Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

Alle meine Mugus, Teil 2:

header:

01: Received: from dns.adwic.co.jp (www.adwic.co.jp [58.13.180.92])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  3 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from User (mail.pdeeco.com [66.28.30.14])
05: 	by dns.adwic.co.jp (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  3 May 2010 xx:xx:xx +0900 (JST)

header:

01: Received: from host-89-144-99-130.nashirnet.com (EHLO vip.nashirnet.com)
02: [89.144.99.130]
03:   by mx0.gmx.net (mx092) with SMTP; 03 May 2010 xx:xx:xx +0200
04: Received: from apache by vip.nashirnet.com with local (Exim 4.67)
05: 	(envelope-from <mkdyt556 [at] ghzl.com>)
06: 	ID: [ID filtered]
07: 	for xxxxx Mon, 03 May 2010 xx:xx:xx +0000

Muguphon: +447024035686 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from smtpout6.poczta.onet.pl (EHLO smtpout6.poczta.onet.pl)
02: [213.180.147.166]
03:   by mx0.gmx.net (mx058) with SMTP; 03 May 2010 xx:xx:xx +0200
04: Received: from [125.71.28.237] ([125.71.28.237]:2560 "EHLO
05: 	kate34"
06: 	rhost-flags-FAIL-FAIL-OK-FAIL) by ps2.m5r2.onet with ESMTPA
07: 	ID: [ID filtered]
08: 	Mon, 3 May 2010 xx:xx:xx +0200

IP: 125.71.28.237 ---> CHINANET Sichuan

Muguphon: +447045744070 ---> Open Telecom International Ltd., UK

header:

01: Received: from ns.naturatins.to.gov.br (ns.naturatins.to.gov.br
02: [200.163.75.105])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue,  4 May 2010 xx:xx:xx +0200 (CEST)
05: Received: from localhost (localhost [127.0.0.1])
06: 	by ns.naturatins.to.gov.br (Postfix) with ESMTP ID: [ID filtered]
07: 	Tue,  4 May 2010 xx:xx:xx -0300 (BRT)
08: X-Virus-Scanned: Debian amavisd-new at email.naturatins.to.gov.br
09: Received: from ns.naturatins.to.gov.br ([127.0.0.1])
10: 	by localhost (ns.naturatins.to.gov.br [127.0.0.1]) (amavisd-new, port
11: 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from naturatins.to.gov.br (localhost [127.0.0.1])
14: 	by ns.naturatins.to.gov.br (Postfix) with ESMTP ID: [ID filtered]
15: 	Tue,  4 May 2010 xx:xx:xx -0300 (BRT)

X-OriginatingIP: 41.138.178.52 (murilo) ---> Visafone Communications Limited, Nigeria

header:

01: Received: from mo5.mail.sc.edu (mo5.mail.sc.edu [129.252.158.29])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  4 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from mo5.mail.sc.edu (127.0.0.1) by mo5.mail.sc.edu (MlfMTA
05: v3.2r9) ID: [ID filtered]
06: xx:xx:xx -0400 (envelope-from <CBWILLIA [at] mailbox.sc.edu>)
07: Received: from cae145erlp01.ds.sc.edu ([172.27.7.166])
08: 	by mo5.mail.sc.edu (SonicWALL 7.2.1.2843)
09: 	with ESMTP (AIO); Tue, 04 May 2010 xx:xx:xx -0400
10: Received: from CAE145EVSP02.ds.sc.edu ([172.27.7.14]) by
11: cae145erlp01.ds.sc.edu with Microsoft SMTPSVC(6.0.3790.4675);
12: 	 Tue, 4 May 2010 xx:xx:xx -0400

header:

01: Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.46])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  4 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2101.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue,  4 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2101.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue,  4 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (AAmiens-156-1-4-245.w90-7.abo.wanadoo.fr [90.7.59.245])
11: 	by mwinf2101.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue,  4 May 2010 xx:xx:xx +0200 (CEST)

Muguphon: +447011140935 ---> PNC Telecom Services Limited, UK

Mugufax: +447077081751 ---> Digital Mail Limited, UK

header:

01: Received: from omr-d32.mx.aol.com (omr-d32.mx.aol.com [205.188.249.130])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  5 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from oms-db01.r1000.mx.aol.com (oms-db01.r1000.mx.aol.com
05: [205.188.58.1])
06: 	by omr-d32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Tue, 4 May 2010 xx:xx:xx -0400
08: Message-ID: [ID filtered]
09: Received: from mtaout-db01.r1000.mx.aol.com
10: (mtaout-db01.r1000.mx.aol.com [172.29.51.193])
11: 	by oms-db01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 50F151C00EACF;
13: 	Tue,  4 May 2010 xx:xx:xx -0400 (EDT)
14: Received: from User (unknown [41.189.2.71])
15: 	by mtaout-db01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: 	Tue,  4 May 2010 xx:xx:xx -0400 (EDT)

IP: 41.189.2.71 ---> SWIFT NETWORKS, Nigeria

- kjz

07.05.2010, 13:14
Fidul

Zitat:

Zitat von kjz1

Ist gestern verstorben worden. :D

Zitat:

Zitat von kjz1

Muguphon: +447011140935 ---> PNC Telecom Services Limited, UK
Mugufax: +447077081751 ---> Digital Mail Limited, UK

War das wieder Format, bloß jetzt mit der neuen Domain als Reply-To?
07.05.2010, 14:22
kjz1

Zitat:

Zitat von Fidul

Ist gestern verstorben worden.

Warum wohl..... ;)

Zitat:

Zitat von Fidul

War das wieder Format, bloß jetzt mit der neuen Domain als Reply-To?

Ja, genau diese Masche.

- kjz

Und immer, immer wieder schlägt der Mugu zu....

Auch Tor läßt sich missbrauchen:

header:

01: Received: from dasrv03.hosted.net.my (dasrv03.hosted.net.my
02: [202.186.153.88])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Fri,  7 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from apache by dasrv03.hosted.net.my with local (Exim 4.60)
08: 	(envelope-from <l.kee [at] hkbea.com.sg>)
09: 	ID: [ID filtered]
10: Received: from gpftor2.privacyfoundation.de (gpftor2.privacyfoundation.de
11: 	[87.118.101.175]) by webmail.sainc.com.my (Horde MIME library) with HTTP;
12: 	Fri, 07 May 2010 xx:xx:xx +0800

Und Horde:

header:

01: Received: from dasrv03.hosted.net.my (dasrv03.hosted.net.my
02: [202.186.153.88])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Fri,  7 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from apache by dasrv03.hosted.net.my with local (Exim 4.60)
08: 	(envelope-from <l.kee [at] hkbea.com.sg>)
09: 	ID: [ID filtered]
10: Received: from anonymizer.blutmagie.de (anonymizer.blutmagie.de
11: 	[192.251.226.205]) by webmail.sainc.com.my (Horde MIME library) with HTTP;
12: 	Fri, 07 May 2010 xx:xx:xx +0800

header:

01: Received: from metis.sjsu.edu (metis.sjsu.edu [130.65.3.15])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  8 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from cobmail-main.cob.sjsu.edu (cobmail-main.sjsu.edu
05: [130.65.2.16])
06: 	by metis.sjsu.edu (8.12.10+Sun/8.13.1) with ESMTP ID: [ID filtered]
07: 	Fri, 7 May 2010 xx:xx:xx -0700 (PDT)
08: Received: from cobmail-infstore.cob.sjsu.edu ([130.65.2.34]) by
09: cobmail-main.cob.sjsu.edu with Microsoft SMTPSVC(6.0.3790.4675);
10: 	 Fri, 7 May 2010 xx:xx:xx -0700

Muguphon: +44 702 409 6449 ---> Magrathea Telecommunications Limited, UK

die türkische Dreckskiste ist schon seit Wochen undicht (oder verdient sich da
der Admin was nebenbei?)

header:

01: Received: from mail.magnezi.co.il (EHLO magnezi.co.il) [212.150.167.212]
02:   by mx0.gmx.net (mx102) with SMTP; 07 May 2010 xx:xx:xx +0200
03: Received: from User ([81.215.14.21] RDNS failed) by magnezi.co.il with
04: Microsoft SMTPSVC(6.0.3790.4675);
05: 	 Tue, 4 May 2010 xx:xx:xx +0300

IP: 81.215.14.21 ---> ^whois:

Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.

gecracktes Horde:

header:

01: Received: from cloud.smokyhosts.net (unknown [69.167.140.24])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sat,  8 May 2010 xx:xx:xx +0200 (CEST)
06: Received: from localhost ([127.0.0.1]:34650)
07: 	by cloud.smokyhosts.net with esmtpa (Exim 4.69)
08: 	(envelope-from <hsbcbankplclondon02 [at] yahoo.co.uk>)
09: 	ID: [ID filtered]
10: Received: from 41.189.2.7 ([41.189.2.7]) by cartoonzone.co.tv (Horde MIME
11: 	library) with HTTP; Wed, 05 May 2010 xx:xx:xx -0400

IP: 41.189.2.7 ---> SWIFT NETWORKS IP RANGE FOR OKOTA DHCP CLIENT, Nigeria

Muguphon: +44 70 24 082 786 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from unknown (EHLO dns.caes.tc.edu.tw) [140.128.209.129]
02:   by mx0.gmx.net (mx118) with SMTP; 09 May 2010 xx:xx:xx +0200
03: Received: from dns.caes.tc.edu.tw (localhost [127.0.0.1])
04: 	by dns.caes.tc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
05: 	Sun,  9 May 2010 xx:xx:xx +0800 (CST)
06: Received: from mail.caes.tc.edu.tw (localhost [127.0.0.1])
07: 	by dns.caes.tc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
08: 	Sun,  9 May 2010 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.217.66.5 (an750) ---> ZOOM Mobile Nigeria Ltd.

header:

01: Received: from smtp23.services.sfr.fr (EHLO smtp23.services.sfr.fr)
02: [93.17.128.22]
03:   by mx0.gmx.net (mx018) with SMTP; 09 May 2010 xx:xx:xx +0200
04: Received: from smtp23.services.sfr.fr (msfrf2321 [10.18.27.35])
05: 	by msfrf2315.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat,  8 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from filter.sfr.fr (localhost [127.0.0.1])
08: 	by msfrf2321.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Sat,  8 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [41.121.5.229])
11: 	by msfrf2321.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Sat,  8 May 2010 xx:xx:xx +0200 (CEST)

IP: 41.121.5.229 ---> MTN Network Solutions, ZA

- kjz

Neues aus Mugu-Land:

header:

01: Received: from web83805.mail.sp1.yahoo.com (web83805.mail.sp1.yahoo.com
02: [69.147.85.73])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Mon, 10 May 2010 xx:xx:xx +0200 (CEST)
05: Received: (qmail 30818 invoked by UID: [UID filtered]
06: Received: from [82.128.80.108] by web83805.mail.sp1.yahoo.com via HTTP;
07: Mon, 10 May 2010 xx:xx:xx PDT

IP: 82.128.80.108 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from msg-mx2.ac-corse.fr (msg-mx2.ac-corse.fr [195.221.142.232])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 11 May 2010 xx:xx:xx +0200 (CEST)
04: Date: Tue, 11 May 2010 xx:xx:xx -0700

Freeserve ist jetzt gross am kommen:

header:

01: Received: from smtp5.freeserve.com (smtp5.freeserve.com [193.252.22.152])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp5.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (dhcp-077-250-111-095.chello.nl [77.250.111.95])
14: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Wed, 12 May 2010 xx:xx:xx +0200 (CEST)

