Mugu Dubletten

frische Mugus:

header:

01: Received: from mail.cmsius.com (unknown [69.85.52.82])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 17 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from User [41.207.3.60] by mail.cmsius.com with ESMTP
05:   (SMTPD32-8.04) ID: [ID filtered]

IP: 41.207.3.60 ---> AFNET, CI

header:

01: Received: from psmtp12.wxs.nl (psmtp12.wxs.nl [195.121.247.24])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 18 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from po13.wxs.nl ([10.94.53.250])
05:  by psmtp12.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
06:  2006)) with ESMTP ID: [ID filtered]
07:  xxxxx; Thu, 18 Jun 2009 xx:xx:xx +0200 (MEST)
08: Received: from planet.nl ([127.0.0.1])
09:  by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
10: 2005))
11:  with ESMTP ID: [ID filtered]
12: Thu,
13:  18 Jun 2009 xx:xx:xx +0200 (MEST)
14: Received: from [10.94.71.42] (Forwarded-For: 41.191.85.17,
15: 	[148.233.159.58])
16:  by po13.wxs.nl (mshttpd); Thu, 18 Jun 2009 xx:xx:xx +0200

IP: 41.191.85.17 ---> Ste OTTOLA & Company, BJ





Muguphon: +229-93-42-99-51 ---> BBCom, Benin

header:

01: Received: from mxout1.ocpwebserver.com (fire2cab1.megavelocity.com
02: [209.44.115.3])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 18 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from gemofnet.com (unknown [10.10.100.16])
06: 	by mxout1.ocpwebserver.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Wed, 17 Jun 2009 xx:xx:xx -0400 (EDT)
08: Received: from User [82.128.27.174] by gemofnet.com with ESMTP
09:   (SMTPD32-8.15) ID: [ID filtered]

IP: 82.128.27.174 ---> Multilinks Telecommunications Limited, Nigeria




- kjz

Wochenende ist Mugu-Zeit....

header:

01: Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 19 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: by bc.mwmail.com.br (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from phpmailer ([77.209.54.225])
07: 	by 77.209.54.225 with HTTP (UebiMiau);
08: 	Sun, 14 Jun 2009 xx:xx:xx -0300

IP: 77.209.54.225 ---> VODAFONE_SPAIN_NETWORK

header:

01: Received: from mail.pwmadar.pl (mail.pwmadar.pl [195.150.92.53])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 19 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from mail.pwmadar.pl (komp72 [192.168.0.72])
05: 	by mail.pwmadar.pl (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu, 18 Jun 2009 xx:xx:xx +0200 (CEST)
07: Received: from User (unknown [121.121.129.71])
08: 	by mail.pwmadar.pl (Postfix) with ESMTP ID: [ID filtered]
09: 	Thu, 18 Jun 2009 xx:xx:xx +0200 (CEST)

IP: 121.121.129.71 ---> Maxis Broadband Sdn Bhd, MY

header:

01: Received: from server23.koenig-com.de (server23.koenig-com.de
02: [88.198.218.70])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Fri, 19 Jun 2009 xx:xx:xx +0200 (CEST)
07: Received: by server23.koenig-com.de (Postfix, from userID: [ID filtered]
08: 	ID: [ID filtered]

header:

01: Received: from mail.cyberzone.tj (cyberzone.tj [193.111.11.8])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 19 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.tojikiston.com [127.0.0.1])
05: 	by mail.cyberzone.tj (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 19 Jun 2009 xx:xx:xx +0500 (TJT)
07: X-Virus-Scanned: amavisd-new at cyberzone.tj
08: Received: from mail.cyberzone.tj ([127.0.0.1])
09: 	by localhost (ns.cyberzone.tj [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from mail.tojikiston.com (localhost.tojikiston.com [127.0.0.1])
12: 	by mail.cyberzone.tj (Postfix) with ESMTP ID: [ID filtered]
13: 	Fri, 19 Jun 2009 xx:xx:xx +0500 (TJT)
14: Received: from 82.128.46.178
15:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
16:         by mail.cyberzone.tj with HTTP;
17:         Fri, 19 Jun 2009 xx:xx:xx +0500 (TJT)

IP: 82.128.46.178 ---> Multilinks Telecommunications Limited, Nigeria






- kjz

Das Wochenende ist noch lange nicht zu Ende:

header:

01: Received: from mail.amtrade.co.uk (mail.amtrade.co.uk [81.5.154.174])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 19 Jun 2009 xx:xx:xx -0400 (EDT)
04: Received: from User ([198.166.44.232]) by mail.amtrade.co.uk with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Fri, 19 Jun 2009 xx:xx:xx +0100

IP: 198.166.44.232 ---> s198-166-44-232.ab.hsia.telus.net






Wer A sagt:

header:

01: Received: from mail.smartmessage.com.tr (EHLO mail.smartmessage.com.tr)
02: [195.87.6.118]
03:   by mx0.gmx.net (mx009) with SMTP; 20 Jun 2009 xx:xx:xx +0200
04: Received: from User ([41.222.69.12]) by smartmessage.com.tr with
05: MailEnable ESMTP; Fri, 19 Jun 2009 xx:xx:xx +0300

IP: 41.222.69.12 ---> SWIFT NETWORKS IP RANGE FOR AMUWO DHCP AND STATIC CLIENTS, Nigeria






zum Ersten:

header:

01: Received: from ayaguard.ayagon.cl (unknown [201.236.77.250])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
06: Received: from User (unknown [41.191.108.130])
07: 	by ayaguard.ayagon.cl (Postfix) with ESMTP ID: [ID filtered]
08: 	Fri, 19 Jun 2009 xx:xx:xx -0400 (CLT)

IP: 41.191.108.130 ---> Suburban Telecom, Nigeria (die Mugu-Dauer-IP)



Muguphon: +447035914771 ---> Open Telecom International Ltd., UK

Muguphon: +447035919578 ---> Open Telecom International Ltd., UK


Die Madrid-Konnektion:

header:

01: Received: from smtp2web.tin.it (smtp2web.tin.it [212.216.176.236])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 19 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from feu5 (10.192.64.15) by smtp2web.tin.it (8.0.025)
05:         ID: [ID filtered]
06: Received: from (77.209.165.242) by webmailvtin.alice.it;  Fri, 19 Jun
07: 2009 xx:xx:xx +0200

IP: 77.209.165.242 ---> VODAFONE_SPAIN_NETWORK





Muguphon: +34 691 955 349 ---> France Telecom España, S.a.


zum Zweiten:

header:

01: Received: from ayaguard.ayagon.cl (unknown [201.236.77.250])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
06: Received: from User (unknown [41.191.108.130])
07: 	by ayaguard.ayagon.cl (Postfix) with ESMTP ID: [ID filtered]
08: 	Fri, 19 Jun 2009 xx:xx:xx -0400 (CLT)

IP: 41.191.108.130 ---> Suburban Telecom, Nigeria (die Mugu-Dauer-IP)




der Senegal ist auch dabei:

header:

01: Received: from omr13.networksolutionsemail.com
02: (omr13.networksolutionsemail.com [205.178.146.63])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from mail.networksolutionsemail.com
06: (ns-omr13.mgt.hosting.dc2.netsol.com [10.49.6.76])
07: 	by omr13.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
08: n5K0CWBT021430
09: 	for xxxxx; Fri, 19 Jun 2009 xx:xx:xx -0400
10: Message-ID: [ID filtered]
11: Received: (qmail 17567 invoked by UID: [UID filtered]
12: Received: from unknown (HELO User) (vevw0004 [at] shiqueto.org@41.208.168.127)
13:   by ns-omr13.lb.hosting.dc2.netsol.com with SMTP; 20 Jun 2009 xx:xx:xx
14: -0000

IP: 41.208.168.127 ---> SONATEL, SN

header:

01: Received: from smtp1m5.poczta.onet.pl (smtp1m5.poczta.onet.pl
02: [213.180.138.32])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from [41.211.230.153] ([41.211.230.153]:1657 "EHLO
06: 	mmmmnnhgfde34 [at] poczta.onet.eu" rhost-flags-FAIL-FAIL-FAIL-FAIL)
07: 	by ps1.mod5.onet with ESMTPA ID: [ID filtered]
08: 	<rfc822;xxxxx); Sat, 20 Jun 2009 xx:xx:xx +0200

IP: 41.211.230.153 ---> DIRECT ON PC LTD, Nigera





Muguphon: +44-700-5921640 ---> PNC Telecom Services Limited, UK/Vanguard

Muguphon: +44 7624198271 ---> Manx Telecom

Mugufax: +44 870 288 7323 ---> Interweb Design Ltd., UK


kann seine Klappe nicht halten und muss auch B sagen:

header:

01: Received: from mail.smartmessage.com.tr (EHLO mail.smartmessage.com.tr)
02: [195.87.6.118]
03:   by mx0.gmx.net (mx048) with SMTP; 20 Jun 2009 xx:xx:xx +0200
04: Received: from User ([41.222.69.12]) by smartmessage.com.tr with
05: MailEnable ESMTP; Fri, 19 Jun 2009 xx:xx:xx +0300

IP: 41.222.69.12 ---> SWIFT NETWORKS IP RANGE FOR AMUWO DHCP AND STATIC CLIENTS, Nigeria

header:

01: Received: from smtp2e.orange.fr (smtp2e.orange.fr [80.12.242.113])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2e23.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
07: Received: from francoise-briand.com
08: (LSt-Amand-152-33-4-68.w193-251.abo.wanadoo.fr [193.251.35.68])
09: 	by mwinf2e23.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
10: 	Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
11: X-ME-UUID: [UID filtered]
12: Received: from User ([196.3.183.72]) by francoise-briand.com with
13: Microsoft SMTPSVC(6.0.3790.3959);
14: 	 Sat, 20 Jun 2009 xx:xx:xx +0200

IP: 196.3.183.72 ---> Suburban Telecom, Nigeria






die Amsterdam-Konnektion zum Ersten:

header:

01: Received: from psmtp31.wxs.nl (psmtp31.wxs.nl [195.121.247.33])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from po13.wxs.nl ([10.94.53.250])
05:  by psmtp31.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
06:  2006)) with ESMTP ID: [ID filtered]
07:  xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
08: Received: from planet.nl ([127.0.0.1])
09:  by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
10: 2005))
11:  with ESMTP ID: [ID filtered]
12: Sat,
13:  20 Jun 2009 xx:xx:xx +0200 (MEST)
14: Received: from [10.94.71.42] (Forwarded-For: 41.222.192.88,
15: [148.233.159.58])
16:  by po13.wxs.nl (mshttpd); Sat, 20 Jun 2009 xx:xx:xx +0100

IP: 41.222.192.88 ---> ISOCEL SARL, BJ




die Amsterdam-Konnektion zum Zweiten:

header:

01: Received: from psmtp13.wxs.nl (psmtp13.wxs.nl [195.121.247.25])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from po13.wxs.nl ([10.94.53.250])
05:  by psmtp13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
06:  2006)) with ESMTP ID: [ID filtered]
07:  xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (MEST)
08: Received: from planet.nl ([127.0.0.1])
09:  by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
10: 2005))
11:  with ESMTP ID: [ID filtered]
12: Sat,
13:  20 Jun 2009 xx:xx:xx +0200 (MEST)
14: Received: from [10.94.71.40] (Forwarded-For: 41.223.251.101,
15: [200.65.127.161])
16:  by po13.wxs.nl (mshttpd); Sat, 20 Jun 2009 xx:xx:xx +0200

IP: 41.223.251.101 ---> Omnium des Telecommunications et de l'Internet Benin



Muguphon: +229-98-877-596 ---> Benin


- kjz

header:

01: Received: from mail.insivumeh.gob.gt (mail.insivumeh.gob.gt [200.49.167.82])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: MIME-version: 1.0
05: Content-transfer-encoding: 8BIT
06: Content-type: text/plain; charset=Windows-1251
07: Received: from User ([174.137.58.104])
08:  by mail.insivumeh.gob.gt (Sun Java(tm) System Messaging Server 6.3-0.15
09: (built
10:  Feb  9 2007)) with ESMTPA ID: [ID filtered]
11:  xxxxx; Wed, 17 Jun 2009 xx:xx:xx -0600 (CST)

Muguphon: +234-8074644875 ---> Globacom Ltd., Nigeria

header:

01: Received: from smtp2b.orange.fr (smtp2b.orange.fr [80.12.242.146])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from User (77-120-202-235.telesweet.net [77.120.202.235])
05: 	by mwinf2b26.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)

Ob dies ein neuer Trend wird? Mugu-Spam wird zwar immer noch über 'offizielle' (kompromittierte) Mailserver (sehr gerne genommen: Squirrel Mail Web Interface) abgekippt, diese werden aber nicht mehr direkt von Providern in Afrika 'gefütttert', man leistet sich jetzt auch zunehmend Proxies/Botnetze.






- kjz

Nachschub droht:

header:

01: Received: from garfield2.fisica.ufs.br (garfield2.fisica.ufs.br
02: [200.17.141.35])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat, 20 Jun 2009 xx:xx:xx +0200 (CEST)
07: Received: from www.fisica.ufs.br (garfield2.fisica.ufs.br [200.17.141.35])
08: 	by garfield2.fisica.ufs.br (Postfix) with ESMTP ID: [ID filtered]
09: 	Sat, 20 Jun 2009 xx:xx:xx -0300 (BRT)
10: Received: from 41.220.75.3
11:         (SquirrelMail authenticated user wfilho)
12:         by www.fisica.ufs.br with HTTP;
13:         Sat, 20 Jun 2009 xx:xx:xx -0300 (BRT)

Dauer-Mugu-IP: 41.220.75.3 ---> MTN Nigeria

header:

01: Received: from vuexcas4.vuad.villanova.edu (EHLO
02: transport.villanova.edu) [153.104.6.166]
03:   by mx0.gmx.net (mx105) with SMTP; 21 Jun 2009 xx:xx:xx +0200
04: Received: from User (41.217.2.7) by vuexcas4.vuad.villanova.edu
05: (153.104.6.6)
06:  with Microsoft SMTP Server ID: [ID filtered]
07: -0400

gecrackter Uni-Account, IP: 41.217.2.7 ---> ZOOM Mobile Nigeria Ltd

header:

01: Received: from smtp28.orange.fr (smtp28.orange.fr [80.12.242.100])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 21 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2812.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sun, 21 Jun 2009 xx:xx:xx +0200 (CEST)
07: Received: from francoise-briand.com
08: (LSt-Amand-152-33-4-68.w193-251.abo.wanadoo.fr [193.251.35.68])
09: 	by mwinf2812.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
10: 	Sun, 21 Jun 2009 xx:xx:xx +0200 (CEST)
11: X-ME-UUID: [UID filtered]
12: Received: from User ([124.120.131.70]) by francoise-briand.com with
13: Microsoft SMTPSVC(6.0.3790.3959);
14: 	 Sun, 21 Jun 2009 xx:xx:xx +0200

Spamadoo + Botversand, IP: 124.120.131.70 ---> ppp-124-120-131-70.revip2.asianet.co.th

header:

01: Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.26])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from User (unknown [86.121.202.99])
05: 	by mwinf2006.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)

wieder Spamadoo + Botversand, IP: 86.121.202.99 ---> 86-121-202-99.rdsnet.ro

Bei Reissack-Juchuu gibts Adressen anscheinend nur im Tausenderpack....

header:

01: Received: from psmtp30.wxs.nl (psmtp30.wxs.nl [195.121.247.32])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from po13.wxs.nl ([10.94.53.250])
05:  by psmtp30.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
06:  2006)) with ESMTP ID: [ID filtered]
07:  xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (MEST)
08: Received: from planet.nl ([127.0.0.1])
09:  by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
10: 2005))
11:  with ESMTP ID: [ID filtered]
12: Mon,
13:  22 Jun 2009 xx:xx:xx +0200 (MEST)
14: Received: from [10.94.71.42] (Forwarded-For: 41.222.192.88,
15: [148.233.159.58])
16:  by po13.wxs.nl (mshttpd); Mon, 22 Jun 2009 xx:xx:xx -0400

der Planet of Spam mit Benin, IP: 41.222.192.88 ---> ISOCEL SARL, BJ





Muguphon: +229 93-69-31-96 ---> BBCom/Bell Benin

header:

01: Received: from psmtp13.wxs.nl (psmtp13.wxs.nl [195.121.247.25])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from po13.wxs.nl ([10.94.53.250])
05:  by psmtp13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.15 (built Nov 14
06:  2006)) with ESMTP ID: [ID filtered]
07:  xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (MEST)
08: Received: from planet.nl ([127.0.0.1])
09:  by po13.wxs.nl (iPlanet Messaging Server 5.2 HotFix 2.07 (built Jun 24
10: 2005))
11:  with ESMTP ID: [ID filtered]
12: Mon,
13:  22 Jun 2009 xx:xx:xx +0200 (MEST)
14: Received: from [10.94.71.40] (Forwarded-For: 41.222.192.70,
15: [200.65.127.161])
16:  by po13.wxs.nl (mshttpd); Mon, 22 Jun 2009 xx:xx:xx +0200

wieder der Planet of Spam, IP: 41.222.192.70 ---> ISOCEL SARL, BJ (die Bande hatten wir auch schon am mind. 18. 6.)





Muguphon: +229 98 33 73 27 ---> Benin

header:

01: Received: from mfa.gov.ge (mail.mfa.gov.ge [77.92.233.50])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from [82.128.34.165] (account test HELO User)
05:   by mfa.gov.ge (CommuniGate Pro SMTP 5.1.16)
06:   with ESMTPA ID: [ID filtered]

IP: 82.128.34.165 ---> Multilinks Telecommunications Limited, Nigeria






- kjz

Noch ein paar....

die Madrid-Konnektion

header:

01: Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: by bc.mwmail.com.br (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from phpmailer ([77.209.85.241])
07: 	by 77.209.85.241 with HTTP (UebiMiau);
08: 	Sun, 21 Jun 2009 xx:xx:xx -0300

IP: 77.209.85.241 ---> VODAFONE_SPAIN_NETWORK

header:

01: Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: by bc.mwmail.com.br (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from phpmailer ([77.209.85.241])
07: 	by 77.209.85.241 with HTTP (UebiMiau);
08: 	Sun, 21 Jun 2009 xx:xx:xx -0300

header:

01: eceived: from srvmail.managecomm.com (unknown [70.167.10.68])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 23 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from User ([81.91.228.131]) by srvmail.managecomm.com with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Mon, 22 Jun 2009 xx:xx:xx -0700

IP: 81.91.228.131 ---> Office des Postes et Telecommunications (OPT), BJ







Muguphon: +229-21073310 ---> Benin


- kjz

Es geht weiter....

header:

01: Received: from smtp2b.orange.fr (smtp2b.orange.fr [80.12.242.146])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from User (77-120-202-235.telesweet.net [77.120.202.235])
05: 	by mwinf2b26.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)

header:

01: Received: from mail2.totalhosting.magic.fr (mail2.totalhosting.magic.fr
02: [195.154.194.111])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Mon, 22 Jun 2009 xx:xx:xx +0200 (CEST)
07: Received: (qmail 16216 invoked from network); 22 Jun 2009 xx:xx:xx +0200
08: Received: from unknown (HELO User) (62.173.42.192)
09:   by udaf49.net with SMTP; 22 Jun 2009 xx:xx:xx +0200

IP: 62.173.42.192 ---> ipNX Nigeria

header:

01: Received: from smtp.benet.ru (ns2.benet.ru [83.167.4.66])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 23 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: by smtp.benet.ru (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from User (unknown [196.3.183.73])
07: 	by smtp.benet.ru (Postfix) with ESMTP ID: [ID filtered]
08: 	Fri, 19 Jun 2009 xx:xx:xx +0600 (YEKST)

IP: 196.3.183.73 ---> Suburban Telecom, Nigeria

header:

01: Received: from ms04-i.ethome.com.tw (ms04.ethome.com.tw [211.76.112.37])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 23 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.ethome.com.tw [127.0.0.1])
05: 	by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
06: 452662ED7C2;
07: 	Tue, 23 Jun 2009 xx:xx:xx +0800 (CST)
08: X-Virus-Scanned: amavisd-new at ethome.com.tw
09: Received: from ms04-i.ethome.com.tw ([127.0.0.1])
10: 	by localhost (ms04-i.ethome.com.tw [127.0.0.1]) (amavisd-new, port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from kbronet.com.tw (unknown [192.168.88.25])
13: 	by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
14: B4B922EEEAE;
15: 	Tue, 23 Jun 2009 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.220.75.3 (.tw) ---> MTN Nigeria (Dauer-Mugu-IP)





Muguphon: +2347031375938 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from blu0-omc2-s6.blu0.hotmail.com
02: (blu0-omc2-s6.blu0.hotmail.com [65.55.111.81])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 24 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from BLU137-W28 ([65.55.111.71]) by
06: blu0-omc2-s6.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Tue, 23 Jun 2009 xx:xx:xx -0700

X-Originating-IP: [86.62.27.210] ---> 210-27-62-86.digitalskys.com

header:

01: Received: from dns.jgps.tpc.edu.tw (dns.jgps.tpc.edu.tw [163.20.71.1])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 23 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from dns.jgps.tpc.edu.tw (localhost [127.0.0.1])
05: 	by dns.jgps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 24 Jun 2009 xx:xx:xx +0800 (CST)
07: Received: from jgps.tpc.edu.tw (localhost [127.0.0.1])
08: 	by dns.jgps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
09: 	Wed, 24 Jun 2009 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.191.108.130 (jcs0220) ---> Suburban Telecom, Nigeria (Dauer-Mugu-IP)






- kjz

Wochenend und Sonnenschein....äääähhhh...Mugu-Mails....

header:

01: Received: from bc.mwmail.com.br (ns2.mwmail.com.br [189.17.75.134])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 27 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: by bc.mwmail.com.br (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from phpmailer ([77.209.6.218])
07: 	by 77.209.6.218 with HTTP (UebiMiau);
08: 	Wed, 24 Jun 2009 xx:xx:xx -0300

gecrackter PHPMailer der Madrid-Konnektion:

IP: 77.209.6.218 ---> VODAFONE_SPAIN_NETWORK

header:

01: Received: from megabaze.com (LRouen-151-71-54-18.w80-11.abo.wanadoo.fr
02: [80.11.234.18])
03: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 26 Jun 2009 xx:xx:xx -0400 (EDT)
05: Received: from User (unknown [74.198.8.57])
06: 	by megabaze.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Fri, 26 Jun 2009 xx:xx:xx +0200 (CEST)

IP: 74.198.8.57 ---> Rogers Wireless Inc.

header:

01: Received: from offshoreenergy.com.au (offsho.lnk.telstra.net
02: [203.45.71.238])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 27 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from User ([124.120.130.68]) by offshoreenergy.com.au with
06: Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Sat, 27 Jun 2009 xx:xx:xx +0930

IP: 124.120.130.68 ---> ppp-124-120-130-68.revip2.asianet.co.th





Muguphon: +668-6906-1503 ---> Total Access Communication Plc. (TAC/DTAC), TH

header:

01: eceived: from HoangNgoc.hoangngoc-resort.com (mail.hoangngoc-resort.com
02: [118.69.206.149])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 27 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from User ([41.191.108.130]) by HoangNgoc.hoangngoc-resort.com
06: with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Sat, 27 Jun 2009 xx:xx:xx +0700

IP: 41.191.108.130 ---> Suburban Telecom, Nigeria (der bekannte Mugu-Schwarzhut)








Spamadoo natürlich auch wieder dabei:

header:

01: Received: from smtp28.orange.fr (EHLO smtp28.orange.fr) [80.12.242.100]
02:   by mx0.gmx.net (mx034) with SMTP; 27 Jun 2009 xx:xx:xx +0200
03: Received: from smtp28.orange.fr (mwinf2823 [10.232.15.123])
04: 	by mwinf2810.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
05: 	Sat, 27 Jun 2009 xx:xx:xx +0200 (CEST)
06: Received: from me-wanadoo.net (localhost [127.0.0.1])
07: 	by mwinf2823.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
08: 	Sat, 27 Jun 2009 xx:xx:xx +0200 (CEST)
09: Received: from oriflam.com
10: (LPuteaux-156-15-60-181.w82-127.abo.wanadoo.fr [82.127.119.181])
11: 	by mwinf2823.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Sat, 27 Jun 2009 xx:xx:xx +0200 (CEST)
13: X-ME-UUID: [UID filtered]
14: Received: from [196.3.183.73] (account julie HELO User)
15:   by oriflam.com (CommuniGate Pro SMTP 5.2.14)
16:   with ESMTPA ID: [ID filtered]

IP: 196.3.183.73 ---> Suburban Telecom, Nigeria

header:

01: Received: from mx1.ketchum.com.ar (mx1.ketchum.com.ar [190.2.24.229])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 28 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from User (unknown [41.216.40.59])
05: 	(Authenticated sender: info)
06: 	by mx1.ketchum.com.ar (Postfix) with ESMTPA ID: [ID filtered]
07: 	Sat, 27 Jun 2009 xx:xx:xx -0300 (ART)

IP: 41.216.40.59 ---> Benin Telecoms SA







Muguphon: +2299-3253656 ---> BBCom/Bell Benin


gecrackter Uni-Account:

header:

01: Received: from exchr.raritanval.edu (exchr.raritanval.edu [207.200.169.35])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 27 Jun 2009 xx:xx:xx +0200 (CEST)

header:

01: Received: from outbound.mail.myantel.net.mm (unknown [203.81.162.82])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 28 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from relay3.bagan.net.mm (unknown [203.81.162.126])
05: 	by outbound.mail.myantel.net.mm (Postfix) with SMTP ID: [ID filtered]
06: 	for xxxxx; Sun, 28 Jun 2009 xx:xx:xx +0630 (MMT)
07: Received: (qmail 24487 invoked from network); 28 Jun 2009 xx:xx:xx -0000
08: Received: from owm.myantel.net.mm (HELO myanmar.com.mm) (203.81.71.113)
09:   by relay3.bagan.net.mm with SMTP; 28 Jun 2009 xx:xx:xx -0000

X-OriginatingIP: 62.56.132.9 (asiangrace) ---> 62.56.132.9.satcom-systems.net (die Mugu-Freunde aus IL)



Muguphon: +447045744871 ---> Open Telecom International Ltd., UK


- kjz

It's Mugu Time (deshalb war's am Wochenende auch vergleichsweise ruhig....:

gleich doppelt gemoppelt:

header:

01: Received: from mail.sborcity.ru (unknown [212.58.197.10])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 29 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from mail.sborcity.ru (unknown [212.58.197.10])
05: 	by mail.sborcity.ru (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 28 Jun 2009 xx:xx:xx +0400 (MSD)
07: Received: from User (unknown [58.56.87.2])
08: 	by mail.sborcity.ru (Postfix) with ESMTPA ID: [ID filtered]
09: 	Sun, 28 Jun 2009 xx:xx:xx +0400 (MSD)

header:

01: Received: from mail.sborcity.ru (unknown [212.58.197.10])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 30 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from mail.sborcity.ru (unknown [212.58.197.10])
05: 	by mail.sborcity.ru (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 30 Jun 2009 xx:xx:xx +0400 (MSD)
07: Received: from User (unknown [58.211.75.8])
08: 	by mail.sborcity.ru (Postfix) with ESMTPA ID: [ID filtered]
09: 	Tue, 30 Jun 2009 xx:xx:xx +0400 (MSD)

IP: 58.56.87.2 ---> CHINANET SHANDONG PROVINCE

header:

01: Received: from mx1.ketchum.com.ar (mx1.ketchum.com.ar [190.2.24.229])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 30 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: from User (unknown [41.216.40.59])
05: 	(Authenticated sender: info)
06: 	by mx1.ketchum.com.ar (Postfix) with ESMTPA ID: [ID filtered]
07: 	Mon, 29 Jun 2009 xx:xx:xx -0300 (ART)

IP: 41.216.40.59 ---> Benin Telecoms SA

header:

01: Received: from mail.cooperativa.cl (mail.cooperativa.cl [200.11.86.101])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 30 Jun 2009 xx:xx:xx +0200 (CEST)
04: Received: by mail.cooperativa.cl (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from wbs-41-208-227-93.wbs.co.za (wbs-41-208-227-93.wbs.co.za
07: 	[41.208.227.93]) by webmail.cooperativa.cl (Horde MIME library) with HTTP;
08: 	Mon, 29 Jun 2009 xx:xx:xx -0400

header:

01: Received: from blu0-omc2-s2.blu0.hotmail.com
02: (blu0-omc2-s2.blu0.hotmail.com [65.55.111.77])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 30 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from BLU132-W9 ([65.55.111.73]) by
06: blu0-omc2-s2.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Mon, 29 Jun 2009 xx:xx:xx -0700

X-Originating-IP: [86.62.27.210] ---> 210-27-62-86.digitalskys.com

header:

01: Received: from IMPaqm3.telefonica.net (impaqm3.telefonica.net
02: [213.4.129.18])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 30 Jun 2009 xx:xx:xx +0200 (CEST)
05: Received: from IMPmailhost3.adm.correo ([10.20.102.124])
06: 	by IMPaqm3.telefonica.net with bizsmtp
07: 	ID: [ID filtered]
08: Received: from cps6 ([10.20.100.206])
09: 	by IMPmailhost3.adm.correo with BIZ IMP
10: 	ID: [ID filtered]
11: X-TE-authinfo: authemail="??" |auth_email="??"
12: X-TE-AcuTerraCos: auth_cuTerraCos="terra-wm"
13: Received: from [41.222.193.98] by correo11.terra.es with HTTP
14:         (authenticated as poor [at] spamvictim.tld); Tue, 30 Jun 2009 xx:xx:xx
15: +0200

IP: 41.222.193.98 ---> ISOCEL, Benin





Muguphon: +22993299975 ---> BBCom/Bell Benin


- kjz

Das Wochenende naht: Muuuuuguuuuu-Time.....

header:

01: Received: from fert.qingdaochina.com (unknown [218.58.79.22])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  1 Jul 2009 xx:xx:xx +0200 (CEST)
04: Received: from User [82.128.33.102] by fert.qingdaochina.com with ESMTP
05:   (SMTPD32-8.02) ID: [ID filtered]

IP: 82.128.33.102 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from smtp2018.ep2001.biz (unknown [91.199.50.110])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  1 Jul 2009 xx:xx:xx -0400 (EDT)
04: Received: from 64-150-188-155 (unknown [64.150.188.155])
05: 	by smtp2018.ep2001.biz (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed,  1 Jul 2009 xx:xx:xx +0000 (UTC)

IP: 64.150.188.155 ---> 64-150-188-155.dedicated.abac.net






gecracktes PHP:

header:

01: Received: from mail.posta.ge (newmail.posta.ge [62.168.168.233])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  3 Jul 2009 xx:xx:xx +0200 (CEST)
04: Received: from localhost (relay.caucasus.net [62.168.168.208])
05: 	by mail.posta.ge (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu,  2 Jul 2009 xx:xx:xx +0400 (GET)
07: Received: from mail.posta.ge ([62.168.168.233])
08: 	by localhost (relay.caucasus.net [62.168.168.208]) (amavisd-new, port
09: 10018)
10: 	with ESMTP ID: [ID filtered]
11: Received: by mail.posta.ge (Postfix, from userID: [ID filtered]
12: 	ID: [ID filtered]

X-PHP-Script: mail.ge/index.php for 41.202.18.171 ---> Zipnet-Network, Ghana

header:

01: Received: from smtp3m5.poczta.onet.pl (smtp3m5.poczta.onet.pl
02: [213.180.138.34])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  3 Jul 2009 xx:xx:xx +0200 (CEST)
05: Received: from [82.128.26.88] ([82.128.26.88]:2868 "EHLO
06: 	fbioffice00010001 [at] poczta.onet.eu" rhost-flags-FAIL-FAIL-FAIL-FAIL)
07: 	by ps3.mod5.onet with ESMTPA ID: [ID filtered]
08: 	<rfc822;xxxxx); Fri, 3 Jul 2009 xx:xx:xx +0200

IP: 82.128.26.88 ---> Multilinks Telecommunications Limited, Nigeria






gecracktes Squirrelmail/PHP:

header:

01: Received: from mail.obsa.com.ec (mail.obsa.com.ec [157.100.192.242])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  3 Jul 2009 xx:xx:xx +0200 (CEST)
04: Received: by mail.obsa.com.ec (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from 41.191.85.209
07:         (SquirrelMail authenticated user tramos)
08:         by mail.obsa.com.ec with HTTP;
09:         Fri, 3 Jul 2009 xx:xx:xx +0100 (BST)

IP: 41.191.85.209 ---> MICRO-NET_CYBER, Benin





Muguphon: +229-98895888 ---> Benin

header:

01: Received: from fep06.mfe.bur.connect.com.au
02: (fep06.mfe.bur.connect.com.au [203.63.86.26])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  3 Jul 2009 xx:xx:xx +0200 (CEST)
05: Received: from User (unknown [82.128.26.120])
06: 	(Authenticated sender: petrol [at] aapt.net.au)
07: 	by fep06.mfe.bur.connect.com.au (Postfix) with ESMTP ID: [ID filtered]
08: 	Fri,  3 Jul 2009 xx:xx:xx +1000 (EST)

IP: 82.128.26.120 ---> Multilinks Telecommunications Limited, Nigeria








die Madrid-Konnektion:

header:

01: Received: from server.fibafrica.com (unknown [74.55.33.106]) 
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Thu,  2 Jul 2009 xx:xx:xx -0400 (EDT)
04: Received: from 141.red-88-6-46.staticip.rima-tde.net ([88.6.46.141]
05: helo=User)
06: 	by server.fibafrica.com with esmtpa (Exim 4.69)
07: 	(envelope-from <ferrandojorgelob [at] msn.com>)
08: 	ID: [ID filtered]

gecracktes Squirrelmail/PHP:

header:

01: Received: from wow.lk (mailwall.suntelwow.lk [202.124.160.185])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	Fri,  3 Jul 2009 xx:xx:xx +0200 (CEST)
04: Received: from webmail.wow.lk (ftp.wow.lk [202.124.160.4])
05: 	by mailwall.suntelwow.lk  with ESMTP ID: [ID filtered]
06: 	Wed, 1 Jul 2009 xx:xx:xx +0530
07: Received: from 64.136.164.35 (proxying for 82.128.35.149)
08:         (SquirrelMail authenticated user viluyana)
09:         by webmail.wow.lk with HTTP;
10:         Wed, 1 Jul 2009 xx:xx:xx +0530 (IST)

IP: 82.128.35.149 ---> Multilinks Telecommunications Limited, Nigeria





Muguphon: +447035969341 ---> Open Telecom International Ltd., UK

header:

01: Received: from mail.sborcity.ru (unknown [212.58.197.10])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  3 Jul 2009 xx:xx:xx +0200 (CEST)
04: Received: from mail.sborcity.ru (unknown [212.58.197.10])
05: 	by mail.sborcity.ru (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon, 29 Jun 2009 xx:xx:xx +0400 (MSD)
07: Received: from User (unknown [58.214.5.169])
08: 	by mail.sborcity.ru (Postfix) with ESMTPA ID: [ID filtered]
09: 	Mon, 29 Jun 2009 xx:xx:xx +0400 (MSD)

- kjz