Mugu Dubletten

[kjz1]

Je später der Abend, desto dreister der Mugu:

header:

01: Received: from bnld.nld.com.vn (unknown [210.245.22.124]) by xxxxx (Postfix)
02: 	with ESMTP ID: [ID filtered]

Post bitte an:

ng.laodong@nld.com.vn

mclaimsuk004@googlemail.com

- kjz

[kjz1]

Noch ein paar:

Den hatten wir auch schon....

header:

01: Received: from mail.cpatu.com.uy (r200-40-190-2.ae-static.anteldata.net.uy
02: 	[200.40.190.2]) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from localhost (localhost [127.0.0.1]) by mail.cpatu.com.uy (Postfix)
04: 	with ESMTP ID: [ID filtered]
05: Received: from mail.cpatu.com.uy ([127.0.0.1]) by localhost (mail.cpatu.com.uy
06: 	[127.0.0.1]) (amavisd-new, port 10024) with LMTP ID: [ID filtered]
07: Received: from User (unknown [192.168.3.1]) by mail.cpatu.com.uy (Postfix) with
08: 	ESMTP ID: [ID filtered]

Post geht an:

jadeshaww@gmail.com

jjadeshaw@inMail.sk


Und den wohl auch:

header:

01: Received: from successhk.com (unknown [202.67.202.123]) by xxxxx (Postfix) with
02: 	ESMTP ID: [ID filtered]
03: Received: from User [196.3.183.72] by successhk.com with ESMTP (SMTPD32-8.05)
04: 	ID: [ID filtered]

IP: 196.3.183.72 ---> Suburban telecom, Nigeria

Post geht an:

chikaateli1999@web2mail.com

f_eze2002@yahoo.com.co

Muguphon: +234 802 582 4103 ---> Vmobile, Nigeria/Zain

- kjz

[kjz1]

Jede Menge Mugus:

header:

01: Received: from IMPaqm1.telefonica.net (impaqm1.telefonica.net [213.4.149.61])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from IMPmailhost1.adm.correo ([10.20.102.38]) by
04: 	IMPaqm1.telefonica.net with bizsmtp ID: [ID filtered]
05: Received: from cps3 ([10.20.100.3]) by IMPmailhost1.adm.correo with BIZ IMP ID:
06: 	[ID filtered]
07: X-TE-authinfo: authemail="??" |auth_email="??"
08: X-TE-AcuTerraCos: auth_cuTerraCos="terra-wm"
09: Received: from [83.229.90.44] by correo6.terra.es with HTTP (authenticated as
10: 	edmond22222 [at] terra.es); Thu, 12 Mar 2009 xx:xx:xx +0100

IP: 83.229.90.44 ---> Supernet, Nigeria

Post geht an:

edmond22222@terra.es

edmonddagogo4atm@sify.com

header:

01: Received: from mail03.syd.optusnet.com.au (mail03.syd.optusnet.com.au
02: [211.29.132.184]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User ([41.211.228.31]) (authenticated sender
05: 	info.optuscn94 [at] optusnet.com.au) by mail03.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID:
06: 	[ID filtered]

IP: 41.211.228.31 ---> DIRECT ON PC LTD, Nigeria

Post geht an:

info.optuscn94@optusnet.com.au

unitednation5067@hotmail.com

andrewwolley23099@gmail.com

Muguphon: +44 870 288 7323 ---> Interweb Design Ltd, UK

Und heute hat dasselbe Mugulein ganz besonders vorgesorgt:

header:

01: Received: from mail04.syd.optusnet.com.au (mail04.syd.optusnet.com.au
02: [211.29.132.185]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User ([41.211.226.118]) (authenticated sender
05: 	info.optuscd95 [at] optusnet.com.au) by mail04.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID:
06: 	[ID filtered]

IP: 41.211.226.118 --> DIRECT ON PC LTD, Nigeria

Post geht an:

info.optuscd95@optusnet.com.au

andrewwolley2200555@yahoo.com.hk

mrandrewwolley2003@gmail.com

Muguphones:

+44-700-5921640 ---> PNC Telecom Services Limited, UK

+44 7624198271 ---> Manx Telecom, Isle of Man

+44 870 288 7323 ---> Interweb Design Ltd, UK

Und noch ein Mugu, der nach Mail-Accounts phisht:

header:

01: Received: from norte.esfera.cl (norte.esfera.cl [192.80.24.26]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from sur.esfera.cl (unknown [200.111.14.29]) by norte.esfera.cl
04: 	(Postfix) with ESMTP ID: [ID filtered]
05: Received: from esfera.cl (localhost [127.0.0.1]) by sur.esfera.cl
06: 	(8.xx.EnergyDrink/Esfera smtp v_bop) with ESMTP ID: [ID filtered]

Man beachte:

X-OriginatingIP: 41.220.75.3 ---> MTN, Nigeria (die Dauer-Mugu IP)

Post geht an:

infoa@ymail.com

jaroto@esfera.cl


- kjz

[kjz1]

Katherine ist wieder da, jetzt aber nur noch mit 1 Mailadresse. Was wohl mit den anderen 2 passiert ist....

header:

01: Received: from mail.twghintranet.org ([210.177.173.70]) by mx.kundenserver.de
02: 	(node=mxeu5) with ESMTP (Nemesis) ID: [ID filtered]
03: xx:xx:xx +0100
04: Received: from User ([60.10.134.103]) by mail.twghintranet.org (IceWarp 9.3.2)
05: 	with ASMTP ID: [ID filtered]

IP: 60.10.134.103 ---> CNCGROUP Hebei

Post geht nur noch an:

katrine1114@yahoo.co.jp

- kjz

[syntax]

Und schon wieder einer...

header:

01: X-Envelope-From: <davidpewi3 [at] gmail.com>
02: X-Envelope-To: <meine Adresse>
03: X-Delivery-Time: 1236989405
04: X-UID: [UID filtered]
05: Return-Path: <davidpewi3 [at] gmail.com>
06: X-RZG-FWD-BY: meine Adresse
07: Received: from RZmta-intern (client mail forwarder)
08:         by mailin.webmailer.de (voltan mi25) (RZmta 18.25)
09:         for <meine Adresse>; Sat, 14 Mar 2009 xx:xx:xx +0100 (MET)
10: X-RZG-CLASS-ID: [ID filtered]
11: Received: from boettgertomomfs.com ([68.124.236.110])
12:         by mailin.webmailer.de (voltan mi25) (RZmta 18.25)
13:         with ESMTP ID: [ID filtered]
14:         Sat, 14 Mar 2009 xx:xx:xx +0100 (MET)
15: Received: from User ([196.213.111.202]) by boettgertomomfs.com with Microsoft
16: 	SMTPSVC(6.0.3790.3959);
17:          Fri, 13 Mar 2009 xx:xx:xx -0700
18: Reply-To: <dr.davidpewi3 [at] gmail.com>
19: From: "Dr. DavID: [ID filtered]
20: Subject: CAN YOU HANDLE THIS TRANSFER???
21: Date: Fri, 13 Mar 2009 xx:xx:xx +0200
22: MIME-Version: 1.0
23: Content-Type: text/plain;
24:         charset="Windows-1251"
25: Content-Transfer-Encoding: 7bit
26: X-Priority: 3
27: X-MSMail-Priority: Normal
28: X-Mailer: Microsoft Outlook Express 6.00.2600.0000
29: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
30: Bcc:
31: Message-ID: [ID filtered]
32: X-OriginalArrivalTime: 13 Mar 2009 xx:xx:xx.0109 (UTC)
33: 	FILETIME=[AFEF08D0:01C9A3EB]

Diesmal geht es um 43.860.000,00 $
Die Antworten hätte er gerne an
Dr. David Chabalala Pewi
Email: dr.davidpewi3@gmail.com
Phone: +27-73-846-3099



Der Schrott wurde bereits von meinem Mailserver entfernt.

Gruß,
- syntax

[kjz1]

Der Mugu, der Optus in AU immer exploitet, scheint sich zum 'Dauer-Gast' zu entwickeln:

header:

01: Received: from mail09.syd.optusnet.com.au (mail09.syd.optusnet.com.au
02: [211.29.132.190]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User ([41.211.228.216]) (authenticated sender
05: 	info.optuscn02 [at] optusnet.com.au) by mail09.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID:
06: 	[ID filtered]

IP: 41.211.228.216 ---> DIRECT ON PC LTD, Nigeria

Post geht an:

info.optuscn02@optusnet.com.au

unitednations.ssr@googlemail.com

Muguphone:

Tel: +44-7024023681 ---> Magrathea Telecommunications Limited, UK

FAX: +44-8704952404 ---> Stylecom Limited, UK

ausserdem hätten wir noch:

header:

01: Received: from IMPaqm2.telefonica.net (impaqm2.telefonica.net
02: [213.4.149.62]) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from IMPmailhost2.adm.correo ([10.20.102.39]) by
04: 	IMPaqm2.telefonica.net with bizsmtp ID: [ID filtered]
05: Received: from cps9 ([10.20.100.209]) by IMPmailhost2.adm.correo with BIZ IMP
06: 	ID: [ID filtered]
07: X-TE-authinfo: authemail="??" |auth_email="??"
08: X-TE-AcuTerraCos: auth_cuTerraCos="terra-wm"
09: Received: from [41.211.239.186] by correo17.terra.es with HTTP (authenticated
10: 	as obadiahmailafi9 [at] terra.es); Sat, 14 Mar 2009 xx:xx:xx +0100

IP: 41.211.239.186 ---> DIRECT ON PC LTD, Nigeria

Post geht an:

obadiahmailafi9@terra.es

immagaladima111@sify.com

Muguphon: +234 70257-28574 ---> Pank Shin, Nigeria


Squirrelmail läßt sich in KE auch noch immer exploiten:

header:

01: Received: from mail.nema.go.ke (mail.nema.go.ke [80.240.202.162]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from mail.nema.go.ke (mail.nema.go.ke [127.0.0.1]) by mail.nema.go.ke
04: 	(Postfix) with ESMTP ID: [ID filtered]
05: Received: from 127.0.0.1 (proxying for 192.168.0.21, 127.0.0.1) (SquirrelMail
06: 	authenticated user info) by mail.nema.go.ke with HTTP; Sat, 14 Mar 2009 xx:xx:xx +0300 (EAT)

Post geht an:

fedex_delivery69@yahoo.com.hk

Muguphon: +2348057547555 ---> Globacom, Nigeria

- kjz

[kjz1]

Optus und Sify scheinen sich ihre Merkbefreiung redlich verdienen zu wollen:

header:

01: Received: from mail02.syd.optusnet.com.au (mail02.syd.optusnet.com.au
02: 	[211.29.132.183]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User (c122-107-155-148.eburwd5.vic.optusnet.com.au
05: 	[122.107.155.148]) (authenticated sender mrkes [at] optusnet.com.au) by
06: 	mail02.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]

Post geht an:

dr.obadiah0060@sify.com

mrkes@optusnet.com.au


- kjz

[kjz1]

Katherine kann es einfach nicht lassen:

header:

01: Received: from mail1.mywave.at (mail1.mywave.at [85.193.128.12]) by
02: 	mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User (host-41-207-0-84.afnet.net [41.207.0.84]) by
04: 	mail1.mywave.at (Postfix) with ESMTP ID: [ID filtered]

IP: 41.207.0.84 ---> AFNET, CI

Post geht an:

katrine114@yahoo.co.jp

katrine1114@yahoo.co.jp

header:

01: Received: from winfesmtp3.menara.local (smtp-xe3.menara.ma [196.217.246.112])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from EXVS21.menara.local ([192.168.5.54]) by winfesmtp3.menara.local
04: 	with Microsoft SMTPSVC(6.0.3790.1830); Mon, 16 Mar 2009 xx:xx:xx +0000

Post geht an:

john.kane@menara.ma

w_t_u_m_t_f@mail.md

Muguphon: +229-9320-1763 ---> BBCom, Benin


- kjz

[kjz1]

Sister Jorgensen direkt im Doppelpack:

header:

01: Received: from adlim.com.br (smtp.adlim.com.br [200.249.47.1]) (using TLSv1
02: 	with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx
03: 	(Postfix) with ESMTP ID: [ID filtered]
04: BrmaOutput: [41.221.174.107]
05: Received: from User ([41.221.174.107]) (authenticated bits=0) by adlim.com.br
06: 	(8.12.11.20060308/8.12.11) with ESMTP ID: [ID filtered]

header:

01: Received: from ss93.shared.server-system.net (ss93.shared.server-system.net
02: 	[64.13.208.3]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client
03: 	certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User ([41.221.174.107]) (authenticated bits=0) by
05: 	ss93.shared.server-system.net (8.12.11.20060308/8.12.11) with ESMTP ID: [ID filtered]

IP: 41.221.174.107 ---> SWIFT NETWORKS, Nigeria

Post geht an:

mrshriderjorgensen4luv01@gmail.com

mrshriderjorgensen4luv@gmail.com

header:

01: Received: from winfesmtp3.menara.local (smtp-xe3.menara.ma [196.217.246.112])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from EXVS21.menara.local ([192.168.5.54]) by winfesmtp3.menara.local
04: 	with Microsoft SMTPSVC(6.0.3790.1830); Mon, 16 Mar 2009 xx:xx:xx +0000

Post geht an:

john.kane@menara.ma

w_t_u_m_t_f@mail.md

Muguphon: +229-9320-1763 ---> BBCom, Benin

header:

01: Received: from sccmmhc91.asp.att.net (sccmmhc91.asp.att.net [204.127.203.211])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: DKIM-Signature: v=1; q=dns/txt; d=mchsi.com; s=dkim01;
04:       i=poor [at] spamvictim.tld; a=rsa-sha256;
05:       c=relaxed/relaxed; t=1237251699; h=Content-Type:MIME-Version:
06:      Message-Id:Date:From; bh=Icrrx1hmSpgqI246jup0AIIggHdCOntCVKYv+0pTBE
07:      Q=; b=MTYJzzGQRVbjSN5kksHCKcn9sWhsn2WftZz6A265pMuZG9EPpgtvNIOfMFmpQ
08:      K0fYuCh9QKWlJJAQ4TNc4ieaA==
09: Received: from sccqwbc17 (scommcenter17.asp.att.net[204.127.203.179]) by
10: 	mchsi.com (sccmmhc91) with SMTP ID: [ID filtered]
11: Received: from [67.222.8.32] by sccqwbc17; Tue, 17 Mar 2009 xx:xx:xx +0000

IP: 67.222.8.32 ---> host.bahrain-dns.net

Post geht an:

moorejacksonfinancial@mchsi.com

moorejackson12@googlemail.com


- kjz

[kjz1]

Weiter geht's:

header:

01: Received: from 156.89.233.72.static.reverse.ltdomains.com (EHLO
02: server.hammersurepa.com) [72.233.89.156] by mx0.gmx.net (mx077) with SMTP; 17 Mar 2009
03: 	xx:xx:xx +0100
04: Received: from localhost ([127.0.0.1] helo=72.233.89.156) by
05: 	server.hammersurepa.com with esmtpa (Exim 4.69) (envelope-from
06: 	<ndemanosiviwe01 [at] gmail.com>) ID: [ID filtered]
07: Received: from 41.202.20.190 ([41.202.20.190]) (SquirrelMail authenticated user
08: 	005 [at] cbcy-london.co.uk) by 72.233.89.156 with HTTP; Thu, 12 Mar 2009 xx:xx:xx -0000 (UTC)

IP: 41.202.20.190 ---> dhcp20190.myzipnet.com, Ghana

Post hätte gerne:

ndemanosiviwe01@gmail.com

ndemanosiviwe@gmail.com

005@cbcy-london.co.uk

ndemanosiviwe@executivemail.co.za

header:

01: Received: from hpsmtp-eml15.KPNXCHANGE.COM (EHLO hpsmtp-eml15.kpnxchange.com)
02: 	[213.75.38.115] by mx0.gmx.net (mx116) with SMTP; 18 Mar 2009 xx:xx:xx +0100
03: Received: from cpsmtp-he03.kpnxchange.com ([213.75.38.23]) by
04: 	hpsmtp-eml15.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 18 Mar 2009 xx:xx:xx
05: 	+0100
06: Received: from User ([124.122.188.60]) by cpsmtp-he03.kpnxchange.com with
07: 	Microsoft SMTPSVC(6.0.3790.3959); Wed, 18 Mar 2009 xx:xx:xx +0100

IP: 124.122.188.60 ---> ppp-124-122-188-60.revip2.asianet.co.th

Post geht an:

hh.jj1978@gmail.com

Muguphon: + 44 792 408 6767 ---> Manx Telecom, Isle of Man


Besonders perfide, weil es hier angeblich um verwaistes Vermögen von Holocaust-Opfern gehen soll:

header:

01: Received: from 21.32.be.static.xlhost.com (EHLO mx4.hotmail.com)
02: [209.190.50.33] by mx0.gmx.net (mx100) with SMTP; 18 Mar 2009 xx:xx:xx +0100

Post geht an:

zvi.barak@Aggies.com


- kjz