Mugu Dubletten

Meine Mugus waren wieder da:

header:

01: Received: from hkfd.dyndns.org (203080248198.static.ctinets.com
02: [203.80.248.198])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 18 Jan 2012 xx:xx:xx +0100 (CET)
05: Received: from User (cpe-71-64-11-132.insight.res.rr.com [71.64.11.132])
06: 	(Authenticated sender: tony)
07: 	by hkfd.dyndns.org (Postfix) with ESMTPA ID: [ID filtered]
08: 	Wed, 18 Jan 2012 xx:xx:xx +0800 (CST)

Muguphon: +234-803-531-7057 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from mailout01.t-online.de (EHLO mailout01.t-online.de)
02: [194.25.134.80]
03:   by mx0.gmx.net (mx114) with SMTP; 18 Jan 2012 xx:xx:xx +0100
04: Received: from fwd06.aul.t-online.de (fwd06.aul.t-online.de )
05: 	by mailout01.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (Z2aED4ZEZtlclL8rxdbZFlMifZ903ZEKLe1WekEzXAnoPD8-oJlohIhnZL54mCw5nbx+gYeS+r@[46.166.128.126
09: 	#93;)
10: by fwd06.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 46.166.128.126 ---> Santrex UK

header:

01: Received: from fed1rmfepo203.cox.net (fed1rmfepo203.cox.net
02: [68.230.241.148])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 18 Jan 2012 xx:xx:xx +0100 (CET)
05: Received: from fed1rmimpo306.cox.net ([68.230.241.174])
06:           by fed1rmfepo203.cox.net
07:           (InterMail vM.8.01.04.00 201-2260-137-20101110) with ESMTP
08:           id
09: <20120118120036.SRIC3756.fed1rmfepo203.cox.net [at] fed1rmimpo306.cox.net>;
10:           Wed, 18 Jan 2012 xx:xx:xx -0500
11: Received: from fed1rmwml208 ([172.18.140.218])
12: 	by fed1rmimpo306.cox.net with bizsmtp
13: 	ID: [ID filtered]
14: Authentication-Results: cox.net; none
15: Received: from 168.144.28.189 by webmail.west.cox.net; Wed, 18 Jan 2012
16: 7:00:36 -0500

IP: 168.144.28.189 ---> Softcom Technology






der Sternchen-Mugu mit freundlicher Unterstützung von Server-In-Kompetenz:

header:

01: Received: from str1.omnihost.de (EHLO h87562.serverkompetenz.net)
02: [81.169.134.128]
03:   by mx0.gmx.net (mx031) with SMTP; 18 Jan 2012 xx:xx:xx +0100
04: Received: from User (200.175.198.44.static.gvt.net.br [200.175.198.44])
05: 	by h87562.serverkompetenz.net (Postfix) with ESMTP
06: 	ID: [ID filtered]

Zitat:

---

*From The Office of The*
**
*Governor,Lamido Sanusi,*
**
*Central Bank of Nigeria (CBN)*
**
*Tinubu Square Lagos.*

---

Muguphon: +234-708-288-4459 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from s39.n136.n172.n72.static.myhostcenter.com (EHLO
02: fascomm.com) [72.172.136.39]
03:   by mx0.gmx.net (mx045) with SMTP; 20 Jan 2012 xx:xx:xx +0100
04: Received: from User (24-179-20-225.dhcp.ahvl.nc.charter.com [24.179.20.225])
05: 	(authenticated bits=0)
06: 	by fascomm.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Thu, 19 Jan 2012 xx:xx:xx -0500

header:

01: Received: from admin.yournetplus.com (admin.yournetplus.com
02: [64.136.173.100])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100
06: Received: from User (unverified [138.199.73.96]) by
07: ynpmail01.inside.adbasesystems.com
08:   (Vircom SMTPRS 5.0.916.3) with ESMTP id
09: <B0168901721 [at] ynpmail01.inside.adbasesystems.com>;
10:   Fri, 20 Jan 2012 xx:xx:xx -0500

header:

01: Received: (qmail invoked by alias); 20 Jan 2012 xx:xx:xx -0000
02: Received: from admin.yournetplus.com (EHLO admin.yournetplus.com)
03: [64.136.173.100]
04:   by mx0.gmx.net (mx104) with SMTP; 20 Jan 2012 xx:xx:xx +0100
05: Received: from User (unverified [138.199.73.96]) by
06: ynpmail01.inside.adbasesystems.com
07:   (Vircom SMTPRS 5.0.916.3) with ESMTP id
08: <B0168901721 [at] ynpmail01.inside.adbasesystems.com>;
09:   Fri, 20 Jan 2012 xx:xx:xx -0500

header:

01: Received: from admin.yournetplus.com (EHLO admin.yournetplus.com)
02: [64.136.173.100]
03:   by mx0.gmx.net (mx002) with SMTP; 20 Jan 2012 xx:xx:xx +0100
04: Received: from User (unverified [138.199.73.96]) by
05: ynpmail01.inside.adbasesystems.com
06:   (Vircom SMTPRS 5.0.916.3) with ESMTP id
07: <B0168901721 [at] ynpmail01.inside.adbasesystems.com>;
08:   Fri, 20 Jan 2012 xx:xx:xx -0500

IP: 138.199.73.96 ---> Cogent

Es schauten noch vorbei:

header:

01: Received: from unknown (EHLO mail.taclsc.org) [210.75.126.114]
02:   by mx0.gmx.net (mx016) with SMTP; 17 Jan 2012 xx:xx:xx +0100
03: Received: from localhost (localhost [127.0.0.1])
04: 	by mail.taclsc.org (Postfix) with SMTP ID: [ID filtered]
05: 	Tue, 17 Jan 2012 xx:xx:xx +0800 (CST)
06: Received: from User (host4-120-static.15-79-b.business.telecomitalia.it
07: [79.15.120.4])
08: 	by mail.taclsc.org (Postfix) with ESMTP ID: [ID filtered]
09: 	Tue, 17 Jan 2012 xx:xx:xx +0800 (CST)

der Sternchen-Mugu:

header:

01: Received: from s103.n61.n84.n66.static.myhostcenter.com (EHLO
02: suttoncompany.com) [66.84.61.103]
03:   by mx0.gmx.net (mx057) with SMTP; 19 Jan 2012 xx:xx:xx +0100
04: Received: from User (cliente-88830.iberbanda.es [87.111.155.151] (may be
05: forged))
06: 	(authenticated bits=0)
07: 	by suttoncompany.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
08: 	Thu, 19 Jan 2012 xx:xx:xx -0500

Zitat:

---

*Defense Finance and Accounting Services, *
*8899 East 56th Street,*
*Indianapolis, IN 46249,*
*United States.*
*Tel: +1-206-339-5662.*

---

Muguphon: +1-206-339-5662 ---> International Telcom, Ltd. (altbekannter Schwarzhut, den nutzten schon die Diploma Mill Scammer vor Jahr und Tag)

header:

01: eceived: from tgi888.com (EHLO mail.tgi888.com) [58.211.119.114]
02:   by mx0.gmx.net (mx068) with SMTP; 21 Jan 2012 xx:xx:xx +0100
03: Received: from User ([206.246.28.245])
04: 	(authenticated bits=0)
05: 	by mail.tgi888.com (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
06: 	Sat, 21 Jan 2012 xx:xx:xx +0800

IP: 206.246.28.245 ---> Seneca Telephone






Und auch diesen Mugu hatten wir eins höher schon:

header:

01: Received: from admin.yournetplus.com (admin.yournetplus.com
02: [64.136.173.100])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100
06: Received: from User (unverified [206.222.178.204]) by
07: ynpmail01.inside.adbasesystems.com
08:   (Vircom SMTPRS 5.0.916.3) with ESMTP id
09: <B0169179957 [at] ynpmail01.inside.adbasesystems.com>;
10:   Sat, 21 Jan 2012 xx:xx:xx -0500

header:

01: Received: from admin.yournetplus.com (EHLO admin.yournetplus.com)
02: [64.136.173.100]
03:   by mx0.gmx.net (mx044) with SMTP; 21 Jan 2012 xx:xx:xx +0100
04: Received: from User (unverified [206.222.178.204]) by
05: ynpmail01.inside.adbasesystems.com
06:   (Vircom SMTPRS 5.0.916.3) with ESMTP id
07: <B0169179957 [at] ynpmail01.inside.adbasesystems.com>;
08:   Sat, 21 Jan 2012 xx:xx:xx -0500

header:

01: Received: from admin.yournetplus.com (EHLO admin.yournetplus.com)
02: [64.136.173.100]
03:   by mx0.gmx.net (mx057) with SMTP; 21 Jan 2012 xx:xx:xx +0100
04: Received: from User (unverified [206.222.178.204]) by
05: ynpmail01.inside.adbasesystems.com
06:   (Vircom SMTPRS 5.0.916.3) with ESMTP id
07: <B0169179957 [at] ynpmail01.inside.adbasesystems.com>;
08:   Sat, 21 Jan 2012 xx:xx:xx -0500

IP: 206.222.178.204 ---> GFI West

header:

01: Received: from imr-mb02.mx.aol.com (EHLO imr-mb02.mx.aol.com)
02: [64.12.207.163]
03:   by mx0.gmx.net (mx011) with SMTP; 22 Jan 2012 xx:xx:xx +0100
04: Received: from mtaout-da02.r1000.mx.aol.com
05: (mtaout-da02.r1000.mx.aol.com [172.29.51.130])
06: 	by imr-mb02.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Sat, 21 Jan 2012 xx:xx:xx -0500
08: Message-ID: [ID filtered]
09: Received: from omh-ma01.r1000.mx.aol.com (omh-ma01.r1000.mx.aol.com
10: [172.29.41.7])
11: 	by mtaout-da02.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTP ID: [ID filtered]
13: 	Sat, 21 Jan 2012 xx:xx:xx -0500 (EST)
14: Received: from mtaout-da03.r1000.mx.aol.com
15: (mtaout-da03.r1000.mx.aol.com [172.29.51.131])
16: 	by omh-ma01.r1000.mx.aol.com (AOL Outbound Holding Interface) with
17: ESMTP ID: [ID filtered]
18: 	Sat, 21 Jan 2012 xx:xx:xx -0500 (EST)
19: Received: from pass (77-52-236-230.dialup.umc.net.ua [77.52.236.230])
20: 	by mtaout-da03.r1000.mx.aol.com (MUA/Third Party Client Interface) with
21: ESMTPA ID: [ID filtered]
22: 	Sat, 21 Jan 2012 xx:xx:xx -0500 (EST)

Muguphon: +234 78137230753 ---> Hadejia, Nigeria

header:

01: Received: from imsantv71.netvigator.com (EHLO imsantv71.netvigator.com)
02: [210.87.250.171]
03:   by mx0.gmx.net (mx030) with SMTP; 22 Jan 2012 xx:xx:xx +0100
04: Received: from imsantv97.netvigator.com (imsantv97.netvigator.com
05: [210.87.250.209])
06: 	by imsantv71.netvigator.com (8.14.4/8.14.4) with ESMTP ID: [ID filtered]
07: 	Mon, 23 Jan 2012 xx:xx:xx +0800
08: Received: from mail.vde-asia.com ([116.48.141.132])
09: 	by imsantv97.netvigator.com with bizsmtp
10: 	ID: [ID filtered]

IP: 116.48.141.132 ---> PCCW Limited, Hong Kong

Letzte Woche waren die Mugus wohl überlastet:

header:

01: Received: from namde-40741-001.dsvr.co.uk (namde-40741-001.dsvr.co.uk
02: [212.69.203.167])
03: 	by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100
06: Received: from [209.237.241.111] (helo=User)
07: 	by namde-40741-001.dsvr.co.uk with esmtpa (Exim 4.69)
08: 	(envelope-from <adoug [at] marketforce.com>)
09: 	ID: [ID filtered]

IP: 209.237.241.111 ---> unitedlayer




der Sternchen-Mugu:

header:

01: Received: from 237.subnet118-97-164.static.astinet.telkom.net.ID: [ID filtered]
02: mail.palcomtech.com) [118.97.164.237]
03:   by mx0.gmx.net (mx055) with SMTP; 27 Jan 2012 xx:xx:xx +0100
04: Received: from User (105-212-115-208.servebyte.net [208.115.212.105])
05: 	(Authenticated sender: denis [at] palcomtech.com)
06: 	by mail.palcomtech.com (Postfix) with ESMTPA ID: [ID filtered]
07: 	Fri, 27 Jan 2012 xx:xx:xx +0700 (WIT)

gecrackt:

Zitat:

---

*Barrister Sesar Jose Ramos*
*Trafford House*
*Chester Road*
*Stretford*
*Manchester*
*M32 0RS*
*E-mail:*

---

Dafür haben sich diese Mugus angestrengt (leider umsonst...):

header:

01: Received: from unknown (EHLO mail.hexco.co.kr) [211.180.219.232]
02:   by mx0.gmx.net (mx073) with SMTP; 24 Jan 2012 xx:xx:xx +0100
03: Received: from User ([70.90.80.34])
04:         by mail.hexco.co.kr (HanExpress Mail Server(Merak9.2.0)) with
05: ASMTP ID: [ID filtered]
06:         Tue, 24 Jan 2012 xx:xx:xx +0900

IP: 70.90.80.34 ---> 70-90-80-34-washington-dc.hfc.comcastbusiness.net

header:

01: Received: from ns1.orientalbd.net (EHLO mail.orieantalbd.net)
02: [116.212.186.35]
03:   by mx0.gmx.net (mx030) with SMTP; 25 Jan 2012 xx:xx:xx +0100
04: Received: from mail.miraebd.net (mail.miraebd.net [116.212.186.3])
05: 	by mail.orieantalbd.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 25 Jan 2012 xx:xx:xx +0600 (BDT)
07: Received: from 41.138.171.115
08:         (SquirrelMail authenticated user ebenezer)
09:         by mail.miraebd.net with HTTP;
10:         Wed, 25 Jan 2012 xx:xx:xx +0600 (BDT)

IP: 41.138.171.115 ---> VISAFONE-LAGOS

gecrackt:

header:

01: Received: from hera.mmsh.univ-aix.fr (EHLO CasHub1.mmsh.univ-aix.fr)
02: [193.50.65.21]
03:   by mx0.gmx.net (mx012) with SMTP; 25 Jan 2012 xx:xx:xx +0100
04: Received: from User (216.100.52.10) by CasHub1.mmsh.univ-aix.fr (10.1.20.0)
05:  with Microsoft SMTP Server ID: [ID filtered]

gecrackt: (!?!)

header:

01: Received: from unknown (EHLO ns.blindoutlet.kr) [115.68.15.119]
02:   by mx0.gmx.net (mx085) with SMTP; 26 Jan 2012 xx:xx:xx +0100
03: Received: from HARVESTTIME-PC (cyberjaya.perfect-privacy.com
04: [202.71.103.246])
05: 	(authenticated bits=0)
06: 	by ns.blindoutlet.kr (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Fri, 27 Jan 2012 xx:xx:xx +0900

IP: 202.71.103.246 ---> cyberjaya.perfect-privacy.com, Malaysia

header:

01: Received: from unknown (EHLO idKorea.com) [210.219.173.88]
02:   by mx0.gmx.net (mx091) with SMTP; 28 Jan 2012 xx:xx:xx +0100
03: Received: from User (cliente-88830.iberbanda.es [87.111.155.151] (may be
04: forged))
05: 	(authenticated bits=0)
06: 	by idKorea.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Sat, 28 Jan 2012 xx:xx:xx +0900

Muguphon: +234-80-90701166 ---> EMTS, Nigeria

header:

01: Received: from mail.3838hz.net (219-87-177-190.static.tfn.net.tw
02: [219.87.177.190])
03: 	by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100
06: Received: from User (unknown [41.203.64.130])
07: 	by mail.3838hz.net (Postfix) with ESMTP ID: [ID filtered]
08: 	Sat, 28 Jan 2012 xx:xx:xx +0800 (CST)

IP: 41.203.64.130 ---> GLO-Mobile Network Services, Nigeria



Muguphon: +44 702 4057608 ---> Magrathea Telecommunications Limited, UK

Es sind noch Mugus da....

header:

01: Received: from 33-56-31-64.servebyte.net (EHLO mx4.hotmail.com)
02: [64.31.56.33] by mx0.gmx.net (mx055) with SMTP; 30 Jan 2012 xx:xx:xx +0100

header:

01: Received: from unknown (EHLO mail.milan-wines.com) [221.238.59.18]
02:   by mx0.gmx.net (mx044) with SMTP; 31 Jan 2012 xx:xx:xx +0100 --->
03: CHINANET TIANJIN
04: Received: from User (120.141.174.167) by WIN-QPPORDKKDAN.milan-wines.com
05:  (192.168.0.10) with Microsoft SMTP Server (TLS) ID: [ID filtered]
06:  2012 xx:xx:xx +0800

X-Originating-IP: [120.141.174.167] ---> Packet One Networks, Malaysia

gecrackt:




der Sternchen-Mugu:

header:

01: Received: (qmail invoked by alias); 31 Jan 2012 xx:xx:xx -0000
02: Received: from 122.3.12.117.pldt.net (EHLO mail.toyotaotis.com.ph)
03: [122.3.12.117]
04:   by mx0.gmx.net (mx016) with SMTP; 31 Jan 2012 xx:xx:xx +0100
05: Received: from User ([41.203.64.131]) by toyotaotis.com.ph with
06: MailEnable ESMTP; Wed, 16 Nov 2011 xx:xx:xx +0800

