria
kenroland22 [at] aol.com
kenroland22 [at] yahoo.com
Received: from 196-1-145-241.reverse.CMCNETWORKS.NET (EHLO
server.Webco.local) [196.1.145.241]
by mx0.gmx.net (mx073) with SMTP; 02 Jun 2010 15:39:41 +0200
Received: from User ([82.128.81.40]) by server.Webco.local with
Microsoft SMTPSVC(6.0.3790.1830);
Wed, 2 Jun 2010 15:27:28 +0200
Received: from 196-1-145-241.reverse.CMCNETWORKS.NET (EHLO
server.Webco.local) [196.1.145.241]
by mx0.gmx.net (mx081) with SMTP; 02 Jun 2010 15:40:33 +0200
Received: from User ([82.128.81.40]) by server.Webco.local with
Microsoft SMTPSVC(6.0.3790.1830);
Wed, 2 Jun 2010 15:27:28 +0200
IP: 82.128.81.40 ---> Multilinks Telecommunications Limited, Nigeria
fiscalcommission [at] jmail.co.za
ntdntn9 [at] gmail.com
Muguphon: +234-7091149115 ---> Multi-links Telecommunications Ltd., Nigeria
Received: from server3.stepashka.com
(bzq-82-80-248-58.static.dcenter.bezeqint.net [82.80.248.58])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 90D3A7897712
for xxxxx; Wed, 2 Jun 2010 18:59:55 +0200 (CEST)
Received: from [41.138.178.236] (helo=User)
by server3.stepashka.com with esmtpa (Exim 4.69)
(envelope-from <savardge23 [at] yahoo.com>)
id 1OJjM4-0003iO-8n; Wed, 02 Jun 2010 11:31:16 +0300
IP: 41.138.178.236 ---> Visafone Communications Limited, Nigeria
savardge23 [at] yahoo.com
savardge21 [at] yahoo.com
Received: from mail1.hcmute.edu.vn (EHLO dns1.hcmute.edu.vn)
[203.113.147.179]
by mx0.gmx.net (mx040) with SMTP; 02 Jun 2010 20:28:25 +0200
Received: from User ([116.206.186.71])
(authenticated bits=0)
by dns1.hcmute.edu.vn (8.14.2/8.14.2) with ESMTP id o51CkORj017803;
Tue, 1 Jun 2010 19:46:25 +0700
IP: 116.206.186.71 ---> iZZinet Sdn. Bhd., MY
michaelchong [at] blumail.org
lawoffice02 [at] hotmail.com
lawyer_chong [at] blumail.org
- kjz
Muguphon: +60172718538 ---> Maxis Mobile (Binariang), Malaysia
Aus der Mugu-Galerie:
Received: from exchange.ceric.net (unknown [211.114.0.251])
by xxxxx (Postfix) with ESMTP id E8C547894B62
for xxxxx; Mon, 31 May 2010 02:57:33 +0200 (CEST)
Received: from User ([82.128.32.146]) by exchange.ceric.net with
Microsoft SMTPSVC(6.0.3790.1830);
Mon, 31 May 2010 09:58:06 +0900
IP: 82.128.32.146 ---> Multilinks Telecommunications Limited, Nigeria
mrskatefrankk66 [at] live.com
kate_frank [at] walla.com
mrs.katefrank.06 [at] mail.com
Received: from host.costumeworld.com (unknown [69.72.142.186])
by spammotel.com (Postfix) with ESMTPS id 49B9B6DCD5E
for xxxxx; Sun, 30 May 2010 22:36:01 -0400 (EDT)
Received: (qmail 30713 invoked from network); 30 May 2010 03:44:01 -0400
Received: from unknown (HELO User) (82.128.84.143)
by liquid.mindcontroll.com with SMTP; 30 May 2010 03:44:00 -0400
IP: 82.128.84.143 ---> Multilinks Telecommunications Limited, Nigeria
jooc [at] rediffmail.com
Muguphon: +447024037813 ---> Magrathea Telecommunications Limited, UK
Received: from host2host.com (host2host.com [216.117.164.247])
by xxxxx (Postfix) with ESMTP id DE5FF78990F4
for xxxxx; Tue, 1 Jun 2010 22:54:15 +0200 (CEST)
Received: from User [82.128.19.42] by host2host.com with ESMTP
(SMTPD32-8.05) id A11D25AD02E6; Tue, 01 Jun 2010 16:44:13 -0400
IP: 82.128.19.42 ---> ml82.128.19.42.multilinks.com, Nigeria
collins [at] gala.net
- kjz
Es geht weiter mit:
Received: from web3208.mail.kcd.yahoo.co.jp
(web3208.mail.kcd.yahoo.co.jp [124.147.38.15])
by xxxxx (Postfix) with SMTP id 7F7A078A48C5
for xxxxx; Thu, 3 Jun 2010 22:33:44 +0200 (CEST)
Received: (qmail 9368 invoked by uid 60001); 3 Jun 2010 20:33:42 -0000
Received: from [82.128.22.136] by web3208.mail.kcd.yahoo.co.jp via HTTP;
Fri, 04 Jun 2010 05:33:42 JST
IP: 82.128.22.136 ---> ml82.128.22.136.multilinks.com, Nigeria
dvdlee_1971 [at] yahoo.co.jp
givethankstotheholygivethanks05 [at] yahoo.co.jp
Received: from 51Logon.com (unknown [222.35.137.166])
by xxxxx (Postfix) with ESMTP id E6AB378A4550
for xxxxx; Fri, 4 Jun 2010 01:16:41 +0200 (CEST)
Received: from User [221.2.144.135] by 51Logon.com with ESMTP
(SMTPD-8.22) id AEC73038; Wed, 05 May 2010 20:04:23 +0800
IP: 221.2.144.135 ---> CNC Group CHINA169 Shandong
mrsballi112 [at] gmail.com
james_cole_lawfirm [at] mail2ohio.com
Muguphon: +44-702-404-1690 ---> Magrathea Telecommunications Limited, UK
- kjz
Und natürlich habe ich noch mehr zu bieten:
Received: from mxweblb06fl.versatel.de (mxweblb06fl.versatel.de
[89.246.255.250])
by xxxxx (Postfix) with ESMTP id C802278983A1
for xxxxx; Thu, 3 Jun 2010 15:26:26 +0200 (CEST)
Received: from ens27fl.versatel.de (ens27fl.versatel.de [212.7.147.130])
by mxweblb06fl.versatel.de (8.13.1/8.13.1) with ESMTP id o53BVMMO016526;
Thu, 3 Jun 2010 13:31:22 +0200
Received: from User ([82.128.69.158])
(authenticated bits=0)
by ens27fl.versatel.de (8.12.11.20060308/8.12.11) with ESMTP id
o53BT8sR014610;
Thu, 3 Jun 2010 13:29:13 +0200
IP: 82.128.69.158 ---> Multilinks Telecommunications Limited, Nigeria
engrabubakar12 [at] yahoo.co.jp
engrabubakar1 [at] yahoo.co.jp
Muguphon: +234-8070540659 ---> Globacom Ltd., Nigeria
Received: from smtp818.mail.ird.yahoo.com (smtp818.mail.ird.yahoo.com
[77.238.189.18])
by xxxxx (Postfix) with SMTP id 30D5C78A4825
for xxxxx; Fri, 4 Jun 2010 15:11:19 +0200 (CEST)
Received: (qmail 71416 invoked from network); 4 Jun 2010 13:11:18 -0000
Received: from User (st.george212 [at] 124.207.99.61 with login)
by smtp818.mail.ird.yahoo.com with SMTP; 04 Jun 2010 13:11:15
+0000 GMT
IP: 124.207.99.61 ---> Beijing Zhongbangyatong Telecom Technology Co.,Ltd
johnsonfidel [at] btinternet.com
st.george212 [at] btinternet.com
Received: from mail.a-wentai.com (60-248-88-250.HINET-IP.hinet.net
[60.248.88.250])
