+1-206 in solchen Mails ist gewöhnlich von K7, einem auch von Baitern gern genutzten Fax2Email-Dienst.Zitat:
Zitat von kjz1
Druckbare Version
+1-206 in solchen Mails ist gewöhnlich von K7, einem auch von Baitern gern genutzten Fax2Email-Dienst.Zitat:
Zitat von kjz1
mal wieder eine neue Form (die neue Zusammenwürfelung der Textbausteine kannte ich noch nicht):
Zitat:
________________________________
Van: Martin, Donna (CLARITY CONSULTANTS)
Verzonden: za 20-11-2010 10:12
Aan:
Onderwerp: Bitte bestätigen Sie/Proposal
Bitte bestätigen Sie/Proposal
ATTN,
Ein irakischer machte eine feste Anzahlung von $ 21,830,000.00 in meiner Bankfiliale und er starb mit seiner ganzen Familie hinterlässt keine nächsten Angehörigen, bin bereit zu teilen 50/50 mit Ihnen, wenn Sie sich entscheiden, wie mein verstorbener Kunde nächsten Angehörigen zu stehen,dann bitte melden sie zu mir sofort mit den folgenden Informationen für weitere Details.
1, Name und Vorname/Alter
2, Adresse
3, Tel. Nummer
4, Private Faxnummer
Gerne informieren wir Sie, dass diese Transaktion legal wird eingerichtet werden, die
garantiert 100% sicher und risikolos sein, seien Sie versichert.
Warten auf Ihre freundliche Antwort.
Mit freundlichen Grüßen,
Zhang Jianguo
From Hong Kong
Bitte es ist wichtig, dass Sie wieder zu mir antworten über den unten E-Mail für weitere
Details.
Email;
Bitte beachten Sie, dass die oben Google-Übersetzung ist, können Sie wieder zu mir in Englisch antworten, wenn möglich bitte.
header:01: Received: from mail29.messagelabs.com (mail29.messagelabs.com [216.82.249.147])02: by xxx.xxx.xx (8.14.3/8.14.3/Debian-9) with SMTP ID: [ID filtered]03: for <poor [at] spamvictim.tld>; Sat, 20 Nov 2010 xx:xx:xx +010004: X-VirusChecked: Checked05: X-Env-Sender: Donna.Martin1 [at] bp.com06: X-Msg-Ref: server-3.tower-29.messagelabs.com!1290270955!87773572!107: X-StarScan-Version: 6.2.9; banners=-,-,-08: X-Originating-IP: [149.177.224.11]09: Received: (qmail 1539 invoked from network); 20 Nov 2010 xx:xx:xx -000010: Received: from unknown (HELO bp1xilav004.bp1.ad.bp.com) (149.177.224.11)11: by server-3.tower-29.messagelabs.com with SMTP; 20 Nov 2010 xx:xx:xx -000012: Received: from bp1xilex005.bp1.ad.bp.com ([149.177.224.15]) by13: bp1xilav004.bp1.ad.bp.com with Microsoft SMTPSVC(6.0.3790.3959);14: Sat, 20 Nov 2010 xx:xx:xx -060015: Received: from BP1XILEX011-C.bp1.ad.bp.com ([149.177.195.152]) by16: bp1xilex005.bp1.ad.bp.com with Microsoft SMTPSVC(6.0.3790.3959);17: Sat, 20 Nov 2010 xx:xx:xx -060018: X-MimeOLE: Produced By Microsoft Exchange V6.5
Ooops, da hat wohl jemand bei BP nicht aufgepasst und seinen Rechner für den Spamversand gespendet.
Als Mugu der Woche melden sich:
header:01: Received: from corinfoexc.wallsoutdoors.com (unknown [64.6.35.197])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 15 Nov 2010 xx:xx:xx +0100 (CET)04: Received: from corinfofes1.wallsoutdoors.com ([10.0.21.216]) by05: corinfoexc.wallsoutdoors.com with Microsoft SMTPSVC(6.0.3790.1830);06: Sun, 14 Nov 2010 xx:xx:xx -060007: Received: from User ([82.128.87.50]) by corinfofes1.wallsoutdoors.com08: with Microsoft SMTPSVC(6.0.3790.1830);09: Sun, 14 Nov 2010 xx:xx:xx -0600
IP: 82.128.87.50 ---> Multilinks Telecommunications Limited, Nigeria
gecracktes Horde:
header:01: Received: from ns1.sradns.com (EHLO ns1.sradns.com) [200.32.4.229]02: by mx0.gmx.net (mx109) with SMTP; 15 Nov 2010 xx:xx:xx +010003: Received: by ns1.sradns.com (Postfix, from userID: [ID filtered]04: ID: [ID filtered]05: Received: from 41.138.187.191 ([41.138.187.191]) by06: webmail.ledalumbrado.com (Horde MIME library) with HTTP; Sun, 14 Nov 201007: xx:xx:xx -0500
IP: 41.138.187.191 ---> Visafone Communications Limited, Nigeria
Muguphon: +447045768060 ---> Open Telecom International Ltd., UK
header:01: Received: from mail.mnc.com.cn (unknown [119.255.26.132])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Mon, 15 Nov 2010 xx:xx:xx +0100 (CET)06: Received: (qmail 15046 invoked by UID: [UID filtered]07: Received: from unknown (HELO User) (info [at] 82.128.5.35)08: by 0 with SMTP; 15 Nov 2010 xx:xx:xx -0000
IP: 82.128.5.35 ---> ml82.128.5.35.multilinks.com, Nigeria
wieder mal der ATT/Yahoo-Mugu:
header:01: Received: from web83813.mail.sp1.yahoo.com (web83813.mail.sp1.yahoo.com02: [69.147.85.89])03: by spammotel.com (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Mon, 15 Nov 2010 xx:xx:xx -0500 (EST)05: Received: (qmail 56935 invoked by UID: [UID filtered]06: Received: from [41.189.96.217] by web83813.mail.sp1.yahoo.com via HTTP;07: Mon, 15 Nov 2010 xx:xx:xx PST
IP: 41.189.96.217 ---> Alink, Cote D'Ivoire
X-RocketYMMF:
Und wieder der ATT/Yahoo-Mugu:
header:01: Received: from nm5-vm0.bullet.mail.sp2.yahoo.com02: (nm5-vm0.bullet.mail.sp2.yahoo.com [98.139.91.204])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Tue, 16 Nov 2010 xx:xx:xx +0100 (CET)05: Received: from [98.139.91.70] by nm5.bullet.mail.sp2.yahoo.com with06: NNFMP; 16 Nov 2010 xx:xx:xx -000007: Received: from [98.139.91.3] by tm10.bullet.mail.sp2.yahoo.com with08: NNFMP; 16 Nov 2010 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1003.mail.sp2.yahoo.com with NNFMP; 1610: Nov 2010 xx:xx:xx -000011: Received: (qmail 62307 invoked by UID: [UID filtered]12: Received: from [41.241.143.4] by web1209.biz.mail.gq1.yahoo.com via13: HTTP; Tue, 16 Nov 2010 xx:xx:xx PST
IP: 41.241.143.4 ---> dsl-241-143-04.telkomadsl.co.za
X-RocketYMMF:
Muguphon: +44-703-1740869 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from mail.jystudy.com (unknown [202.91.250.252])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 17 Nov 2010 xx:xx:xx +0100 (CET)04: Received: from User [211.162.103.141] by mail.jystudy.com with ESMTP05: (SMTPD-8.22) ID: [ID filtered]
IP: 211.162.103.141 ---> GWBN-DONGGUAN
Muguphon: +8613670681004 ---> China Mobile (GSM)
header:01: Received: from msa.hinet.net (220-128-143-177.HINET-IP.hinet.net02: [220.128.143.177])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 17 Nov 2010 xx:xx:xx +0100 (CET)05: Received: from User ([120.141.75.66]) by msa.hinet.net with Microsoft06: SMTPSVC(6.0.3790.1830);07: Tue, 16 Nov 2010 xx:xx:xx +0800
IP: 20.141.75.66 ---> P1NETWORKS, MY
gecrackter Mail-Account:
header:01: Received: from mail.icfcc.com (EHLO mail_gw.icfcc.com) [210.82.30.227]02: by mx0.gmx.net (mx075) with SMTP; 17 Nov 2010 xx:xx:xx +010003: Received: from User ([41.138.165.230])04: (authenticated bits=0)05: by mail_gw.icfcc.com with ESMTP ID: [ID filtered]06: Wed, 17 Nov 2010 xx:xx:xx +0800 (CST)07: (envelope-from alex [at] hestiacn.com)
header:01: Received: from mail.icfcc.com (EHLO mail_gw.icfcc.com) [210.82.30.227]02: by mx0.gmx.net (mx003) with SMTP; 17 Nov 2010 xx:xx:xx +010003: Received: from User ([41.138.168.25])04: (authenticated bits=0)05: by mail_gw.icfcc.com with ESMTP ID: [ID filtered]06: Wed, 17 Nov 2010 xx:xx:xx +0800 (CST)07: (envelope-from alex [at] hestiacn.com)
IP: 41.138.165.230 ---> Visafone Communications Limited, Nigeria
header:01: Received: from fmmailgate06.web.de (EHLO fmmailgate06.web.de)02: [217.72.192.247]03: by mx0.gmx.net (mx086) with SMTP; 18 Nov 2010 xx:xx:xx +010004: Received: from mwmweb043 ( [172.20.18.52])05: by fmmailgate06.web.de (Postfix) with ESMTP ID: [ID filtered]06: Thu, 18 Nov 2010 xx:xx:xx +0100 (CET)07: Received: from [82.128.58.114] by mwmweb043 with HTTP; Thu08: Nov 18 xx:xx:xx CET 2010
IP: 82.128.58.114 ---> Multilinks Telecommunications Limited, Nigeria
gecracktes SquirrelMail, dazu noch Schwarzhut OVH:
header:01: Received: from tubarao.alesc.sc.gov.br (tubarao.alesc.sc.gov.br02: [200.192.66.23])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 18 Nov 2010 xx:xx:xx +0100 (CET)05: X-IronPort-AV: E=Sophos;i="4.59,219,1288576800";06: d="scan'208";a="25553351"07: Received: from alesc.sc.gov.br ([200.192.66.2])08: by tubarao.alesc.sc.gov.br with ESMTP; 18 Nov 2010 xx:xx:xx -020009: Received: from alesc.sc.gov.br (localhost [127.0.0.1])10: by alesc.sc.gov.br (Postfix) with ESMTP ID: [ID filtered]11: Thu, 18 Nov 2010 xx:xx:xx -0300 (BRT)12: Received: from 91.121.170.3213: (SquirrelMail authenticated user poor [at] spamvictim.tld)14: by alesc.sc.gov.br with HTTP;15: Thu, 18 Nov 2010 xx:xx:xx -0200 (BRST)
IP: 91.121.170.32 ---> OVH, FR
Muguphon: +2348091425514 ---> EMTS, Nigeria/Etisalat
- kjz
Ein paar hätt' ich noch:
Dar ATT/Yahoo-Mugu:
header:01: Received: from smtp821.mail.ird.yahoo.com (smtp821.mail.ird.yahoo.com02: [217.146.188.236])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Mon, 15 Nov 2010 xx:xx:xx +0100 (CET)05: Received: (qmail 31865 invoked from network); 15 Nov 2010 xx:xx:xx -000006: Received: from User (generalpeterolu0 [at] 24.92.24.68 with login)07: by smtp821.mail.ird.yahoo.com with SMTP; 15 Nov 2010 xx:xx:xx08: +0000 GMT
IP: 24.92.2.68 ---> dt0a1n44.tampabay.res.rr.com
Muguphon: +234 7069641137 ---> MTN Nigeria Communications Ltd.
header:01: Received: from mail.chorotega.hn (unknown [190.4.61.237])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 19 Nov 2010 xx:xx:xx +0100 (CET)04: MIME-version: 1.005: Content-transfer-encoding: 7BIT06: Content-type: text/plain; CHARSET=US-ASCII07: Received: from User ([unknown] [82.128.6.86])08: by mail.chorotega.hn (Sun Java(tm) System Messaging Server 7.3-11.01 64bit09: (built Sep 1 2009)) with ESMTPA id10: <0LBQ000ST1X5OI90 [at] mail.chorotega.hn> for11: xxxxx; Thu, 11 Nov 2010 xx:xx:xx -0600 (CST)
IP: 82.128.6.86 ---> ml82.128.6.86.multilinks.com, Nigeria
Muguphon: +234-80-598-22741 ---> Globacom Ltd./Gloworld, Nigeria
header:01: Received: from unleeshedvm.nameservice.net.au (unknown [114.31.73.50])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sat, 20 Nov 2010 xx:xx:xx +0100 (CET)06: Received: from User (unknown [82.108.143.194])07: by unleeshedvm.nameservice.net.au (Postfix) with ESMTP ID: [ID filtered]08: Fri, 19 Nov 2010 xx:xx:xx +1100 (EST)
IP: 82.108.143.194 ---> Easynet Network, UK
gecracktes SquirrelMail:
header:01: Received: from mx.wifi7.com (EHLO mx.wifi7.com) [74.218.24.5]02: by mx0.gmx.net (mx089) with SMTP; 19 Nov 2010 xx:xx:xx +010003: Received: (qmail 22061 invoked by UID: [UID filtered]04: Received: from unknown (HELO mail.wifi7.com) (127.0.0.1)05: by mx.wifi7.com with SMTP; 19 Nov 2010 xx:xx:xx -000006: Received: from 188.28.245.5207: (SquirrelMail authenticated user poor [at] spamvictim.tld)08: by mail.wifi7.com with HTTP;09: Fri, 19 Nov 2010 xx:xx:xx -0500
IP: 188.28.245.52 ---> 188.28.245.52.threembb.co.uk/Hutchison 3G UK Ltd
gcracktes SquirrelMail:
header:01: Received: from smtp.potsdam.edu (smtp.potsdam.edu [137.143.110.104])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Sun, 21 Nov 2010 xx:xx:xx +0100 (CET)04: Received: (qmail 20849 invoked from network); 21 Nov 2010 xx:xx:xx -000005: Received: from localhost (127.0.0.1)06: by smtp.potsdam.edu with SMTP; 21 Nov 2010 xx:xx:xx -000007: X-Virus-Scanned: SUNY Potsdam (amavisd-new)08: Received: from smtp.potsdam.edu ([127.0.0.1])09: by localhost (slugz.potsdam.edu [127.0.0.1]) (amavisd-new, port 10024)10: with SMTP ID: [ID filtered]11: Sun, 21 Nov 2010 xx:xx:xx -0500 (EST)12: Received: (qmail 2365 invoked from network); 21 Nov 2010 xx:xx:xx -000013: Received: (ofmipd 127.0.0.1); 21 Nov 2010 xx:xx:xx -000014: Received: (qmail 1588 invoked from network); 21 Nov 2010 xx:xx:xx -050015: Received: from bearmail.potsdam.edu (137.143.104.65)16: by smtp.potsdam.edu with SMTP; 21 Nov 2010 xx:xx:xx -050017: Received: from 85.17.173.918: (SquirrelMail authenticated user dinasjj194)19: by bearmail.potsdam.edu with HTTP;20: Sun, 21 Nov 2010 xx:xx:xx -0500
IP: 85.17.173.9 ---> hosted-by.leaseweb.com
header:01: Received: from mail-smtp.hcmc.netnam.vn (EHLO hcmc.netnam.vn)02: [202.151.175.18]03: by mx0.gmx.net (mx043) with SMTP; 21 Nov 2010 xx:xx:xx +010004: Received: from User (unknown [202.109.133.181])05: by mta18.hcmc.netnam.vn (Postfix) with SMTP ID: [ID filtered]06: Sun, 21 Nov 2010 xx:xx:xx +0700 (ICT)
IP: 202.109.133.181 ---> CHINANET Jiangxi
Muguphon: +234 8063-542-128 ---> MTN Nigeria Communications Ltd.
gecrackter Account (die Mail war leer, die Ratware hatte den gesamten Text ins Subject gepackt):
header:01: Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sun, 21 Nov 2010 xx:xx:xx +0100 (CET)06: Received: from [195.4.92.26] (helo=16.mx.freenet.de)07: by mout1.freenet.de with esmtpa (ID: [ID filtered]08: (Exim 4.72 #3)09: ID: [ID filtered]10: Received: from [41.138.176.127] (port=65189 helo=User)11: by 16.mx.freenet.de with esmtpa (ID: [ID filtered]12: (Exim 4.72 #3)13: ID: [ID filtered]
IP: 41.138.176.127 ---> Visafone Communications Limited, Nigeria
- kjz
kam heute reingeflattert...
header:01: Return-path: <anthroney [at] empire.net.ua>02: Delivery-date: Wed, 24 Nov 2010 xx:xx:xx +010003: Received: from [195.4.92.15] (helo=5.mx.freenet.de)04: by 0.mbox7.freenet.de with esmtpa (ID: [ID filtered]05: ID: [ID filtered]06: for poor [at] spamvictim.tld; Wed, 24 Nov 2010 xx:xx:xx +010007: Received: from mail.empire.net.ua ([195.69.86.195]:53949 helo=empire.net.ua)08: by 5.mx.freenet.de with esmtp (port 25) (Exim 4.72 #3)09: ID: [ID filtered]10: for poor [at] spamvictim.tld; Wed, 24 Nov 2010 xx:xx:xx +010011: Received: from [41.202.70.51] (account anthroney [at] empire.net.ua)12: by empire.net.ua (CommuniGate Pro WEBUSER 5.1.12)13: with HTTP ID: [ID filtered]14: From: "acuba" <anthony_a2009 [at] yahoo.com>15: Subject: From Anthony and Morine Acuba16: X-Mailer: CommuniGate Pro WebUser v5.1.1217: Date: Wed, 24 Nov 2010 xx:xx:xx +010018: Message-ID: [ID filtered]19: MIME-Version: 1.020: Content-Type: text/plain;charset=utf-8;format="flowed"21: Content-Transfer-Encoding: 8bitFalls jemand da anrufen will: 00225 66326884Zitat:
HOW ARE YOU TODAY?
Anthony and Morine Acuba
Abidjan, Cote D'Ivoire,
West Africa
Tel:00225 66 32 68 84
Dearest,
Permit me to inform you of my desire of going into business
relationship with you. please I need a reputable and trust-worthy
person that can help me to transfer this money out of this country. I
am Anthony and my sister name is Morine the children of the late
DR.Michael Acuba.
Our father was a very wealthy Gold Merchant in Monrovia the Gold
Capital of Liberia, he was poisoned to death by his business
associates on one of their outings on a business trip. Our mother died
after the birth of my junior sister and since then our father took us
so special. Before the death of our father. He secretly called me to
his bedside and told me that he has the sum of US$9 million dollars
(NINE MILLION UNITED STATE DOLLARS) which he deposited with a bank in
cote divoire, He also explained to me that it is because of this
wealth that he was poisoned by his business associates that i should
seek a foriegn partner in a country of my choice where we will
transfer this money and use it for investment purpose such as real
estate management.
We are honestly seeking for your assistace in the following ways.
1.To stand as the beneficiary of this funds since am 19 and my sister
is 17 years.
2.To make arrangement for us to come over to your countryto further
our education and to secure Residence permit in your country for us.
3.To assist us transfer the money from the bank of Ivory Coast to your
account in your country as my late father foriegn partner and the
beneficiary of this money.
Please i want you to assure us that you will not betray us when this
fund enter your account over there.
Moreover, we are willing to offer you 20% of the total sum as
compensation for your assistance after the successful transfer of
this fund into your nominated account. I believe that this transfer
will be concluded within 3 working days, as soon as you contact the
bank were the money is deposited i assure you there is no risk
involve, your roll is to act as the beneficiary of the money and it
will easy the transfer of the total money to your account.
Call us at 00225 66326884 for more explanation please.
