Mugu Dubletten

**kjz1** · 18.02.2013, 19:26

Eine neue Mugu-Runde...

Der Dumm-Mugu versucht es via Wörterbuch und Brute Force:

header:

01: Received: from sms.etam.com.cn (mail.eischina.cn [58.246.226.154])
02: 	by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0100
05: X-AuditID: [ID filtered]
06: Received: from etam_gate2.ecn.com (Unknown_Domain [192.168.3.2])
07: 	by sms.etam.com.cn (Symantec Messaging Gateway) with SMTP id
08: 87.AA.03717.584C9115; Tue, 12 Feb 2013 xx:xx:xx +0800 (HKT)
09: To: undisclosed-recipients:;
10: Received: from User ([197.242.112.245]) by etam_gate2.ecn.com with
11: Microsoft SMTPSVC(6.0.3790.4675);
12: 	 Tue, 12 Feb 2013 xx:xx:xx +0800

header:

01: Received: from sms.etam.com.cn ([61.152.161.169]) by mx-ha.gmx.net
02: (mxgmx009)
03:  with ESMTP (Nemesis) ID: [ID filtered]
04:  Feb 2013 xx:xx:xx +0100
05: X-AuditID: [ID filtered]
06: Received: from etam_gate2.ecn.com (Unknown_Domain [192.168.3.2])
07: 	by sms.etam.com.cn (Symantec Messaging Gateway) with SMTP id
08: 87.AA.03717.584C9115; Tue, 12 Feb 2013 xx:xx:xx +0800 (HKT)
09: To: undisclosed-recipients:;
10: Received: from User ([197.242.112.245]) by etam_gate2.ecn.com with
11: Microsoft SMTPSVC(6.0.3790.4675);
12: 	 Tue, 12 Feb 2013 xx:xx:xx +0800

header:

01: Received: from sms.etam.com.cn ([58.246.226.154]) by mx-ha.gmx.net
02: (mxgmx102)
03:  with ESMTP (Nemesis) ID: [ID filtered]
04:  Feb 2013 xx:xx:xx +0100
05: X-AuditID: [ID filtered]
06: Received: from etam_gate2.ecn.com (Unknown_Domain [192.168.3.2])
07: 	by sms.etam.com.cn (Symantec Messaging Gateway) with SMTP id
08: 87.AA.03717.584C9115; Tue, 12 Feb 2013 xx:xx:xx +0800 (HKT)
09: To: undisclosed-recipients:;
10: Received: from User ([197.242.112.245]) by etam_gate2.ecn.com with
11: Microsoft SMTPSVC(6.0.3790.4675);
12: 	 Tue, 12 Feb 2013 xx:xx:xx +0800

IP: 197.242.112.245 ---> SPECTRANET LIMITED, Nigeria

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

header:

01: Received: from mout.perfora.net ([74.208.4.195]) by mx-ha.gmx.net (mxgmx003)
02:  with ESMTP (Nemesis) ID: [ID filtered]
03:  Feb 2013 xx:xx:xx +0100
04: Received: from winxedgeus02.exchange.xchg (winxedgeus02.lxa.perfora.net
05: [172.23.130.34])
06: 	by mrelay.perfora.net (node=mrus3) with ESMTP (Nemesis)
07: 	ID: [ID filtered]
08: Received: from winxhubus02.exchange.xchg (172.23.130.14) by
09:  winxedgeus02.exchange.xchg (172.23.130.34) with Microsoft SMTP Server (TLS)
10:  ID: [ID filtered]
11: Received: from WINXBEUS26.exchange.xchg ([172.23.130.69]) by
12:  winxhubus02.exchange.xchg ([172.23.130.14]) with mapi; Tue, 12 Feb 2013
13:  xx:xx:xx -0500

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

header:

01: Received: from mv-osn-hcb008.ocn.ad.jp ([118.23.100.201]) by mx-ha.gmx.net
02:  (mxgmx104) with ESMTP (Nemesis) ID: [ID filtered]
03:  Mon, 11 Feb 2013 xx:xx:xx +0100
04: Received: from vcfeel.ocn.ne.jp (mv-osn-hcb008 [118.23.100.201])
05: 	by mv-osn-hcb008.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
07: Received: from User (p31061-ipngn1601hodogaya.kanagawa.ocn.ne.jp
08: [180.0.60.61])
09: 	by vcfeel.ocn.ne.jp (Postfix) with ESMTP;
10: 	Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)

header:

01: Received: from defer115.ocn.ad.jp (defer115.ocn.ad.jp [125.206.148.13])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 12 Feb 2013 xx:xx:xx +0100 (CET)
04: Received: from mv-osn-hcb007.ocn.ad.jp (mv-osn-hcb007.ocn.ad.jp
05: [118.23.180.69])
06: 	by defer115.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
08: Received: from vcgold.ocn.ne.jp (mv-osn-hcb007 [118.23.180.69])
09: 	by mv-osn-hcb007.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
10: 	Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
11: Received: from User (p1174-ipbfp2905tokaisakaetozai.aichi.ocn.ne.jp
12: [114.171.40.174])
13: 	by vcgold.ocn.ne.jp (Postfix) with ESMTP;
14: 	Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

header:

01: Received: from ip-9-125.sn-212-110.eutelia.it ([212.110.9.125]) by
02:  mx-ha.gmx.net (mxgmx113) with ESMTP (Nemesis) id
03: 0LlZ87-1UfM8K0fG3-00bGCo for xxxxx; Tue, 12 Feb 2013 xx:xx:xx +0100

[Link nur für registrierte Mitglieder sichtbar. ]

wieder im Portfolio:

header:

01: Received: from User (johnson_us4556 [at] 216.38.33.199 with login)
02:         by smtp219.mail.gq1.yahoo.com with SMTP; 13 Feb 2013 xx:xx:xx
03: -0800 PST

IP: 216.38.33.199 ---> hct-bb.216.38.33.199.redwing.net

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

**kjz1** · 25.02.2013, 15:08

Einen alten Bekannten hab' ich noch:

header:

01: Received: from User (johnson_us4556 [at] 216.38.33.199 with login)
02:         by smtp219.mail.gq1.yahoo.com with SMTP; 13 Feb 2013 xx:xx:xx -0800 PST

IP: 216.38.33.199 ---> hct-bb.216.38.33.199.redwing.net

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

**kjz1** · 02.03.2013, 16:55

Zur Komplettierung der Sammlung:

header:

01: Received: from moutng.kundenserver.de (moutng.kundenserver.de
02: [212.227.126.186])
03: 	(using TLSv1 with cipher RC4-SHA (128/128 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Thu, 21 Feb 2013 xx:xx:xx +0100 (CET)
07: Received: from icpu1016.kundenserver.de (infong106.kundenserver.de
08: [212.227.118.34])
09: 	by mrelayeu.kundenserver.de (node=mreu0) with ESMTP (Nemesis)
10: 	ID: [ID filtered]
11: Received: from 41.190.2.99 (IP may be forged by CGI script)
12:     by icpu1016.kundenserver.de with HTTP
13:     ID: [ID filtered]

IP: 41.190.2.99 ---> EMTS Limited / Etisalat Nigeria

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

header:

01: Received: from defer115.ocn.ad.jp ([125.206.148.13]) by mx-ha.gmx.net
02:  (mxgmx001) with ESMTP (Nemesis) ID: [ID filtered]
03:  Sun, 24 Feb 2013 xx:xx:xx +0100
04: Received: from mv-osn-hcb006.ocn.ad.jp (mv-osn-hcb006.ocn.ad.jp
05: [60.37.51.254])
06: 	by defer115.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 25 Feb 2013 xx:xx:xx +0900 (JST)
08: Received: from vcroom.ocn.ne.jp (mv-osn-hcb006 [60.37.51.254])
09: 	by mv-osn-hcb006.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
10: 	Mon, 25 Feb 2013 xx:xx:xx +0900 (JST)
11: Received: from User (p6095-ipngn301kokuryo.gunma.ocn.ne.jp [114.159.101.95])
12: 	by vcroom.ocn.ne.jp (Postfix) with ESMTP;
13: 	Mon, 25 Feb 2013 xx:xx:xx +0900 (JST)

header:

01: Received: from defer113.ocn.ad.jp (defer113.ocn.ad.jp [122.28.15.167])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 25 Feb 2013 xx:xx:xx +0100 (CET)
04: Received: from mv-osn-hcb005.ocn.ad.jp (mv-osn-hcb005.ocn.ad.jp
05: [222.146.51.141])
06: 	by defer113.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Mon, 25 Feb 2013 xx:xx:xx +0900 (JST)
08: Received: from vcroom.ocn.ne.jp (mv-osn-hcb005 [222.146.51.141])
09: 	by mv-osn-hcb005.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
10: 	Mon, 25 Feb 2013 xx:xx:xx +0900 (JST)
11: Received: from User (p5014-ipbfp401sizuokaden.shizuoka.ocn.ne.jp
12: [222.144.213.14])
13: 	by vcroom.ocn.ne.jp (Postfix) with ESMTP;
14: 	Mon, 25 Feb 2013 xx:xx:xx +0900 (JST)

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Mugufax: +1 646-564-9095 ---> Peerless Network Of New York, Llc - Ny

**kjz1** · 04.03.2013, 09:56

Und wieder mal nach Mugu-Art;

die Madrid-Konnektion mit den imaginären Gewinnspielen:

header:

01: Received: from User (europrom881 [at] 183.221.13.251 with login)
02:         by smtp160.mail.ir2.yahoo.com with SMTP; 26 Feb 2013 xx:xx:xx +0000 UTC

IP: 183.221.13.251 ---> China Mobile Communications

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +34-602-334368 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692918 ---> Colt Technology Services, S.a. Unipersonal, Espana

header:

01: Received: from minicooper.dnshostcentral.com
02: (minicooper.dnshostcentral.com [92.48.90.132])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Thu, 21 Feb 2013 xx:xx:xx +0100 (CET)
07: DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
08: d=andolite.co.uk; s=default;
09: 	h=Date:Subject:To:From:Content-Type:Message-ID;
10: bh=K6lwnHMG8Q6ACW2Fzo+1hDwwBZw7XbLcYAAuLuXLCu4=;
11: 	b=CA7BkCKZ9BNezTQkwl0ezWuZfFlFwT69QRFhpJkxPUK1arZopx42kKjjVoX4k/Ow11iO8IZMfYDFAEBtAoif/+SyKvTP
12: 	J1XF1oFQ+aA68J+F+ctghBWOI5Y7N+T07VW;
13: Received: from [195.225.58.94] (port=34336 helo=localhost)
14: 	by minicooper.dnshostcentral.com with esmtpa (Exim 4.80)
15: 	(envelope-from <steve [at] andolite.co.uk>)
16: 	ID: [ID filtered]

gecrackt: [Link nur für registrierte Mitglieder sichtbar. ]

header:

01: Received: from mail.vhw.org
02: (70-90-121-196-BusName-illinois-il.hfc.comcastbusiness.net [70.90.121.196])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 27 Feb 2013 xx:xx:xx +0100 (CET)
05: Received: from User ([91.108.178.138] RDNS failed) by mail.vhw.org with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Wed, 27 Feb 2013 xx:xx:xx -0600

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

**kjz1** · 11.03.2013, 15:00

Es mugut wieder:

header:

01: Received: from mu.ac.in ([121.241.25.92]) by mx-ha.gmx.net (mxgmx106) with
02:  ESMTP (Nemesis) ID: [ID filtered]
03:  2013 xx:xx:xx +0100
04: Received: (qmail 19668 invoked by UID: [UID filtered]
05: Received: from 172.16.1.80 by mail (envelope-from
06: <anitashaw196 [at] e-mail.ua>, UID: [UID filtered]
07:  (spamassassin: 3.1.7-deb. perlscan: 1.25st.
08:  Clear:RC:1(172.16.1.80):.
09:  Processed in 0.261928 secs); 05 Mar 2013 xx:xx:xx -0000
10: Received: from unknown (HELO User) (support@[172.16.1.80])
11:           (envelope-sender <poor [at] spamvictim.tld>)
12:           by mu.ac.in (qmail-ldap-1.03) with SMTP
13:           for <poor [at] spamvictim.tld>; 5 Mar 2013 xx:xx:xx -0000

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

ein völlig merkbefreiter Spamfilter....

header:

01: Received: from antispam.aslrmc.it
02: (host61-105-static.43-193-b.business.telecomitalia.it [193.43.105.61])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue,  5 Mar 2013 xx:xx:xx +0100 (CET)
05: X-AuditID: [ID filtered]
06: Received: from RMC_EXC1.aslrmc.it (Unknown_Domain [10.63.2.26])
07: 	by  (Symantec Mail Security) with SMTP ID: [ID filtered]
08: Mar 2013 xx:xx:xx +0100 (CET)

gecrackt: [Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

die Madrid-Konnektion:

header:

01: Received-SPF: softfail (mxbap1: transitioning domain of hotmail.com does
02: not designate 70.62.123.34 as permitted sender) client-ip=70.62.123.34;
03: envelope-from=ruoxzcu [at] hotmail.com; helo=mx4.hotmail.com;
04: Received: from mx4.hotmail.com (rrcs-70-62-123-34.midsouth.biz.rr.com
05: [70.62.123.34])
06: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
07: 	ID: [ID filtered]
08: xx:xx:xx +0100

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +34 631 203 603 ---> Lycamobile, S.l., Espana

Mugufax: +34 917 903 963 ---> Colt Technology Services, S.a. Unipersonal

Und weil 'James' so gierig ist, kann er sich noch nicht einmal eine Adressliste leisten, sondern versucht es mit Brute Force:

header:

01: Received-SPF: pass (mxeu5: domain of ladylee.com designates
02: 204.181.52.250 as permitted sender) client-ip=204.181.52.250;
03: envelope-from=helpdesk [at] ladylee.com; helo=serverdc1.ladylee.com;
04: Received: from serverdc1.ladylee.com (mail.ladylee.com [204.181.52.250])
05: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
06: 	ID: [ID filtered]
07: xx:xx:xx +0100
08: Received: from User ([75.99.126.134]) by serverdc1.ladylee.com with
09: Microsoft SMTPSVC(6.0.3790.4675);
10: 	 Wed, 6 Mar 2013 xx:xx:xx -0600

header:

01: Received: from serverdc1.ladylee.com ([204.181.52.250]) by mx-ha.gmx.net
02:  (mxgmx002) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User ([75.99.126.134]) by serverdc1.ladylee.com with
04: Microsoft SMTPSVC(6.0.3790.4675);
05: 	 Wed, 6 Mar 2013 xx:xx:xx -0600

header:

01: Received: from serverdc1.ladylee.com ([204.181.52.250]) by mx-ha.gmx.net
02:  (mxgmx106) with ESMTP (Nemesis) ID: [ID filtered]
03:  Thu, 07 Mar 2013 xx:xx:xx +0100
04: Received: from User ([75.99.126.134]) by serverdc1.ladylee.com with
05: Microsoft SMTPSVC(6.0.3790.4675); 	 Wed, 6 Mar 2013 xx:xx:xx -0600

IP: 75.99.126.134 ---> ool-4b637e86.static.optonline.net

gecrackt: [Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

der Sternchen-Mugu:

header:

01: Received: from mail.pauljohn.com.au ([202.129.124.168]) by mx-ha.gmx.net
02:  (mxgmx101) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User ([74.95.225.81]) by mail.pauljohn.com.au with
04: Microsoft SMTPSVC(6.0.3790.4675);
05: 	 Thu, 7 Mar 2013 xx:xx:xx +1100

IP: 74.95.225.81 ---> 74-95-225-81-Houston.hfc.comcastbusiness.net

[Link nur für registrierte Mitglieder sichtbar. ]

*Attn: Sir/Ma'*
**

**kjz1** · 11.03.2013, 19:33

Und noch etwas Nachschub:

header:

01: Received: from pdaserver.PDA.local
02: (adsl-072-151-137-124.sip.mco.bellsouth.net [72.151.137.124])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 10 Mar 2013 xx:xx:xx +0100 (CET)
05: Received: from User ([46.29.255.214]) by pdaserver.PDA.local with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Sat, 9 Mar 2013 xx:xx:xx -0500

IP: 46.29.255.214 ---> server.productredirectclienta.info

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Auch Yahoo kommt dem Kriminellen zur Hilfe:

header:

01: Received: from User (salehabu20011 [at] 46.29.255.214 with login)
02:         by smtp208.mail.ne1.yahoo.com with SMTP; 10 Mar 2013 xx:xx:xx
03: -0700 PDT

**kjz1** · 25.03.2013, 14:51

Als Mugu müssen sich unbedingt outen:

header:

01: Received: from mail.pekiin.com (unknown [212.179.114.26])
02: 	(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Tue, 19 Mar 2013 xx:xx:xx +0100 (CET)
06: Received: from User ([2.115.231.102])
07:         by mail.pekiin.com (Merak 8.0.3) with ASMTP ID: [ID filtered]
08:         Sun, 17 Mar 2013 xx:xx:xx +0200

IP: 2.115.231.102 ---> host102-231-static.115-2-b.business.telecomitalia.it

[Link nur für registrierte Mitglieder sichtbar. ]

header:

01: Received: from [204.93.60.160] by web5705.biz.mail.ne1.yahoo.com via
02: HTTP; Tue, 19 Mar 2013 xx:xx:xx PDT

header:

01: Received: from [204.93.60.160] by web5706.biz.mail.ne1.yahoo.com via
02: HTTP; Tue, 19 Mar 2013 xx:xx:xx PDT

IP: 204.93.60.160 ---> nLayer

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +277 190846928 ---> MTN, South Africa

header:

01: Received: from fepna01-svc.tim.it ([217.200.184.87]) by mx-ha.gmx.net
02:  (mxgmx002) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User ([109.53.204.48]) by fepna07-svc.tim.it
04:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
05:           ID: [ID filtered]
06:           Wed, 20 Mar 2013 xx:xx:xx +0100

IP: 109.53.204.48 ---> Telecom Italia Mobile

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +39 389 231 0576 ---> Wind Telecomunicazioni S.p.A., Italia

**kjz1** · 01.04.2013, 14:54

Die Oster-Mugus:

header:

01: Received: from mail.homenet.com.ua (mail.homenet.com.ua [193.151.12.133])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 29 Mar 2013 xx:xx:xx +0100 (CET)
04: Received: from localhost (mail.homenet.com.ua [127.0.0.1])
05: 	by mail.homenet.com.ua (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 26 Mar 2013 xx:xx:xx +0200 (EET)
07: Received: from mail.homenet.com.ua ([127.0.0.1])
08: 	by localhost (mail.homenet.com.ua [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from User (laurents.lauren.com [66.77.200.7])
11: 	by mail.homenet.com.ua (Postfix) with ESMTP ID: [ID filtered]
12: 	Tue, 26 Mar 2013 xx:xx:xx +0200 (EET)

IP: 66.77.200.7 ---> QWEST-OSU-LAUREN

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Text war im Betreff:

header:

01: Received: from oms-mb01.r1000.mx.aol.com ([64.12.102.137]) by mx-ha.gmx.net
02:  (mxgmx010) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from mtaout-mb01.r1000.mx.aol.com
04: (mtaout-mb01.r1000.mx.aol.com [172.29.41.65])
05: 	by oms-mb01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
06: 05AC41C001412;
07: 	Fri, 29 Mar 2013 xx:xx:xx -0400 (EDT)
08: Received: from bhcfw-pss01.BHCFW.COM
09: (static-68-162-220-61.bos.east.verizon.net [68.162.220.61])
10: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
11: 	(No client certificate requested)
12: 	by mtaout-mb01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
13: ESMTPSA ID: [ID filtered]
14: 	Fri, 29 Mar 2013 xx:xx:xx -0400 (EDT)

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +2347062212143 ---> MTN Nigeria Communications Ltd.

Text wieder im Betreff, wahrscheinlich wieder derselbe Mugu:

header:

01: Received: from oms-mb04.r1000.mx.aol.com ([64.12.102.140]) by mx-ha.gmx.net
02:  (mxgmx011) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from mtaout-mb02.r1000.mx.aol.com
04: (mtaout-mb02.r1000.mx.aol.com [172.29.41.66])
05: 	by oms-mb04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
06: 7DE8B1C001B27;
07: 	Sat, 30 Mar 2013 xx:xx:xx -0400 (EDT)
08: Received: from [192.168.12.30]
09: (108-215-4-200.lightspeed.austtx.sbcglobal.net [108.215.4.200])
10: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
11: 	(No client certificate requested)
12: 	by mtaout-mb02.r1000.mx.aol.com (MUA/Third Party Client Interface) with
13: ESMTPSA ID: [ID filtered]
14: 	Sat, 30 Mar 2013 xx:xx:xx -0400 (EDT)

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +1-520-505-6247 ---> Electric Lightwave, Llc Dba Integra Telecom - Az

der Sternchen-Mugu:

header:

01: Received: from server1-sbs.Canpet.local ([63.250.108.85]) by mx-ha.gmx.net
02:  (mxgmx013) with ESMTP (Nemesis) ID: [ID filtered]
03: Service
04: Received: from User ([23.25.221.145]) by server1-sbs.Canpet.local with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sat, 30 Mar 2013 xx:xx:xx -0400

IP: 23.25.221.145 ---> 23-25-221-145-static.hfc.comcastbusiness.net

[Link nur für registrierte Mitglieder sichtbar. ]

*MR. MAXWELL WHITE,*
*ECONOMIC COMMUNITY*
*OF WEST AFRICAN STATES*
*ECOWAS HEAD OFFICE*

Muguphon: +234 8037377277 ---> MTN Nigeria Communications Ltd.

und wieder derselbe Mugu, wieder dieselbe Dreckskiste bei Spamcast:

header:

01: Received: from machikon.co ([157.7.163.33]) by mx-ha.gmx.net (mxgmx110) with
02:  ESMTP (Nemesis) ID: [ID filtered]
03:  2013 xx:xx:xx +0200 
04: Received: from User (23-25-221-145-static.hfc.comcastbusiness.net
05: [23.25.221.145])
06: 	by machikon.co (Postfix) with ESMTPA ID: [ID filtered]
07: 	Mon,  1 Apr 2013 xx:xx:xx +0900 (JST)

gecrackt: [Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +234-80-73779010 ---> Globacom Ltd., Nigeria

**kjz1** · 02.04.2013, 13:24

Einen hätt' ich noch:

header:

01: Received: from ifto.edu.br ([187.4.65.141]) by mx-ha.gmx.net (mxgmx012) with
02:  ESMTP (Nemesis) ID: [ID filtered]
03: Received: by ifto.edu.br (Postfix, from userID: [ID filtered]

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

**kjz1** · 08.04.2013, 12:56

Und noch 'nen Mugu mit Smartphone:

header:

01: Received: from fepna03-svc.tim.it ([217.200.184.87]) by mx-ha.gmx.net
02:  (mxgmx007) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User ([176.200.198.206]) by fepna03-svc.tim.it  (InterMail
04: 	vM.6.01.06.03 201-2131-130-104-20060516) with SMTP ID: [ID filtered]

IP: 176.200.198.206 ---> Telecom Italia Mobile

[Link nur für registrierte Mitglieder sichtbar. ]

[Link nur für registrierte Mitglieder sichtbar. ]

Muguphon: +39 340 310 7827 ---> Vodafone S.p.A., Italia

Thema: Mugu Dubletten

Themen-Optionen

Anzeige

Lesezeichen

Lesezeichen

Berechtigungen