by xxxxx (Postfix) with ESMTP id 88A3178A483D
for xxxxx; Fri, 4 Jun 2010 17:35:58 +0200 (CEST)
Received: from User (unknown [81.91.228.78])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mail.a-wentai.com (EMOS V1.5 (Postfix)) with ESMTPSA id 8045C4848726;
Fri, 4 Jun 2010 23:17:42 +0800 (CST)
IP: 81.91.228.78 ---> BENIN TELECOM
unionbankplc34 [at] mail.mn
test [at] a-wentai.com
Muguphon: +1 607 5950485 ---> Ymax Communications Corp. - Ny
Received: from mail.worldchampionco.com (worldchampionco.com
[202.96.186.209])
by xxxxx (Postfix) with ESMTP id 49C7178A48B5
for xxxxx; Fri, 4 Jun 2010 19:44:12 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.worldchampionco.com (EMOS V1.4 (Postfix)) with ESMTP id
7E88F549251;
Sat, 5 Jun 2010 01:00:27 +0800 (CST)
X-Virus-Scanned: amavisd-new at worldchampionco.com
Received: from mail.worldchampionco.com ([127.0.0.1])
by localhost (mail.worldchampionco.com [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id oxJgcHkKpjnV; Sat, 5 Jun 2010 01:00:27 +0800 (CST)
Received: from User (unknown [41.138.166.50])
by mail.worldchampionco.com (EMOS V1.4 (Postfix)) with ESMTPA id
A7CE254911A;
Sat, 5 Jun 2010 00:59:03 +0800 (CST)
IP: 41.138.166.50 ---> Visafone Communications Limited, Nigeria
barr.phwilliams [at] hotmail.com
test [at] worldchampionco.com
barr.phwilliams45 [at] live.com
Received: from mx2.infrasurf.com (mx2.infrasurf.com [75.125.235.66])
by xxxxx (Postfix) with ESMTP id 9B61D78A46E6
for xxxxx; Fri, 4 Jun 2010 20:18:09 +0200 (CEST)
Received: from [127.0.0.1] (helo=75.125.235.66)
by mx2.infrasurf.com with esmtpa (Exim 4.68 #1)
id 1OKY01-0004Q1-AZ by authid <dipankar [at] tttextiles.com> with
fixed_login; Fri, 04 Jun 2010 20:05:55 +0530
ken001 [at] rcweb.net
dipankar [at] tttextiles.com
agentken00 [at] yahoo.co.uk
Muguphon: +234 805 844 8843 ---> Globacom Ltd., Nigeria
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id EE4F9789B24B
for xxxxx; Fri, 4 Jun 2010 20:55:56 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id 764831C017E2;
Fri, 4 Jun 2010 20:55:56 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id 691D91C0123A;
Fri, 4 Jun 2010 20:55:56 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id 58C281C00B68;
Fri, 4 Jun 2010 20:55:56 +0200 (CEST)
Received: from User (mail.kantoreye.com [205.201.144.42])
by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP id 82B551C021AC;
Fri, 4 Jun 2010 20:55:33 +0200 (CEST)
elinor6 [at] wanadoo.co.uk
kelvinwllm [at] web2mail.com
mrrobertmueller [at] hosanna.net
Muguphon: +2347086034531 ---> Celtel Nigeria Limited/Zain
Received: from IMPaqm3.telefonica.net (impaqm3.telefonica.net [213.4.138.3])
by xxxxx (Postfix) with ESMTP id 3416E78A4827
for xxxxx; Sat, 5 Jun 2010 15:49:51 +0200 (CEST)
Received: from IMPmailhost4.adm.correo ([10.20.102.125])
by IMPaqm3.telefonica.net with bizsmtp
id S7qE1e00g2iL0W23PDpqpB; Sat, 05 Jun 2010 15:49:50 +0200
Received: from User ([190.16.110.124])
by IMPmailhost4.adm.correo with BIZ IMP
id SDpR1e00G2h4lZq1kDpZn5; Sat, 05 Jun 2010 15:49:50 +0200
IP: 190.16.110.124 ---> 124-110-16-190.fibertel.com.ar
ajube1 [at] telefonica.net
service002 [at] kkwl.ac.th
service`002 [at] kkwl.ac.th
pml00 [at] mail2usa.com
Mugufax: +1-206-338-5982 ---> International Telcom, Ltd. - Wa (bekannt und beliebt aus fast allen Diploma-Mill Scams)
Received: from WEBMAIL.ARAMARK.CN (unknown [218.241.137.66])
by xxxxx (Postfix) with ESMTP id 8FC967897719
for xxxxx; Sat, 5 Jun 2010 19:03:36 +0200 (CEST)
Received: from User ([121.14.148.145] RDNS failed) by WEBMAIL.ARAMARK.CN
with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 6 Jun 2010 00:46:06 +0800
IP: 121.14.148.145 ---> Guangdong Network of ChinaTelecom
b.ensb_ernanke12 [at] tr.la
b.ensb_ernanke00 [at] turk.tl
Received: from smtp5.freeserve.com (smtp5.freeserve.com [193.252.22.159])
by xxxxx (Postfix) with ESMTP id D42E178A46A0
for xxxxx; Sun, 6 Jun 2010 07:30:32 +0200 (CEST)
Received: from smtp5.freeserve.com (localhost [127.0.0.1])
by mwinf3404.me.freeserve.com (SMTP Server) with ESMTP id 3053A1C02269;
Sun, 6 Jun 2010 07:29:50 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3404.me.freeserve.com (SMTP Server) with ESMTP id 24BEF1C00C97;
Sun, 6 Jun 2010 07:29:50 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3404.me.freeserve.com (SMTP Server) with ESMTP id 166581C013CA;
Sun, 6 Jun 2010 07:29:50 +0200 (CEST)
Received: from User (74-93-96-133-Washington.hfc.comcastbusiness.net
[74.93.96.133])
by mwinf3404.me.freeserve.com (SMTP Server) with ESMTP id 98FD91C00C97;
Sun, 6 Jun 2010 07:29:45 +0200 (CEST)
hadlow30 [at] fsnet.co.uk
annjohnson2020 [at] yahoo.cn
lizzycherie [at] aol.com
Muguphon: +234-7086584788 ---> Celtel Nigeria Limited/Zain
Received: from unknown (EHLO www.cctvdiy.com.tw) [123.50.53.233]
by mx0.gmx.net (mx111) with SMTP; 06 Jun 2010 13:31:27 +0200
Received: from User (ml82.128.18.87.multilinks.com [82.128.18.87])
(Authenticated sender: user)
by www.cctvdiy.com.tw (Postfix) with ESMTP id 9674CC3BA;
Sun, 6 Jun 2010 19:26:44 +0800 (CST)
IP: 82.128.18.87 ---> Multilinks, Nigeria
belshamwilliam [at] gmail.com
belshamwilliam [at] yahoo.com
Muguphon: +447762881686 ---> O2 (UK) Limited
- kjz
Zur Vergrößerung der Sammlung wollen gerne beitragen:
Received: from cs1133.mojohost.com (mail.netmsi.com [99.192.153.34])
by xxxxx (Postfix) with ESMTP id AB6DC78A467B
for xxxxx; Mon, 7 Jun 2010 06:15:05 +0200 (CEST)
Received: from User (unknown [201.41.47.16])
by cs1133.mojohost.com (iRedMail) with ESMTP id 2EB9F4D1CE1;
Sun, 6 Jun 2010 19:29:47 +0000 (UTC)
IP: 201.41.47.16 ---> 201-41-47-16.paemt702.e.brasiltelecom.net.br