Best Regards,
Anthony and Morine Acuba.
oder mailen:
Heute wieder derselbe Müll, nur mit einer anderen E-Mailadresse:
header:über E-Mails freut sich Anthony01: Return-path: <anthony_acuba2007 [at] yahoo.fr>02: Delivery-date: Thu, 25 Nov 2010 xx:xx:xx +010003: Received: from [195.4.92.17] (helo=7.mx.freenet.de)04: by 0.mbox7.freenet.de with esmtpa (ID: [ID filtered]05: ID: [ID filtered]06: for poor [at] spamvictim.tld; Thu, 25 Nov 2010 xx:xx:xx +010007: Received: from nm2-vm0.bullet.mail.ukl.yahoo.com ([217.146.183.226]:21699)08: by 7.mx.freenet.de with smtp (port 25) (Exim 4.72 #3)09: ID: [ID filtered]10: for poor [at] spamvictim.tld; Thu, 25 Nov 2010 xx:xx:xx +010011: Received: from [217.146.183.214] by nm2.bullet.mail.ukl.yahoo.com with NNFMP;12: 25 Nov 2010 xx:xx:xx -000013: Received: from [217.146.183.166] by tm7.bullet.mail.ukl.yahoo.com with NNFMP;14: 25 Nov 2010 xx:xx:xx -000015: Received: from [127.0.0.1] by omp1007.mail.ukl.yahoo.com with NNFMP; 25 Nov16: 2010 xx:xx:xx -000017: X-Yahoo-Newman-Property: ymail-318: X-Yahoo-Newman-ID: [ID filtered]19: Received: (qmail 43350 invoked by UID: [UID filtered]20: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=xxx;21: bh=xxx=;22: h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-23: ype; b=xxxxx=24: DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;25: s=s1024; d=yahoo.fr;26: h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content27: Type;28: b=xxxx29: FPrk=;30: Message-ID: [ID filtered]31: X-YMail-OSG: xxxx32: Received: from [213.136.119.28] by web28102.mail.ukl.yahoo.com via HTTP; Thu,33: 25 Nov 2010 xx:xx:xx GMT34: X-Mailer: YahooMailClassic/11.4.9 YahooMailWebService/0.8.107.28525935: Date: Thu, 25 Nov 2010 xx:xx:xx +0000 (GMT)36: From: Anthony Acuba <anthony_acuba2007 [at] yahoo.fr>37: Reply-To: anthony_acuba2010 [at] yahoo.fr38: Subject: HOW ARE YOU TODAY?39: To: undisclosed recipients: ;40: MIME-Version: 1.041: Content-Type: multipart/alternative; boundary="0-21151123-1290675261=:43331"42: X-Warning: yahoo.fr is listed at postmaster.rfc-ignorant.org43: X-Warning: yahoo.fr is listed at abuse.rfc-ignorant.org
Anrufen kann man ihn auch: 00225/66326884
Welchen Mugu hätten's denn gern?
gecracktes SquirrelMail:
header:01: Received: from mta03.eastlink.ca (EHLO mta03.eastlink.ca) [24.224.136.9]02: by mx0.gmx.net (mx047) with SMTP; 22 Nov 2010 xx:xx:xx +010003: Received: from ip04.eastlink.ca ([unknown] [24.222.39.52])04: by mta03.eastlink.ca (Sun Java(tm) System Messaging Server 7.3-11.01 64bit05: (built Sep 1 2009)) with ESMTP ID: [ID filtered]06: xxxxx; Sun, 21 Nov 2010 xx:xx:xx -0400 (AST)07: Received: from mail.amtelecom.net ([67.58.192.15])08: by ip04.eastlink.ca with ESMTP; Sun, 21 Nov 2010 xx:xx:xx -040009: Received: (qmail 16222 invoked from network); Mon, 22 Nov 2010 xx:xx:xx10: +000011: Received: from localhost (HELO mail.amtelecom.net) ([127.0.0.1])12: (envelope-sender <gecapital [at] amtelecom.net>)13: by mail.amtelecom.net (qmail-ldap-1.03) with SMTP for xxxxx; Mon,14: 22 Nov 2010 xx:xx:xx +000015: Received: from 173.203.109.245 (proxying for 41.206.12.2)16: (SquirrelMail authenticated user newine) by mail.amtelecom.net with17: HTTP; Sun,18: 21 Nov 2010 xx:xx:xx -0500 (EST)
IP: 41.206.12.2 ---> 41.206.12.2.vgccl.net, MTN, Nigeria
der Yahoo/ATT-Mugu:
header:01: Received: from nm19-vm1.bullet.mail.sp2.yahoo.com (HELO02: nm19-vm1.bullet.mail.sp2.yahoo.com) [98.139.91.217]03: by mx0.gmx.net (mx045) with SMTP; 23 Nov 2010 xx:xx:xx +010004: Received: from [98.139.91.67] by nm19.bullet.mail.sp2.yahoo.com with05: NNFMP; 23 Nov 2010 xx:xx:xx -000006: Received: from [98.139.91.57] by tm7.bullet.mail.sp2.yahoo.com with07: NNFMP; 23 Nov 2010 xx:xx:xx -000008: Received: from [127.0.0.1] by omp1057.mail.sp2.yahoo.com with NNFMP; 2309: Nov 2010 xx:xx:xx -000010: Received: (qmail 77649 invoked by UID: [UID filtered]11: Received: from [196.215.55.83] by web83702.mail.sp1.yahoo.com via HTTP;12: Tue, 23 Nov 2010 xx:xx:xx PST
IP: 196.215.55.83 ---> 196-215-55-83.dynamic.isadsl.co.za
header:01: Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.47])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 24 Nov 2010 xx:xx:xx +0100 (CET)04: Received: from me-wanadoo.net (localhost [127.0.0.1])05: by mwinf2107.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]06: Wed, 24 Nov 2010 xx:xx:xx +0100 (CET)07: Received: from me-wanadoo.net (localhost [127.0.0.1])08: by mwinf2107.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]09: Wed, 24 Nov 2010 xx:xx:xx +0100 (CET)10: Received: from User (ABordeaux-553-1-12-53.w86-221.abo.wanadoo.fr11: [86.221.72.53])12: by mwinf2107.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]13: Wed, 24 Nov 2010 xx:xx:xx +0100 (CET)
header:01: Received: from smtp1.intermax.nl (smtp1.intermax.nl [80.95.160.30])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 24 Nov 2010 xx:xx:xx +0100 (CET)06: Received: from User (unknown [212.179.133.6])07: by smtp1.intermax.nl (Postfix) with ESMTPA ID: [ID filtered]08: Wed, 24 Nov 2010 xx:xx:xx +0100 (CET)
IP: 212.179.133.6 ---> bzq-179-133-6.static.bezeqint.net
Muguphon: +447024012819 ---> Magrathea Telecommunications Limited, UK
Und wieder der Yahoo/ATT/Sternchen-Mugu (oder verkauft da ein Russki 'Mugu-Spamming-Kits'?):
header:01: Received: from nm26-vm1.bullet.mail.ac4.yahoo.com02: (nm26-vm1.bullet.mail.ac4.yahoo.com [98.139.52.243])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Fri, 26 Nov 2010 xx:xx:xx +0100 (CET)05: Received: from [98.139.52.188] by nm26.bullet.mail.ac4.yahoo.com with06: NNFMP; 26 Nov 2010 xx:xx:xx -000007: Received: from [74.6.228.35] by tm1.bullet.mail.ac4.yahoo.com with08: NNFMP; 26 Nov 2010 xx:xx:xx -000009: Received: from [127.0.0.1] by smtp104.mail.ac4.yahoo.com with NNFMP; 2610: Nov 2010 xx:xx:xx -000011: Received: from User (johnadamxl [at] 82.128.84.201 with login)12: by smtp104.mail.ac4.yahoo.com with SMTP; 25 Nov 2010 xx:xx:xx13: -0800 PST
IP: 82.128.84.201 ---> Multilinks Telecommunications Limited, Nigeria
Zitat:
*/US AMBASSADOR TO NIGERIA/*//
*/11 GARIK ROAD ABUJA/*//
*/ABUJA, NIGERIA/*//
*//*//
*/ATTN:/*//
*//*//
header:01: Received: from mail.municipio-pma.gob.pa (EHLO02: zimbra.municipio-pma.gob.pa) [190.34.191.36]03: by mx0.gmx.net (mx066) with SMTP; 26 Nov 2010 xx:xx:xx +010004: Received: from localhost (localhost.localdomain [127.0.0.1])05: by zimbra.municipio-pma.gob.pa (Postfix) with ESMTP ID: [ID filtered]06: Fri, 26 Nov 2010 xx:xx:xx -0500 (EST)07: X-Virus-Scanned: amavisd-new at zimbra.municipio-pma.gob.pa08: Received: from zimbra.municipio-pma.gob.pa ([127.0.0.1])09: by localhost (zimbra.municipio-pma.gob.pa [127.0.0.1]) (amavisd-new,10: port 10024)11: with ESMTP ID: [ID filtered]12: Received: from zimbra.municipio-pma.gob.pa (zimbra.municipio-pma.gob.pa13: [172.16.32.212])14: by zimbra.municipio-pma.gob.pa (Postfix) with ESMTP ID: [ID filtered]15: Fri, 26 Nov 2010 xx:xx:xx -0500 (EST)
- kjz
Noch mehr Mugus im Angebot:
gecracktes SquirrelMail:
header:01: Received: from mx1.bloomingdaletel.com (EHLO bloomingdaletel.com)02: [12.177.5.9]03: by mx0.gmx.net (mx035) with SMTP; 25 Nov 2010 xx:xx:xx +010004: Received: from webmail.bloomingdaletel.com (localhost.localdomain05: [127.0.0.1])06: by localhost.localdomain (8.12.11/8.12.11) with ESMTP ID: [ID filtered]07: Thu, 25 Nov 2010 xx:xx:xx -050008: Received: from 217.112.36.18609: (SquirrelMail authenticated user pc911)10: by webmail.bloomingdaletel.com with HTTP;11: Thu, 25 Nov 2010 xx:xx:xx -0500 (EST)
IP: 217.112.36.186 ---> cofounder.ru/Utransit Net
header:01: Received: from mail.wallan.com (EHLO wallan-dc02.wallan.com)02: [212.12.177.198]03: by mx0.gmx.net (mx080) with SMTP; 26 Nov 2010 xx:xx:xx +010004: Received: from User ([82.128.82.245]) by wallan-dc02.wallan.com with05: Microsoft SMTPSVC(6.0.3790.4675);06: Fri, 26 Nov 2010 xx:xx:xx +0300
IP: 82.128.82.245 ---> Multilinks Telecommunications Limited, Nigeria
header:01: Received: from MAFP.mafirm.local (mail.mcnamaraandaustin.com [74.2.87.8])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 27 Nov 2010 xx:xx:xx +0100 (CET)04: Received: from User ([184.106.145.182]) by MAFP.mafirm.local with05: Microsoft SMTPSVC(6.0.3790.1830);06: Fri, 26 Nov 2010 xx:xx:xx -0600
IP: 184.106.145.182 ---> 184-106-145-182.static.cloud-ips.com
Immer wieder toll, wie hirnlos manche Admins sein können: klar vom Filter als Spam erkannt und trotzdem weiter in die weite Welt hinausgeblasen. Da kann ich nur sagen: setzen, sechs!
header:01: Received: from mail.johnsonandlambeth.com (mail.johnsonandlambeth.com02: [24.106.213.162])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sat, 27 Nov 2010 xx:xx:xx +0100 (CET)05: X-Antispam: YES; (PHISHING); Spamcatcher 6.1.5. Score 9906: X-AVG-Antispam-Info: 99,13.4,0,5077a091554d9d55,d41d8cd98f00b204,07: mrsmarianusmann [at] gmail.com,,08: RULES_HIT:355:379:387:481:539:540:541:542:543:567:581:800:945:946:969:970:973:988:989:1109: 5:1260:1277:1311:1313:1314:1345:1437:1515:1516:1518:1535:1544:1587:1593:1594:1605:1653:1711:1710: 0:1747:1766:1792:2073:2076:2194:2199:2377:2393:2540:2553:2559:2562:2693:2741:2894:2917:3622:3611: 6:3653:3740:3742:3865:3866:3867:3868:3869:3870:3871:3872:3873:3874:4031:4321:4552:4605:5007:6112: 9:7464:7514:7773:7774:7775:7809:7903:7940:7980:8525:8797:8896:8898:8910:8933:8948:8949:9040:9113: 8:9121:9151:9413:9938:10014:10020,14: 0,RBL:82.128.89.2:@gmail.com:.lbl8.mailshell.net-62.26.173.17715: 64.102.201.201,16: CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,17: SPF:ft,MSBL:none,DNSBL:none,18: Custom_rules:0:25:019: Subject: [SPAM] Dear Beloved!!20: Received: from User ([82.128.89.2]) by mail.johnsonandlambeth.com with21: Microsoft SMTPSVC(6.0.3790.4675);22: Fri, 26 Nov 2010 xx:xx:xx -0500
IP: 82.128.89.2 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +44702406913 ---> Magrathea Telecommunications Limited, UK
Spamadoo auch wieder dabei:
header:01: Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.27])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 27 Nov 2010 xx:xx:xx +0100 (CET)04: Received: from me-wanadoo.net (localhost [127.0.0.1])05: by mwinf2012.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]06: Sat, 27 Nov 2010 xx:xx:xx +0100 (CET)07: Received: from me-wanadoo.net (localhost [127.0.0.1])08: by mwinf2012.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]09: Sat, 27 Nov 2010 xx:xx:xx +0100 (CET)10: Received: from User (AMontpellier-156-1-21-195.w90-0.abo.wanadoo.fr11: [90.0.52.195])12: by mwinf2012.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]13: Sat, 27 Nov 2010 xx:xx:xx +0100 (CET)
X-ME-User-Auth:
header:01: Received: from rev.opentransfer.com.87.242.83.173.in-addr.arpa (EHLO02: mx4.hotmail.com) [173.83.242.87]03: by mx0.gmx.net (mx021) with SMTP; 28 Nov 2010 xx:xx:xx +0100
Muguphon: +27738114086 ---> MTN, South Africa
- kjz
In der Abteilung Mugu der Woche melden sich:
header:01: Received: from mail.andec.com.ec ([127.0.0.1])02: by localhost (mail.andec.com.ec [127.0.0.1]) (amavisd-new, port 10024)03: with ESMTP ID: [ID filtered]04: Received: from User (unknown [115.164.163.1])05: by mail.andec.com.ec (Postfix) with ESMTPA ID: [ID filtered]06: Mon, 29 Nov 2010 xx:xx:xx -0500 (ECT)
IP: 115.164.163.1 ---> ---> DiGi Telecommunications Sdn Bhd, MY
header:01: Received: from 2.smtp.donpac.ru (EHLO donpac.ru) [80.254.111.90]02: by mx0.gmx.net (mx015) with SMTP; 29 Nov 2010 xx:xx:xx +010003: Received: from [41.138.181.234] (helo=User)04: by 2.smtp.donpac.ru with esmtpsa on port 46505: authenticated as login:jeka (TLSv1:AES256-SHA:256)06: (Exim 4.69)07: ID: [ID filtered]
IP: 41.138.181.234 ---> Visafone Communications Limited, Nigeria
Muguphon: +44-703-593-0772 ---> Open Telecom International Ltd., UK
Der Yahoo/ATT-Mugu:
header:01: Received: from omp1066.mail.ac4.yahoo.com (HELO02: omp1066.mail.ac4.yahoo.com) [98.139.52.183]03: by mx0.gmx.net (mx083) with SMTP; 29 Nov 2010 xx:xx:xx +010004: Received: (qmail 45158 invoked by UID: [UID filtered]05: Received: (qmail 21020 invoked from network); 29 Nov 2010 xx:xx:xx -000006: Received: from User (esywvd0000 [at] 41.132.88.33 with login)07: by smtp113.biz.mail.mud.yahoo.com with SMTP; 29 Nov 201008: xx:xx:xx -0800 PST
IP: 41.132.88.33 ---> 41-132-88-33.dsl.mweb.co.za
Muguphon: +27 86 541 8133 ---> premium rate number, South Africa
header:01: 2010 xx:xx:xx CET02: Received: from mail.atesa.es (mail.atesa.es [212.163.158.85])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Tue, 30 Nov 2010 xx:xx:xx (CET)05: Received: from User ([82.104.13.152] RDNS failed) by mail.atesa.es with06: Microsoft SMTPSVC(6.0.3790.3959);07: Tue, 30 Nov 2010 xx:xx:xx
IP: 82.104.13.152 ---> host152-13-static.104-82-b.business.telecomitalia.it
header:01: Received: from web65818.mail.ac4.yahoo.com (web65818.mail.ac4.yahoo.com02: [76.13.11.75])03: by spammotel.com (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Mon, 29 Nov 2010 xx:xx:xx -0500 (EST)05: Received: (qmail 6295 invoked by UID: [UID filtered]06: Received: from [199.48.177.102] by web65818.mail.ac4.yahoo.com via HTTP;07: Mon, 29 Nov 2010 xx:xx:xx PST
IP: 199.48.177.102 ---> Internex Solutions LLC
header:01: Received: from ch-smtp01.sth.basefarm.net (EHLO02: ch-smtp01.sth.basefarm.net) [80.76.149.212]03: by mx0.gmx.net (mx105) with SMTP; 30 Nov 2010 xx:xx:xx +010004: Received: from ch-vm-cpps01.sth.basefarm.net ([10.7.137.11]:34895)05: by ch-smtp01.sth.basefarm.net with esmtps (TLSv1:AES256-SHA:256)06: (Exim 4.71)07: (envelope-from <harry.lilja [at] comhem.se>)08: ID: [ID filtered]09: Received: from localhost ([127.0.0.1]:5528410: helo=ch-vm-cpps01.sth.basefarm.net)11: by ch-vm-cpps01.sth.basefarm.net with esmtp (Exim 4.71)12: (envelope-from <harry.lilja [at] comhem.se>)13: ID: [ID filtered]
Muguphon: +234 705-930-5797 ---> Globacom Ltd., Nigeria
gecrackter Uni-Account:
header:01: Received: from mail.maltepe.edu.tr (EHLO mail.maltepe.edu.tr)02: [193.255.156.170]03: by mx0.gmx.net (mx037) with SMTP; 30 Nov 2010 xx:xx:xx +010004: Received: from localhost (localhost.localdomain [127.0.0.1])05: by mail.maltepe.edu.tr (Postfix) with ESMTP ID: [ID filtered]06: Tue, 30 Nov 2010 xx:xx:xx +0200 (EET)07: X-Virus-Scanned: amavisd-new at maltepe.edu.tr08: Received: from mail.maltepe.edu.tr ([127.0.0.1])09: by localhost (mail.maltepe.edu.tr [127.0.0.1]) (amavisd-new, port 10024)10: with ESMTP ID: [ID filtered]11: Received: from mail.maltepe.edu.tr (mail.maltepe.edu.tr [10.1.1.85])12: by mail.maltepe.edu.tr (Postfix) with ESMTP ID: [ID filtered]13: Tue, 30 Nov 2010 xx:xx:xx +0200 (EET)
Muguphon: +447031827663 ---> Magrathea Telecommunications Limited, UK
gecrackter Uni-Account:
header:01: Received: from hermes.ic.edu (hermes.ic.edu [209.174.140.4])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 30 Nov 2010 xx:xx:xx +0100 (CET)
Muguphon: +234-705-447-0110 ---> Globacom Ltd., Nigeria
header:01: Received: from www.cumins.com (EHLO tex2k3.Supertex.local) [72.90.223.162]02: by mx0.gmx.net (mx110) with SMTP; 01 Dec 2010 xx:xx:xx +0100
Muguphon: +234-8165228533 ---> Nigeria
header:01: Received: (qmail invoked by alias); 01 Dec 2010 xx:xx:xx -000002: Received: from dns.asibi.jp (HELO asibi.jp) [210.175.225.233]03: by mx0.gmx.net (mx098) with SMTP; 01 Dec 2010 xx:xx:xx +010004: Received: (qmail 28918 invoked from network); 1 Dec 2010 xx:xx:xx +090005: X-Authentication: postmaster was authenticated by dns.asibi.jp06: at 1 Dec 2010 xx:xx:xx +090007: Received: from unknown (HELO User) (75.151.130.193)08: by dns.asibi.jp with SMTP; 1 Dec 2010 xx:xx:xx +0900
IP: 75.151.130.193 ---> 75-151-130-193-Philadelphia.hfc.comcastbusiness.net
header:01: Received: from www.ubnm.co.kr ([203.246.164.29])02: by mx.kundenserver.de (node=mxbap2) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from User ([195.117.61.5])06: (authenticated bits=0)07: by www.ubnm.co.kr (8.13.1/8.13.1) with ESMTP ID: [ID filtered]08: Thu, 2 Dec 2010 xx:xx:xx +0900
IP: 195.117.61.5 ---> Inter-sat R.Elak i K.Pawlikowski S.C., PL
Muguphon: +44-786-761-0993 ---> Vodafone Ltd., UK
Mugufax: +44-870-4958-176 ---> national rate number, UK
header:01: Received: from imr-da03.mx.aol.com (EHLO imr-da03.mx.aol.com)02: [205.188.105.145]03: by mx0.gmx.net (mx110) with SMTP; 02 Dec 2010 xx:xx:xx +010004: Received: from mtaout-ma06.r1000.mx.aol.com05: (mtaout-ma06.r1000.mx.aol.com [172.29.41.6])06: by imr-da03.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Thu, 2 Dec 2010 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from User (unknown [99.198.111.91])10: by mtaout-ma06.r1000.mx.aol.com (MUA/Third Party Client Interface) with11: ESMTPA ID: [ID filtered]12: Thu, 2 Dec 2010 xx:xx:xx -0500 (EST)
IP: 99.198.111.91 ---> dns2.servebyte.com
header:01: Received: from imr-db02.mx.aol.com (EHLO imr-db02.mx.aol.com)02: [205.188.91.96]03: by mx0.gmx.net (mx044) with SMTP; 02 Dec 2010 xx:xx:xx +010004: Received: from mtaout-ma06.r1000.mx.aol.com05: (mtaout-ma06.r1000.mx.aol.com [172.29.41.6])06: by imr-db02.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Thu, 2 Dec 2010 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from User (unknown [71.16.131.122])10: by mtaout-ma06.r1000.mx.aol.com (MUA/Third Party Client Interface) with11: ESMTPA ID: [ID filtered]12: Thu, 2 Dec 2010 xx:xx:xx -0500 (EST)
Muguphon: +2348185574425 ---> Nigeria
- kjz
Mooooment, es gibt noch Nachschlag.....
der Yahoo/ATT-Mugu:
header:01: Received: from nm22.bullet.mail.sp2.yahoo.com02: (nm22.bullet.mail.sp2.yahoo.com [98.139.91.92])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Tue, 30 Nov 2010 xx:xx:xx +0100 (CET)05: Received: from [98.139.91.66] by nm22.bullet.mail.sp2.yahoo.com with06: NNFMP; 30 Nov 2010 xx:xx:xx -000007: Received: from [98.139.91.27] by tm6.bullet.mail.sp2.yahoo.com with08: NNFMP; 30 Nov 2010 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1027.mail.sp2.yahoo.com with NNFMP; 3010: Nov 2010 xx:xx:xx -000011: Received: (qmail 85063 invoked by UID: [UID filtered]12: Received: from [41.217.65.11] by web83911.mail.sp1.yahoo.com via HTTP;13: Tue, 30 Nov 2010 xx:xx:xx PST
IP: 41.217.65.11 ---> ZOOM Mobile Nigeria Ltd.
X-RocketYMMF:
header:01: Received: from fmmailgate09.web.de (fmmailgate09.web.de [217.72.192.184])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 30 Nov 2010 xx:xx:xx +0100 (CET)04: Received: from fmmailgate07.web.de ( [172.20.1.53])05: by fmmailgate09.web.de (Postfix) with ESMTP ID: [ID filtered]06: Tue, 30 Nov 2010 xx:xx:xx +0100 (CET)07: Received: from mwmweb052 ( [172.20.18.61])08: by fmmailgate07.web.de (Postfix) with ESMTP ID: [ID filtered]09: Tue, 30 Nov 2010 xx:xx:xx +0100 (CET)10: Received: from [77.70.128.217] by mwmweb052 with HTTP; Tue11: Nov 30 xx:xx:xx CET 2010
IP: 77.70.128.217 ---> Comgeo Services, Lagos, Nigeria
Muguphon: +2348036642052 ---> MTN Nigeria Communications Ltd.
wieder mal ein gecrackter Account:
header:01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 2 Dec 2010 xx:xx:xx +0100 (CET)06: Received: from [195.4.92.11] (helo=1.mx.freenet.de)07: by mout0.freenet.de with esmtpa (ID: [ID filtered]08: (Exim 4.72 #3)09: ID: [ID filtered]10: Received: from [178.162.151.49] (port=3012 helo=User)11: by 1.mx.freenet.de with esmtpa (ID: [ID filtered]12: (Exim 4.72 #3)13: ID: [ID filtered]
IP: 178.162.151.49 ---> netdirekt e. K
header:01: Received: from ipmail05.adl6.internode.on.net02: (ipmail05.adl6.internode.on.net [150.101.137.143])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Fri, 3 Dec 2010 xx:xx:xx +0100 (CET)05: X-IronPort-Anti-Spam-Filtered: true06: X-IronPort-Anti-Spam-Result: Apv/ALLc+Ew7N/MTIWdsb2JhbACCN6EQARcKFQ07: X-IronPort-SPAM: SPAM08: Received: from 19.243.55.59.broad.ja.jx.dynamic.163data.com.cn (HELO09: User) ([59.55.243.19])10: by ipmail05.adl6.internode.on.net with ESMTP; 04 Dec 2010 xx:xx:xx +1030
Muguphon: +229-990-39002 ---> mobile number, Benin
- kjz
neue Meldungen von der 'Mugu-Front':
header:01: Received: from kirsi1.inet.fi (mta-out.inet.fi [195.156.147.13])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 6 Dec 2010 xx:xx:xx +0100 (CET)04: Received: from User (41.203.64.242) by kirsi1.inet.fi (8.5.122)05: (authenticated as kuivta-1)06: ID: [ID filtered]
IP: 41.203.64.242 ---> GLO-Mobile Network Services, Nigeria
header:01: Received: from bay0-omc2-s21.bay0.hotmail.com02: (bay0-omc2-s21.bay0.hotmail.com [65.54.190.96])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Mon, 6 Dec 2010 xx:xx:xx +0100 (CET)05: Received: from BAY130-W21 ([65.54.190.125]) by06: bay0-omc2-s21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);07: Mon, 6 Dec 2010 xx:xx:xx -0800
X-Originating-IP: [173.208.36.232] ---> Ubiquity/Nobis
gecrackter Freenet-Account:
header:01: Received: from mout4.freenet.de (mout4.freenet.de [195.4.92.94])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Mon, 6 Dec 2010 xx:xx:xx +0100 (CET)06: Received: from [195.4.92.17] (helo=7.mx.freenet.de)07: by mout4.freenet.de with esmtpa (ID: [ID filtered]08: (Exim 4.72 #3)09: ID: [ID filtered]10: Received: from [82.128.85.146] (port=50612 helo=User)11: by 7.mx.freenet.de with esmtpa (ID: [ID filtered]12: (Exim 4.72 #3)13: ID: [ID filtered]
IP: 82.128.85.146 ---> Multilinks Telecommunications Limited, Nigeria
gecrackter Schul-Account:
header:01: Received: from EXCH-ETS-1.vusd.org (exch-ets-1.vusd.org [206.78.7.157])02: (using TLSv1 with cipher AES128-SHA (128/128 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Tue, 7 Dec 2010 xx:xx:xx +0100 (CET)06: Received: from EXCH-JNL-1.vusd (10.33.120.13) by exch-ets-1.vusd.org07: (206.78.7.157) with Microsoft SMTP Server (TLS) ID: [ID filtered]08: Dec 201009: xx:xx:xx -080010: Received: from EXCH-MBC-1.vusd ([fe80::285a:2887:aae1:d7fe]) by11: EXCH-JNL-1.vusd ([::1]) with mapi; Tue, 7 Dec 2010 xx:xx:xx -0800
header:01: Received: from mail.dalkia.hu (mail.dalkia.hu [213.163.29.219])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 7 Dec 2010 xx:xx:xx +0100 (CET)04: Received: from User ([82.128.62.93]) by mail.dalkia.hu with Microsoft05: SMTPSVC(6.0.3790.4675);06: Tue, 7 Dec 2010 xx:xx:xx +0100
IP: 82.128.62.93 ---> Multilinks Telecommunications Limited, Nigeria
gecrackter Account:
header:01: Received: from mail.sibtea.ru (mail.sibtea.ru [195.189.218.251])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 9 Dec 2010 xx:xx:xx +0100 (CET)04: Received: from User ([41.203.64.241])05: (authenticated user larisa [at] sibtea.ru)06: by mail.sibtea.ru (Kerio MailServer 6.4.1 patch 1);07: Thu, 9 Dec 2010 xx:xx:xx +0600
IP: 41.203.64.241 ---> GLO-Mobile Network Services, Nigeria
gecrackter Account:
header:01: Received: from outbound-mail02.westnet.com.au (EHLO02: outbound-mail02.westnet.com.au) [203.10.1.243]03: by mx0.gmx.net (mx079) with SMTP; 09 Dec 2010 xx:xx:xx +010004: Received: from unknown (HELO webmail04.westnet.com.au) ([192.168.39.44])05: by outbound-mail02.westnet.com.au with ESMTP; 09 Dec 2010 xx:xx:xx +0800
- kjz
Kleiner Nachschlag:
header:01: Received: from mx-ll-58.147.89-7.static.tttmaxnet.com (EHLO02: mail.goldensoft.co.th) [58.147.89.7]03: by mx0.gmx.net (mx050) with SMTP; 10 Dec 2010 xx:xx:xx +010004: Received: from User ([82.128.16.199])05: by mail.goldensoft.co.th (IceWarp 9.1.0) with ASMTP ID: [ID filtered]06: Sat, 11 Dec 2010 xx:xx:xx +0700
IP: 82.128.16.199 ---> ml82.128.16.199.multilinks.com, Nigeria
header:01: Received: from sbs2005.sbsmenis.edu.pl (hbr68.internetdsl.tpnet.pl02: [79.187.43.68])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sat, 11 Dec 2010 xx:xx:xx +0100 (CET)05: Received: from User ([210.110.117.245]) by sbs2005.sbsmenis.edu.pl with06: Microsoft SMTPSVC(6.0.3790.4675);07: Wed, 1 Dec 2010 xx:xx:xx +0100
header:01: Received: from 58.108.172.9.optusnet.com.au (EHLO aveng.com.au)02: [58.108.172.9]03: by mx0.gmx.net (mx084) with SMTP; 12 Dec 2010 xx:xx:xx +010004: Received: from User ([76.164.192.14]) by aveng.com.au with Microsoft05: SMTPSVC(6.0.3790.4675);06: Mon, 13 Dec 2010 xx:xx:xx +1000
header:01: Received: from 58.108.172.9.optusnet.com.au (EHLO aveng.com.au)02: [58.108.172.9]03: by mx0.gmx.net (mx083) with SMTP; 12 Dec 2010 xx:xx:xx +010004: Received: from User ([76.164.192.14]) by aveng.com.au with Microsoft05: SMTPSVC(6.0.3790.4675);06: Mon, 13 Dec 2010 xx:xx:xx +1000
IP: 76.164.192.14 ---> 72.164.192.14.svservers.com
- kjz
So, da wären sie wieder...
header:01: Received: from aveng.com.au (58.108.172.9.optusnet.com.au [58.108.172.9])02: by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from User ([76.164.192.14]) by aveng.com.au with Microsoft06: SMTPSVC(6.0.3790.4675);07: Mon, 13 Dec 2010 xx:xx:xx +1000
IP: 76.164.192.14 ---> 72.164.192.14.svservers.com
header:01: Received: from mail.nsi.sg (dyn60-b59-access.superdsl.com.sg [202.73.59.60])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 14 Dec 2010 xx:xx:xx +0100 (CET)04: Received: from localhost (localhost [127.0.0.1])05: by mail.nsi.sg (Postfix) with ESMTP ID: [ID filtered]06: Mon, 13 Dec 2010 xx:xx:xx -0800 (PST)07: Received: from mail.nsi.sg ([127.0.0.1])08: by localhost (mail.nsi.sg [127.0.0.1]) (amavisd-new, port 10024)09: with ESMTP ID: [ID filtered]10: Received: from User (mpc1.materialsprocessing.com [209.23.159.50])11: by mail.nsi.sg (Postfix) with ESMTPA ID: [ID filtered]12: Mon, 13 Dec 2010 xx:xx:xx -0800 (PST)
header:01: Received: from nskntmtas05p.mx.bigpond.com (nskntmtas05p.mx.bigpond.com02: [61.9.168.149])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Tue, 14 Dec 2010 xx:xx:xx +0100 (CET)05: Received: from nskntotgx03p.mx.bigpond.com ([121.13.149.153])06: by nskntmtas05p.mx.bigpond.com with ESMTP07: id08: <20101214135100.BBEA24614.nskntmtas05p.mx.bigpond.com [at] nskntotgx03p.mx.bigpond.com>;09: Tue, 14 Dec 2010 xx:xx:xx +000010: Received: from User ([121.13.149.153]) by nskntotgx03p.mx.bigpond.com11: with ESMTP12: ID: [ID filtered]13: Tue, 14 Dec 2010 xx:xx:xx +0000
IP: 121.13.149.153 ---> CHINANET Guangdong
header:01: Received: from web121405.mail.ne1.yahoo.com (HELO02: web121405.mail.ne1.yahoo.com) [98.138.90.99]03: by mx0.gmx.net (mx036) with SMTP; 15 Dec 2010 xx:xx:xx +010004: Received: (qmail 47541 invoked by UID: [UID filtered]05: Received: from [41.216.40.128] by web121405.mail.ne1.yahoo.com via HTTP;06: Wed, 15 Dec 2010 xx:xx:xx PST
IP: 41.216.40.128 ---> BENIN TELECOM
header:01: Received: from hq-smtp-01.mofa.gov.qa (mail1.mofa.gov.qa [206.82.133.222])02: (using TLSv1 with cipher RC4-MD5 (128/128 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 16 Dec 2010 xx:xx:xx +0100 (CET)06: Received: from exchange.MOFA.LOCAL (172.16.50.151) by hq-smtp-01.mofa.gov.qa07: (172.31.1.10) with Microsoft SMTP Server ID: [ID filtered]08: xx:xx:xx +0300
header:01: Received: from Static-IP-cr19084237250.cable.net.co (EHLO02: servidor.daodigital.com) [190.84.237.250]03: by mx0.gmx.net (mx108) with SMTP; 17 Dec 2010 xx:xx:xx +010004: Received: from User (live.com [184.154.8.138] (may be forged))05: (authenticated bits=0)06: by servidor.daodigital.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Thu, 16 Dec 2010 xx:xx:xx -0500
header:01: Received: from Static-IP-cr19084237250.cable.net.co (EHLO02: servidor.daodigital.com) [190.84.237.250]03: by mx0.gmx.net (mx108) with SMTP; 17 Dec 2010 xx:xx:xx +010004: Received: from User (live.com [184.154.8.138] (may be forged))05: (authenticated bits=0)06: by servidor.daodigital.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Thu, 16 Dec 2010 xx:xx:xx -0500
- kjz
Des weiteren hätte ich noch zu bieten:
header:01: Received: from omr-m32.mx.aol.com (EHLO omr-m32.mx.aol.com) [64.12.143.152]02: by mx0.gmx.net (mx086) with SMTP; 23 Dec 2010 xx:xx:xx +010003: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com04: [64.12.102.138])05: by omr-m32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]06: Thu, 23 Dec 2010 xx:xx:xx -050007: Message-ID: [ID filtered]08: Received: from mtaout-db03.r1000.mx.aol.com09: (mtaout-db03.r1000.mx.aol.com [172.29.51.195])10: by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id11: E6E201C00021C;12: Thu, 23 Dec 2010 xx:xx:xx -0500 (EST)13: Received: from User (rrcs-24-106-56-178.west.biz.rr.com [24.106.56.178])14: by mtaout-db03.r1000.mx.aol.com (MUA/Third Party Client Interface) with15: ESMTPA ID: [ID filtered]16: Thu, 23 Dec 2010 xx:xx:xx -0500 (EST)
header:01: Received: from mail.spammotel.com (EHLO spammotel.com) [209.190.47.10]02: by mx0.gmx.net (mx046) with SMTP; 24 Dec 2010 xx:xx:xx +010003: Received: by spammotel.com (Postfix, from userID: [ID filtered]04: ID: [ID filtered]05: Received: from nm25-vm0.bullet.mail.sp2.yahoo.com06: (nm25-vm0.bullet.mail.sp2.yahoo.com [98.139.91.228])07: by spammotel.com (Postfix) with SMTP ID: [ID filtered]08: for xxxxx; Thu, 23 Dec 2010 xx:xx:xx -0500 (EST)09: Received: from [98.139.91.61] by nm25.bullet.mail.sp2.yahoo.com with10: NNFMP; 23 Dec 2010 xx:xx:xx -000011: Received: from [98.139.91.37] by tm1.bullet.mail.sp2.yahoo.com with12: NNFMP; 23 Dec 2010 xx:xx:xx -000013: Received: from [127.0.0.1] by omp1037.mail.sp2.yahoo.com with NNFMP; 2314: Dec 2010 xx:xx:xx -000015: Received: from [41.203.239.224] by web44707.mail.sp1.yahoo.com via HTTP;16: Thu, 23 Dec 2010 xx:xx:xx PST
IP: 41.203.239.224 ---> POOL ADSL ONATEL, BF
- kjz
header:01: Received: from mail.accesstime.cl (accesstime.cl [127.0.0.1])02: by mail.accesstime.cl (Postfix) with ESMTP ID: [ID filtered]03: Thu, 30 Dec 2010 xx:xx:xx -0300 (CLST)04: From: "OFFICE OF THE SENATE HOUSE" <info [at] atm.com>05: Reply-To: atmmasterdeliveringservice [at] yahoo.com.hk06: Subject: RE:07: Date: Thu, 30 Dec 2010 xx:xx:xx -040008: Message-ID: [ID filtered]09: X-Mailer: Open WebMail 2.51 2005022810: X-OriginatingIP: 41.217.69.5 (vespinos)11: MIME-Version: 1.012: Content-Type: text/plain;13: charset=iso-8859-114: To: undisclosed-recipients:;15: X-Junkmail-SD-Raw: score=unknown,16: refid=str=0001.0A0B0208.4D1C8F82.0171,ss=1,pt=DBB_66867,fgs=0,17: ip=201.238.243.147,18: so=2009-06-02 xx:xx:xx,19: dmn=5.7.1/2009-08-27,20: mode=single engine21: Return-Path: info [at] atm.com
IP: 41.217.69.5 = ZOOM Mobile Nigeria LtdZitat:
The office of the senate house of Assembly has chosen you by the board
oftrustees that you have just been awarded ATM Master Card Value of $6.8
Million USD Contact Us with Details:-
Name:____________
Adress:____________
Tel:____________
Country:____________
Eniac
aus meiner Mugu-Liste:
der Yahoo/ATT-Mugu:
header:01: Received: from nm15-vm1.bullet.mail.sp2.yahoo.com02: (nm15-vm1.bullet.mail.sp2.yahoo.com [98.139.91.209])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Sun, 19 Dec 2010 xx:xx:xx +0100 (CET)05: Received: from [98.139.91.66] by nm15.bullet.mail.sp2.yahoo.com with06: NNFMP; 19 Dec 2010 xx:xx:xx -000007: Received: from [98.139.91.37] by tm6.bullet.mail.sp2.yahoo.com with08: NNFMP; 19 Dec 2010 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1037.mail.sp2.yahoo.com with NNFMP; 1910: Dec 2010 xx:xx:xx -000011: Received: (qmail 59048 invoked by UID: [UID filtered]12: Received: from [41.114.168.172] by web180615.mail.sp1.yahoo.com via13: HTTP; Sun, 19 Dec 2010 xx:xx:xx PST
IP: 41.114.168.172 ---> MTN Business Solutions, ZA
header:01: Received: from imr-ma05.mx.aol.com (imr-ma05.mx.aol.com [64.12.100.31])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 20 Dec 2010 xx:xx:xx +0100 (CET)04: Received: from mtaout-db03.r1000.mx.aol.com05: (mtaout-db03.r1000.mx.aol.com [172.29.51.195])06: by imr-ma05.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Sun, 19 Dec 2010 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from User (unknown [216.119.149.41])10: by mtaout-db03.r1000.mx.aol.com (MUA/Third Party Client Interface) with11: ESMTPA ID: [ID filtered]12: Sun, 19 Dec 2010 xx:xx:xx -0500 (EST)
IP: 216.119.149.41 ---> 216.119.149.41.static.midphase.com
header:01: Received: from mail.barceloscia.com.br (EHLO barceloscia.com.br)02: [189.52.11.226]03: by mx0.gmx.net (mx021) with SMTP; 21 Dec 2010 xx:xx:xx +010004: BrmaOutput: PTR [70.25.1.190] (may be forged)05: Received: from User (PTR [70.25.1.190] (may be forged))06: (authenticated bits=0)07: by barceloscia.com.br (8.12.11.20060308/8.12.11) with ESMTP id08: oBL5d1b6025920;09: Tue, 21 Dec 2010 xx:xx:xx -0200
header:01: Received: from barceloscia.com.br ([189.52.11.226])02: by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: BrmaOutput: PTR [70.25.1.190] (may be forged)06: Received: from User (PTR [70.25.1.190] (may be forged))07: (authenticated bits=0)08: by barceloscia.com.br (8.12.11.20060308/8.12.11) with ESMTP id09: oBL5d1b6025920;10: Tue, 21 Dec 2010 xx:xx:xx -0200
header:01: Received: from mail.barceloscia.com.br (EHLO barceloscia.com.br)02: [189.52.11.226]03: by mx0.gmx.net (mx090) with SMTP; 21 Dec 2010 xx:xx:xx +010004: BrmaOutput: PTR [70.25.1.190] (may be forged)05: Received: from User (PTR [70.25.1.190] (may be forged))06: (authenticated bits=0)07: by barceloscia.com.br (8.12.11.20060308/8.12.11) with ESMTP id08: oBL5d1Ue025919;09: Tue, 21 Dec 2010 xx:xx:xx -0200
Muguphon: +44 702 408 1092 ---> Magrathea Telecommunications Limited, UK
auch Kärcher ist betroffen:
header:01: Received: from mail.karcher-asia.com (EHLO mail.karcher-asia.com)02: [58.185.113.149]03: by mx0.gmx.net (mx007) with SMTP; 22 Dec 2010 xx:xx:xx +010004: Received: from User ([92.63.13.40]) by karcher01.karcher-asia.com with05: MailEnable ESMTP; Wed, 22 Dec 2010 xx:xx:xx +0800
IP: 92.63.13.40 ---> 92-63-13-40.nethouse.net
gecracktes SquirrelMail:
header:01: Received: from coise.univ-st-etienne.fr (coise.univ-st-etienne.fr02: [161.3.1.3])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)05: Received: from localhost (localhost [127.0.0.1])06: by coise.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]07: Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)08: X-Virus-Scanned: Debian amavisd-new at univ-st-etienne.fr09: Received: from coise.univ-st-etienne.fr ([127.0.0.1])10: by localhost (coise.univ-st-etienne.fr [127.0.0.1]) (amavisd-new, port11: 10024)12: with LMTP ID: [ID filtered]13: Received: from onzon.univ-st-etienne.fr (onzon.univ-st-etienne.fr14: [161.3.152.26])15: by coise.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]16: Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)17: Received: from lourdon.univ-st-etienne.fr (lourdon.univ-st-etienne.fr18: [161.3.152.11])19: by onzon.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]20: Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)21: X-Virus-Scanned: Debian amavisd-new at lourdon.univ-st-etienne.fr22: Received: from onzon.univ-st-etienne.fr ([161.3.152.26])23: by lourdon.univ-st-etienne.fr (lourdon.univ-st-etienne.fr24: [161.3.152.11]) (amavisd-new, port 10024)25: with LMTP ID: [ID filtered]26: Received: by onzon.univ-st-etienne.fr (Postfix, from userID: [ID filtered]27: ID: [ID filtered]28: Received: from arcon.univ-st-etienne.fr (beal.univ-st-etienne.fr29: [161.3.152.36])30: by onzon.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]31: Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)32: Received: from 74.115.1.533: (SquirrelMail authenticated user surrel)34: by arcon.univ-st-etienne.fr with HTTP;35: Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)
