Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

Dann will ich mal wieder was zur Vergrößerung der Mugu-Kolonie beitragen:

header:

01: Received: from msgmmp-2.gci.net (EHLO msgmmp-2.gci.net) [209.165.130.12]
02:   by mx0.gmx.net (mx011) with SMTP; 16 Aug 2011 xx:xx:xx +0200
03: Received: from osscfzwebmailvm-2 ([209.165.130.82])
04:  by msgmmp-2.gci.net (Sun Java System Messaging Server 6.2-3.03 (built
05: Jun 27
06:  2005)) with ESMTP ID: [ID filtered]
07:  15 Aug 2011 xx:xx:xx -0800 (AKDT)
08: Received: from [69.22.170.116]	by preview.webmail.gci.net with HTTP; Mon,
09:  15 Aug 2011 xx:xx:xx -0800

IP: 69.22.170.116 ---> nLayer

gecrackt:

Muguphon: +44-701-112-8490 ---> Invomo Ltd., UK

header:

01: Received: from 59-126-107-42.HINET-IP.hinet.net (EHLO mail.tccn.gov.tw)
02: [59.126.107.42]
03:   by mx0.gmx.net (mx027) with SMTP; 16 Aug 2011 xx:xx:xx +0200
04: Received: from mail.tccn.gov.tw (localhost [127.0.0.1])
05: 	by mail.tccn.gov.tw (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 16 Aug 2011 xx:xx:xx +0800 (CST)
07: Received: from User (unknown [182.62.41.146])
08: 	by mail.tccn.gov.tw (Postfix) with ESMTP ID: [ID filtered]
09: 	Tue, 16 Aug 2011 xx:xx:xx +0800 (CST)

IP: 182.62.41.146 ---> DiGi Telecommunications Sdn Bhd, MY

Muguphon: +60-1116455077 ---> MTX, Malaysia

header:

01: Received: from gold.uni-miskolc.hu (EHLO gold.uni-miskolc.hu) [193.6.10.2]
02:   by mx0.gmx.net (mx053) with SMTP; 16 Aug 2011 xx:xx:xx +0200
03: Received: from webmail.uni-miskolc.hu (webmail.uni-miskolc.hu [193.6.2.134])
04: 	by gold.uni-miskolc.hu (Postfix) with ESMTP ID: [ID filtered]
05: 	Tue, 16 Aug 2011 xx:xx:xx +0200 (CEST)
06: X-Virus-Scanned: Kamavis at webmail
07: Received: from av-backend.uni-miskolc.hu ([193.6.2.134])
08: 	by webmail.uni-miskolc.hu (webmail.uni-miskolc.hu [193.6.2.134])
09: (amavisd-new, port 1000)
10: 	with ESMTP ID: [ID filtered]
11: Received: from gold.uni-miskolc.hu (gold.uni-miskolc.hu [193.6.10.2])
12: 	by av-backend.uni-miskolc.hu (Postfix) with ESMTP ID: [ID filtered]
13: 	Tue, 16 Aug 2011 xx:xx:xx +0200 (CEST)
14: Received: from webmail.uni-miskolc.hu (webmail.uni-miskolc.hu [193.6.2.134])
15: 	by gold.uni-miskolc.hu (Postfix) with ESMTP ID: [ID filtered]
16: 	Tue, 16 Aug 2011 xx:xx:xx +0200 (CEST)

Muguphon: +234 7033528139 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from mail.transatlgroup.com (EHLO sbg.transatlgroup.com)
02: [168.187.183.202]
03:   by mx0.gmx.net (mx109) with SMTP; 18 Aug 2011 xx:xx:xx +0200
04: X-AuditID: [ID filtered]
05: Received: from mail.transatlgroup.com (mail.transatlgroup.com
06: [192.168.0.10])
07: 	by sbg.transatlgroup.com (Symantec Messaging Gateway) with SMTP id
08: 86.46.02834.3B55C4E4; Thu, 18 Aug 2011 xx:xx:xx +0300 (AST)
09: To: undisclosed-recipients:;
10: Received: from User ([69.43.12.132]) by mail.transatlgroup.com with
11: Microsoft SMTPSVC(6.0.3790.4675);
12: 	 Wed, 17 Aug 2011 xx:xx:xx +0300

IP: 69.43.12.132 ---> CITYNET

header:

01: Received: from eightbit.co.jp (EHLO eightbit.co.jp) [112.78.200.153]
02:   by mx0.gmx.net (mx095) with SMTP; 19 Aug 2011 xx:xx:xx +0200
03: Received: from User (unknown [79.120.58.130])
04: 	by eightbit.co.jp (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri, 19 Aug 2011 xx:xx:xx +0900 (JST)

IP: 79.120.58.130 ---> ip-79-120-57-130.bb.netbynet.ru

Muguphon: +234 7087130786 ---> Celtel Nigeria Limited/Zain

- kjz

Es mussten sich noch melden:

header:

01: Received: from dgcom.no-ip.org (static-217-133-45-78.clienti.tiscali.it
02: [217.133.45.78])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from localhost (localhost.localdomain [127.0.0.1])
07: 	by dgcom.no-ip.org (Postfix) with ESMTP ID: [ID filtered]
08: 	Fri, 19 Aug 2011 xx:xx:xx +0200 (CEST)
09: Received: from User (unknown [115.173.55.129])
10: 	by dgcom.no-ip.org (Postfix) with ESMTP ID: [ID filtered]
11: 	Fri, 19 Aug 2011 xx:xx:xx +0200 (CEST)

header:

01: Received: from static-217-133-45-78.clienti.tiscali.it (EHLO
02: dgcom.no-ip.org) [217.133.45.78]
03:   by mx0.gmx.net (mx058) with SMTP; 20 Aug 2011 xx:xx:xx +0200
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by dgcom.no-ip.org (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 19 Aug 2011 xx:xx:xx +0200 (CEST)
07: Received: from User (unknown [115.173.55.129])
08: 	by dgcom.no-ip.org (Postfix) with ESMTP ID: [ID filtered]
09: 	Fri, 19 Aug 2011 xx:xx:xx +0200 (CEST)

header:

01: Received: from static-217-133-45-78.clienti.tiscali.it (EHLO
02: dgcom.no-ip.org) [217.133.45.78]
03:   by mx0.gmx.net (mx046) with SMTP; 20 Aug 2011 xx:xx:xx +0200
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by dgcom.no-ip.org (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 19 Aug 2011 xx:xx:xx +0200 (CEST)
07: Received: from User (unknown [115.173.55.129])
08: 	by dgcom.no-ip.org (Postfix) with ESMTP ID: [ID filtered]
09: 	Fri, 19 Aug 2011 xx:xx:xx +0200 (CEST)

IP: 115.173.55.129 ---> China Unicom Guangdong

header:

01: Received: from project.deeplocal.com (EHLO project.deeplocal.com)
02: [72.240.22.162]
03:   by mx0.gmx.net (mx033) with SMTP; 20 Aug 2011 xx:xx:xx +0200
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by project.deeplocal.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 19 Aug 2011 xx:xx:xx -0400 (EDT)
07: X-Virus-Scanned: amavisd-new at deeplocal.com
08: Received: from project.deeplocal.com ([127.0.0.1])
09: 	by localhost (project.deeplocal.com [127.0.0.1]) (amavisd-new, port 10024)
10: 	with LMTP ID: [ID filtered]
11: Received: from User (localhost.localdomain [127.0.0.1])
12: 	by project.deeplocal.com (Postfix) with SMTP ID: [ID filtered]
13: 	Fri, 19 Aug 2011 xx:xx:xx -0400 (EDT)

header:

01: Received: from mail.upm.edu.my (EHLO mail.upm.edu.my) [119.40.119.52]
02:   by mx0.gmx.net (mx115) with SMTP; 20 Aug 2011 xx:xx:xx +0200
03: X-AuditID: [ID filtered]
04: Received: from putra.upm.edu.my (putra.upm.edu.my [172.16.240.200])
05: 	by mail.upm.edu.my (upm.edu.my) with SMTP ID: [ID filtered]
06: 20 Aug 2011 xx:xx:xx +0800 (MYT)

gecrackt:

header:

01: Received: from idcmail-mo2no.shaw.ca (EHLO idcmail-mo2no.shaw.ca)
02: [64.59.134.9]
03:   by mx0.gmx.net (mx014) with SMTP; 22 Aug 2011 xx:xx:xx +0200
04: Received: from pd5mr2no-ssvc.prod.shaw.ca ([10.0.153.213])
05:   by pd5mo1no-svcs.prod.shaw.ca with ESMTP; 22 Aug 2011 xx:xx:xx -0600
06: Received: from unknown (HELO ms004no.no.cg.dcs.int.inet) ([10.0.153.22])
07:   by pd5mr2no-svcs.prod.shaw.ca with ESMTP; 22 Aug 2011 xx:xx:xx -0600
08: Received: from shaw.ca ([unknown] [10.0.145.83])
09:  by l-daemon (Sun Java(tm) System Messaging Server 7.3-11.01 64bit
10: (built Sep
11:  1 2009)) with ESMTP ID: [ID filtered]
12:  22 Aug 2011 xx:xx:xx -0600 (MDT)
13: Received: from [10.0.144.152] (Forwarded-For: [10.0.146.152])
14:  by vms003.prod.shaw.ca (mshttpd); Mon, 22 Aug 2011 xx:xx:xx -0700

- kjz

Im Schnelldurchlauf fürs Protokoll:

header:

01: Received: from sms-gw2.lausd.net (sms-gw2.lausd.net [204.108.65.51])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 31 Aug 2011 xx:xx:xx +0200 (CEST)
04: X-AuditID: [ID filtered]
05: Received: from mailfe-la03.lausd.net (mailout.lausd.net [10.8.21.56])
06: 	by sms-gw2.lausd.net (Sendmail) with SMTP ID: [ID filtered]
07: 31 Aug 2011 xx:xx:xx -0700 (PDT)

header:

01: Received: from mx7.hosteur.com ([127.0.0.1])
02: 	by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024)
03: 	with LMTP ID: [ID filtered]
04: Received: from mrs47.hosteur.com (unknown [217.16.6.57])
05: 	by mx7.hosteur.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu,  1 Sep 2011 xx:xx:xx +0000 (UTC)
07: Received: from localhost ([127.0.0.1] helo=webmail.senioritage.fr)
08: 	by mrs47.hosteur.com with esmtpa (Exim 4.69)
09: 	(envelope-from <claimsoffice [at] undp.org>)
10: 	ID: [ID filtered]
11: Received: from 82.128.1.145 ([82.128.1.145]) (proxying for 82.128.1.145)
12:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
13:         by webmail.senioritage.fr with HTTP;
14:         Mon, 5 Sep 2011 xx:xx:xx +0200

header:

01: Received: from mx6.hosteur.com (mx6.hosteur.com [217.16.6.65])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  5 Sep 2011 xx:xx:xx +0200 (CEST)
04: Received: from localhost (mx4 [127.0.0.1])
05: 	by mx6.hosteur.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu,  1 Sep 2011 xx:xx:xx +0200 (CEST)
07: X-Virus-Scanned: amavisd-new at localhost
08: Received: from mx6.hosteur.com ([127.0.0.1])
09: 	by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024)
10: 	with LMTP ID: [ID filtered]
11: Received: from mrs47.hosteur.com (unknown [217.16.6.57])
12: 	by mx6.hosteur.com (Postfix) with ESMTP ID: [ID filtered]
13: 	Thu,  1 Sep 2011 xx:xx:xx +0000 (UTC)
14: Received: from localhost ([127.0.0.1] helo=webmail.senioritage.fr)
15: 	by mrs47.hosteur.com with esmtpa (Exim 4.69)
16: 	(envelope-from <claimsoffice [at] undp.org>)
17: 	ID: [ID filtered]
18: Received: from 82.128.1.41 ([82.128.1.41]) (proxying for 82.128.1.41)
19:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
20:         by webmail.senioritage.fr with HTTP;
21:         Mon, 5 Sep 2011 xx:xx:xx +0200

IP: 82.128.1.145 ---> ml82.128.1.145.multilinks.com, Nigeria

Muguphon: +234-703-352-8139 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from axpro.com.tw (219-80-36-83.static.tfn.net.tw [219.80.36.83])
02: 	by mx.kundenserver.de (node=mxbap2) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from User ([173.248.151.203])
06: 	(authenticated bits=0)
07: 	by axpro.com.tw (8.12.8/8.12.8) with ESMTP ID: [ID filtered]
08: 	Tue, 6 Sep 2011 xx:xx:xx +0800

header:

01: Received: from 219-80-36-83.static.tfn.net.tw (EHLO axpro.com.tw)
02: [219.80.36.83]
03:   by mx0.gmx.net (mx080) with SMTP; 06 Sep 2011 xx:xx:xx +0200
04: Received: from User ([173.248.151.203])
05: 	(authenticated bits=0)
06: 	by axpro.com.tw (8.12.8/8.12.8) with ESMTP ID: [ID filtered]
07: 	Tue, 6 Sep 2011 xx:xx:xx +0800

header:

01: Received: from 219-80-36-83.static.tfn.net.tw (EHLO axpro.com.tw)
02: [219.80.36.83]
03:   by mx0.gmx.net (mx080) with SMTP; 06 Sep 2011 xx:xx:xx +0200
04: Received: from User ([173.248.151.203])
05: 	(authenticated bits=0)
06: 	by axpro.com.tw (8.12.8/8.12.8) with ESMTP ID: [ID filtered]
07: 	Tue, 6 Sep 2011 xx:xx:xx +0800

header:

01: Received: from mail.aatbrasil.com.br (EHLO webmail.aatbrasil.com.br)
02: [189.21.0.147]
03:   by mx0.gmx.net (mx028) with SMTP; 09 Sep 2011 xx:xx:xx +0200
04: Received: from User (ml82.128.15.112.multilinks.com [82.128.15.112])
05: 	by webmail.aatbrasil.com.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  9 Sep 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from mail.aatbrasil.com.br (EHLO webmail.aatbrasil.com.br)
02: [189.21.0.147]
03:   by mx0.gmx.net (mx045) with SMTP; 09 Sep 2011 xx:xx:xx +0200
04: Received: from User (ml82.128.15.112.multilinks.com [82.128.15.112])
05: 	by webmail.aatbrasil.com.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  9 Sep 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from webmail.aatbrasil.com.br (mail.aatbrasil.com.br
02: [189.21.0.147])
03: 	by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from User (ml82.128.15.112.multilinks.com [82.128.15.112])
07: 	by webmail.aatbrasil.com.br (Postfix) with ESMTP ID: [ID filtered]
08: 	Fri,  9 Sep 2011 xx:xx:xx -0300 (BRT)

header:

01: Received: from 84.subnet222-124-208.astinet.telkom.net.ID: [ID filtered]
02: mail.ums.ac.id) [222.124.208.84]
03:   by mx0.gmx.net (mx003) with SMTP; 09 Sep 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.ums.ac.ID: [ID filtered]
06: 	Fri,  9 Sep 2011 xx:xx:xx +0700 (WIT)
07: X-Virus-Scanned: Debian amavisd-new at mail.ums.ac.id
08: Received: from mail.ums.ac.ID: [ID filtered]
09: 	by localhost (mail.ums.ac.ID: [ID filtered]
10: 	with ESMTP ID: [ID filtered]
11: Received: from Unknown (unknown [180.149.96.69])
12: 	by mail.ums.ac.ID: [ID filtered]
13: 	Fri,  9 Sep 2011 xx:xx:xx +0700 (WIT)

header:

01: Received: from mailhub131.itcs.purdue.edu (EHLO
02: mailhub131.itcs.purdue.edu) [128.210.5.131]
03:   by mx0.gmx.net (mx105) with SMTP; 10 Sep 2011 xx:xx:xx +0200
04: Received: from WC-WS.wsad.ws.k12.az.us (web.ics.purdue.edu [128.210.10.145])
05: 	(authenticated bits=0)
06: 	by mailhub131.itcs.purdue.edu (8.14.4/8.14.4/mta-auth.smtp.purdue.edu)
07: with ESMTP ID: [ID filtered]
08: 	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
09: 	Sat, 10 Sep 2011 xx:xx:xx -0400

header:

01: Received: from waller11.lnk.telstra.net (EHLO server.amstar.com.au)
02: [120.151.204.105]
03:   by mx0.gmx.net (mx066) with SMTP; 10 Sep 2011 xx:xx:xx +0200
04: Received: from User ([41.134.101.33]) by server.amstar.com.au with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sat, 10 Sep 2011 xx:xx:xx +1000

IP: 41.134.101.33 ---> 41-134-101-33.dsl.mweb.co.za

header:

01: Received: from exch01.welchandcompany.net (exch01.welchandcompany.net
02: [192.216.121.231])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 11 Sep 2011 xx:xx:xx +0200 (CEST)
05: Received: from server.dfs-us.net ([75.76.191.218]) by
06: exch01.welchandcompany.net with Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Sat, 10 Sep 2011 xx:xx:xx -0400
08: Received: from User ([208.88.65.194]) by server.dfs-us.net with
09: Microsoft SMTPSVC(6.0.3790.3959);
10: 	 Sat, 10 Sep 2011 xx:xx:xx -0400

header:

01: Received: from relay.mail.interoute.ch (EHLO relay1.mail.interoute.ch)
02: [154.15.254.142]
03:   by mx0.gmx.net (mx115) with SMTP; 07 Sep 2011 xx:xx:xx +0200
04: Received: from [154.15.201.166] (helo=outbound1.psi.neteu.net)
05: 	by relay1b.mail.interoute.com with esmtp (Exim 4.71)
06: 	(envelope-from <robertpeters1 [at] skymail.mn>)
07: 	ID: [ID filtered]
08: Received: from 82.128.39.65 (EHLO User) ([82.128.39.65])
09: 	by outbound1.psi.neteu.net (MOS 3.10.8-GA FastPath queued)
10: 	with ESMTP ID: [ID filtered]
11: 	Wed, 07 Sep 2011 xx:xx:xx +0200 (CEST)

IP: 82.128.39.65 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from static-13-139-229-77.ipcom.comunitel.net (EHLO
02: mx4.hotmail.com) [77.229.139.13]
03:   by mx0.gmx.net (mx090) with SMTP; 07 Sep 2011 xx:xx:xx +0200

header:

01: Received: from farnet.com.tw (EHLO mail.farnet.com.tw) [211.72.49.165]
02:   by mx0.gmx.net (mx094) with SMTP; 08 Sep 2011 xx:xx:xx +0200
03: Received: from User (74-206-22-167.static-ip.m.telepacific.net
04: [74.206.22.167])
05: 	by mail.farnet.com.tw (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu,  8 Sep 2011 xx:xx:xx +0800 (CST)

header:

01: Received: from farnet.com.tw (EHLO mail.farnet.com.tw) [211.72.49.165]
02:   by mx0.gmx.net (mx074) with SMTP; 08 Sep 2011 xx:xx:xx +0200
03: Received: from User (unknown [74.212.144.146])
04: 	by mail.farnet.com.tw (Postfix) with ESMTP ID: [ID filtered]
05: 	Thu,  8 Sep 2011 xx:xx:xx +0800 (CST)

header:

01: Received: from 173-13-181-170-sfba.hfc.comcastbusiness.net (EHLO
02: ue.theuegroup.net) [173.13.181.170]
03:   by mx0.gmx.net (mx024) with SMTP; 07 Sep 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by ue.theuegroup.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue,  6 Sep 2011 xx:xx:xx -0700 (PDT)
07: X-Quarantine-ID: [ID filtered]
08: X-Virus-Scanned: amavisd-new at theuegroup.net
09: Received: from ue.theuegroup.net ([127.0.0.1])
10: 	by localhost (ue.theuegroup.net [127.0.0.1]) (amavisd-new, port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [208.24.218.99])
13: 	by ue.theuegroup.net (Postfix) with ESMTP ID: [ID filtered]
14: 	Tue,  6 Sep 2011 xx:xx:xx -0700 (PDT)

header:

01: Received: from ims-d14.mx.aol.com (ims-d14.mx.aol.com [205.188.249.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx Tue,  6 Sep 2011 xx:xx:xx +0200 (CEST)
04: Received: from oms-db02.r1000.mx.aol.com (oms-db02.r1000.mx.aol.com
05: [205.188.58.2])
06: 	by ims-d14.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Tue, 6 Sep 2011 xx:xx:xx -0400
08: Message-ID: [ID filtered]
09: Received: from mtaout-ma06.r1000.mx.aol.com
10: (mtaout-ma06.r1000.mx.aol.com [172.29.41.6])
11: 	by oms-db02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 5A42E1C00008A;
13: 	Tue,  6 Sep 2011 xx:xx:xx -0400 (EDT)
14: Received: from User (unknown [41.203.64.252])
15: 	by mtaout-ma06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: 	Tue,  6 Sep 2011 xx:xx:xx -0400 (EDT)

