Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

Wieder der Doppel-Mugu:

header:

01: Received: from ironman.uchsc.edu (EHLO ironman.ucdenver.edu)
02: [140.226.189.22] by mx0.gmx.net (mx117) with SMTP; 24 Nov 2008 xx:xx:xx +0100
03: X-IronPort-AV: E=Sophos;i="4.33,659,1220248800";
04:    d="scan'208,217";a="105258953"
05: Received: from kona.uchsc.edu ([140.226.190.241]) by ironman-priv.ucdenver.edu
06: 	with SMTP; 24 Nov 2008 xx:xx:xx -0700

header:

01: Received: from ironman.uchsc.edu (EHLO ironman.ucdenver.edu)
02: [140.226.189.22] by mx0.gmx.net (mx094) with SMTP; 24 Nov 2008 xx:xx:xx +0100
03: X-IronPort-AV: E=Sophos;i="4.33,659,1220248800";
04:    d="scan'208,217";a="105258952"
05: Received: from kona.uchsc.edu ([140.226.190.241]) by ironman-priv.ucdenver.edu
06: 	with SMTP; 24 Nov 2008 xx:xx:xx -0700

Post geht an:

- kjz

25.11.2008, 11:53
kjz1
header:
```
01: Received: from mail.comtel.com.tw (60-248-91-18.HINET-IP.hinet.net
02: [60.248.91.18]) by xxxxx.xxxxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from localhost (localhost [127.0.0.1]) by mail.comtel.com.tw
04: 	(Postfix) with SMTP ID: [ID filtered]
05: Received: from User (unknown [41.223.251.167]) ---> Omnium des
06: Telecommunications et de l'Internet Benin by mail.comtel.com.tw (Postfix) with ESMTP ID: [ID
07: 	filtered]
```
Die IP 41.223.251.167 hat's auch schon zu Spamhaus geschafft:

Zitat:

419 Nigerian scam sources in Benin

Post an:

Muguphon: +229-93998780 mit freundlicher Unterstützung von Bell, Benin.

Auffällig auch, dass die Mugus immer mehr GMail-Adressen verwenden. Früher kam man zu einer GMail-Adresse nur duch Einladung, also eine etwas höhere Hürde. Mittlerweile werden GMail-Adressen aber wohl im Hunderterpack in Spammer-Foren verkauft. Immer wohl auch im Gedenken darauf, dass Google getreu dem Motto 'we are not evil' das Abuse-Management wohl sträflich vernachlässigt.

- kjz

Der Doppel-Mugu hat einen weiteren Uni-Account gecrackt:

header:
01: Received: from uismail3.uis.edu (EHLO uismail3.uisad.uis.edu) [192.102.230.206]
02: 	by mx0.gmx.net (mx079) with SMTP; 25 Nov 2008 xx:xx:xx +0100
header:
01: Received: from uismail3.uis.edu (EHLO uismail3.uisad.uis.edu) [192.102.230.206]
02: 	by mx0.gmx.net (mx078) with SMTP; 25 Nov 2008 xx:xx:xx +0100
Hier geht die Post an:

Und morgen kommt dann ?

Wäre höchstens mal interessant zu erfahren, wie der Mugu denn die Kurve von Asien nach Schwarzafrika bekommt...

- kjz

Wieder die doppelten Mugu-Boyz:

header:

01: Received: from smtp1.nusa.net.ID: [ID filtered]
02: Received: from webmail.kissfm-medan.com (localhost.localdomain [127.0.0.1]) by
03: 	smtp1.nusa.net.ID: [ID filtered]
04: Received: from 81.199.88.114 ---> 81.199.88.114.satcom-systems.net    (SquirrelMail
05: 	authenticated user marketing [at] kissfm-medan.com) by webmail.kissfm-medan.com with HTTP; Thu, 27
06: 	Nov 2008 xx:xx:xx +0700 (WIT)

header:

