Druckbare Version
Tja, und sieht die Antwort aus, wenn ein Server gecrackt wurde (26. 6.) und der ISP (4. 7.) reagiert:
Hoffentlich hat der Crack nicht eine ganze Woche lang funktioniert....Zitat:
This incident arose as a result of a machine vulnerable to SMTP AUTH
hijacking being present on our customer's network. Our customer has
been contacted, and to the best of our knowledge the vulnerability
has now been secured.
More information on SMTP AUTH hijacking is available at:
- kjz
Heute möchten gerne in der Muguparade antreten:
BTW: neuer Trend, auch die Mugus senden jetzt oft nicht mehr direkt von einem (meist) nigerianischen Provider (da schlagen wohl mittlerweile alle Spamfilter heftigst zu bzw. es hagelt direkt schon einen Reject), sondern mieten sich von den Russkis neben einem gecrackten (Mail-)Server direkt noch ein (Zombie-)Proxy an...
header:01: Received: from webmail.pla.net.py (ms4-jupiter.pla.net.py [201.217.19.3])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sun, 27 Jun 2010 xx:xx:xx +0200 (CEST)04: Received: from User [220.178.41.50]05: by webmail.pla.net.py [201.217.19.3]06: with SMTP (MDaemon.PRO.v5.0.4.R)07: for xxxxx; Sun, 27 Jun 2010 xx:xx:xx -0400
IP: 220.178.41.50 ---> CHINANET anhui
Muguphon: +44 702 402 7924 ---> Magrathea Telecommunications Limited, UK
wieder mal Frankreich:
header:01: Received: from smtp20.orange.fr (EHLO smtp20.orange.fr) [80.12.242.27]02: by mx0.gmx.net (mx045) with SMTP; 28 Jun 2010 xx:xx:xx +020003: Received: from me-wanadoo.net (localhost [127.0.0.1])04: by mwinf2011.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]05: Mon, 28 Jun 2010 xx:xx:xx +0200 (CEST)06: Received: from me-wanadoo.net (localhost [127.0.0.1])07: by mwinf2011.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]08: Mon, 28 Jun 2010 xx:xx:xx +0200 (CEST)09: Received: from User (ALyon-253-1-61-215.w86-193.abo.wanadoo.fr10: [86.193.204.215])11: by mwinf2011.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]12: Mon, 28 Jun 2010 xx:xx:xx +0200 (CEST)
(man beachte den Lokalpart...)
header:01: Received: from mail.nep.go.th (EHLO nep.go.th) [61.19.50.18]02: by mx0.gmx.net (mx008) with SMTP; 01 Jul 2010 xx:xx:xx +020003: Received: from [86.125.18.20] (account webmaster HELO User)04: by nep.go.th (CommuniGate Pro SMTP 5.2.16)05: with ESMTPA ID: [ID filtered]
header:01: Received: from mail.nep.go.th (EHLO nep.go.th) [61.19.50.18]02: by mx0.gmx.net (mx008) with SMTP; 01 Jul 2010 xx:xx:xx +020003: Received: from [86.125.18.20] (account webmaster HELO User)04: by nep.go.th (CommuniGate Pro SMTP 5.2.16)05: with ESMTPA ID: [ID filtered]
IP: 86.125.18.20 ---> static-86-125-18-20.rdsnet.ro
- kjz
Da drängeln natürlich noch mehr:
header:01: Received: from mail.zincir.net (mail.menejer.com.tr [195.46.149.10])02: (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 29 Jun 2010 xx:xx:xx +0200 (CEST)06: Received: from User ([218.25.99.135])07: by mail.zincir.net (Merak 8.0.3) with ASMTP ID: [ID filtered]08: Tue, 29 Jun 2010 xx:xx:xx +0300
IP: 218.25.99.135 ---> China Unicom Liaoning
header:01: Received: from mail.homezigi.net (unknown [110.45.144.129])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 29 Jun 2010 xx:xx:xx +0200 (CEST)06: Received: (qmail 6211 invoked by UID: [UID filtered]07: Hanbiro-VS-Header: |||,CN,218.7.191.182,2182,1277772491.615408: Received: from unknown (HELO User) (webmaster [at] 218.7.191.182)09: by 0 (qmail 1.03 + ejcp v14) with SMTP;10: 29 Jun 2010 xx:xx:xx +0900
header:01: Received: from mail.homezigi.net (unknown [110.45.144.129])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 29 Jun 2010 xx:xx:xx +0200 (CEST)06: Received: (qmail 22846 invoked by UID: [UID filtered]07: Hanbiro-VS-Header: |||,CN,218.61.202.138,2183,1277773148.2282208: Received: from unknown (HELO User) (webmaster [at] 218.61.202.138)09: by 0 (qmail 1.03 + ejcp v14) with SMTP;10: 29 Jun 2010 xx:xx:xx +0900
header:01: Received: from mail.homezigi.net (unknown [110.45.144.129])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 29 Jun 2010 xx:xx:xx +0200 (CEST)06: Received: (qmail 21590 invoked by UID: [UID filtered]07: Hanbiro-VS-Header: |||,UNKNOWN,118.123.241.163,2183,1277775376.2154408: Received: from unknown (HELO User) (webmaster [at] 118.123.241.163)09: by 0 (qmail 1.03 + ejcp v14) with SMTP;10: 29 Jun 2010 xx:xx:xx +0900
IP: 218.7.191.182 ---> CNC Group CHINA169 Heilongjiang
Muguphon: +27715965561 ---> Vodacom, ZA
Muguphon: +2767944353 ---> South Africa
header:01: Received: from public.ceibs.edu (mailsh.ceibs.edu [210.13.127.231])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 30 Jun 2010 xx:xx:xx +0200 (CEST)04: X-IronPort-AV: E=Sophos;i="4.53,508,1272816000";05: d="txt'?scan'208";a="11695528"06: Received: from i59f52395.versanet.de (HELO User) ([89.245.35.149])07: by private.ceibs.edu with ESMTP; 30 Jun 2010 xx:xx:xx +0800
Muguphon: +234-803-624-0664 ---> MTN Nigeria Communications Ltd.