IP: 41.203.64.131 ---> GLO-Mobile Network Services, Nigeria





Muguphon: +234 80 7055 2118 ---> Globacom Ltd., Nigeria

Zitat:

---

**
*MR. JOEL TEHIE*
*CALL ME ON +234 80 7055 2118*
*CHAIRMAN, FOREIGN PAYMENT RESOLUTION PANEL*

---

header:

01: Received: from oms-ma02.r1000.mx.aol.com (EHLO
02: oms-ma02.r1000.mx.aol.com) [64.12.140.130]
03:   by mx0.gmx.net (mx049) with SMTP; 03 Feb 2012 xx:xx:xx +0100
04: Received: from mtaomg-da06.r1000.mx.aol.com
05: (mtaomg-da06.r1000.mx.aol.com [172.29.51.142])
06: 	by oms-ma02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
07: 03AAA38000085;
08: 	Thu,  2 Feb 2012 xx:xx:xx -0500 (EST)
09: Received: from core-dub003c.r1000.mail.aol.com
10: (core-dub003.r1000.mail.aol.com [172.29.164.73])
11: 	by mtaomg-da06.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id
12: A997BE00008D;
13: 	Thu,  2 Feb 2012 xx:xx:xx -0500 (EST)

X-Originating-IP: [82.128.66.18] ---> Multilinks Telecommunications Limited, Nigeria

Die Mugu-Liste geht noch weiter:

header:

01: Received: from smtp.sanluis.gov.ar (EHLO smtp.sanluis.gov.ar)
02: [64.215.200.35]
03:   by mx0.gmx.net (mx073) with SMTP; 01 Feb 2012 xx:xx:xx +0100
04: Received: from User ([213.123.201.228]) by smtp.sanluis.gov.ar with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Wed, 1 Feb 2012 xx:xx:xx -0300

IP: 213.123.201.228 ---> host213-123-201-228.in-addr.btopenworld.com






der Sternchen-Mugu:

header:

01: Received: from mail.qms.questsys.com (EHLO mail.qms.questsys.com)
02: [208.67.177.247]
03:   by mx0.gmx.net (mx114) with SMTP; 01 Feb 2012 xx:xx:xx +0100
04: Received: from User ([208.115.248.203]) by mail.qms.questsys.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Wed, 1 Feb 2012 xx:xx:xx -0800

IP: 208.115.248.203 ---> 203-248-115-208.reverse.lstn.net

Zitat:

---

*/Best Regard/*//
*/Engineer Fathi Mohamed A. Abbar/*//

---

header:

01: Received: from oms-da01.r1000.mx.aol.com (EHLO
02: oms-da01.r1000.mx.aol.com) [205.188.255.11]
03:   by mx0.gmx.net (mx042) with SMTP; 02 Feb 2012 xx:xx:xx +0100
04: Received: from mtaout-db02.r1000.mx.aol.com
05: (mtaout-db02.r1000.mx.aol.com [172.29.51.194])
06: 	by oms-da01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
07: 6296938000090;
08: 	Thu,  2 Feb 2012 xx:xx:xx -0500 (EST)
09: Received: from User (ip67-88-186-42.z186-88-67.customer.algx.net
10: [67.88.186.42])
11: 	by mtaout-db02.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTPA ID: [ID filtered]
13: 	Thu,  2 Feb 2012 xx:xx:xx -0500 (EST)

header:

01: Received: from oms-db03.r1000.mx.aol.com (oms-db03.r1000.mx.aol.com
02: [205.188.58.3])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu,  2 Feb 2012 xx:xx:xx +0100 (CET)
05: Received: from mtaout-db01.r1000.mx.aol.com
06: (mtaout-db01.r1000.mx.aol.com [172.29.51.193])
07: 	by oms-db03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 573111C0000AC;
09: 	Thu,  2 Feb 2012 xx:xx:xx -0500 (EST)
10: Received: from User (ip67-88-186-42.z186-88-67.customer.algx.net
11: [67.88.186.42])
12: 	by mtaout-db01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
13: ESMTPA ID: [ID filtered]
14: 	Thu,  2 Feb 2012 xx:xx:xx -0500 (EST)

X-AOL-IP: 67.88.186.42 ---> ip67-88-186-42.z186-88-67.customer.algx.net

header:

01: Received: from nyx.kos.net (EHLO nyx.kos.net) [199.246.2.113]
02:   by mx0.gmx.net (mx006) with SMTP; 04 Feb 2012 xx:xx:xx +0100
03: Received: from nobody by nyx.kos.net with local (Exim 4.77)
04: 	(envelope-from <info [at] pbl.co.uk>)
05: 	ID: [ID filtered]
06: Received: from 41.71.174.153
07:         (SquirrelMail authenticated user james.gould)
08:         by www.kos.net with HTTP;
09:         Sat, 4 Feb 2012 xx:xx:xx -0500

IP: 41.71.174.153 ---> Visafone Communications Limited, Nigeria

gecracktes Squirrelmail:



Muguphon: +44 701 1129682 ---> Invomo Ltd., UK


die Madrid-Konnektion:

header:

01: Received: from mail.atchomehealth.com (EHLO mail.atchomehealth.com)
02: [67.239.72.162]
03:   by mx0.gmx.net (mx015) with SMTP; 05 Feb 2012 xx:xx:xx +0100
04: Received: from User ([174.79.33.142]) by mail.atchomehealth.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Mon, 30 Jan 2012 xx:xx:xx -0600

header:

01: Received: from mail.atchomehealth.com (EHLO mail.atchomehealth.com)
02: [67.239.72.162]
03:   by mx0.gmx.net (mx044) with SMTP; 05 Feb 2012 xx:xx:xx +0100
04: Received: from User ([174.79.33.142]) by mail.atchomehealth.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Tue, 31 Jan 2012 xx:xx:xx -0600

IP: 174.79.33.142 ---> wsip-174-79-33-142.ph.ph.cox.net







Muguphon: +34-603-116-000 ---> mobile number, Espana

header:

01: Received: from colegiosdiaconales.cl (unknown [190.151.104.36])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun,  5 Feb 2012 xx:xx:xx -0500 (EST)
04: Received: from colegiosdiaconales.cl (localhost [127.0.0.1])
05: 	by colegiosdiaconales.cl (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun,  5 Feb 2012 xx:xx:xx -0300 (CLST)

X-OriginatingIP: 208.89.213.66 (achadwick) ---> Virpus Network

gecrackt:

Meine Mugu-Liste wollen unbedingt noch bereichern:

header:

01: Received: from prj-com-02.softec-internet.com (EHLO
02: prj-com-02.softec-internet.com) [188.95.112.216]
03:   by mx0.gmx.net (mx105) with SMTP; 06 Feb 2012 xx:xx:xx +0100
04: Received: from prj-com-02.softec-internet.com (unknown [127.0.0.1])
05: 	by prj-com-02.softec-internet.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  6 Feb 2012 xx:xx:xx +0100 (CET)
07: Received: by prj-com-02.softec-internet.com (Postfix, from userID: [ID filtered]
08: 	ID: [ID filtered]
09: Received: from 41.203.64.128 ([41.203.64.128]) by webmail.comcas.es (Horde
10:  Framework) with HTTP; Mon, 06 Feb 2012 xx:xx:xx +0100

IP: 41.203.64.128 ---> GLO-Mobile Network Services, Nigeria





Muguphon: +44 704 5704742 ---> Open Telecom International Ltd., UK

Mugufax: +44 700 6022626 ---> Call Sciences Limited, UK/Yac


der Sternchen-Mugu:

header:

01: Received: from mobile.imc-worldwide.com (EHLO mobile.imc-worldwide.com)
02: [195.202.62.86]
03:   by mx0.gmx.net (mx101) with SMTP; 06 Feb 2012 xx:xx:xx +0100
04: Received: from User ([87.111.155.151] RDNS failed) by
05: mobile.imc-worldwide.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Mon, 6 Feb 2012 xx:xx:xx +0100

IP: 87.111.155.151 ---> cliente-88830.iberbanda.es

Zitat:

---

**
*Attention: Email Bearer,*

---

header:

01: Received: from mail.fpdentistry.com (EHLO fpdentistry.com) [70.88.231.141]
02:   by mx0.gmx.net (mx047) with SMTP; 08 Feb 2012 xx:xx:xx +0100
03: Received: from User ([216.100.52.10]) by fpdentistry.com with Microsoft
04: SMTPSVC(6.0.3790.4675);
05: 	 Mon, 23 Jan 2012 xx:xx:xx -0500

IP: 216.100.52.10 ---> vpn.guittard.com/ATT

header:

01: Received: from oms-da02.r1000.mx.aol.com (oms-da02.r1000.mx.aol.com
02: [205.188.255.12])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu,  9 Feb 2012 xx:xx:xx +0100 (CET)
05: Received: from mtaout-da05.r1000.mx.aol.com
06: (mtaout-da05.r1000.mx.aol.com [172.29.51.133])
07: 	by oms-da02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 0F6E738000084;
09: 	Wed,  8 Feb 2012 xx:xx:xx -0500 (EST)
10: Received: from User (adsl-99-54-33-35.dsl.sndg02.sbcglobal.net
11: [99.54.33.35])
12: 	by mtaout-da05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
13: ESMTPA ID: [ID filtered]
14: 	Wed,  8 Feb 2012 xx:xx:xx -0500 (EST)

X-AOL-IP: 99.54.33.35 ---> adsl-99-54-33-35.dsl.sndg02.sbcglobal.net/ATT

header:

01: Received: from rperel2.iserver.net (EHLO rperel2.iserver.net)
02: [161.58.164.17]
03:   by mx0.gmx.net (mx008) with SMTP; 09 Feb 2012 xx:xx:xx +0100
04: Received: from User (132-241-63-74.static.reverse.lstn.net
05: [74.63.241.132] (may be forged))
06: 	(authenticated bits=0)
07: 	by rperel2.iserver.net (8.12.11.20060614/8.12.11) with ESMTP id
08: q19BJtfS019839;
09: 	Thu, 9 Feb 2012 xx:xx:xx -0700 (MST)

Muguphon: +234-818-244-4858 --> Nigeria

Noch ein par Mgus zur Abendstund':

header:

01: Received: from natalie.oderland.com (natalie.oderland.com [91.201.60.11])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Tue,  7 Feb 2012 xx:xx:xx +0100 (CET)
06: Received: from ml82.128.5.59.multilinks.com ([82.128.5.59]:53895 helo=User)
07: 	by natalie.oderland.com with esmtpa (Exim 4.69)
08: 	(envelope-from <awardinfo [at] freelotto.com>)
09: 	ID: [ID filtered]

IP: 82.128.5.59 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail015.136.54.a.static.mtka.securence.com (EHLO
02: mail015.136.54.a.static.mtka) [216.17.54.136]
03:   by mx0.gmx.net (mx042) with SMTP; 08 Feb 2012 xx:xx:xx +0100
04: Received: from EXMBX01.ex2k7.usinternet.com ([192.168.227.241]) by
05:  EXFE02.ex2k7.usinternet.com ([216.17.1.148]) with mapi; Wed, 8 Feb 2012
06:  xx:xx:xx -0600

Muguphon: +44-701-004-5235 ---> FleXtel Limited, UK

Mugufax: +44-844-664-4704 ---> shared cost number, UK

header:

01: Received: from www.universalmusic.ru (EHLO www.universalmusic.ru)
02: [212.158.165.246]
03:   by mx0.gmx.net (mx029) with SMTP; 12 Feb 2012 xx:xx:xx +0100
04: Received: from [82.128.87.211] (helo=User)
05: 	by www.universalmusic.ru with esmtpa (Exim 4.66)
06: 	(envelope-from <notice [at] worldbankgroups.net>)
07: 	ID: [ID filtered]

IP: 82.128.87.211 ---> Multilinks Telecommunications Limited, Nigeria

Die Wochen-Mugus und meine Beobachtung: normalerweise halten sich die Vögel ja das eigene Nest sauber, aber in letzter Zeit scheinen die Russkis auch eigene gecrackte Serveraccount an die Mugus zu verkaufen. Und die Mugus legen sich eigene 'Free Domains' als Mail Dropboxen an. Ob die üblichen Freemailer-Accounts doch zu schnell gesperrt werden? zu wünschen wäre es...

header:

01: Received: from www.universalmusic.ru (EHLO www.universalmusic.ru)
02: [212.158.165.246]
03:   by mx0.gmx.net (mx029) with SMTP; 12 Feb 2012 xx:xx:xx +0100
04: Received: from [82.128.87.211] (helo=User)
05: 	by www.universalmusic.ru with esmtpa (Exim 4.66)
06: 	(envelope-from <notice [at] worldbankgroups.net>)
07: 	ID: [ID filtered]

IP: 82.128.87.211 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from cooklegalonline.com
02: (75-148-221-89-Houston.hfc.comcastbusiness.net [75.148.221.89])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 17 Feb 2012 xx:xx:xx +0100 (CET)
05: Received: from User ([65.223.239.234]) by cooklegalonline.com with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Fri, 17 Feb 2012 xx:xx:xx -0600

IP: 65.223.239.234 ---> DOVER TOWN SCHOOL DISTRICT

[HTML]form id="frm" name="frm"
action="http://www.burchamservices.com/index/mistery.php" method="POST"
onsubmit="return validate(this)"[/HTML]

IP: 97.74.144.152 ---> p3nlh152.shr.prod.phx3.secureserver.net (Godaddy)

header:

01: eceived: from mail.ts-hotels.kz (ts-hotels.kz [82.200.156.163])
02: 	by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0100
05: Received: from localhost (unknown [175.199.115.232])
06: 	by mail.ts-hotels.kz (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Sat, 18 Feb 2012 xx:xx:xx +0600 (ALMT)

IP: 175.199.115.232 ---> Kornet

gecrackt:




auch ein alter Bekanter aus der Madrid-Konnektion, denn mit diesen Mail-Dropboxen ist der Mugu schon seit Monaten unterwegs:

header:

01: Received: from mx4.hotmail.com (4.red.239.225.212.user.ptvtelecom.com
02: [212.225.239.4])
03: 	by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100

Muguphon: +34 634 113 129 ---> Vodafone España, S.a.u.

Mugufax: +34 911 817 622 ---> Jazz Telecom, S.a.u.

header:

01: Received: from mailsnd2.chollian.net (HELO mailsnd2.chol.com)
02: [203.252.1.123]
03:   by mx0.gmx.net (mx106) with SMTP; 18 Feb 2012 xx:xx:xx +0100
04: Received: (qmail 24236 invoked from network); Sun, 19 Feb 2012 xx:xx:xx
05: +0900 (KST)
06: Received: from [24.147.73.198] (24.147.73.198)
07:   by mailsnd2.chol.com with ESMTP;
08:  Sun, 19 Feb 2012 xx:xx:xx +0900 (KST)

IP: 24.147.73.198 ---> c-24-147-73-198.hsd1.nh.comcast.net







Und um die Bayes-Filter zu umgehen, hat sich der Mugu sogar einen gecrackten T-Offline Account geleistet:

^whois:

header:

01: Received: from 2532.ovz34.hc.ru (EHLO 2532.ovz34.hc.ru) [79.174.64.220]
02:   by mx0.gmx.net (mx046) with SMTP; 19 Feb 2012 xx:xx:xx +0100
03: Received: from vpn.guittard.com ([216.100.52.10] helo=User)
04: 	by 2532.ovz34.hc.ru with esmtpa (Exim 4.67)
05: 	(envelope-from <fconti [at] TOTALPACKAGING.NET>)
06: 	ID: [ID filtered]

Noch ein paar Mugus aus der zweiten Reihe:

header:

01: Received: from unknown (EHLO mailserver.lingtong.com) [219.135.157.75]
02:   by mx0.gmx.net (mx055) with SMTP; 14 Feb 2012 xx:xx:xx +0100  
03: Received: from User (120.140.8.209) by mailserver.lingtong.com (192.168.1.4)
04:  with Microsoft SMTP Server (TLS) ID: [ID filtered]
05:  +0800

gecrackt:

header:

01: Received: from static-b5-251-134.telepac.pt (EHLO
02: servidor.diverdis.local) [82.154.251.134]
03:   by mx0.gmx.net (mx013) with SMTP; 15 Feb 2012 xx:xx:xx +0100
04: Received: from User ([41.93.139.240]) by servidor.diverdis.local with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Tue, 14 Feb 2012 xx:xx:xx +0000

IP: 41.93.139.240 ---> Expresso Telecom Ltd, Ghana





Muguphon: +233-279-953303 ---> Millicom Ghana Ltd (tiGO)

header:

01: Received: from smtp205.alice.it (smtp205.alice.it [82.57.200.101])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 17 Feb 2012 xx:xx:xx +0100 (CET)
04: Received: from User (182.62.59.41) by smtp205.alice.it (8.6.023.02)
05: (authenticated as mymaus [at] alice.it)
06:         ID: [ID filtered]

IP: 182.62.59.41 ---> DiGi Telecommunications, Malaysia

gecrackt:

header:

01: Received: from adsl89-121-172-66.romtelecom.net (EHLO prometeusv.ro)
02: [89.121.172.66]
03:   by mx0.gmx.net (mx058) with SMTP; 17 Feb 2012 xx:xx:xx +0100
04: Received: from User ([64.122.12.114]) by prometeusv.ro with Microsoft
05: SMTPSVC(6.0.3790.3959);
06: 	 Fri, 27 Jan 2012 xx:xx:xx +0200