01: Received: from smtp1.nusa.net.ID: [ID filtered]
02: Received: from webmail.kissfm-medan.com (localhost.localdomain [127.0.0.1]) by
03: 	smtp1.nusa.net.ID: [ID filtered]
04: Received: from 81.199.88.114 (SquirrelMail authenticated user
05: 	marketing [at] kissfm-medan.com) by webmail.kissfm-medan.com with HTTP; Thu, 27 Nov 2008 xx:xx:xx
06: 	+0700 (WIT)

Post geht an:

Das Muguphon: +4470359 54358 gibt es mit freundlicher Unterstützung von Open Telecom International Ltd., UK, ihrer zuvorkommenden Mugu-Company....

header:

01: Received: from baba.iue.edu.co (EHLO baba.iue.edu.co) [190.90.57.130]
02:   by mx0.gmx.net (mx028) with SMTP; 27 Nov 2008 xx:xx:xx +0100
03: Received: from baba.iue.edu.co (baba.iue.edu.co [127.0.0.1])
04:         by baba.iue.edu.co (Postfix) with ESMTP ID: [ID filtered]
05:         Thu, 27 Nov 2008 xx:xx:xx -0500 (COT)
06: Received: (from apache [at] localhost)
07:         by baba.iue.edu.co (8.13.8/8.13.8/Submit) ID: [ID filtered]
08:         Thu, 27 Nov 2008 xx:xx:xx -0500

header:

01: Received: from baba.iue.edu.co (EHLO baba.iue.edu.co) [190.90.57.130]
02:   by mx0.gmx.net (mx027) with SMTP; 27 Nov 2008 xx:xx:xx +0100
03: Received: from baba.iue.edu.co (baba.iue.edu.co [127.0.0.1])
04:         by baba.iue.edu.co (Postfix) with ESMTP ID: [ID filtered]
05:         Thu, 27 Nov 2008 xx:xx:xx -0500 (COT)
06: Received: (from apache [at] localhost)
07:         by baba.iue.edu.co (8.13.8/8.13.8/Submit) ID: [ID filtered]
08:         Thu, 27 Nov 2008 xx:xx:xx -0500

Post an:

- kjz

Da ist der (Benin?)-Mugu wieder:

header:

01: Received: from exch01smtp09.hdi.tvcabo (smtp4.netcabo.pt [212.113.174.31]) by
02: 	xxxxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from VS52.hdi.tvcabo ([10.137.130.65]) by exch01smtp09.hdi.tvcabo
04: 	with Microsoft SMTPSVC(6.0.3790.3959); Thu, 27 Nov 2008 xx:xx:xx +0000

Post an:

- kjz

Die Mugu-Boyz aus Benin:

header:

01: Received: from postino16.prima.com.ar (postino16.prima.com.ar
02: [200.42.0.164]) by xxxxxxx (Postfix) with SMTP ID: [ID filtered]
03: Received: (qmail 96356 invoked from network); 28 Nov 2008 xx:xx:xx -0000
04: Received: from unknown (HELO User) (javierlizarralde [at] ciudad.com.ar@41.223.251.247)
05: 	---> Omnium des
06: Telecommunications et de l'Internet Benin by postino16.prima.com.ar with SMTP; 28 Nov 2008
07: 	xx:xx:xx -0000

header:

01: Received: from symbiontsc.symbiont.com (mail.symbiont.com [71.166.245.202]) by
02: 	xxxxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([41.223.251.247]) by symbiontsc.symbiont.com with
04: Microsoft SMTPSVC(6.0.3790.1830); Fri, 28 Nov 2008 xx:xx:xx -0500

Abgekübelt über: 41.223.251.247 (Benin)

Post hätte gerne:

Mugu-Phon: +229 93 222 122, selbverständlich mit liebevoller Unterstützung von Bell Benin, ihrer freundlichen Mugu-Company...

- kjz

Die Benin-Mugu-Boyz sind hartnäckig:

header:
01: Received: from mail.comtel.com.tw (60-248-91-18.HINET-IP.hinet.net
02: [60.248.91.18]) by xxxxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from localhost (localhost [127.0.0.1]) by mail.comtel.com.tw
04: 	(Postfix) with SMTP ID: [ID filtered]
05: Received: from User (unknown [41.223.251.167]) ---> Omnium des
06: Telecommunications et de l'Internet Benin by mail.comtel.com.tw (Postfix) with ESMTP ID: [ID
07: 	filtered]
Post bitte an:

Mugu-Phon: +229-93998780, selbstverständlich von Bell, Benin, ihrer Mugu-Service-Company. (am 25. 11. hatten wir diese Nummer auch schon)

- kjz

Wieder die Benin-Boyz:

header:

01: Received: from n3b.bullet.tw1.yahoo.com (n3b.bullet.tw1.yahoo.com
02: [119.160.244.198]) by xxxxxxx (Postfix) with SMTP ID: [ID filtered]
03: Received: from [119.160.244.76] by n3.bullet.tw1.yahoo.com with NNFMP;
04: 29 Nov 2008 xx:xx:xx -0000
05: Received: from [203.212.168.60] by t1.bullet.tw1.yahoo.com with NNFMP;
06: 29 Nov 2008 xx:xx:xx -0000
07: Received: from [203.104.18.95] by t1.bullet.kr1.yahoo.com with NNFMP; 29
08: Nov 2008 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp109.mail.in2.yahoo.com with NNFMP; 29
10: Nov 2008 xx:xx:xx -0000
11: Received: from [81.91.229.189] by web95101.mail.in2.yahoo.com via HTTP;
12: Sun, 30 Nov 2008 xx:xx:xx IST ---> Benin Telecoms SA

Post geht an:

Und selbstverständlich liefert 'Ihre zuvorkommende Mugu-Company' auch wieder das Mugu-Phon:

+229 931 809 72 ---> Bell, Benin

- kjz

Wieder mal einen (amerikan.) Uni-Account gecrackt und wieder eine Juchhuu Adresse:

header:

01: Received: from Cuda3.broward.edu (unknown [209.87.192.215]) by xxxxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from mail.broward.edu (ses.broward.edu [192.168.251.26]) by
04: 	Cuda3.broward.edu (Spam Firewall) with ESMTP ID: [ID filtered]
05: Received: from mail.broward.edu (ses.broward.edu [192.168.251.26]) by
06: Cuda3.broward.edu with ESMTP ID: [ID filtered]
07: Received: from SULLIC3 [212.116.219.52] by mail.broward.edu --->
08: SA-FAISALIAH with NetMail ModWeb Module; Mon, 01 Dec 2008 xx:xx:xx +0000

Post an:

header:

01: Received: from servidor.levina.com.br (servidor.levina.com.br
02: [200.174.38.7]) by xxxxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from User (night-kings.de [85.214.39.188]) ---> Strato
04: 	(authenticated bits=0) by servidor.levina.com.br (8.13.3/8.13.3) with ESMTP ID: [ID filtered]

Abgekippt via Strato und Brasilien.

Mail geht an:

Mugu-Phon: +44 8715035681, denn Magrathea Telecommunications Limited, UK ist Mugus Liebling....

- kjz

Wieder ein gecrackter Account einer US-Uni + Zombie bei Roadrunner:

header:
01: Received: from smtp9.fiu.edu (smtp9.fiu.edu [131.94.189.202]) by xxxxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from cpe-75-85-236-244.bak.res.rr.com (EHLO User) ([75.85.236.244])
04: 	by smtp9.fiu.edu (MOS 3.8.7a FastPath queued) with ESMTP ID: [ID filtered]
Und deutlicher können Google und Magrathea ihre absolute Merkbefreiung wohl kaum dokumentieren:

Post an:

Muguphon: +44 8715035681 ---> Magrathea Telecommunications Limited, UK

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen