Mugu-Fortsetzung:
header:01: Received: from relay.mail.sohu.net (EHLO relay.mail.sohu.net)02: [61.135.132.71]03: by mx0.gmx.net (mx054) with SMTP; 08 Mar 2010 xx:xx:xx 퍝04: Received: from User (unknown [74.7.210.92])05: by relay.mail.sohu.net (Postfix) with ESMTPA ID: [ID filtered]06: Tue, 9 Mar 2010 xx:xx:xx 폍 (CST)
thomaswale101@live.com
burkert@sohu.net
header:01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 9 Mar 2010 xx:xx:xx +0100 (CET)06: Received: (qmail 24184 invoked by UID: [UID filtered]07: Received: by simscan 1.3.1 ppID: [ID filtered]08: scanners: attach: 1.3.1 clamav: 0.92.109: /m:10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)11: by smtp4.digitalpath.net with ESMTPA; 9 Mar 2010 xx:xx:xx -0000
header:01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)06: Received: (qmail 21414 invoked by UID: [UID filtered]07: Received: by simscan 1.3.1 ppID: [ID filtered]08: scanners: attach: 1.3.1 clamav: 0.92.109: /m:10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)11: by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 xx:xx:xx -0000
IP: 196.22.137.194 ---> Hetzner, ZA
andwalter11@gala.net
andwalter@yahoo.com
jwellington01@live.com
header:01: Received: from mout.perfora.net (mout.perfora.net [74.208.4.194])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 9 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from ntxpwus92 (ntxpwus92.lxa.perfora.net [172.23.131.70])05: by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis)06: ID: [ID filtered]
shanemarie.white@gmail.com
Freenet, Teil 13. Anscheinend wird Freenet zur Zeit in Mugu-Foren als heisser Kandidat für den merkbefreitesten Provider Deutschlands gefeiert, den man nach belieben im Nasenring durch die Manege führen kann. Und Freenet wird wohl auch erst aus dem Tiefschlaf aufwachen, wenn deren Mailserver mal auf den richtigen großen Blacklists gelandet ist und kein Freenet-Kunde mehr seine Mails losbekommt. Dann ist das Geschreie und Geheule wahrscheinlich mal wieder groß....
header:01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 9 Mar 2010 xx:xx:xx +0100 (CET)06: Received: from [195.4.92.14] (helo=4.mx.freenet.de)07: by mout0.freenet.de with esmtpa (ID: [ID filtered]08: (Exim 4.72 #1)09: ID: [ID filtered]10: Received: from adsl10174.4u.com.gh ([41.210.10.174]:60709 helo=User)11: by 4.mx.freenet.de with esmtpa (ID: [ID filtered]12: (Exim 4.72 #2)13: ID: [ID filtered]
IP: 41.210.10.174 ---> adsl10174.4u.com.gh
mariann02@justmail.de (Freenet)
msvicbriggs@aol.co.uk
msmaphss@adelphia.net
header:01: Received: from smtpout5.poczta.onet.pl (smtpout5.poczta.onet.pl02: [213.180.147.165])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from [65.39.179.34] ([65.39.179.34]:1082 "EHLO06: my530-a"07: rhost-flags-FAIL-FAIL-OK-FAIL) by ps1.m5r2.onet with ESMTPA08: ID: [ID filtered]09: Wed, 10 Mar 2010 xx:xx:xx +0100
dseww45@gmx.com
citibnk@gmx.com
Freenet, Teil 14:
header:01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)06: Received: from [195.4.92.26] (helo=16.mx.freenet.de)07: by mout0.freenet.de with esmtpa (ID: [ID filtered]08: 4.72 #1)09: ID: [ID filtered]10: Received: from [41.211.238.95] (port=56601 helo=User)11: by 16.mx.freenet.de with esmtpa (ID: [ID filtered]12: 4.72 #2)13: ID: [ID filtered]
IP: 41.211.238.95 ---> Direct-on-PC Limited, Nigeria
bcvnbm@justmail.de (Freenet)
kenneth.feagins@mail.mn
Muguphon: +44-702-401-8863 ---> Magrathea Telecommunications Limited, UK
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
wieder mal Hetzner, ZA:
header:01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)06: Received: (qmail 21821 invoked by UID: [UID filtered]07: Received: by simscan 1.3.1 ppID: [ID filtered]08: scanners: attach: 1.3.1 clamav: 0.92.109: /m:10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)11: by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 xx:xx:xx -0000
IP: 196.22.137.194 ---> Hetz-Accessweb-Root, ZA
jwellington@gala.net
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
und noch'en paar....
header:01: Received: from ricovideo.ru (77.221.138.234.addr.datapoint.ru02: [77.221.138.234])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sun, 14 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from localhost (localhost [127.0.0.1])06: by ricovideo.ru (Postfix) with ESMTP ID: [ID filtered]07: Fri, 12 Mar 2010 xx:xx:xx +0300 (MSK)08: Received: from ricovideo.ru ([127.0.0.1])09: by localhost (ricovideo.ru [127.0.0.1]) (amavisd-new, port 10024)10: with ESMTP ID: [ID filtered]11: Received: from User (unknown [82.128.82.63])12: (Authenticated sender: test)13: by ricovideo.ru (Postfix) with ESMTPA ID: [ID filtered]14: Fri, 12 Mar 2010 xx:xx:xx +0300 (MSK)
IP: 82.128.82.63 ---> Multilinks Telecommunications Limited, Nigeria
dr.goodluckjonathan_ng@yahoo.com
mrsjuliew@aol.com
Muguphon: +234-7095-236-452 ---> Multilinks Telecommunications Ltd., Nigeria
header:01: Received: from eyou.net (mails.ccnu.edu.cn [202.114.32.23])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Sun, 14 Mar 2010 xx:xx:xx +0100 (CET)04: Received: (eyou anti_spam gateway 3.0); Sun, 14 Mar 2010 xx:xx:xx +080005: Received: from 41.245.37.71 by 202.114.32.23 with SMTP; Sun, 14 Mar 201006: xx:xx:xx +0800
IP: 41.245.37.71 ---> dsl-245-37-71.telkomadsl.co.za/Telkom SA Limited
princendebele@gala.net
pricendebele@gmail.com
hier ist auch der User der Russki-Kiste 'nett':
header:01: Received: (qmail invoked by alias); 14 Mar 2010 xx:xx:xx -000002: Received: from 85-159-0-18-dynamic.retail.datagroup.ua (EHLO adt.com.ua)03: [85.159.0.18]04: by mx0.gmx.net (mx091) with SMTP; 14 Mar 2010 xx:xx:xx +010005: Received: from User ([41.217.65.3])06: (authenticated user spam [at] adt.com.ua)07: by adt.com.ua (Kerio MailServer 6.4.0);08: Mon, 1 Mar 2010 xx:xx:xx +0300
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
spam@adt.com.ua
cpltransport00@live.co.uk
Muguphon: +44 703 189 2980 ---> Magrathea Telecommunications Limited, UK
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Da geht so richtig die Mugu-Post ab:
gecracktes SquirrelMail:
header:01: Received: from sites.chicagopicks.com (server22.integrityserver.net02: [67.19.2.146])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)07: Received: from localhost ([127.0.0.1] helo=webmail.studioridge.com)08: by sites.chicagopicks.com with esmtpa (Exim 4.69)09: (envelope-from <douglasezit86 [at] yahoo.com>)10: ID: [ID filtered]11: Received: from 41.124.209.55 ([41.124.209.55]) (proxying for 41.124.209.55)12: (SquirrelMail authenticated user poor [at] spamvictim.tld)13: by webmail.studioridge.com with HTTP;14: Mon, 8 Mar 2010 xx:xx:xx -0600
IP: 41.124.209.55 ---> MTN Network Solutions, ZA
douglasezit86@yahoo.com
cheryl@studioridge.com
douglasezit86@sify.com
header:01: Received: from mail.apex.com.my (unknown [210.19.31.175])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from localhost (localhost [127.0.0.1])05: by mail.apex.com.my (Postfix) with ESMTP ID: [ID filtered]06: Wed, 10 Mar 2010 xx:xx:xx +0800 (MYT)07: Received: from mail.apex.com.my ([127.0.0.1])08: by localhost (mail.apex.com.my [127.0.0.1]) (amavisd-new, port 10024)09: with ESMTP ID: [ID filtered]10: Received: from User (unknown [82.128.85.169])11: by mail.apex.com.my (Postfix) with ESMTP ID: [ID filtered]12: Wed, 10 Mar 2010 xx:xx:xx +0800 (MYT)
IP: 82.128.85.169 ---> Multilinks Telecommunications Limited, Nigeria
samuelagbala@hosanna.net
admin@apex.com.my
Hetzner, ZA:
header:01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)06: Received: (qmail 21414 invoked by UID: [UID filtered]07: Received: by simscan 1.3.1 ppID: [ID filtered]08: scanners: attach: 1.3.1 clamav: 0.92.109: /m:10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)11: by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 xx:xx:xx -0000
IP: 196.22.137.194 ---> Hetz-Accessweb-Root, ZA
jwellington01@live.com
gecracktes SquirrelMail:
header:01: Received: from mail.health.go.ke (unknown [62.24.109.214])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from webmail.health.go.ke (localhost [127.0.0.1])05: by mail.health.go.ke (Postfix) with ESMTP ID: [ID filtered]06: Thu, 11 Mar 2010 xx:xx:xx +0300 (EAT)07: Received: from 41.206.15.208: (SquirrelMail authenticated user dcdc)09: by webmail.health.go.ke with HTTP;10: Wed, 10 Mar 2010 xx:xx:xx -0000
header:01: Received: from mail.health.go.ke (unknown [62.24.109.214])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from webmail.health.go.ke (localhost [127.0.0.1])05: by mail.health.go.ke (Postfix) with ESMTP ID: [ID filtered]06: Thu, 11 Mar 2010 xx:xx:xx +0300 (EAT)07: Received: from 41.206.15.108: (SquirrelMail authenticated user dcdc)09: by webmail.health.go.ke with HTTP;10: Wed, 10 Mar 2010 xx:xx:xx -0000
IP: 41.206.15.2 ---> MTN Nigeria
dcdc@health.go.ke
callymartins7@yahoo.com.hk
Muguphon: +44-701-113-3045 ---> PNC Telecom Services Limited, UK
Mugufax: +44-707-505-5654 ---> Your Communications Ltd, UK
header:01: Received: from mx4.hotmail.com02: (51.46.68.68.unassigned.reliablehosting.com [68.68.46.51])03: by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)04: ID: [ID filtered]05: xx:xx:xx +0100
address.paul999999a@aol.com
header:01: Received: from imr-da05.mx.aol.com (imr-da05.mx.aol.com [205.188.105.147])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from mtaout-dc01.r1001.mx.aol.com05: (mtaout-dc01.r1001.mx.aol.com [205.188.58.65])06: by imr-da05.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Thu, 11 Mar 2010 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from User (unknown [41.217.65.3])10: by mtaout-dc01.r1001.mx.aol.com (WebSuites/MUA Thirdparty client11: Interface) with ESMTPA ID: [ID filtered]12: Thu, 11 Mar 2010 xx:xx:xx -0500 (EST)
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.
mcarlosrichard@googlemail.com
combity3@mcom.com
Freenet, Teil 14:
header:01: Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)06: Received: from [195.4.92.14] (helo=4.mx.freenet.de)07: by mout1.freenet.de with esmtpa (ID: [ID filtered]08: 4.72 #1)09: ID: [ID filtered]10: Received: from [82.128.81.42] (port=1772 helo=User)11: by 4.mx.freenet.de with esmtpa (ID: [ID filtered]12: 4.72 #2)13: ID: [ID filtered]
IP: 82.128.81.42 ---> Multilinks Telecommunications Limited, Nigeria
gon5@freakmail.de (Freenet)
nigeriapolicefrc4@gmail.com
npforce100000@gmail.com
die Amsterdam-Madrid-Konnektion:
header:01: Received: from cpsmtpb-ews05.kpnxchange.com02: (cpsmtpb-ews05.kpnxchange.com [213.75.39.8])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from cpbrm-ews13.kpnxchange.com ([10.94.84.144]) by06: cpsmtpb-ews05.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);07: Thu, 11 Mar 2010 xx:xx:xx +010008: Received: from CPSMTPM-EML03.kpnxchange.com ([213.75.39.73]) by09: cpbrm-ews13.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);10: Thu, 11 Mar 2010 xx:xx:xx +010011: Received: from localhost ([10.94.77.200]) by12: CPSMTPM-EML03.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);13: Thu, 11 Mar 2010 xx:xx:xx +0100
V.Wit@kpnplanet.nl
vintagefn@aim.com
Muguphon: +34-672-514-048 ---> Vodafone España, S.a.u.
header:01: Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.48])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from me-wanadoo.net (localhost [127.0.0.1])05: by mwinf2114.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]06: Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)07: Received: from me-wanadoo.net (localhost [127.0.0.1])08: by mwinf2114.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]09: Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)10: Received: from User (unknown [62.161.78.142])11: by mwinf2114.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]12: Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)
2222_fine@orange.fr
johnsimmon1999@yahoo.cn
lindatrave@yahoo.com
johnsimmon85@yahoo.com.hk
Muguphon: +234-807-0627-501 ---> Globacom Ltd., Nigeria
header:01: Received: from mail1.legatum.com (EHLO mail.legatum.com) [87.83.216.42]02: by mx0.gmx.net (mx046) with SMTP; 12 Mar 2010 xx:xx:xx +010003: Received: from unknown (HELO MERLIN.legatum.org) ([192.168.100.114])04: by mail.legatum.com with ESMTP; 12 Mar 2010 xx:xx:xx +000005: Received: from thoth.legatum.org ([172.25.25.13]) by MERLIN.legatum.org06: with Microsoft SMTPSVC(6.0.3790.3959);07: Fri, 12 Mar 2010 xx:xx:xx +000008: Received: from sneferu.legatum.org ([172.25.25.16]) by thoth.legatum.org09: with Microsoft SMTPSVC(6.0.3790.3959);10: Fri, 12 Mar 2010 xx:xx:xx +040011: Received: from User ([119.51.93.162]) by sneferu.legatum.org with12: Microsoft SMTPSVC(6.0.3790.3959);13: Fri, 12 Mar 2010 xx:xx:xx +0400
IP: 119.51.93.162 ---> China Unicom Jilin
rfofficedesk@yahoo.co.jp
ludaversion@smoothkid2.co.cc
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Das neueste aus Afrika:
header:01: Received: from petrest.com.au (petres.lnk.telstra.net [203.45.31.131])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from nospam.petrest.local ([192.168.1.10]) by petrest.com.au05: with Microsoft SMTPSVC(6.0.3790.3959);06: Tue, 16 Mar 2010 xx:xx:xx +110007: Received: from User ([82.128.85.216] helo=User) with IPv4:25 by08: nospam.petrest.local; 16 Mar 2010 xx:xx:xx +1100
IP: 82.128.85.216 ---> Multilinks Telecommunications Limited, Nigeria
mrslynnsmith@inMail.sk
mrslynnsmith1960@gmail.com
header:01: Received: from mail1.hcmute.edu.vn (EHLO mail1.hcmute.edu.vn)02: [203.113.147.179]03: by mx0.gmx.net (mx002) with SMTP; 17 Mar 2010 xx:xx:xx +010004: Received: from User (vc-41-29-79-102.umts.vodacom.co.za [41.29.79.102])05: (authenticated bits=0)06: by mail1.hcmute.edu.vn (8.14.2/8.14.2) with ESMTP ID: [ID filtered]07: Wed, 17 Mar 2010 xx:xx:xx +0700
IP: 41.29.79.102 ---> Vodacom_UMTS_Gauteng
augustinedinga@sify.com
augustinedinga4@sify.com
augustinedinga2@sify.com
Muguphon: +27-834-515-403 ---> MTN, ZA
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
als neue Kandidaten melden sich:
über gecracktes SquirrelMail:
header:01: Received: from mingob.gob.pa (unknown [200.46.243.242])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 15 Mar 2010 xx:xx:xx +0100 (CET)
nokiawin1@gmail.com
winmoremobile@yahoo.com.hk
Muguphon: +447035946006 ---> Open Telecom International Ltd., UK
header:01: Received: from mail.craven-services.com (EHLO craven-services.co.uk)02: [217.37.223.30]03: by mx0.gmx.net (mx004) with SMTP; 15 Mar 2010 xx:xx:xx +010004: Received: from User ([81.215.14.21]) by craven-services.co.uk with05: Microsoft SMTPSVC(6.0.3790.1830);06: Sun, 14 Mar 2010 xx:xx:xx +0000
IP: 81.215.14.21 ---> www.zmmae.gov.tr
markjam1@administrativos.com
Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.
die Amsterdam-Konnektion:
header:01: Received: from psmtp1.dnsg.net (psmtp1.dnsg.net [193.168.128.41])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)04: Received: (qmail 4658 invoked from network); 15 Mar 2010 xx:xx:xx +010005: Received: from ip121-196-210-87.adsl2.static.versatel.nl (HELO User)06: (morgenbrodt [at] 87.210.196.121)07: by psmtp1.dnsg.net with SMTP; 15 Mar 2010 xx:xx:xx +0100
infosgasl@aim.com
laandaluss2@gmail.com
Muguphon: +31-647-226-334 ---> Telfort B.V., NL/Tiscali
gecrackter Uni-Account:
header:01: Received: from mx1.umbc.edu (mx1.umbc.edu [130.85.25.76])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)06: Received: from smtp.umbc.edu (localhost [127.0.0.1])07: by umbc.edu (mx1.umbc.edu) with ESMTP ID: [ID filtered]08: Tue, 16 Mar 2010 xx:xx:xx -0400 (EDT)09: Received: from User (linux3.gl.umbc.edu [130.85.24.92])10: by smtp.umbc.edu (mx1-relay.umbc.edu) with SMTP ID: [ID filtered]11: Tue, 16 Mar 2010 xx:xx:xx -0400 (EDT)
andwalter11@gala.net
andwalter@yahoo.com
header:01: Received: from ZixVPM03.firsthealth.com (zixvpm03.firsthealth.com02: [12.10.217.76])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)07: Received: from ZixVPM03.firsthealth.com (ZixVPM [127.0.0.1])08: by Outbound.firsthealth.com (Proprietary) with ESMTP ID: [ID filtered]09: for xxxxx; Tue, 16 Mar 2010 xx:xx:xx -0700 (MST)10: Received: from AZPH-SRV-MA07.cvty.com (unknown [10.40.249.134])11: by ZixVPM03.firsthealth.com (Proprietary) with ESMTP ID: [ID filtered]12: Tue, 16 Mar 2010 xx:xx:xx -0700 (MST)13: Received: from AZPH-SRV-MAIL03.cvty.com ([10.40.177.36]) by14: AZPH-SRV-MA07.cvty.com with Microsoft SMTPSVC(6.0.3790.3959);15: Tue, 16 Mar 2010 xx:xx:xx -0700
PGWilkes@cvty.com
z.bank87@gala.net
Muguphon: +(234)808 388 0641 ---> Celtel Nigeria Limited/Zain
header:01: Received: from 61-25-200-184.rev.home.ne.jp (EHLO ma.ctk23.ne.jp)02: [61.25.200.184]03: by mx0.gmx.net (mx084) with SMTP; 17 Mar 2010 xx:xx:xx +010004: Received: from User (biuro-masq.itv.com.pl [80.55.19.246])05: by ma.ctk23.ne.jp (Postfix) with ESMTP ID: [ID filtered]06: Wed, 17 Mar 2010 xx:xx:xx +0900 (JST)
header:01: Received: from 61-25-200-184.rev.home.ne.jp (EHLO ma.ctk23.ne.jp)02: [61.25.200.184]03: by mx0.gmx.net (mx084) with SMTP; 17 Mar 2010 xx:xx:xx +010004: Received: from User (biuro-masq.itv.com.pl [80.55.19.246])05: by ma.ctk23.ne.jp (Postfix) with ESMTP ID: [ID filtered]06: Wed, 17 Mar 2010 xx:xx:xx +0900 (JST)
jerycoeman599@ok.kz
cj60223@googlemail.com
Muguphon: +447031945911 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from cpsmtpb-ews02.kpnxchange.com02: (cpsmtpb-ews02.kpnxchange.com [213.75.39.5])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from cpbrm-ews10.kpnxchange.com ([10.94.84.141]) by06: cpsmtpb-ews02.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);07: Wed, 17 Mar 2010 xx:xx:xx +010008: Received: from CPSMTPM-EML07.kpnxchange.com ([213.75.39.77]) by09: cpbrm-ews10.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);10: Wed, 17 Mar 2010 xx:xx:xx +010011: Received: from localhost ([10.94.77.199]) by12: CPSMTPM-EML07.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);13: Wed, 17 Mar 2010 xx:xx:xx +0100
infomsft@aol.com
keijs072@planet.nl
header:01: Received: from 212.183.204.45.static.user.ono.com (EHLO02: mail.coaatleon.es) [212.183.204.45]03: by mx0.gmx.net (mx033) with SMTP; 17 Mar 2010 xx:xx:xx +010004: Received: from User ([41.217.65.14])05: (authenticated bits=0)06: by mail.coaatleon.es (8.12.5/8.12.8) with ESMTP ID: [ID filtered]07: Mon, 15 Mar 2010 xx:xx:xx +0100
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
n.sai12@yahoo.com
samueludo13@gmail.com
Muguphon: +23354 6155335 ---> MTN, Ghana
header:01: Received: from very-e.com (unknown [121.11.84.240])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from User [82.128.20.182] by very-e.com with ESMTP05: (SMTPD32-8.01) ID: [ID filtered]
header:01: Received: from very-e.com (unknown [121.11.84.240])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from User [82.128.20.41] by very-e.com with ESMTP05: (SMTPD32-8.01) ID: [ID filtered]
IP: 82.128.20.182 ---> ml82.128.20.182.multilinks.com, Nigeria
ibrahimtan77@yahoo.co.uk
ibrahimtan777@live.com
ibrahimtan@mail.com
Freenet, Teil 15:
header:01: Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)06: Received: from [195.4.92.22] (helo=12.mx.freenet.de)07: by mout6.freenet.de with esmtpa (ID: [ID filtered]08: (Exim 4.72 #1)09: ID: [ID filtered]10: Received: from [41.217.65.14] (port=22772 helo=User)11: by 12.mx.freenet.de with esmtpa (ID: [ID filtered]12: (Exim 4.72 #2)13: ID: [ID filtered]
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
baloo10@bossmail.de (Freenet)
mariocarlos1002@gmail.com
mariocarlos@yahoo.com
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Die Mugus legen los:
die Amsterdam-Konnektion:
header:01: Received: from cosr001.CORMANO.LOCAL02: (host131-22-static.223-195-b.business.telecomitalia.it [195.223.22.131])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from User ([87.210.95.21]) by cosr001.CORMANO.LOCAL with06: Microsoft SMTPSVC(6.0.3790.3959);07: Tue, 16 Mar 2010 xx:xx:xx +0100
IP: 87.210.95.21 ---> ip21-95-210-87.adsl2.static.versatel.nl
westerngroup7@netscape.net
morganf@redhat.polarhome.com
header:01: Received: from slw.com.tw (220-130-52-115.HINET-IP.hinet.net02: [220.130.52.115])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)07: Received: from User (ml82.128.20.189.multilinks.com [82.128.20.189])08: (authenticated bits=0)09: by slw.com.tw (8.12.8/8.12.8) with ESMTP ID: [ID filtered]10: Wed, 17 Mar 2010 xx:xx:xx +0800
IP: 82.128.20.189 ---> Multilinks, Nigeria
alexsmith46@live.com
alex_smith4460@yahoo.com.hk
header:01: Received: from nmsbs.normark.local (211-23-203-98.HINET-IP.hinet.net02: [211.23.203.98])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 18 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from User ([192.168.1.1]) by nmsbs.normark.local with06: Microsoft SMTPSVC(6.0.3790.3959);07: Thu, 18 Mar 2010 xx:xx:xx +0800
paymasterdept@gmail.com
paymasterdept@centrum.cz
Muguphon: +44 702 4017 962 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from mail.dynisys.net02: (24-180-248-18.static.bycy.mi.charter.com [24.180.248.18])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 18 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from User [41.138.190.43] by mail.dynisys.net with ESMTP06: (SMTPD32-7.15) ID: [ID filtered]
IP: 41.138.190.43 ---> Visafone Communications Limited, Nigeria
fbicotact2010@hotmail.com
Muguphon: +44 702 4039830 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 4075668 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from smtpout6.poczta.onet.pl (smtpout6.poczta.onet.pl02: [213.180.147.166])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 18 Mar 2010 xx:xx:xx +0100 (CET)05: Received: from [196.46.246.21] ([196.46.246.21]:30102 "EHLO06: d600-pc"07: rhost-flags-FAIL-FAIL-OK-FAIL) by ps2.m5r2.onet with ESMTPA08: ID: [ID filtered]09: Thu, 18 Mar 2010 xx:xx:xx +0100
IP: 196.46.246.21 ---> Celtel Nigeria Limited/Zain
markanthony.anthony12@gmail.com
markanthony447@onet.pl
Muguphon: + 234-7056665788 ---> Globacom Ltd., Nigeria
header:01: Received: from mail.segynonc.net (EHLO mail.segynonc.net) [209.177.232.5]02: by mx0.gmx.net (mx011) with SMTP; 19 Mar 2010 xx:xx:xx +010003: Received: from User ([203.31.191.226] RDNS failed) by mail.segynonc.net04: with Microsoft SMTPSVC(6.0.3790.3959);05: Thu, 18 Mar 2010 xx:xx:xx -0400
mr.anthonymutari@yahoo.com
youssefkhalid112@gmail.com
Und hier sieht man auch, wie Yahoo die Source-IP mitliefert:
header:01: Received: from n10.bullet.mail.mud.yahoo.com (HELO02: n10.bullet.mail.mud.yahoo.com) [209.191.125.208]03: by mx0.gmx.net (mx053) with SMTP; 19 Mar 2010 xx:xx:xx +010004: Received: from [68.142.200.225] by n10.bullet.mail.mud.yahoo.com with05: NNFMP; 19 Mar 2010 xx:xx:xx -000006: Received: from [66.196.97.142] by t6.bullet.mud.yahoo.com with NNFMP; 1907: Mar 2010 xx:xx:xx -000008: Received: from [127.0.0.1] by omp110.mail.re3.yahoo.com with NNFMP; 1909: Mar 2010 xx:xx:xx -000010: Received: from [77.70.128.170] by web88008.mail.re2.yahoo.com via HTTP;11: Fri, 19 Mar 2010 xx:xx:xx PDT
IP: 77.70.128.170 ---> Comgeo Services, Nigeria/Taide
agent.alfred12@gmail.com
Muguphon: +447031883670 ---> Magrathea Telecommunications Limited, UK
- kjz
Geändert von kjz1 (22.03.2010 um 12:18 Uhr)
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Der Nachschub geht nie aus:
header:01: Received: from ns.GmNex.com (unknown [220.90.213.57])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from User ([41.218.228.37]) by ns.GmNex.com with Microsoft05: SMTPSVC(6.0.3790.3959);06: Sat, 20 Mar 2010 xx:xx:xx +0900
IP: 41.218.228.37 ---> vfbb22837.4u.com.gh
mr.josephawusu1@gmail.com
RevJosephArhinful@mail.com
mr.josephawusu@yahoo.com
header:01: Received: from ip179.208-100-3.static.steadfast.net (EHLO02: mail.imageworldwide.com) [208.100.3.179]03: by mx0.gmx.net (mx039) with SMTP; 20 Mar 2010 xx:xx:xx +010004: Received: from UnknownHost [41.217.65.14] by mail.imageworldwide.com05: with SMTP;06: Fri, 19 Mar 2010 xx:xx:xx -0500
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
unitedcouriers@rediffmail.com
maradams@yahoo.com
lindywilliams1@rediffmail.com
Muguphon: +234-813-756-89-22 ---> Nigeria
header:01: Received: from etmail.namliong.com.tw (unknown [210.75.26.90])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from localhost (localhost [127.0.0.1])05: by etmail.namliong.com.tw (Postfix) with ESMTP ID: [ID filtered]06: Sat, 20 Mar 2010 xx:xx:xx +0800 (CST)07: X-Virus-Scanned: amavisd-new at namliong.com.tw08: Received: from etmail.namliong.com.tw ([127.0.0.1])09: by localhost (nat.namliong.com.tw [127.0.0.1]) (amavisd-new, port 10024)10: with ESMTP ID: [ID filtered]11: Received: from etmail.namliong.com.tw (localhost [127.0.0.1])12: by etmail.namliong.com.tw (Postfix) with ESMTP ID: [ID filtered]13: Sat, 20 Mar 2010 xx:xx:xx +0800 (CST)
X-OriginatingIP: 41.203.65.44 (test) ---> Globacom Ltd., Nigeria
johngrr30@gmail.com
garry.john450@gmail.com
header:01: Received: from 90.41.68.68.client.static.strong10.reliablehosting.com02: (EHLO mx4.hotmail.com) [68.68.41.90]03: by mx0.gmx.net (mx039) with SMTP; 20 Mar 2010 xx:xx:xx +0100
address.paulgomez9999@aol.com
sbmjsvgizixisot@hotmail.com
header:01: Received: from smtp2web.tin.it (smtp2web.tin.it [212.216.176.236])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from pswm15.cp.tin.it (192.168.70.60) by smtp2web.tin.it (8.5.113)05: ID: [ID filtered]
X-Originating-IP: 41.184.6.30 ---> 41-184-6-30.rv.ipnxtelecoms.com/ipNX, Nigeria
hsbcbank2010@blumail.org
header:01: Received: from smtpgate3.pacific.net.sg (smtpgate3.pacific.net.sg02: [203.81.36.33])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)05: Received: (qmail 18053 invoked from network); 20 Mar 2010 xx:xx:xx -000006: Received: from unknown (HELO mail.pacific.net.sg)07: (eelt [at] pacific.net.sg@93.174.138.75)08: by smtpgate3.pacific.net.sg with ESMTPA; 20 Mar 2010 xx:xx:xx -0000
fcmbank@mail.mn
hightower_25@hotmail.com
header:01: Received: from mail.inorogul.ro (mail.inorogul.ro [86.121.32.176])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sun, 21 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from User (unknown [41.217.65.14])05: by mail.inorogul.ro (Postfix) with ESMTP ID: [ID filtered]06: Sat, 20 Mar 2010 xx:xx:xx +0200 (EET)
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
a.fatouma101@gmail.com
a.fatouma102@gmail.com
Muguphon: +229-96144885 ---> mobile number, Benin
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Neues aus der Mugu-Küche:
header:01: Received: from unknown (EHLO intzvill.com) [221.143.46.154]02: by mx0.gmx.net (mx116) with SMTP; 22 Mar 2010 xx:xx:xx +010003: Received: from User (www.zmmae.gov.tr [81.215.14.21])04: (authenticated bits=0)05: by intzvill.com (8.13.8/8.13.8) with ESMTP ID: [ID filtered]06: Mon, 22 Mar 2010 xx:xx:xx +0900
markjam1@administrativos.com
Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.
header:01: Received: from mail.ncsamericas.com (EHLO ncsamericas.com) [146.82.90.20]02: by mx0.gmx.net (mx007) with SMTP; 23 Mar 2010 xx:xx:xx +010003: Received: (qmail 8237 invoked from network); 17 Mar 2010 xx:xx:xx -040004: Received: from unknown (HELO User) (41.217.65.13)05: by pbc.cl with SMTP; 17 Mar 2010 xx:xx:xx -0400
IP: 41.217.65.13 --> ZOOM Mobile Nigeria Ltd.
ma7766731@yahoo.cn
header:01: Received: from smtpgate2.pacific.net.sg (smtpgate2.pacific.net.sg02: [203.120.90.32])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Tue, 23 Mar 2010 xx:xx:xx +0100 (CET)05: Received: (qmail 21415 invoked from network); 22 Mar 2010 xx:xx:xx -000006: Received: from unknown (HELO pacific.net.sg)07: (jhpl [at] pacific.net.sg@124.160.67.70)08: by smtpgate2.pacific.net.sg with ESMTPA; 22 Mar 2010 xx:xx:xx -0000
IP: 124.160.67.70 ---> China Unicom Zhejiang
revpatrickelvis104@gmail.com
revpatrickelvis101@gmail.com
revpatrickelvis103@gmail.com
header:01: Received: from bowang.net (unknown [61.135.149.42])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Tue, 23 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from User ([41.217.65.13])05: (envelope-sender <capital_manager [at] yahoo.com>)06: by 61.135.149.42 with ESMTP07: for <poor [at] spamvictim.tld>; Tue, 23 Mar 2010 xx:xx:xx +0800
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd. (siehe oben, da treten sich die Mugus im Café wohl die Füsse platt...)
mrsadiqalman_ngr@inMail24.com
capital_manager@yahoo.com
Muguphon: +234 702 986 5890 ---> Starcomms PLC, Nigeria
header:01: Received: from webmail.enter.net (www.entermail.net [216.193.128.33])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 22 Mar 2010 xx:xx:xx +0100 (CET)04: Received: by webmail.enter.net (Postfix, from userID: [ID filtered]05: ID: [ID filtered]06: Received: from webmail.enter.net (www.entermail.net [216.193.128.33])07: by webmail.enter.net (Postfix) with ESMTP ID: [ID filtered]08: Mon, 22 Mar 2010 xx:xx:xx -0400 (EDT)
X-OriginatingIP: 120.29.240.2 (amadaday) ---> 240-2.tasmanet.com.au
mrssandrakorjev@kimo.com
header:01: Received: from unknown (HELO pop.cheayu.com) [61.28.41.51]02: by mx0.gmx.net (mx022) with SMTP; 23 Mar 2010 xx:xx:xx +010003: Received: from User ([82.128.25.82])04: (envelope-sender <ezewilliamoffice [at] terra.es>)05: by 192.168.1.1 with ESMTP06: for <poor [at] spamvictim.tld>; Tue, 23 Mar 2010 xx:xx:xx +0800
IP: 82.128.25.82 ---> MULTILINKS NETWORK & SYSTEM INFRASTRUCTURE - SUBNET 1, NG
ezewilliam7410@yahoo.com.hk
ezewilliamoffice@terra.es
Muguphon: +234-706-292-3142 ---> MTN Nigeria Communications Ltd.
gecrackter T-Offline Account:
header:01: Received: from mailout04.t-online.de (mailout04.t-online.de [194.25.134.18])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 23 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from fwd03.aul.t-online.de (fwd03.aul.t-online.de )05: by mailout04.t-online.de with smtp06: ID: [ID filtered]07: Received: from User08: (Vmij0MZXwt2xQhESUkfBwYPBJMnGGvdt1+1dqOnX5yYhc+1XgAOBlys83JDBnYINC493msq4Rz@[24.102.192.36&09: 93;)10: by fwd03.t-online.de11: with esmtp ID: [ID filtered]
IP: 24.102.192.36 ---> 24.102.192.36.res-cmts.tv13.ptd.net
morgansherrym12@yahoo.com.hk
francis2@wq0nzg3vk.homepage.t-online.de
Muguphon: +44 70 240 63740 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44 84 477 42856 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from host2host.com (host2host.com [216.117.164.247])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 24 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from User [82.128.70.148] by host2host.com with ESMTP05: (SMTPD32-8.05) ID: [ID filtered]
IP: 82.128.70.148 ---> Multilinks Telecommunications Limited, Nigeria
michealmoore200@gamil.com
Tja, wenn der Mugu zu blöd ist, die Adresse richtig zu schreiben hier noch einmal:
michealmoore200@gmail.com
header:01: Received: from user-kjr0o2k4ii.dailysteel.com (unknown [116.228.63.243])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 24 Mar 2010 xx:xx:xx +0100 (CET)04: Received: from User ([69.64.92.202]) by user-kjr0o2k4ii.dailysteel.com05: with Microsoft SMTPSVC(6.0.3790.3959);06: Wed, 24 Mar 2010 xx:xx:xx +0800
IP: 69.64.92.202 ---> 69-64-92-202.dedicated.abac.net
paulmarshall56@hotmail.com
paulmarsh423@live.com
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Lesezeichen