Es ist Wochenende, die Abuse-Desks sind nicht besetzt, und alle Mugu-Boyz klettern aus ihren Löchern....
header:
01: Received: from smtp28.orange.fr (smtp28.orange.fr [80.12.242.101])
02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Fri, 8 May 2009 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: by mwinf2827.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: Fri, 8 May 2009 xx:xx:xx +0200 (CEST)
07: Received: from lazard-sa.com
08: (LNeuilly-152-22-6-117.w193-251.abo.wanadoo.fr [193.251.5.117])
09: by mwinf2827.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
10: Fri, 8 May 2009 xx:xx:xx +0200 (CEST)
11: X-ME-UUID: [UID filtered]
12: Received: from User ([82.128.27.13]) by lazard-sa.com with Microsoft
13: SMTPSVC(6.0.3790.3959);
14: Fri, 8 May 2009 xx:xx:xx +0200
IP: 82.128.27.13 ---> Multilinks Telecommunications Limited, Nigeria
Post geht an:
header:
01: Received: from bab.com.tw (hitobaby.com.tw [203.67.181.171])
02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Sat, 9 May 2009 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: by bab.com.tw (Postfix) with SMTP ID: [ID filtered]
06: Sat, 9 May 2009 xx:xx:xx +0800 (CST)
07: Received: from User (unknown [213.137.131.252])
08: by bab.com.tw (Postfix) with ESMTP ID: [ID filtered]
09: Sat, 9 May 2009 xx:xx:xx +0800 (CST)
IP: 213.137.131.252 ---> Mediterranean Network NOC, MC
Post geht an:
Muguphone: +229-98-060-144 ---> Benin
header:
01: Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.49])
02: by deliver.uni-koblenz.de (Postfix) with ESMTP ID: [ID filtered]
03: for <poor [at] spamvictim.tld>; Sat, 9 May 2009 xx:xx:xx +0200 (CEST)
04: Received: from User (unknown [83.231.42.31])
05: by mwinf2121.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: Sat, 9 May 2009 xx:xx:xx +0200 (CEST)
Post geht an:
header:
01: Received: from aurinko1.kotinet.com (mailout.kotinet.com [212.50.215.75])
02: by xxxxx(Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Sat, 9 May 2009 xx:xx:xx +0200 (CEST)
04: Received: from webmail2.kotinet.com ([212.50.215.19])
05: by mailstore.kotinet.com (Sun Java System Messaging Server 6.2-7.05
06: (built Sep
07: 5 2006)) with ESMTP ID: [ID filtered]
08: xxxxx; Sat, 09 May 2009 xx:xx:xx +0300 (EEST)
09: Received: from 80.80.111.133 (proxying for 213.255.201.26)
10: (SquirrelMail authenticated user tuntis) by webmail2.kotinet.com with HTTP;
11: Sat, 09 May 2009 xx:xx:xx +0300 (EEST)
IP: 213.255.201.26 ---> SkyVision Holdings Ltd.
Post geht an:
Muguphone: +852-367-86701 ---> Wharf T&T Ltd, HK
header:
01: Received: from out01.mta.xmission.com (out01.mta.xmission.com
02: [166.70.13.231])
03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: for xxxxx; Sat, 9 May 2009 xx:xx:xx +0200 (CEST)
05: Received: from in02.mta.xmission.com ([166.70.13.52])
06: by out01.mta.xmission.com with esmtp (Exim 4.62)
07: (envelope-from <ils [at] ils.net>)
08: ID: [ID filtered]
09: Received: from webmail.xmission.com ([198.60.22.199])
10: by in02.mta.xmission.com with esmtps (TLSv1:AES256-SHA:256)
11: (Exim 4.69)
12: (envelope-from <ils [at] ils.net>)
13: ID: [ID filtered]
14: Received: from www-data by webmail.xmission.com with local (Exim 4.60)
15: (envelope-from <ils [at] ils.net>)
16: ID: [ID filtered]
17: Received: from 196.3.182.250 ([196.3.182.250]) by webmail.xmission.com
18: (Horde MIME library) with HTTP; Sat, 09 May 2009 xx:xx:xx -0600
IP: 196.3.182.250 ---> CTAccess/Suburbantelecom, Nigeria (man merke sich diese IP....)
Post geht an:
header:
01: Received: from mail1-a.speednet.com.au (mail.speednet.com.au
02: [202.68.164.185])
03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: (No client certificate requested)
05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: for xxxxxx; Sat, 9 May 2009 xx:xx:xx +0200 (CEST)
07: Received: from mail.speednet.com.au (mail1-a.speednet.com.au [127.0.0.1])
08: by mail1-a.speednet.com.au (8.13.7/8.13.7) with ESMTP ID: [ID filtered]
09: Sun, 10 May 2009 xx:xx:xx +1000
10: Received: from 196.3.182.250
11: (SquirrelMail authenticated user rkangel)
12: by mail.speednet.com.au with HTTP;
13: Sat, 9 May 2009 xx:xx:xx +0100
Man staune: 196.3.182.250 ---> CTAccess/Suburbantelecom, Nigeria
Post geht an:
header:
01: Received: from mailscan.toplisinc.com (unknown [202.57.75.204])
02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Sat, 9 May 2009 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost [127.0.0.1])
05: by mailscan.toplisinc.com (Postfix) with ESMTP
06: ID: [ID filtered]
07: Received: from User (unknown [82.128.26.106])
08: by mailscan.toplisinc.com (Postfix) with ESMTP
09: ID: [ID filtered]
IP: 82.128.26.106 ---> Multilinks Telecommunications Limited, Nigeria
Post geht an:
- kjz