header:01: Received: from s2.mn-comm.nl (s2.mn-comm.nl [84.243.238.50])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 30 Jun 2010 xx:xx:xx +0200 (CEST)06: Received: from s2.mn-comm.nl (localhost [127.0.0.1])07: by s2.mn-comm.nl (8.13.1/8.13.1) with ESMTP ID: [ID filtered]08: Sun, 27 Jun 2010 xx:xx:xx +0200
header:01: Received: from s2.mn-comm.nl (s2.mn-comm.nl [84.243.238.50])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 30 Jun 2010 xx:xx:xx +0200 (CEST)06: Received: from s2.mn-comm.nl (localhost [127.0.0.1])07: by s2.mn-comm.nl (8.13.1/8.13.1) with ESMTP ID: [ID filtered]08: Sun, 27 Jun 2010 xx:xx:xx +0200
X-OriginatingIP: 41.217.65.14 (mike) ---> ZOOM Mobile Nigeria Ltd.
header:01: Received: from web26208.mail.ukl.yahoo.com (web26208.mail.ukl.yahoo.com02: [217.12.10.245])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Wed, 30 Jun 2010 xx:xx:xx +0200 (CEST)05: Received: (qmail 79519 invoked by UID: [UID filtered]06: Received: from [41.217.68.8] by web26208.mail.ukl.yahoo.com via HTTP;07: Wed, 30 Jun 2010 xx:xx:xx GMT
IP: 41.217.68.8 ---> ZOOM Mobile Nigeria Ltd.
Muguphon: +447045716456 ---> Open Telecom International Ltd., UK
header:01: Received: from rmtc.org.cn (unknown [60.12.5.110])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 2 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User by rmtc.org.cn (U-Mail MailSystem)05: with ESMTP ID: [ID filtered]06: for xxxxx; Fri, 02 Jul 2010 xx:xx:xx +080007: X-Spam-Processed: rmtc.org.cn, Fri, 02 Jul 2010 xx:xx:xx +080008: (not processed: message from trusted or authenticated source)
X-MDRemoteIP: 82.128.24.121 ---> Multi-Links Telecommunications Limited, Nigeria
header:01: Received: from webmail.proag.com (webmail.proag.com [67.67.20.131])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 3 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([98.200.213.137]) by webmail.proag.com with05: Microsoft SMTPSVC(6.0.3790.3959);06: Sat, 3 Jul 2010 xx:xx:xx -0500
IP: 98.200.213.137 ---> c-98-200-213-137.hsd1.tx.comcast.net
Muguphon: +447031874053 ---> Magrathea Telecommunications Limited, UK
- kjz
Die Mugu-Parade meldet sich mit:
mal wieder ein Account gecrackt:
header:01: Received: (qmail invoked by alias); 06 Jul 2010 xx:xx:xx -000002: Received: from unknown (EHLO merak.gopas.net) [62.112.33.77]03: by mx0.gmx.net (mx070) with SMTP; 06 Jul 2010 xx:xx:xx +020004: Received: from User (77.17.56.179.tmi.telenormobil.no [77.17.56.179])05: by merak.gopas.net (IceWarp 9.4.2) with ASMTP ID: [ID filtered]06: Tue, 06 Jul 2010 xx:xx:xx +0200
header:01: Received: from freeuk-outbound-smtp01.mail.eu.clara.net (EHLO02: freeuk-outbound-smtp01.mail.eu.clara.net) [195.8.64.18]03: by mx0.gmx.net (mx026) with SMTP; 07 Jul 2010 xx:xx:xx +020004: Received: from vc-41-31-119-223.umts.vodacom.co.za ([41.31.119.223]:147605: helo=User)06: by relay01.mail.eu.clara.net (relay.freeuk.com [213.253.3.41]:1225)07: with esmtpa (authdaemon_login:landscape) ID: [ID filtered]08: (return-path <rrrob2010 [at] hotmail.com>); Tue, 06 Jul 2010 xx:xx:xx +0000
Muguphon: +27-787919754 ---> MTN, ZA
die Madrid-Konnektion:
header:01: Received: from www.npg.no (EHLO pran.torgersen.no) [195.18.130.42]02: by mx0.gmx.net (mx118) with SMTP; 07 Jul 2010 xx:xx:xx +020003: Received: from User (unknown [77.211.204.227])04: by pran.torgersen.no (Postfix) with ESMTP05: ID: [ID filtered]
IP: 77.211.204.227 ---> VODAFONE_SPAIN_NETWORK
Muguphon: +34 672 585 739 ---> Vodafone Espana, S.a.u.
header:01: Received: from omr5.networksolutionsemail.com02: (omr5.networksolutionsemail.com [205.178.146.55])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 7 Jul 2010 xx:xx:xx +0200 (CEST)05: Received: from cm-omr1 (mail.networksolutionsemail.com [205.178.146.50])06: by omr5.networksolutionsemail.com (8.13.6/8.13.6) with ESMTP id07: o6741YTo03217608: for xxxxx; Wed, 7 Jul 2010 xx:xx:xx -040009: Authentication-Results: cm-omr1 smtp.user=info2; auth=pass (LOGIN)10: Received: from [116.206.130.66] ([116.206.130.66:31554] helo=User)11: by cm-omr1 (envelope-from <dbennett [at] wardwell.com>)12: (ecelerity 2.2.2.41 r(31179/31189)) with ESMTPA13: ID: [ID filtered]
IP: 116.206.130.66 ---> iZZinet Sdn. Bhd., MY
header:01: Received: from ect.iptime.org (unknown [123.142.107.18])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 7 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([41.217.65.13]) by ect.iptime.org with MailEnable05: ESMTP; Sat, 3 Jul 2010 xx:xx:xx +0900
header:01: Received: from ect.iptime.org (unknown [123.142.107.18])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 8 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([41.217.65.13]) by ect.iptime.org with MailEnable05: ESMTP; Sat, 3 Jul 2010 xx:xx:xx +0900
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
header:01: Received: from mail165.messagelabs.com (HELO mail165.messagelabs.com)02: [216.82.253.147]03: by mx0.gmx.net (mx096) with SMTP; 08 Jul 2010 xx:xx:xx +020004: X-VirusChecked: Checked05: X-Env-Sender: lyndabillinsly [at] gmail.com06: X-Msg-Ref: server-7.tower-165.messagelabs.com!1278553551!33176371!107: X-StarScan-Version: 6.2.4; banners=.,-,-08: X-Originating-IP: [66.212.1.66]09: Received: (qmail 8510 invoked from network); 8 Jul 2010 xx:xx:xx -000010: Received: from mark-catanzaro-cust-66-212-1-66.netcarrier.net (HELO11: catanzarolaw.com) (66.212.1.66)12: by server-7.tower-165.messagelabs.com with SMTP; 8 Jul 2010 xx:xx:xx -000013: Received: from User ([61.183.41.66]) by catanzarolaw.com14: with SMTP (Code-Crafters Ability Mail Server 2.57);15: Mon, 05 Jul 2010 xx:xx:xx -0400
IP: 61.183.41.66 ---> CHINANET Hubei
header:01: Received: from partner-s.pl (unknown [193.29.255.62])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx>; Thu, 8 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from localhost (localhost [127.0.0.1])05: by partner-s.pl (Partner S mail system) with ESMTP ID: [ID filtered]06: Thu, 8 Jul 2010 xx:xx:xx +0200 (CEST)07: Received: from partner-s.pl ([127.0.0.1])08: by localhost (ozyrys.partner-s.pl [127.0.0.1]) (amavisd-new, port 10024)09: with ESMTP ID: [ID filtered]10: Received: from User (unknown [201.41.47.16])11: by partner-s.pl (Partner S mail system) with ESMTP ID: [ID filtered]12: Thu, 8 Jul 2010 xx:xx:xx +0200 (CEST)
IP: 201.41.47.16 ---> 201-41-47-16.paemt702.e.brasiltelecom.net.br
header:01: Received: from mail.zdlhbj.com (unknown [211.100.58.93])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 8 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from localhost (mail.zdlhbj.com [127.0.0.1])05: by mail.zdlhbj.com (iRedMail) with ESMTP ID: [ID filtered]06: Thu, 8 Jul 2010 xx:xx:xx +0800 (CST)07: X-Virus-Scanned: amavisd-new at mail.zdlhbj.com08: Received: from mail.zdlhbj.com ([127.0.0.1])09: by localhost (mail.zdlhbj.com [127.0.0.1]) (amavisd-new, port 10024)10: with ESMTP ID: [ID filtered]11: Received: from User (unknown [41.138.172.53])12: by mail.zdlhbj.com (iRedMail) with ESMTPA ID: [ID filtered]13: Thu, 8 Jul 2010 xx:xx:xx +0800 (CST)
IP: 41.138.172.53 ---> Visafone Communications Limited, Nigeria
header:01: Received: from mail.zdlhbj.com (unknown [211.100.58.93])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 8 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from localhost (mail.zdlhbj.com [127.0.0.1])05: by mail.zdlhbj.com (iRedMail) with ESMTP ID: [ID filtered]06: Thu, 8 Jul 2010 xx:xx:xx +0800 (CST)07: X-Virus-Scanned: amavisd-new at mail.zdlhbj.com08: Received: from mail.zdlhbj.com ([127.0.0.1])09: by localhost (mail.zdlhbj.com [127.0.0.1]) (amavisd-new, port 10024)10: with ESMTP ID: [ID filtered]11: Received: from User (unknown [87.102.95.154])12: by mail.zdlhbj.com (iRedMail) with ESMTPA ID: [ID filtered]13: Thu, 8 Jul 2010 xx:xx:xx +0800 (CST)
IP: 87.102.95.154 ---> static-87-102-95-154.karoo.KCOM.COM
- kjz
Natürlich gibt's noch Nachschub aus der Mugu-Liste:
header:01: Received: from mail.zimmerfrancescon.com (EHLO02: cipafilter.zimmerfrancescon.com) [74.84.78.190]03: by mx0.gmx.net (mx013) with SMTP; 05 Jul 2010 xx:xx:xx +020004: Received: from User (cpe-98-148-234-167.socal.res.rr.com [98.148.234.167])05: (authenticated bits=0)06: by cipafilter.zimmerfrancescon.com (8.14.1/8.14.1/Debian-8ubuntu1) with07: ESMTP ID: [ID filtered]08: Sun, 4 Jul 2010 xx:xx:xx -0500
Muguphon: +234-7090066667 ---> Multi-links Telecommunications Ltd., Nigeria
header:01: eceived: from symmail3.roc.entergy.com (symmail3.roc.entergy.com02: [198.8.4.53])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Mon, 5 Jul 2010 xx:xx:xx +0200 (CEST)05: X-AuditID: [ID filtered]06: Received: from litexetsp003.etrsouth.corp.entergy.com07: (litexetsp003.etrsouth.corp.entergy.com [148.194.24.96])08: by symmail3.roc.entergy.com (Symantec Brightmail Gateway) with SMTP id09: 81.A5.02423.6DCE13C4; Mon, 5 Jul 2010 xx:xx:xx -0500 (CDT)10: Received: from CCTEXETSP005.etrsouth.corp.entergy.com ([148.193.103.13])11: by litexetsp003.etrsouth.corp.entergy.com with Microsoft12: SMTPSVC(6.0.3790.4675);13: Mon, 5 Jul 2010 xx:xx:xx -0500
header:01: Received: from www.neity.com (unknown [211.47.65.194])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 7 Jul 2010 xx:xx:xx +0200 (CEST)06: Received: from User ([81.91.229.209])07: (authenticated bits=0)08: by www.neity.com (8.12.11.20060308/8.12.11) with ESMTP ID: [ID filtered]09: Wed, 7 Jul 2010 xx:xx:xx +0900
IP: 81.91.229.209 ---> BENINTELECOM
oder vielleicht doch:
header:01: Received: from crscentos1.servercover.com (EHLO02: crscentos1.servercover.com) [217.66.216.65]03: by mx0.gmx.net (mx013) with SMTP; 07 Jul 2010 xx:xx:xx +020004: Received: from [41.138.177.220] (helo=User)05: by crscentos1.servercover.com with esmtpa (Exim 4.69)06: (envelope-from <t_smith [at] sify.com>)07: ID: [ID filtered]
IP: 41.138.177.220 ---> Visafone Communications Limited, Nigeria
header:01: Received: from exchangeserv.lnfdist.com (smtp.lnfdist.com [12.49.171.7])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 8 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([121.12.249.207]) by exchangeserv.lnfdist.com with05: Microsoft SMTPSVC(6.0.3790.4675);06: Thu, 8 Jul 2010 xx:xx:xx -0500
IP: 121.12.249.207 ---> CHINANET Guangdong
header:01: Received: from 82.96.85ae.static.theplanet.com (EHLO02: server.specialdns.net) [174.133.150.130]03: by mx0.gmx.net (mx096) with SMTP; 08 Jul 2010 xx:xx:xx +020004: Received: from [82.128.80.230] (helo=User)05: by server.specialdns.net with esmtpa (Exim 4.69)06: (envelope-from <simpson_ceo [at] simpsonconsultingsc.com>)07: ID: [ID filtered]
IP: 82.128.80.230 ---> Multilinks Telecommunications Limited, Nigeria
header:01: Received: from mail.rivit.it (mail.rivit.it [87.241.7.172])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 9 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([76.30.137.111] RDNS failed) by mail.rivit.it with05: Microsoft SMTPSVC(6.0.3790.4675);06: Fri, 9 Jul 2010 xx:xx:xx +0200
IP: 76.30.137.111 ---> c-76-30-137-111.hsd1.tx.comcast.net
- kjz
Eine weitere Reihe der Mugu-Boyz:
header:01: Received: from linux1.meinhardt.no (EHLO linux1.meinhardt.no)02: [213.179.57.75]03: by mx0.gmx.net (mx084) with SMTP; 12 Jul 2010 xx:xx:xx +020004: Received: (qmail 30185 invoked from network); 10 Jul 2010 xx:xx:xx +020005: Received: from 92.51.205.68.cfl.res.rr.com (HELO User) (68.205.51.92)06: by linux1.meinhardt.no with SMTP; 10 Jul 2010 xx:xx:xx +0200
Muguphon: +1-206 497 2004 ---> Ymax Communications Corp. - Wa
header:01: Received: from LEESERVER2.thejhleeco.local (unknown [74.251.151.251])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 12 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([77.246.67.29]) by LEESERVER2.thejhleeco.local with05: Microsoft SMTPSVC(6.0.3790.4675);06: Mon, 12 Jul 2010 xx:xx:xx -0400
IP: 77.246.67.29 ---> IncoNet-Data Management sal
header:01: Received: from mail.ofiprix.com (EHLO mail.ofiprix.com) [62.14.253.82]02: by mx0.gmx.net (mx045) with SMTP; 13 Jul 2010 xx:xx:xx +020003: Received: from User ([41.217.65.13]) by mail.ofiprix.com with Microsoft04: SMTPSVC(6.0.3790.3959);05: Tue, 13 Jul 2010 xx:xx:xx +0200
IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.
gecracktes SquirrelMail:
header:01: Received: from tubarao.alesc.sc.gov.br (tubarao.alesc.sc.gov.br02: [200.192.66.23])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 14 Jul 2010 xx:xx:xx +0200 (CEST)05: Received: from alesc.sc.gov.br ([200.192.66.2])06: by tubarao.alesc.sc.gov.br with ESMTP; 13 Jul 2010 xx:xx:xx -030007: Received: from alesc.sc.gov.br (localhost [127.0.0.1])08: by alesc.sc.gov.br (Postfix) with ESMTP ID: [ID filtered]09: Tue, 13 Jul 2010 xx:xx:xx -0300 (BRT)10: Received: from 82.128.26.18311: (SquirrelMail authenticated user poor [at] spamvictim.tld)12: by alesc.sc.gov.br with HTTP;13: Tue, 13 Jul 2010 xx:xx:xx +0200 (CEST)
IP: 82.128.26.183 ---> Multilinks Telecommunications Limited, Nigeria
gecracktes SquirrelMail:
header:01: Received: from 42.subnet222-124-175.static.astinet.telkom.net.ID: [ID filtered]02: mail.polije.ac.id) [222.124.175.42]03: by mx0.gmx.net (mx043) with SMTP; 13 Jul 2010 xx:xx:xx +020004: Received: from mail.polije.ac.ID: [ID filtered]05: by mail.polije.ac.ID: [ID filtered]06: Wed, 14 Jul 2010 xx:xx:xx +0700 (WIT)07: Received: from 82.128.82.24508: (SquirrelMail authenticated user poor [at] spamvictim.tld)09: by mail.polije.ac.ID: [ID filtered]10: Wed, 14 Jul 2010 xx:xx:xx +0700
IP: 82.128.82.245 ---> Multilinks Telecommunications Limited, Nigeria
header:01: Received: from mail.hl.133165.com (HELO hl.133165.com) [220.201.193.38]02: by mx0.gmx.net (mx103) with SMTP; 16 Jul 2010 xx:xx:xx +020003: Received: from unknown (helo User)(unknown [at] 41.211.228.234)04: by test with SMTP; Fri, 16 Jul 2010 xx:xx:xx +0000
X-Lasthop: 41.211.228.234 ---> DIRECTONPC-ISP-NETBLK, Nigeria
Muguphon: +445601060190 ---> Magrathea Telecommunications Limited, UK
Muguphon: +448447742573 ---> Magrathea Telecommunications Limited, UK
Muguphon: +448715035956 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from unknown (EHLO mail.medakenggcollege.com) [220.225.232.163]02: by mx0.gmx.net (mx037) with SMTP; 16 Jul 2010 xx:xx:xx +020003: Received: from User ([41.138.164.31]) by mail.medakenggcollege.com with04: Microsoft SMTPSVC(6.0.3790.3959);05: Fri, 16 Jul 2010 xx:xx:xx +0530
IP: 41.138.164.31 --> Visafone Communications Limited, Nigeria
- kjz
Für die 'Ahnengalerie':
header:01: Received: from xepz.com (unknown [124.114.235.147])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 12 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User [201.41.47.16] by xepz.com with ESMTP05: (SMTPD-8.22) ID: [ID filtered]
IP: 201.41.47.16 ---> 201-41-47-16.paemt702.e.brasiltelecom.net.br
header:01: Received: from galileu.pulo.com.br (galileu.pulo.com.br [200.140.105.88])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxxx; Mon, 12 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: (qmail 34167 invoked from network); 11 Jul 2010 xx:xx:xx -030005: Received: by simscan 1.4.0 ppID: [ID filtered]06: scanners: clamav: 0.94/m:51/d:948807: Received: from unknown (HELO User) (elaine [at] 80.90.62.233)08: by galileu.pulo.com.br with ESMTPA; 11 Jul 2010 xx:xx:xx -0300
IP: 80.90.62.233 ---> vodsl-10729.vo.lu
auch Netsol muss Federn lassen:
header:01: Received: from omr12.networksolutionsemail.com02: (omr12.networksolutionsemail.com [205.178.146.62])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 14 Jul 2010 xx:xx:xx +0200 (CEST)05: Received: from cm-omr5 (mail.networksolutionsemail.com [205.178.146.50])06: by omr12.networksolutionsemail.com (8.13.6/8.13.6) with ESMTP id07: o6EF1rx901604108: for xxxxx; Wed, 14 Jul 2010 xx:xx:xx -040009: Authentication-Results: cm-omr5 smtp.user=info; auth=pass (LOGIN)10: Received: from [41.217.66.4] ([41.217.66.4:58804] helo=User)11: by cm-omr5 (envelope-from <draw [at] superenalotto.net>)12: (ecelerity 2.2.2.41 r(31179/31189)) with ESMTPA13: ID: [ID filtered]
IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.
header:01: Received: from lur.lur.es (mail.lcisl.com [195.248.231.24])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxxx; Wed, 14 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User (201-27-70-193.dsl.telesp.net.br [201.27.70.193])05: (Authenticated sender: jorge)06: by lur.lur.es (Postfix) with ESMTP ID: [ID filtered]07: Wed, 14 Jul 2010 xx:xx:xx +0200 (CEST)
Muguphon: +2348123206901 ---> Celtel Nigeria Limited/Zain
die Amsterdam-Konnektion:
header:01: Received: from freedom.vikoil.net.ua (unknown [212.90.160.250])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 14 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from localhost (localhost.vikoil.net.ua [127.0.0.1])05: by freedom.vikoil.net.ua (Postfix) with ESMTP ID: [ID filtered]06: Mon, 12 Jul 2010 xx:xx:xx +0300 (EEST)07: Received: from freedom.vikoil.net.ua ([127.0.0.1])08: by localhost (freedom.vikoil.net.ua [127.0.0.1]) (amavisd-new, port 10024)09: with ESMTP ID: [ID filtered]10: Received: from User (e57174.upc-e.chello.nl [213.93.57.174])11: by freedom.vikoil.net.ua (Postfix) with ESMTP ID: [ID filtered]12: Mon, 12 Jul 2010 xx:xx:xx +0300 (EEST)
header:01: Received: from mail.gmmpfaudler.co.in (mail.gmmpfaudler.co.in02: [202.71.136.97])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 15 Jul 2010 xx:xx:xx +0200 (CEST)05: Received: from [202.71.136.171] (helo=idcmumbai.gmmpfaudler.co.in)06: by mail.gmmpfaudler.co.in with esmtp (Exim 4.69 #1)07: ID: [ID filtered]08: Received: from User ([82.128.3.181])09: by idcmumbai.gmmpfaudler.co.in (Lotus Domino Release 6.5.6FP3)10: with ESMTP ID: [ID filtered]11: Thu, 15 Jul 2010 xx:xx:xx +0530
IP: 82.128.3.181 ---> ml82.128.3.181.multilinks.com, Nigeria
header:01: Received: from 91ydy.com (unknown [114.80.201.147])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 16 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User [82.128.84.40] by 91ydy.com with ESMTP05: (SMTPD-8.21) ID: [ID filtered]
IP: 82.128.84.40 ---> Multilinks Telecommunications Limited, Nigeria
header:01: Received: from stresa.hostireland.com (stresa.hostireland.com02: [67.192.77.36])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Sat, 17 Jul 2010 xx:xx:xx +0200 (CEST)07: Received: from User (gostudent.com [65.121.19.225] (may be forged))08: (authenticated bits=0)09: by stresa.hostireland.com (8.13.8/8.13.1) with ESMTP ID: [ID filtered]10: Fri, 16 Jul 2010 xx:xx:xx +0100
die Madrid-Konnektion:
header:01: Received: from static-72-230-224-77.ipcom.comunitel.net (EHLO02: mx4.hotmail.com) [77.224.230.72]03: by mx0.gmx.net (mx049) with SMTP; 17 Jul 2010 xx:xx:xx +0200
header:01: Received: from gsgcorp.com (unknown [58.227.76.22])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Sat, 17 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from 70.39.65.228 ([70.39.65.228])05: by spam (Spambreaker ESMTP Server);06: Sun, 18 Jul 2010 xx:xx:xx +0900 (KST)
Auffällig: in letzter Zeit viele Mail-Dropboxen bei Gala.net. Oder halt, doch wieder nicht:
whois:
Registriert auf einen Namen, der sich doch äußerst russisch anhört. Neben gecrackten Servern und Zombie-Proxies verkauft die Russen-Mafia auf dem Schwarzmarkt im 'Rundum-Spam-Sorglos-Paket' den Mugus wohl auch gleich die Mailadressen mit.....
- kjz
So, dann will ich doch mal wieder meine 'besonderen Freunde' präsentieren:
die Madrid-Konnektion via gecracktem 1&1-Server:
header:01: Received: from u15338284.onlinehome-server.com (EHLO02: u15338284.onlinehome-server.com) [74.208.166.164]03: by mx0.gmx.net (mx079) with SMTP; 18 Jul 2010 xx:xx:xx +020004: Received: (qmail 25467 invoked from network); 23 Jun 2010 xx:xx:xx -040005: Received: from unknown (HELO User) (77.211.78.163)06: by u15338284.onlinehome-server.com with SMTP; 23 Jun 2010 xx:xx:xx07: -0400
IP: 77.211.78.163 ---> VODAFONE_SPAIN_NETWORK
Muguphon: +34 634 031 494 ---> Vodafone Espana
header:01: Received: from top.toptierhost.com (EHLO top.toptierhost.com)02: [216.40.231.210]03: by mx0.gmx.net (mx021) with SMTP; 20 Jul 2010 xx:xx:xx +020004: Received: from 81.166.55.54.static.lyse.net ([81.166.55.54]:62587 helo=User)05: by top.toptierhost.com with esmtpa (Exim 4.69)06: (envelope-from <skillz [at] mybestreviewsinfo.com>)07: ID: [ID filtered]
Muguphon: +234-706-793-8229 ---> MTN Nigeria Communications Ltd.
gecracktes SquirrelMail:
header:01: Received: from smtp.netsonic.fi (smtp.netsonic.fi [194.29.192.26])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 20 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from webmail.netsonic.fi (unknown [194.29.192.211])05: by smtp.netsonic.fi (Postfix) with ESMTP ID: [ID filtered]06: Tue, 20 Jul 2010 xx:xx:xx +0300 (EEST)07: Received: from 216.46.204.15 (proxying for 41.220.68.8)08: (SquirrelMail authenticated user reitti07)09: by webmail.netsonic.fi with HTTP;10: Tue, 20 Jul 2010 xx:xx:xx +0300 (EEST)
IP: 41.220.68.8 ---> MTN Nigeria Communications Limited
Muguphon: +44 702 405 8677 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.26])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 20 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from me-wanadoo.net (localhost [127.0.0.1])05: by mwinf2017.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]06: Tue, 20 Jul 2010 xx:xx:xx +0200 (CEST)07: Received: from me-wanadoo.net (localhost [127.0.0.1])08: by mwinf2017.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]09: Tue, 20 Jul 2010 xx:xx:xx +0200 (CEST)10: Received: from User (AOrleans-158-1-35-166.w90-44.abo.wanadoo.fr11: [90.44.166.166])12: by mwinf2017.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]13: Tue, 20 Jul 2010 xx:xx:xx +0200 (CEST)
header:01: Received: from ServMailEdge.centralia.edu (servmailedge.centralia.edu02: [134.39.121.100])03: (using TLSv1 with cipher RC4-MD5 (128/128 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Wed, 21 Jul 2010 xx:xx:xx +0200 (CEST)07: Received: from mail.centralia.edu (134.39.127.240) by08: ServMailEdge.centralia.edu (134.39.121.100) with Microsoft SMTP Server09: (TLS)10: ID: [ID filtered]11: Received: from mail.centralia.edu ([134.39.127.240]) by mail.centralia.edu12: ([134.39.127.240]) with mapi; Tue, 20 Jul 2010 xx:xx:xx -0700
Muguphon: +234-703-656-5651 ---> MTN Nigeria Communications Ltd.
header:01: Received: from static90.bluefire.com.au (EHLO02: BF-OPT-DMZ5.BFCHOSTING.local) [202.146.6.90]03: by mx0.gmx.net (mx107) with SMTP; 20 Jul 2010 xx:xx:xx +020004: Received: from User ([41.217.66.4]) by BF-OPT-DMZ5.BFCHOSTING.local with05: Microsoft SMTPSVC(6.0.3790.1830);06: Wed, 21 Jul 2010 xx:xx:xx +1000
IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.
header:01: Received: from mail.china368.com (unknown [61.135.202.67])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 23 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User (unknown [222.72.132.166])05: by mail.china368.com (Postfix) with ESMTP ID: [ID filtered]06: Fri, 23 Jul 2010 xx:xx:xx +0800 (CST)
IP: 222.72.132.166 ---> CHINANET shanghai
- kjz
Halt, halt, halt, doch nicht so drängeln....
gecrackter Server-Account:
header:01: Received: from mail.ostomy.ru (unknown [212.33.25.242])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 22 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([82.208.95.157])05: (authenticated user admin [at] ostomy.ru)06: by mail.ostomy.ru;07: Thu, 22 Jul 2010 xx:xx:xx +0300
IP: 82.208.95.157 ---> 82-208-95-157.OMK-STEEL-NET-2.mts-nn.ru
Muguphon: +44 754 4429 420 ---> Telefonica O2 (UK) Limited
header:01: Received: from mail.mediaman.de (mail.mediaman.de [195.52.10.43])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 22 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([41.217.65.14]) by mail.mediaman.de with Microsoft05: SMTPSVC(6.0.3790.3959);06: Thu, 22 Jul 2010 xx:xx:xx +0200
IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.
header:01: Received: from smtp.seznam.cz (unknown [77.75.72.43])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 24 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User (asmanfaraz.70.200.178.193.in-addr.arpa05: [193.178.200.71])06: by email-relay2.go.seznam.cz (Seznam SMTPD 1.1.7 [at] 13984) with ESMTP;07: Sat, 24 Jul 2010 xx:xx:xx +0200 (CEST)
header:01: Received: from mail.hillengineeringltd.com (81-86-39-220.dsl.pipex.com02: [81.86.39.220])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sat, 24 Jul 2010 xx:xx:xx +0200 (CEST)05: Received: from User ([67.21.81.35]) by mail.hillengineeringltd.com with06: Microsoft SMTPSVC(6.0.3790.4675);07: Sat, 24 Jul 2010 xx:xx:xx +0100
gecrackter Account:
header:01: Received: from mails.jaguarshoes.local (unknown [190.220.147.218])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sun, 25 Jul 2010 xx:xx:xx +0200 (CEST)06: Received: from User ([82.128.84.55])07: (authenticated user admin [at] localhost)08: by mails.jaguarshoes.local (Kerio MailServer 6.7.0);09: Sun, 25 Jul 2010 xx:xx:xx -0300
IP: 82.128.84.55 ---> Multilinks Telecommunications Limited, Nigeria
ein Satelliten-Mugu:
header:01: Received: from mail.svvar.com (65-114-80-149.dia.static.qwest.net02: [65.114.80.149])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sun, 25 Jul 2010 xx:xx:xx +0200 (CEST)05: Received: from User ([217.20.240.19]) by mail.svvar.com with Microsoft06: SMTPSVC(6.0.3790.4675);07: Fri, 23 Jul 2010 xx:xx:xx -0700
IP: 217.20.240.19 ---> tnt-srv.bpk.redwingsat.com
- kjz
Als Mugu möchten sich gerne outen:
header:01: Jul 2010 xx:xx:xx CEST02: Received: from mail.c-i-m.net (c207.134.169-187.clta.globetrotter.net03: [207.134.169.187])04: by xxxxx (Postfix) with SMTP ID: [ID filtered]05: for xxxxx; Wed, 28 Jul 2010 xx:xx:xx +0200 (CEST)06: Received: (qmail 27037 invoked by UID: [UID filtered]07: Received: from unknown (HELO User) (webmestre [at] c-i-m.net@41.138.189.165)08: by mail.c-i-m.net with SMTP; 27 Jul 2010 xx:xx:xx -0000
IP: 41.138.189.165 ---> Visafone Communications Limited, Nigeria
header:01: Received: from toroondcbmts06-srv.bellnexxia.net02: (toroondcbmts06.bellnexxia.net [207.236.237.40])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 28 Jul 2010 xx:xx:xx +0200 (CEST)05: Received: from User ([94.79.132.87]) by toroondcbauth01-srv.bellnexxia.net06: (InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP07: id08: <20100728060749.JUH28650.toroondcbauth01-srv.bellnexxia.net [at] User>;09: Wed, 28 Jul 2010 xx:xx:xx -0400
IP: 94.79.132.87 ---> ip-94-79-132-87.unitymediagroup.de
Muguphon: +234 8030762718 ---> MTN Nigeria Communications Ltd.
header:01: Received: from ontrack8.static.otenet.gr (EHLO02: ontrack.ontrack-rse.local) [62.103.26.199]03: by mx0.gmx.net (mx023) with SMTP; 27 Jul 2010 xx:xx:xx +020004: Received: from User ([151.204.234.111]) by ontrack.ontrack-rse.local05: with Microsoft SMTPSVC(6.0.3790.1830);06: Tue, 6 Jul 2010 xx:xx:xx +0300
IP: 151.204.234.111 ---> static-151-204-234-111.bos.east.verizon.net
Muguphon: +234 803 115 7664 ---> MTN Nigeria Communications Ltd.
header:01: Received: from mail.wvdsl.net (EHLO mail.wvdsl.net) [66.109.172.25]02: by mx0.gmx.net (mx049) with SMTP; 28 Jul 2010 xx:xx:xx +020003: Received: from 66.109.172.25 [66.109.172.25] by mail.wvdsl.net with ESMTP04: (SMTPD-9.23) ID: [ID filtered]
Muguphon: +44 702 407 8110 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from dicreativo.com.mx (EHLO dicreativo.com.mx) [201.116.9.36]02: by mx0.gmx.net (mx054) with SMTP; 29 Jul 2010 xx:xx:xx +020003: Received: from User (unknown [200.67.95.66])04: by dicreativo.com.mx (Postfix) with ESMTP ID: [ID filtered]05: Wed, 28 Jul 2010 xx:xx:xx -0500 (CDT)
IP: 200.67.95.66 ---> dsl-200-67-95-66.prod-empresarial.com.mx
Muguphon: +447024017507 ---> Magrathea Telecommunications Limited, UK
Mugufax: +447024017932 ---> Magrathea Telecommunications Limited, UK
Mugufax: +442070600469 ---> Digital Mail Limited, UK
header:01: Received: from avcoffice.com (unknown [64.60.140.99])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 29 Jul 2010 xx:xx:xx +0200 (CEST)04: Received: from User ([82.127.48.118] RDNS failed) by avcoffice.com with05: Microsoft SMTPSVC(6.0.3790.3959);06: Wed, 28 Jul 2010 xx:xx:xx -0700
header:01: Received: from mail2.webindia.com (mail2.webindia.com [216.129.98.150])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 29 Jul 2010 xx:xx:xx +0200 (CEST)06: Received: from User ([41.190.88.250])07: (authenticated bits=0)08: by mail2.webindia.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]09: Mon, 26 Jul 2010 xx:xx:xx -0700
IP: 41.190.88.250 ---> Zain Communications Ltd, Ghana
Der 'Sternchen-Mugu' (die Ratware fügt bei dieser Bande typischerweise immer Sternchen am Zeilenanfang und -ende an):
header:01: Received: from imsm057.netvigator.com (EHLO imsm057.netvigator.com)02: [218.102.48.210]03: by mx0.gmx.net (mx117) with SMTP; 29 Jul 2010 xx:xx:xx +020004: Received: from User ([112.91.145.78]) by imsm057dat.netvigator.com05: (InterMail vM.7.05.01.01 201-2174-106-103-20060222) with ESMTP06: ID: [ID filtered]07: Thu, 29 Jul 2010 xx:xx:xx +0800
IP: 112.91.145.78 ---> China Unicom CHINA169 Guangdong
Muguphon: +234 14173201 ---> Lagos
header:01: Received: from 2287345.yamatech.jp (EHLO ns.yamatech.jp) [220.110.160.75]02: by mx0.gmx.net (mx116) with SMTP; 30 Jul 2010 xx:xx:xx +020003: Received: from User ([41.222.192.114])04: (authenticated bits=0)05: by ns.yamatech.jp (8.13.1/8.13.1) with ESMTP ID: [ID filtered]06: Fri, 30 Jul 2010 xx:xx:xx +0900
IP: 41.222.192.114 ---> ISOCEL-SARL, BJ
Muguphon: +44 704 573 0596 ---> Open Telecom International Ltd., UK
- kjz