IP: 74.115.1.5 ---> 74-115-1-5.anchorfree.com
2 gecrackte Accounts:
header:01: Received: from mout1.freenet.de (EHLO mout1.freenet.de) [195.4.92.91]02: by mx0.gmx.net (mx015) with SMTP; 22 Dec 2010 xx:xx:xx +010003: Received: from [195.4.92.19] (helo=9.mx.freenet.de)04: by mout1.freenet.de with esmtpa (ID: [ID filtered]05: (Exim 4.72 #3)06: ID: [ID filtered]07: Received: from [212.95.45.64] (port=2832 helo=User)08: by 9.mx.freenet.de with esmtpa (ID: [ID filtered]09: (Exim 4.72 #3)10: ID: [ID filtered]
IP: 212.95.45.64 ---> NETDIRECT-NET
header:01: Received: from mout0.freenet.de (EHLO mout0.freenet.de) [195.4.92.90]02: by mx0.gmx.net (mx021) with SMTP; 22 Dec 2010 xx:xx:xx +010003: Received: from [195.4.92.18] (helo=8.mx.freenet.de)04: by mout0.freenet.de with esmtpa (ID: [ID filtered]05: 25) (Exim 4.72 #3)06: ID: [ID filtered]07: Received: from [178.33.149.164] (port=58488 helo=User)08: by 8.mx.freenet.de with esmtpa (ID: [ID filtered]09: 587) (Exim 4.72 #3)10: ID: [ID filtered]
IP: 178.33.149.164 ---> OVH, FR
gecracktes SquirrelMail:
header:01: Received: from cpanel.pesat.net.ID: [ID filtered]02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)06: Received: from localhost ([127.0.0.1] helo=www.pesat.net.id)07: by cpanel.pesat.net.ID: [ID filtered]08: (envelope-from <eurobank [at] eurobank.com>)09: ID: [ID filtered]10: Received: from 87.203.72.251 ([87.203.72.251])11: (SquirrelMail authenticated user poor [at] spamvictim.tld)12: by www.pesat.net.id with HTTP;13: Thu, 23 Dec 2010 xx:xx:xx +0700
IP: 87.203.72.251 ---> athedsl-81837.home.otenet.gr
- kjz
Auch die Mugus lassen nach:
header:01: Received: from mail.belnet.ru (EHLO mail.belnet.ru) [82.151.104.66]02: by mx0.gmx.net (mx008) with SMTP; 03 Jan 2011 xx:xx:xx +010003: Received: from User [80.13.58.28] by mail.belnet.ru with ESMTP04: (SMTPD-10.02) ID: [ID filtered]
IP: 80.13.58.28 ---> LRouen-151-73-27-28.w80-13.abo.wanadoo.fr
header:01: Received: from mx4.hotmail.com (213.37.86.97.static.user.ono.com02: [213.37.86.97])03: by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)04: ID: [ID filtered]
header:01: Received: from omr-m33.mx.aol.com (EHLO omr-m33.mx.aol.com) [64.12.143.145]02: by mx0.gmx.net (mx031) with SMTP; 06 Jan 2011 xx:xx:xx +010003: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com04: [64.12.102.138])05: by omr-m33.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]06: Thu, 6 Jan 2011 xx:xx:xx -050007: Message-ID: [ID filtered]08: Received: from mtaout-da02.r1000.mx.aol.com09: (mtaout-da02.r1000.mx.aol.com [172.29.51.130])10: by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id11: AE3071C010D92;12: Thu, 6 Jan 2011 xx:xx:xx -0500 (EST)13: Received: from User (75-142-191-188.dhcp.ftwo.tx.charter.com14: [75.142.191.188])15: by mtaout-da02.r1000.mx.aol.com (MUA/Third Party Client Interface) with16: ESMTPA ID: [ID filtered]17: Thu, 6 Jan 2011 xx:xx:xx -0500 (EST)
header:01: Received: from emztd1056.com (unknown [203.92.76.202])02: by spammotel.com (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Thu, 6 Jan 2011 xx:xx:xx -0500 (EST)
Muguphon: +34-688-221-505 ---> mobile number, ES
- kjz
Ein Nachügler noch:
header:01: Received: from ab17c2160.com (unknown [203.92.76.202])02: by spammotel.com (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Thu, 6 Jan 2011 xx:xx:xx -0500 (EST)
IP: 203.92.76.202 ---> host-203-92-76-202.lga.net.sg
Muguphon: +34-688-221-505 ---> mobile number, ES
- kjz
In die Mugu-Liste dürfen sich einreihen:
header:01: Received: from mail.ultimare.com (EHLO mail.ultimare.com) [216.150.17.53]02: by mx0.gmx.net (mx118) with SMTP; 10 Jan 2011 xx:xx:xx +010003: Received: from User [216.45.51.235] by ultimare.com with ESMTP04: (SMTPD-9.20) ID: [ID filtered]
IP: 216.45.51.235 ---> OC3 Networks & Web Solutions, LLC/Quadranet
gecrackter SquirrelMail-Account:
header:01: Received: from cpanel.pesat.net.ID: [ID filtered]02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Mon, 10 Jan 2011 xx:xx:xx +0100 (CET)06: Received: from localhost ([127.0.0.1] helo=www.pesat.net.id)07: by cpanel.pesat.net.ID: [ID filtered]08: (envelope-from <eurobank [at] eurobank.com>)09: ID: [ID filtered]10: Received: from 94.65.210.222 ([94.65.210.222])11: (SquirrelMail authenticated user poor [at] spamvictim.tld)12: by www.pesat.net.id with HTTP;13: Tue, 11 Jan 2011 xx:xx:xx +0700
IP: 94.65.210.222 ---> ppp-94-65-210-222.home.otenet.gr
wieder gecrackter SquirrelMail-Account:
header:01: Received: from mta03.eastlink.ca (EHLO mta03.eastlink.ca) [24.224.136.9]02: by mx0.gmx.net (mx095) with SMTP; 11 Jan 2011 xx:xx:xx +010003: Received: from ip01.eastlink.ca ([unknown] [24.222.39.10])04: by mta03.eastlink.ca (Sun Java(tm) System Messaging Server 7.3-11.01 64bit05: (built Sep 1 2009)) with ESMTP ID: [ID filtered]06: xxxxx; Tue, 11 Jan 2011 xx:xx:xx -0400 (AST)07: Received: from mail.amtelecom.net ([67.58.192.15])08: by ip01.eastlink.ca with ESMTP; Tue, 11 Jan 2011 xx:xx:xx -040009: Received: (qmail 29608 invoked from network); Tue, 11 Jan 2011 xx:xx:xx10: +000011: Received: from localhost (HELO mail.amtelecom.net) ([127.0.0.1])12: (envelope-sender <volksmotors [at] volkswagen.co.uk>)13: by mail.amtelecom.net (qmail-ldap-1.03) with SMTP for <poor [at] spamvictim.tld>;14: Tue, 11 Jan 2011 xx:xx:xx +000015: Received: from 65.49.14.6016: (SquirrelMail authenticated user averhaeg [at] amtelecom.net)17: by mail.amtelecom.net with HTTP; Tue, 11 Jan 2011 xx:xx:xx -0500 (EST)
header:01: Received: from host.advancednetworksystems.net02: (host.advancednetworksystems.net [209.239.42.40])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 13 Jan 2011 xx:xx:xx +0100 (CET)05: Received: from localhost.localdomain (localhost [127.0.0.1])06: by host.advancednetworksystems.net (8.12.11.20060614/8.12.10) with07: ESMTP ID: [ID filtered]08: Wed, 12 Jan 2011 xx:xx:xx -0500
X-OriginatingIP: 82.128.25.87 (test) ---> Multilinks Telecommunications Limited, Nigeria
header:01: Received: from omr-m32.mx.aol.com (EHLO omr-m32.mx.aol.com) [64.12.143.152]02: by mx0.gmx.net (mx001) with SMTP; 13 Jan 2011 xx:xx:xx +010003: Received: from oms-mb01.r1000.mx.aol.com (oms-mb01.r1000.mx.aol.com04: [64.12.102.137])05: by omr-m32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]06: Thu, 13 Jan 2011 xx:xx:xx -050007: Message-ID: [ID filtered]08: Received: from mtaout-ma06.r1000.mx.aol.com09: (mtaout-ma06.r1000.mx.aol.com [172.29.41.6])10: by oms-mb01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id11: 809101C0000B7;12: Thu, 13 Jan 2011 xx:xx:xx -0500 (EST)13: Received: from User (adsl-065-013-197-051.sip.sav.bellsouth.net14: [65.13.197.51])15: by mtaout-ma06.r1000.mx.aol.com (MUA/Third Party Client Interface) with16: ESMTPA ID: [ID filtered]17: Thu, 13 Jan 2011 xx:xx:xx -0500 (EST)
gecrackter Uni-Account:
header:01: Received: from EMAILCAS01.bsu.edu (emailcas01.bsu.edu [147.226.7.66])02: (using TLSv1 with cipher RC4-MD5 (128/128 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Fri, 14 Jan 2011 xx:xx:xx +0100 (CET)06: Received: from User (192.168.1.1) by EMAILCAS01.bsu.edu (192.168.1.15) with07: Microsoft SMTP Server ID: [ID filtered]
header:01: Received: from mail.ecustoms.mn (mail.ecustoms.mn [202.131.234.5])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Thu, 13 Jan 2011 xx:xx:xx +0100 (CET)04: Received: from localhost (localhost [127.0.0.1])05: by mail.ecustoms.mn (Postfix) with ESMTP ID: [ID filtered]06: Fri, 14 Jan 2011 xx:xx:xx +0800 (ULAT)07: X-Virus-Scanned: amavisd-new at ecustoms.mn08: Received: from mail.ecustoms.mn ([127.0.0.1])09: by localhost (mail.ecustoms.mn [127.0.0.1]) (amavisd-new, port 10024)10: with ESMTP ID: [ID filtered]11: Received: from mail.ecustoms.mn (mail.ecustoms.mn [192.168.249.97])12: by mail.ecustoms.mn (Postfix) with ESMTP ID: [ID filtered]13: Fri, 14 Jan 2011 xx:xx:xx +0800 (ULAT)
- kjz
Bei den Mugus gibt es noch Zuwachs:
header:01: Received: from 66-189-23-129.static.oxfr.ma.charter.com (EHLO02: davidfrenchmusic.com) [66.189.23.129]03: by mx0.gmx.net (mx006) with SMTP; 13 Jan 2011 xx:xx:xx +010004: Received: from User ([::ffff:217.77.222.227])05: by davidfrenchmusic.com with ESMTP; Thu, 13 Jan 2011 xx:xx:xx -0500
IP: 217.77.222.227 ---> static-217-77-222-227.wildpark.net
gecrackter Account:
header:01: Received: from sprite.amon-co.cz (EHLO sprite.amon-co.cz) [93.99.121.123]02: by mx0.gmx.net (mx107) with SMTP; 13 Jan 2011 xx:xx:xx +010003: Received: from User ([202.125.140.37])04: (authenticated user birgit [at] amon-co.cz)05: by sprite.amon-co.cz (Kerio MailServer 6.4.2);06: Thu, 13 Jan 2011 xx:xx:xx +0100
IP: 202.125.140.37 ---> lhr63.pie.net.pk
Muguphon: +234-7082909033 ---> Celtel Nigeria Limited/Zain
header:01: Received: from mail.plusnet.pl (EHLO mail.plusnet.pl) [212.2.120.80]02: by mx0.gmx.net (mx067) with SMTP; 14 Jan 2011 xx:xx:xx +010003: Received: from [64.207.18.74] (helo=User)04: by plusnetfe3 with esmtpa (Exim 4.63)05: (envelope-from <info [at] info.com>)06: ID: [ID filtered]
IP: 64.207.18.74 ---> CBEYOND COMMUNICATIONS, LLC
header:01: Received: from fmmailgate09.web.de (fmmailgate09.web.de [217.72.192.184])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 15 Jan 2011 xx:xx:xx +0100 (CET)04: Received: from fmmailgate06.web.de ( [172.20.1.52])05: by fmmailgate09.web.de (Postfix) with ESMTP ID: [ID filtered]06: Sat, 15 Jan 2011 xx:xx:xx +0100 (CET)07: Received: from mwmweb045 ( [172.20.18.54])08: by fmmailgate06.web.de (Postfix) with ESMTP ID: [ID filtered]09: Sat, 15 Jan 2011 xx:xx:xx +0100 (CET)10: Received: from [41.206.12.3] by mwmweb045 with HTTP; Sat Jan11: 15 xx:xx:xx CET 2011
IP: 41.206.12.3 ---> MTN Nigeria
Muguphon: +2348183309807 ---> Nigeria
gecrackter Account:
header:01: Received: from pitbull.bmi.net (EHLO pitbull.bmi.net) [216.38.25.2]02: by mx0.gmx.net (mx081) with SMTP; 16 Jan 2011 xx:xx:xx +010003: Received: from apache by pitbull.bmi.net with local (Exim 4.72)04: (envelope-from <hansonbr [at] bmi.net>)05: ID: [ID filtered]
header:01: Received: from usloft2119.serverloft.com (EHLO02: usloft2119.serverloft.com) [173.224.120.151]03: by mx0.gmx.net (mx022) with SMTP; 16 Jan 2011 xx:xx:xx +010004: Received: from [96.45.14.19] (helo=User)05: by usloft2119.serverloft.com with esmtpa (Exim 4.69)06: (envelope-from <farida01 [at] yahoo.com>)07: ID: [ID filtered]
IP: 96.45.14.19 ---> h96-45-14-19-eidnet.org.14.45.96.in-addr.arpa
- kjz
Ach ja, die Nigeria-Boyz sind wieder da...
Der Yahoo/ATT-Mugu:
header:01: Received: from omp1056.mail.sp2.yahoo.com (HELO02: omp1056.mail.sp2.yahoo.com) [98.139.91.56]03: by mx0.gmx.net (mx104) with SMTP; 17 Jan 2011 xx:xx:xx +010004: Received: (qmail 64658 invoked by UID: [UID filtered]05: Received: (qmail 1717 invoked by UID: [UID filtered]06: Received: from [41.0.52.6] by web83713.mail.sp1.yahoo.com via HTTP; Mon,07: 17 Jan 2011 xx:xx:xx PST
IP: 41.0.52.6 ---> ---> Vodacom Bussiness (ASN 36994)
X-RocketYMMF:
Muguphon: +447924551439 ---> Cloud9, mobile phone, UK
die Madrid-Konnektion:
header:01: Received: from a.relay.invitel.net (EHLO a.relay.invitel.net) [62.77.203.3]02: by mx0.gmx.net (mx088) with SMTP; 18 Jan 2011 xx:xx:xx +010003: Received: from mail.invitel.hu (mail.invitel.hu [213.163.59.4])04: by a.relay.invitel.net (Invitel Core SMTP Transmitter) with ESMTP id05: 6E22111A5C8;06: Tue, 18 Jan 2011 xx:xx:xx +0100 (CET)07: Received: from User ([194.116.144.56])08: by mail.invitel.hu (Invitel Messaging Server)09: with ESMTPA ID: [ID filtered]10: 18 Jan 2011 xx:xx:xx +0100 (CET)
IP: 194.116.144.56 ---> iseo.occterra.net
Muguphon: +34 634031280 ---> Vodafone España, S.a.u.
Mugufax: +34 911311879 ---> Jazz Telecom, S.a.u., ES
'Kelvin Williams' ist sehr aktiv:
header:01: Received: from unknown (EHLO mail.zhukovsky.net) [77.232.152.7]02: by mx0.gmx.net (mx106) with SMTP; 18 Jan 2011 xx:xx:xx +010003: Received: from [208.115.201.206] (port=2693 helo=User)04: by mail.zhukovsky.net with esmtpa (Exim 4.69)05: (envelope-from <test [at] zami.com.cn>)06: ID: [ID filtered]
IP: 208.115.201.206 ---> 206-201-115-208.reverse.lstn.net
header:01: Received: from 4-102.206-83.static-ip.oleane.fr (HELO srv_mail.opca.cgm)02: [83.206.102.4]03: by mx0.gmx.net (mx064) with SMTP; 19 Jan 2011 xx:xx:xx +010004: Received: from User ([192.168.21.254]) by srv_mail.opca.cgm with05: Microsoft SMTPSVC(6.0.3790.1830);06: Wed, 19 Jan 2011 xx:xx:xx +0100
Muguphon: +234-81-6111-9202 ---> Nigeria
header:01: Received: from mail.norwestortho.com.au (shiman2.lnk.telstra.net02: [203.45.142.13])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 20 Jan 2011 xx:xx:xx +0100 (CET)05: Received: from User ([109.158.23.114]) by mail.norwestortho.com.au with06: Microsoft SMTPSVC(6.0.3790.4675);07: Thu, 20 Jan 2011 xx:xx:xx +1100
IP: 109.158.23.114 ---> host109-158-23-114.range109-158.btcentralplus.com
Auch bei Strato werden die Server gecrackt:
header:01: Received: from mo-p07-ob.rzone.de (EHLO mo-p07-ob.rzone.de) [81.169.146.188]02: by mx0.gmx.net (mx002) with SMTP; 20 Jan 2011 xx:xx:xx +010003: Received: from User (dsl88-249-15353.ttnet.net.tr [88.249.59.249])04: by post.strato.de (mrclete mo6) (RZmta 24.12)05: with ESMTP ID: [ID filtered]
header:01: Received: from smtp.correiodopovo.com.br (EHLO02: smtp.correiodopovo.com.br) [200.248.244.129]03: by mx0.gmx.net (mx077) with SMTP; 21 Jan 2011 xx:xx:xx +010004: Received: from User by smtp.correiodopovo.com.br (MDaemon PRO v10.1.0)05: with ESMTP ID: [ID filtered]06: Thu, 20 Jan 2011 xx:xx:xx -020007: X-Spam-Processed: smtp.correiodopovo.com.br, Thu, 20 Jan 2011 xx:xx:xx -020008: (not processed: message from trusted or authenticated source)
X-Authenticated-Sender:
X-MDRemoteIP: 98.215.146.12 ---> c-98-215-146-12.hsd1.il.comcast.net
Muguphon: +44 701 117 2399 ---> Invomo Ltd., UK
header:01: Received: from mail.igamer.ie (server213-171-198-211.live-servers.net02: [213.171.198.211])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Fri, 21 Jan 2011 xx:xx:xx +0100 (CET)05: Received: from User (rrcs-67-78-41-222.sw.biz.rr.com [67.78.41.222])06: (Authenticated sender: admin)07: by mail.igamer.ie (Postfix) with ESMTP ID: [ID filtered]08: Fri, 21 Jan 2011 xx:xx:xx +0000 (GMT)
Muguphon: +234-809-128-8840 ---> EMTS/Etisalat, Nigeria
- kjz
Aus westafrikanischen Gefilden treten noch an:
wieder mal 'Kelvin Williams' über gecrackten Server:
header:01: Received: from cpn.gyn-praxis-goerlitz.de (EHLO02: cpn.gyn-praxis-goerlitz.de) [217.86.143.217]03: by mx0.gmx.net (mx027) with SMTP; 19 Jan 2011 xx:xx:xx +010004: Received: from User ([208.115.201.206]) by cpn.gyn-praxis-goerlitz.de05: with Microsoft SMTPSVC(6.0.3790.4675);06: Wed, 19 Jan 2011 xx:xx:xx +0100
IP: 208.115.201.206 ---> 206-201-115-208.reverse.lstn.net
den Mugu hatten wir auch schon:
header:01: Received: from mail.norwestortho.com.au (shiman2.lnk.telstra.net02: [203.45.142.13])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 20 Jan 2011 xx:xx:xx +0100 (CET)05: Received: from User ([109.158.23.114]) by mail.norwestortho.com.au with06: Microsoft SMTPSVC(6.0.3790.4675);07: Thu, 20 Jan 2011 xx:xx:xx +1100
IP: 109.158.23.114 ---> host109-158-23-114.range109-158.btcentralplus.com
header:01: Received: from mail.chauraci.be (EHLO SRV-MAIL.chauraci.be) [81.246.33.218]02: by mx0.gmx.net (mx110) with SMTP; 23 Jan 2011 xx:xx:xx +0100
Muguphon: +2347035207733 ---> MTN Nigeria Communications Ltd.
Ansonsten: der Trend geht auch bei Mugus zum Versand via Zombie-PC. Kein Wunder, alle ISPs aus Nigeria dürften mittlerweile breitflächig in den schwärzesten Tiefen aller Blacklists festbetoniert sein.
- kjz
Mit schönen Grüßen an meine 'besonderen Freunde':
gecrackter Uni-Account:
header:01: Received: from EMAILCAS04.bsu.edu (emailcas04.bsu.edu [147.226.7.69])02: (using TLSv1 with cipher RC4-MD5 (128/128 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Mon, 24 Jan 2011 xx:xx:xx +0100 (CET)06: Received: from User (192.168.1.1) by EMAILCAS04.bsu.edu (192.168.1.18) with07: Microsoft SMTP Server ID: [ID filtered]
header:01: Received: from darkstar.wavenet.com.br (EHLO darkstar.wavenet.com.br)02: [187.1.146.2]03: by mx0.gmx.net (mx018) with SMTP; 25 Jan 2011 xx:xx:xx +010004: Received: from wavenet.com.br (argow.wavenet.com.br [187.1.146.5])05: (authenticated bits=0)06: by darkstar.wavenet.com.br (8.13.8/8.13.8) with ESMTP ID: [ID filtered]07: Tue, 25 Jan 2011 xx:xx:xx -0300 (BRT)
X-OriginatingIP: 109.111.190.57 (ribeiro) ---> 57.190.111.109.sta.211.ru
Muguphon: +44 701 117 2399 ---> Invomo Ltd., UK
header:01: Received: from mail2.webspeed.net (mail.webspeed.net [213.166.4.28])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 26 Jan 2011 xx:xx:xx +0100 (CET)04: Received: from User (unverified [213.120.114.85]) by mail2.webspeed.net05: (Vircom SMTPRS 4.4.568.66) with ESMTP ID: [ID filtered]06: Wed, 26 Jan 2011 xx:xx:xx +0000
IP: 213.120.114.85 ---> host213-120-114-85.in-addr.btopenworld.com
header:01: Received: from server1.jallanstudios.com (server2.jallanstudios.com02: [209.190.184.216])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 26 Jan 2011 xx:xx:xx +0100 (CET)05: Received: from User (UnknownHost [82.128.108.46]) by06: server1.jallanstudios.com with SMTP;07: Mon, 24 Jan 2011 xx:xx:xx -0500
IP: 82.128.108.46 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +6010217045 ---> Celcom, Malaysia
header:01: Received: from mailout2.ppohosted.fi (EHLO zmta1.ppohosted.fi)02: [82.141.106.235]03: by mx0.gmx.net (mx003) with SMTP; 26 Jan 2011 xx:xx:xx +010004: Received: from zcluster2.ppohosted.fi (zmbs2.ppohosted.fi [212.50.215.38])05: by zmta1.ppohosted.fi (Postfix) with ESMTP ID: [ID filtered]06: Wed, 26 Jan 2011 xx:xx:xx +0200 (EET)07: Date: Wed, 26 Jan 2011 xx:xx:xx +0200 (EET)
Muguphon: +447023063852 ---> Magrathea Telecommunications Limited, UK
- kjz
'Gute Freunde' kann man nie genug haben.....
der Yahoo/Att-Mugu:
header:01: Received: from nm9.bullet.mail.sp2.yahoo.com02: (nm9.bullet.mail.sp2.yahoo.com [98.139.91.79])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Thu, 27 Jan 2011 xx:xx:xx +0100 (CET)05: Received: from [98.139.91.67] by nm9.bullet.mail.sp2.yahoo.com with06: NNFMP; 27 Jan 2011 xx:xx:xx -000007: Received: from [98.139.91.59] by tm7.bullet.mail.sp2.yahoo.com with08: NNFMP; 27 Jan 2011 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1059.mail.sp2.yahoo.com with NNFMP; 2710: Jan 2011 xx:xx:xx -000011: Received: (qmail 96997 invoked by UID: [UID filtered]12: Received: from [81.91.235.235] by web180609.mail.sp1.yahoo.com via HTTP;13: Thu, 27 Jan 2011 xx:xx:xx PST
IP: 81.91.235.235 ---> BENINTELECOM
header:01: Received: from slim-4c.inet.it (EHLO slim-4c.inet.it) [213.92.5.127]02: by mx0.gmx.net (mx033) with SMTP; 28 Jan 2011 xx:xx:xx +010003: Received: from ::ffff:124.160.27.162 ([::ffff:124.160.27.162]) by04: slim-4c.inet.it via I-SMTP-5.6.1-56105: ID: [ID filtered]
header:01: Received: from slim-4c.inet.it (EHLO slim-4c.inet.it) [213.92.5.127]02: by mx0.gmx.net (mx033) with SMTP; 28 Jan 2011 xx:xx:xx +010003: Received: from ::ffff:124.160.27.162 ([::ffff:124.160.27.162]) by04: slim-4c.inet.it via I-SMTP-5.6.1-56105: ID: [ID filtered]
header:01: Received: from slim-4c.inet.it (slim-4c.inet.it [213.92.5.127])02: by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from ::ffff:124.160.27.162 ([::ffff:124.160.27.162]) by06: slim-4c.inet.it via I-SMTP-5.6.1-56107: ID: [ID filtered]
IP: 124.160.27.162 ---> CNC Group CHINA169 Zhejiang
Muguphon: +228-8522437 ---> Togo Cellulaire (Togocel)
gecrackter Freenet-Account:
header:01: Received: from mout7.freenet.de (mout7.freenet.de [195.4.92.97])02: by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]03: for xxxxx; Sat, 29 Jan 2011 xx:xx:xx -0500 (EST)04: Received: from [195.4.92.13] (helo=3.mx.freenet.de)05: by mout7.freenet.de with esmtpa (ID: [ID filtered]06: (Exim 4.72 #3)07: ID: [ID filtered]08: Received: from [82.128.117.72] (port=4578 helo=User)09: by 3.mx.freenet.de with esmtpa (ID: [ID filtered]10: (Exim 4.72 #3)11: ID: [ID filtered]
IP: 82.128.117.72 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +2348073143968 ---> Globacom Ltd., Nigeria
und wieder ein Webmaster-Account bei Freenet gecrackt:
header:01: Received: from mout5.freenet.de (EHLO mout5.freenet.de) [195.4.92.95]02: by mx0.gmx.net (mx053) with SMTP; 29 Jan 2011 xx:xx:xx +010003: Received: from [195.4.92.23] (helo=13.mx.freenet.de)04: by mout5.freenet.de with esmtpa (ID: [ID filtered]05: 25) (Exim 4.72 #3)06: ID: [ID filtered]07: Received: from j103113.upc-j.chello.nl ([24.132.103.113]:2192 helo=User)08: by 13.mx.freenet.de with esmtpa (ID: [ID filtered]09: 587) (Exim 4.72 #3)10: ID: [ID filtered]
Muguphon: +234-703-740-1857 ---> MTN Nigeria Communications Ltd.
- kjz
Auch meine 'Haus-Mugus' waren wieder fleissig:
header:01: Received: from 123-243-9-65.static.tpgi.com.au (EHLO everx.com.au)02: [123.243.9.65]03: by mx0.gmx.net (mx054) with SMTP; 31 Jan 2011 xx:xx:xx +010004: Received: from User ([41.217.65.11] RDNS failed) by everx.com.au with05: Microsoft SMTPSVC(6.0.3790.4675);06: Thu, 27 Jan 2011 xx:xx:xx +1100
IP: 41.217.65.11 ---> ZOOM Mobile Nigeria Ltd.
gecrackter Account:
header:01: Received: from mail.roster.com.pe (EHLO mail.roster.com.pe) [190.223.155.14]02: by mx0.gmx.net (mx019) with SMTP; 31 Jan 2011 xx:xx:xx +010003: Received: from localhost (localhost.localdomain [127.0.0.1])04: by mail.roster.com.pe (Postfix) with ESMTP ID: [ID filtered]05: Mon, 31 Jan 2011 xx:xx:xx -0500 (PET)06: Received: from mail.roster.com.pe ([127.0.0.1])07: by localhost (mail.roster.com.pe [127.0.0.1]) (amavisd-new, port 10024)08: with ESMTP ID: [ID filtered]09: Received: from mail.roster.com.pe (mail.roster.com.pe [172.16.1.3])10: by mail.roster.com.pe (Postfix) with ESMTP ID: [ID filtered]11: Mon, 31 Jan 2011 xx:xx:xx -0500 (PET)
Muguphon: +59387395173 ---> mobile number, Ecuador
wieder ein gecrackter Account:
header:01: Received: from mail.cablemail.bg (EHLO mail.cablemail.bg) [217.9.224.207]02: by mx0.gmx.net (mx118) with SMTP; 31 Jan 2011 xx:xx:xx +010003: Received: from mail.cablemail.bg (localhost [127.0.0.1])04: by mail.cablemail.bg (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sun, 30 Jan 2011 xx:xx:xx +0200 (EET)06: Received: from mail.cablemail.bg ([127.0.0.1])07: by mail.cablemail.bg (mail.cablemail.bg [127.0.0.1]) (amavisd-new, port08: 10024)09: with ESMTP ID: [ID filtered]10: Sun, 30 Jan 2011 xx:xx:xx +0200 (EET)11: Received: from PERSONAL-43F0F3 (unknown [41.220.69.10])12: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))13: (No client certificate requested)14: (Authenticated sender: ferri [at] cablemail.bg)15: by mail.cablemail.bg (Postfix) with ESMTPSA ID: [ID filtered]16: for xxxxx; Sun, 30 Jan 2011 xx:xx:xx +0200 (EET)
IP: 41.220.69.10 ---> 69-10.vgccl.net/MTN Nigeria
header:01: Received: (qmail invoked by alias); 01 Feb 2011 xx:xx:xx -000002: Received: from aquilum.com (EHLO mail.aquilum.com) [86.109.112.44]03: by mx0.gmx.net (mx073) with SMTP; 01 Feb 2011 xx:xx:xx +010004: Received: from User ([41.222.71.37]) by aquilum.com with MailEnable05: ESMTP; Mon, 17 Jan 2011 xx:xx:xx +0100
IP: 41.222.71.37 ---> SWIFT NETWORKS, Nigeria
header:01: Received: from unknown (EHLO pwdmail.mahapwd.com) [210.212.169.163]02: by mx0.gmx.net (mx006) with SMTP; 02 Feb 2011 xx:xx:xx +010003: Received: from User (pwdfirewall [172.17.1.254])04: by pwdmail.mahapwd.com (Postfix) with ESMTP ID: [ID filtered]05: Wed, 2 Feb 2011 xx:xx:xx +0530 (IST)
volles Rohr von der Amsterdam-Konnektion:
header:01: Received: from nbbesmed.com (221-12-55-250.zjnetcom.com [221.12.55.250])02: by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from User ([80.56.181.197])06: (envelope-sender <songli [at] yahoo.com.hk>)07: by 192.168.1.254 with ESMTP08: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800
header:01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)02: [221.12.55.250]03: by mx0.gmx.net (mx031) with SMTP; 02 Feb 2011 xx:xx:xx +010004: Received: from User ([80.56.181.197])05: (envelope-sender <songli [at] yahoo.com.hk>)06: by 192.168.1.254 with ESMTP07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800
header:01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)02: [221.12.55.250]03: by mx0.gmx.net (mx080) with SMTP; 02 Feb 2011 xx:xx:xx +010004: Received: from User ([80.56.181.197])05: (envelope-sender <songli [at] yahoo.com.hk>)06: by 192.168.1.254 with ESMTP07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800
IP: 80.56.181.197 ---> f181197.upc-f.chello.nl
wieder die volle Ladung, denn Chello ist ja völlig merkbefreit:
header:01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)02: [221.12.55.250]03: by mx0.gmx.net (mx032) with SMTP; 02 Feb 2011 xx:xx:xx +010004: Received: from User ([80.56.181.197])05: (envelope-sender <ipw_lotto [at] yahoo.com>)06: by 192.168.1.254 with ESMTP07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800
header:01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)02: [221.12.55.250]03: by mx0.gmx.net (mx021) with SMTP; 02 Feb 2011 xx:xx:xx +010004: Received: from User ([80.56.181.197])05: (envelope-sender <ipw_lotto [at] yahoo.com>)06: by 192.168.1.254 with ESMTP07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800
header:01: Received: from nbbesmed.com (221-12-55-250.zjnetcom.com [221.12.55.250])02: by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from User ([80.56.181.197])06: (envelope-sender <ipw_lotto [at] yahoo.com>)07: by 192.168.1.254 with ESMTP08: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800
IP: 80.56.181.197 ---> f181197.upc-f.chello.nl
Muguphon: +31-684-455-145 ---> Lycamobile, NL
header:01: Received: from he.lss.gov.cn ([121.28.149.39])02: by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from User (unknown [81.168.181.178])06: by mail (Coremail) with SMTP ID: [ID filtered]07: Mon, 31 Jan 2011 xx:xx:xx +0800 (CST)
IP: 81.168.181.178 ---> xdsl-1202.lodz.dialog.net.pl
sagte ich schon, dass Chello wohl ein Schwarzhut ist....
header:01: Received: from mail.belnet.ru (mail.belnet.ru [82.151.104.66])02: by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from User [77.250.44.48] by mail.belnet.ru with ESMTP06: (SMTPD-10.02) ID: [ID filtered]
header:01: Received: from mail.belnet.ru (EHLO mail.belnet.ru) [82.151.104.66]02: by mx0.gmx.net (mx062) with SMTP; 03 Feb 2011 xx:xx:xx +010003: Received: from User [77.250.44.48] by mail.belnet.ru with ESMTP04: (SMTPD-10.02) ID: [ID filtered]
header:01: Received: from mail.belnet.ru (EHLO mail.belnet.ru) [82.151.104.66]02: by mx0.gmx.net (mx002) with SMTP; 03 Feb 2011 xx:xx:xx +010003: Received: from User [77.250.44.48] by mail.belnet.ru with ESMTP04: (SMTPD-10.02) ID: [ID filtered]
IP: 77.250.44.48 ---> dhcp-077-250-044-048.chello.nl
Muguphon: +31-684-455-145 ---> Lycamobile, NL
die Madrid-Konnektion:
header:01: Received: from pip10.ptt.js.cn (HELO jlonline.com) [61.155.13.240]02: by mx0.gmx.net (mx025) with SMTP; 04 Feb 2011 xx:xx:xx +010003: Received: from User([114.46.149.72]) by ptt.js.cn(AIMC 3.2.0.0)04: with SMTP ID: [ID filtered]
IP: 114.46.149.72 ---> 114-46-149-72.dynamic.hinet.net
Muguphon: +34 672 901 053 ---> mobile number, Espana
Mugufax: +34 917 692 733 ---> Colt Telecom España, S.a.
gecrackter Account:
header:01: Received: from idknet.com (mail.idknet.com [217.19.208.25])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 4 Feb 2011 xx:xx:xx +0100 (CET)04: Received: from [127.0.0.1] (account katerina91 HELO mail.idknet.com)05: by idknet.com (CommuniGate Pro SMTP 5.1.16)06: with ESMTPA ID: [ID filtered]07: Received: from User ([95.87.223.82] helo=User) with IPv4:125 by08: mail.idknet.com; 4 Feb 2011 xx:xx:xx +0200
IP: 95.87.223.82 ---> drujba2-95-87-223-82.net1.bg
header:01: Received: from idknet.com (mail.idknet.com [217.19.208.25])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxxx; Mon, 7 Feb 2011 xx:xx:xx +0100 (CET)04: Received: from [127.0.0.1] (account katerina91 HELO mail.idknet.com)05: by idknet.com (CommuniGate Pro SMTP 5.1.16)06: with ESMTPA ID: [ID filtered]07: Received: from User ([82.128.87.61] helo=User) with IPv4:125 by08: mail.idknet.com; 7 Feb 2011 xx:xx:xx +0200
IP: 82.128.87.61 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +234-709-236-7810 ---> Multi-links Telecommunications Ltd., Nigeria
- kjz
Tja, meine 'Mugu-Freunde' geben wohl nie auf:
header:01: Received: from ns.alephnet.co.jp (EHLO mail.alephnet.co.jp) [210.250.131.1]02: by mx0.gmx.net (mx098) with SMTP; 31 Jan 2011 xx:xx:xx +010003: Received: from User (unknown [41.191.85.137])04: by mail.alephnet.co.jp (Postfix) with ESMTP ID: [ID filtered]05: Tue, 1 Feb 2011 xx:xx:xx +0900 (JST)
IP: 41.191.85.137 ---> DAZAN-CYBER, Benin
Muguphon: +44 702 4051 845 ---> Magrathea Telecommunications Limited, UK
auch diesen Mugu von der Madrid-Konnektion hatten wir schon:
header:01: Received: from nm3-vm1.bullet.mail.sp2.yahoo.com (HELO02: nm3-vm1.bullet.mail.sp2.yahoo.com) [98.139.90.231]03: by mx0.gmx.net (mx046) with SMTP; 03 Feb 2011 xx:xx:xx +010004: Received: from [98.139.91.68] by nm3.bullet.mail.sp2.yahoo.com with05: NNFMP; 03 Feb 2011 xx:xx:xx -000006: Received: from [98.139.91.45] by tm8.bullet.mail.sp2.yahoo.com with07: NNFMP; 03 Feb 2011 xx:xx:xx -000008: Received: from [127.0.0.1] by omp1045.mail.sp2.yahoo.com with NNFMP; 0309: Feb 2011 xx:xx:xx -000010: Received: (qmail 23795 invoked from network); 3 Feb 2011 xx:xx:xx -000011: Received: from User (eemmap35 [at] 61.153.4.134 with login)12: by smtp101.sbc.mail.gq1.yahoo.com with SMTP; 03 Feb 201113: xx:xx:xx -0800 PST
IP: 61.153.4.134 ---> HANGZHOU-TELE-BRANCH, CN
Muguphon: +34 672 901 053 ---> mobile number, Espana
Mugufax: +34 917 692 733 ---> Colt Telecom España, S.a.
header:01: Received: from vsmtp6.jaring.my (EHLO vsmtp6.jaring.my) [192.228.250.86]02: by mx0.gmx.net (mx075) with SMTP; 05 Feb 2011 xx:xx:xx +010003: Received: from localhost (localhost.jaring.my [127.0.0.1])04: by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP ID: [ID filtered]05: Sat, 5 Feb 2011 xx:xx:xx +0800 (MYT)06: (envelope-from rdalrymple [at] extons.co.uk)07: X-Virus-Scanned: by JARING Malware Filters (jaring.my)08: Received: from vsmtp6.jaring.my ([127.0.0.1])09: by localhost (vsmtp6.jaring.my [127.0.0.1]) (amavisd-new, port 10024)10: with LMTP ID: [ID filtered]11: Received: from User ([76.164.31.6])12: (authenticated bits=0)13: by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP ID: [ID filtered]14: Sat, 5 Feb 2011 xx:xx:xx +0800 (MYT)
Muguphon: +44-702-402-9183 ---> Magrathea Telecommunications Limited, UK
der Mugu mit dem Telefon-Fimmel:
header:01: Received: from relay2.PeterStar.ru (EHLO f0.peterstar.ru) [217.195.65.11]02: by mx0.gmx.net (mx036) with SMTP; 05 Feb 2011 xx:xx:xx +010003: Received: from proxy.classic.sp.ru ([84.204.43.122])04: by f0.peterstar.ru (8.14.3/8.12.11) with ESMTP ID: [ID filtered]05: Sat, 5 Feb 2011 xx:xx:xx +0300 (MSK)06: Message-ID: [ID filtered]07: Received: from [61.5.158.93] (helo=User)08: by proxy.classic.sp.ru with esmtpa (Exim 4.44)09: ID: [ID filtered]
header:01: Received: from relay2.PeterStar.ru (EHLO f0.peterstar.ru) [217.195.65.11]02: by mx0.gmx.net (mx047) with SMTP; 06 Feb 2011 xx:xx:xx +010003: Received: from proxy.classic.sp.ru ([84.204.43.122])04: by f0.peterstar.ru (8.14.3/8.12.11) with ESMTP ID: [ID filtered]05: Sun, 6 Feb 2011 xx:xx:xx +0300 (MSK)06: Message-ID: [ID filtered]07: Received: from [61.5.158.93] (helo=User)08: by proxy.classic.sp.ru with esmtpa (Exim 4.44)09: ID: [ID filtered]
IP: 61.5.158.93 ---> CYBER INTERNET SERVICES (PVT.) LTD., PK
Muguphon: +44 702 405-5051 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 407-7324 ---> Magrathea Telecommunications Limited
Muguphon: +44 702 406-1363 ---> Magrathea Telecommunications Limited
BTW: ist niemand in der Lage, bei Magrathea mal den Stecker zu ziehen....
gecracktes SquirrelMail:
header:01: Received: from ueamailgate01.uea.ac.uk (EHLO ueamailgate01.uea.ac.uk)02: [139.222.131.184]03: by mx0.gmx.net (mx103) with SMTP; 05 Feb 2011 xx:xx:xx +010004: Received: from ueams01.uea.ac.uk (ueams01.uea.ac.uk [139.222.131.78])05: by ueamailgate01.uea.ac.uk (8.13.8/8.13.8) with ESMTP ID: [ID filtered]06: Sat, 5 Feb 2011 xx:xx:xx GMT07: Received: from [139.222.130.127] (helo=webmail.uea.ac.uk)08: by ueams01.uea.ac.uk with esmtp (Exim 4.69)09: (envelope-from <A.Marler [at] uea.ac.uk>)10: ID: [ID filtered]11: Received: from 41.138.183.11212: (SquirrelMail authenticated user dcs09hwu)13: by webmail.uea.ac.uk with HTTP;14: Sat, 5 Feb 2011 xx:xx:xx -0000 (GMT)
IP: 41.138.183.112 ---> Visafone Communications Limited, Nigeria
Muguphon: +44 702 405-1534 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 401-3832 ---> Magrathea Telecommunications Limited
- kjz
Da kann ich doch mal gleich ergänzen:
header:01: Received: from idknet.com (mail.idknet.com [217.19.208.25])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 7 Feb 2011 xx:xx:xx +0100 (CET)04: Received: from [127.0.0.1] (account katerina91 HELO mail.idknet.com)05: by idknet.com (CommuniGate Pro SMTP 5.1.16)06: with ESMTPA ID: [ID filtered]07: Received: from User ([82.128.87.61] helo=User) with IPv4:125 by08: mail.idknet.com; 7 Feb 2011 xx:xx:xx +0200
IP: 82.128.87.61 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +234-709-236-7810 ---> Multilinks Telecommunications Ltd., Nigeria
header:01: Received: from thor.bliksemdetectie.nl (thor.bliksemdetectie.nl02: [85.12.27.91])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Wed, 9 Feb 2011 xx:xx:xx +0100 (CET)07: Received: from [80.69.41.3] (helo=User)08: by thor.bliksemdetectie.nl with esmtpa (Exim 4.73)09: (envelope-from <jr [at] jrrouse.com>)10: ID: [ID filtered]
header:01: Received: from thor.bliksemdetectie.nl (thor.bliksemdetectie.nl02: [85.12.27.91])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Wed, 9 Feb 2011 xx:xx:xx +0100 (CET)07: Received: from [80.69.41.3] (helo=User)08: by thor.bliksemdetectie.nl with esmtpa (Exim 4.73)09: (envelope-from <jr [at] jrrouse.com>)10: ID: [ID filtered]
IP: 80.69.41.3 ---> marschall-net, DE
gecrackter Uni-Account:
header:01: Received: from Mail-1.carrollu.edu (mail-1.carrollu.edu [140.104.157.2])02: (using TLSv1 with cipher AES128-SHA (128/128 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Thu, 10 Feb 2011 xx:xx:xx +0100 (CET)06: Received: from CMAIL.carrollu.edu ([fe80::f1eb:db80:cc08:68d5]) by07: Mail-1.carrollu.edu ([2002:8c68:9d02::8c68:9d02]) with mapi; Thu, 1008: Feb 201109: xx:xx:xx -0600
header:01: Received: from ironport2-out.pppoe.ca (ironport2-out.teksavvy.com02: [206.248.154.183])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 10 Feb 2011 xx:xx:xx +0100 (CET)05: Received: from mail.teksavvy.com (HELO mail.pppoe.ca) ([206.248.188.90])06: by ironport2-out.pppoe.ca with ESMTP; 10 Feb 2011 xx:xx:xx -050007: Received: from User ([218.56.50.213])08: by mail.pppoe.ca (Internet Mail Server v1.0) with ASMTP ID: [ID filtered]09: Thu, 10 Feb 2011 xx:xx:xx -0500
IP: 218.56.50.213 ---> Shandong Provinceshandong University Huatian Technology Stock Corporation
gecrackter Web.de Account:
header:01: Received: from fmmailgate04.web.de (EHLO fmmailgate04.web.de)02: [217.72.192.242]03: by mx0.gmx.net (mx091) with SMTP; 11 Feb 2011 xx:xx:xx +010004: Received: from mwmweb005 ( [172.20.18.14])05: by fmmailgate04.web.de (Postfix) with ESMTP ID: [ID filtered]06: Fri, 11 Feb 2011 xx:xx:xx +0100 (CET)07: Received: from [77.70.128.219] by mwmweb005 with HTTP; Fri08: Feb 11 xx:xx:xx CET 2011
IP: 77.70.128.219 ---> Comgeo Services, Nigeria
Muguphon: +44 702 405 4861 ---> Magrathea Telecommunications Limited, UK
Muguphon: +44 702 405 8748 ---> Magrathea Telecommunications Limited, UK
- kjz
Ach ja, noch ein paar Mugu-Gauner, soviel Zeit muss sein:
So viele Filter, eine Spamscore von 20 und trotzdem den Dreck rausgeblasen. Wie definiert man noch einmal hirnlose Merkbefreiung?
header:01: Received: from asmtpout022.mac.com (EHLO asmtpout022.mac.com) [17.148.16.97]02: by mx0.gmx.net (mx032) with SMTP; 07 Feb 2011 xx:xx:xx +010003: MIME-version: 1.004: Content-type: multipart/alternative;05: boundary="Boundary_(ID_t+9PEcOPA5L0nX1T7OcvUA)"06: Received: from spool002.mac.com ([10.150.69.52])07: by asmtp022.mac.com (Oracle Communications Messaging Exchange Server08: 7u4-20.0109: 64bit (built Nov 21 2010)) with ESMTP id10: <0LG9006ZNFAU2U50 [at] asmtp022.mac.com>11: for xxxxx; Mon, 07 Feb 2011 xx:xx:xx -0800 (PST)12: X-Proofpoint-Virus-Version: vendor=fsecure13: engine=2.50.10432:5.2.15,1.0.148,0.0.000014: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=015: X-Proofpoint-Spam-Details: rule=notspam policy=default score=2 spamscore=216: ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=017: classifier=spam18: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-110207008619: Received: from localhost ([10.150.79.234])20: by spool002.mac.com (Sun Java(tm) System Messaging Server 6.3-8.0121: (built Dec22: 16 2008; 32bit)) with ESMTP ID: [ID filtered]23: 07 Feb 2011 xx:xx:xx -0800 (PST)24: X-Proofpoint-Spam-Details: rule=notspam policy=default score=20 spamscore=2025: ipscore=0 suspectscore=0 phishscore=1 bulkscore=0 adultscore=026: classifier=spam27: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-110207008628: X-Proofpoint-Virus-Version: vendor=fsecure29: engine=2.50.10432:5.2.15,1.0.148,0.0.000030: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0
header:01: Received: from asmtpout022.mac.com (EHLO asmtpout022.mac.com) [17.148.16.97]02: by mx0.gmx.net (mx007) with SMTP; 07 Feb 2011 xx:xx:xx +010003: MIME-version: 1.004: Content-type: multipart/alternative;05: boundary="Boundary_(ID_Xc8lZ4HA35pALyrz+cr1jw)"06: Received: from spool002.mac.com ([10.150.69.52])07: by asmtp022.mac.com (Oracle Communications Messaging Exchange Server08: 7u4-20.0109: 64bit (built Nov 21 2010)) with ESMTP id10: <0LG9006ZNFAU2U50 [at] asmtp022.mac.com>11: for xxxxx; Mon, 07 Feb 2011 xx:xx:xx -0800 (PST)12: X-Proofpoint-Virus-Version: vendor=fsecure13: engine=2.50.10432:5.2.15,1.0.148,0.0.000014: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=015: X-Proofpoint-Spam-Details: rule=notspam policy=default score=2 spamscore=216: ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=017: classifier=spam18: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-110207008619: Received: from localhost ([10.150.79.234])20: by spool002.mac.com (Sun Java(tm) System Messaging Server 6.3-8.0121: (built Dec22: 16 2008; 32bit)) with ESMTP ID: [ID filtered]23: 07 Feb 2011 xx:xx:xx -0800 (PST)24: X-Proofpoint-Spam-Details: rule=notspam policy=default score=20 spamscore=2025: ipscore=0 suspectscore=0 phishscore=1 bulkscore=0 adultscore=026: classifier=spam27: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-110207008628: X-Proofpoint-Virus-Version: vendor=fsecure29: engine=2.50.10432:5.2.15,1.0.148,0.0.000030: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0
header:01: Received-SPF: pass (mxeu2: domain of me.com designates 17.148.16.97 as02: permitted sender) client-ip=17.148.16.97;03: envelope-from=henry0000015 [at] me.com; helo=asmtpout022.mac.com;04: Received: from asmtpout022.mac.com (asmtpout022.mac.com [17.148.16.97])05: by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)06: ID: [ID filtered]07: xx:xx:xx +010008: MIME-version: 1.009: Content-type: multipart/alternative;10: boundary="Boundary_(ID_INfhuULuXQvCMmdTFSgCeQ)"11: Received: from spool002.mac.com ([10.150.69.52])12: by asmtp022.mac.com (Oracle Communications Messaging Exchange Server13: 7u4-20.0114: 64bit (built Nov 21 2010)) with ESMTP id15: <0LG9006ZNFAU2U50 [at] asmtp022.mac.com>16: for xxxxx; Mon, 07 Feb 2011 xx:xx:xx -0800 (PST)17: X-Proofpoint-Virus-Version: vendor=fsecure18: engine=2.50.10432:5.2.15,1.0.148,0.0.000019: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=020: X-Proofpoint-Spam-Details: rule=notspam policy=default score=2 spamscore=221: ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=022: classifier=spam23: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-110207008624: Received: from localhost ([10.150.79.234])25: by spool002.mac.com (Sun Java(tm) System Messaging Server 6.3-8.0126: (built Dec27: 16 2008; 32bit)) with ESMTP ID: [ID filtered]28: 07 Feb 2011 xx:xx:xx -0800 (PST)29: X-Proofpoint-Spam-Details: rule=notspam policy=default score=20 spamscore=2030: ipscore=0 suspectscore=0 phishscore=1 bulkscore=0 adultscore=031: classifier=spam32: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-110207008633: X-Proofpoint-Virus-Version: vendor=fsecure34: engine=2.50.10432:5.2.15,1.0.148,0.0.000035: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0
auch diese Muguline ist nicht neu:
header:01: Received: from mo-p07-ob.rzone.de (mo-p07-ob.rzone.de [81.169.146.188])02: (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Wed, 9 Feb 2011 xx:xx:xx +0100 (CET)06: Received: from User ([80.69.41.3])07: by post.strato.de (fruni mo45) (RZmta 25.1)08: with ESMTPA ID: [ID filtered]
IP: 80.69.41.3 ---> SMES - Siegbert Marschall/net-lab GmbH
header:01: Received: from fmmailgate05.web.de (EHLO fmmailgate05.web.de)02: [217.72.192.243]03: by mx0.gmx.net (mx081) with SMTP; 10 Feb 2011 xx:xx:xx +010004: Received: from mwmweb007 ( [172.20.18.16])05: by fmmailgate05.web.de (Postfix) with ESMTP ID: [ID filtered]06: Thu, 10 Feb 2011 xx:xx:xx +0100 (CET)07: Received: from [178.63.231.91] by mwmweb007 with HTTP; Thu08: Feb 10 xx:xx:xx CET 2011
IP: 178.63.231.91 ---> static.91.231.63.178.clients.your-server.de/Hetzner
Muguphon: +16465978815 ---> geographic number, New York
header:01: Received: from smtp.webfaction.com (mail6.webfaction.com [74.55.86.74])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 12 Feb 2011 xx:xx:xx +0100 (CET)04: Received: from User (unknown [74.10.42.158])05: by smtp.webfaction.com (Postfix) with ESMTP ID: [ID filtered]06: Sat, 12 Feb 2011 xx:xx:xx -0600 (CST)
IP: 74.10.42.158 ---> PaeTec Communications
header:01: Received: from hbmail.lyris.net (EHLO hbmail.lyris.net) [8.8.12.46]02: by mx0.gmx.net (mx112) with SMTP; 13 Feb 2011 xx:xx:xx +010003: Received: from User (75-213-63-74.servebyte.net [74.63.213.75])04: by hbmail.lyris.net (Postfix) with ESMTP ID: [ID filtered]05: Sat, 12 Feb 2011 xx:xx:xx -0800 (PST)
- kjz
Aus meinen (anscheinend nie versiegenden) Mugu-Quellen:
header:01: Received: from rediffmail.com (f4mail-234-231.rediffmail.com02: [202.137.234.231])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Tue, 15 Feb 2011 xx:xx:xx +0100 (CET)05: Received: (qmail 52555 invoked by UID: [UID filtered]06: Received: from unknown 174.36.32.177 by rediffmail.com via HTTP; 15 Feb07: 2011 xx:xx:xx -0000
IP: 174.36.32.177 ---> 174.36.32.177-static.reverse.softlayer.com
header:01: Received: from nm1-vm1.bullet.mail.kr3.yahoo.com02: (nm1-vm1.bullet.mail.kr3.yahoo.com [111.67.240.243])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Tue, 15 Feb 2011 xx:xx:xx +0100 (CET)05: Received: from [111.67.240.251] by nm1.bullet.mail.kr3.yahoo.com with06: NNFMP; 15 Feb 2011 xx:xx:xx -000007: Received: from [111.67.240.253] by tm2.bullet.mail.kr3.yahoo.com with08: NNFMP; 15 Feb 2011 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1002.mail.kr3.yahoo.com with NNFMP; 1510: Feb 2011 xx:xx:xx -000011: Received: from [41.216.50.26] by web70701.mail.kr3.yahoo.com via HTTP;12: Tue, 15 Feb 2011 xx:xx:xx KST
IP: 41.216.50.26 ---> Benin Telecoms SA
Muguphon: +229-960-380-72 ---> mobile number, Benin
gecracktes SquirrelMail:
header:01: Received: from mail.scpasivex.com (EHLO scpasivex.com) [212.180.62.213]02: by mx0.gmx.net (mx014) with SMTP; 16 Feb 2011 xx:xx:xx +010003: Received: from localhost (localhost [127.0.0.1])04: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]05: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)06: Received: from scpasivex.com ([127.0.0.1])07: by localhost (serveur.scpasivex.com [127.0.0.1]) (amavisd-new, port 10024)08: with ESMTP ID: [ID filtered]09: Received: from scpasivex.com (localhost [127.0.0.1])10: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]11: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)12: Received: from 41.220.69.2013: (SquirrelMail authenticated user ssi)14: by scpasivex.com with HTTP;15: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)
header:01: Received: from mail.scpasivex.com (EHLO scpasivex.com) [212.180.62.213]02: by mx0.gmx.net (mx092) with SMTP; 16 Feb 2011 xx:xx:xx +010003: Received: from localhost (localhost [127.0.0.1])04: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]05: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)06: Received: from scpasivex.com ([127.0.0.1])07: by localhost (serveur.scpasivex.com [127.0.0.1]) (amavisd-new, port 10024)08: with ESMTP ID: [ID filtered]09: Received: from scpasivex.com (localhost [127.0.0.1])10: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]11: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)12: Received: from 41.220.69.2013: (SquirrelMail authenticated user ssi)14: by scpasivex.com with HTTP;15: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)
IP: 41.220.69.20 ---> 69-20.vgccl.net/MTN, Nigeria
header:01: Received: from ws6-1.us4.outblaze.com (ws6-1.us4.outblaze.com02: [205.158.62.196])03: by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)04: ID: [ID filtered]05: xx:xx:xx +010006: Message-ID: [ID filtered]07: Cc: recipient list not shown: ;08: X-ob-auth: rjohnson:silverstar.com [at] ob-silverstar.com09: Received: from unknown (HELO admin) (rjohnson [at] silverstar.com@89.238.164.24)10: by ws6-1.us4.outblaze.com with SMTP; 16 Feb 2011 xx:xx:xx -0000
header:01: Received: from ws6-1.us4.outblaze.com (HELO ws6-1.us4.outblaze.com)02: [205.158.62.196]03: by mx0.gmx.net (mx023) with SMTP; 17 Feb 2011 xx:xx:xx +010004: Message-ID: [ID filtered]05: Cc: recipient list not shown: ;06: X-ob-auth: rjohnson:silverstar.com [at] ob-silverstar.com07: Received: from unknown (HELO admin) (rjohnson [at] silverstar.com@89.238.164.24)08: by ws6-1.us4.outblaze.com with SMTP; 16 Feb 2011 xx:xx:xx -0000
header:01: Received: from ws6-1.us4.outblaze.com (HELO ws6-1.us4.outblaze.com)02: [205.158.62.196]03: by mx0.gmx.net (mx088) with SMTP; 17 Feb 2011 xx:xx:xx +010004: Message-ID: [ID filtered]05: Cc: recipient list not shown: ;06: X-ob-auth: rjohnson:silverstar.com [at] ob-silverstar.com07: Received: from unknown (HELO admin) (rjohnson [at] silverstar.com@89.238.164.24)08: by ws6-1.us4.outblaze.com with SMTP; 16 Feb 2011 xx:xx:xx -0000
IP: 89.238.164.24 ---> db.serviture.net/OH Telecom
header:01: Received: from outbound-mail02.westnet.com.au (EHLO02: outbound-mail02.westnet.com.au) [203.10.1.243]03: by mx0.gmx.net (mx046) with SMTP; 17 Feb 2011 xx:xx:xx +010004: Received: from unknown (HELO webmail03.westnet.com.au) ([192.168.39.43])05: by outbound-mail02.westnet.com.au with ESMTP; 17 Feb 2011 xx:xx:xx +0800
whois:
header:01: Received: from mail.beifa.com (www.beifa.com [202.101.188.84])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Fri, 18 Feb 2011 xx:xx:xx +0100 (CET)04: Received: (qmail 25707 invoked from network); 17 Feb 2011 xx:xx:xx -000005: Received: from unknown (HELO User) (alec [at] 216.2.161.6)06: by www.beifa.com with SMTP; 17 Feb 2011 xx:xx:xx -0000
IP: 216.2.161.6 ---> XO Communications
Ausnahmsweise hier mal das Mugu-Märchen, da ich diese Variante bisher noch nicht gesehen habe:
Zitat:
Good day,
I am looking for your co-operation in building a Tourist Hotel or Real
Estate in your country. I am sorry if this is not in line with your
business. I need an experienced person like you to assist me to set up
and develop the project. On the resumption of the project, you will be
made a Director for the role and the assistance you rendered. You will
also be entitled to a percentage agreed upon between me (Hon. Raila
Amolo Odinga) and you before the commencement of the project. Your
immediate reply will be highly appreciated and I shall give you more
information on this project.
Please contact me at my private e-mail address
Thanks and God bless.
Hon. Raila Amolo Odinga
header:01: Received: from alboreto.otenet-telecom.net (alboreto.otenet-telecom.net02: [213.207.140.122])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 17 Feb 2011 xx:xx:xx +0100 (CET)05: Received: from localhost (localhost [127.0.0.1])06: by alboreto.otenet-telecom.net (Postfix) with ESMTP ID: [ID filtered]07: Thu, 17 Feb 2011 xx:xx:xx +0200 (EET)08: X-Virus-Scanned: Debian amavisd-new at alboreto.otenet-telecom.net09: Received: from alboreto.otenet-telecom.net ([127.0.0.1])10: by localhost (alboreto.otenet-telecom.net [127.0.0.1]) (amavisd-new,11: port 10024)12: with ESMTP ID: [ID filtered]13: Received: from User (unknown [82.128.88.223])14: by alboreto.otenet-telecom.net (Postfix) with ESMTPA ID: [ID filtered]15: Thu, 17 Feb 2011 xx:xx:xx +0200 (EET)
IP: 82.128.88.223 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +44 702 408 4102 ---> Magrathea Telecommunications Limited, UK
- kjz
Meine Quellen sprudeln reichlich:
header:01: Received: from mail.lbasantarem.com.br (EHLO www.lwww) [201.72.87.140]02: by mx0.gmx.net (mx086) with SMTP; 15 Feb 2011 xx:xx:xx +010003: Received: from lbasantarem.com.br (localhost.localdomain [127.0.0.1])04: by www.lwww (Postfix) with ESMTP ID: [ID filtered]05: Tue, 15 Feb 2011 xx:xx:xx -0300 (BRT)
X-OriginatingIP: 41.203.64.250 (paulo) ---> GLO-Mobile Network Services, Nigeria
Mugphon: +2348072430217 ---> Globacom Ltd., Nigeria
header:01: Received: from omr-d33.mx.aol.com (EHLO omr-d33.mx.aol.com)02: [205.188.249.131]03: by mx0.gmx.net (mx028) with SMTP; 15 Feb 2011 xx:xx:xx +010004: Received: from oms-mb01.r1000.mx.aol.com (oms-mb01.r1000.mx.aol.com05: [64.12.102.137])06: by omr-d33.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Tue, 15 Feb 2011 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from mtaout-ma01.r1000.mx.aol.com10: (mtaout-ma01.r1000.mx.aol.com [172.29.41.1])11: by oms-mb01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id12: 84B9C1C00008B;13: Tue, 15 Feb 2011 xx:xx:xx -0500 (EST)14: Received: from WIN-Q9I620H8H9I (unknown [178.33.149.185])15: by mtaout-ma01.r1000.mx.aol.com (MUA/Third Party Client Interface) with16: ESMTPA ID: [ID filtered]17: Tue, 15 Feb 2011 xx:xx:xx -0500 (EST)
IP: 178.33.149.185 ---> SANTREX/OVH
Muguphon: +234-708-479-9600 ---> Celtel Nigeria Limited/Zain
header:01: Received: from bit.bg (EHLO BIT.bg) [193.108.24.210]02: by mx0.gmx.net (mx118) with SMTP; 16 Feb 2011 xx:xx:xx +010003: Received: from User ([202.1.114.170])04: (authenticated bits=0)05: by BIT.bg (8.14.4/8.14.4) with ESMTP ID: [ID filtered]06: Wed, 16 Feb 2011 xx:xx:xx +0200
IP: 202.1.114.170 ---> Globalstride, PH
Und wieder mal einen Uni-Account gecrackt:
header:01: Received: from dns.hsps.tpc.edu.tw (EHLO dns.hsps.tpc.edu.tw) [163.20.58.1]02: by mx0.gmx.net (mx115) with SMTP; 18 Feb 2011 xx:xx:xx +010003: Received: from dns.hsps.tpc.edu.tw (localhost [127.0.0.1])04: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]05: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)06: Received: from hsps.tpc.edu.tw (localhost [127.0.0.1])07: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]08: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)
header:01: Received: from dns.hsps.tpc.edu.tw (EHLO dns.hsps.tpc.edu.tw) [163.20.58.1]02: by mx0.gmx.net (mx107) with SMTP; 18 Feb 2011 xx:xx:xx +010003: Received: from dns.hsps.tpc.edu.tw (localhost [127.0.0.1])04: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]05: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)06: Received: from hsps.tpc.edu.tw (localhost [127.0.0.1])07: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]08: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)
X-OriginatingIP: 82.128.16.118 (e60730) ---> ml82.128.16.118.multilinks.com, Nigeria
Muguphon: +44 702 4031519 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from osxserver.canberra-urology.com (unknown [203.29.87.57])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sat, 19 Feb 2011 xx:xx:xx +0100 (CET)06: Received: from User ([80.69.41.3])07: (authenticated user accounts [at] canberra-urology.com)08: by osxserver.canberra-urology.com (Kerio Connect 7.1.2);09: Sat, 19 Feb 2011 xx:xx:xx +1100
IP: 80.69.41.3 ---> Siegbert Marschall DE-based infratructure net (bitte merken)
header:01: Received: from frontend03n.mail.kz (EHLO mail.kz) [92.46.53.18]02: by mx0.gmx.net (mx095) with SMTP; 20 Feb 2011 xx:xx:xx +010003: Received: from [76.164.31.6] (account anne [at] mail.kz HELO User)04: by backend01n.mail.kz (CommuniGate Pro SMTP 5.2.13)05: with ESMTPA ID: [ID filtered]
IP: 76.164.31.6 ---> Integra Telecom, Inc.
Muguphon: +44-702-402-9183 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from unknown (EHLO ns1-131.psychodev.net) [122.155.13.43]02: by mx0.gmx.net (mx031) with SMTP; 20 Feb 2011 xx:xx:xx +010003: Received: from [123.108.110.47] (helo=User)04: by ns1-131.psychodev.net with esmtpa (Exim 4.67)05: (envelope-from <erickrocher [at] yahoo.com>)06: ID: [ID filtered]
IP: 123.108.110.47 ---> Pang International Limited, HK
- kjz
Aus der Mugu-Küche:
header:01: Received: from bravo112.server4you.de (EHLO amo.motorradmarkt.eu)02: [85.25.1.205]03: by mx0.gmx.net (mx013) with SMTP; 22 Feb 2011 xx:xx:xx +010004: Received: by amo.motorradmarkt.eu (Postfix, from userID: [ID filtered]05: ID: [ID filtered]06: Received: from localhost by amo.motorradmarkt.eu07: with SpamAssassin (version 3.2.3);08: Tue, 22 Feb 2011 xx:xx:xx +010009: Received: from User (207-204-115-208.servebyte.net [208.115.204.207])10: by amo.motorradmarkt.eu (Postfix) with ESMTP ID: [ID filtered]11: Tue, 22 Feb 2011 xx:xx:xx +0100 (CET)
Muguphon: +44-703-596-8050 ---> Open Telecom International Ltd., UK
header:01: Received: from gls-inc.net (75-147-130-21-SFBA.hfc.comcastbusiness.net02: [75.147.130.21])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Tue, 22 Feb 2011 xx:xx:xx +0100 (CET)05: Received: from User ([64.184.250.236]) by gls-inc.net with Microsoft06: SMTPSVC(6.0.3790.4675);07: Mon, 21 Feb 2011 xx:xx:xx -0800
IP: 64.184.250.236 ---> 64-184-250-236.mammothnetworks.com
header:01: Received: from outgoing.hosting.tp.pl (EHLO mta7.hosting.tp.pl)02: [193.110.120.20]03: by mx0.gmx.net (mx040) with SMTP; 22 Feb 2011 xx:xx:xx +010004: Received: from User ([110.159.241.121]) by mta7.hosting.tp.pl (m7)05: with ESMTPA ID: [ID filtered]06: 22 Feb 2011 xx:xx:xx +0100 (CET)
IP: 110.159.241.121 ---> TELEKOM MALAYSIA BERHAD
Muguphon: +44 703 187 6951 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from host1.newmediaplan.net (EHLO host1.newmediaplan.net)02: [217.22.246.116]03: by mx0.gmx.net (mx013) with SMTP; 22 Feb 2011 xx:xx:xx +010004: Received: (qmail 2333 invoked from network); 21 Feb 2011 xx:xx:xx +010005: Received: from unknown (HELO User) (78.39.201.39)06: by 217.22.246.118 with SMTP; 21 Feb 2011 xx:xx:xx +0100
IP: 78.39.201.39 ---> DCI-Route, IR
Muguphon: +44 702 401 7920 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from omr-m32.mx.aol.com (omr-m32.mx.aol.com [64.12.143.152])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 22 Feb 2011 xx:xx:xx +0100 (CET)04: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com05: [64.12.102.138])06: by omr-m32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Tue, 22 Feb 2011 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from mtaout-mb05.r1000.mx.aol.com10: (mtaout-mb05.r1000.mx.aol.com [172.29.41.69])11: by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id12: 04E3F1C00008C;13: Tue, 22 Feb 2011 xx:xx:xx -0500 (EST)14: Received: from WIN-Q9I620H8H9I (unknown [178.33.149.185])15: by mtaout-mb05.r1000.mx.aol.com (MUA/Third Party Client Interface) with16: ESMTPA ID: [ID filtered]17: Tue, 22 Feb 2011 xx:xx:xx -0500 (EST)
IP: 178.33.149.185 ---> Santrex-Internet/OVH
Muguphon: +234-708 5781753 ---> Celtel Nigeria Limited/Zain
die Madrid-Konnektion:
header:01: Received: from 213.37.86.97.static.user.ono.com (EHLO mx4.hotmail.com)02: [213.37.86.97]03: by mx0.gmx.net (mx086) with SMTP; 22 Feb 2011 xx:xx:xx +0100
Muguphon: +34-632-262-118 ---> Lycamobile, S.l., Espana
Mugufax: +34-917-903-799 ---> Colt Telecom España, S.a.
header:01: Received: from unknown166.85.200.74.defenderhosting.com (EHLO02: tmetric.net) [74.200.85.166]03: by mx0.gmx.net (mx089) with SMTP; 22 Feb 2011 xx:xx:xx +010004: Received: (qmail 20205 invoked from network); 22 Feb 2011 xx:xx:xx +040005: Received: from unknown (HELO User) (123.108.110.47)06: by unknown191.85.200.74.defenderhosting.com with SMTP; 22 Feb 201107: xx:xx:xx +0400
IP: 123.108.110.47 ---> Pang International Limited, HK
- kjz
Auch in der Speisekammer findet sich noch was:
gecrackter web.de Account:
header:01: Received: from fmmailgate09.web.de (fmmailgate09.web.de [217.72.192.184])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 21 Feb 2011 xx:xx:xx +0100 (CET)04: Received: from fmmailgate06.web.de ( [172.20.1.52])05: by fmmailgate09.web.de (Postfix) with ESMTP ID: [ID filtered]06: Mon, 21 Feb 2011 xx:xx:xx +0100 (CET)07: Received: from mwmweb009 ( [172.20.18.18])08: by fmmailgate06.web.de (Postfix) with ESMTP ID: [ID filtered]09: Mon, 21 Feb 2011 xx:xx:xx +0100 (CET)10: Received: from [77.70.128.160] by mwmweb009 with HTTP; Mon11: Feb 21 xx:xx:xx CET 2011
IP: 77.70.128.160 ---> Comgeo Services/Taide, Nigeria
wieder gecrackter Account:
header:01: Received: from local.host (220-130-222-80.HINET-IP.hinet.net02: [220.130.222.80])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Tue, 22 Feb 2011 xx:xx:xx +0100 (CET)05: Received: from mail.takewin.com.tw (mail.takewin.com.tw [220.130.222.79])06: by local.host (UTM-1000 XiU) with ESMTP07: for xxxxx; Wed, 23 Feb 2011 xx:xx:xx +0800 (UTC)08: Received: from local.host (unknown [41.124.168.45])09: by mail.takewin.com.tw (Postfix) with ESMTP ID: [ID filtered]10: Wed, 23 Feb 2011 xx:xx:xx +0800 (CST)11: X-Spam-Filter: 00:90:0B:19:14:0E_4D5EF36612: Received: from User (unknown [41.124.168.45])13: (Authenticated sender: raymond)14: by local.host (UTM-1000 XiU) with ESMTP;15: Wed, 23 Feb 2011 xx:xx:xx +0800 (UTC)
IP: 41.124.168.45 ---> MTN Business Solutions, ZA
Muguphon: +27 787310461 (RSA) ---> MTN, ZA
Muguphon: +44 702 4058868 (U.K) ---> Magrathea Telecommunications Limited, UK
die Madrid-Konnektion:
header:01: Received: from mx01.intelligenceresearch.com02: (mx01.intelligenceresearch.com [217.154.148.147])03: by spammotel.com (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 24 Feb 2011 xx:xx:xx -0500 (EST)05: Received: from User ([62.83.47.42]) by mx01.intelligenceresearch.com06: with Microsoft SMTPSVC(6.0.3790.4675);07: Thu, 24 Feb 2011 xx:xx:xx +0000
IP: 62.83.47.42 ---> 62.83.47.42.dyn.user.ono.com, Espana
Muguphon: +34-688-221-505 ---> mobile number, Espana
der Sternchen-Mugu:
header:01: Received: from mail.mercurypdx.com (EHLO mercurypdx.com) [72.11.88.214]02: by mx0.gmx.net (mx009) with SMTP; 27 Feb 2011 xx:xx:xx +010003: Received: from User [212.98.169.220] by mercurypdx.com with ESMTP04: (SMTPD32-5.00) ID: [ID filtered]
IP: 212.98.169.220 ---> BNET-4PHASE
Zitat:
*Attention: Dear Prominent User of the Internet *
Muguphon: +234 81 3834 8406 ---> Nigeria
Muguphon: +44 704 575 7170 ---> Open Telecom International Ltd., UK
Mugufax: +1-501-647-039 ---> Telcove Investment, Llc - Ar/Level 3
- kjz
Eine Runde Mugus schenk' ich noch ein:
wieder der Yahoo/ATT-Mugu:
header:01: Received: from nm21-vm1.bullet.mail.sp2.yahoo.com (HELO02: nm21-vm1.bullet.mail.sp2.yahoo.com) [98.139.91.221]03: by mx0.gmx.net (mx074) with SMTP; 28 Feb 2011 xx:xx:xx +010004: Received: from [98.139.91.66] by nm21.bullet.mail.sp2.yahoo.com with05: NNFMP; 28 Feb 2011 xx:xx:xx -000006: Received: from [98.139.91.40] by tm6.bullet.mail.sp2.yahoo.com with07: NNFMP; 28 Feb 2011 xx:xx:xx -000008: Received: from [127.0.0.1] by omp1040.mail.sp2.yahoo.com with NNFMP; 2809: Feb 2011 xx:xx:xx -000010: Received: (qmail 31135 invoked by UID: [UID filtered]11: Received: from [41.210.11.190] by web83802.mail.sp1.yahoo.com via HTTP;12: Mon, 28 Feb 2011 xx:xx:xx PST
IP: 41.210.11.190 ---> 41-210-11-190-adsl-dyn.4u.com.gh
auch diesen Mugu gibt es mehrfach:
header:01: Received: from avsf.webcastor.fr ([213.161.204.66])02: by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: (qmail 11188 invoked from network); 24 Feb 2011 xx:xx:xx +010006: Received: from unknown (HELO User) (119.115.136.150)07: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
header:01: Received: from avsf.webcastor.fr ([213.161.204.66])02: by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: (qmail 13658 invoked from network); 24 Feb 2011 xx:xx:xx +010006: Received: from unknown (HELO User) (119.115.136.150)07: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
IP: 119.115.136.150 ---> China Unicom Liaoning
Muguphon: +44-786-761-0993 ---> Vodafone Ltd., UK
Mugufax: +44-870-4958-176 ---> national rate number, UK
header:01: Received: from agrobaggio.com.br (agrobaggio.com.br [200.181.47.83])02: by xxxxx (Postfix) with SMTP ID: [ID filtered]03: for xxxxx; Fri, 4 Mar 2011 xx:xx:xx +0100 (CET)04: Received: (qmail 51112 invoked by UID: [UID filtered]05: Received: from 41.211.223.83 by agrobaggio.com.br (envelope-from06: <info [at] smtp.com>, UID: [UID filtered]07: (spamassassin: 3.2.5. perlscan: 1.25-st-qms.08: Clear:RC:0(41.211.223.83):SA:1(15.2/5.0):.09: Processed in 4.677444 secs); 04 Mar 2011 xx:xx:xx -000010: X-Antivirus-agrobaggio.com.br-Mail-From: info [at] smtp.com via agrobaggio.com.br11: X-Antivirus-agrobaggio.com.br: 1.25-st-qms12: (Clear:RC:0(41.211.223.83):SA:1(15.2/5.0):. Processed in 4.677444 secs13: Process 50988)14: Received: from 83.223.211.41.client83.directonpc.net (HELO User)15: (salviano [at] agrobaggio.com.br@41.211.223.83)16: by agrobaggio.com.br with SMTP; 4 Mar 2011 xx:xx:xx -0000
IP: 41.211.223.83 ---> 83.223.211.41.client83.directonpc.net, Nigeria
header:01: Received: from skynet.usb.ve (EHLO skynet.usb.ve) [159.90.200.7]02: by mx0.gmx.net (mx079) with SMTP; 04 Mar 2011 xx:xx:xx +010003: Received: from usb.ve (webmail.usb.ve [159.90.200.160])04: by skynet.usb.ve (Postfix) with ESMTP ID: [ID filtered]05: Thu, 3 Mar 2011 xx:xx:xx -0430 (VET)06: Received: from ml82.128.17.157.multilinks.com07: (ml82.128.17.157.multilinks.com [82.128.17.157]) by webmail.usb.ve (Horde08: MIME library) with HTTP; Thu, 03 Mar 2011 xx:xx:xx -0430
IP: 82.128.17.157 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +44 702 4031519 ---> Magrathea Telecommunications Limited, UK
- kjz
Am Aschermittwoch, ist sicher nicht alles vorbei....
wieder ein 'alter Bekannter':
header:01: Received: from avsf.webcastor.fr ([213.161.204.66])02: by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: (qmail 15074 invoked from network); 24 Feb 2011 xx:xx:xx +010006: Received: from unknown (HELO User) (119.115.136.150)07: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
IP: 119.115.136.150 ---> China Unicom Liaoning
Muguphon: +44-786-761-0993 ---> Vodafone Ltd., UK
Mugufax: +44-870-4958-176 ---> national rate number, UK
header:01: Received: from mc242.static.gvt.net.br (EHLO mc242.static.gvt.net.br)02: [187.58.205.242]03: by mx0.gmx.net (mx097) with SMTP; 02 Mar 2011 xx:xx:xx +010004: Received: from User (unknown [41.203.64.250])05: by mc242.static.gvt.net.br (Postfix) with ESMTP ID: [ID filtered]06: Wed, 2 Mar 2011 xx:xx:xx -0300 (BRT)
IP: 41.203.64.250 ---> GLO-Mobile Network Services, Nigeria
header:01: Received: from www.helmhq.com (EHLO mail.helmhq.com) [66.90.80.239]02: by mx0.gmx.net (mx074) with SMTP; 05 Mar 2011 xx:xx:xx +010003: Received: from 41.217.65.10 [41.217.65.10] by mail.helmhq.com with SMTP;04: Fri, 4 Mar 2011 xx:xx:xx -0500
IP: 41.217.65.10 ---> ZOOM Mobile Nigeria Ltd.
header:01: Received: from ls8.moinet.ru (ls8.moinet.ru [93.174.6.165])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sun, 6 Mar 2011 xx:xx:xx +0100 (CET)
- kjz
Im Fundus gefunden:
ein 'alter Bekannter':
header:01: Received: from unknown (EHLO avsf.webcastor.fr) [213.161.204.66]02: by mx0.gmx.net (mx058) with SMTP; 08 Mar 2011 xx:xx:xx +010003: Received: (qmail 11188 invoked from network); 24 Feb 2011 xx:xx:xx +010004: Received: from unknown (HELO User) (119.115.136.150)05: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
header:01: Received: from unknown (EHLO avsf.webcastor.fr) [213.161.204.66]02: by mx0.gmx.net (mx031) with SMTP; 08 Mar 2011 xx:xx:xx +010003: Received: (qmail 11188 invoked from network); 24 Feb 2011 xx:xx:xx +010004: Received: from unknown (HELO User) (119.115.136.150)05: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
header:01: Received: from unknown (EHLO avsf.webcastor.fr) [213.161.204.66]02: by mx0.gmx.net (mx053) with SMTP; 09 Mar 2011 xx:xx:xx +010003: Received: (qmail 13658 invoked from network); 24 Feb 2011 xx:xx:xx +010004: Received: from unknown (HELO User) (119.115.136.150)05: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
header:01: Received: from unknown (EHLO avsf.webcastor.fr) [213.161.204.66]02: by mx0.gmx.net (mx106) with SMTP; 09 Mar 2011 xx:xx:xx +010003: Received: (qmail 13658 invoked from network); 24 Feb 2011 xx:xx:xx +010004: Received: from unknown (HELO User) (119.115.136.150)05: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
header:01: Received: from unknown (EHLO avsf.webcastor.fr) [213.161.204.66]02: by mx0.gmx.net (mx048) with SMTP; 08 Mar 2011 xx:xx:xx +010003: Received: (qmail 15074 invoked from network); 24 Feb 2011 xx:xx:xx +010004: Received: from unknown (HELO User) (119.115.136.150)05: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
header:01: Received: from unknown (EHLO avsf.webcastor.fr) [213.161.204.66]02: by mx0.gmx.net (mx069) with SMTP; 08 Mar 2011 xx:xx:xx +010003: Received: (qmail 15074 invoked from network); 24 Feb 2011 xx:xx:xx +010004: Received: from unknown (HELO User) (119.115.136.150)05: by 213.161.204.66 with SMTP; 24 Feb 2011 xx:xx:xx +0100
IP: 119.115.136.150 ---> China Unicom Liaoning
Muguphon: +44-786-761-0993 ---> Vodafone Ltd., UK
Mugufax: +44-870-4958-176 ---> national rate number, UK
und wieder mal SquirrelMail gecrackt:
header:01: Received: from smtp.sergipenet.com.br (ip002-132.sergipenet.com.br02: [186.194.2.132])03: by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)04: ID: [ID filtered]05: xx:xx:xx +010006: Received: (qmail 15071 invoked by UID: [UID filtered]07: Cc: recipient list not shown: ;08: Received: from 41.217.70.409: (SquirrelMail authenticated user jrc);10: by webmail.sergipenet.com.br with HTTP;11: Fri, 4 Mar 2011 xx:xx:xx -0300 (BRT)
IP: 41.217.70.4 ---> ZOOM Mobile Nigeria Ltd.
der 'Funk-Mugu':
header:01: Received: from smtp5.freeserve.com (EHLO smtp6.freeserve.com)02: [193.252.22.151]03: by mx0.gmx.net (mx049) with SMTP; 09 Mar 2011 xx:xx:xx +010004: Received: from smtp6.freeserve.com (localhost [127.0.0.1])05: by mwinf3534.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]06: Wed, 9 Mar 2011 xx:xx:xx +0100 (CET)07: Received: from me-wanadoo.net (localhost [127.0.0.1])08: by mwinf3534.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]09: Wed, 9 Mar 2011 xx:xx:xx +0100 (CET)10: Received: from me-wanadoo.net (localhost [127.0.0.1])11: by mwinf3534.me.freeserve.com (SMTP Server) with ESMTP ID: [ID filtered]12: Wed, 9 Mar 2011 xx:xx:xx +0100 (CET)13: Received: from User (unknown [109.180.225.165])14: by mwinf3534.me.freeserve.com (SMTP Server) with SMTP ID: [ID filtered]15: Wed, 9 Mar 2011 xx:xx:xx +0100 (CET)
IP: 109.180.225.165 ---> Orange GPRS Service
header:01: Received: from mail.kongkoow.com (EHLO mail.kongkoow.com) [202.155.112.22]02: by mx0.gmx.net (mx061) with SMTP; 10 Mar 2011 xx:xx:xx +010003: Received: (qmail 5931 invoked by UID: [UID filtered]04: Received: from allear.lnk.telstra.net (HELO User)05: (postmaster [at] kongkoow.com@203.45.59.73)06: by mail.kongkoow.com with SMTP; 8 Mar 2011 xx:xx:xx +0700
- kjz
Mugus auf der Rolle:
header:01: Received: from omr-d32.mx.aol.com (omr-d32.mx.aol.com [205.188.249.130])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 7 Mar 2011 xx:xx:xx +0100 (CET)04: Received: from oms-ma02.r1000.mx.aol.com (oms-ma02.r1000.mx.aol.com05: [64.12.140.130])06: by omr-d32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Mon, 7 Mar 2011 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from mtaout-mb06.r1000.mx.aol.com10: (mtaout-mb06.r1000.mx.aol.com [172.29.41.70])11: by oms-ma02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id12: 0CDEE38000085;13: Mon, 7 Mar 2011 xx:xx:xx -0500 (EST)14: Received: from Helo (66-79-39-212.dsl.coastalnow.net [66.79.39.212])15: by mtaout-mb06.r1000.mx.aol.com (MUA/Third Party Client Interface) with16: ESMTPA ID: [ID filtered]17: Mon, 7 Mar 2011 xx:xx:xx -0500 (EST)
header:01: Received: from omr-d32.mx.aol.com (omr-d32.mx.aol.com [205.188.249.130])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 7 Mar 2011 xx:xx:xx +0100 (CET)04: Received: from oms-ma02.r1000.mx.aol.com (oms-ma02.r1000.mx.aol.com05: [64.12.140.130])06: by omr-d32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Mon, 7 Mar 2011 xx:xx:xx -050008: Message-ID: [ID filtered]09: Received: from mtaout-mb06.r1000.mx.aol.com10: (mtaout-mb06.r1000.mx.aol.com [172.29.41.70])11: by oms-ma02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id12: 0CDEE38000085;13: Mon, 7 Mar 2011 xx:xx:xx -0500 (EST)14: Received: from Helo (66-79-39-212.dsl.coastalnow.net [66.79.39.212])15: by mtaout-mb06.r1000.mx.aol.com (MUA/Third Party Client Interface) with16: ESMTPA ID: [ID filtered]17: Mon, 7 Mar 2011 xx:xx:xx -0500 (EST)
header:01: Received: from pma.gov.tw (mail.pma.gov.tw [163.29.251.181])02: by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from mail.pma.gov.tw (localhost.pma.gov.tw [127.0.0.1])06: by pma.gov.tw (Postfix) with ESMTP ID: [ID filtered]07: Wed, 9 Mar 2011 xx:xx:xx +0800 (CST)
X-OriginatingIP: 41.71.147.123 (000113) ---> Visafone Communications Limited, Nigeria
Muguphon: +234 803-610-9994 ---> MTN Nigeria Communications Ltd.
header:01: Received: from alboreto.otenet-telecom.net (alboreto.otenet-telecom.net02: [213.207.140.122])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sat, 12 Mar 2011 xx:xx:xx +0100 (CET)05: Received: from localhost (localhost [127.0.0.1])06: by alboreto.otenet-telecom.net (Postfix) with ESMTP ID: [ID filtered]07: Fri, 11 Mar 2011 xx:xx:xx +0200 (EET)08: X-Virus-Scanned: Debian amavisd-new at alboreto.otenet-telecom.net09: Received: from alboreto.otenet-telecom.net ([127.0.0.1])10: by localhost (alboreto.otenet-telecom.net [127.0.0.1]) (amavisd-new,11: port 10024)12: with ESMTP ID: [ID filtered]13: Received: from User (unknown [82.128.106.146])14: by alboreto.otenet-telecom.net (Postfix) with ESMTPA ID: [ID filtered]15: Fri, 11 Mar 2011 xx:xx:xx +0200 (EET)
IP: 82.128.106.146 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +44 702 408 4102 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from hl82.dinaserver.com (hl82.dinaserver.com [82.98.131.114])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 11 Mar 2011 xx:xx:xx +0100 (CET)04: Received: from kiosk.com (unknown [65.23.154.77])05: by hl82.dinaserver.com (Postfix) with ESMTPA ID: [ID filtered]06: Fri, 11 Mar 2011 xx:xx:xx +0100 (CET)07: Received: from [192.168.0.1] by kiosk.com ID: [ID filtered]08: Mar 2011 xx:xx:xx -0700
und wieder der Fedex-Mugu-Diplomat via gecracktes SquirrelMail:
header:01: Received: from smtp.bhelpswr.co.in (smtp.bhelpswr.co.in [203.193.138.137])02: by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)03: ID: [ID filtered]04: xx:xx:xx +010005: Received: from bhelpswr.co.in ([10.14.1.220])06: by smtp.bhelpswr.co.in (8.13.1/8.13.1) with ESMTP ID: [ID filtered]07: for xxxxx; Sat, 12 Mar 2011 xx:xx:xx +053008: X-CAGWS-MailFrom: <fedex_delivery [at] bhelpswr.co.in>09: X-CAGWS-FileID: [ID filtered]10: Received: from 203.193.138.150 (203.193.138.150)11: by 10.14.1.8 (10.14.1.220);12: Sat, 12 Mar 2011 xx:xx:xx +053013: Received: from 41.71.151.21014: (SquirrelMail authenticated user nkverma)15: by www.bhelpswr.co.in with HTTP;16: Sat, 12 Mar 2011 xx:xx:xx +0530 (IST)
header:01: Received: from smtp.bhelpswr.co.in (EHLO smtp.bhelpswr.co.in)02: [203.193.138.137]03: by mx0.gmx.net (mx111) with SMTP; 11 Mar 2011 xx:xx:xx +010004: Received: from bhelpswr.co.in ([10.14.1.220])05: by smtp.bhelpswr.co.in (8.13.1/8.13.1) with ESMTP ID: [ID filtered]06: for xxxxx; Sat, 12 Mar 2011 xx:xx:xx +053007: X-CAGWS-MailFrom: <fedex_delivery [at] bhelpswr.co.in>08: X-CAGWS-FileID: [ID filtered]09: Received: from 203.193.138.150 (203.193.138.150)10: by 10.14.1.8 (10.14.1.220);11: Sat, 12 Mar 2011 xx:xx:xx +053012: Received: from 41.71.151.21013: (SquirrelMail authenticated user nkverma)14: by www.bhelpswr.co.in with HTTP;15: Sat, 12 Mar 2011 xx:xx:xx +0530 (IST)
header:01: Received: from smtp.bhelpswr.co.in (EHLO smtp.bhelpswr.co.in)02: [203.193.138.137]03: by mx0.gmx.net (mx103) with SMTP; 11 Mar 2011 xx:xx:xx +010004: Received: from bhelpswr.co.in ([10.14.1.220])05: by smtp.bhelpswr.co.in (8.13.1/8.13.1) with ESMTP ID: [ID filtered]06: for xxxxx; Sat, 12 Mar 2011 xx:xx:xx +053007: X-CAGWS-MailFrom: <fedex_delivery [at] bhelpswr.co.in>08: X-CAGWS-FileID: [ID filtered]09: Received: from 203.193.138.150 (203.193.138.150)10: by 10.14.1.8 (10.14.1.220);11: Sat, 12 Mar 2011 xx:xx:xx +053012: Received: from 41.71.151.21013: (SquirrelMail authenticated user nkverma)14: by www.bhelpswr.co.in with HTTP;15: Sat, 12 Mar 2011 xx:xx:xx +0530 (IST)
IP: 41.71.151.210 ---> Visafone Communications Limited, Nigeria
Muguphon: +234 803-610-9994 ---> MTN Nigeria Communications Ltd.
gecracktes Horde.....
header:01: Received: from teix.uib.es (EHLO teix.uib.es) [130.206.31.220]02: by mx0.gmx.net (mx013) with SMTP; 12 Mar 2011 xx:xx:xx +010003: X-IronPort-AV: E=Sophos;i="4.62,307,1297033200";04: d="scan'208";a="3455691"05: Received: from wm.uib.es (HELO uib.es) ([130.206.31.11])06: by smtp.uib.es with ESMTP; 12 Mar 2011 xx:xx:xx +010007: Received: from 41.71.149.44 ([41.71.149.44]) by wm.uib.es (Horde MIME08: library) with HTTP; Sat, 12 Mar 2011 xx:xx:xx +0100
IP: 41.71.149.44 ---> Visafone Communications Limited, Nigeria
header:01: Received: from smtp1.corp.telmex.net.ar (smtp.corp.telmex.net.ar02: [200.80.159.1])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Sat, 12 Mar 2011 xx:xx:xx +0100 (CET)07: Received: (qmail 32312 invoked by UID: [UID filtered]08: Received: from 120.141.25.91 by mtanuevo01 (envelope-from09: <helpcopies [at] opcionestelmex.com.ar>, UID: [UID filtered]10: (clamdscan: 0.95.2/9926.11: Clear:RC:1(120.141.25.91):.12: Processed in 0.020202 secs); 12 Mar 2011 xx:xx:xx -000013: Received: from unknown (HELO User)14: (helpcopies [at] opcionestelmex.com.ar@[120.141.25.91])15: (envelope-sender <poor [at] spamvictim.tld>)16: by mail (qmail-ldap-1.03) with SMTP17: for xxxxx; 12 Mar 2011 xx:xx:xx -0000
IP: 120.141.25.91 ---> Packet One Networks (M) Sdn, MY
gecracktes SquirrelMail:
header:01: Received: from ip002-132.sergipenet.com.br (HELO smtp.sergipenet.com.br)02: [186.194.2.132]03: by mx0.gmx.net (mx072) with SMTP; 12 Mar 2011 xx:xx:xx +010004: Received: (qmail 44790 invoked by UID: [UID filtered]05: Cc: recipient list not shown: ;06: Received: from 41.217.70.407: (SquirrelMail authenticated user jrc);08: by webmail.sergipenet.com.br with HTTP;09: Mon, 7 Mar 2011 xx:xx:xx -0300 (BRT)
header:01: Received: from ip002-132.sergipenet.com.br (HELO smtp.sergipenet.com.br)02: [186.194.2.132]03: by mx0.gmx.net (mx044) with SMTP; 12 Mar 2011 xx:xx:xx +010004: Received: (qmail 44790 invoked by UID: [UID filtered]05: Cc: recipient list not shown: ;06: Received: from 41.217.70.407: (SquirrelMail authenticated user jrc);08: by webmail.sergipenet.com.br with HTTP;09: Mon, 7 Mar 2011 xx:xx:xx -0300 (BRT)
IP: 41.217.70.4 ---> ZOOM Mobile Nigeria Ltd.
header:01: Received: from nskntmtas06p.mx.bigpond.com (nskntmtas06p.mx.bigpond.com02: [61.9.168.152])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sun, 13 Mar 2011 xx:xx:xx +0100 (CET)05: Received: from nskntotgx04p.mx.bigpond.com ([66.46.181.184])06: by nskntmtas06p.mx.bigpond.com with ESMTP07: id08: <20110313125504.XFEV4368.nskntmtas06p.mx.bigpond.com [at] nskntotgx04p.mx.bigpond.com>;09: Sun, 13 Mar 2011 xx:xx:xx +000010: Received: from User ([66.46.181.184]) by nskntotgx04p.mx.bigpond.com11: with ESMTP12: ID: [ID filtered]13: Sun, 13 Mar 2011 xx:xx:xx +0000
IP: 66.46.181.184 ---> Allstream Corp.
header:01: Received: from cpc1-walt14-0-0-cust78.13-2.cable.virginmedia.com (HELO02: harperd34.freeserve.co.uk) [81.100.74.79]03: by mx0.gmx.net (mx033) with SMTP; 13 Mar 2011 xx:xx:xx +010004: Received: from [74.6.69.47] by mx.reskind.net with SMTP; Sun, 13 Mar05: 2011 xx:xx:xx -040006: Received: from [20.78.149.243] by smtp.endend.nl with QMQP; Sun, 13 Mar07: 2011 xx:xx:xx -0400
Auch hier gilt meine Signatur: hätte Afrinic die Eier in der Hose und würde nur bei MTN, Zoom und Visafone den Stecker ziehen, wären wir der Lösung des Mugu-Problems schon ein gutes Stück näher.
- kjz
header:01: Received: from [192.168.224.50] (Forwarded-For: [69.31.50.48]) by02: store3.in.ac-orleans-tours.fr (mshttpd); Sat, 19 Mar 2011 xx:xx:xx GMT03: From: <ec-ime-fondation-chevallier-debeausse-alluyes-28 [at] ac-orleans-tours.fr>04: Reply-To: gerald.bergotti [at] gncn.net05: Message-ID: [ID filtered]06: Date: Sat, 19 Mar 2011 xx:xx:xx GMT07: MIME-Version: 1.008: Content-Language: en09: Subject: ASSISTANCE.10: Priority: normal11: Content-Type: text/plain; charset=us-ascii12: Content-Disposition: inline13: Content-Transfer-Encoding: 7bit14: To: undisclosed-recipients:;15: X-Junkmail-SD-Raw: score=unknown,16: refid=str=0001.0A0B0203.4D841253.00E4:SCFSTAT13800612,ss=1,fgs=0,17: ip=195.83.89.149,18: so=2009-06-02 xx:xx:xx,19: dmn=5.7.1/2009-08-27,20: mode=single engine21: Return-Path: ec-ime-fondation-chevallier-debeausse-alluyes-28 [at] ac-orleans-tours.fr
Zitat:
My name is Gerald Bergotti,I need your assistance in fulfilling an important obligation and would offer you 30% of the entire amount involved for assistance. For details,
please get back to me.
Thank you and God bless.
Eniac
Zur Sammlungserweiterung möchten beitragen:
header:01: Received: from unknown (EHLO mail.tnshb.gov.tw) [203.65.92.72]02: by mx0.gmx.net (mx010) with SMTP; 14 Mar 2011 xx:xx:xx +010003: Received: from User (mail.floralmart.com [66.76.207.30])04: by mail.tnshb.gov.tw (Postfix) with ESMTP ID: [ID filtered]05: Mon, 14 Mar 2011 xx:xx:xx +0800 (CST)
der Yahoo/ATT-Mugu:
header:01: Received: from nm18-vm1.access.bullet.mail.sp2.yahoo.com (HELO02: nm18-vm1.access.bullet.mail.sp2.yahoo.com) [98.139.44.171]03: by mx0.gmx.net (mx067) with SMTP; 14 Mar 2011 xx:xx:xx +010004: Received: from [98.139.44.96] by nm18.access.bullet.mail.sp2.yahoo.com05: with NNFMP; 14 Mar 2011 xx:xx:xx -000006: Received: from [98.139.44.84] by tm1.access.bullet.mail.sp2.yahoo.com07: with NNFMP; 14 Mar 2011 xx:xx:xx -000008: Received: from [127.0.0.1] by omp1021.access.mail.sp2.yahoo.com with09: NNFMP; 14 Mar 2011 xx:xx:xx -000010: Received: (qmail 94592 invoked by UID: [UID filtered]11: Received: from [41.146.105.146] by web180605.mail.sp1.yahoo.com via12: HTTP; Mon, 14 Mar 2011 xx:xx:xx PDT
header:01: Received: from nm12-vm1.access.bullet.mail.sp2.yahoo.com (HELO02: nm12-vm1.access.bullet.mail.sp2.yahoo.com) [98.139.44.127]03: by mx0.gmx.net (mx025) with SMTP; 14 Mar 2011 xx:xx:xx +010004: Received: from [98.139.44.100] by nm12.access.bullet.mail.sp2.yahoo.com05: with NNFMP; 14 Mar 2011 xx:xx:xx -000006: Received: from [98.139.44.66] by tm5.access.bullet.mail.sp2.yahoo.com07: with NNFMP; 14 Mar 2011 xx:xx:xx -000008: Received: from [127.0.0.1] by omp1003.access.mail.sp2.yahoo.com with09: NNFMP; 14 Mar 2011 xx:xx:xx -000010: Received: (qmail 70535 invoked by UID: [UID filtered]11: Received: from [41.146.105.146] by web180606.mail.sp1.yahoo.com via12: HTTP; Mon, 14 Mar 2011 xx:xx:xx PDT
IP: 41.146.105.146 ---> dsl-146-105-146.telkomadsl.co.za
header:01: Received: from static-26-122-229-77.ipcom.comunitel.net (EHLO02: mx4.hotmail.com) [77.229.122.26]03: by mx0.gmx.net (mx048) with SMTP; 14 Mar 2011 xx:xx:xx +0100
header:01: Received: from owngate.shmu.edu.cn (HELO eyou.net) [202.120.79.46]02: by mx0.gmx.net (mx098) with SMTP; 15 Mar 2011 xx:xx:xx +010003: X-EYOU-SPAMVALUE:004: X-EMDG-VER:2009-02-2805: Received: (eyou anti_spam gateway 3.0); Tue, 15 Mar 2011 xx:xx:xx +080006: Received: from 207.194.87.105 by 192.168.0.46 with SMTP; Tue, 15 Mar07: 2011 xx:xx:xx +0800
header:01: Received: from smtp.soperent.com (smtp.soperent.com [67.51.153.85])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Wed, 16 Mar 2011 xx:xx:xx +0100 (CET)04: Received: from 84.125.23.62.dyn.user.ono.com [84.125.23.62] by05: smtp.soperent.com with SMTP; Wed, 16 Mar 2011 xx:xx:xx -0600
header:01: Received: from s209.n138.n172.n72.static.myhostcenter.com (EHLO02: slouchguard.com) [72.172.138.209]03: by mx0.gmx.net (mx118) with SMTP; 17 Mar 2011 xx:xx:xx +010004: Received: from User ([82.128.87.113])05: (authenticated bits=0)06: by slouchguard.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]07: Wed, 16 Mar 2011 xx:xx:xx -0400
X-Orig: [82.128.87.113] ---> Multilinks Telecommunications Limited, Nigeria
der Sternchen-Mugu via gecracktem Account by ISH:
header:01: Received: from mail01.ish.de (mailout.ish.de [80.69.98.250])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 17 Mar 2011 xx:xx:xx +0100 (CET)04: Received: from [41.138.178.8] (account t.rademske [at] ish.de HELO User)05: by mail-fe-02.mail01.ish.de (CommuniGate Pro SMTP 5.2.18)06: with ESMTPSA ID: [ID filtered]07: Received-SPF: softfail08: receiver=mail-fe-02.mail01.ish.de; client-ip=41.138.178.8;09: envelope-from=mrs.ingabritt9 [at] hotmail.com
IP: 41.138.178.8 ---> Visafone Communications Limited, Nigeria
Zitat:
*Sincerely yours, *
*Mrs.Inga-Britt Ahlenius.*
Muguphon: +447035922815 ---> Open Telecom International Ltd., UK
- kjz
Vorerst nur die üblichen Mugus:
AOL ist anscheinend auch nur noch Spamschleuder zu miss/ge-brauchen:
header:01: Received: from omr-m32.mx.aol.com (omr-m32.mx.aol.com [64.12.143.152])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Mon, 14 Mar 2011 xx:xx:xx +0100 (CET)04: Received: from oms-db03.r1000.mx.aol.com (oms-db03.r1000.mx.aol.com05: [205.188.58.3])06: by omr-m32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Mon, 14 Mar 2011 xx:xx:xx -040008: Message-ID: [ID filtered]09: Received: from mtaout-db04.r1000.mx.aol.com10: (mtaout-db04.r1000.mx.aol.com [172.29.51.196])11: by oms-db03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id12: EED3B1C000087;13: Mon, 14 Mar 2011 xx:xx:xx -0400 (EDT)14: Received: from dynanny (66-79-39-212.dsl.coastalnow.net [66.79.39.212])15: by mtaout-db04.r1000.mx.aol.com (MUA/Third Party Client Interface) with16: ESMTPA ID: [ID filtered]17: Mon, 14 Mar 2011 xx:xx:xx -0400 (EDT)
header:01: Received: from frontend03n.mail.kz (EHLO mail.kz) [92.46.53.18]02: by mx0.gmx.net (mx045) with SMTP; 18 Mar 2011 xx:xx:xx +010003: Received: from [62.3.224.21] (account anne [at] mail.kz HELO User)04: by backend01n.mail.kz (CommuniGate Pro SMTP 5.2.13)05: with ESMTPA ID: [ID filtered]
IP: 62.3.224.21 ---> ioltd11.gotadsl.co.uk
Muguphon: +44-702-402-9317 ---> Magrathea Telecommunications Limited, UK
- kjz
Und wieder ein Griff in die 'Schatzkiste':
header:01: Received: from host217-41-6-136.in-addr.btopenworld.com (EHLO02: office.talismanhomes.co.uk) [217.41.6.136]03: by mx0.gmx.net (mx074) with SMTP; 21 Mar 2011 xx:xx:xx +010004: Received: from User ([217.41.63.118]) by office.talismanhomes.co.uk with05: Microsoft SMTPSVC(6.0.3790.4675);06: Mon, 21 Mar 2011 xx:xx:xx +0000
´
header:01: Received: from nm17-vm1.bullet.mail.ird.yahoo.com02: (nm17-vm1.bullet.mail.ird.yahoo.com [77.238.189.206])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Mon, 21 Mar 2011 xx:xx:xx +0100 (CET)05: Received: from [77.238.189.232] by nm17.bullet.mail.ird.yahoo.com with06: NNFMP; 21 Mar 2011 xx:xx:xx -000007: Received: from [212.82.108.125] by tm13.bullet.mail.ird.yahoo.com with08: NNFMP; 21 Mar 2011 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1034.mail.ird.yahoo.com with NNFMP; 2110: Mar 2011 xx:xx:xx -000011: Received: (qmail 60809 invoked by UID: [UID filtered]12: Received: from [69.22.174.31] by web29220.mail.ird.yahoo.com via HTTP;13: Mon, 21 Mar 2011 xx:xx:xx GMT
IP: 69.22.174.31 ---> nLayer Communications, Inc.
Mugufax: +27-865583105 ---> premium rate number, South Africa
der Yahoo/ATT-Mugu:
header:01: Received: from nm25-vm0.access.bullet.mail.sp2.yahoo.com02: (nm25-vm0.access.bullet.mail.sp2.yahoo.com [98.139.44.184])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Mon, 21 Mar 2011 xx:xx:xx +0100 (CET)05: Received: from [98.139.44.101] by nm25.access.bullet.mail.sp2.yahoo.com06: with NNFMP; 21 Mar 2011 xx:xx:xx -000007: Received: from [98.139.44.87] by tm6.access.bullet.mail.sp2.yahoo.com08: with NNFMP; 21 Mar 2011 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1024.access.mail.sp2.yahoo.com with10: NNFMP; 21 Mar 2011 xx:xx:xx -000011: Received: from [180.215.187.57] by web180310.mail.gq1.yahoo.com via12: HTTP; Mon, 21 Mar 2011 xx:xx:xx PDT
IP: 180.215.187.57 ---> SISTEMA SHYAM TELESERVICES LTD, India
header:01: Received: from s7.202.clients.serverdeals.org (EHLO02: shared9.dns.parsdev.net) [184.154.141.76]03: by mx0.gmx.net (mx105) with SMTP; 22 Mar 2011 xx:xx:xx +010004: Received: from [213.186.166.151] (helo=User)05: by shared9.dns.parsdev.net with esmtpa (Exim 4.72)06: (envelope-from <igor [at] wgsnet.com.br>)07: ID: [ID filtered]
IP: 213.186.166.151 ---> Jordan Media City(ART)
header:01: Received: from host.xwhostserver.com (EHLO host.xwhostserver.com)02: [67.225.157.151]03: by mx0.gmx.net (mx107) with SMTP; 22 Mar 2011 xx:xx:xx +010004: Received: from host86-148-216-76.range86-148.btcentralplus.com05: ([86.148.216.76]:58078 helo=User)06: by host.xwhostserver.com with esmtpa (Exim 4.69)07: (envelope-from <edilynmercapopadill [at] back.com>)08: ID: [ID filtered]
header:01: Received: from aa012-1msr.fastwebnet.it (aa012-1msr.fastwebnet.it02: [62.101.93.132])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Tue, 22 Mar 2011 xx:xx:xx +0100 (CET)05: Received: from Win7TK-PC (118.161.16.229) by aa012-1msr.fastwebnet.it06: (8.5.016.6) (authenticated as sofiajeanne [at] fastwebnet.it)07: ID: [ID filtered]
IP: 118.161.16.229 ---> 118-161-16-229.dynamic.hinet.net
header:01: Received: from mail.railunlimited.com (EHLO mail.railunlimited.com)02: [12.235.77.203]03: by mx0.gmx.net (mx075) with SMTP; 22 Mar 2011 xx:xx:xx +010004: Received: from User ([195.64.184.37] RDNS failed) by05: mail.railunlimited.com with Microsoft SMTPSVC(6.0.3790.4675);06: Tue, 22 Mar 2011 xx:xx:xx -0500
IP: 195.64.184.37 ---> ipmi18.ukraine.com.ua
header:01: Received: from mail.tykjh.tpc.edu.tw (EHLO mail.tykjh.tpc.edu.tw)02: [163.20.72.14]03: by mx0.gmx.net (mx064) with SMTP; 23 Mar 2011 xx:xx:xx +010004: Received: from mail.tykjh.tpc.edu.tw (localhost [127.0.0.1])05: by mail.tykjh.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]06: Thu, 24 Mar 2011 xx:xx:xx +0800 (CST)07: Received: from mail.tykjh.tpc.edu.tw (localhost [127.0.0.1])08: by mail.tykjh.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]09: Thu, 24 Mar 2011 xx:xx:xx +0800 (CST)
Und wieder der Yahoo/ATT-Mugu:
header:01: Received: from smtp110.sbc.mail.ne1.yahoo.com (EHLO02: smtp110.sbc.mail.ne1.yahoo.com) [98.138.84.53]03: by mx0.gmx.net (mx118) with SMTP; 23 Mar 2011 xx:xx:xx +010004: Received: from dell-PC (localhost [127.0.0.1])05: by smtp110.sbc.mail.ne1.yahoo.com (8.14.4/8.14.4) with SMTP id06: p2NKfIR403657807: for xxxxx; Wed, 23 Mar 2011 xx:xx:xx -0700 (PDT)08: (envelope-from phanhho_hpanphan [at] att.net)
Und wieder Yahoo/ATT:
header:01: Received: from nm6.bullet.mail.bf1.yahoo.com02: (nm6.bullet.mail.bf1.yahoo.com [98.139.212.165])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Thu, 24 Mar 2011 xx:xx:xx +0100 (CET)05: Received: from [98.139.212.151] by nm6.bullet.mail.bf1.yahoo.com with06: NNFMP; 24 Mar 2011 xx:xx:xx -000007: Received: from [98.139.212.212] by tm8.bullet.mail.bf1.yahoo.com with08: NNFMP; 24 Mar 2011 xx:xx:xx -000009: Received: from [127.0.0.1] by omp1021.mail.bf1.yahoo.com with NNFMP; 2410: Mar 2011 xx:xx:xx -000011: Received: (qmail 33581 invoked from network); 24 Mar 2011 xx:xx:xx -000012: Received: from HPPC (pvt.money.lender [at] 110.159.187.84 with login)13: by smtp107.sbc.mail.mud.yahoo.com with SMTP; 23 Mar 201114: xx:xx:xx -0700 PDT
IP: 110.159.187.84 ---> 84.187.159.110.tm-hsbb.tm.net.my
header:01: Received: from mail.davintaylor.de (EHLO mail.davintaylor.de)02: [212.23.138.66]03: by mx0.gmx.net (mx041) with SMTP; 25 Mar 2011 xx:xx:xx +010004: Received: from User ([82.128.85.159] RDNS failed) by mail.davintaylor.de05: with Microsoft SMTPSVC(6.0.3790.4675);06: Fri, 25 Mar 2011 xx:xx:xx +0100
IP: 82.128.85.159 ---> Multilinks Telecommunications Limited, Nigeria
Muguphon: +233-542373458 ---> ScanCom Ltd (MTN), Ghana
- kjz