IP: 77.250.111.95 ---> Chello, NL

Auch Web.de mal wieder:

header:

01: Received: from fmmailgate06.web.de (fmmailgate06.web.de [217.72.192.247])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
04: Received:  from mwmweb017  ( [172.20.18.26])
05: 	by fmmailgate06.web.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
07: Received:  from [204.14.43.9]  by  mwmweb017  with HTTP; Wed May
08:  12 xx:xx:xx CEST 2010

IP: 204.14.43.9 ---> mia-static-204-14-43-9.newcom-intl.com

Muguphon: +447045724545 ---> Open Telecom International Ltd., UK

- kjz

Aus meiner nie enden wollenden Sammlung:

Hier sieht man, wie anscheinend ein und dieselbe Bande verschiedene Skripte abspult:

header:

01: Received: from 189.126.bnu.widc.com.br (EHLO neo.morus.com.br)
02: [189.126.3.105]
03:   by mx0.gmx.net (mx075) with SMTP; 13 May 2010 xx:xx:xx +0200
04: Received: from static-151-204-174-85.ny325.east.verizon.net
05: ([151.204.174.85] helo=User)
06: 	by neo.morus.com.br with esmtpa (Exim 4.69)
07: 	(envelope-from <saw [at] go.com>)
08: 	ID: [ID filtered]

header:

01: Received: from smtp5.freeserve.com (EHLO smtp5.freeserve.com)
02: [193.252.22.152]
03:   by mx0.gmx.net (mx021) with SMTP; 13 May 2010 xx:xx:xx +0200
04: Received: from smtp5.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (static-151-204-174-85.NY325.east.verizon.net
14: [151.204.174.85])
15: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
16: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)

header:

01: Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (unknown [82.128.82.6])
14: 	by mwinf3523.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)

IP: 82.128.82.6 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +234-8028018611 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (mail.westfirm.com [98.22.59.13])
14: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Thu, 13 May 2010 xx:xx:xx +0200 (CEST)

gecracktes SquirrelMail:

header:

01: Received: from vivosmail.intviv.com (dns2.ivivos.com [168.75.146.228])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
06: Received: (qmail 2547 invoked by UID: [UID filtered]
07: Received: from unknown (HELO mail.admagnets.com)
08: (info [at] admagnets.com@127.0.0.1)
09:   by vivosmail.intviv.com with ESMTPA; 13 May 2010 xx:xx:xx -0000
10: Received: from 82.128.17.55
11:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
12:         by mail.admagnets.com with HTTP;
13:         Thu, 13 May 2010 xx:xx:xx -0400

IP: 82.128.17.55 ---> ml82.128.17.55.multilinks.com, Nigeria

header:

01: Received: from vivosmail.intviv.com (dns2.ivivos.com [168.75.146.228])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 13 May 2010 xx:xx:xx +0200 (CEST)
06: Received: (qmail 7559 invoked by UID: [UID filtered]
07: Received: from unknown (HELO mail.admagnets.com)
08: (info [at] admagnets.com@127.0.0.1)
09:   by vivosmail.intviv.com with ESMTPA; 13 May 2010 xx:xx:xx -0000
10: Received: from 82.128.17.55
11:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
12:         by mail.admagnets.com with HTTP;
13:         Thu, 13 May 2010 xx:xx:xx -0400

header:

01: Received: from mx4.hotmail.com
02: (209.72.131.216.client.static.strong14.reliablehosting.com [216.131.72.209])
03: 	by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200

header:

01: Received: from mx4.hotmail.com
02: (209.72.131.216.client.static.strong14.reliablehosting.com [216.131.72.209])
03: 	by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200

header:

01: Received: from smtp27.orange.fr (smtp27.orange.fr [80.12.242.95])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 14 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2706.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Fri, 14 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2706.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Fri, 14 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (ANantes-157-1-26-83.w86-214.abo.wanadoo.fr
11: [86.214.33.83])
12: 	by mwinf2706.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
13: 	Fri, 14 May 2010 xx:xx:xx +0200 (CEST)

Muguphon: +44-702-401-0706 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mx4.hotmail.com
02: (181.38.68.68.client.static.strong-sf6.reliablehosting.com [68.68.38.181])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200

Muguphon: +27-78-654-9088 ---> MTN, ZA

Mugufax: +27-86-6581-659 ---> premium rate number, ZA

header:

01: Received: from n5-vm0.bullet.mail.gq1.yahoo.com
02: (n5-vm0.bullet.mail.gq1.yahoo.com [67.195.8.62])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 15 May 2010 xx:xx:xx +0200 (CEST)
05: Received: from [67.195.9.83] by n5.bullet.mail.gq1.yahoo.com with NNFMP;
06: 15 May 2010 xx:xx:xx -0000
07: Received: from [98.137.27.217] by t3.bullet.mail.gq1.yahoo.com with
08: NNFMP; 15 May 2010 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp127.mail.gq1.yahoo.com with NNFMP; 15
10: May 2010 xx:xx:xx -0000
11: Received: from [41.203.79.249] by web180513.mail.gq1.yahoo.com via HTTP;
12: Sat, 15 May 2010 xx:xx:xx PDT

IP: 41.203.79.249 ---> Globacom Ltd., Nigeria

Muguphon: +22999778840 ---> mobile number, Benin

header:

01: Received: from postbode01.versateladsl.be (postbode01.c.iops.be
02: [212.53.5.91])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat, 15 May 2010 xx:xx:xx +0200 (CEST)
07: Received: (qmail 3680 invoked by UID: [UID filtered]
08: Received: from unknown (HELO webmail.base.be) ([10.190.0.57])
09:           (envelope-sender <poor [at] spamvictim.tld>)
10:           by relay03.versateladsl.be (qmail-ldap-1.03) with SMTP
11:           for < >; 14 May 2010 xx:xx:xx -0000

header:

01: Received: from aircloud.net (unknown [69.42.24.8])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 16 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from User [82.128.68.186] by aircloud.net with ESMTP
05:   (SMTPD32-8.13) ID: [ID filtered]

IP: 82.128.68.186 ---> Multilinks Telecommunications Limited, Nigeria

- kjz

18.05.2010, 00:49
Fidul

Zitat:

Zitat von kjz1

-> ->

Die Sammluing wird immer größer:

header:

01: Received: from server1.magnaad.com (mail.magnagroup.com [218.189.190.123])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  5 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.19.230.238]) by server1.magnaad.com with
05: Microsoft SMTPSVC(5.0.2195.6713);
06: 	 Thu, 6 May 2010 xx:xx:xx +0800

IP: 41.19.230.238 ---> Vodacom_UMTS_Pretoria1_INTERNET_APN, ZA

header:

01: Received: from mailhost.frickemanagement.com (mail.frickemanagement.com
02: [216.158.127.186])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu,  6 May 2010 xx:xx:xx +0200 (CEST)
05: Received: from User ([124.120.132.123]) by mailhost.frickemanagement.com
06: with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Wed, 5 May 2010 xx:xx:xx -0500

IP: 124.120.132.123 ---> ppp-124-120-132-123.revip2.asianet.co.th

Muguphon: +(66)811306729 ---> mobile number, Thailand

header:

01: Received: from smtpout5.poczta.onet.pl (smtpout5.poczta.onet.pl
02: [213.180.147.165])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  7 May 2010 xx:xx:xx +0200 (CEST)
05: Received: from 71-94-184-48.dhcp.knwk.wa.charter.com
06: ([71.94.184.48]:9489 "EHLO
07: 	DONE" rhost-flags-OK-FAIL-OK-FAIL) by ps1.m5r2.onet with ESMTPA
08: 	ID: [ID filtered]
09: 	Fri, 7 May 2010 xx:xx:xx +0200

Muguphon: +2348074938857 ---> Globacom Ltd., Nigeria

header:

01: Received: from hxmail.hxex.cn (unknown [218.249.32.159])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.217.65.13]) by hxmail.hxex.cn with Microsoft
05: SMTPSVC(5.0.2195.7381);
06: 	 Wed, 12 May 2010 xx:xx:xx +0800

IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.

header:

01: Received: from mail.zhukovsky.net (mail.zhukovsky.net [87.245.133.7])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 12 May 2010 xx:xx:xx +0200 (CEST)
06: Received: from [94.78.75.195] (port=59111 helo=User)
07: 	by mail.zhukovsky.net with esmtpa (Exim 4.69)
08: 	(envelope-from <bbj [at] cs.buap.mx>)
09: 	ID: [ID filtered]

IP: 94.78.75.195 ---> 94-78-75-195.nethouse.net

- kjz

Die Sammlung geht weiter:

gecracktes Horde:

header:

01: Received: from ns5.orangemali.net (mail.orangemali.net [196.200.88.120])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
06: Received: (qmail 23057 invoked by UID: [UID filtered]
07: Received: from syd-ult-slb1-vlan5.ii.net (syd-ult-slb1-vlan5.ii.net
08: 	[203.215.17.58]) by webmail.orangemali.net (Horde MIME library) with HTTP;
09: 	Sat, 15 May 2010 xx:xx:xx +0200

header:

01: Received: from ns5.orangemali.net (mail.orangemali.net [196.200.88.120])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
06: Received: (qmail 29881 invoked by UID: [UID filtered]
07: Received: from 41.217.65.14 ([41.217.65.14]) by webmail.orangemali.net
08: 	(Horde MIME library) with HTTP; Sat, 15 May 2010 xx:xx:xx +0200

header:

01: Received: from mail-relay-02.mailcluster.net (EHLO
02: mail-relay-02.mailcluster.net) [77.221.130.214]
03:   by mx0.gmx.net (mx025) with SMTP; 17 May 2010 xx:xx:xx +0200
04: Received: from in-relay-01.mailcluster.net
05: (77.221.130.242.addr.datapoint.ru [77.221.130.242])
06: 	by mail-relay-02.mailcluster.net (Postfix) with ESMTPA ID: [ID filtered]
07: 	Mon, 17 May 2010 xx:xx:xx +0400 (MSD)
08: Received: from gw.aes-group.kz (mail.ekrec.kz [89.28.130.42])
09: 	(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
10: 	(No client certificate requested)
11: 	(Authenticated sender: defaultmailbox [at] aes-group.kz)
12: 	by in-relay-01.mailcluster.net (Postfix) with ESMTPSA ID: [ID filtered]
13: 	Mon, 17 May 2010 xx:xx:xx +0400 (MSD)
14: Received: from User (unknown [41.217.67.5])
15: 	by gw.aes-group.kz (Postfix) with ESMTPA ID: [ID filtered]
16: 	Mon, 17 May 2010 xx:xx:xx +0600 (ALMT)

IP: 41.217.67.5 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +2348068494533 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from c2beaomr07.btconnect.com (c2beaomr07.btconnect.com
02: [213.123.26.185])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 18 May 2010 xx:xx:xx +0200 (CEST)
05: Received: from User (246-161-136-186.fibertel.com.ar [186.136.161.246]
06: (may be forged))
07: 	by c2beaomr07.btconnect.com
08: 	with ESMTP ID: [ID filtered]
09: 	Tue, 18 May 2010 xx:xx:xx +0100 (BST)

Muguphon: +234-80-39236013 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from rocco.bae.uky.edu (EHLO rocco.bae.uky.edu) [128.163.197.12]
02:   by mx0.gmx.net (mx054) with SMTP; 18 May 2010 xx:xx:xx +0200
03: Received: from pool-74-109-241-111.pitbpa.fios.verizon.net
04: [74.109.241.111] by rocco.bae.uky.edu with SMTP;
05:    Tue, 18 May 2010 xx:xx:xx -0400

Muguphon: +022548500574 ---> Orange, Cote d'Ivoire

header:

01: Received: from 209.72.131.216.client.static.strong14.reliablehosting.com
02: (EHLO mx4.hotmail.com) [216.131.72.209]
03:   by mx0.gmx.net (mx009) with SMTP; 18 May 2010 xx:xx:xx +0200

auch Regierungsserver in Uruguay werden gecrackt:

header:

01: Received: from mail.mides.gub.uy (r200-40-156-195.static.adinet.com.uy
02: [200.40.156.195])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 19 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from apache by mail.mides.gub.uy with local (Exim 4.66)
08: 	(envelope-from <apache [at] mail.mides.gub.uy>)
09: 	ID: [ID filtered]
10: Received: from vfbb250134.4u.com.gh (vfbb250134.4u.com.gh [41.218.250.134])
11: 	by mail.mides.gub.uy (Horde MIME library) with HTTP; Tue, 18 May 2010
12: 	xx:xx:xx -0300

header:

01: Received: from mail.mides.gub.uy (r200-40-156-195.static.adinet.com.uy
02: [200.40.156.195])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 19 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from apache by mail.mides.gub.uy with local (Exim 4.66)
08: 	(envelope-from <apache [at] mail.mides.gub.uy>)
09: 	ID: [ID filtered]
10: Received: from vfbb250134.4u.com.gh (vfbb250134.4u.com.gh [41.218.250.134])
11: 	by mail.mides.gub.uy (Horde MIME library) with HTTP; Tue, 18 May 2010
12: 	xx:xx:xx -0300

IP: 41.218.250.134 ---> vfbb250134.4u.com.gh

Muguphon: +233 (20) 7159635 ---> Vodafone Ghana

Mugufax: +233 (20) 3120017 ---> Vodafone Ghana

- kjz

Die Reihe wird fortgesetzt mit:

ein gecrackter Account, versch. Lügenmärchen:

header:

01: Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.26])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2026.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2026.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (AOrleans-251-1-24-115.w90-19.abo.wanadoo.fr
11: [90.19.247.115])
12: 	by mwinf2026.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
13: 	Mon, 17 May 2010 xx:xx:xx +0200 (CEST)

Muguphon: +234-702-99-09216 ---> Starcomms PLC, Nigeria

header:

01: Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.48])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2116.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2116.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Mon, 17 May 2010 xx:xx:xx +0200 (CEST)
10: Received: from User
11: (APlessis-Bouchard-153-1-13-117.w83-112.abo.wanadoo.fr [83.112.220.117])
12: 	by mwinf2116.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
13: 	Mon, 17 May 2010 xx:xx:xx +0200 (CEST)

Muguphon: +234-8027385402 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from braintrust.tw (211-75-136-111.HINET-IP.hinet.net
02: [211.75.136.111])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 18 May 2010 xx:xx:xx +0200 (CEST)
05: Received: from User (unknown [41.217.65.13])
06: 	(Authenticated sender: info)
07: 	by braintrust.tw (Postfix) with ESMTPA ID: [ID filtered]
08: 	Tue, 18 May 2010 xx:xx:xx +0800 (CST)

IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-70-25729799 ---> Visafone Communications Ltd., Nigeria

header:

01: Received: from hbmail.u-happy.com (unknown [211.94.190.124])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 18 May 2010 xx:xx:xx +0200 (CEST)
06: Received: (qmail 15175 invoked by UID: [UID filtered]
07: Received: from unknown (HELO User) (service [at] 82.128.62.187)
08:   by 0 with SMTP; 10 May 2010 xx:xx:xx -0000

IP: 82.128.62.187 ---> Multilinks Telecommunications Limited, Nigeria

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen