Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

Und wieder:

header:

01: Received: from jakenweb.Jaken.com (unknown [74.0.158.219]) by xxxxx (Postfix)
02: 	with ESMTP ID: [ID filtered]
03: Received: from User ([196.3.183.73]) by jakenweb.Jaken.com with Microsoft
04: 	SMTPSVC(6.0.3790.1830); Wed, 18 Mar 2009 xx:xx:xx -0700

IP: 196.3.183.73 ---> Suburban telecom, Nigeria

Post geht an:

Muguphon: +44 7031 9788 84 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from dns.tongx.com.tw (unknown [59.120.91.111]) 	by xxxxx (Postfix)
02: 	with ESMTP ID: [ID filtered]
03: Received: from User (unknown [83.229.48.148]) by dns.tongx.com.tw (Postfix)
04: 	with ESMTP ID: [ID filtered]

IP: 83.229.48.148 ---> Cyberspace Link 4 PHC, Nigeria/Sky-Vision

Post geht an:

header:

01: Received: from huiquandyeing.com (unknown [60.12.88.114]) 	by xxxxx (Postfix)
02: 	with ESMTP ID: [ID filtered]
03: Received: from User ([82.128.44.204]) [authenticated user
04: 	test [at] huiquandyeing.com) by huiquandyeing.com (huiquandyeing.com [192.168.1.138])
05: 	(MDaemon.PRO.v6.8.5.R) 	with ESMTP ID: [ID filtered]

IP: 192.168.1.138 ---> Multilinks Telecommunications Limited, Nigeria

Post geht an:

- kjz

Wieder was vom Dauer-Mugu:

header:

01: Received: from untref.untref.edu.ar (untref.edu.ar [200.58.113.38]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from [127.0.0.1] (helo=localhost) by untref.untref.edu.ar with esmtp
04: 	(Exim 4.63) (envelope-from <rtfc [at] opentransfer.com>) ID: [ID filtered]
05: Received: from mtnngprs.com (mtnngprs.com [41.220.75.3]) by www.untref.edu.ar
06: 	(IMP) with HTTP for <poor [at] spamvictim.tld@localhost>; Thu, 19 Mar 2009 xx:xx:xx -0300

Man beachte:

IP: 41.220.75.3 ---> MTN, Nigeria

Post geht an:

header:

01: Received: from mx.inode.at (mx11.lb01.inode.at [62.99.145.13]) (using TLSv1
02: 	with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx (Postfix)
03: 	with ESMTP ID: [ID filtered]
04: Received: from [213.47.214.141] (port=5280 helo=webmail) by smartmx-11.inode.at
05: 	with esmtp (Exim 4.69) (envelope-from <jacobthemover [at] yahoo.com>) ID: [ID filtered]
06: Received: from [127.0.0.1] (helo=inode.at) by webmail with smtp (Exim 4.67)
07: 	(envelope-from <jacobthemover [at] yahoo.com>) 	ID: [ID filtered]
08: Received: from 41.220.75.3 (SquirrelMail authenticated user erich.wanisch [at] inode.at) by
09: 	webmail.inode.at with HTTP; Fri, 20 Mar 2009 xx:xx:xx +0100 (CET)

IP: 41.220.75.3 ---> MTN, Nigeria

Post geht an:

- kjz

Immer wieder dieselben Schwarzhüte:

header:

01: Received: from server2.badboyhost.com (ip216-239-69-247.vif.net 216.239.69.247])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested)
03: 	by xxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from [58.213.153.48] (helo=User) by server2.badboyhost.com with
05: 	esmtpa (Exim 4.69) (envelope-from <robertmull0 [at] yahoo.com>) ID: [ID filtered]

IP: 58.213.153.48 ---> NANJING-PROVICE-PUBLICITY-DEPT

Post geht an:

direkt doppelt:

header:

01: Received: from mail.si-sv3206.com (EHLO mail.si-sv3206.com) [67.228.189.68] by
02: 	mx0.gmx.net (mx002) with SMTP; 20 Mar 2009 xx:xx:xx +0100
03: Received: from 41.174.3.243 [41.174.3.243] by mail.si-sv3206.com with SMTP;
04: 	Fri, 20 Mar 2009 xx:xx:xx -0500

header:

01: Received: from mail.si-sv3206.com (EHLO mail.si-sv3206.com) [67.228.189.68] by
02: 	mx0.gmx.net (mx081) with SMTP; 20 Mar 2009 xx:xx:xx +0100
03: Received: from 41.174.3.243 [41.174.3.243] by mail.si-sv3206.com with SMTP;
04: 	Fri, 20 Mar 2009 xx:xx:xx -0500

IP: 41.174.3.243 ---> Neotel Pty Ltd, ZA

Post geht an:

Muguphone: +27-78-2960-455 ---> MTN, ZA

header:

01: Received: from mail04.syd.optusnet.com.au (mail04.syd.optusnet.com.au
02: 	[211.29.132.185]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User ([59.154.25.30]) (authenticated sender
05: 	sangub [at] optusnet.com.au) by mail04.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID
06: 	filtered]

Post geht an:

- kjz

Und noch eine alte Bekannte (schon am 17. 3.):

Zitat:

IP: 41.221.174.107 ---> SWIFT NETWORKS, Nigeria

Post geht an:

header:
01: Received: from mail.peoplesolutions.cc (mail.peoplesolutions.cc
02: 	[209.3.193.155]) 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from User [41.221.174.107] by mail.peoplesolutions.cc with ESMTP
04: 	(SMTPD-8.22) ID: [ID filtered]
IP: 41.221.174.107 ---> SWIFT NETWORKS, Nigeria

Post geht an:

- kjz

Auf's Neue:

header:

01: Received: from smtpgate4.pacific.net.sg (smtpgate4.pacific.net.sg
02: 	[203.120.68.34]) by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: Received: (qmail 32367 invoked from network); 21 Mar 2009 xx:xx:xx -0000
04: Received: from wm1.pacific.net.sg (HELO localhost) (contactme [at] 192.169.41.131) by
05: 	smtpgate4.pacific.net.sg with ESMTPA; 21 Mar 2009 xx:xx:xx -0000
06: Received: from 192.168.0.22 (192.168.0.22 [192.168.0.22]) by
07: 	wm1.web.pacific.net.sg (Horde MIME library) with HTTP; Sun, 22 Mar 2009 xx:xx:xx +0800

Post geht an:

header:

01: Received: from smtp-gw29.mailanyone.net (smtp-gw29.mailanyone.net
02: 	[208.70.128.55]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from mailanyone.net by smtp-gw29.mailanyone.net with esmtpa (MailAnyone
05: 	extSMTP michael_squeo [at] centum.ca) ID: [ID filtered]

Post geht an:

- kjz

23.03.2009, 09:47
kjz1
Zitat:
Zitat von kjz1

header:

01: Received: from smtpgate4.pacific.net.sg (smtpgate4.pacific.net.sg
02: [203.120.68.34]) by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: Received: (qmail 32367 invoked from network); 21 Mar 2009 xx:xx:xx -0000
04: Received: from wm1.pacific.net.sg (HELO localhost) (contactme [at] 192.169.41.131) by
05: smtpgate4.pacific.net.sg with ESMTPA; 21 Mar 2009 xx:xx:xx -0000
06: Received: from 192.168.0.22 (192.168.0.22 [192.168.0.22]) by
07: wm1.web.pacific.net.sg (Horde MIME library) with HTTP; Sun, 22 Mar 2009 xx:xx:xx +0800

Post geht an:
Es geschehen noch Zeichen und Wunder:

Zitat:

Thank you for your report dated 22 March 2009.

We have investigated and traced the source of the SPAM email that was relayed.

We have removed the compromised account from our network.

Abuse Response Team
PACNET

Zitat:

I appreciate the information you have provided us. I have
closed the account, which you reported, in
accordance with our Terms of Use (TOU). It is a strict violation of the
TOU for our members to send objectionable or unwanted material of any
kind or nature using our service.

- kjz

Einen hab' ich noch, wieder mal ein gecrackter Uni-Account:

header:
01: Received: from caduceus1.gmu.edu (caduceus1.gmu.edu [129.174.0.40]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([97.104.31.194]) by caduceus1.gmu.edu (Sun Java System
04: 	Messaging Server 6.2-2.05 (built Apr 28 2005)) with ESMTPA ID: [ID filtered]
IP: 97.104.31.194 --> cpe-97-104-31-194.cfl.res.rr.com

Post geht an:

- kjz

neue Mugus frisch auf den Tisch:

header:

01: Received: from o2.pl (host78-210-static.107-82-b.business.telecomitalia.it
02: 	[82.107.210.78]) 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
03: Received: from pc05 ([127.0.0.1]) by pc05 ([127.0.0.1]) with SMTPSVC;
04: 	Mon, 23 Mar 2009 xx:xx:xx +0100

header:

01: Received: from o2.pl (host78-210-static.107-82-b.business.telecomitalia.it
02: 	[82.107.210.78]) 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
03: Received: from pc05 ([127.0.0.1]) by pc05 ([127.0.0.1]) with SMTPSVC;
04: 	Mon, 23 Mar 2009 xx:xx:xx +0100

Post geht an:

header:

01: Received: from gatewayshoes.com.br (189-39-81-90.reverso.wideway.net.br
02: [189.39.81.90]) by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([125.89.161.189]) (authenticated bits=0) by
04: 	gatewayshoes.com.br (8.12.11.20060308/8.12.11) with ESMTP ID: [ID filtered]

BrmaOutput: [125.89.161.189] ---> CHINANET Guangdong

Post geht an:

header:

01: Received: from cluster-ldap.tutby.com (mail.tut.by [195.137.160.40]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from [41.219.243.26] (account au2008_82 [at] tut.by HELO User) by
04: 	cluster-ldap.tutby.com (CommuniGate Pro SMTP 5.2.12) with ESMTPA ID: [ID filtered]

IP: 41.219.243.26 ---> dial-pool82.lg.starcomms.net, Nigeria

Post geht an:

- kjz

Hier mal wieder der notorische Dauer-Mugu (mit gecracktem Uni-Account):

header:
01: Received: from jsu.ac.ir (unknown [78.39.195.23]) (using TLSv1 with cipher
02: 	DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx (Postfix) with
03: 	ESMTP ID: [ID filtered]
04: Received: from jsu.ac.ir (jsu.ac.ir [127.0.0.1]) by jsu.ac.ir (8.14.2/8.14.2)
05: 	with ESMTP ID: [ID filtered]
Man beachte:

X-OriginatingIP: 41.220.75.3 (zaherzade) ---> mtnngprs.com/MTN, Nigeria

Post geht an:

Und der 'Optus-Mugu':

header:
01: Received: from mail11.syd.optusnet.com.au (mail11.syd.optusnet.com.au
02: 	[211.29.132.192]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User (ml82.128.2.115.multilinks.com [82.128.2.115])
05: 	(authenticated sender info.fbise [at] optusnet.com.au) by mail11.syd.optusnet.com.au
06: 	(8.13.1/8.13.1) with ESMTP ID: [ID filtered]
IP: 82.128.2.115 ---> Multilinks, Nigeria

Post geht an:

Muguphon:

TEL; 234 803823048 ---> MTN, Nigeria
FAX; 234 805609056 ---> Globacom, Nigeria

- kjz

Nachschub:

header:
01: Received: from mail.cablecolor.hn (mail.cablecolor.hn [205.240.200.30]) by
02: 	xxxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from [41.221.167.30] (helo=User) by mail.cablecolor.hn with esmtpa
04: 	(Exim 4.63) (envelope-from <viviannasim27 [at] yahoo.com>) ID: [ID filtered]
IP: 41.221.167.30 ---> Swift, Nigeria

Post geht an:

header:
01: Received: from c2bthomr10.btconnect.com (c2bthomr10.btconnect.com
02: [213.123.20.128]) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([211.229.16.49]) by c2bthomr10.btconnect.com with ESMTP
04: 	ID: [ID filtered]
IP: 211.229.16.49 ---> Kornet, KR

Post geht an:

Und hier war der Mugu zu dumm, um einen Eimer Wasser umzutreten:

Zitat:

Reply-To: <>

So wird das natürlich nichts, wenn man nur an 'con man' denkt.... Ich korrigiere mal:

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen