Mugu Dubletten

[kjz1]

Wo haste Dich denn da beschwert?

Nun, die Mail ging an sales &at& open-telecom.co.uk und abuse &at& open-telecom.co.uk. Geantwortet hat dann ein Peter.... Das wird anscheinend tatsächlich gelesen.

- kjz

[kjz1]

Dafür gibt's jetzt einen Mugu, der im Usenet erntet:

header:

01: Received: from mail.spammotel.com (EHLO spammotel.com) [209.190.47.10] by
02: 	mx0.gmx.net (mx053) with SMTP; 26 Feb 2009 xx:xx:xx +0100
03: Received: by spammotel.com (Postfix, from userID: [ID filtered]
04: Received: from easternsolutionsnet.com (unknown [66.45.64.84]) by spammotel.com
05: 	(Postfix) with ESMTP ID: [ID filtered]
06: Received: from User (213.37.112.102.dyn.user.ono.com [213.37.112.102])
07: 	(authenticated) by easternsolutionsnet.com (8.11.6/8.11.6) with ESMTP ID: [ID filtered]

Abgeworfen im span. Mugu-Paradies (213.37.112.102.dyn.user.ono.com).

Post geht an:

rmike000@yahoo.com

kennypaulsam@gmail.com

- kjz

[Eniac]

Nun, die Mail ging an sales &at& open-telecom.co.uk und abuse &at& open-telecom.co.uk.

Danke, das werde ich gleich mal an

OFFICER:MR ANDREW WOLLEY.
POSITIONIRECTOR,INTL,REMMITTANCE CITIBANK LONDON.
Direct Telephone Number: +44-703-596-2760, +44-703-595-8648.

ausprobieren.


Eniac

[kjz1]

Und wieder mal:

^whois:Received: from firewall.localdomain (correo.gtcolombia.com [201.245.37.234]) by xxxxx (Postfix) with ESMTP id 262D6789003F for xxxxx; Fri, 27 Feb 2009 17:51:32 +0100 (CET)
Received: from gtcolombia.com (firewall.gtcolombia.com [127.0.0.1]) by firewall.localdomain (Postfix) with ESMTP id 7E18211541; Fri, 27 Feb 2009 11:21:17 -0500 (COT)

Man beachte:

X-OriginatingIP: 62.56.174.234 (infobmanga) ---> IL-IPPLANET/Gilat

Mal wieder die merkbefreiten Mugu-Freunde aus IL.

Post hätte gerne:

uba.service111@gmail.com

uba.serviceline@live.com

- kjz

[kjz1]

Weiter geht's:

header:

01: Received: from batelco.com.bh (cgpfe2.batelco.com.bh [193.188.97.110]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from [196.3.183.73] (account emco [at] batelco.com.bh HELO User) by
04: 	cgpfe2.batelco.com.bh (CommuniGate Pro SMTP 5.2.9) with ESMTPA ID: [ID filtered]

IP: 196.3.183.73 ---> Suburban telecom, Nigeria

Post geht an:

plashniku.fevzi172@gmail.com

emco@batelco.com.bh

header:

01: Received: from news.direclynx.net (EHLO db.direclynx.net) [65.64.8.6] by
02: 	mx0.gmx.net (mx011) with SMTP; 28 Feb 2009 xx:xx:xx +0100
03: Received: from db.direclynx.net (db.direclynx.net [127.0.0.1]) by
04: 	db.direclynx.net (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
05: Received: (from apache [at] localhost) by db.direclynx.net (8.13.8/8.13.8/Submit) ID: [ID
06: 	filtered]
07: X-Authentication-Warning: db.direclynx.net: apache set sender to
08: 	info-data [at] british.co.uk using -f
09: Received: from 41.220.75.230 ([41.220.75.230]) by webmail.direclynx.net (Horde
10: 	MIME library) with HTTP for <poor [at] spamvictim.tld>; Fri, 27 Feb 2009 xx:xx:xx -0600

IP: 41.220.75.230 ---> MTN Nigeria

Post geht an:

oceanicagencyltd@tlen.pl

atbha@webmail.direclynx.net

Und eine M$oft Live Domain hat sich der Mugu auch noch erstellt:

info@oceanicagencyltd.com

header:

01: Received: from tempo.di-net.ru (tempo.di-net.ru [213.248.12.5]) (using TLSv1
02: 	with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx (Postfix)
03: 	with ESMTP ID: [ID filtered]
04: Received: from localhost ([127.0.0.1] helo=webmail.msm.ru) by tempo.di-net.ru
05: 	with esmtp (Exim 4.69) (envelope-from <info [at] nlh.org>) ID: [ID filtered]
06: Received: from 41.220.75.3 (SquirrelMail authenticated user gratus [at] msm.ru) by
07: 	webmail.msm.ru with HTTP; Sat, 28 Feb 2009 xx:xx:xx +0300 (MSK)

Die altbekannte Dauer-Mugu IP: 41.220.75.3 ---> mtnngprs.com/MTN Nigeria

Post geht an:

gratus@msm.ru

nalhi@msn.com

nalipro@msn.com

- kjz

[kjz1]

Noch'en Mugu:

header:

01: Received: from mail05.syd.optusnet.com.au (mail05.syd.optusnet.com.au
02: [211.29.132.186]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User (b180B.static.pacific.net.au [202.7.93.11]) (authenticated
05: 	sender haysie1 [at] optusnet.com.au) by mail05.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID:
06: 	[ID filtered]

Post geht an:

govcbnpayment@gmail.com

haysie1@optusnet.com.au

Muguphon: +234 1 7938496 ---> Multilinks, Nigeria

- kjz

[kjz1]

Wieder mal:

header:

01: Received: from smtp-out5.iol.cz (smtp-out5.iol.cz [194.228.2.77]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from User (unknown [222.237.78.10]) by smtp-out5.iol.cz (Postfix)
04: 	with ESMTP id
05: 39BC05AE8F5; Sun,  1 Mar 2009 xx:xx:xx +0100 (CET)

IP: 222.237.78.10 ---> 222-237-78-10.tongkni.co.kr

Post geht an:

weuposta.ge@live.com

coddyb@ymail.com

westernunion.postage@wnion.com

annabel.march@googlemail.com

header:

01: Received: from 62-48-115-144.adsl.ticino.com (EHLO
02: SERVER1.SYTCO.SWISS.CH) [62.48.115.144] by mx0.gmx.net (mx042) with SMTP; 01 Mar 2009
03: 	xx:xx:xx +0100
04: Received: from User ([121.8.124.42]) by SERVER1.SYTCO.SWISS.CH with Microsoft
05: 	SMTPSVC(6.0.3790.3959); Sat, 28 Feb 2009 xx:xx:xx +0100

Post geht an:

kathrinerafae114@yahoo.com

rafaelkathrine114@yahoo.com

- kjz

[kjz1]

Mugu hier, Mugu da....

header:

01: Received: from linkserve.com (mighty.linkserve.com [195.166.237.3]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from [92.41.98.205] (account office [at] atlantika.org.ng HELO User) by
04: 	linkserve.com (CommuniGate Pro SMTP 4.2) with ESMTP ID: [ID filtered]
05: Received-SPF: none receiver=linkserve.com; client-ip=92.41.98.205;
06: 	envelope-from=reeecepp [at] yahoo.com

Erstaunlich, abgekippt über Linkserve (Nigeria), aber Einlieferer ist 92.41.98.205 ---> 92.41.98.205.sub.mbb.three.co.uk.

Post geht an:

perrrrrice@yahoo.com.hk

reeecepp@yahoo.com

office@atlantika.org.ng

- kjz

[kjz1]

Katherine gibt keine Ruhe:

header:

01: Received: from NS1.abissnet.al (ns1.abissnet.al [80.91.126.2]) by
02: 	mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User ([218.90.161.189]) (authenticated bits=0) by
04: 	NS1.abissnet.al (8.13.1/8.13.1) with ESMTP ID: [ID filtered]

Post geht an:

rafaelkathrine114@yahoo.com

header:

01: Received: from jfhost.namliong.com.tw (unknown [60.190.137.218]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([196.3.183.73])  (authenticated) by jfhost.namliong.com.tw
04: 	(8.10.1/8.10.1) with ESMTP ID: [ID filtered]

IP: 196.3.183.73 ---> Suburban telecom, Nigeria

Post geht an:

danielstock300@hotmail.com

Muguphon: +234-806-762-3581 ---> MTN, Nigeria

- kjz

[kjz1]

Nur leicht geänderte Masche vom christlichen Freemailer:

header:

01: Received: from ecunet.org (mail.ecunet.org [69.2.213.90]) (using TLSv1 with
02: 	cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx
03: 	(Postfix) with ESMTP ID: [ID filtered]
04: Received-SPF: pass (ecunet.org: 192.168.0.92 is whitelisted)
05: receiver=ecunet.org; client-ip=192.168.0.92; helo=ecunet-web-1.ecunet.org;
06: 	envelope-from=fortune_dona3 [at] ecunet.org; x-software=spfmilter 0.97
07: 	http://www.acme.com/software/spfmilter/ with libspf2-1.0.0;
08: Received: from ecunet-web-1.ecunet.org (ecunet-web-1 [192.168.0.92]) by
09: 	ecunet.org (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
10: Received: from ecunet-web-1.ecunet.org (localhost.localdomain [127.0.0.1]) 	by
11: 	ecunet-web-1.ecunet.org (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
12: Received: (from httpd [at] localhost) by ecunet-web-1.ecunet.org (8.13.8/8.13.8/Submit) ID:
13: 	[ID filtered]

Post geht an:

fortunedona22@yahoo.com

fortune_dona3@ecunet.org

- kjz