mr.laaszloblock [at] ciudad.com.ar
gluckawardsbock [at] gmail.com
gluckawards2000 [at] gmail.com
Muguphon: +44 704 5788 887 ---> Open Telecom International Ltd., UK
Mugufax: +44 704 090 1883 ---> Digital Mail Limited, UK
Received: from unknown (EHLO shop.lmkzh.com) [220.229.232.84]
by mx0.gmx.net (mx106) with SMTP; 07 Jun 2010 02:16:35 +0200
Received: from User (unknown [92.99.143.10])
by shop.lmkzh.com (Postfix) with ESMTP
id C072FE6DAE8; Mon, 7 Jun 2010 06:04:35 +0800 (CST)
IP: 92.99.143.10 ---> ETISALATADSL-EMIRNET
stacykela [at] w.cn
staceykel1 [at] w.cn
Received: from mailserver.ntkhobar.com (mail.medco1.com [213.210.192.6])
by xxxxx (Postfix) with ESMTP id 0B08B78004A0
for xxxxx; Mon, 7 Jun 2010 03:35:37 +0200 (CEST)
Received: from User ([82.128.69.156]) by mailserver.ntkhobar.com with
Microsoft SMTPSVC(6.0.3790.4675);
Mon, 7 Jun 2010 04:35:00 +0300
IP: 82.128.69.156 ---> Multilinks Telecommunications Limited, Nigeria
fin_min_info [at] yahoo.co.jp
fin_min_infm [at] yahoo.co.jp
jkememu [at] presidency.com
Received: from fmmailgate06.web.de (fmmailgate06.web.de [217.72.192.247])
by xxxxx (Postfix) with ESMTP id BAD0B78A483C
for xxxxx; Mon, 7 Jun 2010 10:07:44 +0200 (CEST)
Received: from mwmweb029 ( [172.20.18.38])
by fmmailgate06.web.de (Postfix) with ESMTP id 7AF1F33026A;
Mon, 7 Jun 2010 10:06:56 +0200 (CEST)
Received: from [41.219.254.9] by mwmweb029 with HTTP; Mon
Jun 07 10:06:56 CEST 2010
IP: 41.219.254.9 ---> dial-pool93.lg.starcomms.net, Nigeria
britsshh876665 [at] web.de
britssht [at] web.de
claimsweeps [at] live.co.uk
Received: from mx.plouhinec.com (mx.plouhinec.com [212.234.71.121])
by xxxxx (Postfix) with ESMTP id 485BB78A47EB
for xxxxx; Tue, 8 Jun 2010 07:44:11 +0200 (CEST)
Received: from User ([41.191.85.33]) by mx.plouhinec.com with Microsoft
SMTPSVC(6.0.3790.4675);
Mon, 7 Jun 2010 23:49:11 +0200
IP: 41.191.85.33 ---> Ets ALINO Cyber, Benin
fedexsecurity.compeny [at] w.cn
princeadam [at] hosanna.net
Muguphon: +2299989274 ---> mobile number, Benin
Received: from icbu211.cnmail.cnh.yahoo.com
(icbu211.cnmail.cnh.yahoo.com [119.42.242.94])
by xxxxx (Postfix) with ESMTP id 8052278A4694
for xxxxx; Tue, 8 Jun 2010 03:48:17 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP id 88D8317B1DED;
Tue, 8 Jun 2010 09:31:22 +0800 (CST)
Received: from icbu211.cnmail.cnh.yahoo.com ([127.0.0.1])
by localhost (icbu211.cnmail.cnh.yahoo.com [127.0.0.1]) (amavisd-new,
port 10024)
with ESMTP id HAj00fdnC6ve; Tue, 8 Jun 2010 09:31:17 +0800 (CST)
Received: from User (unknown [82.128.83.181])
by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP id D7929280423E;
Tue, 8 Jun 2010 09:30:45 +0800 (CST)
IP: 82.128.83.181 ---> Multilinks Telecommunications Limited, Nigeria
lee.kee70 [at] i12.com
lee.kee [at] hkbea.com.sg
Received: from mail1.hcmute.edu.vn (EHLO dns1.hcmute.edu.vn)
[203.113.147.179]
by mx0.gmx.net (mx102) with SMTP; 08 Jun 2010 07:51:30 +0200
Received: from User ([116.206.153.84])
(authenticated bits=0)
by dns1.hcmute.edu.vn (8.14.2/8.14.2) with ESMTP id o5709Tes020684;
Mon, 7 Jun 2010 07:09:32 +0700
IP: 116.206.153.84 ---> iZZinet Sdn. Bhd., MY
lawyer_chong [at] blumail.org
lawyer_cho~ng [at] blumail.org
Muguphon: +60172718538 ---> Maxis Mobile (Binariang), MY
Received: from outgoing.hosting.tp.pl (EHLO mta7.hosting.tp.pl)
[193.110.120.20]
by mx0.gmx.net (mx070) with SMTP; 08 Jun 2010 11:52:26 +0200
Received: from User ([118.101.240.200]) by mta7.hosting.tp.pl (m7)
with ESMTPA id <0L3O004SDW2AW7B0 [at] mta7.hosting.tp.pl>; Tue,
08 Jun 2010 11:38:15 +0200 (CEST)
IP: 118.101.240.200 ---> TELEKOM MALAYSIA BERHAD
meesonkeith1966 [at] gmail.com
anna.diesner [at] neostrada.pl
Received: from host2host.com (host2host.com [216.117.164.247])
by xxxxx (Postfix) with ESMTP id F03D378A131B
for xxxx; Wed, 9 Jun 2010 03:02:37 +0200 (CEST)
Received: from User [82.128.19.203] by host2host.com with ESMTP
(SMTPD32-8.05) id AD025CD302DE; Tue, 08 Jun 2010 04:19:14 -0400
IP: 82.128.19.203 ---> Multilinks Telecommunications Limited, Nigeria
jamesjohn [at] gala.net
gecracktes SquirrelMail:
eceived: from c6.3d.7bae.static.theplanet.com (EHLO
p42-107.perfectvisualhost.com) [174.123.61.198]
by mx0.gmx.net (mx105) with SMTP; 09 Jun 2010 04:05:59 +0200
Received: from localhost.localdomain ([127.0.0.1] helo=www.fclimited.co.cc)
by p42-107.perfectvisualhost.com with esmtpa (Exim 4.69)
(envelope-from <lbritishfinancemonitoringunit21 [at] yahoo.com.hk>)
id 1OMA9m-0000Qg-R6; Tue, 08 Jun 2010 20:32:40 -0500
Received: from 82.128.23.41 ([82.128.23.41])
(SquirrelMail authenticated user fred [at] fclimited.co.cc)
by www.fclimited.co.cc with HTTP;
Tue, 8 Jun 2010 20:32:38 -0500
IP: 82.128.23.41 ---> Multilinks Telecommunications Limited, Nigeria
fred [at] fclimited.co.cc
lbritishfinancemonitoringunit21 [at] yahoo.com.hk
ianreed3 [at] tlen.pl
Muguphon: +447024035686 ---> Magrathea Telecommunications Limited, UK
Received: from mta6.brinkster.com (mta6.brinkster.com [65.182.109.75])
by xxxxx (Postfix) with ESMTP id 96CD178A48CE
for xxxxx; Wed, 9 Jun 2010 12:13:06 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mta6.brinkster.com (Postfix) with ESMTP id 587348E378;
Wed, 9 Jun 2010 06:03:16 -0400 (EDT)
X-Virus-Scanned: amavisd-new at mta6.brinkster.com
Received: from mta6.brinkster.com ([127.0.0.1])
by localhost (mta6.brinkster.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id CNkV94mtsN-I; Wed, 9 Jun 2010 06:03:16 -0400 (EDT)
Received: from mail1d.brinkster.com (mail1d.brinkster.com [10.0.6.222])
by mta6.brinkster.com (Postfix) with ESMTP id CC5D68C645;
Wed, 9 Jun 2010 06:03:15 -0400 (EDT)
st.crbnz [at] gmail.com
rush8 [at] anixtausauk.org
Received: from centrumvitaal.nl (dsl-087-195-240-069.solcon.nl
[87.195.240.69])
by xxxxx (Postfix) with ESMTP id 30D7778A4A1C
for xxxxx; Fri, 11 Jun 2010 12:39:51 +0200 (CEST)
Received: from User ([41.138.186.56]) by centrumvitaal.nl with Microsoft
SMTPSVC(6.0.3790.4675);
Thu, 10 Jun 2010 14:47:53 +0200
IP: 41.138.186.56 ---> Visafone Communications Limited, Nigeria
kingsley3.moughalu [at] gmail.com
drcsoldunng32 [at] gmail.com
kingsley2.moughalu [at] gmail.com
k1.moughalu [at] gmail.com
Received: from ev1s-209-62-91-242.theplanet.com (EHLO
thefortune500.theplanet.com) [209.62.91.242]
by mx0.gmx.net (mx115) with SMTP; 11 Jun 2010 13:08:14 +0200
Received: (qmail 20331 invoked from network); 7 Jun 2010 08:25:45 -0500
Received: from 173-203-64-72.static.cloud-ips.com (HELO User)
(173.203.64.72)
by ev1s-209-62-91-243.theplanet.com with SMTP; 7 Jun 2010 08:25:44 -0500
ola.matthews76 [at] gmail.com
- kjz
Das ist natürlich längst noch nicht alles:
ein besonders renitenter Mugu:
Received: from TCCS_EXCHANGE.rfc.com.vn (unknown [118.69.201.241])
by xxxxx (Postfix) with ESMTP id 33EE178A4820
for xxxxx; Mon, 7 Jun 2010 20:47:36 +0200 (CEST)
Received: from User ([41.211.230.72]) by TCCS_EXCHANGE.rfc.com.vn with
Microsoft SMTPSVC(6.0.3790.4675);
Tue, 8 Jun 2010 01:34:10 +0700
Received: from TCCS_EXCHANGE.rfc.com.vn (unknown [118.69.201.241])
by xxxxx (Postfix) with ESMTP id C790A6DC6F6
for xxxxx; Mon, 7 Jun 2010 14:37:22 -0400 (EDT)
Received: from User ([41.211.230.72]) by TCCS_EXCHANGE.rfc.com.vn with
Microsoft SMTPSVC(6.0.3790.4675);
Tue, 8 Jun 2010 01:36:36 +0700
Received: from TCCS_EXCHANGE.rfc.com.vn ([118.69.201.241])
by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
id 0LzMPN-1PPZL41f1N-014XZK for xxxxx; Mon, 07 Jun 2010
20:34:40 +0200
Received: from User ([41.211.230.72]) by TCCS_EXCHANGE.rfc.com.vn with
Microsoft SMTPSVC(6.0.3790.4675);
Tue, 8 Jun 2010 01:34:03 +0700
IP: 41.211.230.72 ---> 72.230.211.41.client72.directonpc.net, Nigeria
joshmary0000 [at] yahoo.co.jp
joshmary0022 [at] yahoo.co.jp
Muguphon: +234-8034113481 ---> MTN Nigeria Communications Ltd.
Muguphon: +234-17765057 ---> Multi-links, Nigeria
gecracktes SquirrelMail:
Received: from c6.3d.7bae.static.theplanet.com (EHLO
p42-107.perfectvisualhost.com) [174.123.61.198]
by mx0.gmx.net (mx024) with SMTP; 10 Jun 2010 09:39:57 +0200
Received: from localhost.localdomain ([127.0.0.1] helo=www.fclimited.co.cc)
by p42-107.perfectvisualhost.com with esmtpa (Exim 4.69)
(envelope-from <lbritishfinancemonitoringunit21 [at] yahoo.com.hk>)
id 1OMDSj-00024l-Ig; Wed, 09 Jun 2010 00:04:27 -0500
Received: from 82.128.22.12 ([82.128.22.12])
(SquirrelMail authenticated user fred [at] fclimited.co.cc)
by www.fclimited.co.cc with HTTP;
Wed, 9 Jun 2010 00:04:25 -0500
IP: 82.128.22.12 ---> ml82.128.22.12.multilinks.com, Nigeria
fred [at] fclimited.co.cc
lbritishfinancemonitoringunit21 [at] yahoo.com.hk
bfmuboard [at] tlen.pl
Muguphon: +447024035686 ---> Magrathea Telecommunications Limited, UK
Received: from marlborough-eng.com (ip-87-82-154-194.easynet.co.uk
[87.82.154.194])
by xxxxx (Postfix) with ESMTP id B165E7897712
for xxxxx; Thu, 10 Jun 2010 16:50:29 +0200 (CEST)
Received: from User ([87.195.197.238]) by marlborough-eng.com with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 10 Jun 2010 12:30:30 +0100
IP: 87.195.197.238 ---> dsl-087-195-197-238.solcon.nl
k1.moughalu [at] i12.com
drcsoldunng17 [at] gmail.com
kingsley2.moughalu [at] gmail.com
Auch Song Lile ist mir nicht ganz unbekannt, auch wieder SquirrelMail gecrackt:
Received: from mx1.melt.ru (mx1.melt.ru [89.184.0.71])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id AD70378A49ED
for xxxxx; Thu, 10 Jun 2010 15:48:51 +0200 (CEST)
X-Scanner: junk mail filter at mi.ru
Received: from pop3.melt.ru (localhost [127.0.0.1])
by mx1.melt.ru (Postfix) with ESMTPA id 2543628A910;
Thu, 10 Jun 2010 17:35:28 +0400 (MSD)
Received: from 41.220.68.2
by webmail.mi.ru with HTTP;
Thu, 10 Jun 2010 17:35:28 +0400
Received: from mx1.melt.ru (mx1.melt.ru [89.184.0.71])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 5AFE878A49F0
for xxxxx; Thu, 10 Jun 2010 15:48:00 +0200 (CEST)
X-Scanner: junk mail filter at mi.ru
Received: from pop3.melt.ru (localhost [127.0.0.1])
by mx1.melt.ru (Postfix) with ESMTPA id 0111528A900;
Thu, 10 Jun 2010 17:35:59 +0400 (MSD)
Received: from 41.220.68.5
by webmail.mi.ru with HTTP;
Thu, 10 Jun 2010 17:35:59 +0400
IP: 41.220.68.2 --> MTN Nigeria Communications Limited
mrsong-lile [at] live.com
nick2233 [at] w.cn
Muguphon: +447024094986 ---> Magrathea Telecommunications Limited, UK
Mugufax: +448712515162 ---> Call Sciences Limited, UK/Yac
Received: from icbu211.cnmail.cnh.yahoo.com (EHLO
icbu211.cnmail.cnh.yahoo.com) [119.42.242.94]
by mx0.gmx.net (mx045) with SMTP; 10 Jun 2010 22:07:42 +0200
Received: from localhost (localhost [127.0.0.1])
by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP id DD2AA27FD1A8;
Fri, 11 Jun 2010 02:58:15 +0800 (CST)
Received: from icbu211.cnmail.cnh.yahoo.com ([127.0.0.1])
by localhost (icbu211.cnmail.cnh.yahoo.com [127.0.0.1]) (amavisd-new,
port 10024)
with ESMTP id qad9Nl4tf5Xg; Fri, 11 Jun 2010 02:58:11 +0800 (CST)
Received: from User (unknown [41.138.170.251])
by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP id 6CD7717B18AF;
Fri, 11 Jun 2010 02:56:53 +0800 (CST)
IP: 41.138.170.251 ---> Visafone Communications Limited, Nigeria
klausmeyer [at] admin.in.th
klausmeyer1952 [at] gmail.com
Man beachte: verschickt aus Nigeria, Muguphon in Benin.
Received: from hwcs-exchange.hwcs.net (mail.hwcs.net [216.195.100.7])
by xxxxx (Postfix) with ESMTP id A030E78A49A2
for xxxxx; Fri, 11 Jun 2010 17:36:05 +0200 (CEST)
Received: from User ([41.217.65.14]) by hwcs-exchange.hwcs.net with
Microsoft SMTPSVC(6.0.3790.3959);
Fri, 11 Jun 2010 09:53:46 -0500
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
wum_file19572009 [at] mail.ru
uncu19572009 [at] gala.net
policeinvestigation [at] gala.net
Muguphon: +229 96723525 ---> mobile number, Benin
Man beachte: Freeserve.
Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.190])
by xxxxx (Postfix) with ESMTP id E88DE78A490F
for xxxxx; Fri, 11 Jun 2010 20:49:18 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP id 6DB2570033CA;
Fri, 11 Jun 2010 20:49:18 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP id 629B87000AE8;
Fri, 11 Jun 2010 20:49:18 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP id 54D9770033B5;
Fri, 11 Jun 2010 20:49:18 +0200 (CEST)
Received: from User (unknown [81.12.29.206])
by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP id 070F37000AE8;
Fri, 11 Jun 2010 20:49:07 +0200 (CEST)
IP: 81.12.29.206 ---> Chapar Resaneh, IR
mays64 [at] freeserve.co.uk
mrharrywilliams105 [at] yahoo.cn
Muguphon: +234 7034592056 ---> MTN Nigeria Communications Ltd.
Received: from mail.tc.orz (unknown [122.147.84.157])
by xxxxx (Postfix) with ESMTPS id 2E4C66DE522
for xxxxx; Fri, 11 Jun 2010 23:44:17 -0400 (EDT)
Received: from User ([84.77.141.198])
(authenticated bits=0)
by mail.tc.orz (8.14.2/8.14.2) with ESMTP id o064ic6c000350;
Wed, 6 Jan 2010 12:44:47 +0800 (CST)
(envelope-from gramwhyte [at] aim.com)
IP: 84.77.141.198 ---> Ya/Orange, Espana
gramwhyte [at] aim.com
oberwes [at] aol.com
Received: from eneckorea.com (unknown [222.122.140.46])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 3B623789AE58
for xxxxx; Sun, 13 Jun 2010 02:31:04 +0200 (CEST)
Received: from User ([82.128.84.216])
(authenticated bits=0)
by eneckorea.com (8.13.8/8.13.8) with ESMTP id o5CA7vPA028481;
Sat, 12 Jun 2010 19:08:12 +0900
IP: 82.128.84.216 ---> Multilinks Telecommunications Limited, Nigeria
west-unionbj [at] ww.tc
west-union-bj [at] ufo.tc
Mugufax: +229 93 74 41 58 ---> BBCom, Benin
Muguphon: +229 97 01 60 04 ---> Benincell
Also wieder: verschickt aus Nigeria, Muguphon in Benin. Nun ja, Benin ist ein direktes Nachbarland zu Nigeria. Allerdings vermute ich auch: die nigerianische Mugu-Mafia ist nicht nur multi-national, sondern ggf. auch multi-kriminell. Da dürfte nicht nur der Vorschussbetrug zum 'Geschäftsfeld' zählen, ggf. dürfte man auch im Schleuser-Biziness tätig sein. Evtl. um die 'Mugu-Boyz' unter dem 'Deckmantel Asyl' auch in andere Staaten einzuschleusen?
Received: from smtp3.aster.pl (smtp3.aster.pl [212.76.33.56])
by xxxxx (Postfix) with ESMTP id 1B46478983A1
for xxxxx; Sun, 13 Jun 2010 07:50:38 +0200 (CEST)
Received: from User (ml82.128.6.186.multilinks.com [82.128.6.186])
by smtp3.aster.pl (sendmail) with ESMTPA id 2F571F0223;
Sat, 12 Jun 2010 17:42:01 +0200 (CEST)
karlhansberg08023 [at] yahoo.co.jp
sulas [at] aster.pl
Received: from smtp3.aster.pl (smtp3.aster.pl [212.76.33.56])
by xxxxx (Postfix) with ESMTP id 8332778A48AC
for xxxxx; Sun, 13 Jun 2010 06:35:41 +0200 (CEST)
Received: from User (unknown [82.128.104.72])
by smtp3.aster.pl (sendmail) with ESMTPA id E3881FA673;
Sun, 13 Jun 2010 06:35:06 +0200 (CEST)
IP: 82.128.104.72 ---> Multilinks Telecommunications Limited, Nigeria
sulas [at] aster.pl
inforbae [at] gmail.com
chowyk [at] myemail.com
Received: from nova.hk (059148241045.ctinets.com [59.148.241.45])
by xxxxx (Postfix) with ESMTP id 149DC78A131B
for xxxxx; Sun, 13 Jun 2010 19:55:38 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by nova.hk (Postfix) with ESMTP id 11496262EC51;
Sat, 12 Jun 2010 19:10:46 +0800 (HKT)
X-Virus-Scanned: amavisd-new at nova.hk
Received: from nova.hk ([127.0.0.1])
by localhost (mail.nova.hk [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id EtGF6BEcuRik; Sat, 12 Jun 2010 19:10:45 +0800 (HKT)
Received: from User (unknown [41.191.86.105])
by nova.hk (Postfix) with ESMTPA id CFB89262AD16;
Sat, 12 Jun 2010 18:36:22 +0800 (HKT)
IP: 41.191.86.105 ---> NETLAND, Benin
western.unioncustomercare [at] hotmail.com
westernunionpayoutfile [at] gmail.com
Muguphon: +229-96 75 19 02 ---> mobile number, Benin
Received: from mail.ins.gov.co (mail.ins.gov.co [190.27.195.163])
by xxxxx (Postfix) with ESMTP id DC66778A131B
for xxxxx; Sun, 13 Jun 2010 21:14:03 +0200 (CEST)
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.ins.gov.co (Postfix) with ESMTP id 7B5173F7B686;
Sun, 13 Jun 2010 03:57:24 -0500 (COT)
X-Virus-Scanned: amavisd-new at ins.gov.co
Received: from mail.ins.gov.co ([127.0.0.1])
by localhost (mail.ins.gov.co [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 9bZ3xz08b0k5; Sun, 13 Jun 2010 03:57:24 -0500 (COT)
Received: from User (dhcp-077-250-168-242.chello.nl [77.250.168.242])
by mail.ins.gov.co (Postfix) with ESMTPA id A3C2C3E9BF70;
Sun, 13 Jun 2010 03:56:47 -0500 (COT)
kane921 [at] yahoo.cn
apply4claims0010 [at] yahoo.com.hk
Muguphon: +31-647-451-670 ---> Telfort B.V., NL/Tiscali
- kjz
Die Nigerianer sind hauptsächlich in diesen drei Bereichen tätig: Drogenhandel (mit Stoff u.a. aus Südamerika und Afghanistan), Menschenschmuggel (illegale Einwanderung und Prostitution) und natürlich Vorschußbetrug aller Art. Das läuft alles Hand in Hand.
Auch diese Mugus wollen sich natürlich einen Rang in der Besten(?)-Liste erspammen:
Man beachte: Freeserve
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id B28F078A131B
for xxxxx; Mon, 14 Jun 2010 07:00:19 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP id 502611C035BA
for xxxxx; Mon, 14 Jun 2010 07:00:19 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP id 44F621C03853
for xxxxx; Mon, 14 Jun 2010 07:00:19 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP id 3755C1C035BA
for xxxxx; Mon, 14 Jun 2010 07:00:19 +0200 (CEST)
Received: from User (unknown [69.85.192.154])
by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP id 991361C0387B
for xxxxx; Mon, 14 Jun 2010 07:00:18 +0200 (CEST)
IP: 69.85.192.154 ---> 69-85-192-154.static.southernlightfiber.com
kettbrodie [at] freeserve.co.uk
brayngate [at] yahoo.co.jp
danitodankaro01 [at] yahoo.co.jp
Muguphon: +44-762-410-3670 ---> Manx Telecom
Versand aus Nigeria, Muguphon in Benin:
Received: from hwcs-exchange.hwcs.net (mail.hwcs.net [216.195.100.7])
by xxxxx (Postfix) with ESMTP id A52FB78A47DE
for xxxxx; Mon, 14 Jun 2010 00:06:32 +0200 (CEST)
Received: from User ([41.217.65.13]) by hwcs-exchange.hwcs.net with
Microsoft SMTPSVC(6.0.3790.3959);
Sun, 13 Jun 2010 16:36:45 -0500
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
wum_file19572009 [at] mail.ru
uncu19572009 [at] gala.net
policeinvestigation [at] gala.net
Muguphon: +229 96723525 ---> mobile number, Benin
Freeserve mal wieder....
Received: from smtp6.freeserve.com (EHLO smtp6.freeserve.com)
[193.252.22.191]
by mx0.gmx.net (mx112) with SMTP; 15 Jun 2010 01:50:01 +0200
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP id EC4637014806;
Tue, 15 Jun 2010 01:31:18 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP id DE55A70147E5;
Tue, 15 Jun 2010 01:31:18 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP id CF54E701480F;
Tue, 15 Jun 2010 01:31:18 +0200 (CEST)
Received: from User (eth1268.nsw.adsl.internode.on.net [150.101.207.243])
by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP id 25D0C70147E5;
Tue, 15 Jun 2010 01:31:09 +0200 (CEST)
ahargreaves67 [at] fsnet.co.uk
suleiman_ndanusa202 [at] hotmail.com
suleiman_ndanusa203 [at] live.com
Muguphon: +234-703-078-0390 ---> MTN Nigeria Communications Ltd.
Muguphon: +234-702-588-2164 ---> Visafone Communications Ltd., Nigeria
sagte ich schon Freeserve.....
Received: from smtp5.freeserve.com (smtp5.freeserve.com [193.252.22.152])
by xxxxx (Postfix) with ESMTP id 8DDED78A46E5
for xxxxx; Tue, 15 Jun 2010 04:27:48 +0200 (CEST)
Received: from smtp5.freeserve.com (localhost [127.0.0.1])
by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP id 500C91C052A4;
Tue, 15 Jun 2010 04:26:51 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP id 44E0B1C03A80;
Tue, 15 Jun 2010 04:26:51 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP id 367B71C08851;
Tue, 15 Jun 2010 04:26:51 +0200 (CEST)
Received: from User (unknown [69.38.184.172])
by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP id 92D321C06E57;
Tue, 15 Jun 2010 04:26:38 +0200 (CEST)
IP: 69.38.184.172 ---> Columbia College
dbruce [at] fsnet.co.uk
davidking [at] Safe-mail.net
beverlyfowler [at] secretarias.com
Muguphon: +234-812-074-9273 ---> Celtel Nigeria Limited/Zain
Freeserve.....
Received: from smtp5.freeserve.com (smtp5.freeserve.com [193.252.22.128])
by xxxxx (Postfix) with ESMTP id E434578A5105
for xxxxx; Tue, 15 Jun 2010 14:22:50 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3417.me.freeserve.com (SMTP Server) with ESMTP id 90E631C05099;
Tue, 15 Jun 2010 14:22:50 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3417.me.freeserve.com (SMTP Server) with ESMTP id 81ED11C05265;
Tue, 15 Jun 2010 14:22:50 +0200 (CEST)
Received: from User (SIPB-TOR.MIT.EDU [18.187.1.68])
by mwinf3417.me.freeserve.com (SMTP Server) with ESMTP id E49571C05099;
Tue, 15 Jun 2010 14:21:11 +0200 (CEST)
IP: 18.187.1.68 ---> SIPB-TOR.MIT.EDU (Tor-Anonymisierungsproxy beim MIT)
vbagley [at] wanadoo.co.uk
rm234 [at] live.com
mrpaul_smith [at] mail.mn
Muguphon: +234-7030867355 ---> MTN Nigeria Communications Ltd.
ääähhhhmmm, Freeserve.....
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id 3CC9D78A41A0
for xxxxx; Wed, 16 Jun 2010 06:02:52 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id C18287007454;
Tue, 15 Jun 2010 23:07:10 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id 4501670055A2;
Tue, 15 Jun 2010 23:07:06 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id 70A687005D24;
Tue, 15 Jun 2010 23:07:05 +0200 (CEST)
Received: from User (unknown [41.217.66.5])
by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP id 612E17003C90;
Tue, 15 Jun 2010 23:06:11 +0200 (CEST)
IP: 41.217.66.5 ---> ZOOM Mobile Nigeria Ltd.
ncustance [at] fsnet.co.uk
johnsimmons300300 [at] yahoo.cn
bhc_1008 [at] yahoo.com.hk
Muguphon: +234 705 577 0795 ---> Globacom Ltd., Nigeria
Received: from fmmailgate06.web.de (fmmailgate06.web.de [217.72.192.247])
by xxxxx (Postfix) with ESMTP id 99D8B78983A1
for xxxxx; Wed, 16 Jun 2010 02:53:00 +0200 (CEST)
Received: from mwmweb031 ( [172.20.18.40])
by fmmailgate06.web.de (Postfix) with ESMTP id E34B036EBFB;
Wed, 16 Jun 2010 02:52:59 +0200 (CEST)
Received: from [77.209.40.121] by mwmweb031 with HTTP; Wed
Jun 16 02:52:59 CEST 2010
IP: 77.209.40.121 ---> VODAFONE_SPAIN_NETWORK
josephmkpile_76254 [at] web.de
aricjacobs_89368 [at] web.de
claimoffice313 [at] aim.com
Muguphon: +34693104883 ---> France Telecom Espana, S.a.
Received: from Elsewedy-FE2.ELSEWEDY.COM (mail.elsewedy.com [62.68.253.31])
by xxxxx (Postfix) with ESMTP id 98BC778A4815
for xxxxx; Wed, 16 Jun 2010 04:49:29 +0200 (CEST)
Received: from User ([69.85.192.154]) by Elsewedy-FE2.ELSEWEDY.COM with
Microsoft SMTPSVC(6.0.3790.4675);
Wed, 16 Jun 2010 05:45:06 +0300
IP: 69.85.192.154 ---> 69-85-192-154.static.southernlightfiber.com
jameshowarddesk [at] live.com
Muguphon: +234-802-408-0023 ---> Celtel Nigeria Limited/Zain
- kjz
Bei dem Gedrängel müssen sich noch hinten anstellen:
Received: from mail.millercohen.com (mail.millercohen.com [12.199.187.35])
by xxxxx (Postfix) with SMTP id 5A90E78A49A5
for xxxxx; Mon, 14 Jun 2010 20:44:35 +0200 (CEST)
Received: from User ([84.59.26.11]) by mail.millercohen.com with
Microsoft SMTPSVC(6.0.3790.4675);
Mon, 14 Jun 2010 14:23:28 -0400
IP: 84.59.26.11 ---> dslb-084-059-026-011.pools.arcor-ip.net
mallamsanusilamido [at] administrativos.com
Muguphon: +234-818-269-6103 ---> Nigeria
Received: from relay.ufssp.kirov.ru (EHLO ufssp.kirov.ru) [85.93.42.195]
by mx0.gmx.net (mx009) with SMTP; 16 Jun 2010 17:31:58 +0200
Received: from User by ufssp.kirov.ru (MDaemon PRO v10.0.2)
with ESMTP id md50000546983.msg;
Wed, 16 Jun 2010 02:30:50 +0400
X-Spam-Processed: ufssp.kirov.ru, Wed, 16 Jun 2010 02:30:50 +0400
(not processed: message from trusted or authenticated source)
X-MDPtrLookup-Result: hardfail ip=82.128.82.67 (no PTR records found)
(ufssp.kirov.ru)
X-MDRemoteIP: 82.128.82.67 ---> Multilinks Telecommunications Limited, Nigeria
X-Authenticated-Sender: admin [at] ufssp.kirov.ru
andywills13 [at] gmail.com
Hatte ich eigentlich schon Freeserve erwähnt......
Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
by xxxxx (Postfix) with ESMTP id 7E14F78A48D9
for xxxxx; Wed, 16 Jun 2010 21:20:49 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP id 6D6F17002142;
Wed, 16 Jun 2010 20:44:52 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP id 620F57002368;
Wed, 16 Jun 2010 20:44:52 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP id 54DB07002142;
Wed, 16 Jun 2010 20:44:52 +0200 (CEST)
Received: from User (iburst-41-213-86-108.iburst.co.za [41.213.86.108])
by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP id CA6877004577;
Wed, 16 Jun 2010 20:43:09 +0200 (CEST)
IP: 41.213.86.108 ---> iburst-41-213-86-108.iburst.co.za
dobbs155ep [at] fsnet.co.uk
robertmfbi [at] usa.com
eterwalter [at] live.co.za
mlspecialagent [at] aol.com
Rant: Anscheinend hat da ein Mugu-Boss bei der Russenmafia gecrackte Freeserve-Accounts gleich im Tausenderpack geordert. Oder dort ist das Wort Sicherheit erst gar nicht existent. Freeserve gehört allerdings zu Orange. Oder sollte ich besser sagen: Wanadoo (in Fachkreisen nur noch als Spamadoo bekannt). Oder direkt France Telecom? Leider sehe ich mit Sorge (man betrachte auch den Schwarzhut OVH), wie die 'Grande Nation' immer mehr zum Spammerparadies verkommt. Fachkundige Abusedesks sind nicht existent/erwünscht (man schaue nur mal auf die Listings von RFCI (http://www.rfc-ignorant.org/tools/lookup.php?domain=francetelecom.com)) oder wird dort nur auf Larts in astreinem Französisch geantwortet? Und überall wo Orange draufsteht (sei es nun .fr, .co.uk oder .es) steht SPAM dahinter. Unser magenta (ehemals) Staatsunternehmen könnte sich so etwas wohl nicht erlauben, aber unter der Farbe Orange scheint alles zu gehen, Hauptsache der Profit stimmt und die Globalisierung läuft.....
- kjz
großes Gedrängel für de Mugu-Galerie:
hatte ich eigentlich schon Freeserve erwähnt....
Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.190])
by xxxxx (Postfix) with ESMTP id 3E1FC78A41A0
for xxxxx; Thu, 17 Jun 2010 17:55:31 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3631.me.freeserve.com (SMTP Server) with ESMTP id 7B5A27003681;
Thu, 17 Jun 2010 17:27:51 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3631.me.freeserve.com (SMTP Server) with ESMTP id 6DC997013D7D;
Thu, 17 Jun 2010 17:27:51 +0200 (CEST)
Received: from User (unknown [41.206.15.3])
by mwinf3631.me.freeserve.com (SMTP Server) with ESMTP id 74BE87003681;
Thu, 17 Jun 2010 17:27:38 +0200 (CEST)
IP: 41.206.15.3 ---> MTN Nigeria Communications
dobbs155ep [at] fsnet.co.uk
lesliefletcher [at] i12.com
les.fletcher1706 [at] gmail.com
Received: from c2beaomr07.btconnect.com (c2beaomr07.btconnect.com
[213.123.26.185])
by xxxxx (Postfix) with ESMTP id 351CD78A4808
for xxxxx; Thu, 17 Jun 2010 21:10:01 +0200 (CEST)
Received: from mail.jc-architects.co.uk
(host81-138-14-65.in-addr.btopenworld.com [81.138.14.65])
by c2beaomr07.btconnect.com
with ESMTP id EZC03659;
Thu, 17 Jun 2010 20:06:38 +0100 (BST)
X-Mirapoint-IP-Reputation: reputation=Fair-1,
source=Queried,
refid=0001.0A0B0302.4C1A68C1.00DF,
actions=tag
Received: from [41.191.86.105] ([41.191.86.105])
by mail.jc-architects.co.uk (Kerio MailServer 6.6.2);
Thu, 17 Jun 2010 20:02:35 +0100
IP: 41.191.86.105 ---> NETLAND, Benin
admin [at] jc-architects.co.uk2
offiicefiles [at] megamail.pt
Received: from mail.burdenis.net (EHLO mail.burdenis.net) [87.120.162.3]
by mx0.gmx.net (mx102) with SMTP; 18 Jun 2010 22:20:36 +0200
Received: from User ([86.125.18.20])
(authenticated user merlin [at] burdenis.net)
by mail.burdenis.net;
Fri, 18 Jun 2010 10:22:02 +0300
IP: 86.125.18.20 ---> static-86-125-18-20.rdsnet.ro
merlin [at] burdenis.net
gabrielwilliam [at] lawyer.com
gabrielwilliam_2007 [at] post.ro
gabrielwilliam_2005 [at] post.ro
Received: from mail21.svc.cra.dublin.eircom.net
(mail21.svc.cra.dublin.eircom.net [159.134.118.222])
by xxxxx (Postfix) with SMTP id 48D2478A48FF
for xxxxx; Sat, 19 Jun 2010 07:36:41 +0200 (CEST)
Received: (qmail 77026 messnum 6668319 invoked from
network[86.43.60.62/webmailbox102.eircom.net]); 19 Jun 2010 05:36:40 -0000
Received: from webmailbox102.eircom.net (86.43.60.62)
by mail21.svc.cra.dublin.eircom.net (qp 77026) with SMTP; 19 Jun 2010
05:36:40 -0000
macolmspears00 [at] aol.com
mikenora [at] eircom.net
Muguphon: +60146264807 ---> DiGi Telecom, Malaysia
Wie war das nochmal mit Freeserve....
Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.191])
by xxxxx (Postfix) with ESMTP id C881178A48DE
for xxxxx; Sat, 19 Jun 2010 17:30:05 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP id A842670044C8;
Sat, 19 Jun 2010 17:24:47 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP id 99C6B700E509;
Sat, 19 Jun 2010 17:24:47 +0200 (CEST)
Received: from User (85.64.20.62.dynamic.barak-online.net [85.64.20.62])
by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP id B21AA700E007;
Sat, 19 Jun 2010 17:24:33 +0200 (CEST)
pdavis87 [at] wanadoo.co.uk
centralbanknigggg [at] yahoo.es
centralbankniggg [at] yahoo.fr
Received: from server.digitalplate.com.br (EHLO
server.digitalplate.com.br) [201.35.64.130]
by mx0.gmx.net (mx027) with SMTP; 19 Jun 2010 20:25:15 +0200
Received: from User (unknown [41.211.229.243])
(Authenticated sender: xxx)
by server.digitalplate.com.br (Postfix) with ESMTP id 6BFDE14D6271;
Fri, 18 Jun 2010 10:45:54 -0300 (BRT)
IP: 41.211.229.243 ---> Direct-on-PC Limited, Nigeria
atmcard.bankofnigeria [at] gmail.com
Muguphon: +234-7026901559 ---> Visafone Communications Ltd., Nigria
gecracktes SquirrelMail:
Received: from relay4.hrnoc.net (relay4.hrnoc.net [216.120.227.142])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 4294E78A4A01
for xxxxx; Sat, 19 Jun 2010 21:47:36 +0200 (CEST)
Received: from reseller1.hrwebservices.net ([66.147.237.116])
by relay4.hrnoc.net with esmtp (Exim 4.63)
(envelope-from <captlewis [at] yahoo.com>)
id 1OQ1JZ-0005oe-KD; Sat, 19 Jun 2010 12:54:41 -0400
Received: from localhost ([127.0.0.1] helo=starcatchersproductions.com)
by reseller1.hrwebservices.net with esmtpa (Exim 4.69)
(envelope-from <captlewis [at] yahoo.com>)
id 1OQ1Gy-00015b-4h; Sat, 19 Jun 2010 12:52:00 -0400
Received: from 208.110.80.250 ([208.110.80.250])
(SquirrelMail authenticated user
thistimeismoney [at] starcatchersproductions.com)
by starcatchersproductions.com with HTTP;
Sat, 19 Jun 2010 12:52:00 -0400
IP: 208.110.80.250 ---> WHOLESALEINTERNET
thistimeismoney [at] starcatchersproductions.com
captlewis [at] yahoo.com
captandrew_lewis [at] yahoo.com.hk
Received: from mail.romix.com.pl (mail.romix.com.pl [217.98.64.4])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by xxxxx (Postfix) with ESMTP id 499CD78A4A02
for xxxxx; Sun, 20 Jun 2010 18:16:18 +0200 (CEST)
Received: from User ([41.215.160.133])
(authenticated bits=0)
by mail.romix.com.pl (8.13.5/8.13.5) with ESMTP id o5IHsUKa000339;
Fri, 18 Jun 2010 19:54:39 +0200
IP: 41.215.160.133 ---> Millicom Ghana Limited/Tigo
tdery [at] naseej.com
yaayankey [at] fastmail.fm
Received: from mxmail.armstrong.net (EHLO mxmail.armstrong.net)
[216.177.59.170]
by mx0.gmx.net (mx019) with SMTP; 20 Jun 2010 21:04:51 +0200
Received: from User ([212.225.181.101])
by mxmail.armstrong.net (Armstrong Mail Server ver 9.2.1) with
ASMTP id CYW13835;
Sun, 20 Jun 2010 14:02:35 -0400
IP: 212.225.181.101 ---> 101.red.181.225.212.user.ptvtelecom.com
realexchanges [at] aim.com
Muguphon: +34 645 071 275 ---> France Telecom Espana, S.a.
- kjz
In die Schlange möchten sich noch gerne einreihen:
Received: from mail.choiceadvisory.com (EHLO mail.choiceadvisory.com)
[63.134.198.198]
by mx0.gmx.net (mx083) with SMTP; 17 Jun 2010 01:58:01 +0200
Received: from UnknownHost [41.215.160.134] by mail.choiceadvisory.com
with SMTP;
Wed, 16 Jun 2010 12:57:10 -0700
IP: 41.215.160.134 ---> Millicom Ghana Limited
johnmuhama1 [at] gmail.com
larry [at] choiceadvisory.com
Received: from mail1.nju.edu.cn (oldmail2.nju.edu.cn [202.119.32.136])
by xxxxx (Postfix) with ESMTP id 7DF8978A481D
for xxxxx; Thu, 17 Jun 2010 00:31:23 +0200 (CEST)
Received: from User ([82.128.68.44])
(authenticated bits=0)
by mail1.nju.edu.cn (8.13.8/8.13.8) with ESMTP id o5GHfAVE005327;
Thu, 17 Jun 2010 01:41:14 +0800
IP: 82.128.68.44 ---> Multilinks Telecommunications Limited, Nigeria
pastorjuanobi [at] yahoo.fr
pastormrsjuan60 [at] hotmail.com
pastormrs1 [at] hotmail.com
Freeserve hatte ich schon erwähnt....
Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.190])
by xxxxx (Postfix) with ESMTP id E11427897432
for xxxxx; Thu, 17 Jun 2010 04:56:15 +0200 (CEST)
Received: from smtp6.freeserve.com (localhost [127.0.0.1])
by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP id E715870036F6;
Thu, 17 Jun 2010 04:55:30 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP id DC31E70011F6;
Thu, 17 Jun 2010 04:55:30 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP id CEC1970036F5;
Thu, 17 Jun 2010 04:55:30 +0200 (CEST)
Received: from User (unknown [116.55.58.3])
by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP id B0E7370011F6;
Thu, 17 Jun 2010 04:55:09 +0200 (CEST)
IP: 116.55.58.3 ---> 3.58.55.116.broad.km.yn.dynamic.163data.com.cn
wardwinterbourn [at] freeserve.co.uk
susanamson.2 [at] sify.com
Received: from saffronwalden.gov.uk (smtp.saffronwalden.gov.uk
[87.194.171.247])
by xxxxx (Postfix) with ESMTP id 3BE9C78A49C1
for xxxxx; Thu, 17 Jun 2010 14:10:11 +0200 (CEST)
Received: from User ([87.102.95.154]) by saffronwalden.gov.uk with
Microsoft SMTPSVC(6.0.3790.4675);
Tue, 15 Jun 2010 17:44:25 +0100
IP: 87.102.95.154 ---> static-87-102-95-154.karoo.KCOM.COM
k1.moughalu [at] gmail.com
mm1.mough2 [at] gmail.com
kingsley2.moughalu [at] gmail.com
Received: from smtp28.orange.fr (smtp28.orange.fr [80.12.242.100])
by xxxxx (Postfix) with ESMTP id 83F4478A481D
for xxxxx; Thu, 17 Jun 2010 15:03:10 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2807.orange.fr (SMTP Server) with ESMTP id E65137002D6A;
Thu, 17 Jun 2010 15:03:09 +0200 (CEST)
Received: from me-wanadoo.net (localhost [127.0.0.1])
by mwinf2807.orange.fr (SMTP Server) with ESMTP id D0DCB7002D65;
Thu, 17 Jun 2010 15:03:09 +0200 (CEST)
Received: from User (AAmiens-151-1-33-13.w83-192.abo.wanadoo.fr
[83.192.180.13])
by mwinf2807.orange.fr (SMTP Server) with ESMTP id 650937002FEC;
Thu, 17 Jun 2010 15:01:53 +0200 (CEST)
cusset.christophe [at] orange.fr
gerald_durrell [at] yahoo.cn
Received: from wp150.webpack.hosteurope.de (EHLO
wp150.webpack.hosteurope.de) [80.237.132.157]
by mx0.gmx.net (mx118) with SMTP; 18 Jun 2010 00:58:31 +0200
Received: from [84.204.207.100] (helo=User); authenticated
by wp150.webpack.hosteurope.de running ExIM with esmtpa
id 1OPO2G-0002dM-6O; Fri, 18 Jun 2010 00:58:15 +0200
Received: from wp150.webpack.hosteurope.de (EHLO
wp150.webpack.hosteurope.de) [80.237.132.157]
by mx0.gmx.net (mx089) with SMTP; 18 Jun 2010 05:25:20 +0200
Received: from [84.204.207.100] (helo=User); authenticated
by wp150.webpack.hosteurope.de running ExIM with esmtpa
id 1OPSCb-0003km-8U; Fri, 18 Jun 2010 05:25:09 +0200
IP: 84.204.207.100 ---> Peterstar Telecommunications, RU
aspargo.usarmy [at] globomail.com
rogerbaltes [at] gmx.de
Received: from wjhqmw1.wicaksana.co.id (unknown [202.47.75.152])
by xxxxx (Postfix) with ESMTP id EF9EF78A48E1
for xxxxx; Mon, 21 Jun 2010 01:06:54 +0200 (CEST)
Received: from User ([68.174.38.211]) by wjhqmw1.wicaksana.co.id with
Microsoft SMTPSVC(6.0.3790.3959);
Mon, 21 Jun 2010 05:49:14 +0700
IP: 68.174.38.211 ---> cpe-68-174-38-211.nj.res.rr.com
jameo29 [at] live.com
accngatgtegn [at] gmail.co