IP: 41.203.64.252 ---> GLO-Mobile Network Services, Nigeria

header:

01: Received: from ims-d12.mx.aol.com (EHLO ims-d12.mx.aol.com)
02: [205.188.249.149]
03:   by mx0.gmx.net (mx046) with SMTP; 06 Sep 2011 xx:xx:xx +0200
04: Received: from oms-mb03.r1000.mx.aol.com (oms-mb03.r1000.mx.aol.com
05: [64.12.102.139])
06: 	by ims-d12.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Tue, 6 Sep 2011 xx:xx:xx -0400
08: Received: from mtaomg-db06.r1000.mx.aol.com
09: (mtaomg-db06.r1000.mx.aol.com [172.29.51.204])
10: 	by oms-mb03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
11: BE3DB1C000083;
12: 	Tue,  6 Sep 2011 xx:xx:xx -0400 (EDT)
13: Received: from core-mfd004b.r1000.mail.aol.com
14: (core-mfd004.r1000.mail.aol.com [172.29.120.79])
15: 	by mtaomg-db06.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id
16: DB832E000090;
17: 	Tue,  6 Sep 2011 xx:xx:xx -0400 (EDT)

header:

01: Received: from router.vyso.ru (router.vyso.ru [212.75.152.19])
02: 	(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Wed,  7 Sep 2011 xx:xx:xx +0200 (CEST)
06: Received: from kas30pipe.vyso.ru (localhost [127.0.0.1])
07: 	by router.vyso.ru (Postfix) with ESMTP ID: [ID filtered]
08: 	Tue,  6 Sep 2011 xx:xx:xx +0600 (YEKST)
09: Received: by router.vyso.ru (Postfix, from userID: [ID filtered]
10: 	ID: [ID filtered]

Muguphon: +34 634 027 424 ---> Vodafone España, S.a.u.

header:

01: Received: from ims-m12.mx.aol.com (EHLO ims-m12.mx.aol.com) [64.12.207.145]
02:   by mx0.gmx.net (mx094) with SMTP; 06 Sep 2011 xx:xx:xx +0200
03: Received: from oms-mb04.r1000.mx.aol.com (oms-mb04.r1000.mx.aol.com
04: [64.12.102.140])
05: 	by ims-m12.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Tue, 6 Sep 2011 xx:xx:xx -0400
07: Received: from mtaomg-db01.r1000.mx.aol.com
08: (mtaomg-db01.r1000.mx.aol.com [172.29.51.199])
09: 	by oms-mb04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
10: 92A4B1C000084;
11: 	Tue,  6 Sep 2011 xx:xx:xx -0400 (EDT)
12: Received: from core-mrc001b.r1000.mail.aol.com
13: (core-mrc001.r1000.mail.aol.com [172.29.185.65])
14: 	by mtaomg-db01.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id
15: 15C7CE00009C;
16: 	Tue,  6 Sep 2011 xx:xx:xx -0400 (EDT)

X-Originating-IP: [189.39.241.119] ---> Mar Internet Provider Ltda., BR

header:

01: Received: from correo.pami.org.ar (pami.org.ar [190.30.226.184])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 11 Sep 2011 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by correo.pami.org.ar (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 11 Sep 2011 xx:xx:xx -0300 (ART)
07: X-Virus-Scanned: amavisd-new at correo.pami.org.ar
08: Received: from correo.pami.org.ar ([127.0.0.1])
09: 	by localhost (correo.pami.org.ar [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from correo.pami.org.ar (correo.pami.org.ar [172.19.1.56])
12: 	by correo.pami.org.ar (Postfix) with ESMTP ID: [ID filtered]
13: 	Sun, 11 Sep 2011 xx:xx:xx -0300 (ART)

X-Originating-IP: [65.254.61.250] ---> GNAXNET

- kjz

Für die Sammlung:

header:

01: Received: from mailbox.wabash.net (EHLO win-mailbox.wabash.net)
02: [12.160.140.18]
03:   by mx0.gmx.net (mx110) with SMTP; 12 Sep 2011 xx:xx:xx +0200
04: Received: from wabash.net (win-mailbox.wabash.net [127.0.0.1])
05: 	by win-mailbox.wabash.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 11 Sep 2011 xx:xx:xx -0500 (CDT)

X-OriginatingIP: 49.212.38.134 (frnees) ---> www29096u.sakura.ne.jp

header:

01: Received: from isp6.4u.com.gh (HELO isp6.4u.com.gh) [80.87.72.6]
02:   by mx0.gmx.net (mx080) with SMTP; 13 Sep 2011 xx:xx:xx +0200
03: Received: from webmail.4u.com.gh (localhost [127.0.0.1])
04: 	by isp6.4u.com.gh (Postfix) with ESMTP ID: [ID filtered]
05: 	Mon, 12 Sep 2011 xx:xx:xx +0000 (GMT)
06: Received: from 213.232.200.162
07:         (SquirrelMail authenticated user info-mplaza)
08:         by webmail.4u.com.gh with HTTP;
09:         Mon, 12 Sep 2011 xx:xx:xx -0000

IP: 213.232.200.162 ---> Millhouse Managment/RusComNet Ltd.

header:

01: Received: from ns1.tapakweb.com ([210.48.155.19])
02: 	by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from [127.0.0.1] (helo=www.smkgulau.net)
06: 	by ns1.tapakweb.com with esmtpa (Exim 4.69)
07: 	(envelope-from <jerryntai_1112 [at] yahoo.com.hk>)
08: 	ID: [ID filtered]
09: Received: from 113.106.234.226 ([113.106.234.226])
10:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
11:         by www.smkgulau.net with HTTP;
12:         Mon, 12 Sep 2011 xx:xx:xx +0800

IP: 113.106.234.226 ---> CHINANET Guangdong

die Madrid-Konnektion:

header:

01: Received: from smtp-01.piensasolutions.com (slsa667.piensasolutions.com
02: [217.76.150.252])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 15 Sep 2011 xx:xx:xx +0200 (CEST)
05: Received: from sql-PC (unknown [46.6.138.104])
06: 	by smtp-01.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Thu, 15 Sep 2011 xx:xx:xx +0200 (CEST)

IP: 46.6.138.104 ---> Xfera Moviles SA / Yoigo / Telia

Muguphon: +34 698-344-600 ---> mobile number, Spain

Mugufax: +34 911-820-312 ---> Jazz Telecom, S.a.u., Spain

header:

01: Received: from metek.com.ua (EHLO metek.com.ua) [193.23.140.35]
02:   by mx0.gmx.net (mx090) with SMTP; 16 Sep 2011 xx:xx:xx +0200
03: Received: from metek.com.ua (localhost [127.0.0.1])
04: 	by metek.com.ua (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri, 16 Sep 2011 xx:xx:xx +0300 (EEST)
06: Received: from User (unknown [115.241.238.143])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	by metek.com.ua (Postfix) with ESMTPSA ID: [ID filtered]
10: 	Fri, 16 Sep 2011 xx:xx:xx +0300 (EEST)

IP: 115.241.238.143 ---> Reliance Communication Ltd., IN

header:

01: Received: from smtp42.singnet.com.sg (EHLO smtp42.singnet.com.sg)
02: [165.21.103.146]
03:   by mx0.gmx.net (mx070) with SMTP; 16 Sep 2011 xx:xx:xx +0200
04: Received: from server.nucon.local (exchange.nucon.com.sg [203.169.122.241])
05: 	by smtp42.singnet.com.sg (8.14.3/8.14.1) with ESMTP ID: [ID filtered]
06: 	Fri, 16 Sep 2011 xx:xx:xx +0800
07: Received: from User ([68.236.186.128]) by server.nucon.local with
08: Microsoft SMTPSVC(6.0.3790.4675);
09: 	 Fri, 16 Sep 2011 xx:xx:xx +0800

IP: 68.236.186.128 ---> static-68-236-186-128.ny325.east.verizon.net

Tja, die Dreckskisten in Indien sind samt Blumail immer noch offen, also anscheinend aktive Beihilfe zu kriminellen Handlungen:

header:

01: Received: from firewall.fmrp.usp.br (EHLO amazonas.fmrp.usp.br)
02: [143.107.199.10]
03:   by mx0.gmx.net (mx013) with SMTP; 19 Sep 2011 xx:xx:xx +0200
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by amazonas.fmrp.usp.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon, 19 Sep 2011 xx:xx:xx -0300 (BRT)
07: X-Virus-Scanned: amavisd-new at fmrp.usp.br
08: Received: from amazonas.fmrp.usp.br ([127.0.0.1])
09: 	by localhost (amazonas.fmrp.usp.br [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from amazonas.fmrp.usp.br (localhost.localdomain [127.0.0.1])
12: 	by amazonas.fmrp.usp.br (Postfix) with ESMTP ID: [ID filtered]
13: 	Mon, 19 Sep 2011 xx:xx:xx -0300 (BRT)

X-Originating-IP: [115.241.166.123] ---> Reliance Communication Ltd., IN

- kjz

Die Mugu-Gemeinde möchten gerne bereichern:

header:
01: Received: from 75-148-84-17-Oregon.hfc.comcastbusiness.net (EHLO
02: EK-SERVER.ekplumbing.local) [75.148.84.17]
03:   by mx0.gmx.net (mx014) with SMTP; 12 Sep 2011 xx:xx:xx +0200
04: Received: from User ([121.128.206.2]) by EK-SERVER.ekplumbing.local with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Mon, 12 Sep 2011 xx:xx:xx -0700
IP: 121.128.206.2 ---> KORNET, KR

Muguphon: +234-802-077-5039 ---> Celtel Nigeria Limited/Zain

Mugufax: +234-816-732-1368 ---> Nigeria

header:
01: Received: from unknown (EHLO red.nextline.net) [61.109.250.200]
02:   by mx0.gmx.net (mx058) with SMTP; 13 Sep 2011 xx:xx:xx +0200
03: Received: from User ([218.75.215.86])
04: 	(authenticated)
05: 	by red.nextline.net (8.11.6/8.11.6) with ESMTP ID: [ID filtered]
06: 	Wed, 14 Sep 2011 xx:xx:xx +0900
IP: 218.75.215.86 ---> CHINANET-HN Zhuzhou

header:
01: Received: from wweb01.lax1.pronethosting.net (EHLO
02: wweb02.lax1.pronethosting.net) [209.151.224.245]
03:   by mx0.gmx.net (mx015) with SMTP; 16 Sep 2011 xx:xx:xx +0200
04: Received: from User ([208.24.218.99]) by wweb02.lax1.pronethosting.net
05: with MailEnable ESMTP; Fri, 16 Sep 2011 xx:xx:xx -0700
IP: 208.24.218.99 ---> Sprint

Wie man sieht, der Trend geht dahin, dass auch der gemeine Mugu kaum mehr direkt über nigerianische IPs einliefert. (Die nigerianischen Netzwerke dürften sowieso alle bis zum Ende aller Tage in sämtlichen Blacklists der Welt vor sich hin gammeln.) Man greift beim Einliefern auf die gecrackten Mailserver jetzt auch auf Zombie-PCs zurück.

- kjz

In die Mugu-Schlange reihen sich ein:

header:

01: Received: from firewall.fmrp.usp.br (EHLO amazonas.fmrp.usp.br)
02: [143.107.199.10]
03:   by mx0.gmx.net (mx013) with SMTP; 19 Sep 2011 xx:xx:xx +0200
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by amazonas.fmrp.usp.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon, 19 Sep 2011 xx:xx:xx -0300 (BRT)
07: X-Virus-Scanned: amavisd-new at fmrp.usp.br
08: Received: from amazonas.fmrp.usp.br ([127.0.0.1])
09: 	by localhost (amazonas.fmrp.usp.br [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from amazonas.fmrp.usp.br (localhost.localdomain [127.0.0.1])
12: 	by amazonas.fmrp.usp.br (Postfix) with ESMTP ID: [ID filtered]
13: 	Mon, 19 Sep 2011 xx:xx:xx -0300 (BRT)

gecrackt:

der Sternchen-Mugu:

header:

01: Received: from mv-osn-hcb004.ocn.ad.jp (EHLO mv-osn-hcb004.ocn.ad.jp)
02: [118.23.108.11]
03:   by mx0.gmx.net (mx023) with SMTP; 20 Sep 2011 xx:xx:xx +0200
04: Received: from vcriver.ocn.ne.jp (mv-osn-hcb004 [118.23.108.11])
05: 	by mv-osn-hcb004.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 20 Sep 2011 xx:xx:xx +0900 (JST)
07: Received: from User (unknown [41.58.36.2])
08: 	by vcriver.ocn.ne.jp (Postfix) with ESMTP;
09: 	Tue, 20 Sep 2011 xx:xx:xx +0900 (JST)

IP: 41.58.36.2 ---> SWIFT NETWORKS LIMITED, Nigeria

Zitat:

**Sincerely Yours**
****
**Mrs.Mary Louis**
**(London UK).Dear Friend,**
**

header:

01: Received: from mail.emperorhouse.com (EHLO emsrv.emperorhouse.com)
02: [202.142.196.66]
03:   by mx0.gmx.net (mx112) with SMTP; 22 Sep 2011 xx:xx:xx +0200
04: Received: from User ([82.128.81.180]) by emsrv.emperorhouse.com with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Thu, 22 Sep 2011 xx:xx:xx +0700

IP: 82.128.81.180 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail.deutscher-atlas.de (EHLO mail.deutscher-atlas.de)
02: [87.234.216.170]
03:   by mx0.gmx.net (mx082) with SMTP; 23 Sep 2011 xx:xx:xx +0200
04: X-ASG-Debug-ID: [ID filtered]
05: Received: from mailintern.deutscher-atlas.de ([192.168.14.253]) by
06: mail.deutscher-atlas.de with ESMTP ID: [ID filtered]
07: Fri, 23 Sep 2011 xx:xx:xx +0200 (CEST)
08: X-Barracuda-Envelope-From: latin.rdp [at] ntline.net
09: X-ASG-Whitelist: Client
10: Received: from server.bluecooling.local ([81.136.138.196])
11:         by mailintern.deutscher-atlas.de (IceWarp 9.4.2) with ASMTP id
12: GJG54605
13:         for xxxxx; Fri, 23 Sep 2011 xx:xx:xx +0200

IP: 81.136.138.196 ---> host81-136-138-196.in-addr.btopenworld.com

- kjz

Die Schlange wird länger:

header:

01: Received: from dpugw.dumlupinar.edu.tr (EHLO
02: dpusmtpgw.dumlupinar.edu.tr) [194.27.43.32]
03:   by mx0.gmx.net (mx092) with SMTP; 19 Sep 2011 xx:xx:xx +0200
04: Received: (surgate 8908 invoked by UID: [UID filtered]
05: Received: from unknown (HELO mail.dumlupinar.edu.tr) (194.27.43.23) by 0
06: with SMTP; 18 Sep 2011 xx:xx:xx -0000
07: Received: from User (unknown [80.78.77.132])by mail.dumlupinar.edu.tr
08: (Postfix) with ESMTP ID: [ID filtered]
09: (EEST)

IP: 80.78.77.132 ---> ABCOM-RESIDENTIAL, AL

die Madrid-Konnektion:

header:

01: Received: from mailout02.t-online.de (mailout02.t-online.de [194.25.134.17])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 25 Sep 2011 xx:xx:xx +0200 (CEST)
04: Received: from fwd16.aul.t-online.de (fwd16.aul.t-online.de )
05: 	by mailout02.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (ZYgW8uZAotdIuR6TxOoAuPNZLySLVFNy1fhQD7LDJDMpDNOIthT69CgENxEAC8wiDhGi3fwtxJ@[95.32.125.158&
09: 	93;)
10: by fwd16.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 95.32.125.158 ---> 158.125.32.95.dsl-dynamic.vsi.ru

Wieder mal einen T-Offline Account gecrackt:

Muguphon: +34 603269362 ---> mobile number, Espana

Mugufax: +34 911881363 ---> Jazz Telecom, S.a.u., Espana

Da muss man sich nicht über schlechte Presse wundern:

Zitat:

T-Online weiterhin bei SpamCop gelistet

- kjz

26.09.2011, 22:07
hoppala

Wie viel legitime Mail wird eigentlich von *.homepage.t-online.de versendet? Ich habe noch nie welche gesehen (das trifft allerdings für die weitaus meisten anderen Domains auf der Welt auch zu).

hoppala

Und wieder mal ist Mugu-Tag:

header:

01: Received: from mx1.rmp.gov.my (EHLO mx1.rmp.gov.my) [218.208.39.34]
02:   by mx0.gmx.net (mx015) with SMTP; 26 Sep 2011 xx:xx:xx +0200
03: Date: Mon, 26 Sep 2011 xx:xx:xx +0100

gecrackter Behörden-Account:

Muguphon: +44 703 5927179 ---> Open Telecom International Ltd., UK

header:

01: Received: from mail.shabbyapple.com (EHLO mail.shabbyapple.com)
02: [74.86.118.144]
03:   by mx0.gmx.net (mx015) with SMTP; 28 Sep 2011 xx:xx:xx +0200
04: Received: from User (UnknownHost [120.141.226.103]) by
05: mail.shabbyapple.com with SMTP;
06:    Tue, 27 Sep 2011 xx:xx:xx -0500

IP: 120.141.226.103 ---> Packet One Networks, MY

Muguphon: +60146476820 ---> DiGi Telecom, Malaysia

der Sternchen-Mugu:

header:

01: Received: from ims-d14.mx.aol.com (EHLO ims-d14.mx.aol.com)
02: [205.188.249.151]
03:   by mx0.gmx.net (mx042) with SMTP; 28 Sep 2011 xx:xx:xx +0200
04: Received: from oms-db02.r1000.mx.aol.com (oms-db02.r1000.mx.aol.com
05: [205.188.58.2])
06: 	by ims-d14.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Wed, 28 Sep 2011 xx:xx:xx -0400
08: Received: from mtaout-mb03.r1000.mx.aol.com
09: (mtaout-mb03.r1000.mx.aol.com [172.29.41.67])
10: 	by oms-db02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
11: 3D9C41C000086;
12: 	Wed, 28 Sep 2011 xx:xx:xx -0400 (EDT)
13: Received: from User (c-69-250-134-34.hsd1.md.comcast.net [69.250.134.34])
14: 	by mtaout-mb03.r1000.mx.aol.com (MUA/Third Party Client Interface) with
15: ESMTPA ID: [ID filtered]
16: 	Wed, 28 Sep 2011 xx:xx:xx -0400 (EDT)

Zitat:

*Dear Friend,*
**

header:

01: Received: from 187-110-181-154.supermidiatvacabo.com.br (HELO
02: reform-r1.wavecom.ee) [187.110.181.154]
03:   by mx0.gmx.net (mx116) with SMTP; 29 Sep 2011 xx:xx:xx +0200
04: Received: from 120.0.56.197 by 80.79.125.18; Wed, 28 Sep 2011 xx:xx:xx -0600

Yahoo Messenger: madison6cruz

header:

01: Received: from 201-248-104-99.dyn.dsl.cantv.net (HELO
02: reform-r1.wavecom.ee) [201.248.104.99]
03:   by mx0.gmx.net (mx006) with SMTP; 30 Sep 2011 xx:xx:xx +0200
04: Received: from 128.184.218.247 by 80.79.125.18; Fri, 30 Sep 2011
05: xx:xx:xx -0400

Yahoo Messenger: nicky23weekes

Natürlich sogar Mugu-Woche:

header:

01: Received: from intv.com (HELO alekseyfrolov-hp.wavecom.ee) [178.236.137.221]
02:   by mx0.gmx.net (mx020) with SMTP; 26 Sep 2011 xx:xx:xx +0200
03: Received: from 112.8.160.72 by 80.79.125.18; Mon, 26 Sep 2011 xx:xx:xx -0300

Yahoo Messenger: madison5june

der ATT/Yahoo-Mugu:

header:

01: Received: from nm4-vm1.access.bullet.mail.mud.yahoo.com
02: (nm4-vm1.access.bullet.mail.mud.yahoo.com [66.94.237.154])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 27 Sep 2011 xx:xx:xx +0200 (CEST)
05: Received: from [66.94.237.126] by nm4.access.bullet.mail.mud.yahoo.com
06: with NNFMP; 27 Sep 2011 xx:xx:xx -0000
07: Received: from [66.94.237.115] by tm1.access.bullet.mail.mud.yahoo.com
08: with NNFMP; 27 Sep 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1020.access.mail.mud.yahoo.com with
10: NNFMP; 27 Sep 2011 xx:xx:xx -0000
11: Received: (qmail 94245 invoked by UID: [UID filtered]
12: Received: from [41.134.24.241] by web181005.mail.ne1.yahoo.com via HTTP;
13: Tue, 27 Sep 2011 xx:xx:xx PDT

IP: 41.134.24.241 ---> 41-134-24-241.dsl.mweb.co.za

header:

01: Received: from eos2.rad1.aamranetworks.com (EHLO eostextile.com)
02: [182.160.124.59]
03:   by mx0.gmx.net (mx032) with SMTP; 29 Sep 2011 xx:xx:xx +0200
04: Received: (qmail 31829 invoked by UID: [UID filtered]
05: Received: by simscan 1.4.0 ppID: [ID filtered]
06:          scanners: attach: 1.4.0 clamav: 0.96/m:52/d:10677
07: Received: from unknown (HELO mail.eostextile.com) (127.0.0.1)
08:   by eostextile.com with ESMTP; 29 Sep 2011 xx:xx:xx +0700
09: Received: from 41.73.225.138 (proxying for 192.168.12.14)
10:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
11:         by mail.eostextile.com with HTTP;
12:         Thu, 29 Sep 2011 xx:xx:xx -0000 (UTC)

IP: 41.73.225.138 ---> Gateway Telecoms, Nigeria

gecrackt:

header:

01: Received: from 173-13-188-37-sfba.hfc.comcastbusiness.net (EHLO
02: enkiserver.enkisports.com) [173.13.188.37]
03:   by mx0.gmx.net (mx040) with SMTP; 30 Sep 2011 xx:xx:xx +0200
04: Received: from User (217-24-168-49.static.vega-ua.net [217.24.168.49])
05: 	(Authenticated sender: test)
06: 	by enkiserver.enkisports.com (Postfix) with ESMTPA ID: [ID filtered]
07: 	Sat, 17 Sep 2011 xx:xx:xx -0700 (PDT)

IP: 217.24.168.49 ---> Alkar, UA

Muguphon: +234 8081563653 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from out-53.smtp.ucla.edu (out-53.smtp.ucla.edu [169.232.46.176])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  1 Oct 2011 xx:xx:xx +0200 (CEST)
04: Received: from smtp-10.smtp.ucla.edu (smtp-10.smtp.ucla.edu
05: [169.232.46.243])
06: 	by out-53.smtp.ucla.edu with ESMTP ID: [ID filtered]
07: 	Sat, 01 Oct 2011 xx:xx:xx -0700
08: Received: from mail.ucla.edu (mail.ucla.edu [169.232.46.158])
09: 	by smtp-10.smtp.ucla.edu (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
10: 	Sat, 1 Oct 2011 xx:xx:xx -0700
11: Received: from User ([182.63.123.142])
12: 	(user=dnamala [at] ucla.edu mech=LOGIN bits=0)
13: 	by mail.ucla.edu (8.14.4/8.14.4) with ESMTP ID: [ID filtered]
14: 	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
15: 	Sat, 1 Oct 2011 xx:xx:xx -0700

IP: 182.63.123.142 ---> DiGi Telecommunications Sdn Bhd, MY

gecrackt:

Muguphon: +60-16-432-5281 ---> DiGi Telecom, Malaysia

Mugufax: +60-86-565-3984 ---> Sarawak, MY

header:

01: Received: from smtp.BiG.net.ID: [ID filtered]
02:   by mx0.gmx.net (mx079) with SMTP; 02 Oct 2011 xx:xx:xx +0200
03: Received: from mail.big.net.ID: [ID filtered]
04: 	by smtp.BiG.net.ID: [ID filtered]
05: 	Sun,  2 Oct 2011 xx:xx:xx +0700 (WIT)
06: Received: from 41.138.171.46
07:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
08:         by mail.big.net.ID: [ID filtered]
09:         Sun, 2 Oct 2011 xx:xx:xx +0700 (WIT)

header:

01: Received: from smtp.BiG.net.ID: [ID filtered]
02:   by mx0.gmx.net (mx014) with SMTP; 02 Oct 2011 xx:xx:xx +0200
03: Received: from mail.big.net.ID: [ID filtered]
04: 	by smtp.BiG.net.ID: [ID filtered]
05: 	Sun,  2 Oct 2011 xx:xx:xx +0700 (WIT)
06: Received: from 41.138.171.46
07:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
08:         by mail.big.net.ID: [ID filtered]
09:         Sun, 2 Oct 2011 xx:xx:xx +0700 (WIT)

header:

01: Received: from smtp.BiG.net.ID: [ID filtered]
02:   by mx0.gmx.net (mx118) with SMTP; 02 Oct 2011 xx:xx:xx +0200
03: Received: from mail.big.net.ID: [ID filtered]
04: 	by smtp.BiG.net.ID: [ID filtered]
05: 	Sun,  2 Oct 2011 xx:xx:xx +0700 (WIT)
06: Received: from 41.138.171.46
07:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
08:         by mail.big.net.ID: [ID filtered]
09:         Sun, 2 Oct 2011 xx:xx:xx +0700 (WIT)

header:

01: Received: from smtp.BiG.net.ID: [ID filtered]
02:   by mx0.gmx.net (mx048) with SMTP; 02 Oct 2011 xx:xx:xx +0200
03: Received: from mail.big.net.ID: [ID filtered]
04: 	by smtp.BiG.net.ID: [ID filtered]
05: 	Mon,  3 Oct 2011 xx:xx:xx +0700 (WIT)
06: Received: from 41.138.171.46
07:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
08:         by mail.big.net.ID: [ID filtered]
09:         Sun, 2 Oct 2011 xx:xx:xx +0700 (WIT)

IP: 41.138.171.46 ---> Visafone Communications Limited, Nigeria

gecrackt:

Aus der Mugu-Kiste:

header:

01: Received: from mout2.freenet.de (EHLO mout2.freenet.de) [195.4.92.92]
02:   by mx0.gmx.net (mx010) with SMTP; 04 Oct 2011 xx:xx:xx +0200
03: Received: from [195.4.92.141] (helo=mjail1.freenet.de)
04: 	by mout2.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from localhost ([::1]:47671 helo=mjail1.freenet.de)
08: 	by mjail1.freenet.de with esmtpa (ID: [ID filtered]
09: 4.76 #1)
10: 	ID: [ID filtered]
11: Received: from [195.4.92.19] (port=56219 helo=9.mx.freenet.de)
12: 	by mjail1.freenet.de with esmtpa (ID: [ID filtered]
13: 4.76 #1)
14: 	ID: [ID filtered]
15: Received: from [178.162.148.72] (port=4696 helo=User)
16: 	by 9.mx.freenet.de with esmtpa (ID: [ID filtered]
17: 25) (Exim 4.76 #1)
18: 	ID: [ID filtered]

IP: 178.162.148.72 ---> netdirekt e. K.

gecrackt:

Muguphon: 229-638-0550 ---> Ymax Communications Corp. - Ga

Natürlich habe ich noch Nachschub parat:

header:

01: Received: from mail.ytit.edu.tw (EHLO mail.ytit.edu.tw) [192.192.200.4]
02:   by mx0.gmx.net (mx082) with SMTP; 03 Oct 2011 xx:xx:xx +0200
03: Received: from mail.ytit.edu.tw (localhost.localdomain [127.0.0.1])
04: 	by mail.ytit.edu.tw (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
05: 	Tue, 4 Oct 2011 xx:xx:xx +0800

X-OriginatingIP: 41.138.179.15 (cdyang) ---> Visafone Communications

gecrackt:

header:

01: Received: from 59-120-205-245.HINET-IP.hinet.net (EHLO bmail.litai.com)
02: [59.120.205.245]
03:   by mx0.gmx.net (mx046) with SMTP; 05 Oct 2011 xx:xx:xx +0200
04: Received: (from root [at] localhost)
05: 	by bmail.litai.com (8.13.7/8.12.7) ID: [ID filtered]
06: 	Thu, 6 Oct 2011 xx:xx:xx +0800
07: Received: from User
08: 	(authenticated bits=0)
09: 	by bmail.litai.com (8.13.7/8.12.8) with ESMTP ID: [ID filtered]
10: 	Thu, 6 Oct 2011 xx:xx:xx +0800

header:

01: Received: from mail.shahjalalislamibank.com (EHLO
02: mail.shahjalalislamibank.com) [203.76.102.226]
03:   by mx0.gmx.net (mx050) with SMTP; 05 Oct 2011 xx:xx:xx +0200
04: Received: from mail.shahjalalislamibank.com (localhost [127.0.0.1])
05: 	by mail.shahjalalislamibank.com (8.13.8/8.13.8) with ESMTP id
06: p95GVMmE011767;
07: 	Wed, 5 Oct 2011 xx:xx:xx +0600
08: Received: (from apache [at] localhost)
09: 	by mail.shahjalalislamibank.com (8.13.8/8.13.8/Submit) ID: [ID filtered]
10: 	Wed, 5 Oct 2011 xx:xx:xx +0600
11: X-Authentication-Warning: mail.shahjalalislamibank.com: apache set
12: sender to msmith [at] xnmsn.com using -f
13: Received: from 41.203.64.131
14:         (SquirrelMail authenticated user zahid)
15:         by shahjalalislamibank.com with HTTP;
16:         Wed, 5 Oct 2011 xx:xx:xx +0600 (BDT)

IP: 41.203.64.131 ---> GLO-Mobile Network Services, Nigeria

gecrackt:

header:

01: Received: from 61-218-101-130.HINET-IP.hinet.net (HELO taiship.com.tw)
02: [61.218.101.130]
03:   by mx0.gmx.net (mx019) with SMTP; 05 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 28929 invoked from network); 5 Oct 2011 xx:xx:xx -0000
05: Received: from 144.131.55.5 (HELO User) (postmaster [at] 144.131.55.5)
06:   by 0 with SMTP; 5 Oct 2011 xx:xx:xx -0000

IP: 144.131.55.5 ---> CPE-144-131-55-5.static.vic.bigpond.net.au

Muguphon: +44 770 0017704 ---> Cloud9, UK

die Madrid-Konnektion:

header:

01: Received: from vsmtp1.tin.it (vsmtp1.tin.it [212.216.176.141])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  8 Oct 2011 xx:xx:xx +0200 (CEST)
04: Received: from User (77.208.89.74) by vsmtp1.tin.it (8.5.113)
05: (authenticated as penoclarke [at] virgilio.it)
06:         ID: [ID filtered]

IP: 77.208.89.74 ---> VODAFONE_SPAIN_NETWORK

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.

auch den Mugu hatten wir schon:

header:

01: Received: from nic.fns.uniba.sk (EHLO nic.fns.uniba.sk) [158.195.45.10]
02:   by mx0.gmx.net (mx024) with SMTP; 08 Oct 2011 xx:xx:xx +0200
03: Received: from localhost ([127.0.0.1] helo=nic.fns.uniba.sk)
04: 	by nic.fns.uniba.sk with esmtp (Exim 4.72)
05: 	(envelope-from <unitednation [at] inbox.com>)
06: 	ID: [ID filtered]
07: Received: from 172.129.167.7
08:         (SquirrelMail authenticated user hubka)
09:         by nic.fns.uniba.sk with HTTP;
10:         Sat, 8 Oct 2011 xx:xx:xx +0200

IP: 172.129.167.7 ---> AC81A707.ipt.aol.com

gecrackt:

Muguphon: +234 70673854674 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from p3plwbeout16-04.prod.phx3.secureserver.net
02: (p3plsmtp16-04-2.prod.phx3.secureserver.net [173.201.193.60])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun,  9 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: (qmail 24996 invoked from network); 9 Oct 2011 xx:xx:xx -0000
06: Received: from unknown (HELO localhost) (173.201.193.117)
07:   by p3plwbeout16-04.prod.phx3.secureserver.net with SMTP; 9 Oct 2011
08: xx:xx:xx -0000
09: Received: (qmail 19055 invoked by UID: [UID filtered]

X-Originating-IP: 41.58.23.225 ---> SWIFT NETWORKS LIMITED, Nigeria

- kjz

Als Mugu wollen grüßen:

header:

01: Received: from leon.ac-toulouse.fr (EHLO mta1.ac-toulouse.fr)
02: [194.214.239.143]
03:   by mx0.gmx.net (mx050) with SMTP; 10 Oct 2011 xx:xx:xx +0200
04: Received: from nikita4.in.ac-toulouse.fr (nikita4.in.ac-toulouse.fr
05: [172.29.251.76])
06: 	by mta1.ac-toulouse.fr (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 10 Oct 2011 xx:xx:xx +0200 (CEST)
08: Received: from nikita4.in.ac-toulouse.fr (nikita4.in.ac-toulouse.fr
09: [127.0.0.1])
10: 	by nikita4.in.ac-toulouse.fr (Postfix) with ESMTP
11: 	ID: [ID filtered]
12: Received: from mta1.ac-toulouse.fr (mta1.in.ac-toulouse.fr [172.29.251.67])
13: 	by nikita4.in.ac-toulouse.fr (Postfix) with ESMTP
14: 	ID: [ID filtered]
15: Received: from ac-toulouse.fr (store3.in.ac-toulouse.fr [172.29.240.144])
16: 	by mta1.ac-toulouse.fr (Postfix) with ESMTP ID: [ID filtered]
17: 	Mon, 10 Oct 2011 xx:xx:xx +0200 (CEST)
18: Received: from [172.29.251.67] (Forwarded-For: [82.128.16.131]) by
19:  store3.in.ac-toulouse.fr (mshttpd); Mon, 10 Oct 2011 xx:xx:xx +0100

IP: 82.128.16.131 ---> ml82.128.16.131.multilinks.com, Nigeria

gecrackt:

die Madrid-Konnektion:

header:

01: Received: from smtp-01.piensasolutions.com (slsa667.piensasolutions.com
02: [217.76.150.252])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 13 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from nec789c (unknown [77.208.118.70])
06: 	by smtp-01.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Thu, 13 Oct 2011 xx:xx:xx +0200 (CEST)

IP: 77.208.118.70 ---> VODAFONE_SPAIN_NETWORK

Muguphon: +34 698-344-600 ---> mobile number, Espana

Mugufax: +34 911-820-312 ---> Jazz Telecom, S.a.u.

Da hätten wir doch noch was....

Auch der Mugu war schon da:

header:

01: Received: from smtp.ac-rouen.fr (EHLO mta2.ac-rouen.fr) [194.167.196.131]
02:   by mx0.gmx.net (mx113) with SMTP; 10 Oct 2011 xx:xx:xx +0200
03: Received: by mta2.ac-rouen.fr (Postfix, from userID: [ID filtered]
04: 	ID: [ID filtered]
05: Received: from ac-rouen.fr (localhost.localdomain [127.0.0.1])
06: 	by mta2.ac-rouen.fr (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 10 Oct 2011 xx:xx:xx +0200 (CEST)
08: Received: from [192.168.71.11] (Forwarded-For: 199.255.211.85) by
09:  mta2.ac-rouen.fr (mshttpd); Mon, 10 Oct 2011 xx:xx:xx -0700

IP: 199.255.211.85 ---> 199-255-211-85.anchorfree.com

gecrackt:

Muguphon: +44 702 4037299 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from es1.gilders.co.uk (EHLO es1.gilders.co.uk) [81.144.178.58]
02:   by mx0.gmx.net (mx097) with SMTP; 12 Oct 2011 xx:xx:xx +0200
03: Received: from es1.gilders.co.uk (localhost.localdomain [127.0.0.1])
04: 	by localhost (Email Security Appliance) with SMTP ID: [ID filtered]
05: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
06: Received: from gilders02.gilders.co.uk (softbank126007022004.bbtec.net
07: [126.7.22.4])
08: 	by es1.gilders.co.uk (Sophos Email Appliance) with ESMTP id
09: 470681F22F44_E95A0E8F;
10: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
11: Received: from gilders06.gilders.co.uk ([192.168.1.250]) by
12: gilders02.gilders.co.uk with Microsoft SMTPSVC(6.0.3790.4675);
13: 	 Wed, 12 Oct 2011 xx:xx:xx +0100
14: Received: from User ([120.141.64.223]) by gilders06.gilders.co.uk with
15: Microsoft SMTPSVC(6.0.3790.4675);
16: 	 Wed, 12 Oct 2011 xx:xx:xx +0100

header:

01: Received: from es1.gilders.co.uk (EHLO es1.gilders.co.uk) [81.144.178.58]
02:   by mx0.gmx.net (mx011) with SMTP; 12 Oct 2011 xx:xx:xx +0200
03: Received: from es1.gilders.co.uk (localhost.localdomain [127.0.0.1])
04: 	by localhost (Email Security Appliance) with SMTP ID: [ID filtered]
05: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
06: Received: from gilders02.gilders.co.uk (softbank126007022004.bbtec.net
07: [126.7.22.4])
08: 	by es1.gilders.co.uk (Sophos Email Appliance) with ESMTP id
09: 32DF51F2371F_E95C7D3F;
10: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
11: Received: from gilders06.gilders.co.uk ([192.168.1.250]) by
12: gilders02.gilders.co.uk with Microsoft SMTPSVC(6.0.3790.4675);
13: 	 Wed, 12 Oct 2011 xx:xx:xx +0100
14: Received: from User ([120.141.127.218]) by gilders06.gilders.co.uk with
15: Microsoft SMTPSVC(6.0.3790.4675);
16: 	 Wed, 12 Oct 2011 xx:xx:xx +0100

IP: 120.141.64.223 ---> Packet One Networks (M) Sdn, Malaysia

header:

01: Received: from NORTHMO.NET (mail.northmo.net [208.110.72.155])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]

Muguphon: +277 85140561 ---> MTN, South Africa

header:

01: Received: from mv-osn-hcb008.ocn.ad.jp (EHLO mv-osn-hcb008.ocn.ad.jp)
02: [118.23.100.201]
03:   by mx0.gmx.net (mx097) with SMTP; 13 Oct 2011 xx:xx:xx +0200
04: Received: from mzcstore142.ocn.ad.jp (mv-osn-hcb008 [118.23.100.201])
05: 	by mv-osn-hcb008.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 14 Oct 2011 xx:xx:xx +0900 (JST)

gecrackt:

Muguphon: +234-8028419593 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from control6.tppinternet.net.au (control6.tppinternet.net.au
02: [202.124.245.138])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 14 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from localhost ([59.104.13.108]) by
06: control6.tppinternet.net.au with MailEnable ESMTP; Sat, 15 Oct 2011
07: xx:xx:xx +1100

IP: 59.104.13.108 ---> 59-104-13-108.adsl.dynamic.seed.net.tw

gecrackt:

header:

01: Received: from ims-d13.mx.aol.com (EHLO ims-d13.mx.aol.com)
02: [205.188.249.150]
03:   by mx0.gmx.net (mx113) with SMTP; 15 Oct 2011 xx:xx:xx +0200
04: Received: from oms-da02.r1000.mx.aol.com (oms-da02.r1000.mx.aol.com
05: [205.188.255.12])
06: 	by ims-d13.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Sat, 15 Oct 2011 xx:xx:xx -0400
08: Received: from mtaout-db04.r1000.mx.aol.com
09: (mtaout-db04.r1000.mx.aol.com [172.29.51.196])
10: 	by oms-da02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
11: D72FE38000081;
12: 	Sat, 15 Oct 2011 xx:xx:xx -0400 (EDT)
13: Received: from User (unknown [109.230.216.23])
14: 	by mtaout-db04.r1000.mx.aol.com (MUA/Third Party Client Interface) with
15: ESMTPA ID: [ID filtered]
16: 	Sat, 15 Oct 2011 xx:xx:xx -0400 (EDT)

IP: 109.230.216.23 ---> XSSERVER-EU

header:

01: Received: from mail.fastballinternet.com (mail2.fastballinternet.com
02: [64.113.227.68])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 15 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from fastballinternet.com (localhost [127.0.0.1])
06: 	by mail.fastballinternet.com (Postfix) with SMTP
07: 	ID: [ID filtered]
08: Received: from 41.58.3.129
09:         (SquirrelMail authenticated user bcurtsinger)
10:         by mail.fastballinternet.com with HTTP;
11:         Sat, 15 Oct 2011 xx:xx:xx +0100 (BST)

IP: 41.58.3.129 ---> SWIFT NETWORKS LIMITED, Nigeria

gecrackt:

Die Mugu-Büchse öffnet sich wieder:

header:

01: Received: from mail.hasanuddin-airport.com (EHLO
02: mail.hasanuddin-airport.com) [222.124.178.6]
03:   by mx0.gmx.net (mx046) with SMTP; 18 Oct 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.hasanuddin-airport.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 18 Oct 2011 xx:xx:xx +0700 (WIT)
07: X-Virus-Scanned: Debian amavisd-new at mail.hasanuddin-airport.com
08: Received: from mail.hasanuddin-airport.com ([127.0.0.1])
09: 	by localhost (mail.hasanuddin-airport.com [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [213.42.240.90])
13: 	by mail.hasanuddin-airport.com (Postfix) with ESMTPA ID: [ID filtered]
14: 	Tue, 18 Oct 2011 xx:xx:xx +0700 (WIT)

IP: 213.42.240.90 ---> Emirates Telecommunications Corporation

header:

01: Received: from nm19-vm0.bullet.mail.sp2.yahoo.com (HELO
02: nm19-vm0.bullet.mail.sp2.yahoo.com) [98.139.91.216]
03:   by mx0.gmx.net (mx102) with SMTP; 18 Oct 2011 xx:xx:xx +0200
04: Received: from [98.139.91.67] by nm19.bullet.mail.sp2.yahoo.com with
05: NNFMP; 18 Oct 2011 xx:xx:xx -0000
06: Received: from [98.139.91.5] by tm7.bullet.mail.sp2.yahoo.com with
07: NNFMP; 18 Oct 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1005.mail.sp2.yahoo.com with NNFMP; 18
09: Oct 2011 xx:xx:xx -0000
10: Received: (qmail 74161 invoked by UID: [UID filtered]
11: Received: from [41.191.86.5] by web190009.mail.sg3.yahoo.com via HTTP;
12: Wed, 19 Oct 2011 xx:xx:xx SGT

IP: 41.191.86.5 ---> MICROMEDIA, BJ

Muguphon: +229-98139486 ---> mobile number, Benin

header:

01: Received: from mail.astrus.ru (EHLO mail.astrus.ru) [77.105.152.10]
02:   by mx0.gmx.net (mx037) with SMTP; 19 Oct 2011 xx:xx:xx +0200
03: Received: from [41.203.64.131] (port=6009 helo=User)
04: 	by mail.astrus.ru with esmtpa (Exim 4.69 (FreeBSD))
05: 	(envelope-from <mherminia [at] fortiideias.com.br>)
06: 	ID: [ID filtered]

IP: 41.203.64.131 ---> GLO-Mobile Network Services, Nigeria

header:

01: Received: from gmmr2.centrum.cz (EHLO gmmr2.centrum.cz) [90.183.38.158]
02:   by mx0.gmx.net (mx017) with SMTP; 20 Oct 2011 xx:xx:xx +0200
03: Received: from mail1003.cent (unknown [10.32.3.101])
04: 	by gmmr2.centrum.cz (Postfix) with ESMTP ID: [ID filtered]
05: 	Thu, 20 Oct 2011 xx:xx:xx +0200 (CEST)
06: Received: by mail1003.cent (Postfix, from userID: [ID filtered]
07: 	ID: [ID filtered]
08: Subject: Ziegler,I am Mr. AZIZ BIN IBRAHIM from Lybia
09: Received: from 175.100.8.189 (X-Forwarded-For: 175.100.8.189)
10: 	by mail1003.centrum.cz (centrum.cz multimail) with HTTP

IP: 175.100.8.189 ---> VIETTEL-CAMBODIA

header:

01: Received: from ims-d13.mx.aol.com (ims-d13.mx.aol.com [205.188.249.150])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 21 Oct 2011 xx:xx:xx +0200 (CEST)
04: Received: from oms-ma01.r1000.mx.aol.com (oms-ma01.r1000.mx.aol.com
05: [64.12.140.129])
06: 	by ims-d13.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Thu, 20 Oct 2011 xx:xx:xx -0400
08: Message-ID: [ID filtered]
09: Received: from mtaout-da03.r1000.mx.aol.com
10: (mtaout-da03.r1000.mx.aol.com [172.29.51.131])
11: 	by oms-ma01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 7DA6338000090;
13: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)
14: Received: from omh-da01.r1000.mx.aol.com (omh-da01.r1000.mx.aol.com
15: [172.29.51.136])
16: 	by mtaout-da03.r1000.mx.aol.com (MUA/Third Party Client Interface) with
17: ESMTP ID: [ID filtered]
18: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)
19: Received: from mtaout-da05.r1000.mx.aol.com
20: (mtaout-da05.r1000.mx.aol.com [172.29.51.133])
21: 	by omh-da01.r1000.mx.aol.com (AOL Outbound Holding Interface) with
22: ESMTP ID: [ID filtered]
23: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)
24: Received: from ew2284980 (unknown [46.166.129.205])
25: 	by mtaout-da05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
26: ESMTPA ID: [ID filtered]
27: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)

IP: 46.166.129.205 ---> Santrex Internet Services Ltd.

Der Deckel bleibt gelupft:

header:

01: Received: from ip3.yam.com (EHLO ip3.yam.com) [60.199.244.218]
02:   by mx0.gmx.net (mx013) with SMTP; 17 Oct 2011 xx:xx:xx +0200
03: Received: from staff.yam.com (61.30.236.226)
04:   by ip3.yam.com with ESMTP; 18 Oct 2011 xx:xx:xx +0800
05: Received: from User (60.230.184.227) by mail.yamoffice.yam.com
06: (61.30.236.226)
07:  with Microsoft SMTP Server ID: [ID filtered]

gecrackt:

Muguphon: +234 81320 86388 ---> Nigeria

header:

01: Received: from static.vdc.vn (EHLO vosasaigon.com) [113.161.64.80]
02:   by mx0.gmx.net (mx046) with SMTP; 18 Oct 2011 xx:xx:xx +0200
03: Received: from User by vosasaigon.com (MDaemon PRO v10.1.1)
04: 	with ESMTP ID: [ID filtered]
05: 	Tue, 18 Oct 2011 xx:xx:xx +0700
06: X-Spam-Processed: vosasaigon.com, Tue, 18 Oct 2011 xx:xx:xx +0700
07: 	(not processed: message from trusted or authenticated source)
08: X-MDHeloLookup-Result: hardfail smtp.helo=User (does not exist)
09: (vosasaigon.com)

X-MDRemoteIP: 213.42.240.90 ---> Emirates Telecommunications Corporation

gecrackt: X-Authenticated-Sender:

header:

01: Received: from nm1-vm6.bullet.mail.ne1.yahoo.com
02: (nm1-vm6.bullet.mail.ne1.yahoo.com [98.138.91.253])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 19 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.138.90.50] by nm1.bullet.mail.ne1.yahoo.com with
06: NNFMP; 19 Oct 2011 xx:xx:xx -0000
07: Received: from [98.138.87.6] by tm3.bullet.mail.ne1.yahoo.com with
08: NNFMP; 19 Oct 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1006.mail.ne1.yahoo.com with NNFMP; 19
10: Oct 2011 xx:xx:xx -0000
11: Received: (qmail 27980 invoked by UID: [UID filtered]
12: Received: from [41.218.212.131] by web190401.mail.sg3.yahoo.com via
13: HTTP; Wed, 19 Oct 2011 xx:xx:xx SGT

IP: 41.218.212.131 ---> 41-218-212-131-adsl-dyn.4u.com.gh

header:

01: Received: from mail.zellerplastik.ru (EHLO mail.zellerplastik.ru)
02: [194.85.131.38]
03:   by mx0.gmx.net (mx046) with SMTP; 19 Oct 2011 xx:xx:xx +0200
04: Received: from User by mail.zellerplastik.ru (MDaemon PRO v9.6.6)
05: 	with ESMTP ID: [ID filtered]
06: 	Wed, 19 Oct 2011 xx:xx:xx +0400

gecrackt: X-Authenticated-Sender:

header:

01: Received: from mail26.extendcp.co.uk (mail26.extendcp.co.uk [79.170.40.26])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Wed, 19 Oct 2011 xx:xx:xx +0200 (CEST)
06: Received: from [78.33.90.90] (helo=G5-3.local)
07: 	by mail26.extendcp.com with esmtpa (Exim 4.76)
08: 	ID: [ID filtered]
09: Received: from User ([90.166.229.145])
10: 	(authenticated user postmaster [at] network-pr.co.uk)
11: 	by G5-3.local (Kerio MailServer 6.4.0);
12: 	Wed, 19 Oct 2011 xx:xx:xx +0100

IP: 90.166.229.145 ---> France Telecom Espana

gecrackt: authenticated user

header:

01: Received: from 263mail182-141.263.sina.com (HELO 263.sina.com)
02: [202.106.182.141]
03:   by mx0.gmx.net (mx116) with SMTP; 21 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 5258 invoked from network); 21 Oct 2011 xx:xx:xx -0000
05: Received: from nation433.lnk.telstra.net (HELO User) (203.45.125.12)
06:   by 263.sina.com with SMTP; 21 Oct 2011 xx:xx:xx -0000

gecrackt:

header:

01: Received: from nm30-vm0.bullet.mail.sp2.yahoo.com
02: (nm30-vm0.bullet.mail.sp2.yahoo.com [98.139.91.238])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 22 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.91.66] by nm30.bullet.mail.sp2.yahoo.com with
06: NNFMP; 22 Oct 2011 xx:xx:xx -0000
07: Received: from [98.139.91.38] by tm6.bullet.mail.sp2.yahoo.com with
08: NNFMP; 22 Oct 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1038.mail.sp2.yahoo.com with NNFMP; 22
10: Oct 2011 xx:xx:xx -0000
11: Received: (qmail 93045 invoked from network); 22 Oct 2011 xx:xx:xx -0000
12: Received: from 184.151.159.110.tm-hsbb.tm.net.my
13: (chief.tunub [at] 110.159.151.184 with login)
14:         by smtp115.biz.mail.mud.yahoo.com with SMTP; 22 Oct 2011
15: xx:xx:xx -0700 PDT

header:

01: Received: from jasio.evernet.com.pl (EHLO jasio.evernet.com.pl)
02: [195.8.107.12]
03:   by mx0.gmx.net (mx013) with SMTP; 22 Oct 2011 xx:xx:xx +0200
04: Received: from [46.23.64.76] (helo=User)
05: 	by jasio.evernet.com.pl with esmtpa (Exim)
06: 	ID: [ID filtered]
07: Oct 2011 xx:xx:xx +0200

IP: 46.23.64.76 ---> UK2.NET

gecrackt: authid

Muguphon: +44 703 59 40876 ---> Open Telecom International Ltd., UK

Mugufax: +44 844 58 83458 ---> shared cost number, UK

header:

01: Received: from unknown (HELO mail.hkdailynews.com.hk) [210.177.98.115]
02:   by mx0.gmx.net (mx046) with SMTP; 22 Oct 2011 xx:xx:xx +0200
03: Received: from 210.177.98.115 (localhost [127.0.0.1])
04: 	by mail.hkdailynews.com.hk (Postfix) with ESMTP ID: [ID filtered]
05: 	Sun, 23 Oct 2011 xx:xx:xx +0800 (HKT)
06: Received: from 41.205.171.12
07:         (SquirrelMail authenticated user sales)
08:         by 210.177.98.115 with HTTP;
09:         Sat, 22 Oct 2011 xx:xx:xx +0100 (GMT-1)

IP: 210.177.98.115 ---> dial-pool14.ph.starcomms.net, Nigeria

gecrackt:

dreifache Packung, aus dem Wörterbuch gespammt:

header:

01: Received: from mailmx.520idc.net (EHLO 520dns.com) [61.155.8.200]
02:   by mx0.gmx.net (mx009) with SMTP; 23 Oct 2011 xx:xx:xx +0200
03: Received: from User [41.203.64.129] by 520dns.com with ESMTP
04:   (SMTPD-8.22) ID: [ID filtered]

header:

01: Received: from mailmx.520idc.net (EHLO 520dns.com) [61.155.8.200]
02:   by mx0.gmx.net (mx032) with SMTP; 23 Oct 2011 xx:xx:xx +0200
03: Received: from User [41.203.64.129] by 520dns.com with ESMTP
04:   (SMTPD-8.22) ID: [ID filtered]

header:

01: Received: from 520dns.com (mailmx.520idc.net [61.155.8.200])
02: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from User [41.203.64.129] by 520dns.com with ESMTP
06:   (SMTPD-8.22) ID: [ID filtered]

IP: 41.203.64.129 ---> GLO-Mobile Network Services, Nigeria

gecrackt:

Muguphon: +44 703 5911617 ---> Open Telecom International Ltd., UK

Mugufax: +44 871 5038336 ---> Magrathea Telecommunications Limited, UK

It's Mugu-Time, Baby....

die Madrid-Konnektion:

header:

01: Received: from 62-2-157-42.static.cablecom.ch (EHLO
02: mail.wegmulleretfils.ch) [62.2.157.42]
03:   by mx0.gmx.net (mx043) with SMTP; 24 Oct 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.wegmulleretfils.ch (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 23 Oct 2011 xx:xx:xx +0200 (CEST)
07: X-Virus-Scanned: amavisd-new at wegmulleretfils.ch
08: Received: from mail.wegmulleretfils.ch ([127.0.0.1])
09: 	by localhost (serveurmac.wegmulleretfils.ch [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from weqmuleretils.ch (c-71-198-155-140.hsd1.ca.comcast.net
13: [71.198.155.140])
14: 	by mail.wegmulleretfils.ch (Postfix) with ESMTPA ID: [ID filtered]
15: 	Sun, 23 Oct 2011 xx:xx:xx +0200 (CEST)

Muguphon: +34-672-561-527 ---> Vodafone España, S.a.u.

header:

01: Received: from mailsnd3.chollian.net (HELO mailsnd3.chol.com)
02: [203.252.1.124]
03:   by mx0.gmx.net (mx101) with SMTP; 27 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 12648 invoked from network); Fri, 28 Oct 2011 xx:xx:xx
05: +0900 (KST)
06: message-ID: [ID filtered]
07: Received: from [64.6.39.154] (64.6.39.154)
08:   by mailsnd3.chol.com with ESMTP;
09:  Fri, 28 Oct 2011 xx:xx:xx +0900 (KST)

IP: 64.6.39.154 ---> johbrocon-lan-154.1stel.com

Muguphon: +44 792 4226784 ---> mobile number, Manx Telecom

Mugufax: +44 203 1630524 ---> Thus Plc, UK

header:

01: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br [201.2.1.244])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 29 Oct 2011 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 28 Oct 2011 xx:xx:xx -0200 (BRST)
07: X-Virus-Scanned: amavisd-new at agetop.goias.gov.br
08: Received: from mail.agetop.goias.gov.br ([127.0.0.1])
09: 	by localhost (mail.agetop.goias.gov.br [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br [201.2.1.244])
12: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
13: 	Fri, 28 Oct 2011 xx:xx:xx -0200 (BRST)

gecrackt:

header:

01: Received: from smtp-gw.ficoferragens.com.br (EHLO ficoferragens.com.br)
02: [189.20.202.19]
03:   by mx0.gmx.net (mx004) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: BrmaOutput: ml82.128.2.45.multilinks.com [82.128.2.45]
05: Received: from User (ml82.128.2.45.multilinks.com [82.128.2.45])
06: 	(authenticated bits=0)
07: 	by ficoferragens.com.br (8.12.11.20060308/8.12.11) with ESMTP id
08: p9T3PEHu008917;
09: 	Sat, 29 Oct 2011 xx:xx:xx -0200

IP: 82.128.2.45 ---> ml82.128.2.45.multilinks.com, Nigeria

Muguphon: +234 7080707348 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from darboux.math.univ-montp2.fr (EHLO
02: darboux.math.univ-montp2.fr) [162.38.126.4]
03:   by mx0.gmx.net (mx084) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: Received: from euler.math.univ-montp2.fr (euler.math.univ-montp2.fr
05: [162.38.126.6])
06: 	by darboux.math.univ-montp2.fr (Postfix) with ESMTP ID: [ID filtered]
07: 	Sat, 29 Oct 2011 xx:xx:xx +0200 (CEST)
08: Received: from webmail.math.univ-montp2.fr (localhost.localdomain
09: [127.0.0.1])
10: 	by euler.math.univ-montp2.fr (Postfix) with ESMTP ID: [ID filtered]
11: 	Sat, 29 Oct 2011 xx:xx:xx +0200 (CEST)
12: Received: from 82.128.17.20
13:         (SquirrelMail authenticated user olopez)
14:         by webmail.math.univ-montp2.fr with HTTP;
15:         Sat, 29 Oct 2011 xx:xx:xx +0200

IP: 82.128.17.20 ---> ml82.128.17.20.multilinks.com, Nigeria

gecrackt:

der Mugu versucht es mit Brute Force:

header:

01: Received: from mail10.syd.optusnet.com.au (EHLO
02: mail10.syd.optusnet.com.au) [211.29.132.191]
03:   by mx0.gmx.net (mx092) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: Received: from localhost.localdomain (webmail06.syd.optusnet.com.au
05: [211.29.133.86])
06: 	by mail10.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Sat, 29 Oct 2011 xx:xx:xx +1100
08: Received: from gjb58.internetdsl.tpnet.pl ([83.12.235.58]) by
09:     webmail06.syd.optusnet.com.au with http
10: (user=waynegrogan [at] optusnet.com.au);
11:     Sat, 29 Oct 2011 xx:xx:xx +1100

header:

01: Received: from mail10.syd.optusnet.com.au (EHLO
02: mail10.syd.optusnet.com.au) [211.29.132.191]
03:   by mx0.gmx.net (mx092) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: Received: from localhost.localdomain (webmail06.syd.optusnet.com.au
05: [211.29.133.86])
06: 	by mail10.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Sat, 29 Oct 2011 xx:xx:xx +1100

header:

01: Received: from mail13.syd.optusnet.com.au (mail13.syd.optusnet.com.au
02: [211.29.132.194])
03: 	by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from localhost.localdomain (webmail07.syd.optusnet.com.au
07: [211.29.133.88])
08: 	by mail13.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
09: 	Sat, 29 Oct 2011 xx:xx:xx +1100

gecrackt:

Die Mugu-Show geht weiter:

der Sternchen-Mugu:

header:

01: Received: from ip3.yam.com (ip3.yam.com [60.199.244.218])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 23 Oct 2011 xx:xx:xx -0400 (EDT)
04: Received: from staff.yam.com (61.30.236.226)
05:   by ip3.yam.com with ESMTP; 24 Oct 2011 xx:xx:xx +0800
06: Received: from User (75.42.124.86) by mail.yamoffice.yam.com (61.30.236.226)
07:  with Microsoft SMTP Server ID: [ID filtered]

Zitat:

*ECONOMIC & FINANCIAL CRIME COMMISSION*
*(EFCC) FOREIGN OPERATIONS DEPT, (ECO WAS),*
*SUBJECT Attn: Beneficiary, Your $1.5 Million Dollars Compensation*

Muguphon: +234-705-300-1051 ---> Globacom Ltd, Nigeria

header:

01: Received: from nm16.bullet.mail.sp2.yahoo.com (HELO
02: nm16.bullet.mail.sp2.yahoo.com) [98.139.91.86]
03:   by mx0.gmx.net (mx053) with SMTP; 25 Oct 2011 xx:xx:xx +0200
04: Received: from [98.139.91.64] by nm16.bullet.mail.sp2.yahoo.com with
05: NNFMP; 25 Oct 2011 xx:xx:xx -0000
06: Received: from [98.139.91.23] by tm4.bullet.mail.sp2.yahoo.com with
07: NNFMP; 25 Oct 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1023.mail.sp2.yahoo.com with NNFMP; 25
09: Oct 2011 xx:xx:xx -0000
10: Received: (qmail 46401 invoked by UID: [UID filtered]
11: Received: from [41.216.50.33] by web190114.mail.sg3.yahoo.com via HTTP;
12: Tue, 25 Oct 2011 xx:xx:xx SGT

IP: 41.216.50.33 ---> Abonnes ADSL de Benin Telecoms a Kandevie

Muguphon: +229-980-649-21 ---> mobile number, Benin

header:

01: Received: from mail27.sea5.speakeasy.net (mail27.sea5.speakeasy.net
02: [69.17.117.31])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Tue, 25 Oct 2011 xx:xx:xx +0200 (CEST)
07: Received: (qmail 30478 invoked from network); 25 Oct 2011 xx:xx:xx -0000
08: Received: by simscan 1.4.0 ppID: [ID filtered]
09:          scanners: clamav: 0.88.2/m:52/d:10739 spam: 3.0.4
10: Received: from magnicominc.com (HELO User) (briane@[216.24.172.57])
11:           (envelope-sender <poor [at] spamvictim.tld>)
12:           by mail27.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
13:           for <poor [at] spamvictim.tld>; 25 Oct 2011 xx:xx:xx -0000

gecrackt:

Muguphon: +1-469-941-2656 ---> geographic number, Dallas, TX, Southwestern Bell

header:

01: Received: from 202-177-23-100.kddi.net.hk (EHLO hkp1.coowo.com)
02: [202.177.23.100]
03:   by mx0.gmx.net (mx030) with SMTP; 25 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 73338 invoked from network); 12 Oct 2011 xx:xx:xx +0800
05: Received: from 219-49-31-64.servebyte.net (HELO User) (64.31.49.219)
06:   by 202-177-23-100.kddi.net.hk with SMTP; 12 Oct 2011 xx:xx:xx +0800

header:

01: Received: from mx1.univ-paris1.fr (EHLO mx1.univ-paris1.fr) [193.55.96.129]
02:   by mx0.gmx.net (mx079) with SMTP; 27 Oct 2011 xx:xx:xx +0200
03: Received: from smtp.univ-paris1.fr (smtp.univ-paris1.fr
04: [IPv6:2001:660:3305::95])
05: 	by mx1.univ-paris1.fr (8.14.3/8.14.3/Debian-9.4) with ESMTP id
06: p9R3oaUr027780
07: 	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
08: 	Thu, 27 Oct 2011 xx:xx:xx +0200
09: Received: from courrier.univ-paris1.fr (courrier.univ-paris1.fr
10: [193.55.96.75])
11: 	by smtp.univ-paris1.fr (8.14.3/8.14.3/Debian-9.4) with ESMTP id
12: p9R3oXP9026437;
13: 	Thu, 27 Oct 2011 xx:xx:xx +0200
14: Received: from ml82.128.14.46.multilinks.com (ml82.128.14.46.multilinks.com
15: 	[82.128.14.46]) by courrier.univ-paris1.fr (Horde MIME library) with HTTP;
16: 	Thu, 27 Oct 2011 xx:xx:xx +0200

IP: 82.128.14.46 ---> Multilinks, Nigeria

gecrackt:

header:

01: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br
02: [201.2.1.244])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 27 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from localhost (localhost.localdomain [127.0.0.1])
06: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
07: 	Wed, 26 Oct 2011 xx:xx:xx -0200 (BRST)
08: X-Virus-Scanned: amavisd-new at agetop.goias.gov.br
09: Received: from mail.agetop.goias.gov.br ([127.0.0.1])
10: 	by localhost (mail.agetop.goias.gov.br [127.0.0.1]) (amavisd-new, port
11: 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br
14: [201.2.1.244])
15: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
16: 	Wed, 26 Oct 2011 xx:xx:xx -0200 (BRST)

X-Originating-IP: [60.50.95.79] ---> 79.95.50.60.cbj05-home.tm.net.my

gecrackt:

Alle meine 'Lieblinge'....

die Madrid-Konnektion, wie üblich mit Fake-Gewinnen:

header:
01: Received: from smtp-01.piensasolutions.com (slsa667.piensasolutions.com
02: [217.76.150.252])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed,  2 Nov 2011 xx:xx:xx +0100 (CET)
05: Received: from Admin-1 (unknown [77.208.198.42])
06: 	by smtp-01.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Wed,  2 Nov 2011 xx:xx:xx +0100 (CET)
IP: 77.208.198.42 ---> VODAFONE_SPAIN_NETWORK

Muguphon: +34 698-344-600 ---> mobile number, Espana

Mugufax: +34 911-820-312 ---> Jazz Telecom, S.a.u., Espana

der Sternchen-Mugu (zum Ersten):

header:
01: Received: from unknown (EHLO mail.xxgf.com.cn) [218.64.175.131]
02:   by mx0.gmx.net (mx009) with SMTP; 02 Nov 2011 xx:xx:xx +0100
03: Received: from User (unknown [41.211.204.150])
04: 	by mail.xxgf.com.cn (Postfix) with ESMTP ID: [ID filtered]
05: 	Wed,  2 Nov 2011 xx:xx:xx +0800
Zitat:

*Die EuroMillions Lotterie-Promotion*
*Online Lotterie-Abteilung*
*P.O. Box 1010 Liverpool*
*L70 1NL United Kingdom*

IP: 41.211.204.150 ---> 150.204.211.41.client1.directonpc.net, Nigeria

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.

header:
01: Received: from mail.nostalgie.perm.ru (EHLO mail.nostalgie.perm.ru)
02: [78.159.239.2]
03:   by mx0.gmx.net (mx071) with SMTP; 03 Nov 2011 xx:xx:xx +0100
04: Received: from User (unknown [69.60.110.96])
05: 	(Authenticated sender: test)
06: 	by mail.nostalgie.perm.ru (Postfix) with ESMTPA ID: [ID filtered]
07: 	Tue,  1 Nov 2011 xx:xx:xx +0500 (YEKT)
IP: 69.60.110.96 ---> 96-110-60-69.serverpronto.com

Muguphon: +234 815 272 1832 ---> Nigeria

header:
01: Received: from unknown (EHLO aurora.3720-design.co.uk) [91.212.182.176]
02:   by mx0.gmx.net (mx039) with SMTP; 03 Nov 2011 xx:xx:xx +0100
03: Received: from User (rrcs-24-227-49-54.se.biz.rr.com [24.227.49.54])
04: 	by aurora.3720-design.co.uk (Postfix) with ESMTPA ID: [ID filtered]
05: 	Thu,  3 Nov 2011 xx:xx:xx -0400 (EDT)
Muguphon: +44 785 6119721 ---> Telefonica O2 (UK) Limited

Mugufax: +44 208 082 5346 ---> Thus Plc, UK

der Sternchen-Mugu zum Zweiten. Wie man sieht, (bis auf Hotmail) Schwarzhüte von A-Z, da klemmt keiner ab. Und internationale Bandenkriminalität: Versand aus Nigeria, angebliche Adresse aus UK, Handynr. und Email aus Spanien.

header:
01: Received: from unknown (EHLO mail.xxgf.com.cn) [218.64.175.131]
02:   by mx0.gmx.net (mx036) with SMTP; 07 Nov 2011 xx:xx:xx +0100 --->
03: CHINANET jiangxi
04: Received: from User (unknown [41.211.204.150])
05: 	by mail.xxgf.com.cn (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  7 Nov 2011 xx:xx:xx +0800 (CST)
IP: 41.211.204.150 ---> 150.204.211.41.client1.directonpc.net, Nigeria

Zitat:

*Die EuroMillions Lotterie-Promotion*
*Online Lotterie-Abteilung*
*P.O. Box 1010 Liverpool*
*L70 1NL United Kingdom*

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.

Man 'liebt' mich noch mehr...

header:

01: Received: from exprod7ob104.obsmtp.com (HELO exprod7ob104.obsmtp.com)
02: [64.18.2.160]
03:   by mx0.gmx.net (mx077) with SMTP; 31 Oct 2011 xx:xx:xx +0100
04: Received: from realmail.getfused.com ([216.235.242.38]) by
05: exprod7ob104.postini.com ([64.18.6.12]) with SMTP;
06: 	Sun, 30 Oct 2011 xx:xx:xx PDT 
07: Received: from ip-69-33-37-158.lax.megapath.net [69.33.37.158] by
08: realmail.getfused.com with SMTP;
09:    Mon, 31 Oct 2011 xx:xx:xx -0400

header:

01: Received: from exprod7ob122.obsmtp.com (HELO exprod7ob122.obsmtp.com)
02: [64.18.2.21]
03:   by mx0.gmx.net (mx039) with SMTP; 31 Oct 2011 xx:xx:xx +0100
04: Received: from realmail.getfused.com ([216.235.242.38]) by
05: exprod7ob122.postini.com ([64.18.6.12]) with SMTP;
06: 	Mon, 31 Oct 2011 xx:xx:xx PDT
07: Received: from ip-69-33-37-158.lax.megapath.net [69.33.37.158] by
08: realmail.getfused.com with SMTP;
09:    Mon, 31 Oct 2011 xx:xx:xx -0400

Muguphon: +44 703 185 1657 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mail12.sea5.speakeasy.net (mail12.sea5.speakeasy.net
02: [69.17.117.14])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Tue,  1 Nov 2011 xx:xx:xx +0100 (CET)
07: Received: (qmail 20457 invoked from network); 31 Oct 2011 xx:xx:xx -0000
08: Received: by simscan 1.4.0 ppID: [ID filtered]
09:          scanners: clamav: 0.88.2/m:52/d:10739 spam: 3.0.4
10: Received: from admin.soarescompany.com (HELO User) (kishi@[72.51.39.209])
11:           (envelope-sender <poor [at] spamvictim.tld>)
12:           by mail12.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
13:           for <poor [at] spamvictim.tld>; 31 Oct 2011 xx:xx:xx -0000

header:

01: Received: from f2.mail.ci-net.com (EHLO f4.mail.ci-net.com) [195.72.171.30]
02:   by mx0.gmx.net (mx108) with SMTP; 04 Nov 2011 xx:xx:xx +0100
03: Received: from ssl.quantumcare.co.uk ([95.152.194.50]:49733
04: helo=GROMIT.quantum.loc)
05: 	by f4.mail.ci-net.com with esmtp (Exim 4.74)
06: 	(envelope-from <infhamelnseguro [at] gmail.com>)
07: 	ID: [ID filtered]
08: Received: from User ([210.75.15.14]) by GROMIT.quantum.loc with
09: Microsoft SMTPSVC(6.0.3790.4675);
10: 	 Fri, 4 Nov 2011 xx:xx:xx +0000

Muguphon: +44 702 401 8161 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from dservmail.co.cc (dservmail.co.cc [173.0.59.30])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  5 Nov 2011 xx:xx:xx +0100 (CET)
04: Received: from [192.168.113.15]
05: (host217-41-84-217.in-addr.btopenworld.com [217.41.84.217])
06: 	by dservmail.co.cc (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Sat,  5 Nov 2011 xx:xx:xx +0300 (MSK)

07.11.2011, 22:22
kjz1
Die Märchenonkels von meinen Mugus waren auch schon mal schneller, jetzt kommen die erst mit Gaddafi, gääähhhhn

header:
```
01: Received: from unknown (EHLO mx4.hotmail.com) [67.21.89.49]
02:   by mx0.gmx.net (mx030) with SMTP; 07 Nov 2011 xx:xx:xx +0100
```
IP: 67.21.89.49 ---> Sharktech, HK

Zitat:

PRIVATE AND HIGHLY CONFIDENTIAL BUSINESS PROPOSAL FOR YOUR EYES ONLY!

Dear Friend,

I am Mr. John Blank, I work for Lloyds bank in London United Kingdom . I
have an urgent and very confidential business proposition for you. On
Feb. 27, 2001, Libyan Leader Muammar Gaddafi Youngest Son Saif al-Arab
Gaddafi made a numbered time (Fixed) Deposit for twelve calendar months,
valued at 150,000,000.00pounds (One Hundred And Fifty Million British
Pounds) in my branch. Mr.Saif al-Arab Gaddafi was killed by Nato air
strike in Tripoli ON 30/04/2011 and before his death he did not declare
any next of kin or relations in all his official
documents,150,000,000.00 pounds is still sitting in my Bank and the
interest is being rolled over with the principal sum at the end of each
year. My proposal is that I will like you as a foreigner to stand in as
THE NEXT OF KIN for the transfer of the money in your name to any of
your nominated bank account for investments such as real estate,
politics, buying of shares or any investments that you think is profitable.

If you are interested in this deal, please send me your full names, age,
occupation, address, confidential telephone and fax numbers for easier
commutation to enable give you more details for your perusal.

Visit the news link
:http://english.aljazeera.net/news/africa/2011/04/2011430224755721620.html
Visit the news link :
http://www.dailymail.co.uk/news/article-1382341/Libya-Nato-strikes-kill-Gaddafis-son-grandchildren.html

Regards,
Mr. John Blank
London, UK
Phone: +447031745892

Note: This deal is for the rich not for the poor!

Der letzte Satz, höhöhö....

Muguphon: +44 703 1745892 ---> Magrathea Telecommunications Limited, UK

Auch meine Mugus waren wieder fleissig:

die Mdrid_Konnektion:

header:

01: Received: from smtp-01.piensasolutions.com (slsa667.piensasolutions.com
02: [217.76.150.252])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed,  2 Nov 2011 xx:xx:xx +0100 (CET)
05: Received: from Admin-1 (unknown [77.208.198.42])
06: 	by smtp-01.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Wed,  2 Nov 2011 xx:xx:xx +0100 (CET)

IP: 77.208.198.42 ---> VODAFONE_SPAIN_NETWORK

^whois:

IP: 87.98.231.4 ---> cluster003.ovh.net

Muguphon: +34 698-344-600 ---> mobile number, Espana

Mugufax: +34 911-820-312 ---> Jazz Telecom, S.a.u., Espana

der Sternchen-Mugu arbeitet auch mit Spanien/UK zusammen (also internationale OK):

header:

01: Received: from unknown (EHLO mail.xxgf.com.cn) [218.64.175.131]
02:   by mx0.gmx.net (mx009) with SMTP; 02 Nov 2011 xx:xx:xx +0100
03: Received: from User (unknown [41.211.204.150])
04: 	by mail.xxgf.com.cn (Postfix) with ESMTP ID: [ID filtered]
05: 	Wed,  2 Nov 2011 xx:xx:xx +0800 (CST)

IP: 41.211.204.150 ---> 150.204.211.41.client1.directonpc.net, Nigeria

Zitat:

*Die EuroMillions Lotterie-Promotion*
*Online Lotterie-Abteilung*
*P.O. Box 1010 Liverpool*
*L70 1NL United Kingdom*

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.

dieselbe Bande nochmal:

header:

01: Received: from unknown (EHLO mail.xxgf.com.cn) [218.64.175.131]
02:   by mx0.gmx.net (mx036) with SMTP; 07 Nov 2011 xx:xx:xx +0100 
03: Received: from User (unknown [41.211.204.150])
04: 	by mail.xxgf.com.cn (Postfix) with ESMTP ID: [ID filtered]
05: 	Mon,  7 Nov 2011 xx:xx:xx +0800 (CST)

IP: 41.211.204.150 ---> 150.204.211.41.client1.directonpc.net, Nigeria

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.

header:

01: Received: from mail.nostalgie.perm.ru (EHLO mail.nostalgie.perm.ru)
02: [78.159.239.2]
03:   by mx0.gmx.net (mx071) with SMTP; 03 Nov 2011 xx:xx:xx +0100
04: Received: from User (unknown [69.60.110.96])
05: 	(Authenticated sender: test)
06: 	by mail.nostalgie.perm.ru (Postfix) with ESMTPA ID: [ID filtered]
07: 	Tue,  1 Nov 2011 xx:xx:xx +0500 (YEKT)

IP: 69.60.110.96 ---> 96-110-60-69.serverpronto.com

Muguphon: +234 815 272 1832 ---> Nigeria

header:

01: Received: from unknown (EHLO aurora.3720-design.co.uk) [91.212.182.176]
02:   by mx0.gmx.net (mx039) with SMTP; 03 Nov 2011 xx:xx:xx +0100
03: Received: from User (rrcs-24-227-49-54.se.biz.rr.com [24.227.49.54])
04: 	by aurora.3720-design.co.uk (Postfix) with ESMTPA ID: [ID filtered]
05: 	Thu,  3 Nov 2011 xx:xx:xx -0400 (EDT)

Muguphon: +44 785 6119721 ---> Telefonica O2 (UK) Limited

Mugufax: +44 208 082 5346 ---> Thus Plc, UK

header:

01: Received: from mailhub.solent.ac.uk (EHLO mailhub.solent.ac.uk)
02: [194.81.151.70]
03:   by mx0.gmx.net (mx115) with SMTP; 07 Nov 2011 xx:xx:xx +0100
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mailhub.solent.ac.uk (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  7 Nov 2011 xx:xx:xx +0000 (GMT)
07: X-Virus-Scanned: by CLAMAV at Southampton Solent University
08: Received: from mailhub.solent.ac.uk ([127.0.0.1])
09: 	by localhost (mailhub.solent.ac.uk [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from blade1-2.solent.ac.uk (ocsmail.solent.ac.uk
12: [192.168.200.112])
13: 	by mailhub.solent.ac.uk (Postfix) with ESMTP ID: [ID filtered]
14: 	Mon,  7 Nov 2011 xx:xx:xx +0000 (GMT)

gecrackt:

header:

01: Received: from bay0-omc2-s9.bay0.hotmail.com (EHLO
02: bay0-omc2-s9.bay0.hotmail.com) [65.54.190.84]
03:   by mx0.gmx.net (mx114) with SMTP; 09 Nov 2011 xx:xx:xx +0100
04: Received: from BAY154-W50 ([65.54.190.125]) by
05: bay0-omc2-s9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Wed, 9 Nov 2011 xx:xx:xx -0800

X-Originating-IP: [115.49.34.207] ---> hn.kd.ny.adsl/China Unicom Henan

header:

01: Received: from 83-250-68-116.dedicated.cross.net.ID: [ID filtered]
02: dlu-tux1.dluonline.co.id) [116.68.250.83]
03:   by mx0.gmx.net (mx101) with SMTP; 09 Nov 2011 xx:xx:xx +0100
04: Received: from localhost (localhost.dluonline.co.ID: [ID filtered]
05: 	by dlu-tux1.dluonline.co.ID: [ID filtered]
06: 	Wed,  9 Nov 2011 xx:xx:xx +0700 (WIT)
07: X-Virus-Scanned: Debian amavisd-new at dluonline.co.id
08: Received: from dlu-tux1.dluonline.co.ID: [ID filtered]
09: 	by localhost (dlu-tux1.dluonline.co.ID: [ID filtered]
10: 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [82.128.67.225])
13: 	by dlu-tux1.dluonline.co.ID: [ID filtered]
14: 	Wed,  9 Nov 2011 xx:xx:xx +0700 (WIT)

IP: 82.128.67.225 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail.pme.gov.sa (mail.pme.gov.sa [84.235.53.11])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Wed,  9 Nov 2011 xx:xx:xx +0100 (CET)
06: Received: from User ([182.62.53.166])
07: 	(authenticated user william [at] pme.gov.sa)
08: 	by mail.pme.gov.sa (Kerio MailServer 6.6.2)
09: 	(using TLSv1/SSLv3 with cipher AES256-SHA (256 bits));
10: 	Mon, 7 Nov 2011 xx:xx:xx +0300

IP: 182.62.53.166 ---> DiGi Telecommunications Sdn Bhd, MY

gecrackt:

Muguphon: +60164743457 ---> mobile number, DiGi Telecom, Malaysia

Und noch einmal:

header:

01: Received: from smtplqs-out5.aruba.it (HELO smtplq04.aruba.it)
02: [62.149.158.45]
03:   by mx0.gmx.net (mx104) with SMTP; 09 Nov 2011 xx:xx:xx +0100
04: Received: (qmail 28423 invoked by UID: [UID filtered]
05: Received: from unknown (HELO smtp3.aruba.it) (62.149.158.223)
06:   by smtplq04.aruba.it with SMTP; 9 Nov 2011 xx:xx:xx -0000
07: Received: (qmail 32519 invoked by UID: [UID filtered]
08: Received: from unknown (HELO User) (info [at] arfango.com@41.215.160.134)
09:   by smtp3.ad.aruba.it with SMTP; 9 Nov 2011 xx:xx:xx -0000

header:

01: Received: from smtplq01.aruba.it (smtplq-out16.aruba.it [62.149.158.36])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  9 Nov 2011 xx:xx:xx +0100 (CET)
04: Received: (qmail 3745 invoked by UID: [UID filtered]
05: Received: from unknown (HELO smtp5.aruba.it) (62.149.158.225)
06:   by smtplq01.aruba.it with SMTP; 9 Nov 2011 xx:xx:xx -0000
07: Received: (qmail 27374 invoked by UID: [UID filtered]
08: Received: from unknown (HELO User) (info [at] arfango.com@41.215.160.134)
09:   by smtp5.ad.aruba.it with SMTP; 9 Nov 2011 xx:xx:xx -0000

IP: 41.215.160.134 ---> Millicom Ghana Limited

gecrackt:

Neues Altes aus dem Mugu-Department:

der ATT/Yahoo-Mugu:

header:

01: Received: from nm16-vm1.access.bullet.mail.sp2.yahoo.com (HELO
02: nm16-vm1.access.bullet.mail.sp2.yahoo.com) [98.139.44.167]
03:   by mx0.gmx.net (mx087) with SMTP; 14 Nov 2011 xx:xx:xx +0100
04: Received: from [98.139.44.102] by nm16.access.bullet.mail.sp2.yahoo.com
05: with NNFMP; 14 Nov 2011 xx:xx:xx -0000
06: Received: from [98.139.44.73] by tm7.access.bullet.mail.sp2.yahoo.com
07: with NNFMP; 14 Nov 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1010.access.mail.sp2.yahoo.com with
09: NNFMP; 14 Nov 2011 xx:xx:xx -0000
10: Received: (qmail 11396 invoked by UID: [UID filtered]
11: Received: from [41.241.181.243] by web181220.mail.ne1.yahoo.com via
12: HTTP; Mon, 14 Nov 2011 xx:xx:xx PST

IP: 41.241.181.243 ---> dsl-241-181-243.telkomadsl.co.za

X-RocketYMMF:

header:

01: Received: from us15.toservers.com (us15.toservers.com [200.62.54.115])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 16 Nov 2011 xx:xx:xx +0100 (CET)
04: Received: from us15.toservers.com (punisher-back [192.168.2.231])
05: 	by us15.toservers.com (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 16 Nov 2011 xx:xx:xx -0300 (ART)
07: Received: by us15.toservers.com (Postfix, from userID: [ID filtered]
08: 	ID: [ID filtered]
09: Received: from localhost (localhost [127.0.0.1])
10: 	by us15.toservers.com (Postfix) with SMTP ID: [ID filtered]
11: 	for xxxxx; Wed, 16 Nov 2011 xx:xx:xx -0300 (ART)
12: Received: from [190.16.111.206] by cancerbero 2.7.55
13: (us15.toservers.com) is AUTH

IP: 190.16.111.206 ---> 206-111-16-190.fibertel.com.ar

gecrackt:

header:

01: Received: from nm1-vm0.bullet.mail.sp2.yahoo.com (HELO
02: nm1-vm0.bullet.mail.sp2.yahoo.com) [98.139.91.202]
03: by mx0.gmx.net (mx051) with SMTP; 17 Nov 2011 xx:xx:xx +0100
04: Received: from [98.139.91.66] by nm1.bullet.mail.sp2.yahoo.com with
05: NNFMP; 16 Nov 2011 xx:xx:xx -0000
06: Received: from [98.139.91.56] by tm6.bullet.mail.sp2.yahoo.com with
07: NNFMP; 16 Nov 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1056.mail.sp2.yahoo.com with NNFMP; 16
09: Nov 2011 xx:xx:xx -0000
10: Received: (qmail 65563 invoked by UID: [UID filtered]
11: Received: from [175.100.15.103] by web190002.mail.sg3.yahoo.com via
12: HTTP; Thu, 17 Nov 2011 xx:xx:xx SGT

IP: 175.100.15.103 ---> VIETTEL-CAMBODIA

header:

01: Received: from fed1rmfepo103.cox.net (EHLO fed1rmfepo103.cox.net)
02: [68.230.241.145]
03:   by mx0.gmx.net (mx049) with SMTP; 17 Nov 2011 xx:xx:xx +0100
04: Received: from fed1rmimpo306.cox.net ([68.230.241.174])
05:           by fed1rmfepo103.cox.net
06:           (InterMail vM.8.01.04.00 201-2260-137-20101110) with ESMTP
07:           id
08: <20111117123411.NIPZ3801.fed1rmfepo103.cox.net [at] fed1rmimpo306.cox.net>;
09:           Thu, 17 Nov 2011 xx:xx:xx -0500
10: Received: from fed1rmwml208 ([172.18.140.217])
11: 	by fed1rmimpo306.cox.net with bizsmtp
12: 	ID: [ID filtered]
13: Received: from 76.162.253.55 by webmail.west.cox.net; Thu, 17 Nov 2011
14: 7:34:11 -0500

header:

01: Received: from fed1rmfepi103.cox.net (EHLO fed1rmfepi103.cox.net)
02: [68.230.241.134]
03:   by mx0.gmx.net (mx027) with SMTP; 17 Nov 2011 xx:xx:xx +0100
04: Received: from fed1rmimpo306.cox.net ([68.230.241.174])
05:           by fed1rmfepo103.cox.net
06:           (InterMail vM.8.01.04.00 201-2260-137-20101110) with ESMTP
07:           id
08: <20111117123411.NIPZ3801.fed1rmfepo103.cox.net [at] fed1rmimpo306.cox.net>;
09:           Thu, 17 Nov 2011 xx:xx:xx -0500
10: Received: from fed1rmwml208 ([172.18.140.217])
11: 	by fed1rmimpo306.cox.net with bizsmtp
12: 	ID: [ID filtered]
13: Received: from 76.162.253.55 by webmail.west.cox.net; Thu, 17 Nov 2011
14: 7:34:11 -0500

IP: 76.162.253.55 ---> rev.opentransfer.com.55.253.162.76.in-addr.arpa/ECOMMERCE-HOSTING

wieder der ATT/Yahoo-Mugu:

header:

01: Received: from nm1-vm1.access.bullet.mail.mud.yahoo.com (HELO
02: nm1-vm1.access.bullet.mail.mud.yahoo.com) [66.94.236.28]
03:   by mx0.gmx.net (mx023) with SMTP; 17 Nov 2011 xx:xx:xx +0100
04: Received: from [66.94.237.192] by nm1.access.bullet.mail.mud.yahoo.com
05: with NNFMP; 17 Nov 2011 xx:xx:xx -0000
06: Received: from [66.94.237.122] by tm3.access.bullet.mail.mud.yahoo.com
07: with NNFMP; 17 Nov 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1027.access.mail.mud.yahoo.com with
09: NNFMP; 17 Nov 2011 xx:xx:xx -0000
10: Received: (qmail 90051 invoked by UID: [UID filtered]
11: Received: from [41.241.163.202] by web181708.mail.ne1.yahoo.com via
12: HTTP; Thu, 17 Nov 2011 xx:xx:xx PST

IP: 41.241.163.202 ---> dsl-241-163-202.telkomadsl.co.za

X-RocketYMMF:

header:

01: Received: from mail.cbtech.cl (EHLO exchange.cbtech.cl) [200.111.132.75]
02:   by mx0.gmx.net (mx111) with SMTP; 17 Nov 2011 xx:xx:xx +0100
03: Received: from User ([82.128.18.40]) by exchange.cbtech.cl with
04: Microsoft SMTPSVC(6.0.3790.4675);
05: 	 Thu, 17 Nov 2011 xx:xx:xx -0300

IP: 82.128.18.40 ---> ml82.128.18.40.multilinks.com, Nigeria

header:

01: Received: from nm25-vm1.bullet.mail.sp2.yahoo.com (HELO
02: nm25-vm1.bullet.mail.sp2.yahoo.com) [98.139.91.229]
03:   by mx0.gmx.net (mx009) with SMTP; 17 Nov 2011 xx:xx:xx +0100
04: Received: from [98.139.91.69] by nm25.bullet.mail.sp2.yahoo.com with
05: NNFMP; 17 Nov 2011 xx:xx:xx -0000
06: Received: from [98.139.91.28] by tm9.bullet.mail.sp2.yahoo.com with
07: NNFMP; 17 Nov 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1028.mail.sp2.yahoo.com with NNFMP; 17
09: Nov 2011 xx:xx:xx -0000
10: Received: (qmail 71043 invoked by UID: [UID filtered]
11: Received: from [41.138.113.129] by web190404.mail.sg3.yahoo.com via
12: HTTP; Fri, 18 Nov 2011 xx:xx:xx SGT

IP: 41.138.113.129 ---> ONATEL, BF

header:

01: Received: from mail06.o2online.de (mail06.o2online.de [82.113.101.34])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Sat, 19 Nov 2011 xx:xx:xx +0100 (CET)
06: Received: from SGBMCGW01 (sgbmcgw01 [10.97.206.31])
07: 	by mail06.o2online.de (8.12.11.20060308/8.12.11) with ESMTP id
08: pAJ8P0S5024833;
09: 	Sat, 19 Nov 2011 xx:xx:xx +0100

gecrackt:

Aus der Mugu-Kiste klettern noch:

header:

01: Received: from logistix.cr (EHLO mail.alsa.co.cr) [201.201.66.140]
02:   by mx0.gmx.net (mx026) with SMTP; 15 Nov 2011 xx:xx:xx +0100
03: Received: from mail.alsa.co.cr (localhost [127.0.0.1])
04: 	by localhost (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri,  4 Nov 2011 xx:xx:xx -0600 (CST)
06: Received: from User (unknown [184.22.163.244])
07: 	by mail.alsa.co.cr (Postfix) with ESMTP ID: [ID filtered]
08: 	Thu,  3 Nov 2011 xx:xx:xx -0600 (CST)

IP: 184.22.163.244 ---> 184-22-163-244.static.hostnoc.net

header:

01: Received: from mail.yankey.com.tw (mail.yankey.com.tw [220.128.121.215])
02: 	(using TLSv1 with cipher AES128-SHA (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Wed, 16 Nov 2011 xx:xx:xx +0100 (CET)
06: Received: from User (98.200.119.250) by YK-MAIL.yankey.tpe (192.168.168.2)
07:  with Microsoft SMTP Server ID: [ID filtered]

Muguphon: +234-705-5839-721 ---> Globacom Ltd., Nigeria

der Sternchen-Mugu:

header:

01: Received: from correo.gdc.gob.ve (EHLO MIRANDA.casa.gdc.gob.ve)
02: [190.202.86.218]
03:   by mx0.gmx.net (mx076) with SMTP; 16 Nov 2011 xx:xx:xx +0100
04: Received: from User ([59.144.10.201]) by MIRANDA.casa.gdc.gob.ve with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Wed, 16 Nov 2011 xx:xx:xx -0430

IP: 59.144.10.201 ---> AES-Static-201.10.144.59.airtel.in

Zitat:

*Yahoo!! International Lottery Organization*
*Bangkok Branch Office*
*Address: 3 Sukhumvit Lane*
*Bangkok 10400 Thailand*

Muguphon: +668-4670 - 9581 ---> Total Access Communication Plc. (TAC/DTAC),
Thailand

Als Mugus wollen sich noch outen:

header:

01: Received: from mr-4c.inet.it (mr-4c.inet.it [213.92.5.228])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 21 Nov 2011 xx:xx:xx +0100 (CET)
04: Received: from ::ffff:180.74.98.84 ([::ffff:180.74.98.84]) by
05: mr-4c.inet.it via I-SMTP-5.6.2-562
06: 	ID: [ID filtered]

IP: 180.74.98.84 ---> Packet One Networks, MY

header:

01: Received: (qmail invoked by alias); 23 Nov 2011 xx:xx:xx -0000
02: Received: from mail.amnet.co.cr (EHLO amnet.co.cr) [196.40.3.6]
03:   by mx0.gmx.net (mx022) with SMTP; 23 Nov 2011 xx:xx:xx +0100
04: X-Virus-Scanned: by Clam Antivirus
05: Received: from [82.128.19.92] (account peg HELO User)
06:   by amnet.co.cr (CommuniGate Pro SMTP 4.1.8)
07:   with ESMTP ID: [ID filtered]

IP: 82.128.19.92 ---> ml82.128.19.92.multilinks.com, Nigeria

Als Mugus dürfen auch gelten:

header:

01: Received: from ims-d14.mx.aol.com (ims-d14.mx.aol.com [205.188.249.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 21 Nov 2011 xx:xx:xx +0100 (CET)
04: Received: from oms-mb04.r1000.mx.aol.com (oms-mb04.r1000.mx.aol.com
05: [64.12.102.140])
06: 	by ims-d14.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Mon, 21 Nov 2011 xx:xx:xx -0500
08: Message-ID: [ID filtered]
09: Received: from mtaout-da03.r1000.mx.aol.com
10: (mtaout-da03.r1000.mx.aol.com [172.29.51.131])
11: 	by oms-mb04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 1D3BA1C000081;
13: 	Mon, 21 Nov 2011 xx:xx:xx -0500 (EST)
14: Received: from omh-ma01.r1000.mx.aol.com (omh-ma01.r1000.mx.aol.com
15: [172.29.41.7])
16: 	by mtaout-da03.r1000.mx.aol.com (MUA/Third Party Client Interface) with
17: ESMTP ID: [ID filtered]
18: 	Mon, 21 Nov 2011 xx:xx:xx -0500 (EST)
19: Received: from mtaout-mb06.r1000.mx.aol.com
20: (mtaout-mb06.r1000.mx.aol.com [172.29.41.70])
21: 	by omh-ma01.r1000.mx.aol.com (AOL Outbound Holding Interface) with
22: ESMTP ID: [ID filtered]
23: 	Mon, 21 Nov 2011 xx:xx:xx -0500 (EST)
24: Received: from User (173-16-109-55.client.mchsi.com [173.16.109.55])
25: 	by mtaout-mb06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
26: ESMTPA ID: [ID filtered]
27: 	Mon, 21 Nov 2011 xx:xx:xx -0500 (EST)

header:

01: Received: from nm7-vm1.bullet.mail.sg1.yahoo.com (HELO
02: nm7-vm1.bullet.mail.sg1.yahoo.com) [115.178.12.202]
03:   by mx0.gmx.net (mx042) with SMTP; 21 Nov 2011 xx:xx:xx +0100
04: Received: from [115.178.12.227] by nm7.bullet.mail.sg1.yahoo.com with
05: NNFMP; 21 Nov 2011 xx:xx:xx -0000
06: Received: from [115.178.12.228] by tm6.bullet.mail.sg1.yahoo.com with
07: NNFMP; 21 Nov 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1008.mail.sg1.yahoo.com with NNFMP; 21
09: Nov 2011 xx:xx:xx -0000
10: Received: (qmail 81825 invoked by UID: [UID filtered]
11: Received: from [212.52.153.195] by web190001.mail.sg3.yahoo.com via
12: HTTP; Tue, 22 Nov 2011 xx:xx:xx SGT

IP: 212.52.153.195 ---> BF-ONATEL

header:

01: Received: from 83.186.140.112.sparkstation.net (EHLO
02: panda.uponatree.com) [112.140.186.83]
03:   by mx0.gmx.net (mx001) with SMTP; 25 Nov 2011 xx:xx:xx +0100
04: Received: from take by panda.uponatree.com with local (Exim 4.69)
05: 	(envelope-from <take [at] panda.uponatree.com>)
06: 	ID: [ID filtered]
07: 	for xxxxx; Thu, 24 Nov 2011 xx:xx:xx +0800

der Yahoo/ATT-Mugu:

header:

01: Received: from nm4-vm1.access.bullet.mail.mud.yahoo.com
02: (nm4-vm1.access.bullet.mail.mud.yahoo.com [66.94.237.154])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 25 Nov 2011 xx:xx:xx +0100 (CET)
05: Received: from [66.94.237.195] by nm4.access.bullet.mail.mud.yahoo.com
06: with NNFMP; 25 Nov 2011 xx:xx:xx -0000
07: Received: from [66.94.237.106] by tm6.access.bullet.mail.mud.yahoo.com
08: with NNFMP; 25 Nov 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1011.access.mail.mud.yahoo.com with
10: NNFMP; 25 Nov 2011 xx:xx:xx -0000
11: Received: (qmail 9147 invoked by UID: [UID filtered]
12: Received: from [41.31.255.186] by web181111.mail.ne1.yahoo.com via HTTP;
13: Fri, 25 Nov 2011 xx:xx:xx PST

IP: 41.31.255.186 ---> vc-gp-s-41-31-255-186.umts.vodacom.co.za

X-RocketYMMF:

header:

01: Received: from server.boostyourbusiness.com.au (EHLO
02: server.boostyourbusiness.com.au) [74.207.236.243]
03:   by mx0.gmx.net (mx080) with SMTP; 26 Nov 2011 xx:xx:xx +0100
04: Received: from [218.3.59.35] (helo=User)
05: 	by server.boostyourbusiness.com.au with esmtpa (Exim 4.69)
06: 	(envelope-from <info [at] fbi.gov>)
07: 	ID: [ID filtered]

IP: 218.3.59.35 ---> Zhenjiang Qingxing Netbar

header:

01: Received: from ims-d12.mx.aol.com (EHLO ims-d12.mx.aol.com)
02: [205.188.249.149]
03: by mx0.gmx.net (mx085) with SMTP; 27 Nov 2011 xx:xx:xx +0100
04: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com
05: [64.12.102.138])
06: by ims-d12.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: Sun, 27 Nov 2011 xx:xx:xx -0500
08: Message-ID: [ID filtered]
09: Received: from mtaout-db04.r1000.mx.aol.com
10: (mtaout-db04.r1000.mx.aol.com [172.29.51.196])
11: by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 226551C000085;
13: Sun, 27 Nov 2011 xx:xx:xx -0500 (EST)
14: Received: from AOL.DE (unknown [65.49.77.143])
15: by mtaout-db04.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: Sun, 27 Nov 2011 xx:xx:xx -0500 (EST)

X-AOL-IP: 65.49.77.143 ---> Hurricane Electric

Über allen Wipfeln ist Ruh'.... nur bei den Mugus nicht:

header:

01: Received: from server.infographie-sup.eu (EHLO host.infographie-sup.eu)
02: [70.38.51.102]
03:   by mx0.gmx.net (mx088) with SMTP; 01 Dec 2011 xx:xx:xx +0100
04: Received: from [41.206.12.65] (helo=User)
05: 	by host.infographie-sup.eu with esmtpsa (TLSv1:AES256-SHA:256)
06: 	(Exim 4.69)
07: 	(envelope-from <kevinhasky1 [at] w.cn>)
08: 	ID: [ID filtered]

IP: 41.206.12.65 ---> 41.206.12.65.mtngprs.net, Nigeria

Muguphone: +44 785 6119721 ---> Telefonica O2 (UK) Limited

Mugufax: +44 208 0825346 ---> Thus Plc, UK

header:

01: Received: from moon133.nkn.in (EHLO kuvempu-mail.kuvempu.ac.in)
02: [14.139.133.4]
03:   by mx0.gmx.net (mx115) with SMTP; 02 Dec 2011 xx:xx:xx +0100
04: Received: by kuvempu-mail.kuvempu.ac.in (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from 115.184.37.61
07:         (SquirrelMail authenticated user biochemistry);
08:         by mail.kuvempu.ac.in with HTTP;
09:         Fri, 2 Dec 2011 xx:xx:xx +0530 (IST)

IP: 115.184.37.61 ---> RCOM-Wireless-HSD-MUMBAI

gecrackt:

Und noch ein Hauch Mugus:

header:

01: Received: from relay11.bol.com.br (relay11.bol.com.br [200.147.32.241])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 29 Nov 2011 xx:xx:xx +0100 (CET)
04: Received: from a4-salsa1.bol.com.br (a4-salsa1.host.intranet
05: [10.131.133.112])
06: 	by a2-sato2.bol.com.br (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Tue, 29 Nov 2011 xx:xx:xx -0200 (BRST)
08: Received: from localhost (localhost.localdomain [127.0.0.1])
09: 	by a4-salsa1.bol.com.br (Postfix) with ESMTP ID: [ID filtered]
10: 	Tue, 29 Nov 2011 xx:xx:xx -0200 (BRST)
11: Received: from a4-salsa1.adm.intranet (localhost.localdomain [127.0.0.1])
12: 	by a4-salsa1.bol.com.br (Postfix) with ESMTP ID: [ID filtered]
13: 	Tue, 29 Nov 2011 xx:xx:xx -0200 (BRST)
14: Received: from bol.com.br (a4-winter16.host.intranet [10.131.133.143])
15: 	by a4-salsa1.adm.intranet (Postfix) with ESMTP ID: [ID filtered]
16: 	Tue, 29 Nov 2011 xx:xx:xx -0200 (BRST)

X-SenderIP: 217.31.36.106 ---> ip-217-31-36-106.dsidata.sk

header:

01: Received: from webmail.czone.ro (EHLO acces.czone.ro) [81.181.111.2]
02:   by mx0.gmx.net (mx020) with SMTP; 02 Dec 2011 xx:xx:xx +0100
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by acces.czone.ro (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri,  2 Dec 2011 xx:xx:xx +0200 (EET)
06: X-Virus-Scanned: Debian amavisd-new at czone.ro
07: Received: from acces.czone.ro ([127.0.0.1])
08: 	by localhost (acces.czone.ro [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from webmail.czone.ro (localhost.localdomain [127.0.0.1])
11: 	by acces.czone.ro (Postfix) with ESMTP ID: [ID filtered]
12: 	Fri,  2 Dec 2011 xx:xx:xx +0200 (EET)
13: Received: from 41.138.168.36
14:         (SquirrelMail authenticated user vvezuree)
15:         by webmail.czone.ro with HTTP;
16:         Fri, 2 Dec 2011 xx:xx:xx +0200 (EET)

IP: 41.138.168.36 ---> Visafone Communications Limited, Nigeria

gecrackt:

header:

01: Received: from uef.edu.vn (EHLO uef.edu.vn) [221.133.9.12]
02:   by mx0.gmx.net (mx045) with SMTP; 03 Dec 2011 xx:xx:xx +0100
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by uef.edu.vn (Postfix) with ESMTP ID: [ID filtered]
05: 	Sat,  3 Dec 2011 xx:xx:xx +0700 (ICT)
06: X-Virus-Scanned: amavisd-new at uef.edu.vn
07: Received: from uef.edu.vn ([127.0.0.1])
08: 	by localhost (uef.edu.vn [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from uef.edu.vn (uef.edu.vn [221.133.9.12])
11: 	by uef.edu.vn (Postfix) with ESMTP ID: [ID filtered]
12: 	Sat,  3 Dec 2011 xx:xx:xx +0700 (ICT)

gecrackt:

Die Mugus sterben nie aus:

header:

01: Received: from mail.csdn-inc.net (EHLO mail.csdn-inc.net) [211.103.135.163]
02:   by mx0.gmx.net (mx029) with SMTP; 10 Dec 2011 xx:xx:xx +0100 
03: Received: from localhost (csdn-inc.net [127.0.0.1])
04: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Fri,  9 Dec 2011 xx:xx:xx +0800 (CST)

gecrackt:

Muguphon: +234-8051006901 ---> Globacom Ltd., Nigeria

header:

01: Received: from 59-124-64-53.HINET-IP.hinet.net (EHLO
02: public.dnacom.com.tw) [59.124.64.53]
03:   by mx0.gmx.net (mx062) with SMTP; 10 Dec 2011 xx:xx:xx +0100
04: Received: (from nobody [at] localhost)
05: 	by public.dnacom.com.tw (8.11.6/8.11.6) ID: [ID filtered]
06: 	Sat, 10 Dec 2011 xx:xx:xx -0800 (PST)
07: 	(envelope-from paul_barman1999 [at] dnacom.com.tw)

X-IPAddress: 41.216.50.172 ---> BENINTELECOMS

header:

01: Received: from mailout05.t-online.de (EHLO mailout05.t-online.de)
02: [194.25.134.82]
03:   by mx0.gmx.net (mx024) with SMTP; 11 Dec 2011 xx:xx:xx +0100
04: Received: from fwd07.aul.t-online.de (fwd07.aul.t-online.de )
05: 	by mailout05.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (bpFOqeZdYtuKR9XvbvhgAiarx+Ivj+WQgzWGPFnnWGzf5jp+PosEgzscKBTTrWfRyKQJTdZS3z@[46.166.129.160
09: 	#93;)
10: by fwd07.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 46.166.129.160 ---> Santrex UK VPS Services

gecrackt:

Neu hinzugekommen sind:

header:

01: Received: from mail.csdn-inc.net (EHLO mail.csdn-inc.net) [211.103.135.163]
02:   by mx0.gmx.net (mx116) with SMTP; 06 Dec 2011 xx:xx:xx +0100 
03: Received: from localhost (csdn-inc.net [127.0.0.1])
04: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Mon,  5 Dec 2011 xx:xx:xx +0800 (CST)
06: X-Virus-Scanned: amavisd-new at csdn-inc.net
07: X-Spam-Flag: YES
08: X-Spam-Score: 10.793
09: X-Spam-Level: **********
10: X-Spam-Status: Yes, score=10.793 tagged_above=-10 required=5
11: 	tests=[DSPAM:Innocent=-1.000, ALL_TRUSTED=-1.44, DEAR_FRIEND=2.696,
12: 	DSPAM_HAM_99=-3.23, FH_DATE_PAST_20XX=3.384, FORGED_MUA_OUTLOOK=4.199,
13: 	MISSING_HEADERS=1.581, MISSING_MID=0.001, SUBJ_ALL_CAPS=1.806,
14: 	XMAILER_MIMEOLE_OL_1ECD5=2.796] autolearn=unavailable
15: Received: from mail.csdn-inc.net ([127.0.0.1])
16: 	by localhost (mail.csdn-inc.net [127.0.0.1]) (amavisd-new, port 10024)
17: 	with ESMTP ID: [ID filtered]
18: Received: from User (unknown [70.91.250.12])
19: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTPA ID: [ID filtered]
20: 	Mon,  5 Dec 2011 xx:xx:xx +0800 (CST)

Also als Spam erkannt und trotzdem weiter in die Welt geblasen, sprich: merkbefreite Admins...

IP: 70.91.250.12 ---> indianatitlenetwork.com/Comcast

gecrackt:

Muguphon: +234-8051006901 ---> Globacom Ltd., Nigeria

header:

01: Received: from server2.eicononline.com (EHLO server2.eicononline.com)
02: [207.45.187.178]
03:   by mx0.gmx.net (mx097) with SMTP; 06 Dec 2011 xx:xx:xx +0100
04: Received: from localhost ([127.0.0.1] helo=User)
05: 	by server2.eicononline.com with smtp (Exim 4.69)
06: 	(envelope-from <norereply [at] cargo.org>)
07: 	ID: [ID filtered]

header:

01: Received: (qmail invoked by alias); 07 Dec 2011 xx:xx:xx -0000
02: Received: from 41-87-241-73.altechdsl.co.za (EHLO mx4.hotmail.com)
03: [41.87.241.73]
04:   by mx0.gmx.net (mx030) with SMTP; 07 Dec 2011 xx:xx:xx +0100

Muguphon: +27 736260630 ---> MTN, ZA

Mugufax: +27 865127045 ---> premium rate number, ZA

header:

01: Received: from ims-d14.mx.aol.com (ims-d14.mx.aol.com [205.188.249.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  7 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from oms-db04.r1000.mx.aol.com (oms-db04.r1000.mx.aol.com
05: [205.188.58.4])
06: 	by ims-d14.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Wed, 7 Dec 2011 xx:xx:xx -0500
08: Message-ID: [ID filtered]
09: Received: from mtaout-da05.r1000.mx.aol.com
10: (mtaout-da05.r1000.mx.aol.com [172.29.51.133])
11: 	by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 028441C000084;
13: 	Wed,  7 Dec 2011 xx:xx:xx -0500 (EST)
14: Received: from aol.de (unknown [91.123.196.147])
15: 	by mtaout-da05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: 	Wed,  7 Dec 2011 xx:xx:xx -0500 (EST)

X-AOL-IP: 91.123.196.147 ---> City Network Hosting AB, SE

header:

01: Received: from mail.csdn-inc.net (EHLO mail.csdn-inc.net) [211.103.135.163]
02:   by mx0.gmx.net (mx095) with SMTP; 09 Dec 2011 xx:xx:xx +0100  
03: Received: from localhost (csdn-inc.net [127.0.0.1])
04: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Thu,  8 Dec 2011 xx:xx:xx +0800 (CST)
06: X-Virus-Scanned: amavisd-new at csdn-inc.net
07: X-Spam-Flag: YES
08: X-Spam-Score: 11.423
09: X-Spam-Level: ***********
10: X-Spam-Status: Yes, score=11.423 tagged_above=-10 required=5
11: 	tests=[DSPAM:Innocent=-1.000, ADVANCE_FEE_2=2.049,
12: 	ADVANCE_FEE_3=1.435, ADVANCE_FEE_4=1.502, ALL_TRUSTED=-1.44,
13: 	DSPAM_HAM_99=-3.23, FH_DATE_PAST_20XX=3.384, FORGED_MUA_OUTLOOK=4.199,
14: 	MILLION_USD=1.777, MISSING_HEADERS=1.581, MISSING_MID=0.001,
15: 	US_DOLLARS_3=1.165] autolearn=unavailable
16: Received: from mail.csdn-inc.net ([127.0.0.1])
17: 	by localhost (mail.csdn-inc.net [127.0.0.1]) (amavisd-new, port 10024)
18: 	with ESMTP ID: [ID filtered]
19: Received: from User (unknown [113.106.90.199])
20: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTPA ID: [ID filtered]
21: 	Thu,  8 Dec 2011 xx:xx:xx +0800 (CST)

IP: 113.106.90.199 ---> CHINANET Guangdong

gecrackt:

header:

01: Received: from fep06-svc.tim.it (webmail1.posta.tim.it [213.230.128.226])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  9 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from User ([2.196.3.59]) by fep06-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Fri, 9 Dec 2011 xx:xx:xx +0100

aus der Mugu-Liste:

header:

01: Received: from mail.transestiba.com.ec (EHLO mail.transestiba.com.ec)
02: [200.93.205.154]
03:   by mx0.gmx.net (mx112) with SMTP; 12 Dec 2011 xx:xx:xx +0100
04: Received: from [192.168.1.200]
05: (static-68-236-186-128.ny325.east.verizon.net [68.236.186.128])
06: 	by mail.transestiba.com.ec (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 12 Dec 2011 xx:xx:xx -0500 (ECT)

Muguphon: +234 8166599170 ---> Nigeria

header:

01: Received: from oms-da02.r1000.mx.aol.com (oms-da02.r1000.mx.aol.com
02: [205.188.255.12])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 13 Dec 2011 xx:xx:xx +0100 (CET)
05: Received: from mtaout-ma05.r1000.mx.aol.com
06: (mtaout-ma05.r1000.mx.aol.com [172.29.41.5])
07: 	by oms-da02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 4AC123802058B;
09: 	Tue, 13 Dec 2011 xx:xx:xx -0500 (EST)
10: Received: from User (unknown [81.214.84.225])
11: 	by mtaout-ma05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTPA ID: [ID filtered]
13: 	Tue, 13 Dec 2011 xx:xx:xx -0500 (EST)

X-AOL-IP: 81.214.84.225 ---> dsl.static8121484225.ttnet.net.tr

der ATT/Yahoo-Mugu:

header:

01: Received: from nm11-vm0.access.bullet.mail.sp2.yahoo.com (HELO
02: nm11-vm0.access.bullet.mail.sp2.yahoo.com) [98.139.44.124]
03:   by mx0.gmx.net (mx074) with SMTP; 14 Dec 2011 xx:xx:xx +0100
04: Received: from [98.139.44.104] by nm11.access.bullet.mail.sp2.yahoo.com
05: with NNFMP; 14 Dec 2011 xx:xx:xx -0000
06: Received: from [98.139.44.67] by tm9.access.bullet.mail.sp2.yahoo.com
07: with NNFMP; 14 Dec 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1004.access.mail.sp2.yahoo.com with
09: NNFMP; 14 Dec 2011 xx:xx:xx -0000
10: Received: from [41.216.50.172] by web181315.mail.ne1.yahoo.com via HTTP;
11: Wed, 14 Dec 2011 xx:xx:xx PST

IP: 41.216.50.172 ---> Benin Telecoms SA

header:

01: Received: from imr-db02.mx.aol.com (imr-db02.mx.aol.com [205.188.91.96])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 14 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from mtaout-ma01.r1000.mx.aol.com
05: (mtaout-ma01.r1000.mx.aol.com [172.29.41.1])
06: 	by imr-db02.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Wed, 14 Dec 2011 xx:xx:xx -0500
08: Received: from sexiv133 (unknown [41.58.85.225])
09: 	by mtaout-ma01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
10: ESMTPA ID: [ID filtered]
11: 	Wed, 14 Dec 2011 xx:xx:xx -0500 (EST)

X-AOL-IP: 41.58.85.225 ---> SWIFT NETWORKS LIMITED, Nigeria

Muguphon: +234-7092612921 ---> Multi-links Telecommunications Ltd., Nigeria

Elena darf auch nicht fehlen:

header:

01: Received: from smtp-noauth7.primus.ca (EHLO mail-09.primus.ca)
02: [216.254.180.38]
03:   by mx0.gmx.net (mx111) with SMTP; 16 Dec 2011 xx:xx:xx +0100
04: Received: from dsl-173-206-164-168.tor.primus.ca ([173.206.164.168]
05: helo=93-141-22-236.adsl.net.t-com.hr)
06: 	by mail-09.primus.ca with smtp (Exim 4.72)
07: 	(envelope-from <elenakin [at] nxt.ru>)
08: 	ID: [ID filtered]

IP: 173.206.164.168 ---> dsl-173-206-164-168.tor.primus.ca

Bei den Mugus ist man um Nachschlag nie verlegen:

header:

01: Received: from out19.wanadoo.es (out19.wanadoo.es [62.36.20.219])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 13 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from [62.36.20.157] (helo=User)
05: 	by out19.wanadoo.es with esmtpa (Exim 4.68)
06: 	(envelope-from <info [at] info.com>)
07: 	ID: [ID filtered]

IP: 62.36.20.157 ---> 62.36.20.157.static.abi.uni2.es

header:

01: Received: from alabama.gov (smtp-2.alabama.gov [216.226.178.46])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Thu, 15 Dec 2011 xx:xx:xx +0100 (CET)
06: Received: from ([10.2.175.1])
07: 	by gateway-2.alabama.gov with ESMTP with TLS ID: [ID filtered]
08: 	Thu, 15 Dec 2011 xx:xx:xx -0600
09: Received: from ISDACEExHUT03.al.mail (10.131.90.107) by
10: ISDAceExHUT01.al.mail
11:  (10.131.90.105) with Microsoft SMTP Server (TLS) ID: [ID filtered]
12:  2011 xx:xx:xx -0600
13: Received: from ACE04.al.mail ([fe80::4019:6082:13d0:b765]) by
14:  ISDACEExHUT03.al.mail ([::1]) with mapi; Thu, 15 Dec 2011 xx:xx:xx -0600

gecrackt:

header:

01: Received: from 69-64-70-91.dedicated.codero.net (EHLO
02: host101.pagevilla.com) [69.64.70.91]
03:   by mx0.gmx.net (mx092) with SMTP; 17 Dec 2011 xx:xx:xx +0100
04: Received: from 70-89-233-93-smc-va.hfc.comcastbusiness.net
05: ([70.89.233.93] helo=User)
06: 	by host101.pagevilla.com with esmtpa (Exim 4.69)
07: 	(envelope-from <info [at] chrysalis.com>)
08: 	ID: [ID filtered]

header:

01: Received: from webmail.morehouse.edu (EHLO webmail.morehouse.edu)
02: [69.87.160.30]
03:   by mx0.gmx.net (mx049) with SMTP; 18 Dec 2011 xx:xx:xx +0100
04: Received: from MCEXCLUSTER01.win.morehouse.edu ([172.16.0.212]) by
05: webmail.morehouse.edu with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sun, 18 Dec 2011 xx:xx:xx -0500

gecrackt:

header:

01: Received: from 11-115-162-69.servebyte.net (EHLO mx4.hotmail.com)
02: [69.162.115.11]
03:   by mx0.gmx.net (mx010) with SMTP; 18 Dec 2011 xx:xx:xx +0100

Muguphon: +277 84919711 ---> MTN, ZA

header:

01: Received: from 50.31.253.61.static.vps.net (EHLO sever2.games.com)
02: [50.31.253.61]
03: by mx0.gmx.net (mx113) with SMTP; 18 Dec 2011 xx:xx:xx +0100
04: Received: from [46.246.112.84] (helo=qz1-PC)
05: by sever2.games.com with esmtpa (Exim 4.69)
06: (envelope-from <noreply [at] baruch.com>)
07: ID: [ID filtered]

IP: 46.246.112.84 ---> NET-VPNTUNNEL-SE5

header:

01: Received: from eastrmfepo103.cox.net (EHLO eastrmfepo103.cox.net)
02: [68.230.241.215]
03:   by mx0.gmx.net (mx054) with SMTP; 18 Dec 2011 xx:xx:xx +0100
04: Received: from eastrmimpo306.cox.net ([68.230.241.238])
05:           by eastrmfepo103.cox.net
06:           (InterMail vM.8.01.04.00 201-2260-137-20101110) with ESMTP
07:           id
08: <20111218211947.OOEA28068.eastrmfepo103.cox.net [at] eastrmimpo306.cox.net>;
09:           Sun, 18 Dec 2011 xx:xx:xx -0500
10: Received: from eastrmwml108 ([172.18.18.217])
11: 	by eastrmimpo306.cox.net with bizsmtp
12: 	ID: [ID filtered]
13: Received: from 66.225.195.47 by webmail.east.cox.net; Sun, 18 Dec 2011
14: xx:xx:xx -0500

IP: 66.225.195.47 ---> 47.195.225.66.host.nwnx.net

23.12.2011, 15:08
kjz1
Das Jahr ist ja noch nicht zu Ende, also noch ein paar Mugus:

header:
```
01: Received: from mail.aif.ru (mail.aif.ru [81.23.15.68])
02: 	(using TLSv1 with cipher AES128-SHA (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Mon, 19 Dec 2011 xx:xx:xx +0100 (CET)
06: Received: from ExchangeHT.aif.local (81.23.15.90) by mail.aif.ru
07: (81.23.15.68)
08:  with Microsoft SMTP Server (TLS) ID: [ID filtered]
09:  +0400
10: Received: from User (95.142.188.94) by ExchangeHT.aif.local
11: (81.23.15.90) with
12:  Microsoft SMTP Server ID: [ID filtered]
```
Muguphon: +234-802-989-5459 ---> Celtel Nigeria Limited/Zain

header:
```
01: Received: from webmail.morehouse.edu (EHLO webmail.morehouse.edu)
02: [69.87.160.30]
03:   by mx0.gmx.net (mx010) with SMTP; 20 Dec 2011 xx:xx:xx +0100
04: Received: from MCEXCLUSTER01.win.morehouse.edu ([172.16.0.212]) by
05: webmail.morehouse.edu with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sun, 18 Dec 2011 xx:xx:xx -0500
```
gecrackt:

header:
```
01: Received: from mail.unsch.edu.pe (HELO unsch.edu.pe) [200.121.72.190]
02:   by mx0.gmx.net (mx019) with SMTP; 22 Dec 2011 xx:xx:xx +0100
03: Received: (qmail 13522 invoked by UID: [UID filtered]
04: X-Virus-Checked: Checked by ClamAV on unsch.edu.pe
05: Received: from localhost (HELO localhost) (127.0.0.1)
06:     by unsch.edu.pe (qpsmtpd/0.40) with ESMTP; Wed, 21 Dec 2011 xx:xx:xx
07: -0500
08: Received: from 82.128.45.141 ([82.128.45.141]) by mail.unsch.edu.pe (Horde
09:  Framework) with HTTP; Wed, 21 Dec 2011 xx:xx:xx -0500
```
IP: 82.128.45.141 ---> Multilinks Telecommunications Limited, Nigeria

header:
```
01: Received: from 33-56-31-64.servebyte.net (EHLO mx4.hotmail.com)
02: [64.31.56.33]
03:   by mx0.gmx.net (mx048) with SMTP; 23 Dec 2011 xx:xx:xx +0100
```
GMail hatte anscheinend gerade Mailadressen im Sonderangebot:

header:
```
01: Received: from mail.taylornash.hu (EHLO mail.taylornash.hu) [212.52.167.31]
02:   by mx0.gmx.net (mx008) with SMTP; 23 Dec 2011 xx:xx:xx +0100
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by mail.taylornash.hu (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)
06: Received: from mail.taylornash.hu ([127.0.0.1])
07: 	by localhost (mail.taylornash.hu [127.0.0.1]) (amavisd-new, port 10024)
08: 	with ESMTP ID: [ID filtered]
09: Received: from User (unknown [31.110.19.191])
10: 	by mail.taylornash.hu (Postfix) with ESMTP ID: [ID filtered]
11: 	Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)
```
IP: 31.110.19.191 ---> T-Mobile UK

Ausserdem ist die Mugu-Mail in recht gutem Deutsch geschrieben, das sieht nicht nach Babelfish aus, da muss jemand schon Deutsch als Muttersprache beherrschen.

Zitat:

Fred Koffie Ayang
No. 899/3 10th Crescent
Asylum Down
Cantonments
Accra-Ghana

Guten Tag,

Ich kontaktiere Sie, weil ich auf der Suche nach einem Partner bei der
Realisierung eines Projekts bin. Zunaechst moechte ich mich vorstellen;
ich bin Barr.

Koffie Ayang, ich lebe in Accra, Ghana und praktiziere als
Rechtsanwalt bei der Akwaaba Solicitors und ich habe ein eher
ungewoehnliches Angebot fьr Sie.

Mein verstorbener Klient Uwe Gembella hat die Dokumente ueber sein
Vermoegen bei mir hinterlegt, bevor er ploetzlich in einem Unfall
verschied. Sein Vermoegen

belaeuft sich auf $120 Millionen U.S. Dollars. Ich werde Ihnen
genauere Informationen gebe, sobald ich weiss, dass ich Ihr Vertrauen
habe. In diesem Link

erfahren Sie die Umstaende seines Ablebens:

^whois:

^whois:

Hier ist mein Angebot: Ich erklaere Sie als den Erben des Herrn
Gembella und erhebe Anspruch auf das Vermoegen und fuer Ihre
Zusammenarbeit gebe ich Ihnen 30%

des Vermoegen, nach Abzug der Unkosten. Da ich der Anwalt des
Verstorbenen bin, ist es kein Problem die noetigen Dokumente innerhalb
kurzer Zeit zu besorgen

und der Investment Firma vorzulegen. Seit mein Klient verstarb, werde
ich gebeten sein Testament vorzulegen in dem auch der Erbe erwaehnt sein
muss.
Herr

Gembella hat aber kein Testament hinterlassen, deshalb brauche ich
einen Erben. Kann ich keinen Erben benennen, geht das Erbe an den Staat
und ist somit

verloren.

Wie gesagt, wenn der Transaktion erfolgreich verlaufen ist, bekommen
Sie 30 % der Gesamtsumme, 70 % gehen an mich, Unkosten werden vorab
abgezogen.
Lassen Sie

mich bitte wissen, ob Sie sich vorstellen koennen eine Transaktion in
dieser Hoehe durchzufuehren. Sie koennen mir an diese E-Mail Adresse

antworten:

Bitte, antworten Sie mir auch, wenn Sie kein Interesse haben, damit
ich meine Suche zuegig fortsetzen kann. Wenn Sie jedoch Interesse haben
sollten, freue ich

mich jemanden gefunden zu haben, der mir bei der Ausloesung des Erbes
hilft, damit das Vermoegen nicht verloren geht.
Ich moechte Sie bitte, aus Sicherheitgruenden aeusserst diskret
vorzugehen, bitte antworten Sie nur auf diese E-Mail und ich werde Ihnen
in Kuerze meine direkt
Durchwahl mitteilen.

Mit freundlichen Gruessen,

Barr Fred Koffie Ayang
Senior Associate
Akwaaba Solicitors

header:
```
01: Received: from ww1.whitewolfhosting.com (EHLO ww3.whitewolfhosting.com)
02: [174.123.164.162]
03:   by mx0.gmx.net (mx094) with SMTP; 23 Dec 2011 xx:xx:xx +0100
04: Received: from localhost ([127.0.0.1]:32865 helo=User)
05: 	by ww3.whitewolfhosting.com with smtp (Exim 4.69)
06: 	(envelope-from <info [at] online.com>)
07: 	ID: [ID filtered]
```
Muguphon: +60102087903 ---> Celcom, Malaysia

die Weihnachts-Mugus:

header:

01: Received: from mailout03.t-online.de (mailout03.t-online.de [194.25.134.81])
02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Thu, 22 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from fwd00.aul.t-online.de (fwd00.aul.t-online.de )
05: by mailout03.t-online.de with smtp
06: ID: [ID filtered]
07: Received: from User
08: (VOgeaiZXQt+xNk9rPMikVvgwSB2eEXM3gTHYQOvdW1evoe944aYJvHt+xfnw7muvrsOkTWYRiF@[188.72.238.224
09: 	#93;)
10: by fwd00.t-online.de
11: with esmtp ID: [ID filtered]

IP: 188.72.238.224 ---> ---> Estro Web Services/Leaseweb (Leasweb mal wieder, wen wundert's....)

gecrackt:

sieht mir nach demselben Mugu aus:

header:

01: Received: from mailout09.t-online.de (mailout09.t-online.de [194.25.134.84])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from fwd03.aul.t-online.de (fwd03.aul.t-online.de )
05: 	by mailout09.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (XKciguZfrt5ysRj028v0+L6SOtn5mGFlN26rWKseyv77jR8qRJTndRCPAzMHW03TObZzrgymlM@[46.166.155.124
09: 	#93;)
10: by fwd03.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 46.166.155.124 ---> Santrex DE routed via LeaseWeb Germany (Leaseweb.....)

gecrackt:

Muguphon: +34-655-497-663 ---> France Telecom España, S.a.

Mugufax: +34-917-903-789 ---> Colt Telecom España, S.a.

Mugufax: +34-917-693-035 ---> Colt Telecom España, S.a.

header:

01: Received: from host230-228-static.32-88-b.business.telecomitalia.it
02: (EHLO smtp.cgilpadova.it) [88.32.228.230]
03:   by mx0.gmx.net (mx113) with SMTP; 23 Dec 2011 xx:xx:xx +0100
04: Received: from User (unknown [213.42.235.4])
05: 	(Authenticated sender: info [at] CGILPADOVA.IT)
06: 	by smtp.cgilpadova.it (Postfix) with ESMTPA ID: [ID filtered]
07: 	Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)

IP: 213.42.235.4 ---> Emirates Telecommunication Corporation

gecrackt:

header:

01: Received: from isp6.4u.com.gh (HELO isp6.4u.com.gh) [80.87.72.6]
02:   by mx0.gmx.net (mx112) with SMTP; 23 Dec 2011 xx:xx:xx +0100
03: Received: from webmail.4u.com.gh (localhost [127.0.0.1])
04: 	by isp6.4u.com.gh (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri, 23 Dec 2011 xx:xx:xx +0000 (GMT)
06: Received: from 41.190.90.34
07:         (SquirrelMail authenticated user info-mplaza)
08:         by webmail.4u.com.gh with HTTP;
09:         Fri, 23 Dec 2011 xx:xx:xx -0000

IP: 41.190.90.34 ---> Zain Communications Limited, GH

gecrackt:

Muguphon: +233 545 000 209 ---> ScanCom Ltd (MTN), Ghana

header:

01: Received: from mail.phoenixmed2000.ro (EHLO pansiprod.ro) [81.12.136.170]
02:   by mx0.gmx.net (mx040) with SMTP; 24 Dec 2011 xx:xx:xx +0100
03: Received: (qmail 31840 invoked by UID: [UID filtered]
04: Received: from mail.phoenixmed2000.ro (HELO mail.pansiprod.ro)
05: (sales [at] pansiprod.ro@81.12.136.170)
06:   by pansiprod.ro with SMTP; 22 Dec 2011 xx:xx:xx +0200
07: Received: from host109-157-36-177.range109-157.btcentralplus.com
08: (109.157.36.177)
09:  by mail.pansiprod.ro (F-Secure/fsigk_smtp/302/mail.pansiprod.ro);
10:  Thu, 22 Dec 2011 xx:xx:xx +0200 (EET)

IP: 109.157.36.177 ---> host109-157-36-177.range109-157.btcentralplus.com

gecrackt:

Muguphon: +44 755-022-7803 ---> Everything Everywhere Limited (TM), UK

Die Neujahrs-Mugus:

header:

01: Received: from unknown (EHLO ablestor.able.or.kr) [115.91.87.6]
02:   by mx0.gmx.net (mx004) with SMTP; 28 Dec 2011 xx:xx:xx +0100
03: Received: from User (u15259122.onlinehome-server.com [74.208.44.111])
04: 	(Authenticated sender: admin)
05: 	by ablestor.able.or.kr (Postfix) with ESMTPA ID: [ID filtered]
06: 	Tue, 27 Dec 2011 xx:xx:xx +0900 (KST)

gecrackt:

Muguphon: +234 8086-989-523 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from e.dealextreme.com (EHLO e.dealextreme.com) [67.228.151.195]
02:   by mx0.gmx.net (mx053) with SMTP; 28 Dec 2011 xx:xx:xx +0100
03: Received: from User (unknown [120.141.123.178])
04: 	by e.dealextreme.com (iRedMail) with ESMTPA ID: [ID filtered]
05: 	Tue, 27 Dec 2011 xx:xx:xx -0600 (CST)

IP: 120.141.123.178 ---> P1NETWORKS, Malaysia

header:

01: Received: from gdn.com.bh (EHLO gdneditorial.gdn) [89.148.15.213]
02:   by mx0.gmx.net (mx045) with SMTP; 31 Dec 2011 xx:xx:xx +0100
03: Received: from localhost (localhost [127.0.0.1])
04: 	by gdneditorial.gdn (Postfix) with ESMTP ID: [ID filtered]
05: 	Sat, 31 Dec 2011 xx:xx:xx +0300 (AST)
06: X-Virus-Scanned: amavisd-new at gdneditorial.gdn
07: Received: from gdneditorial.gdn ([127.0.0.1])
08: 	by localhost (gdn.com.bh [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from User (unknown [120.140.16.202])
11: 	by gdneditorial.gdn (Postfix) with ESMTPA ID: [ID filtered]
12: 	Sat, 31 Dec 2011 xx:xx:xx +0300 (AST)

IP: 120.140.16.202 ---> Packet One Networks (M) Sdn, Malaysia

Muguphon: +44 703 188 8562 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from 33-56-31-64.servebyte.net (EHLO mx4.hotmail.com)
02: [64.31.56.33]
03:   by mx0.gmx.net (mx106) with SMTP; 30 Dec 2011 xx:xx:xx +0100

Die Mugus kommen wieder in die Puschen:

der Sternchen-Mugu:

header:
01: Received: from web01.scitomedia.com (EHLO web01.scitomedia.com)
02: [213.189.27.105]
03:   by mx0.gmx.net (mx118) with SMTP; 02 Jan 2012 xx:xx:xx +0100
04: Received: from [82.128.5.238] (helo=User)
05: 	by web01.scitomedia.com with esmtpsa (TLSv1:AES256-SHA:256)
06: 	(Exim 4.69)
07: 	(envelope-from <test [at] scitomedia.com>)
08: 	ID: [ID filtered]
IP: 82.128.5.238 ---> Multilinks Telecommunications Limited, Nigeria

gecrackt:

Zitat:

*MasterCard / Microsoft INTERNATIONAL MEGA JACKPOT*
*Bradford City Centre Branch*
*7 Stamford New Road, London*
*MICROSOFT OFFICE, UNITED KINGDOM*

Muguphon: +44 708 646 5033 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 701 004 5579 ---> FleXtel Limited, UK

Mugufax: +44 701 989 5999 ---> Skytel Ltd, UK

header:
01: Received: from snt0-omc2-s41.snt0.hotmail.com (EHLO
02: snt0-omc2-s41.snt0.hotmail.com) [65.54.61.92]
03:   by mx0.gmx.net (mx026) with SMTP; 04 Jan 2012 xx:xx:xx +0100
04: Received: from SNT129-W49 ([65.55.90.73]) by
05: snt0-omc2-s41.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Tue, 3 Jan 2012 xx:xx:xx -0800
X-Originating-IP: [41.138.89.38] ---> ETISALAT BENIN

Und steigern sich zu neuer Form:

header:

01: Received: from RSTironp2.gijima.com (rst-ironp2.gijima.com [196.15.163.9])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	Mon,  2 Jan 2012 xx:xx:xx +0100 (CET)
04: Received: from webmail.iemas.co.za (HELO iemas.co.za) ([196.15.163.34])
05:   by RSTironp2.gijima.com with ESMTP; 02 Jan 2012 xx:xx:xx +0200
06: Received: from WorldClient by iemas.co.za (MDaemon PRO v10.1.2)
07: 	with ESMTP ID: [ID filtered]
08: 	Mon, 02 Jan 2012 xx:xx:xx +0200
09: Received: from [41.82.83.79] by iemas.co.za via WorldClient with HTTP;
10: 	Mon, 02 Jan 2012 xx:xx:xx +0200

IP: 41.82.83.79 ---> Sonatel Multimedia, SN

gecrackt: X-Authenticated-Sender:

header:

01: Received: from ims-m11.mx.aol.com (EHLO ims-m11.mx.aol.com) [64.12.207.144]
02:   by mx0.gmx.net (mx047) with SMTP; 06 Jan 2012 xx:xx:xx +0100
03: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com
04: [64.12.102.138])
05: 	by ims-m11.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Fri, 6 Jan 2012 xx:xx:xx -0500
07: Received: from mtaout-da06.r1000.mx.aol.com
08: (mtaout-da06.r1000.mx.aol.com [172.29.51.134])
09: 	by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
10: 95F9C1C000081;
11: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)
12: Received: from AOL.DE (207-170-223-176.static.twtelecom.net
13: [207.170.223.176])
14: 	by mtaout-da06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
15: ESMTPA ID: [ID filtered]
16: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)

header:

01: Received: from oms-da01.r1000.mx.aol.com (oms-da01.r1000.mx.aol.com
02: [205.188.255.11])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  6 Jan 2012 xx:xx:xx +0100 (CET)
05: Received: from mtaout-db04.r1000.mx.aol.com
06: (mtaout-db04.r1000.mx.aol.com [172.29.51.196])
07: 	by oms-da01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 3258638000083;
09: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)
10: Received: from AOL.DE (207-170-223-176.static.twtelecom.net
11: [207.170.223.176])
12: 	by mtaout-db04.r1000.mx.aol.com (MUA/Third Party Client Interface) with
13: ESMTPA ID: [ID filtered]
14: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)

X-AOL-IP: 207.170.223.176 ---> 207-170-223-176.static.twtelecom.net

header:

01: Received: from mail.portolub.com.br (EHLO mail.portolub.com.br)
02: [201.41.60.3]
03:   by mx0.gmx.net (mx023) with SMTP; 07 Jan 2012 xx:xx:xx +0100
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.portolub.com.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat,  7 Jan 2012 xx:xx:xx -0200 (BRST)
07: X-Virus-Scanned: Debian amavisd-new at portolub.com.br
08: Received: from mail.portolub.com.br ([127.0.0.1])
09: 	by localhost (mail.portolub.com.br [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (unknown [180.74.139.186])
12: 	(Authenticated sender: maria [at] mail.portolub.com.br)
13: 	by mail.portolub.com.br (Postfix) with ESMTPA ID: [ID filtered]
14: 	Sat,  7 Jan 2012 xx:xx:xx -0200 (BRST)

IP: 180.74.139.186 ---> ---> Packet One Networks, Malaysia

gecrackt:

header:

01: Received: from exprod6ob108.obsmtp.com (HELO exprod6ob108.obsmtp.com)
02: [64.18.1.20]
03:   by mx0.gmx.net (mx062) with SMTP; 08 Jan 2012 xx:xx:xx +0100
04: Received: from mail.tnjones.com ([74.165.157.26]) by
05: exprod6ob108.postini.com ([64.18.5.12]) with SMTP
06: 	ID: [ID filtered]

IP: 64.18.5.12 ---> mail.tnjones.com/ATT

gecrackt:

Und nochmal kurz die Mugus:

header:

01: Received: from mail.winonanationalbank.com (EHLO
02: zixvpm.winonanationalbank.com) [65.126.96.198]
03:   by mx0.gmx.net (mx103) with SMTP; 09 Jan 2012 xx:xx:xx +0100

header:

01: Received: from unknown (HELO zhoukangfdc.com.cn) [58.40.124.248]
02:   by mx0.gmx.net (mx048) with SMTP; 10 Jan 2012 xx:xx:xx +0100
03: Received: from User ([212.30.80.36])
04: 	(envelope-sender <test1 [at] qdport.com>)
05: 	by 192.168.1.200 with ESMTP
06: 	for <poor [at] spamvictim.tld>; Tue, 10 Jan 2012 xx:xx:xx +0800

IP: 212.30.80.36 ---> itf.itf-fund.si

header:

01: Received: from mailgate.premierecarehomes.co.uk.196.49.62.in-addr.arpa
02: (EHLO server.premierehouse.local) [62.49.196.74]
03:   by mx0.gmx.net (mx018) with SMTP; 12 Jan 2012 xx:xx:xx +0100
04: Received: from User ([74.63.213.139]) by server.premierehouse.local with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Wed, 11 Jan 2012 xx:xx:xx +0000

IP: 74.63.213.139 ---> 139-213-63-74.servebyte.net

header:

01: Received: from mail.sulanet.hn (mail.sulanet.hn [190.6.205.3])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 12 Jan 2012 xx:xx:xx +0100 (CET)
04: Received-PRA: none (mail.sulanet.hn: domain of jerryperdomo [at] sulanet.net
05: does not designate permitted sender hosts)
06: Received-SPF: none (mail.sulanet.hn: domain of jerryperdomo [at] sulanet.net
07: does not designate permitted sender hosts)
08: Received: from (mail.sulanet.hn [190.6.205.3]) by webshield.sulanet.net
09: with smtp
10: 	 ID: [ID filtered]
11: 	Thu, 12 Jan 2012 xx:xx:xx -0600
12: MIME-version: 1.0
13: Content-type: multipart/alternative;
14:  boundary="Boundary_(ID_XcF2g+EV4bQSrignyBCODQ)"
15: Received: from sulanet.hn ([127.0.0.1])
16:  by mail.sulanet.hn (Servidor ESMTP - SULANET)
17:  with ESMTP ID: [ID filtered]
18:  Thu, 12 Jan 2012 xx:xx:xx -0600 (CST)
19: Received: from [190.6.205.3] by mail.sulanet.hn (mshttpd); Thu,
20:  12 Jan 2012 xx:xx:xx +0100

Meine Mugus sind natürlich noch lange nicht am Ende:

header:

01: Received: from mail2.pph.org (EHLO mail2.pph.org) [70.234.7.78]
02:   by mx0.gmx.net (mx040) with SMTP; 10 Jan 2012 xx:xx:xx +0100
03: Received: from zixvpm.pph.org (zixvpm01.pph.org [172.31.1.27]) by
04: mail2.pph.org (Axway MailGate
05:  3.8.1) with ESMTP ID: [ID filtered]
06: xx:xx:xx -0800 (PST)
07: Received: from zixvpm01.pph.org (ZixVPM [127.0.0.1]) by Outbound.pph.org
08: (Proprietary) with ESMTP id
09:  92964738150 for xxxxx; Tue, 10 Jan 2012 xx:xx:xx -0800 (PST)
10: Received: from MAIL1.pph.local (exch1.pph.local [167.119.11.143]) by
11: zixvpm.pph.org (Proprietary)

header:

01: Received: from 89-96-73-68.ip11.fastwebnet.it (EHLO mx4.hotmail.com)
02: [89.96.73.68]
03:   by mx0.gmx.net (mx037) with SMTP; 14 Jan 2012 xx:xx:xx +0100

header:

01: Received: from 50.31.254.89.static.vps.net (EHLO sever8.games.com)
02: [50.31.254.89]
03:      by mx0.gmx.net (mx106) with SMTP; 14 Jan 2012 xx:xx:xx +0100
04: Received: from [46.246.112.90] (helo=qz1-PC)
05:      by sever8.localdomain with esmtpa (Exim 4.69)
06:      (envelope-from <poor [at] spamvictim.tld>)
07:      ID: [ID filtered]

IP: 46.246.112.90 ---> VPNTunnel.se

header:

01: Received: from 50.31.254.89.static.vps.net (EHLO sever8.games.com)
02: [50.31.254.89]
03:      by mx0.gmx.net (mx009) with SMTP; 14 Jan 2012 xx:xx:xx +0100
04: Received: from [46.246.112.90] (helo=qz1-PC)
05:      by sever8.localdomain with esmtpa (Exim 4.69)
06:      (envelope-from <poor [at] spamvictim.tld>)
07:      ID: [ID filtered]

die Madrid-Connection:

header:

01: Received: from mail.tclawaz.com (207-114-195-162.static.twtelecom.net
02: [207.114.195.162])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 15 Jan 2012 xx:xx:xx +0100 (CET)
05: Received: from User ([173.8.28.113]) by mail.tclawaz.com with Microsoft
06: SMTPSVC(6.0.3790.4675);
07: 	 Sat, 14 Jan 2012 xx:xx:xx -0700

IP: 173.8.28.113 ---> 173-8-28-113-WashingtonDC.hfc.comcastbusiness.net

Muguphon: ++34 632482552 ---> Lycamobile, S.l., Espana

40 Beiträge dieses Themas auf einer Seite anzeigen

Alle Zeitangaben in WEZ +2. Es ist jetzt 03:41 Uhr.

Antispam e.V. / Impressum