Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

Zur Vergrößerung der Sammlung wollen gerne beitragen:

header:

01: Received: from cs1133.mojohost.com (mail.netmsi.com [99.192.153.34])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  7 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User (unknown [201.41.47.16])
05: 	by cs1133.mojohost.com (iRedMail) with ESMTP ID: [ID filtered]
06: 	Sun,  6 Jun 2010 xx:xx:xx +0000 (UTC)

IP: 201.41.47.16 ---> 201-41-47-16.paemt702.e.brasiltelecom.net.br

Muguphon: +44 704 5788 887 ---> Open Telecom International Ltd., UK

Mugufax: +44 704 090 1883 ---> Digital Mail Limited, UK

header:

01: Received: from unknown (EHLO shop.lmkzh.com) [220.229.232.84]
02:   by mx0.gmx.net (mx106) with SMTP; 07 Jun 2010 xx:xx:xx +0200
03: Received: from User (unknown [92.99.143.10])
04: 	by shop.lmkzh.com (Postfix) with ESMTP
05: 	ID: [ID filtered]

IP: 92.99.143.10 ---> ETISALATADSL-EMIRNET

header:

01: Received: from mailserver.ntkhobar.com (mail.medco1.com [213.210.192.6])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  7 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([82.128.69.156]) by mailserver.ntkhobar.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Mon, 7 Jun 2010 xx:xx:xx +0300

IP: 82.128.69.156 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from fmmailgate06.web.de (fmmailgate06.web.de [217.72.192.247])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  7 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received:  from mwmweb029  ( [172.20.18.38])
05: 	by fmmailgate06.web.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  7 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received:  from [41.219.254.9]  by  mwmweb029  with HTTP; Mon
08:  Jun 07 xx:xx:xx CEST 2010

IP: 41.219.254.9 ---> dial-pool93.lg.starcomms.net, Nigeria

header:

01: Received: from mx.plouhinec.com (mx.plouhinec.com [212.234.71.121])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  8 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.191.85.33]) by mx.plouhinec.com with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Mon, 7 Jun 2010 xx:xx:xx +0200

IP: 41.191.85.33 ---> Ets ALINO Cyber, Benin

Muguphon: +2299989274 ---> mobile number, Benin

header:

01: Received: from icbu211.cnmail.cnh.yahoo.com
02: (icbu211.cnmail.cnh.yahoo.com [119.42.242.94])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue,  8 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: from localhost (localhost [127.0.0.1])
06: 	by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Tue,  8 Jun 2010 xx:xx:xx +0800 (CST)
08: Received: from icbu211.cnmail.cnh.yahoo.com ([127.0.0.1])
09: 	by localhost (icbu211.cnmail.cnh.yahoo.com [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [82.128.83.181])
13: 	by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP ID: [ID filtered]
14: 	Tue,  8 Jun 2010 xx:xx:xx +0800 (CST)

IP: 82.128.83.181 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail1.hcmute.edu.vn (EHLO dns1.hcmute.edu.vn)
02: [203.113.147.179]
03:   by mx0.gmx.net (mx102) with SMTP; 08 Jun 2010 xx:xx:xx +0200
04: Received: from User ([116.206.153.84])
05: 	(authenticated bits=0)
06: 	by dns1.hcmute.edu.vn (8.14.2/8.14.2) with ESMTP ID: [ID filtered]
07: 	Mon, 7 Jun 2010 xx:xx:xx +0700

IP: 116.206.153.84 ---> iZZinet Sdn. Bhd., MY

Muguphon: +60172718538 ---> Maxis Mobile (Binariang), MY

header:

01: Received: from outgoing.hosting.tp.pl (EHLO mta7.hosting.tp.pl)
02: [193.110.120.20]
03:   by mx0.gmx.net (mx070) with SMTP; 08 Jun 2010 xx:xx:xx +0200
04: Received: from User ([118.101.240.200]) by mta7.hosting.tp.pl (m7)
05:  with ESMTPA ID: [ID filtered]
06:  08 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 118.101.240.200 ---> TELEKOM MALAYSIA BERHAD

header:

01: Received: from host2host.com (host2host.com [216.117.164.247])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxx; Wed,  9 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User [82.128.19.203] by host2host.com with ESMTP
05:   (SMTPD32-8.05) ID: [ID filtered]

IP: 82.128.19.203 ---> Multilinks Telecommunications Limited, Nigeria

gecracktes SquirrelMail:

header:

01: eceived: from c6.3d.7bae.static.theplanet.com (EHLO
02: p42-107.perfectvisualhost.com) [174.123.61.198]
03:   by mx0.gmx.net (mx105) with SMTP; 09 Jun 2010 xx:xx:xx +0200
04: Received: from localhost.localdomain ([127.0.0.1] helo=www.fclimited.co.cc)
05: 	by p42-107.perfectvisualhost.com with esmtpa (Exim 4.69)
06: 	(envelope-from <lbritishfinancemonitoringunit21 [at] yahoo.com.hk>)
07: 	ID: [ID filtered]
08: Received: from 82.128.23.41 ([82.128.23.41])
09:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
10:         by www.fclimited.co.cc with HTTP;
11:         Tue, 8 Jun 2010 xx:xx:xx -0500

IP: 82.128.23.41 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +447024035686 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mta6.brinkster.com (mta6.brinkster.com [65.182.109.75])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  9 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by mta6.brinkster.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed,  9 Jun 2010 xx:xx:xx -0400 (EDT)
07: X-Virus-Scanned: amavisd-new at mta6.brinkster.com
08: Received: from mta6.brinkster.com ([127.0.0.1])
09: 	by localhost (mta6.brinkster.com [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from mail1d.brinkster.com (mail1d.brinkster.com [10.0.6.222])
12: 	by mta6.brinkster.com (Postfix) with ESMTP ID: [ID filtered]
13: 	Wed,  9 Jun 2010 xx:xx:xx -0400 (EDT)

header:

01: Received: from centrumvitaal.nl (dsl-087-195-240-069.solcon.nl
02: [87.195.240.69])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 11 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: from User ([41.138.186.56]) by centrumvitaal.nl with Microsoft
06: SMTPSVC(6.0.3790.4675);
07: 	 Thu, 10 Jun 2010 xx:xx:xx +0200

IP: 41.138.186.56 ---> Visafone Communications Limited, Nigeria

header:

01: Received: from ev1s-209-62-91-242.theplanet.com (EHLO
02: thefortune500.theplanet.com) [209.62.91.242]
03:   by mx0.gmx.net (mx115) with SMTP; 11 Jun 2010 xx:xx:xx +0200
04: Received: (qmail 20331 invoked from network); 7 Jun 2010 xx:xx:xx -0500
05: Received: from 173-203-64-72.static.cloud-ips.com (HELO User)
06: (173.203.64.72)
07:   by ev1s-209-62-91-243.theplanet.com with SMTP; 7 Jun 2010 xx:xx:xx -0500

- kjz

Das ist natürlich längst noch nicht alles:

ein besonders renitenter Mugu:

header:

01: Received: from TCCS_EXCHANGE.rfc.com.vn (unknown [118.69.201.241])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  7 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.211.230.72]) by TCCS_EXCHANGE.rfc.com.vn with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Tue, 8 Jun 2010 xx:xx:xx +0700

header:

01: Received: from TCCS_EXCHANGE.rfc.com.vn (unknown [118.69.201.241])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  7 Jun 2010 xx:xx:xx -0400 (EDT)
04: Received: from User ([41.211.230.72]) by TCCS_EXCHANGE.rfc.com.vn with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Tue, 8 Jun 2010 xx:xx:xx +0700

header:

01: Received: from TCCS_EXCHANGE.rfc.com.vn ([118.69.201.241])
02: 	by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from User ([41.211.230.72]) by TCCS_EXCHANGE.rfc.com.vn with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Tue, 8 Jun 2010 xx:xx:xx +0700

IP: 41.211.230.72 ---> 72.230.211.41.client72.directonpc.net, Nigeria

Muguphon: +234-8034113481 ---> MTN Nigeria Communications Ltd.

Muguphon: +234-17765057 ---> Multi-links, Nigeria

gecracktes SquirrelMail:

header:

01: Received: from c6.3d.7bae.static.theplanet.com (EHLO
02: p42-107.perfectvisualhost.com) [174.123.61.198]
03:   by mx0.gmx.net (mx024) with SMTP; 10 Jun 2010 xx:xx:xx +0200
04: Received: from localhost.localdomain ([127.0.0.1] helo=www.fclimited.co.cc)
05: 	by p42-107.perfectvisualhost.com with esmtpa (Exim 4.69)
06: 	(envelope-from <lbritishfinancemonitoringunit21 [at] yahoo.com.hk>)
07: 	ID: [ID filtered]
08: Received: from 82.128.22.12 ([82.128.22.12])
09:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
10:         by www.fclimited.co.cc with HTTP;
11:         Wed, 9 Jun 2010 xx:xx:xx -0500

IP: 82.128.22.12 ---> ml82.128.22.12.multilinks.com, Nigeria

Muguphon: +447024035686 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from marlborough-eng.com (ip-87-82-154-194.easynet.co.uk
02: [87.82.154.194])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 10 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: from User ([87.195.197.238]) by marlborough-eng.com with
06: Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Thu, 10 Jun 2010 xx:xx:xx +0100

IP: 87.195.197.238 ---> dsl-087-195-197-238.solcon.nl

Auch Song Lile ist mir nicht ganz unbekannt, auch wieder SquirrelMail gecrackt:

header:

01: Received: from mx1.melt.ru (mx1.melt.ru [89.184.0.71])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 10 Jun 2010 xx:xx:xx +0200 (CEST)
06: X-Scanner: junk mail filter at mi.ru
07: Received: from pop3.melt.ru (localhost [127.0.0.1])
08: 	by mx1.melt.ru (Postfix) with ESMTPA ID: [ID filtered]
09: 	Thu, 10 Jun 2010 xx:xx:xx +0400 (MSD)
10: Received: from 41.220.68.2
11:         by webmail.mi.ru with HTTP;
12:         Thu, 10 Jun 2010 xx:xx:xx +0400

header:

01: Received: from mx1.melt.ru (mx1.melt.ru [89.184.0.71])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 10 Jun 2010 xx:xx:xx +0200 (CEST)
06: X-Scanner: junk mail filter at mi.ru
07: Received: from pop3.melt.ru (localhost [127.0.0.1])
08: 	by mx1.melt.ru (Postfix) with ESMTPA ID: [ID filtered]
09: 	Thu, 10 Jun 2010 xx:xx:xx +0400 (MSD)
10: Received: from 41.220.68.5
11:         by webmail.mi.ru with HTTP;
12:         Thu, 10 Jun 2010 xx:xx:xx +0400

IP: 41.220.68.2 --> MTN Nigeria Communications Limited

Muguphon: +447024094986 ---> Magrathea Telecommunications Limited, UK

Mugufax: +448712515162 ---> Call Sciences Limited, UK/Yac

header:

01: Received: from icbu211.cnmail.cnh.yahoo.com (EHLO
02: icbu211.cnmail.cnh.yahoo.com) [119.42.242.94]
03:   by mx0.gmx.net (mx045) with SMTP; 10 Jun 2010 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 11 Jun 2010 xx:xx:xx +0800 (CST)
07: Received: from icbu211.cnmail.cnh.yahoo.com ([127.0.0.1])
08: 	by localhost (icbu211.cnmail.cnh.yahoo.com [127.0.0.1]) (amavisd-new,
09: port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (unknown [41.138.170.251])
12: 	by icbu211.cnmail.cnh.yahoo.com (Postfix) with ESMTP ID: [ID filtered]
13: 	Fri, 11 Jun 2010 xx:xx:xx +0800 (CST)

IP: 41.138.170.251 ---> Visafone Communications Limited, Nigeria

Man beachte: verschickt aus Nigeria, Muguphon in Benin.

header:

01: Received: from hwcs-exchange.hwcs.net (mail.hwcs.net [216.195.100.7])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 11 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.217.65.14]) by hwcs-exchange.hwcs.net with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Fri, 11 Jun 2010 xx:xx:xx -0500

IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +229 96723525 ---> mobile number, Benin

Man beachte: Freeserve.

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.190])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 11 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Fri, 11 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Fri, 11 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Fri, 11 Jun 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (unknown [81.12.29.206])
14: 	by mwinf3601.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Fri, 11 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 81.12.29.206 ---> Chapar Resaneh, IR

Muguphon: +234 7034592056 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from mail.tc.orz (unknown [122.147.84.157])
02: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Fri, 11 Jun 2010 xx:xx:xx -0400 (EDT)
04: Received: from User ([84.77.141.198])
05: 	(authenticated bits=0)
06: 	by mail.tc.orz (8.14.2/8.14.2) with ESMTP ID: [ID filtered]
07: 	Wed, 6 Jan 2010 xx:xx:xx +0800 (CST)
08: 	(envelope-from gramwhyte [at] aim.com)

IP: 84.77.141.198 ---> Ya/Orange, Espana

header:

01: Received: from eneckorea.com (unknown [222.122.140.46])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 13 Jun 2010 xx:xx:xx +0200 (CEST)
06: Received: from User ([82.128.84.216])
07: 	(authenticated bits=0)
08: 	by eneckorea.com (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
09: 	Sat, 12 Jun 2010 xx:xx:xx +0900

IP: 82.128.84.216 ---> Multilinks Telecommunications Limited, Nigeria

Mugufax: +229 93 74 41 58 ---> BBCom, Benin

Muguphon: +229 97 01 60 04 ---> Benincell

Also wieder: verschickt aus Nigeria, Muguphon in Benin. Nun ja, Benin ist ein direktes Nachbarland zu Nigeria. Allerdings vermute ich auch: die nigerianische Mugu-Mafia ist nicht nur multi-national, sondern ggf. auch multi-kriminell. Da dürfte nicht nur der Vorschussbetrug zum 'Geschäftsfeld' zählen, ggf. dürfte man auch im Schleuser-Biziness tätig sein. Evtl. um die 'Mugu-Boyz' unter dem 'Deckmantel Asyl' auch in andere Staaten einzuschleusen?

header:

01: Received: from smtp3.aster.pl (smtp3.aster.pl [212.76.33.56])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 13 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User (ml82.128.6.186.multilinks.com [82.128.6.186])
05: 	by smtp3.aster.pl (sendmail) with ESMTPA ID: [ID filtered]
06: 	Sat, 12 Jun 2010 xx:xx:xx +0200 (CEST)

header:

01: Received: from smtp3.aster.pl (smtp3.aster.pl [212.76.33.56])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 13 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User (unknown [82.128.104.72])
05: 	by smtp3.aster.pl (sendmail) with ESMTPA ID: [ID filtered]
06: 	Sun, 13 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 82.128.104.72 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from nova.hk (059148241045.ctinets.com [59.148.241.45])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 13 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost [127.0.0.1])
05: 	by nova.hk (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 12 Jun 2010 xx:xx:xx +0800 (HKT)
07: X-Virus-Scanned: amavisd-new at nova.hk
08: Received: from nova.hk ([127.0.0.1])
09: 	by localhost (mail.nova.hk [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (unknown [41.191.86.105])
12: 	by nova.hk (Postfix) with ESMTPA ID: [ID filtered]
13: 	Sat, 12 Jun 2010 xx:xx:xx +0800 (HKT)

IP: 41.191.86.105 ---> NETLAND, Benin

Muguphon: +229-96 75 19 02 ---> mobile number, Benin

header:

01: Received: from mail.ins.gov.co (mail.ins.gov.co [190.27.195.163])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 13 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by mail.ins.gov.co (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 13 Jun 2010 xx:xx:xx -0500 (COT)
07: X-Virus-Scanned: amavisd-new at ins.gov.co
08: Received: from mail.ins.gov.co ([127.0.0.1])
09: 	by localhost (mail.ins.gov.co [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (dhcp-077-250-168-242.chello.nl [77.250.168.242])
12: 	by mail.ins.gov.co (Postfix) with ESMTPA ID: [ID filtered]
13: 	Sun, 13 Jun 2010 xx:xx:xx -0500 (COT)

Muguphon: +31-647-451-670 ---> Telfort B.V., NL/Tiscali

- kjz

17.06.2010, 03:12
Fidul

Die Nigerianer sind hauptsächlich in diesen drei Bereichen tätig: Drogenhandel (mit Stoff u.a. aus Südamerika und Afghanistan), Menschenschmuggel (illegale Einwanderung und Prostitution) und natürlich Vorschußbetrug aller Art. Das läuft alles Hand in Hand.

Auch diese Mugus wollen sich natürlich einen Rang in der Besten(?)-Liste erspammen:

Man beachte: Freeserve

header:

01: Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 14 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Mon, 14 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	for xxxxx; Mon, 14 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	for xxxxx; Mon, 14 Jun 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (unknown [69.85.192.154])
14: 	by mwinf3524.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	for xxxxx; Mon, 14 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 69.85.192.154 ---> 69-85-192-154.static.southernlightfiber.com

Muguphon: +44-762-410-3670 ---> Manx Telecom

Versand aus Nigeria, Muguphon in Benin:

header:

01: Received: from hwcs-exchange.hwcs.net (mail.hwcs.net [216.195.100.7])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 14 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.217.65.13]) by hwcs-exchange.hwcs.net with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Sun, 13 Jun 2010 xx:xx:xx -0500

IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +229 96723525 ---> mobile number, Benin

Freeserve mal wieder....

header:

01: Received: from smtp6.freeserve.com (EHLO smtp6.freeserve.com)
02: [193.252.22.191]
03:   by mx0.gmx.net (mx112) with SMTP; 15 Jun 2010 xx:xx:xx +0200
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (eth1268.nsw.adsl.internode.on.net [150.101.207.243])
14: 	by mwinf3607.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)

Muguphon: +234-703-078-0390 ---> MTN Nigeria Communications Ltd.

Muguphon: +234-702-588-2164 ---> Visafone Communications Ltd., Nigeria

sagte ich schon Freeserve.....

header:

01: Received: from smtp5.freeserve.com (smtp5.freeserve.com [193.252.22.152])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp5.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (unknown [69.38.184.172])
14: 	by mwinf3423.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 69.38.184.172 ---> Columbia College

Muguphon: +234-812-074-9273 ---> Celtel Nigeria Limited/Zain

Freeserve.....

header:

01: Received: from smtp5.freeserve.com (smtp5.freeserve.com [193.252.22.128])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3417.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3417.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (SIPB-TOR.MIT.EDU [18.187.1.68])
11: 	by mwinf3417.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 18.187.1.68 ---> SIPB-TOR.MIT.EDU (Tor-Anonymisierungsproxy beim MIT)

Muguphon: +234-7030867355 ---> MTN Nigeria Communications Ltd.

ääähhhhmmm, Freeserve.....

header:

01: Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (unknown [41.217.66.5])
14: 	by mwinf3514.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Tue, 15 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 41.217.66.5 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234 705 577 0795 ---> Globacom Ltd., Nigeria

header:

01: Received: from fmmailgate06.web.de (fmmailgate06.web.de [217.72.192.247])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received:  from mwmweb031  ( [172.20.18.40])
05: 	by fmmailgate06.web.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received:  from [77.209.40.121]  by  mwmweb031  with HTTP; Wed
08:  Jun 16 xx:xx:xx CEST 2010

IP: 77.209.40.121 ---> VODAFONE_SPAIN_NETWORK

Muguphon: +34693104883 ---> France Telecom Espana, S.a.

header:

01: Received: from Elsewedy-FE2.ELSEWEDY.COM (mail.elsewedy.com [62.68.253.31])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([69.85.192.154]) by Elsewedy-FE2.ELSEWEDY.COM with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Wed, 16 Jun 2010 xx:xx:xx +0300

IP: 69.85.192.154 ---> 69-85-192-154.static.southernlightfiber.com

Muguphon: +234-802-408-0023 ---> Celtel Nigeria Limited/Zain

- kjz

Bei dem Gedrängel müssen sich noch hinten anstellen:

header:
01: Received: from mail.millercohen.com (mail.millercohen.com [12.199.187.35])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 14 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([84.59.26.11]) by mail.millercohen.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Mon, 14 Jun 2010 xx:xx:xx -0400
IP: 84.59.26.11 ---> dslb-084-059-026-011.pools.arcor-ip.net

Muguphon: +234-818-269-6103 ---> Nigeria

header:
01: Received: from relay.ufssp.kirov.ru (EHLO ufssp.kirov.ru) [85.93.42.195]
02:   by mx0.gmx.net (mx009) with SMTP; 16 Jun 2010 xx:xx:xx +0200
03: Received: from User by ufssp.kirov.ru (MDaemon PRO v10.0.2)
04: 	with ESMTP ID: [ID filtered]
05: 	Wed, 16 Jun 2010 xx:xx:xx +0400
06: X-Spam-Processed: ufssp.kirov.ru, Wed, 16 Jun 2010 xx:xx:xx +0400
07: 	(not processed: message from trusted or authenticated source)
08: X-MDPtrLookup-Result: hardfail ip=82.128.82.67 (no PTR records found)
09: (ufssp.kirov.ru)
X-MDRemoteIP: 82.128.82.67 ---> Multilinks Telecommunications Limited, Nigeria

X-Authenticated-Sender:

Hatte ich eigentlich schon Freeserve erwähnt......

header:
01: Received: from smtp6.freeserve.com (smtp5.freeserve.com [193.252.22.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (iburst-41-213-86-108.iburst.co.za [41.213.86.108])
14: 	by mwinf3501.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Wed, 16 Jun 2010 xx:xx:xx +0200 (CEST)
IP: 41.213.86.108 ---> iburst-41-213-86-108.iburst.co.za

Rant: Anscheinend hat da ein Mugu-Boss bei der Russenmafia gecrackte Freeserve-Accounts gleich im Tausenderpack geordert. Oder dort ist das Wort Sicherheit erst gar nicht existent. Freeserve gehört allerdings zu Orange. Oder sollte ich besser sagen: Wanadoo (in Fachkreisen nur noch als Spamadoo bekannt). Oder direkt France Telecom? Leider sehe ich mit Sorge (man betrachte auch den Schwarzhut OVH), wie die 'Grande Nation' immer mehr zum Spammerparadies verkommt. Fachkundige Abusedesks sind nicht existent/erwünscht (man schaue nur mal auf die Listings von ) oder wird dort nur auf Larts in astreinem Französisch geantwortet? Und überall wo Orange draufsteht (sei es nun .fr, .co.uk oder .es) steht SPAM dahinter. Unser magenta (ehemals) Staatsunternehmen könnte sich so etwas wohl nicht erlauben, aber unter der Farbe Orange scheint alles zu gehen, Hauptsache der Profit stimmt und die Globalisierung läuft.....

- kjz

großes Gedrängel für de Mugu-Galerie:

hatte ich eigentlich schon Freeserve erwähnt....

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.190])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3631.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3631.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [41.206.15.3])
11: 	by mwinf3631.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 41.206.15.3 ---> MTN Nigeria Communications

header:

01: Received: from c2beaomr07.btconnect.com (c2beaomr07.btconnect.com
02: [213.123.26.185])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: from mail.jc-architects.co.uk
06: (host81-138-14-65.in-addr.btopenworld.com [81.138.14.65])
07: 	by c2beaomr07.btconnect.com
08: 	with ESMTP ID: [ID filtered]
09: 	Thu, 17 Jun 2010 xx:xx:xx +0100 (BST)
10: X-Mirapoint-IP-Reputation: reputation=Fair-1,
11: 	source=Queried,
12: 	refid=0001.0A0B0302.4C1A68C1.00DF,
13: 	actions=tag
14: Received: from [41.191.86.105] ([41.191.86.105])
15: 	by mail.jc-architects.co.uk (Kerio MailServer 6.6.2);
16: 	Thu, 17 Jun 2010 xx:xx:xx +0100

IP: 41.191.86.105 ---> NETLAND, Benin

2

header:

01: Received: from mail.burdenis.net (EHLO mail.burdenis.net) [87.120.162.3]
02:   by mx0.gmx.net (mx102) with SMTP; 18 Jun 2010 xx:xx:xx +0200
03: Received: from User ([86.125.18.20])
04: 	(authenticated user merlin [at] burdenis.net)
05: 	by mail.burdenis.net;
06: 	Fri, 18 Jun 2010 xx:xx:xx +0300

IP: 86.125.18.20 ---> static-86-125-18-20.rdsnet.ro

header:

01: Received: from mail21.svc.cra.dublin.eircom.net
02: (mail21.svc.cra.dublin.eircom.net [159.134.118.222])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 19 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: (qmail 77026 messnum 6668319 invoked from
06: network[86.43.60.62/webmailbox102.eircom.net]); 19 Jun 2010 xx:xx:xx -0000
07: Received: from webmailbox102.eircom.net (86.43.60.62)
08:   by mail21.svc.cra.dublin.eircom.net (qp 77026) with SMTP; 19 Jun 2010
09: xx:xx:xx -0000

Muguphon: +60146264807 ---> DiGi Telecom, Malaysia

Wie war das nochmal mit Freeserve....

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.191])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 19 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat, 19 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Sat, 19 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (85.64.20.62.dynamic.barak-online.net [85.64.20.62])
11: 	by mwinf3611.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Sat, 19 Jun 2010 xx:xx:xx +0200 (CEST)

header:

01: Received: from server.digitalplate.com.br (EHLO
02: server.digitalplate.com.br) [201.35.64.130]
03:   by mx0.gmx.net (mx027) with SMTP; 19 Jun 2010 xx:xx:xx +0200
04: Received: from User (unknown [41.211.229.243])
05: 	(Authenticated sender: xxx)
06: 	by server.digitalplate.com.br (Postfix) with ESMTP ID: [ID filtered]
07: 	Fri, 18 Jun 2010 xx:xx:xx -0300 (BRT)

IP: 41.211.229.243 ---> Direct-on-PC Limited, Nigeria

Muguphon: +234-7026901559 ---> Visafone Communications Ltd., Nigria

gecracktes SquirrelMail:

header:

01: Received: from relay4.hrnoc.net (relay4.hrnoc.net [216.120.227.142])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sat, 19 Jun 2010 xx:xx:xx +0200 (CEST)
06: Received: from reseller1.hrwebservices.net ([66.147.237.116])
07: 	by relay4.hrnoc.net with esmtp (Exim 4.63)
08: 	(envelope-from <captlewis [at] yahoo.com>)
09: 	ID: [ID filtered]
10: Received: from localhost ([127.0.0.1] helo=starcatchersproductions.com)
11: 	by reseller1.hrwebservices.net with esmtpa (Exim 4.69)
12: 	(envelope-from <captlewis [at] yahoo.com>)
13: 	ID: [ID filtered]
14: Received: from 208.110.80.250 ([208.110.80.250])
15:         (SquirrelMail authenticated user
16:  thistimeismoney [at] starcatchersproductions.com)
17:         by starcatchersproductions.com with HTTP;
18:         Sat, 19 Jun 2010 xx:xx:xx -0400

IP: 208.110.80.250 ---> WHOLESALEINTERNET

header:

01: Received: from mail.romix.com.pl (mail.romix.com.pl [217.98.64.4])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 20 Jun 2010 xx:xx:xx +0200 (CEST)
06: Received: from User ([41.215.160.133])
07: 	(authenticated bits=0)
08: 	by mail.romix.com.pl (8.13.5/8.13.5) with ESMTP ID: [ID filtered]
09: 	Fri, 18 Jun 2010 xx:xx:xx +0200

IP: 41.215.160.133 ---> Millicom Ghana Limited/Tigo

header:

01: Received: from mxmail.armstrong.net (EHLO mxmail.armstrong.net)
02: [216.177.59.170]
03:   by mx0.gmx.net (mx019) with SMTP; 20 Jun 2010 xx:xx:xx +0200
04: Received: from User ([212.225.181.101])
05:         by mxmail.armstrong.net (Armstrong Mail Server ver 9.2.1) with
06: ASMTP ID: [ID filtered]
07:         Sun, 20 Jun 2010 xx:xx:xx -0400

IP: 212.225.181.101 ---> 101.red.181.225.212.user.ptvtelecom.com

Muguphon: +34 645 071 275 ---> France Telecom Espana, S.a.

- kjz

In die Schlange möchten sich noch gerne einreihen:

header:

01: Received: from mail.choiceadvisory.com (EHLO mail.choiceadvisory.com)
02: [63.134.198.198]
03:   by mx0.gmx.net (mx083) with SMTP; 17 Jun 2010 xx:xx:xx +0200
04: Received: from UnknownHost [41.215.160.134] by mail.choiceadvisory.com
05: with SMTP;
06:    Wed, 16 Jun 2010 xx:xx:xx -0700

IP: 41.215.160.134 ---> Millicom Ghana Limited

header:

01: Received: from mail1.nju.edu.cn (oldmail2.nju.edu.cn [202.119.32.136])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([82.128.68.44])
05: 	(authenticated bits=0)
06: 	by mail1.nju.edu.cn (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
07: 	Thu, 17 Jun 2010 xx:xx:xx +0800

IP: 82.128.68.44 ---> Multilinks Telecommunications Limited, Nigeria

Freeserve hatte ich schon erwähnt....

header:

01: Received: from smtp6.freeserve.com (smtp6.freeserve.com [193.252.22.190])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from smtp6.freeserve.com (localhost [127.0.0.1])
05: 	by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from me-wanadoo.net (localhost [127.0.0.1])
11: 	by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
13: Received: from User (unknown [116.55.58.3])
14: 	by mwinf3604.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
15: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 116.55.58.3 ---> 3.58.55.116.broad.km.yn.dynamic.163data.com.cn

header:

01: Received: from saffronwalden.gov.uk (smtp.saffronwalden.gov.uk
02: [87.194.171.247])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: from User ([87.102.95.154]) by saffronwalden.gov.uk with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Tue, 15 Jun 2010 xx:xx:xx +0100

IP: 87.102.95.154 ---> static-87-102-95-154.karoo.KCOM.COM

header:

01: Received: from smtp28.orange.fr (smtp28.orange.fr [80.12.242.100])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2807.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2807.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (AAmiens-151-1-33-13.w83-192.abo.wanadoo.fr
11: [83.192.180.13])
12: 	by mwinf2807.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
13: 	Thu, 17 Jun 2010 xx:xx:xx +0200 (CEST)

header:

01: Received: from wp150.webpack.hosteurope.de (EHLO
02: wp150.webpack.hosteurope.de) [80.237.132.157]
03:   by mx0.gmx.net (mx118) with SMTP; 18 Jun 2010 xx:xx:xx +0200
04: Received: from [84.204.207.100] (helo=User); authenticated
05: 	by wp150.webpack.hosteurope.de running ExIM with esmtpa
06: 	ID: [ID filtered]

header:

01: Received: from wp150.webpack.hosteurope.de (EHLO
02: wp150.webpack.hosteurope.de) [80.237.132.157]
03:   by mx0.gmx.net (mx089) with SMTP; 18 Jun 2010 xx:xx:xx +0200
04: Received: from [84.204.207.100] (helo=User); authenticated
05: 	by wp150.webpack.hosteurope.de running ExIM with esmtpa
06: 	ID: [ID filtered]

IP: 84.204.207.100 ---> Peterstar Telecommunications, RU

header:

01: Received: from wjhqmw1.wicaksana.co.ID: [ID filtered]
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 21 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([68.174.38.211]) by wjhqmw1.wicaksana.co.ID: [ID filtered]
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Mon, 21 Jun 2010 xx:xx:xx +0700

IP: 68.174.38.211 ---> cpe-68-174-38-211.nj.res.rr.com

Muguphon: +234-709-236-7810 ---> Multi-links Telecommunications Ltd., Nigeria

gecracktes SquirrelMail:

header:

01: Received: from slcc781.piensasolutions.com (slcc781.piensasolutions.com
02: [217.76.150.225])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Mon, 21 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: from mail.manelartenflor.com (localhost.localdomain [127.0.0.1])
06: 	by slcc781.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 21 Jun 2010 xx:xx:xx +0200 (CEST)
08: Received: from 64.62.196.11
09:         by mail.manelartenflor.com with HTTP;
10:         Mon, 21 Jun 2010 xx:xx:xx +0200 (CEST)

Muguphon: +447014233167 ---> FleXtel Limited, UK

Mit Ironport gefiltert, für schlecht befunden und trotzdem ins Netz geblasen. Spricht für sehr kompetente Admins....

header:

01: Received: from mxtip01-zb1-out.um.umsystem.edu
02: (mxtip01-zb1-out.um.umsystem.edu [209.106.229.50])
03: 	(using TLSv1 with cipher RC4-SHA (128/128 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Mon, 21 Jun 2010 xx:xx:xx +0200 (CEST)
07: X-IronPort-Anti-Spam-Filtered: true
08: X-IronPort-Anti-Spam-Result:
09: AgOFAGV4H0zRauUp/2dsb2JhbACDHYI+ixgDao4YsRFsCpEfgSaBPw
10: X-Outbound-Filtered: BAD
11: Received: from um-nsmtpout1.um.umsystem.edu ([209.106.229.41])
12:   by mxtip01-mizzou-out.um.umsystem.edu with ESMTP; 21 Jun 2010 xx:xx:xx
13: -0500
14: Received: from um-nsmtpout1.um.umsystem.edu ([209.106.229.35]) by
15: um-nsmtpout1.um.umsystem.edu with Microsoft SMTPSVC(6.0.3790.4675);
16: 	 Mon, 21 Jun 2010 xx:xx:xx -0500
17: Received: from User ([41.190.90.35]) by um-nsmtpout1.um.umsystem.edu
18: with Microsoft SMTPSVC(6.0.3790.4675);
19: 	 Mon, 21 Jun 2010 xx:xx:xx -0500

IP: 41.190.90.35 --> Zain Communications Ltd., Ghana

Muguphon: +1 610 707 1503 ---> Mcimetro Access Transmission Services Llc

header:

01: Received: (qmail invoked by alias); 22 Jun 2010 xx:xx:xx -0000
02: Received: from pop3.pisp.net (EHLO pop3.pisp.net) [216.173.227.185]
03:   by mx0.gmx.net (mx014) with SMTP; 22 Jun 2010 xx:xx:xx +0200
04: Received: from User [41.215.160.134] by pop3.pisp.net with ESMTP
05:   (SMTPD-11.0) ID: [ID filtered]

IP: 41.215.160.134 ---> Millicom Ghana Limited/Tigo

Muguphon: +447031834144 ---> Magrathea Telecommunications Limited, UK

Mugufax: +447031897205 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mail186.messagelabs.com (mail186.messagelabs.com
02: [85.158.138.131])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 23 Jun 2010 xx:xx:xx +0200 (CEST)
05: X-VirusChecked: Checked
06: X-Env-Sender: engrabubakar1 [at] yahoo.co.jp
07: X-Msg-Ref: server-9.tower-186.messagelabs.com!1277245995!46889908!1
08: X-StarScan-Version: 6.2.4; banners=.,-,-
09: X-Originating-IP: [79.123.15.194]
10: Received: (qmail 32047 invoked from network); 22 Jun 2010 xx:xx:xx -0000
11: Received: from 194.15.123.79.in-addr.arpa (HELO
12: cooperdc02.CooperandTurner.local) (79.123.15.194)
13:   by server-9.tower-186.messagelabs.com with SMTP; 22 Jun 2010 xx:xx:xx
14: -0000
15: Received: from User ([82.128.87.72]) by cooperdc02.CooperandTurner.local
16: with Microsoft SMTPSVC(6.0.3790.4675);
17: 	 Tue, 22 Jun 2010 xx:xx:xx +0100

IP: 82.128.87.72 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +234-807-054-0659 ---> Globacom Ltd., Nigeria

- kjz

Hinten anstellen müssen sich:

Tja, da wurde wohl M. K. der Account gecrackt:

header:

01: Received: from mout4.freenet.de (EHLO mout4.freenet.de) [195.4.92.94]
02:   by mx0.gmx.net (mx007) with SMTP; 22 Jun 2010 xx:xx:xx +0200
03: Received: from [195.4.92.23] (helo=13.mx.freenet.de)
04: 	by mout4.freenet.de with esmtpa (ID: [ID filtered]
05: (port 25) (Exim 4.72 #3)
06: 	ID: [ID filtered]
07: Received: from [41.217.65.13] (port=34462 helo=User)
08: 	by 13.mx.freenet.de with esmtpa (ID: [ID filtered]
09: (port 587) (Exim 4.72 #3)
10: 	ID: [ID filtered]

IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +229-96001027 ---> mobile number, Benin

gecracktes SquirrelMail:

header:

01: Received: from smtp.netsonic.fi (smtp.netsonic.fi [194.29.192.26])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 23 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: from webmail.netsonic.fi (unknown [194.29.192.211])
05: 	by smtp.netsonic.fi (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 23 Jun 2010 xx:xx:xx +0300 (EEST)
07: Received: from 216.46.204.15 (proxying for 82.128.16.158)
08:         (SquirrelMail authenticated user reitti07)
09:         by webmail.netsonic.fi with HTTP;
10:         Wed, 23 Jun 2010 xx:xx:xx +0300 (EEST)

IP: 82.128.16.158 ---> ml82.128.16.158.multilinks.com, Nigeria

- kjz

Ind die unendliche Reihe möchten sich gerne drängeln:

Hatte ich schon Freeserve gaaaanz zufällig mal erwähnt.....

header:

01: Received: from smtp5.freeserve.com (EHLO smtp5.freeserve.com)
02: [193.252.22.152]
03:   by mx0.gmx.net (mx111) with SMTP; 23 Jun 2010 xx:xx:xx +0200
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Wed, 23 Jun 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Wed, 23 Jun 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (unknown [41.215.160.133])
11: 	by mwinf3422.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Wed, 23 Jun 2010 xx:xx:xx +0200 (CEST)

IP: 41.215.160.133 ---> Millicom Ghana Limited/Tigo

- kjz

Natürlich ist hier noch lange nicht Schluß:

gecracktes Horde und: angeblich Ghana, verschickt aus Nigeria....

header:

01: Received: from mensagens.al.mt.gov.br (microcpd.al.mt.gov.br
02: [200.252.51.133])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 26 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: by mensagens.al.mt.gov.br (Postfix, from userID: [ID filtered]
06: 	ID: [ID filtered]
07: Received: from ml82.128.6.105.multilinks.com (ml82.128.6.105.multilinks.com
08: 	[82.128.6.105]) by webmail.al.mt.gov.br (Horde MIME library) with HTTP;
09: 	Tue, 22 Jun 2010 xx:xx:xx +0300

header:

01: Received: from mensagens.al.mt.gov.br (microcpd.al.mt.gov.br
02: [200.252.51.133])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 26 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: by mensagens.al.mt.gov.br (Postfix, from userID: [ID filtered]
06: 	ID: [ID filtered]
07: Received: from ml82.128.6.105.multilinks.com (ml82.128.6.105.multilinks.com
08: 	[82.128.6.105]) by webmail.al.mt.gov.br (Horde MIME library) with HTTP;
09: 	Tue, 22 Jun 2010 xx:xx:xx +0300

header:

01: Received: from mensagens.al.mt.gov.br (microcpd.al.mt.gov.br
02: [200.252.51.133])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 26 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: by mensagens.al.mt.gov.br (Postfix, from userID: [ID filtered]
06: 	ID: [ID filtered]
07: Received: from ml82.128.7.170.multilinks.com (ml82.128.7.170.multilinks.com
08: 	[82.128.7.170]) by webmail.al.mt.gov.br (Horde MIME library) with HTTP;
09: 	Thu, 24 Jun 2010 xx:xx:xx +0300

IP: 82.128.6.105 ---> Multilinks, Nigeria

header:

01: Received: from n122z135l174.bb122100.ctm.net
02: (n122z196l57.bb122100.ctm.net [122.100.196.57])
03: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
04: 	Sat, 26 Jun 2010 xx:xx:xx -0400 (EDT)
05: Received: from 122.100.196.57 by mx2.nokia.com; Sat, 26 Jun 2010
06: xx:xx:xx +0800

header:

01: Received: from mail169.messagelabs.com (mail169.messagelabs.com
02: [85.158.138.179])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 26 Jun 2010 xx:xx:xx +0200 (CEST)
05: Received: (qmail 7554 invoked from network); 26 Jun 2010 xx:xx:xx -0000
06: Received: from ip-87-83-220-55.easynet.co.uk (HELO
07: smcplc02.smcgroupplc.local) (87.83.220.55)
08:   by server-8.tower-169.messagelabs.com with SMTP; 26 Jun 2010 xx:xx:xx
09: -0000
10: Received: from User ([196.206.236.128]) by smcplc02.smcgroupplc.local
11: with Microsoft SMTPSVC(6.0.3790.4675);
12: 	 Sat, 26 Jun 2010 xx:xx:xx +0100

IP: 196.206.236.128 ---> static196-128-236-206-196.adsl196-8.iam.net.ma

Verschickt aus Nigeria, Muguphon in Benin. Scheint bei den Mugu-Boyz zu einer immer beliebteren Masche zu werden.

header:

01: Received: from smtp-12.star.net.uk (smtp-12.star.net.uk [212.125.75.81])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 26 Jun 2010 xx:xx:xx +0200 (CEST)
04: Received: (qmail 25664 invoked from network); 26 Jun 2010 xx:xx:xx -0000
05: Received: from unknown (HELO asianartinlondon.com) (89.206.197.178)
06:   by smtp-12.star.net.uk with SMTP; 26 Jun 2010 xx:xx:xx -0000
07: Received: from User ([82.128.4.81]) by asianartinlondon.com with
08: Microsoft SMTPSVC(6.0.3790.4675);
09: 	 Sat, 26 Jun 2010 xx:xx:xx +0100

IP: 82.128.4.81 ---> ml82.128.4.81.multilinks.com, Nigeria

Muguphon: +229-9980-6969 ---> mobile number, Benin

Muguphon: +44-762-410-3670 ---> Manx Telecom

header:

01: Received: from public.ceibs.edu (mailsh.ceibs.edu [210.13.127.231])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 27 Jun 2010 xx:xx:xx +0200 (CEST)
04: Message-ID: [ID filtered]
05: X-IronPort-AV: E=Sophos;i="4.53,491,1272816000";
06:    d="scan'208";a="10351706"
07: Received: from 58.108.161.99.optusnet.com.au (HELO User) ([58.108.161.99])
08:   by private.ceibs.edu with ESMTP; 27 Jun 2010 xx:xx:xx +0800

Muguphon: +234-803-624-0664 ---> MTN Nigeria Communications Ltd.

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen