Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

die unendliche Geschichte:

header:

01: Received: from usaenv.com (216-201-190-74.res.logixcom.net [216.201.190.74])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 11 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([82.128.32.81]) by usaenv.com with Microsoft
05: SMTPSVC(6.0.3790.3959);
06: 	 Fri, 8 Jan 2010 xx:xx:xx -0600

IP: 82.128.32.81 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +44 703 1928177 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from dns.okumura.to (218-228-196-207.eonet.ne.jp
02: [218.228.196.207])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 10 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from localhost (localhost [127.0.0.1])
06: 	by dns.okumura.to (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 11 Jan 2010 xx:xx:xx +0900 (JST)
08: X-Quarantine-ID: [ID filtered]
09: X-Virus-Scanned: amavisd-new at okumura.to
10: Received: from dns.okumura.to ([127.0.0.1])
11: 	by localhost (dns.okumura.to [127.0.0.1]) (amavisd-new, port 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from User (unknown [218.25.59.156])
14: 	by dns.okumura.to (Postfix) with ESMTP ID: [ID filtered]
15: 	Mon, 11 Jan 2010 xx:xx:xx +0900 (JST)

IP: 218.25.59.156 --> China Unicom Liaoning

header:

01: Received: from www.oapz.ru (unknown [217.23.157.185])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 12 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from [196.205.201.162] (helo=User)
07: 	by www.oapz.ru with esmtpa (Exim 4.66)
08: 	(envelope-from <Intrmonetaryfund [at] aol.com>)
09: 	ID: [ID filtered]

IP: 196.205.201.162 ---> host-196-205-201-162.static.link.com.eg

Muguphon: +20118203233 ---> Etisalat, EG

Muguphon: +1319-522-2148 ---> Mediapolis Telephone Co., US

Mugufax: +20118303234 ---> Etisalat, EG

header:

01: Received: from at360.com (unknown [209.126.192.59])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 12 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 1383 invoked by UID: [UID filtered]
07: Received: from unknown (HELO User) (test [at] at360.com@41.217.65.4)
08:   by at360.com with SMTP; 11 Jan 2010 xx:xx:xx -0800

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-70250-48-121 ---> Visafone Communications Ltd., NG

header:

01: Received: from smtp1-pc.aruba.it (smtp190-pc.aruba.it [62.149.157.190])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx>; Wed, 13 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: (qmail 11121 invoked by UID: [UID filtered]
05: Received: from unknown (HELO localhost) (10.10.176.105)
06:   by smtp1-pc.ad.aruba.it with SMTP; 13 Jan 2010 xx:xx:xx -0000

header:

01: Received: from mail.roxx.se (EHLO mail.roxx.se) [195.67.110.9]
02:   by mx0.gmx.net (mx039) with SMTP; 13 Jan 2010 xx:xx:xx +0100
03: Received: from User [82.128.34.57] by mail.roxx.se with ESMTP
04:   (SMTPD32-7.07) ID: [ID filtered]

IP: 82.128.34.57 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +447024032605 ---> Magrathea Telecommunications Limited, UK

- kjz

Der Nächste, bitte.....

header:

01: Received: from mail.sdm.kompasgramedia.com (unknown [202.146.0.140])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 11 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([82.128.72.36]) by mail.sdm.kompasgramedia.com with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Tue, 12 Jan 2010 xx:xx:xx +0700

IP: 82.128.72.36 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +234 706-155-9469 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from mail.megapack.net.ph (unknown [125.60.233.195])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon, 11 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from User ([82.128.34.20])
07: 	(authenticated user postmaster [at] megapack.net.ph)
08: 	by mail.megapack.net.ph (Kerio MailServer 6.4.2);
09: 	Mon, 11 Jan 2010 xx:xx:xx +0800

IP: 82.128.34.20 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +17652520479 ---> Level 3 Communications, Llc

Muguphon: +447035930944 ---> Open Telecom International Ltd., UK

Muguphon: +2347092430073 ---> Multilinks Telecommunications Ltd., NG

ein sehr 'geschwätziger' Mailserver:

header:

01: Received: from WA2EHSNDR006.bigfish.com (unknown [204.231.192.41])
02: 	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 14 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from TX2EHSOBE005.bigfish.com (10.2.40.5) by
07:  WA2EHSNDR006.bigfish.com (10.2.40.26) with Microsoft SMTP Server (TLS) id
08:  8.1.340.0; Thu, 14 Jan 2010 xx:xx:xx +0000
09: Received: from mail59-tx2-R.bigfish.com (10.9.14.252) by
10:  TX2EHSOBE005.bigfish.com (10.9.40.25) with Microsoft SMTP Server id
11:  8.1.340.0; Thu, 14 Jan 2010 xx:xx:xx +0000
12: Received: from mail59-tx2 (localhost.localdomain [127.0.0.1])	by
13:  mail59-tx2-R.bigfish.com (Postfix) with ESMTP ID: [ID filtered]
14:  2010 xx:xx:xx +0000 (UTC)
15: X-BigFish: VPS97(zz9cddh18a9Kzz1202hzzz2ei6bh87ha7iu221ln)
16: X-FB-OUTBOUND-SPAM: yes
17: X-SpamScore: 97
18: X-FB-DOMAIN-IP-MATCH: fail
19: Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by mail59-tx2
20:  (MessageSwitch) ID: [ID filtered]
21:  (UTC)
22: Received: from TX2EHSMHS033.bigfish.com (unknown [10.9.14.253])	by
23:  mail59-tx2.bigfish.com (Postfix) with ESMTP ID: [ID filtered]
24: Jan 2010
25:  xx:xx:xx +0000 (UTC)
26: Received: from mail.kbcallc.com (24.182.31.196) by TX2EHSMHS033.bigfish.com
27:  (10.9.99.133) with Microsoft SMTP Server ID: [ID filtered]
28:  xx:xx:xx +0000
29: Received: from User ([41.217.65.4]) by mail.kbcallc.com with Microsoft
30:  SMTPSVC(6.0.3790.3959);	 Thu, 14 Jan 2010 xx:xx:xx -0800

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria

- kjz

Der Nachschub rollt:

header:
01: Received: from fairfieldsvr.Fairfield.local (unknown [213.190.165.72])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 14 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([41.217.65.4]) by fairfieldsvr.Fairfield.local with
05: Microsoft SMTPSVC(5.0.2195.6713);
06: 	 Wed, 13 Jan 2010 xx:xx:xx +0000
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-806-603-7830 ---> MTN Nigeria Communications Ltd.

header:
01: Received: from rs26s1.datacenter.cha.cantv.net
02: (rs26s1.datacenter.cha.cantv.net [200.11.173.17])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Thu, 14 Jan 2010 xx:xx:xx +0100 (CET)
07: X-Virus-Scanned: amavisd-new at cantv.net
08: X-DNSBL-MILTER: Passed
09: Received: from cantv.net (rs20s8.datacenter.cha.cantv.net [200.109.127.75])
10: 	by rs26s1.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id
11: o0EEUhWw006257;
12: 	Thu, 14 Jan 2010 xx:xx:xx -0430
X-ORIGINATOR-IP: 41.207.198.182 ---> Adsl-41.207.198.182.aviso.ci

die Madrid-Konnektion:

header:
01: Received: from . (EHLO mx4.hotmail.com) [66.90.109.42]
02:   by mx0.gmx.net (mx039) with SMTP; 14 Jan 2010 xx:xx:xx +0100
Muguphon: +34 634 140 773 ---> Vodafone España, S.a.u.

Und hier mal ein Mugu-Phiski, der deutsche Uni-Accounts cracken will (abgekübelt wiederum über gecracktes SquirrelMail):

header:
01: Received: from logan.fop.unicamp.br (logan.fop.unicamp.br [143.106.235.49])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	Fri, 15 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from mail.fop.unicamp.br (logan.fop.unicamp.br [143.106.235.49])
05: 	by logan.fop.unicamp.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 15 Jan 2010 xx:xx:xx -0200 (BRST)
07: Received: from 41.138.180.200
08:         (SquirrelMail authenticated user ludtavares)
09:         by logan.fop.unicamp.br with HTTP;
10:         Fri, 15 Jan 2010 xx:xx:xx -0200 (BRST)
IP: 41.138.180.200 ---> Visafone Communications Limited, NG

Zitat:

Sehr geehrter User Account,
Ihre E-Mail muss mit dem neuen F-Secure ® aktualisiert werden
Anti-virus/Anti-spam HTK4S Version 2010.
Zum Schutz und aktualisieren Sie Ihr Konto mit unserem neuen
Anti-virus/Anti-spam Version, füllen Sie die Spalten aus und klicken Sie
Antwort auf Post zurück oder Ihr Konto wird gesperrt
vorübergehend aus unserem Domain-Services über das Internet.
Benutzername:
Passwort:
Telefon:
Uni-xxxxx.deWeb-Admin
Greg Acheson
https: / / www. webmail.uni-xxxxx.de

- kjz

18.01.2010, 17:00
Allana

Nelson Malevu

Zitat:

Return-Path: <.hk>
X-Original-To:
Received: from smtp.srv711.twosteps.net (localhost.localdomain [127.0.0.1])
by smtp.srv711.twosteps.net (Postfix) with ESMTP id D982D105CCEF
for <>; Sun, 17 Jan 2010 09:56:08 +0100 (CET)
X-DKIM: Sendmail DKIM Filter v2.6.0 smtp.srv711.twosteps.net D982D105CCEF
X-Greylist: delayed 701 seconds by postgrey-1.31 at srv711.twosteps.net; Sun, 17 Jan 2010 09:55:47 CET
X-DKIM: Sendmail DKIM Filter v2.6.0 smtp.srv711.twosteps.net DABF5105CCE8
Received: from gamebridge.com.cn (unknown [202.142.17.69])
by smtp.srv711.twosteps.net (Postfix) with ESMTP id DABF5105CCE8
for <>; Sun, 17 Jan 2010 09:55:47 +0100 (CET)
Received: from User [82.128.22.169] by gamebridge.com.cn with ESMTP
(SMTPD-8.22) id A44B021C; Sat, 16 Jan 2010 03:38:51 +0800
Reply-To: <.za>
From: "Dr.Nelson Malevu"<.hk>
Subject: Komplimente der Jahreszeit und des Geschäftsangebots
Date: Fri, 15 Jan 2010 20:39:32 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <201001160339281.SM00472@User>
To: undisclosed-recipients:;
X-AV-Checked: srv208.twosteps.net Inhfr665T

Dr.Nelson Malevu
Pretoria
Südafrika
E-Mail:

FÜR IHRE FREUNDLICHE AUFMERKSAMKEIT:

Ich bin Dr Nelson Malevu, ein Eingeborener Kapstadts in Südafrika, das mit der Südafrikanischen Abteilung des Bergbaus und der Energie arbeitet.

In erster Linie entschuldige ich mich, um dieses Medium zu verwenden, um Sie für eine Transaktion dieses Umfangs zu erreichen, aber das ist wegen der Vertraulichkeit, und schneller Zugang ruhte auf diesem Medium.

Werden Sie informiert, dass ein Mitglied des Handels und der Investition Südafrika (TISA) Promotionsagentur, die ein Teil meiner Regierungsdelegation zu Ihrem Land während einer neuen Handelsausstellung war, Ihren beneidenswerten Ausweis/Einzelheiten mir gab, indem es mich auf Ihrer Befähigung versicherte, eine Geschäftstransaktion zu behandeln, die einen großen Geldbetrag mit der absoluten Vertraulichkeit einschließt.

Deshalb habe ich mich dafür entschieden, eine vertrauliche Zusammenarbeit mit Ihnen in der Ausführung des Geschäfts beschrieben nachstehend zu Gunsten aller Parteien zu suchen, und indem ich hoffe, dass Sie es als Spitzengeheimnis wegen der Natur dieser Transaktion behalten werden.

Innerhalb der Abteilung des Bergbaus und der Energie, wo ich als ein Direktor und mit der Zusammenarbeit von zwei anderen Spitzenbeamten arbeite, haben wir in unserem Besitz, den eine überfällige Vertragszahlung dem Belaufen Sechzehn Millionen, Vierhunderttausend USA-Dollars (16,400,000.00) in Rechnung stellt. Dieses Geld, das wir vorhaben, seine Übertragung als eine Form der Vertragszahlung in eine zuverlässige Rechnung der Gesellschaft/Person abhängig von Ihrer Einrichtung zu bearbeiten.

Ihre Hilfe und Zusammenarbeit sind wegen der Verhältnisse erforderlich, die unsere Arbeit als Staatsangestellte umgeben, wodurch der südafrikanische Code des Öffentlichen Dienstes des Verhaltens uns nicht erlaubt, ein Auslandsbankkonto folglich Ihre Wichtigkeit in der ganzen Transaktion zu bedienen.

Jetzt dieser Betrag (16.4M) führte das Darstellen des Gleichgewichtes des Totalvertragswerts im Auftrag meiner Abteilung durch ein Auslandsvertragsunternehmen durch, das wir, die die Beamten absichtlich überfakturierten, nicht beansprucht im Regierungsübertragungsurkunde-Bankkonto mit der Reservebank Südafrikas lügen. Wir suchen hiermit Ihre Hilfe und Zusammenarbeit, die uns ermöglichen wird, diesen Geldbetrag zu Ihnen als eine Form der Vertragszahlung zu bearbeiten.

Wir haben die notwendige Gewalt gültig zu machen, und Billigungen des hervorragenden Vertrags nachzuschicken, fordert zur Regierung für die Restzahlung zur Ansicht durch die Reservebank Südafrikas (RSBA).

Alle Partner stimmten zu, indem sie mich beauftragten, um vorzuhaben, der Sie sollte, bereit sein, uns bei der Transaktion zu helfen, wird Ihr Anteil der Summe 25 % der 16.4 Millionen sein, 70 % werden für uns und 5 % für irgendwelche Ausgaben zugezogen im Laufe dieses Projektes einschließlich des Telefons sein und Rechnungen faxen.

Das Geschäft selbst ist Safe von 100 % eurerseits, vorausgesetzt dass Sie es mit der am meisten äußersten Geheimhaltung und Vertraulichkeit behandeln. Bemerken Sie auch, dass Ihr Gebiet der Spezialisierung nicht eine Hindernis für die erfolgreiche Ausführung dieser Transaktion ist.

Ich habe mein Vertrauen zu Ihnen geruht, indem ich Ihre schnelle Antwort durch die private E-Mail-Adresse erwarte: oben, um mich Ihrer Fähigkeit bekanntzugeben, uns beim Erzielen des Erfolgs in dieser Transaktion zu helfen.

Schließlich eurerseits werden wir Sie schätzen behandeln diese Transaktion als ein sehr vertraulicher, während wir Sie eines sicheren und vollen Beweises von 100 % freie Transaktion versichern, vorausgesetzt dass Sie unseren Instruktionen völlig folgen.

Ich erwarte Ihre Bestätigung meiner Nachricht, indem ich bete, dass das der Anfang einer lebenslänglichen Partnerschaft zwischen uns sein wird.

Vielen Dank für Ihre Zusammenarbeit.

Hochachtungsvoll,

Dr.Nelson Malevu

Dr.Nelson Malevu
Pretoria
South Africa
Email:.za

FOR YOUR KIND ATTENTION:

I am Dr.Nelson Malevu, a Native of Cape Town in South Africa working with the South African Department of Mining & Energy.

First and foremost I apologise for using this medium to reach you for a transaction of this magnitude but this is due to confidentiality and prompt access reposed on this medium.

Be informed that a member of the Trade and Investment South Africa (TISA) Promotion Agency, who was part of my government delegation to your country during a recent Trade Exhibition, gave your enviable credentials/particulars to me while assuring me on your competence to handle a business transaction involving a large sum of money with absolute confidentiality.

Therefore I have decided to seek a confidential co-operation with you in the execution of the deal described hereunder for the benefit of all parties and while hoping you will keep it as top secret because of the nature of this transaction.

Within the Department of Mining & Energy where I work as a Director and with the cooperation of two other top officials, we have in our possession an overdue contract payment bills totaling Sixteen Million, Four Hundred Thousand united states dollars (16,400,000.00). This money which we intend to process its transfer as a form of contract payment into a reliable company/individual account depending on your convenience.

Your assistance and co-operation is required due to the circumstances surrounding our work as government officials whereby the South African Civil Service Code of Conduct does not allow us to operate a foreign Bank account hence your importance in the whole transaction.

Presently, this amount (16.4M) representing the balance of the total contract value executed on behalf of my Department by a foreign contracting firm which we the officials over-invoiced deliberately is lying unclaimed in the government escrow bank account with Reserve Bank of South Africa. We hereby seek your assistance and co-operation that will enable us to process this sum of money to you as a form of contract payment.

We have the necessary authority to validate and forward approvals of outstanding contract claims to the government for final payment on approval through the Reserve Bank of South Africa (RSBA).

All partners agreed while mandating me to propose that should you be willing to assist us in the transaction, your share of the sum will be 25% of the 16.4 million,70% will be for us and 5% for any expenses incurred in the course of this project including telephone and fax bills.

The business itself is 100% safe on your part provided you treat it with utmost secrecy and confidentiality. Also note that your area of specialisation is not an hindrance to the successful execution of this transaction.

I have reposed my confidence in you while awaiting your prompt response through the private email address: above to notify me of your capability to assist us in achieving success in this transaction.

Finally on your part, we will appreciate you treat this transaction as a very confidential one while we assure you of a 100% safe and full proof free transaction provided you follow our instructions totally.

I await your confirmation of my message while praying that this will be the beginning of a lifelong partnership between us.

Thank you for your co-operation.

Yours faithfully,

Dr.Nelson Malevu

IP:

Den Namen hat er wohl gewählt, damit man an Nelson Mandela denkt und gleich Vertrauen hat ... Ich könnte nur k***n ....

VG
Allana

Immer weiter....

header:

01: Received: from WA2EHSNDR006.bigfish.com (unknown [204.231.192.41])
02: 	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 14 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from TX2EHSOBE005.bigfish.com (10.2.40.5) by
07:  WA2EHSNDR006.bigfish.com (10.2.40.26) with Microsoft SMTP Server (TLS) id
08:  8.1.340.0; Thu, 14 Jan 2010 xx:xx:xx +0000
09: Received: from mail59-tx2-R.bigfish.com (10.9.14.252) by
10:  TX2EHSOBE005.bigfish.com (10.9.40.25) with Microsoft SMTP Server id
11:  8.1.340.0; Thu, 14 Jan 2010 xx:xx:xx +0000
12: Received: from mail59-tx2 (localhost.localdomain [127.0.0.1])	by
13:  mail59-tx2-R.bigfish.com (Postfix) with ESMTP ID: [ID filtered]
14:  2010 xx:xx:xx +0000 (UTC)
15: Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by mail59-tx2
16:  (MessageSwitch) ID: [ID filtered]
17:  (UTC)
18: Received: from TX2EHSMHS033.bigfish.com (unknown [10.9.14.253])	by
19:  mail59-tx2.bigfish.com (Postfix) with ESMTP ID: [ID filtered]
20: Jan 2010
21:  xx:xx:xx +0000 (UTC)
22: Received: from mail.kbcallc.com (24.182.31.196) by TX2EHSMHS033.bigfish.com
23:  (10.9.99.133) with Microsoft SMTP Server ID: [ID filtered]
24:  xx:xx:xx +0000
25: Received: from User ([41.217.65.4]) by mail.kbcallc.com with Microsoft
26:  SMTPSVC(6.0.3790.3959);	 Thu, 14 Jan 2010 xx:xx:xx -0800

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria

header:

01: Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.1])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 16 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from filter.sfr.fr (localhost [127.0.0.1])
05: 	by msfrf2102.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat, 16 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: from User (unknown [124.237.86.62])
08: 	by msfrf2102.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Sat, 16 Jan 2010 xx:xx:xx +0100 (CET)

IP: 124.237.86.62 ---> CHINANET hebei

Muguphon: +60176957004 ---> Maxis Mobile (Binariang), Malaysia

header:

01: Received: from mail.vinacafebienhoa.com (EHLO
02: VinaCafe.vinacafebienhoa.com) [210.245.121.42]
03:   by mx0.gmx.net (mx110) with SMTP; 17 Jan 2010 xx:xx:xx +0100
04: Received: from User ([41.217.65.4]) by VinaCafe.vinacafebienhoa.com with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Sun, 17 Jan 2010 xx:xx:xx +0700

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

header:

01: Received: from n78.bullet.mail.sp1.yahoo.com
02: (n78.bullet.mail.sp1.yahoo.com [98.136.44.42])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 17 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from [216.252.122.219] by n78.bullet.mail.sp1.yahoo.com with
06: NNFMP; 17 Jan 2010 xx:xx:xx -0000
07: Received: from [67.195.9.83] by t4.bullet.sp1.yahoo.com with NNFMP; 17
08: Jan 2010 xx:xx:xx -0000
09: Received: from [67.195.9.99] by t3.bullet.mail.gq1.yahoo.com with NNFMP;
10: 17 Jan 2010 xx:xx:xx -0000
11: Received: from [127.0.0.1] by omp103.mail.gq1.yahoo.com with NNFMP; 17
12: Jan 2010 xx:xx:xx -0000
13: Received: from [41.203.228.63] by web112902.mail.gq1.yahoo.com via HTTP;
14: Sun, 17 Jan 2010 xx:xx:xx PST

IP: 41.203.228.63 ---> ONATEL, BF

- kjz

Die Woche fängt wieder gut an....

gecracktes SquirrelMail:

header:

01: Received: from mail.jkm.gov.my (HELO mail.jkm.gov.my) [202.190.74.101]
02:   by mx0.gmx.net (mx002) with SMTP; 18 Jan 2010 xx:xx:xx +0100
03: Received: (qmail 26111 invoked by UID: [UID filtered]
04: Received: from 127.0.0.1 by mail (envelope-from <yukking [at] jkm.gov.my>,
05: UID: [UID filtered]
06:  (clamdscan: 0.67. spamassassin: 2.63. perlscan: 1.25-st-qms.
07:  Clear:RC:1(127.0.0.1):.
08:  Processed in 0.05967 secs); 17 Jan 2010 xx:xx:xx -0000
09: X-Antivirus-MYDOMAIN-Mail-From: yukking [at] jkm.gov.my via mail
10: X-Antivirus-MYDOMAIN: 1.25-st-qms (Clear:RC:1(127.0.0.1):. Processed in
11: 0.05967 secs Process 26105)
12: Received: from localhost (HELO mailjkm.jkm.gov.my) (127.0.0.1)
13:   by mail.jkm.gov.my with SMTP; 17 Jan 2010 xx:xx:xx -0000
14: Received: from 80.239.242.62 (proxying for 82.128.86.38)
15:         (SquirrelMail authenticated user yukking)
16:         by mailjkm.jkm.gov.my with HTTP;
17:         Sun, 17 Jan 2010 xx:xx:xx +0800 (MYT)

header:

01: Received: from mail.jkm.gov.my (HELO mail.jkm.gov.my) [202.190.74.101]
02:   by mx0.gmx.net (mx015) with SMTP; 18 Jan 2010 xx:xx:xx +0100
03: Received: (qmail 26285 invoked by UID: [UID filtered]
04: Received: from 127.0.0.1 by mail (envelope-from <yukking [at] jkm.gov.my>,
05: UID: [UID filtered]
06:  (clamdscan: 0.67. spamassassin: 2.63. perlscan: 1.25-st-qms.
07:  Clear:RC:1(127.0.0.1):.
08:  Processed in 0.059812 secs); 17 Jan 2010 xx:xx:xx -0000
09: X-Antivirus-MYDOMAIN-Mail-From: yukking [at] jkm.gov.my via mail
10: X-Antivirus-MYDOMAIN: 1.25-st-qms (Clear:RC:1(127.0.0.1):. Processed in
11: 0.059812 secs Process 26279)
12: Received: from localhost (HELO mailjkm.jkm.gov.my) (127.0.0.1)
13:   by mail.jkm.gov.my with SMTP; 17 Jan 2010 xx:xx:xx -0000
14: Received: from 80.239.242.62 (proxying for 82.128.86.38)
15:         (SquirrelMail authenticated user yukking)
16:         by mailjkm.jkm.gov.my with HTTP;
17:         Sun, 17 Jan 2010 xx:xx:xx +0800 (MYT)

IP: 82.128.86.38 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail.jinqiuzhu.com (unknown [58.222.254.37])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 18 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([41.221.166.146])
05: 	(envelope-sender <undirector [at] un.org>)
06: 	by 58.222.254.37 with ESMTP
07: 	for <poor [at] spamvictim.tld>; Mon, 18 Jan 2010 xx:xx:xx +0800

IP: 41.221.166.146 ---> SWIFT NETWORKS, Nigeria

Muguphon: +1-202-552-1589 ---> Paetec Communications, Inc.

header:

01: Received: from w2k3server.hongfok.com.sg (mail1.hongfok.com.sg
02: [58.185.27.218])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 19 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([82.128.20.43]) by w2k3server.hongfok.com.sg with
06: Microsoft SMTPSVC(6.0.3790.1830);
07: 	 Tue, 19 Jan 2010 xx:xx:xx +0800

IP: 82.128.20.43 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail.mindresearch.net (unknown [216.39.110.199])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 20 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from test ([196.46.246.21])
07: 	(authenticated user test [at] mindresearch.net)
08: 	by mail.mindresearch.net (Kerio MailServer 6.7.2);
09: 	Tue, 19 Jan 2010 xx:xx:xx -0800

IP: 196.46.246.21 ---> Vee Network Limited, Nigeria

die Madrid-Konnektion:

header:

01: Received: from mail.oblpo.ru (mail.oblpo.ru [77.106.20.158])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 20 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from User (230.96.219.87.dynamic.jazztel.es [87.219.96.230])
07: 	by mail.oblpo.ru (Postfix) with ESMTPA ID: [ID filtered]
08: 	Sun, 17 Jan 2010 xx:xx:xx +0300 (MSK)

IP: 87.219.96.230 ---> Jazztel, ES

header:

01: Received: from insurancecheapquotes.com (insurancecheapquotes.com
02: [67.212.226.115])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 20 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: from User (mail.eufemis.com.ar [200.49.143.226])
08: 	(authenticated bits=0)
09: 	by insurancecheapquotes.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
10: 	Tue, 19 Jan 2010 xx:xx:xx -0700

Muguphon: +886-3-6661188 ---> Chunan (Tchou-Nan), TW

header:

01: Received: from w2k3server.hongfok.com.sg (mail1.hongfok.com.sg
02: [58.185.27.218])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 20 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([82.128.22.214]) by w2k3server.hongfok.com.sg with
06: Microsoft SMTPSVC(6.0.3790.1830);
07: 	 Wed, 20 Jan 2010 xx:xx:xx +0800

IP: 82.128.22.214 ---> ml82.128.22.214.multilinks.com, Nigeria

Und eines wird allmählich auch immer deutlicher: Multilinks in Nigeria hat entweder den Überblick über den eigenen Laden praktisch vollständig verloren oder man macht vorsätzlich Geschäfte mit Kriminellen bzw. ist von diesen völlig unterwandert.

- kjz

Es gibt wieder Nachschub:

Dauermugu Nr.2:

header:

01: Received: from WA2EHSNDR006.bigfish.com (unknown [204.231.192.41])
02: 	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 14 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from TX2EHSOBE005.bigfish.com (10.2.40.5) by
07:  WA2EHSNDR006.bigfish.com (10.2.40.26) with Microsoft SMTP Server (TLS) id
08:  8.1.340.0; Thu, 14 Jan 2010 xx:xx:xx +0000
09: Received: from mail59-tx2-R.bigfish.com (10.9.14.252) by
10:  TX2EHSOBE005.bigfish.com (10.9.40.25) with Microsoft SMTP Server id
11:  8.1.340.0; Thu, 14 Jan 2010 xx:xx:xx +0000
12: Received: from mail59-tx2 (localhost.localdomain [127.0.0.1])	by
13:  mail59-tx2-R.bigfish.com (Postfix) with ESMTP ID: [ID filtered]
14:  2010 xx:xx:xx +0000 (UTC)
15: Received: from mail59-tx2 (localhost.localdomain [127.0.0.1]) by mail59-tx2
16:  (MessageSwitch) ID: [ID filtered]
17:  (UTC)
18: Received: from TX2EHSMHS033.bigfish.com (unknown [10.9.14.253])	by
19:  mail59-tx2.bigfish.com (Postfix) with ESMTP ID: [ID filtered]
20: Jan 2010
21:  xx:xx:xx +0000 (UTC)
22: Received: from mail.kbcallc.com (24.182.31.196) by TX2EHSMHS033.bigfish.com
23:  (10.9.99.133) with Microsoft SMTP Server ID: [ID filtered]
24:  xx:xx:xx +0000
25: Received: from User ([41.217.65.4]) by mail.kbcallc.com with Microsoft
26:  SMTPSVC(6.0.3790.3959);	 Thu, 14 Jan 2010 xx:xx:xx -0800

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria

header:

01: Received: from mail.hzbank.com.cn (mail.hzbank.com.cn [60.191.117.248])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sat, 23 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 2041 invoked by UID: [UID filtered]
07: Received: from unknown (HELO User) (test [at] 41.217.65.3)
08:   by 0 with SMTP; 22 Jan 2010 xx:xx:xx -0000

IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-808-026-0723 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from mail.uphcm.edu.vn (unknown [210.245.122.6])
02: 	(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 24 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from User ([41.217.65.3])
07:         by mail.uphcm.edu.vn (IceWarp 9.2.1) with ASMTP ID: [ID filtered]
08:         Fri, 22 Jan 2010 xx:xx:xx +0700

IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.

header:

01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 24 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 30407 invoked by UID: [UID filtered]
07: Received: by simscan 1.3.1 ppID: [ID filtered]
08:          scanners: attach: 1.3.1 clamav: 0.92.1
09: /m:
10: Received: from unknown (HELO User) (summer [at] 80.194.50.173)
11:   by smtp4.digitalpath.net with ESMTPA; 23 Jan 2010 xx:xx:xx -0000

IP: 80.194.50.173 ---> sw1capital.com/virginmedia.co.uk

header:

01: Received: from dns.okumura.to (218-228-196-207.eonet.ne.jp
02: [218.228.196.207])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 24 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from localhost (localhost [127.0.0.1])
06: 	by dns.okumura.to (Postfix) with ESMTP ID: [ID filtered]
07: 	Sun, 24 Jan 2010 xx:xx:xx +0900 (JST)
08: X-Virus-Scanned: amavisd-new at okumura.to
09: Received: from dns.okumura.to ([127.0.0.1])
10: 	by localhost (dns.okumura.to [127.0.0.1]) (amavisd-new, port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [82.128.35.206])
13: 	by dns.okumura.to (Postfix) with ESMTP ID: [ID filtered]
14: 	Sun, 24 Jan 2010 xx:xx:xx +0900 (JST)

IP: 82.128.35.206 ---> Multilinks Telecommunications Limited, Nigeria

die Madrid-Konnektion:

header:

01: Received: from mail.oblpo.ru (mail.oblpo.ru [77.106.20.158])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 24 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from User (230.96.219.87.dynamic.jazztel.es [87.219.96.230])
07: 	by mail.oblpo.ru (Postfix) with ESMTPA ID: [ID filtered]
08: 	Fri, 22 Jan 2010 xx:xx:xx +0300 (MSK)

wieder die Madrid-Konnektion:

header:

01: Received: from impaqm1.telefonica.net (EHLO IMPaqm1.telefonica.net)
02: [213.4.129.21]
03:   by mx0.gmx.net (mx036) with SMTP; 24 Jan 2010 xx:xx:xx +0100
04: Received: from IMPmailhost2.adm.correo ([10.20.102.39])
05: 	by IMPaqm1.telefonica.net with bizsmtp
06: 	ID: [ID filtered]
07: Received: from User ([95.16.201.169])
08: 	by IMPmailhost2.adm.correo with BIZ IMP
09: 	ID: [ID filtered]

IP: 95.16.201.169 ---> 169.201.16.95.dynamic.jazztel.es

Muguphon: +34 634 127 318 ---> Vodafone España, S.a.u.

Mugufax: +34 917 692 707 ---> Colt Telecom España, S.a.

die Amsterdam-Konnektion:

header:

01: Received: from imsantv72.netvigator.com (imsantv72.netvigator.com
02: [210.87.250.172])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 23 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from imsantv35.netvigator.com (imsantv35b.netvigator.com
06: [210.87.247.27])
07: 	by imsantv72.netvigator.com (8.14.2/8.14.2) with ESMTP ID: [ID filtered]
08: 	for xxxxx; Sun, 24 Jan 2010 xx:xx:xx +0800
09: Received: from [210.87.253.108] ([210.87.253.108:40538]
10: helo=imsantv51.netvigator.com)
11: 	by imsantv35 (envelope-from <grantawdpzdesk2 [at] live.nl>)
12: 	(ecelerity 2.2.2.40 r(29895/29896)) with ESMTP
13: 	ID: [ID filtered]
14: Received: from mailserver.eternal.com.hk
15: (162.180.198.203.static.netvigator.com [203.198.180.162])
16: 	by imsantv51.netvigator.com (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
17: 	Sun, 24 Jan 2010 xx:xx:xx +0800
18: Received: from User ([80.56.1.175] RDNS failed) by
19: mailserver.eternal.com.hk with Microsoft SMTPSVC(6.0.3790.3959);
20: 	 Sun, 24 Jan 2010 xx:xx:xx +0800

IP: 80.56.1.175 ---> f1175.upc-f.chello.nl

Muguphon: +31 644 225 020 ---> Telfort B.V., NL

Mugufax: +31 847 385 694 ---> J2 Global (Netherlands) B.V./Jump/efax

- kjz

26.01.2010, 17:23
kjz1
Im weiteren:

header:
```
01: Received: from svr02.SCO_SIN.local (unknown [203.120.246.243])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 22 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([117.25.131.138]) by svr02.SCO_SIN.local with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Fri, 22 Jan 2010 xx:xx:xx +0800
```
Ausnahmsweise auch mal der Text, da so schön perfide....

Zitat:

Dearest,

My name is Rosemary Collins, I live at 8763 Pelican Dr.La Grange IL
60525,United States.

I am one of those that executed a contract in Nigeria years ago and they
refused to pay me, I had paid over $70,000USD trying to get my payment
all to no avail.

Somebody directed me to travel down to Nigeria with all my contract
documents to meet Barrister Mat Oto who is the member of CONTRACT
PAYMENT COMMITTEE and LEGAL ADVISER to the COMMITTEE, and I contacted
him and he explained everything to me on telephone and advised me to
come down to Nigeria which I did.

He said that those contacting us through emails are fake. Then he took
me to the paying bank, which is Oceanic Bank Plc, and I am the happiest
woman on this earth because I have received my contract funds of
$8.2Million USD.

On the process of searching for my file,I saw your information on
awaiting payment list in the office of Barrister Mat Oto.Though I did
not capture all your information lest your fax number.

Am sorry contacting you late as I planed doing it as soon as I arrive
back USA.

I have been so busy because we are trying to set up a factory here with
the money we received.

So if you care,do contact Barrister Mat Oto with the information below
and just explain yourself to him as I know he is honest and humble person.

Alternatively mention my name to him he will attend to you.

Name: Barrister John Aboh
Email:
phone number +234-709-079-4076
Address: 123,Palm Avenue Palm Grove,
Lagos Nigeria.

IP: 117.25.131.138 ---> CHINANET Fujian

Muguphon: +234-709-079-4076 ---> Multilinks Telecommunications Ltd., Nigeria

header:
```
01: Received: from n14-vm0.bullet.mail.in.yahoo.com
02: (n14-vm0.bullet.mail.in.yahoo.com [202.86.5.219])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 22 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from [202.43.219.99] by n14.bullet.mail.in.yahoo.com with
06: NNFMP; 22 Jan 2010 xx:xx:xx -0000
07: Received: from [203.104.18.55] by t3.bullet.in.yahoo.com with NNFMP; 22
08: Jan 2010 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp107.mail.in2.yahoo.com with NNFMP; 22
10: Jan 2010 xx:xx:xx -0000
11: Received: (qmail 41439 invoked by UID: [UID filtered]
12: Received: from [41.203.230.144] by web95704.mail.in.yahoo.com via HTTP;
13: Fri, 22 Jan 2010 xx:xx:xx IST
```
IP: 41.203.230.144 ---> ONATEL, BF

header:
```
01: Received: from CharlotteAMA.com (mail.charlotteama.com [75.77.82.74])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 22 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User [41.138.183.159] by CharlotteAMA.com with ESMTP
05:   (SMTPD-8.21) ID: [ID filtered]
```
IP: 41.138.183.159 ---> Visafone Communications Limited, Nigeria

Muguphon: +447011120916 ---> PNC Telecom Services Limited, UK

Muguphon: +1-206-339-1057 ---> International Telcom, Ltd.

Mugufax: +1-206-309-3625 ---> International Telcom, Ltd.

- kjz

Die Reihe setzt sich fort mit:

der 'gelbe' Mugu ist wohl doch etwas dunkler:

header:

01: Received: from mailout05.server.ibbs.com (mailout05.ibbsonline.com
02: [209.55.3.209])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Mon, 25 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: from ex-relay-out01.server.ibbs.com ([10.1.200.80]
08: helo=ex-relay-out01.server.ibssonline.com)
09: 	by mailout05.server.ibbs.com with esmtp (Exim 4.69)
10: 	(envelope-from <liu.tsai04 [at] yahoo.com.hk>)
11: 	ID: [ID filtered]
12: Received: from [209.55.3.59] (helo=atmail)
13: 	by ex-relay-out01.server.ibssonline.com with SMTP (eXpurgate 3.1.2)
14: 	(envelope-from <liu.tsai04 [at] yahoo.com.hk>)
15: 	ID: [ID filtered]
16: 	for <multiple-recipients>; Sat, 23 Jan 2010 xx:xx:xx -0800

X-Origin: 41.218.233.72 ---> vfbb23372.4u.com.gh

über Mugu-Satellit in IL:

header:

01: Received: from 81.199.151.11.satcom-systems.net (EHLO mx4.hotmail.com)
02: [81.199.151.11]
03:   by mx0.gmx.net (mx036) with SMTP; 25 Jan 2010 xx:xx:xx +0100

der Dauer-Mugu 2:

header:

01: Received: from serrurierlacroix.com
02: (s82.n39.n84.n66.static.myhostcenter.com [66.84.39.82])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Mon, 25 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: from User ([41.217.65.4])
08: 	(authenticated bits=0)
09: 	by serrurierlacroix.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
10: 	Sun, 24 Jan 2010 xx:xx:xx -0500

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria

wieder vom Mugu-Satellit in IL:

header:

01: Received: from 81.199.151.11.satcom-systems.net (EHLO mx4.hotmail.com)
02: [81.199.151.11]
03:   by mx0.gmx.net (mx038) with SMTP; 25 Jan 2010 xx:xx:xx +0100

header:

01: Received: from smtp19.orange.fr (EHLO smtp19.orange.fr) [80.12.242.18]
02:   by mx0.gmx.net (mx001) with SMTP; 27 Jan 2010 xx:xx:xx +0100
03: Received: from me-wanadoo.net (localhost [127.0.0.1])
04: 	by mwinf1924.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
05: 	Wed, 27 Jan 2010 xx:xx:xx +0100 (CET)
06: Received: from me-wanadoo.net (localhost [127.0.0.1])
07: 	by mwinf1924.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
08: 	Wed, 27 Jan 2010 xx:xx:xx +0100 (CET)
09: Received: from ciid.fr
10: (LAubervilliers-151-12-1-144.w193-252.abo.wanadoo.fr [193.252.48.144])
11: 	by mwinf1924.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue, 26 Jan 2010 xx:xx:xx +0100 (CET)
13: Received: from User ([174.89.149.219]) by ciid.fr with Microsoft
14: SMTPSVC(6.0.3790.3959);
15: 	 Tue, 26 Jan 2010 xx:xx:xx +0100

header:

01: Received: from mail.sh-telecom.com (unknown [202.109.112.29])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 27 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from [41.138.180.24] (account lisa [at] sh-telecom.com HELO User)
05:   by mail.sh-telecom.com (CommuniGate Pro SMTP 3.5.9)
06:   with ESMTP ID: [ID filtered]

IP: 41.138.180.24 ---> Visafone Communications Limited, NG

Muguphon: +234-702-535-6240 ---> Visafone Communications Ltd., Nigeria

- kjz

28.01.2010, 21:56
kjz1
Und immer, immer wieder sind die Muuuugus daaa...

Dauer-Mugu 2 sollte sich auch mal was Neues einfallen lassen:

header:
```
01: Received: from serrurierlacroix.com
02: (s82.n39.n84.n66.static.myhostcenter.com [66.84.39.82])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Mon, 25 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: from User ([41.217.65.3])
08: 	(authenticated bits=0)
09: 	by serrurierlacroix.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
10: 	Mon, 25 Jan 2010 xx:xx:xx -0500
```
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-7059-8229-86 ---> Globacom Ltd., Nigeria

header:
```
01: Received: from server.wb.local (fuwah.org [121.15.254.218])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 25 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([41.217.65.3] RDNS failed) by server.wb.local with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Tue, 26 Jan 2010 xx:xx:xx +0800
```
IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.

Interessant auch das Whois für diese IP:

Zitat:

remarks: +---------------------------------------+
remarks: | |
remarks: | ATTENTION !! |
remarks: | ============ |
remarks: | |
remarks: | THIS RESOURCE WILL BE DELETED AND |
remarks: | RECLAIMED ON 24-JAN-2010. PLEASE |
remarks: | CONTACT FOR |
remarks: | ADDITIONAL INFORMATION. |
remarks: | |
remarks: +---------------------------------------+

Ihre Rechnungen bezahlen die Mugu-Provider natürlich auch nicht.
(warum auch, das ganze 'Geschäftsmodell' baut ja auf Lug und Trug auf...)

die Madrid-Konnektion:

header:
```
01: Received: from User ([84.77.129.55])
02: 	(authenticated bits=0)
03: 	by www.elanbase.com (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
04: 	Mon, 25 Jan 2010 xx:xx:xx +0800 (CST)
```
IP: 84.77.129.55 ---> YACOMNET, ES/Orange

Muguphon: +34-692283669 ---> France Telecom España, S.a./Orange

Mugufax: +34 912919842 ---> Jazz Telecom, S.a.u.

header:
```
01: Received: from w2k3server.hongfok.com.sg (mail1.hongfok.com.sg
02: [58.185.27.218])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 27 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([82.128.22.203]) by w2k3server.hongfok.com.sg with
06: Microsoft SMTPSVC(6.0.3790.1830);
07: 	 Wed, 27 Jan 2010 xx:xx:xx +0800
```
IP: 82.128.22.203 ---> ml82.128.22.203.multilinks.com, Nigeria

- kjz

So, die nächste Lieferung rollt:

die Amsterdam-Konnektion mit gecracktem SquirrelMail, da hilft dann weder Sophos noch Ironport:

header:

01: Received: from mx.educacional.com.br (ironport1-mx.educacional.com.br
02: [200.186.179.64])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 28 Jan 2010 xx:xx:xx +0100 (CET)
05: X-IronPort-AV: E=Sophos;i="4.49,361,1262570400";
06:    d="scan'208";a="86096924"
07: Received: from 82.179.186.200.sta.positivo.com.br (HELO
08: webmail.up.edu.br) ([200.186.179.82])
09:   by smtp.educacional.com.br with ESMTP; 28 Jan 2010 xx:xx:xx -0200
10: Received: from 192.168.100.35 (proxying for 92.67.178.66)
11:         (SquirrelMail authenticated user poor [at] spamvictim.tld);
12:         by webmail.up.edu.br with HTTP;
13:         Thu, 28 Jan 2010 xx:xx:xx -0200 (BRST)

header:

01: Received: from mx.educacional.com.br (ironport1-mx.educacional.com.br
02: [200.186.179.64])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 28 Jan 2010 xx:xx:xx +0100 (CET)
05: X-IronPort-AV: E=Sophos;i="4.49,360,1262570400";
06:    d="scan'208";a="86084731"
07: Received: from 82.179.186.200.sta.positivo.com.br (HELO
08: webmail.up.edu.br) ([200.186.179.82])
09:   by smtp.educacional.com.br with ESMTP; 28 Jan 2010 xx:xx:xx -0200
10: Received: from 192.168.100.35 (proxying for 92.67.178.66)
11:         (SquirrelMail authenticated user poor [at] spamvictim.tld);
12:         by webmail.up.edu.br with HTTP;
13:         Thu, 28 Jan 2010 xx:xx:xx -0200 (BRST)

IP: 92.67.178.66 ---> static.kpn.net

Muguphon: +31-619-221-392 ---> Telfort B.V.,NL

Mugufax: +31-84 717 1925 ---> J2 Global (Netherlands) B.V.

Auch Freenet ist dabei:

header:

01: Received: from mout3.freenet.de (EHLO mout3.freenet.de) [195.4.92.93]
02:   by mx0.gmx.net (mx069) with SMTP; 29 Jan 2010 xx:xx:xx +0100
03: Received: from [195.4.92.11] (helo=1.mx.freenet.de)
04: 	by mout3.freenet.de with esmtpa (ID: [ID filtered]
05: (Exim 4.70 #1)
06: 	ID: [ID filtered]
07: Received: from h-213-80-118-132.na.cust.bahnhof.se
08: ([213.80.118.132]:1660 helo=User)
09: 	by 1.mx.freenet.de with esmtpa (ID: [ID filtered]
10: (Exim 4.69 #94)
11: 	ID: [ID filtered]

header:

01: Received: from ns3.9experts.com
02: (static-54-6.worldinternetworkcorporation.com [202.44.54.6])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Fri, 29 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: (qmail 14806 invoked from network); 27 Jan 2010 xx:xx:xx -0000
08: Received: from unknown (HELO User) (41.217.65.4)
09:   by static-54-7.worldinternetworkcorporation.com with SMTP; 27 Jan 2010
10: xx:xx:xx -0000

header:

01: Received: from ns3.9experts.com
02: (static-54-6.worldinternetworkcorporation.com [202.44.54.6])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat, 30 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: (qmail 30744 invoked from network); 29 Jan 2010 xx:xx:xx -0000
08: Received: from unknown (HELO User) (41.217.65.4)
09:   by static-54-7.worldinternetworkcorporation.com with SMTP; 29 Jan 2010
10: xx:xx:xx -0000

header:

01: Received: from pgengineering.com
02: (s41.n57.n84.n66.static.myhostcenter.com [66.84.57.41])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat, 30 Jan 2010 xx:xx:xx +0100 (CET)
07: Received: from User ([41.217.65.4])
08: 	(authenticated bits=0)
09: 	by pgengineering.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
10: 	Sat, 30 Jan 2010 xx:xx:xx -0500

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +2348038828069 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from mail.clhb.com.bo (unknown [200.87.203.102])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	Sat, 30 Jan 2010 xx:xx:xx +0100 (CET)

dia Amsterdam-Konnektion:

header:

01: Received: from fletcherandfriends.com (unknown [216.117.140.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 30 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from User [62.140.137.153] by fletcherandfriends.com with ESMTP
05:   (SMTPD32-8.05) ID: [ID filtered]

IP: 62.140.137.153 ---> VODAFONE-NL

header:

01: Received: from barracuda.lead-mgt.com (unknown [203.125.0.146])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 30 Jan 2010 xx:xx:xx +0100 (CET)
04: X-ASG-Debug-ID: [ID filtered]
05: Received: from lmserver1.lead-mgt.local ([192.168.100.1]) by
06: barracuda.lead-mgt.com with ESMTP ID: [ID filtered]
07: xxxxx; Sun, 31 Jan 2010 xx:xx:xx +0800 (SGT)
08: X-Barracuda-Envelope-From: wangyan.2010 [at] sify.com
09: Received: from User ([125.21.254.134]) by lmserver1.lead-mgt.local with
10: Microsoft SMTPSVC(6.0.3790.3959);
11: 	 Sun, 31 Jan 2010 xx:xx:xx +0800

die Madrid-Konnektion:

header:

01: Received: from IMPaqm4.telefonica.net (impaqm4.telefonica.net
02: [213.4.129.24])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 31 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from IMPmailhost4.adm.correo ([10.20.102.125])
06: 	by IMPaqm4.telefonica.net with bizsmtp
07: 	ID: [ID filtered]
08: Received: from User ([59.167.217.114])
09: 	by IMPmailhost4.adm.correo with BIZ IMP
10: 	ID: [ID filtered]

IP: 59.167.217.114 ---> ppp217-114.static.internode.on.net

Muguphon: +34-615-711-231 ---> France Telecom España, S.a./Orange

- kjz

Neue Runde, Teil 1:

header:

01: Received: from blu0-omc1-s27.blu0.hotmail.com
02: (blu0-omc1-s27.blu0.hotmail.com [65.55.116.38])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 28 Jan 2010 xx:xx:xx +0100 (CET)
05: Received: from BLU0-SMTP101 ([65.55.116.7]) by
06: blu0-omc1-s27.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Wed, 27 Jan 2010 xx:xx:xx -0800
08: Received: from user-1d8b9555b1 ([41.203.234.236]) by
09: BLU0-SMTP101.blu0.hotmail.com over TLS secured channel with Microsoft
10: SMTPSVC(6.0.3790.3959);
11: 	 Wed, 27 Jan 2010 xx:xx:xx -0800

X-Originating-IP: [41.203.234.236] ---> ONATEL, BF

Muguphon: +22675145555 ---> Celtel Burkina Faso S.A./Zain

hier wurde wohl ein deutscher Account gecrackt:

header:

01: Received: from mailout10.t-online.de (mailout10.t-online.de [194.25.134.21])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx>; Fri, 29 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from fwd06.aul.t-online.de (fwd06.aul.t-online.de )
05: 	by mailout10.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (SgULaEZJwtFPeLvcYUFrdMLhjFZ+kb4qyyHbNCIL6A4FzAiMyvBM53LUEmMRJVgOS37gYswxuA@[208.86.156.230
09: 	#93;)
10: by fwd06.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 208.86.156.230 ---> host2.allfreelancework.com

Muguphon: +234 708 515 0758 ---> Celtel Nigeria Limited/Zain

Fallback-Server werden bei der Sicherheit wohl auch mal gerne vergessen und schon ist SquirrelMail gecrackt:

header:

01: Received: from fallback.cbn.net.ID: [ID filtered]
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 29 Jan 2010 xx:xx:xx +0100 (CET)
04: Received: from ip5.cbn.net.ID: [ID filtered]
05: 	by fallback.cbn.net.ID: [ID filtered]
06: 	Fri, 29 Jan 2010 xx:xx:xx +0700 (WIT)
07: Received: from ip89-68.cbn.net.ID: [ID filtered]
08: ([202.158.89.68])
09:   by ip5-smtp.int.cbn.net.ID: [ID filtered]
10: Received: from localhost (localhost [127.0.0.1])
11: 	by mail.litbang.deptan.go.ID: [ID filtered]
12: 	Fri, 29 Jan 2010 xx:xx:xx +0700 (WIT)
13: X-Virus-Scanned: Debian amavisd-new at mail.litbang.deptan.go.id
14: Received: from mail.litbang.deptan.go.ID: [ID filtered]
15: 	by localhost (umar.litbang.deptan.go.ID: [ID filtered]
16: 10024)
17: 	with ESMTP ID: [ID filtered]
18: Received: by mail.litbang.deptan.go.ID: [ID filtered]
19: 	ID: [ID filtered]
20: Received: from 41.220.75.18
21:         (SquirrelMail authenticated user balitklimat)
22:         by mail.litbang.deptan.go.ID: [ID filtered]
23:         Fri, 29 Jan 2010 xx:xx:xx +0700 (WIT)

IP: 41.220.75.18 ---> MTN Nigeria

- kjz

Neues von der Mugu-Front:

header:

01: Received: from mail.unfps.ntct.edu.tw (mail.unfps.ntct.edu.tw
02: [163.22.120.3])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Thu,  4 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from 82.128.81.201
06: 	by mail.unfps.ntct.edu.tw with Mail2000 ESMTP Server
07: V2.71S(190:0:AUTH_LOGIN)
08: 	Tue, 26 Jan 2010 xx:xx:xx +0800 (CST);
09: 	(envelope-from <cpshire2 [at] gmail.com>)

IP: 82.128.81.201 ---> Multilinks Telecommunications Limited, Nigeria

Freenet auch dabei:

header:

01: Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu,  4 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.16] (helo=6.mx.freenet.de)
07: 	by mout6.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.70 #1)
09: 	ID: [ID filtered]
10: Received: from [41.217.65.4] (port=49976 helo=User)
11: 	by 6.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (Exim 4.72 #1)
13: 	ID: [ID filtered]

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

auch wieder T-Offline mit der Ferienwohnung:

header:

01: Received: from mailout09.t-online.de (mailout09.t-online.de [194.25.134.84])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  5 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from fwd11.aul.t-online.de (fwd11.aul.t-online.de )
05: 	by mailout09.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (EAEmrcZDgtV285Z09gAOAF+Q5fODyv4nd3948dtoEHtTPrX+Hb3-2j97xYkJJRSkUvebFe-2Th@[208.98.29.125&
09: 	93;)
10: by fwd11.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 208.98.29.125 ---> Sharktech

Muguphon: +234 708 515 0758 ---> Celtel Nigeria Limited/Zain

BTW: ach waren das noch Zeiten, als Web.de noch per Briefpost(!) Bestätigungscodes verschickte, mit denen man eine Freemail-Adresse erst freischalten musste...

- kjz

die nächste Ladung:

header:

01: Received: from mail.ros.gov.my (imap4.ros.gov.my [202.60.56.101])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu,  4 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([82.128.34.230])
05: 	by mail.ros.gov.my (MOS 3.8.6-GA)
06: 	with ESMTP ID: [ID filtered]
07: 	Wed, 3 Feb 2010 xx:xx:xx +0800 (MYT)

IP: 82.128.34.230 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +447749693780 ---> O2 (UK) Limited

header:

01: Received: from mail.kz (frontend03n.mail.kz [92.46.53.18])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  6 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from [41.217.65.4] (account frankobi4 [at] mail.kz HELO User)
05:   by frontend03n.mail.kz (CommuniGate Pro SMTP 5.2.13)
06:   with ESMTPA ID: [ID filtered]

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234 708 515 0758 ---> Celtel Nigeria Limited/Zain

gecracktes SquirrelMail:

header:

01: Received: from admn.jdvu.ac.in (EHLO mail2.jdvu.ac.in) [203.197.118.100]
02:   by mx0.gmx.net (mx099) with SMTP; 05 Feb 2010 xx:xx:xx +0100
03: Received: by mail2.jdvu.ac.in (Postfix, from userID: [ID filtered]
04: 	ID: [ID filtered]
05: X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on mail2.jdvu.ac.in
06: X-Spam-Status: No, score=-0.6 required=5.0 tests=ADVANCE_FEE_1,ALL_TRUSTED,
07: 	UNDISC_RECIPS autolearn=failed version=3.1.9
08: Received: from mail.jdvu.ac.in (mail2.jdvu.ac.in [127.0.0.1])
09: 	by mail2.jdvu.ac.in (Postfix) with ESMTP ID: [ID filtered]
10: 	Sat,  6 Feb 2010 xx:xx:xx +0530 (IST)
11: Received: from 66.230.230.230
12:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
13:         by mail.jdvu.ac.in with HTTP;
14:         Sat, 6 Feb 2010 xx:xx:xx +0530

Muguphon: +44-703-196-2778 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44-702-404-2779 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mail.inetwerx.net (unknown [66.213.226.90])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  6 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([82.128.80.131]) by mail.inetwerx.net with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Sat, 6 Feb 2010 xx:xx:xx -0700

IP: 82.128.80.131 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from smtp2a.orange.fr (smtp2a.orange.fr [80.12.242.139])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  6 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2a09.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Sat,  6 Feb 2010 xx:xx:xx +0100 (CET)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2a09.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Sat,  6 Feb 2010 xx:xx:xx +0100 (CET)
10: Received: from serveur.DOMCONFIANCE.local
11: (LNeuilly-152-23-18-76.w217-128.abo.wanadoo.fr [217.128.65.76])
12: 	by mwinf2a09.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
13: 	Sat,  6 Feb 2010 xx:xx:xx +0100 (CET)
14: X-ME-UUID: [UID filtered]
15: Received: from User ([59.91.190.25]) by serveur.DOMCONFIANCE.local with
16: Microsoft SMTPSVC(6.0.3790.3959);
17: 	 Sat, 6 Feb 2010 xx:xx:xx +0100

Muguphon: +234-8020933903 ---> Celtel Nigeria Limited/Zain

die Amsterdam-Konnektion:

header:

01: Received: from cpsmtpb-ews01.kpnxchange.com
02: (cpsmtpb-ews01.kpnxchange.com [213.75.39.4])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun,  7 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from cpbrm-ews07.kpnxchange.com ([10.94.84.138]) by
06: cpsmtpb-ews01.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Sun, 7 Feb 2010 xx:xx:xx +0100
08: Received: from CPSMTPM-EML04.kpnxchange.com ([213.75.39.74]) by
09: cpbrm-ews07.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
10: 	 Sun, 7 Feb 2010 xx:xx:xx +0100
11: Received: from localhost ([10.94.77.199]) by
12: CPSMTPM-EML04.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
13: 	 Sun, 7 Feb 2010 xx:xx:xx +0100

Muguphon: +31-647-226-334 ---> Telfort B.V., NL/Tiscali

header:

01: Received: from shanticyber.com (MAIL.ALANKITONLINE.com [125.18.240.67])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun,  7 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from Internal Mail-Server by PineAppMail-SeCure (envelope-from
05: 	richardwilson2010k [at] rocketmail.com) with SMTP; 8 Feb 2010 xx:xx:xx +0530

- kjz

So, da wäre wieder die Madrid-Konnektion:

header:

01: Received: from cig-mx1.cig.local (commsintlgroup.claranet.co.uk
02: [212.169.11.47])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 10 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([87.219.96.58]) by cig-mx1.cig.local with Microsoft
06: SMTPSVC(6.0.3790.3959);
07: 	 Wed, 10 Feb 2010 xx:xx:xx +0000

IP: 87.219.96.58 ---> 58.96.219.87.dynamic.jazztel.es

Auch diesen Mugu hatten wir schon:

- kjz

Weiter geht es mit:

header:

01: Received: from sggs.hc.edu.tw (sggs.hc.edu.tw [140.126.151.1])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  8 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: by sggs.hc.edu.tw (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from mail.sggs.hc.edu.tw (localhost [127.0.0.1])
07: 	by sggs.hc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
08: 	Mon,  8 Feb 2010 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.138.191.116 (josephine) ---> Visafone Communications

Muguphon: +1-206-339-1057 ---> International Telcom, Ltd.

Mugufax: +1-206-309-3625 ---> International Telcom, Ltd.

header:

01: Received: from nettop.co.kr (EHLO nettop.co.kr) [61.100.6.41]
02:   by mx0.gmx.net (mx069) with SMTP; 08 Feb 2010 xx:xx:xx +0100
03: Received: from User ([41.174.53.216])
04: 	(authenticated bits=0)
05: 	by nettop.co.kr (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
06: 	Mon, 8 Feb 2010 xx:xx:xx +0900

IP: 41.174.53.216 ---> NEOTEL, ZA

header:

01: Received: from KK.comedream.com (comedream.com [61.67.232.17])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  8 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User (unknown [41.138.189.57])
05: 	by KK.comedream.com (Postfix) with ESMTP
06: 	ID: [ID filtered]

IP: 41.138.189.57 ---> Visafone Communications Limited, Nigeria

header:

01: Received: from mail.cynex.co.kr (unknown [114.141.2.203])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon,  8 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from User ([70.62.104.86])
07: 	(authenticated user test [at] cynex.co.kr)
08: 	by mail.cynex.co.kr (Kerio MailServer 6.4.0);
09: 	Mon, 8 Feb 2010 xx:xx:xx +0900

IP: 70.62.104.86 ---> rrcs-70-62-104-86.midsouth.biz.rr.com

header:

01: Received: from host.neolabs.kz (chost.neolabs.kz [195.93.153.46])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue,  9 Feb 2010 xx:xx:xx 퍝 (CET)
06: Received: from chello089075012058.chello.pl ([89.75.12.58]:2522 helo=User)
07: 	by host.neolabs.kz with esmtpa (Exim 4.71)
08: 	(envelope-from <jackharshman [at] sify.com>)
09: 	ID: [ID filtered]

wieder die Madrid-Konnektion:

header:

01: Received: from server.scorewell.co.uk (unknown [78.129.158.110])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Mon,  8 Feb 2010 xx:xx:xx -0500 (EST)
04: Received: from [84.77.135.33] (helo=User)
05: 	by server.scorewell.co.uk with esmtpa (Exim 4.69)
06: 	(envelope-from <admin [at] caturelang.co.id>)
07: 	ID: [ID filtered]

IP: 84.77.135.33 ---> Ya.com Internet Factory, ES

Dazu kommt dann noch, dass AIM/AOL wohl auf allen Ohren taub für Complaints ist. Die sind wohl eher mit ihrem Rückzug aus DE beschäftigt.

Muguphon: +34-692283669 ---> France Telecom España, S.a./Orange

Mugufax: +34-912919842 ---> Jazz Telecom, S.a.u.

header:

01: Received: from mx1.zajil.net (mx1.zajil.net [212.24.224.46])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 10 Feb 2010 xx:xx:xx +0100 (CET)
04: X-IronPort-Anti-Spam-Filtered: true
05: X-IronPort-Anti-Spam-Result:
06: AsEaAGvacUvUGOA9XWdsb2JhbAB9jXSKcS5gIyMjrwoIhQcCAYhmgjsFGAiBdQSDDYEjiW8C
07: X-IronPort-AV: E=Sophos;i="4.49,441,1262552400";
08:    d="scan'208";a="99981654"
09: Received: from mail.helalmadina.org.sa (HELO pop.zajil.net)
10: ([212.24.224.61])
11:   by mx1.zajil.net with ESMTP; 10 Feb 2010 xx:xx:xx +0300
12: Received: from localhost ([212.24.224.61])
13:         by pop.zajil.net (Merak 8.3.6) with SMTP ID: [ID filtered]
14:         Wed, 10 Feb 2010 xx:xx:xx +0300

Und wieder die Madrid-Konnektion:

header:

01: Received: from server.scorewell.co.uk (unknown [78.129.158.110])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed, 10 Feb 2010 xx:xx:xx -0500 (EST)
04: Received: from [84.77.143.234] (helo=User)
05: 	by server.scorewell.co.uk with esmtpa (Exim 4.69)
06: 	(envelope-from <admin [at] caturelang.co.id>)
07: 	ID: [ID filtered]

IP: 84.77.143.234 ---> YACOMNET, ES

Muguphon: +34-692283669 ---> France Telecom España, S.a./Orange

Mugufax: +34-912919842 ---> Jazz Telecom, S.a.u.

- kjz

Übers Wochenende so eingetrudelt:

die Amsterdam-Konnektion über gecrackten Uni-Account:

header:

01: Received: from mongoose.sinclair.edu (mx.sinclair.edu [140.106.192.23])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Fri, 12 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from cedar.scc-nt.sinclair.edu (sourwood.scc-nt.sinclair.edu
07: [140.106.51.214])
08: 	by mongoose.sinclair.edu (8.13.8/8.13.8/Debian-3) with ESMTP id
09: o1BA1mmk019945;
10: 	Thu, 11 Feb 2010 xx:xx:xx -0500

Muguphon: +31-647-226-334 ---> Telfort B.V., NL/Tiscali

wieder gecrackter Uni-Account:

header:

01: Received: from ohm.utp.edu.co (ohm.utp.edu.co [200.21.217.54])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 12 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from ohm.utp.edu.co (ohm.utp.edu.co [127.0.0.1])
05: 	by ohm.utp.edu.co (8.12.9/8.12.9) with ESMTP ID: [ID filtered]
06: 	Fri, 12 Feb 2010 xx:xx:xx -0500 (COT)

Mugulein 1:

header:

01: Received: from LedwidgeIT.com (unknown [89.127.250.100])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 13 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([41.217.66.4]) by LedwidgeIT.com with Microsoft
05: SMTPSVC(6.0.3790.3959);
06: 	 Fri, 12 Feb 2010 xx:xx:xx +0000

IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.

Besonders pikant: ^whois: bietet 'IT Consultancy' und 'Email Solutions' an. Ein IT Consultant, dem sein eigener Mail-Server gecrackt wird. Noch dazu wegen fehlendem Abuse-Account bei RFC-Ignorant gelistet. Das spricht doch mal für absolute Fachkompetenz.....

Muguphon: +44 702 407 3956 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from smtp-ext-02.mx.pitdc1.expedient.net
02: (smtp-ext-02.mx.pitdc1.expedient.net [206.210.69.142])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat, 13 Feb 2010 xx:xx:xx +0100 (CET)
07: Received: from User (unknown [82.128.84.103])
08: 	by smtp-ext-02.mx.pitdc1.expedient.net (Postfix) with ESMTPA ID: [ID filtered]
09: 	Sat, 13 Feb 2010 xx:xx:xx -0500 (EST)

IP: 82.128.84.103 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +44 703 194 2575 ---> Magrathea Telecommunications Limited, UK

Mugulein 1a:

header:

01: Received: from smtp-out01.msg.oleane.net (smtp-out01.msg.oleane.net
02: [62.161.3.10])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 13 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from smtp04.msg.oleane.net (smtp04.mail.priv [172.17.20.113])
06: 	by smtp-out01.msg.oleane.net with ESMTP ID: [ID filtered]
07: 	Sat, 13 Feb 2010 xx:xx:xx +0100
08: Received: from amilton-am.com (mail.amilton-am.fr [81.80.217.90])
09: (authenticated)
10: 	by smtp04.msg.oleane.net (MTA) with ESMTP ID: [ID filtered]
11: 	Sat, 13 Feb 2010 xx:xx:xx +0100
12: Received: from User ([41.217.66.5]) by amilton-am.com with Microsoft
13: SMTPSVC(6.0.3790.1830);
14: 	 Sat, 13 Feb 2010 xx:xx:xx +0100

IP: 41.217.66.5 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +44 702 407 3956 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mail.kepidbill.co.kr (unknown [211.233.40.243])
02: 	(using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 14 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from User ([83.229.48.148])
07:         by mail.kepidbill.co.kr (IceWarp 9.4.1) with ASMTP ID: [ID filtered]
08:         Sun, 14 Feb 2010 xx:xx:xx +0900

IP: 83.229.48.148 ---> Cyberspace, Nigeria

- kjz

kurzer Nachschlag:

header:

01: Received: from ns1.ksog.org (unknown [211.234.111.84])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 11 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 8334 invoked by UID: [UID filtered]
07: Hanbiro-VS-Header: |||,UNKNOWN,41.26.109.133,2812,1265841809.8304
08: Received: from unknown (HELO User) (gabriel [at] 41.26.109.133)
09: 	by 0 (qmail 1.03 + ejcp v14) with SMTP;
10: 	11 Feb 2010 xx:xx:xx +0900

IP: 41.26.109.133 ---> Vodacom_UMTS_Gauteng_INTERNET_APN

Muguphon: +27-73-312-1837 ---> MTN, ZA

ein penetranter Mugu der Madrid-Konnektion:

header:

01: Received: from server.scorewell.co.uk (unknown [78.129.158.110])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed, 10 Feb 2010 xx:xx:xx -0500 (EST)
04: Received: from [84.77.143.234] (helo=User)
05: 	by server.scorewell.co.uk with esmtpa (Exim 4.69)
06: 	(envelope-from <admin [at] caturelang.co.id>)
07: 	ID: [ID filtered]

header:

01: Received: from server.scorewell.co.uk (unknown [78.129.158.110])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed, 10 Feb 2010 xx:xx:xx -0500 (EST)
04: Received: from [84.77.143.234] (helo=User)
05: 	by server.scorewell.co.uk with esmtpa (Exim 4.69)
06: 	(envelope-from <admin [at] caturelang.co.id>)
07: 	ID: [ID filtered]

IP: 84.77.143.234 ---> Ya.com, ES

- kjz

die nächsten Mugus, bitte:

header:

01: Received: from mail.proteinlounge.com (unknown [174.132.133.130])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 16 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User [58.6.32.233] by mail.proteinlounge.com with ESMTP
05:   (SMTPD32-8.15) ID: [ID filtered]

IP: 58.6.32.233 ---> dsl-58-6-32-233.nsw.westnet.com.au

gecracktes Squirrelmail vom Dauer-Mugu:

header:

01: Received: from atl3.accelmail.com (uz027.managedbiz.net [63.111.11.27])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 16 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 7742 invoked by UID: [UID filtered]
07: Received: from unknown (HELO mail.accelfrontline.in) (10.1.1.27)
08:   by 0 with SMTP; 16 Feb 2010 xx:xx:xx -0000
09: Received: from 41.220.75.3
10:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
11:         by mail.accelfrontline.in with HTTP;
12:         Tue, 16 Feb 2010 xx:xx:xx -0000 (GMT)

header:

01: Received: from atl3.accelmail.com (uz027.managedbiz.net [63.111.11.27])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 16 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 8309 invoked by UID: [UID filtered]
07: Received: from unknown (HELO mail.accelfrontline.in) (10.1.1.27)
08:   by 0 with SMTP; 16 Feb 2010 xx:xx:xx -0000
09: Received: from 41.220.75.3
10:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
11:         by mail.accelfrontline.in with HTTP;
12:         Tue, 16 Feb 2010 xx:xx:xx -0000 (GMT)

header:

01: Received: from atl3.accelmail.com (uz027.managedbiz.net [63.111.11.27])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 16 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 9129 invoked by UID: [UID filtered]
07: Received: from unknown (HELO mail.accelfrontline.in) (10.1.1.27)
08:   by 0 with SMTP; 16 Feb 2010 xx:xx:xx -0000
09: Received: from 41.220.75.3
10:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
11:         by mail.accelfrontline.in with HTTP;
12:         Tue, 16 Feb 2010 xx:xx:xx -0000 (GMT)

IP: 41.220.75.3 ---> MTN Nigeria

header:

01: Received: from mail.zonkesa.co.za (EHLO zonkesa.co.za) [196.15.204.74]
02:   by mx0.gmx.net (mx118) with SMTP; 16 Feb 2010 xx:xx:xx +0100
03: Received: from User ([202.29.94.110]) by zonkesa.co.za with Microsoft
04: SMTPSVC(6.0.3790.3959);
05: 	 Fri, 12 Feb 2010 xx:xx:xx +0200

IP: 202.29.94.110 ---> Unnop Viriyavit, TH

Muguphon: +447024044576 ---> Magrathea Telecommunications Limited, UK

Muguphon: +447024087647 ---> Magrathea Telecommunications Limited, UK

die Madrid-Konnektion:

header:

01: Received: from IMPaqm2.telefonica.net (impaqm2.telefonica.net
02: [213.4.129.22])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 16 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from IMPmailhost3.adm.correo ([10.20.102.124])
06: 	by IMPaqm2.telefonica.net with bizsmtp
07: 	ID: [ID filtered]
08: Received: from User ([81.202.3.254])
09: 	by IMPmailhost3.adm.correo with BIZ IMP
10: 	ID: [ID filtered]

IP: 81.202.3.254 ---> 81.202.3.254.dyn.user.ono.com, ES

Muguphon: +34-634-130-267 ---> Vodafone España, S.a.u.

header:

01: Received: from cmhk.com (unknown [219.134.60.79])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 17 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User (unknown [82.128.18.221])
05: 	by bmail-app.cmhk.com (Coremail) with SMTP id
06: CmUFK5DLlQYiHHtLQEIPAA--.11605S3;
07: 	Wed, 17 Feb 2010 xx:xx:xx +0800 (CST)

IP: 82.128.18.221 ---> Multilinks Telecommunications Limited, Nigeria

Freenet, Teil 1:

header:

01: Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 17 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.11] (helo=1.mx.freenet.de)
07: 	by mout6.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [82.128.83.85] (port=3370 helo=User)
11: 	by 1.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #1)
13: 	ID: [ID filtered]

IP: 82.128.83.85 ---> Multilinks Telecommunications Limited, Nigeria

(Freenet)

- kjz

Mugu-Nachschub:

header:

01: Received: from studiomark.texnet.org (89-97-221-242.ip19.fastwebnet.it
02: [89.97.221.242])
03: 	(using TLSv1 with cipher AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Thu, 18 Feb 2010 xx:xx:xx +0100 (CET)
07: Received: from [41.217.66.5] (helo=User)
08: 	by studiomark.texnet.org with esmtpa (Exim 4.50)
09: 	ID: [ID filtered]

IP: 41.217.66.5 ---> ZOOM Mobile Nigeria Ltd.

Freenet, Teil 2:

header:

01: Received: from mout3.freenet.de (mout3.freenet.de [195.4.92.93])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 17 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.12] (helo=2.mx.freenet.de)
07: 	by mout3.freenet.de with esmtpa (ID: [ID filtered]
08: 25) (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [82.128.36.168] (port=3173 helo=User)
11: 	by 2.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 25) (Exim 4.72 #1)
13: 	ID: [ID filtered]

IP: 82.128.36.168 ---> Multilinks Telecommunications Limited, Nigeria

(Freenet)

header:

01: Received: from mx.eontoys.com (unknown [87.227.160.74])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 18 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([81.199.115.136] RDNS failed) by mx.eontoys.com
05: with Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Thu, 18 Feb 2010 xx:xx:xx +0200

IP: 81.199.115.136 ---> 81.199.115.136.satcom-systems.net

Freenet, Teil 3:

header:

01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 18 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.25] (helo=15.mx.freenet.de)
07: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [66.90.109.42] (port=44177 helo=User)
11: 	by 15.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (Exim 4.72 #1)
13: 	ID: [ID filtered]

IP: 66.90.109.42 ---> FDCservers.net

(Freenet)

Freenet, Teil 4:

header:

01: Received: from mout4.freenet.de (mout4.freenet.de [195.4.92.94])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 18 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.18] (helo=8.mx.freenet.de)
07: 	by mout4.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from c-71-57-32-231.hsd1.in.comcast.net ([71.57.32.231]:24027
11: helo=User)
12: 	by 8.mx.freenet.de with esmtpa (ID: [ID filtered]
13: (Exim 4.72 #1)
14: 	ID: [ID filtered]

(Freenet)

Muguphon: +2347042166118 ---> Visafone Communications Ltd., Nigeria

header:

01: Received: from sggs.hc.edu.tw (sggs.hc.edu.tw [140.126.151.1])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 19 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: by sggs.hc.edu.tw (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from mail.sggs.hc.edu.tw (localhost [127.0.0.1])
07: 	by sggs.hc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
08: 	Fri, 19 Feb 2010 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.138.181.91 (josephine) ---> Visafone Communications Limited, Nigeria

Muguphon: +1-206-339-1057 ---> International Telcom, Ltd.

Mugufax: +1-206-309-3625 ---> International Telcom, Ltd.

Freenet, Teil 5:

header:

01: Received: from mout5.freenet.de (mout5.freenet.de [195.4.92.95])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 18 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.21] (helo=11.mx.freenet.de)
07: 	by mout5.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [66.90.109.42] (port=51786 helo=User)
11: 	by 11.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (Exim 4.72 #1)
13: 	ID: [ID filtered]

IP: 66.90.109.42 ---> FDCservers.net

(Freenet)

header:

01: Received: from unknown (EHLO nm.mustek-hz.com.cn) [218.108.8.66]
02:   by mx0.gmx.net (mx110) with SMTP; 18 Feb 2010 xx:xx:xx +0100
03: Received: from User ([82.128.33.7])
04: 	(authenticated bits=0)
05: 	by nm.mustek-hz.com.cn (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
06: 	Fri, 19 Feb 2010 xx:xx:xx +0800

IP: 82.128.33.7 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +234 8029912899 ---> Celtel Nigeria Limited/Zain

- kjz

die nächsten Mugus:

gecracktes SquirrelMail:

header:

01: Received: from correo.sucre.udo.edu.ve (correo.sucre.udo.edu.ve
02: [150.186.92.253])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
07: Received: (qmail 4896 invoked by UID: [UID filtered]
08: Received: from 127.0.0.1 by correo (envelope-from <info [at] chan.com>, uid
09: 1008) with qmail-scanner-1.25-st-qms
10:  (clamdscan: 0.95.2/9450. spamassassin: 3.2.5. perlscan: 1.25-st-qms.
11:  Clear:RC:1(127.0.0.1):.
12:  Processed in 0.017782 secs); 18 Feb 2010 xx:xx:xx -0000
13: X-Antivirus-sucre.udo.edu.ve-Mail-From: info [at] chan.com via correo
14: X-Antivirus-sucre.udo.edu.ve: 1.25-st-qms (Clear:RC:1(127.0.0.1):.
15: Processed in 0.017782 secs Process 4890)
16: Received: from localhost (HELO correo.sucre.udo.edu.ve) (127.0.0.1)
17:   by correo.sucre.udo.edu.ve with SMTP; 18 Feb 2010 xx:xx:xx -0430
18: Received: from 62.56.132.7
19:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
20:         by correo.sucre.udo.edu.ve with HTTP;
21:         Thu, 18 Feb 2010 xx:xx:xx -0000

header:

01: Received: from correo.sucre.udo.edu.ve (correo.sucre.udo.edu.ve
02: [150.186.92.253])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
07: Received: (qmail 12816 invoked by UID: [UID filtered]
08: Received: from 127.0.0.1 by correo (envelope-from <info [at] chan.com>, uid
09: 1008) with qmail-scanner-1.25-st-qms
10:  (clamdscan: 0.95.2/9450. spamassassin: 3.2.5. perlscan: 1.25-st-qms.
11:  Clear:RC:1(127.0.0.1):.
12:  Processed in 0.017474 secs); 19 Feb 2010 xx:xx:xx -0000
13: X-Antivirus-sucre.udo.edu.ve-Mail-From: info [at] chan.com via correo
14: X-Antivirus-sucre.udo.edu.ve: 1.25-st-qms (Clear:RC:1(127.0.0.1):.
15: Processed in 0.017474 secs Process 12808)
16: Received: from localhost (HELO correo.sucre.udo.edu.ve) (127.0.0.1)
17:   by correo.sucre.udo.edu.ve with SMTP; 19 Feb 2010 xx:xx:xx -0430
18: Received: from 62.56.132.7
19:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
20:         by correo.sucre.udo.edu.ve with HTTP;
21:         Fri, 19 Feb 2010 xx:xx:xx -0000

IP: 62.56.132.7 ---> 62.56.132.7.satcom-systems.net

Muguphon: +60102034596 ---> Celcom, Malaysia

Freenet, Teil 6:

header:

01: Received: from mout7.freenet.de (mout7.freenet.de [195.4.92.97])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.16] (helo=6.mx.freenet.de)
07: 	by mout7.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [82.128.83.217] (port=50861 helo=User)
11: 	by 6.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #1)
13: 	ID: [ID filtered]

IP: 82.128.83.217 ---> Multilinks Telecommunications Limited, Nigeria

(Freenet)

header:

01: Received: from omr4.networksolutionsemail.com
02: (omr4.networksolutionsemail.com [205.178.146.54])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from mail.networksolutionsemail.com
06: (mail.networksolutionsemail.com [205.178.146.50])
07: 	by omr4.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
08: o1K90HAM026003
09: 	for xxxxx; Sat, 20 Feb 2010 xx:xx:xx -0500
10: Message-ID: [ID filtered]
11: Received: (qmail 12969 invoked by UID: [UID filtered]
12: Received: from unknown (HELO User) (lucky3 [at] cristlorenzo.net@196.207.229.153)
13:   by ns-omr1.lb.hosting.dc2.netsol.com with SMTP; 20 Feb 2010 xx:xx:xx
14: -0000

IP: 196.207.229.153 ---> ADSL-REGIONS, SN

header:

01: Received: from web1.nehp.net (unknown [63.108.130.10])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 21 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from User (unknown [82.128.84.76])
07: 	by web1.nehp.net (Postfix) with ESMTP ID: [ID filtered]
08: 	Sat, 20 Feb 2010 xx:xx:xx -0600 (CST)

header:

01: Received: from web1.nehp.net (web1.nehp.net [63.108.130.10])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 21 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from User (unknown [82.128.84.147])
07: 	by web1.nehp.net (Postfix) with ESMTP ID: [ID filtered]
08: 	Sun, 21 Feb 2010 xx:xx:xx -0600 (CST)

IP: 82.128.84.76 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +44-7031-94-2575 ---> Magrathea Telecommunications Limited, UK

Muguphon: +1-360-216-1972 ---> Level 3 Communications, Llc

die Madrid-Konnektion:

header:

01: Received: from 237.red.175.225.212.user.ptvtelecom.com (EHLO
02: mx4.hotmail.com) [212.225.175.237]
03:   by mx0.gmx.net (mx043) with SMTP; 20 Feb 2010 xx:xx:xx +0100

header:

01: Received: from mx4.hotmail.com (237.red.175.225.212.user.ptvtelecom.com
02: [212.225.175.237])
03: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100

Muguphon: +34 672 509 598 ---> Vodafone España, S.a.u.

gecracktes Horde:

header:

01: Received: from mailrelay1.nl1.keenondots.net
02: (mailrelay2.nl1.keenondots.net [87.249.98.120])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from maildelivery1.nl1.keenondots.net
06: (maildelivery1.nl1.keenondots.net [87.249.98.12])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	by mailrelay1.nl1.keenondots.net (Postfix) with ESMTP ID: [ID filtered]
10: 	Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
11: Received: from mailscanner6.nl1.keenondots.net
12: (mailscanner6.nl1.keenondots.net [87.249.98.18])
13: 	by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP ID: [ID filtered]
14: 	Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
15: X-Virus-Scanned: by Keenondots at mailscanner6.nl1.keenondots.net
16: Received: from maildelivery1.nl1.keenondots.net ([87.249.98.12])
17: 	by mailscanner6.nl1.keenondots.net (mailscanner6.nl1.keenondots.net
18: [87.249.98.18]) (amavisd-new, port 10024)
19: 	with LMTP ID: [ID filtered]
20: Received: from webmail.keenondots.com (www1.keenondots.com [87.249.98.10])
21: 	by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP ID: [ID filtered]
22: 	Sat, 20 Feb 2010 xx:xx:xx +0100 (CET)
23: Received: from 92.46.55.46 ([92.46.55.46]) by webmail.keenondots.com (Horde
24: 	MIME library) with HTTP; Sat, 20 Feb 2010 xx:xx:xx +0100

IP: 92.46.55.46 ---> Kazakhtelecom

header:

01: Received: from mail.tj.ro.gov.br (EHLO mail.tjro.jus.br) [200.101.66.115]
02:   by mx0.gmx.net (mx002) with SMTP; 21 Feb 2010 xx:xx:xx +0100
03: Received: from User ([67.23.70.5])
04:         by mail.tjro.jus.br (TJRO Mail Server 2009 PRO) with ASMTP id
05: DTK73449;
06:         Sun, 21 Feb 2010 xx:xx:xx -0400

IP: 67.23.70.5 ---> host-67-23-70-5.biznesshosting.net

Muguphon: +44 1614083585 ---> Cable & Wireless Plc, UK

header:

01: Received: from smtpgate2.pacific.net.sg (smtpgate2.pacific.net.sg
02: [203.120.90.32])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 21 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: (qmail 19620 invoked from network); 21 Feb 2010 xx:xx:xx -0000
06: Received: from c-174-55-137-174.hsd1.pa.comcast.net (HELO
07: smtp.pacific.net.sg) (aios [at] 174.55.137.174)
08:   by smtpgate2.pacific.net.sg with ESMTPA; 21 Feb 2010 xx:xx:xx -0000

Muguphon: +44-700-5964577 ---> PNC Telecom Services Limited, UK/Tricor

Muguphon: +44-701-1138970 ---> PNC Telecom Services Limited

Mugufax: +44 870 288 7323 ---> Interweb Design Ltd, UK

Mugufax: +44 870 288 7101 ---> Interweb Design Ltd

- kjz

alte, neue Bekannte:

header:

01: Received: from correio.sanol.com.br (sanol.sanol.com.br [200.232.10.19])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon, 22 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: by correio.sanol.com.br (Postfix, from userID: [ID filtered]
07: 	ID: [ID filtered]
08: Received: from User (unknown [41.138.176.249])
09: 	by correio.sanol.com.br (Postfix) with ESMTP ID: [ID filtered]
10: 	Sun, 21 Feb 2010 xx:xx:xx -0300 (BRT)

IP: 41.138.176.249 ---> Visafone Communications Limited, Nigeria

Muguphon: +44 703 199 2662 ---> Magrathea Telecommunications Limited, UK

gecracktes Horde, zum Zweiten:

header:

01: Received: from mailrelay1.nl1.keenondots.net
02: (mailrelay2.nl1.keenondots.net [87.249.98.120])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Mon, 22 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: from maildelivery1.nl1.keenondots.net
06: (maildelivery1.nl1.keenondots.net [87.249.98.12])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	by mailrelay1.nl1.keenondots.net (Postfix) with ESMTP ID: [ID filtered]
10: 	Tue, 23 Feb 2010 xx:xx:xx +0100 (CET)
11: Received: from mailscanner1.nl1.keenondots.net
12: (mailscanner1.nl1.keenondots.net [87.249.98.11])
13: 	by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP ID: [ID filtered]
14: 	Tue, 23 Feb 2010 xx:xx:xx +0100 (CET)
15: X-Virus-Scanned: by Keenondots at mailscanner1.nl1.keenondots.net
16: Received: from maildelivery1.nl1.keenondots.net ([87.249.98.12])
17: 	by mailscanner1.nl1.keenondots.net (mailscanner1.nl1.keenondots.net
18: [87.249.98.11]) (amavisd-new, port 10024)
19: 	with LMTP ID: [ID filtered]
20: Received: from webmail.keenondots.com (www1.keenondots.com [87.249.98.10])
21: 	by maildelivery1.nl1.keenondots.net (Postfix) with ESMTP ID: [ID filtered]
22: 	Tue, 23 Feb 2010 xx:xx:xx +0100 (CET)
23: Received: from vpnserver2.ucnet.uoc.gr (vpnserver2.ucnet.uoc.gr
24: 	[147.52.151.2]) by webmail.keenondots.com (Horde MIME library) with HTTP;
25: 	Tue, 23 Feb 2010 xx:xx:xx +0100

Freenet, Teil 7:

header:

01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 23 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.27] (helo=17.mx.freenet.de)
07: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from server1.nairahost.net ([75.126.213.58]:34430 helo=User)
11: 	by 17.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #2)
13: 	ID: [ID filtered]

Schon blamabel, wie sich hier ein deutsches Unternehmen von Mugu-Kriminellen tagelang am Nasenring nach Belieben durch die Manege führen läßt....

gecracktes Horde im Zusammenspiel mit dem Mugu-Provider in Israel:

header:

01: Received: from mail.freehost.com.ua (mail.freehost.com.ua [194.0.200.218])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 24 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [127.0.0.1] (port=59701 helo=localhost)
07: 	by mail.freehost.com.ua with esmtp (Exim 4.68 (FreeBSD))
08: 	(envelope-from <noreply [at] gmail.com>)
09: 	ID: [ID filtered]
10: Received: from 62.56.132.7.satcom-systems.net
11: 	(62.56.132.7.satcom-systems.net [62.56.132.7]) by mail.freehost.com.ua
12: 	(Horde MIME library) with HTTP; Mon, 22 Feb 2010 xx:xx:xx +0200

die Madrid-Konnektion zum x-ten Male:

header:

01: Received: from mx4.hotmail.com (237.red.175.225.212.user.ptvtelecom.com
02: [212.225.175.237])
03: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100

Muguphon: +34 672 509 598 ---> Vodafone España, S.a.u.

- kjz

Und auch hier:

header:

01: Received: from 70.45.68.68.client.static.strong12.reliablehosting.com
02: (EHLO mx4.hotmail.com) [68.68.45.70]
03:   by mx0.gmx.net (mx067) with SMTP; 22 Feb 2010 xx:xx:xx +0100

header:

01: Received: from 112.43.68.68.client.static.strong11.reliablehosting.com
02: (EHLO mx4.hotmail.com) [68.68.43.112]
03:   by mx0.gmx.net (mx080) with SMTP; 23 Feb 2010 xx:xx:xx +0100

(AOL)

header:

01: Received: from webmail.hodaka.com.tw (61-218-15-30.HINET-IP.hinet.net
02: [61.218.15.30])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Tue, 23 Feb 2010 xx:xx:xx +0100 (CET)
07: Received: from mail.hodaka.com.tw (localhost [127.0.0.1])
08: 	by webmail.hodaka.com.tw (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
09: 	Tue, 23 Feb 2010 xx:xx:xx +0800 (CST)
10: 	(envelope-from info [at] mevasbank.org.com.tw)

header:

01: Received: from ns1.webhostingpool.com (ns1.webhostingpool.com
02: [203.113.25.78])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 24 Feb 2010 xx:xx:xx +0100 (CET)
07: Received: from User (unknown [41.191.85.209])
08: 	by ns1.webhostingpool.com (Postfix) with ESMTP ID: [ID filtered]
09: 	Wed, 24 Feb 2010 xx:xx:xx +0700 (ICT)

IP: 41.191.85.209 ---> MICRO-NET_CYBER, BJ

- kjz

alle unsere 'Lieblinge':

Freenet, Teil 8:

header:

01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 25 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.23] (helo=13.mx.freenet.de)
07: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [66.90.109.42] (port=34641 helo=User)
11: 	by 13.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #2)
13: 	ID: [ID filtered]

IP: 66.90.109.42 ---> FDCservers.net

(Freenet)

gecracktes SquirrelMail:

header:

01: Received: from mail1a.ulab.edu.bd (unknown [116.68.200.35])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 25 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: (qmail 12834 invoked by UID: [UID filtered]
05: Cc: recipient list not shown: ;
06: Received: from 41.184.20.137
07:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
08:         by mail1a.ulab.edu.bd with HTTP;
09:         Tue, 23 Feb 2010 xx:xx:xx +0600 (BDT)

IP: 41.184.20.137 ---> ipNX NIGERIA LIMITED

Muguphon: +234-80-33067447 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from apparelnews.co.kr (unknown [221.143.46.124])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 25 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from apparelnews.co.kr (localhost [127.0.0.1])
07: 	by apparelnews.co.kr (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
08: 	for xxxxx; Thu, 25 Feb 2010 xx:xx:xx +0900
09: Received: (from nobody [at] localhost)
10: 	by apparelnews.co.kr (8.13.1/8.13.1/Submit) ID: [ID filtered]
11: 	Thu, 25 Feb 2010 xx:xx:xx +0900

header:

01: Received: from IMPaqm2.telefonica.net (impaqm2.telefonica.net [213.4.138.2])
02: 	by deliver.uni-koblenz.de (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 25 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from IMPmailhost4.adm.correo ([10.20.102.125])
05: 	by IMPaqm2.telefonica.net with bizsmtp
06: 	ID: [ID filtered]
07: Received: from User ([116.206.138.39])
08: 	by IMPmailhost4.adm.correo with BIZ IMP
09: 	ID: [ID filtered]

Muguphon: + (60) 142-385-704 ---> Maxis Mobile (Binariang)

header:

01: Received: from sinu.unisinu.edu.co (unknown [200.21.232.66])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 26 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: by sinu.unisinu.edu.co (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from 41.210.4.0 ([41.210.4.0]) by www.unisinu.edu.co (Horde MIME
07: 	library) with HTTP; Thu, 25 Feb 2010 xx:xx:xx -0500

IP: 41.210.4.0 ---> Ghana Telecom ADSL

header:

01: Received: from mail.nexcom.cn (unknown [218.241.81.77])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 26 Feb 2010 xx:xx:xx +0100 (CET)
04: Received: from User (unknown [41.138.177.225])
05: 	by mail.nexcom.cn (Postfix) with ESMTPA ID: [ID filtered]
06: 	Fri, 26 Feb 2010 xx:xx:xx +0800 (CST)

IP: 41.138.177.225 ---> Visafone Communications Limited, Nigeria

header:

01: Received: from mail7.delicook.com (HELO delicook.com) [211.116.225.82]
02:   by mx0.gmx.net (mx059) with SMTP; 26 Feb 2010 xx:xx:xx +0100
03: Received: from User (41.218.229.223)
04: 	MX_Record =
05: (alt1.gmail-smtp-in.l.google.com;alt3.gmail-smtp-in.l.google.com;)
06: 	by delicook.com (211.116.225.82) with [Nmail V3.6  20051111(S)]
07: 	for xxxxx from <poor [at] spamvictim.tld>;
08: 	Thu, 25 Feb 2010 xx:xx:xx +0900

header:

01: Received: from mail7.delicook.com (HELO delicook.com) [211.116.225.82]
02:   by mx0.gmx.net (mx099) with SMTP; 26 Feb 2010 xx:xx:xx +0100
03: Received: from User (41.218.229.223)
04: 	MX_Record =
05: (alt1.gmail-smtp-in.l.google.com;alt3.gmail-smtp-in.l.google.com;)
06: 	by delicook.com (211.116.225.82) with [Nmail V3.6  20051111(S)]
07: 	for xxxxx from <poor [at] spamvictim.tld>;
08: 	Thu, 25 Feb 2010 xx:xx:xx +0900

IP: 211.116.225.82 ---> vfbb229223.4u.com.gh

- kjz

In aller Kürze:

header:

01: Received: from server1.mycustomrewards.com (EHLO
02: mail.mycustomrewards.com) [72.51.34.247]
03:   by mx0.gmx.net (mx118) with SMTP; 27 Feb 2010 xx:xx:xx +0100
04: Received: from User ([64.207.13.178]) by mycustomrewards.com with
05: MailEnable ESMTP; Sat, 13 Feb 2010 xx:xx:xx -0600

IP: 64.207.13.178 ---> mail.compupros.com (soweit scheint es mit den 'COMPUter-PROfiS nicht her zu sein...)

Muguphon: +44 702 408 8705 ---> Magrathea Telecommunications Limited, UK

Mugufax: +44 207 785 9263 ---> Cable & Wireless (Energis), UK

header:

01: Received: from unknown (EHLO mail.geosoft.co.kr) [218.236.24.2]
02:   by mx0.gmx.net (mx024) with SMTP; 26 Feb 2010 xx:xx:xx +0100
03: Received: from User ([41.217.66.4])
04:         by mail.geosoft.co.kr (Merak 8.0.3) with ASMTP ID: [ID filtered]
05:         Sat, 27 Feb 2010 xx:xx:xx +0900

IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.

header:

01: Received: from ns1.conticonti.com.br (EHLO mail.conticonti.com.br)
02: [200.138.194.194]
03:   by mx0.gmx.net (mx110) with SMTP; 28 Feb 2010 xx:xx:xx +0100
04: Received: by mail.conticonti.com.br (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from User (www.zmmae.gov.tr [81.215.14.21])
07: 	by mail.conticonti.com.br (Postfix) with ESMTPA ID: [ID filtered]
08: 	Sat, 27 Feb 2010 xx:xx:xx -0200 (BRST)

Muguphon: +44 702 406 5890 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 702 409 8797 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 702 407 3956 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mail.ema-env.com (EHLO ema-env.com) [64.199.148.154]
02:   by mx0.gmx.net (mx113) with SMTP; 26 Feb 2010 xx:xx:xx +0100
03: Received: from User ([217.41.59.39]) by ema-env.com with Microsoft
04: SMTPSVC(6.0.3790.3959);
05: 	 Fri, 26 Feb 2010 xx:xx:xx -0600

die Madrid-Konnektion:

header:

01: Received: from 213.27.202.49.es.colt.net (EHLO
02: BUSINET-KDR7XLA.mydomain.com) [213.27.202.49]
03:   by mx0.gmx.net (mx079) with SMTP; 28 Feb 2010 xx:xx:xx +0100
04: Received: from User ([77.211.122.229]) by mydomain.com with MailEnable
05: ESMTP; Sat, 20 Feb 2010 xx:xx:xx +0100

IP: 77.211.122.229 ---> VODAFONE_SPAIN_NETWORK

Muguphon: +34 672 552 862 ---> Vodafone España, S.a.u.

Muguphon: +34 634 054 351 ---> Vodafone España, S.a.u.

Mugufax: +34 911 414 370 ---> Jazz Telecom, S.a.u.

header:

01: Received: from web57410.mail.re1.yahoo.com (web57410.mail.re1.yahoo.com
02: [66.196.100.61])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 28 Feb 2010 xx:xx:xx +0100 (CET)
05: Received: (qmail 94548 invoked by UID: [UID filtered]
06: Received: from [41.222.192.88] by web57410.mail.re1.yahoo.com via HTTP;
07: Sun, 28 Feb 2010 xx:xx:xx PST

IP: 41.222.192.88 ---> ISOCEL SARL, BJ

Freenet, Teil 8:

header:

01: Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 28 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.11] (helo=1.mx.freenet.de)
07: 	by mout1.freenet.de with esmtpa (ID: [ID filtered]
08: (port 25) (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [41.211.226.198] (port=1288 helo=User)
11: 	by 1.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (port 587) (Exim 4.72 #2)
13: 	ID: [ID filtered]

IP: 41.211.226.198 ---> Direct-on-PC Limited, Nigeria

(Freenet)

- kjz

Es hört nie auf:

Freenet ist Mugus Liebling, Teil 9:

header:

01: Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon,  1 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.13] (helo=3.mx.freenet.de)
07: 	by mout2.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [82.128.36.73] (port=3958 helo=User)
11: 	by 3.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (Exim 4.72 #2)
13: 	ID: [ID filtered]

IP: 82.128.36.73 ---> Multilinks Telecommunications Limited, Nigeria

(Freenet)

Muguphon: +234-7068019880 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from mail.scottissue.com (EHLO STSRV01.scottissue.com)
02: [216.68.96.82]
03:   by mx0.gmx.net (mx085) with SMTP; 01 Mar 2010 xx:xx:xx +0100
04: Received: from User ([41.115.221.190]) by STSRV01.scottissue.com with
05: Microsoft SMTPSVC(6.0.3790.1830);
06: 	 Mon, 1 Mar 2010 xx:xx:xx -0500

IP: 41.115.221.190 ---> MTN Network Solutions (Pty) Ltd., ZA

header:

01: Received: from mailserver.media.gov.kw (mailserver.media.gov.kw
02: [168.187.134.79])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from localhost (localhost.localdomain [127.0.0.1])
06: 	by mailserver.media.gov.kw (Postfix) with ESMTP ID: [ID filtered]
07: 	Sat, 27 Feb 2010 xx:xx:xx +0300 (AST)
08: X-Virus-Scanned: amavisd-new at media.gov.kw
09: Received: from mailserver.media.gov.kw ([127.0.0.1])
10: 	by localhost (mailserver.media.gov.kw [127.0.0.1]) (amavisd-new, port
11: 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from User (unknown [195.216.245.10])
14: 	by mailserver.media.gov.kw (Postfix) with ESMTPA ID: [ID filtered]
15: 	Sat, 27 Feb 2010 xx:xx:xx +0300 (AST)

IP: 195.216.245.10 ---> Peace_Global, Lagos, NG

header:

01: Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.2])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from filter.sfr.fr (localhost [127.0.0.1])
05: 	by msfrf2108.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)
07: Received: from User (unknown [116.206.143.193])
08: 	by msfrf2108.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)

IP: 116.206.143.193 ---> iZZinet Sdn. Bhd., MY

header:

01: Received: from ateks.co.yu (208.95.252.195.static.beotel.net
02: [195.252.95.208])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed,  3 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([193.77.184.234]) by ateks.co.yu with Microsoft
06: SMTPSVC(5.0.2195.6713);
07: 	 Wed, 3 Mar 2010 xx:xx:xx +0100

IP: 193.77.184.234 ---> BSN-77-184-234.static.dsl.siol.net

header:

01: Received: from 191.45.68.68.client.static.strong12.reliablehosting.com
02: (EHLO mx4.hotmail.com) [68.68.45.191]
03:   by mx0.gmx.net (mx098) with SMTP; 03 Mar 2010 xx:xx:xx +0100

header:

01: Received: from smtp-relay.pixius.net (smtp-res.pixius.net [64.39.208.235])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed,  3 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from User [41.217.65.4] by res-02-proxy.pixius.com (Axigen)
07:  with ESMTPA ID: [ID filtered]

IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-808-702-9431 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from mail06.syd.optusnet.com.au (mail06.syd.optusnet.com.au
02: [211.29.132.187])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed,  3 Mar 2010 xx:xx:xx +0100 (CET)
07: Received: from User ([59.154.190.46])
08: 	(authenticated sender ebrincat)
09: 	by mail06.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
10: 	Thu, 4 Mar 2010 xx:xx:xx +1100

- kjz

neue Folge:

Freenet, Teil 10:

header:

01: Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx Sun, 28 Feb 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.14] (helo=4.mx.freenet.de)
07: 	by mout2.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [82.128.84.215] (port=1226 helo=User)
11: 	by 4.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #2)
13: 	ID: [ID filtered]

IP: 82.128.84.215 ---> Multilinks Telecommunications Limited, Nigeria

(Freenet)

header:

01: Received: from relay.mail.interoute.net (EHLO relay1.mail.interoute.net)
02: [154.15.246.50]
03:   by mx0.gmx.net (mx080) with SMTP; 01 Mar 2010 xx:xx:xx +0100
04: Received: from [154.15.201.166] (helo=outbound1.psi.neteu.net)
05: 	by relay1.psi.neteu.net with esmtp (Exim 4.65)
06: 	(envelope-from <robertwrightt [at] gmail.com>)
07: 	ID: [ID filtered]
08: Received: from 41.30.85.35 (EHLO User) ([41.30.85.35])
09: 	by outbound1.psi.neteu.net (MOS 3.8.2-GA FastPath queued)
10: 	with ESMTP ID: [ID filtered]
11: 	Mon, 01 Mar 2010 xx:xx:xx +0100 (CET)

IP: 41.30.85.35 ---> Vodacom_UMTS_Gauteng_INTERNET_APN, ZA

gecrackter Uni-Account:

header:

01: Received: from smtp.scut.edu.cn (EHLO smtp.scut.edu.cn) [202.38.193.34]
02:   by mx0.gmx.net (mx002) with SMTP; 02 Mar 2010 xx:xx:xx +0100
03: Received: from User (unknown [202.157.184.60])
04: 	by smtp.scut.edu.cn (Postfix) with ESMTP ID: [ID filtered]
05: 	Tue,  2 Mar 2010 xx:xx:xx +0800 (CST)

Muguphon: +27710780349 ---> MTN, ZA

Mugufax: +27865711287 ---> premium rate number, South Africa

header:

01: Received: from no-ptr.midphase.com (EHLO server33.gamesmail1.com)
02: [98.158.180.39]
03:   by mx0.gmx.net (mx063) with SMTP; 02 Mar 2010 xx:xx:xx +0100
04: Received: from 95-168-182-116.internetserviceteam.com ([95.168.182.116]
05: helo=007-PC)
06: 	by server33.gamesmail1.com with esmtpa (Exim 4.69)
07: 	(envelope-from <auto [at] games.com>)
08: 	ID: [ID filtered]

header:

01: Received: from mx.balloon.it (EHLO dns.blunauta.it) [82.112.199.214]
02:   by mx0.gmx.net (mx072) with SMTP; 02 Mar 2010 xx:xx:xx +0100
03: Received: from User ([81.215.14.21]) by dns.blunauta.it with Microsoft
04: SMTPSVC(6.0.3790.3959);
05: 	 Tue, 2 Mar 2010 xx:xx:xx +0100

Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from smtp21.services.sfr.fr (smtp21.services.sfr.fr [93.17.128.2])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from filter.sfr.fr (localhost [127.0.0.1])
05: 	by msfrf2108.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)
07: Received: from User (unknown [116.206.143.193])
08: 	by msfrf2108.sfr.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)

IP: 116.206.143.193 ---> iZZinet Sdn. Bhd., MY

Freenet, Teil 11:

header:

01: Received: from mout2.freenet.de (mout2.freenet.de [195.4.92.92])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue,  2 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.14] (helo=4.mx.freenet.de)
07: 	by mout2.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from server1.nairahost.net ([75.126.213.58]:36790 helo=User)
11: 	by 4.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #2)
13: 	ID: [ID filtered]

(Freenet)

Dauer-Mugu aus der Madrid-Konnektion:

header:

01: Received: from mx4.hotmail.com (237.red.175.225.212.user.ptvtelecom.com
02: [212.225.175.237])
03: 	by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100

Muguphon: +34 672 509 59 ---> Vodafone España, S.a.u.

header:

01: Received: from mail.ssfeng.com (unknown [61.134.60.149])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  3 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: (qmail 7255 invoked from network); 2 Mar 2010 xx:xx:xx -0000
05: Received: from unknown (HELO User) (hello [at] 82.128.39.224)
06:   by mail.ssfeng.com with SMTP; 2 Mar 2010 xx:xx:xx -0000

IP: 82.128.39.224 ---> Multilinks Telecommunications Limited, Nigeria

- kjz

die große Mugu-Parade:

header:
01: Received: from mail.cyberannex.com (mail.cyberannex.net [24.249.10.20])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu,  4 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from vc-41-17-98-235.umts.vodacom.co.za [41.17.98.235] by
05: mail.ocbis.com with SMTP;
06:    Wed, 3 Mar 2010 xx:xx:xx -0800
IP: 41.17.98.235 ---> Vodacom_UMTS_Pretoria1, ZA

Freenet, Teil 11:

header:
01: Received: from mout5.freenet.de (mout5.freenet.de [195.4.92.95])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu,  4 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.27] (helo=17.mx.freenet.de)
07: 	by mout5.freenet.de with esmtpa (ID: [ID filtered]
08: 25) (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from 96-32-4-201.dhcp.nwtn.ct.charter.com ([96.32.4.201]:3905
11: helo=User)
12: 	by 17.mx.freenet.de with esmtpa (ID: [ID filtered]
13: 25) (Exim 4.72 #2)
14: 	ID: [ID filtered]
(Freenet)

gecracktes SquirrelMail:

header:
01: Received: from mail.coperfil.com.br (mail.coperfil.com.br [189.109.43.18])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu,  4 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from 189.109.43.18 (localhost.localdomain [127.0.0.1])
05: 	by mail.coperfil.com.br (8.13.8/8.13.1) with SMTP ID: [ID filtered]
06: 	Thu, 4 Mar 2010 xx:xx:xx -0300
07: Received: from 41.138.179.173
08:         (SquirrelMail authenticated user administrativo)
09:         by 189.109.43.18 with HTTP;
10:         Thu, 4 Mar 2010 xx:xx:xx -0300 (BRT)
IP: 41.138.179.173 ---> Visafone Communications Limited, Nigeria

Muguphon: +44-7011134219 ---> PNC Telecom Services Limited, UK

header:
01: Received: from gondor.tr.net (EHLO gondor.tr.net) [195.155.1.40]
02:   by mx0.gmx.net (mx019) with SMTP; 05 Mar 2010 xx:xx:xx +0100
03: Received: from User ([41.217.65.4])
04:  by gondor.tr.net (Sun Java System Messaging Server 6.2-5.04 (built Jan 24
05:  2006)) with ESMTPA ID: [ID filtered]
06:  04 Mar 2010 xx:xx:xx +0200 (EET)
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-809-128-8840 ---> EMTS, Nigeria/etisalat.ae

die Madrid-Konnektion:

header:
01: Received: from relay.aragon.es (relay.aragon.es [195.55.229.47])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Fri,  5 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from midcorreo2.dga.es (midcorreo2.dga.es [172.27.12.76])
07: 	by relay.aragon.es (8.13.8/8.13.8/Debian-3) with ESMTP ID: [ID filtered]
08: 	for xxxxx; Fri, 5 Mar 2010 xx:xx:xx +0100
nochmal die Madrid-Konnetion, über gecrackten Uni-Account:

header:
01: Received: from mail.lism.catholic.edu.au (EHLO lism.catholic.edu.au)
02: [203.52.225.105]
03:   by mx0.gmx.net (mx116) with SMTP; 08 Mar 2010 xx:xx:xx +0100
04: Received: from User jhodson [213.37.50.68]
05: 	by lism.catholic.edu.au with NetMail SMTP Agent $Revision: 12942 $ on
06: Linux;
07: 	Mon, 08 Mar 2010 xx:xx:xx +1100
IP: 213.37.50.68 ---> 213.37.50.68.static.user.ono.com, ES

Und eine etwas andere Masche, deshalb auch der Text:

header:
01: Received: from bcc-dc1.BCC.local (mail.bouchillon-crossanlaw.com
02: [66.208.230.61])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Mon,  8 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([82.128.19.21]) by bcc-dc1.BCC.local with Microsoft
06: SMTPSVC(6.0.3790.1830);
07: 	 Sun, 7 Mar 2010 xx:xx:xx -0500
IP: 82.128.19.21 ---> ml82.128.19.21.multilinks.com, Nigeria

Zitat:

MAKE MONEY BY SIMPLY DRIVING YOUR CAR
ADVERTISER WANTED FOR HOLMES&SELLERS
EARN NO LESS THAN $200 WEEKLY TO ADVERTISE ON YOUR CAR.
It is Very Easy and Simple
No Application fees required

How it works Here's the basic premise of the "paid to drive" concept:
HOLMES&Sellers seeks people -- regular citizens, not professional
drivers -- to go about their normal routine as they usually do, only
with a big advert for "HOLMES&SELLERS" plastered on your car.The ads are
typically vinyl decals, also known as "auto wraps," that almost seem to
be painted on the vehicle, and which will cover any portion of your
car's exterior surface.

What does the company get out of this type of ad strategy? Lots of
exposure and awareness.The auto wraps tend to be colorful and
eye-catching and attract lots of attention. Plus, it's a form of
advertising with a captive audience,meaning people who are stuck in
traffic and can't avoid seeing the wrapped car alongside them. This
program will last for 3 months and the minimum period you can
participate is 1 month.

You will be compensated with a $200 per Week,which is essentially a
"rental" payment for letting our company use the space.HOLMES&SELLERS
shall provide experts that would handle the advert placing on your
car.You will receive an up front payment of $400 inform of check for
accepting to carry this advert on your car and other weekly payments
will also come in the form of checks and delivered at your address weekly.

What you need to do is to contact the email below

The following information below will be needed
Full Name:
Age:
Occupation:
Make of car/ year:
Address:
city:
State:
Zip code:
Phone Number(s) mobile/home :
Email Address:

We shall be contacting you as soon as we receive these information,
HOLMES&SELLERS looks forward to working with you.

micheal

Und da der Mugu so saublöd ist, um seine eigene Email-Adresse richtig zu schreiben, hier noch einmal richtig:

- kjz

Zitat:

Zitat von kjz1

IP: 213.37.50.68 ---> 213.37.50.68.static.user.ono.com, ES

Putzi hat man wohl den Account geknackt, deshalb neuer Anlauf:

header:

01: Received: from mail.lism.catholic.edu.au (EHLO lism.catholic.edu.au)
02: [203.52.225.105]
03:   by mx0.gmx.net (mx073) with SMTP; 08 Mar 2010 xx:xx:xx +0100
04: Received: from User jhodson [213.37.50.68]
05: 	by lism.catholic.edu.au with NetMail SMTP Agent $Revision: 12942 $ on
06: Linux;
07: 	Tue, 09 Mar 2010 xx:xx:xx +1100

IP: 213.37.50.68 ---> 213.37.50.68.static.user.ono.com

und auch im weiteren noch ein 'alter Bekannter':

header:

01: Received: from ns1.conticonti.com.br (EHLO mail.conticonti.com.br)
02: [200.138.194.194]
03:   by mx0.gmx.net (mx010) with SMTP; 08 Mar 2010 xx:xx:xx +0100
04: Received: by mail.conticonti.com.br (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from User (unknown [41.217.66.4])
07: 	by mail.conticonti.com.br (Postfix) with ESMTPA ID: [ID filtered]
08: 	Mon,  8 Mar 2010 xx:xx:xx -0300 (BRT)

IP: 41.217.66.4 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +44 702 406 5890 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 702 409 8797 ---> Magrathea Telecommunications Limited

Man sollte sich auch mal die Webseite von Magrathea anschauen:

Professioneller geht's kaum noch..... :D

header:

01: Received: from SERVEX1.lucaprintgroup.local
02: (host98-112-static.223-217-b.business.telecomitalia.it [217.223.112.98])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat,  6 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([41.138.188.211]) by SERVEX1.lucaprintgroup.local
06: with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Fri, 5 Mar 2010 xx:xx:xx +0100

IP: 41.138.188.211 ---> Visafone Communications Limited, Nigeria

Freenet, Teil 12:

header:

01: Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sat,  6 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.14] (helo=4.mx.freenet.de)
07: 	by mout6.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [41.211.238.254] (port=4913 helo=User)
11: 	by 4.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #2)
13: 	ID: [ID filtered]

IP: 41.211.238.254 ---> Direct-on-PC Limited, Nigeria

(Freenet)

header:

01: Received: from gate.bgemb.com.pl (EHLO mail.bgemb.com.pl) [80.55.28.218]
02:   by mx0.gmx.net (mx079) with SMTP; 06 Mar 2010 xx:xx:xx +0100
03: Received: from ml82.128.23.78.multilinks.com [82.128.23.78] by
04: mail.bgemb.com.pl with SMTP;
05:    Sat, 6 Mar 2010 xx:xx:xx +0100

IP: 82.128.23.78 ---> Multilinks, Nigeria

header:

01: Received: from vsmtp2.tin.it (vsmtp2.tin.it [212.216.176.222])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  6 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User (41.26.148.202) by vsmtp2.tin.it (8.0.022)
05: (authenticated as rosekatemadsen10 [at] virgilio.it)
06:         ID: [ID filtered]

IP: 41.26.148.202 ---> vc-41-26-148-202.umts.vodacom.co.za

- kjz

Zitat:
Zitat von kjz1
header:
01: Received: from gate.bgemb.com.pl (EHLO mail.bgemb.com.pl) [80.55.28.218]
02:   by mx0.gmx.net (mx079) with SMTP; 06 Mar 2010 xx:xx:xx +0100
03: Received: from ml82.128.23.78.multilinks.com [82.128.23.78] by
04: mail.bgemb.com.pl with SMTP;
05:    Sat, 6 Mar 2010 xx:xx:xx +0100
IP: 82.128.23.78 ---> Multilinks, Nigeria
Kannst ja mal Google wegen ^whois:united-nationspaymentcenter.org treten.

09.03.2010, 17:23
kjz1

Zitat:

Zitat von Fidul

Kannst ja mal Google wegen ^whois:united-nationspaymentcenter.org treten.

Das ist schon im Standardpreis mit einbegriffen. :D Leider reagiert Google oft nur sehr lahm, wenn überhaupt.

- kjz

Mugu-Fortsetzung:

header:

01: Received: from relay.mail.sohu.net (EHLO relay.mail.sohu.net)
02: [61.135.132.71]
03:   by mx0.gmx.net (mx054) with SMTP; 08 Mar 2010 xx:xx:xx 퍝
04: Received: from User (unknown [74.7.210.92])
05: 	by relay.mail.sohu.net (Postfix) with ESMTPA ID: [ID filtered]
06: 	Tue,  9 Mar 2010 xx:xx:xx 폍 (CST)

header:

01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue,  9 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 24184 invoked by UID: [UID filtered]
07: Received: by simscan 1.3.1 ppID: [ID filtered]
08:          scanners: attach: 1.3.1 clamav: 0.92.1
09: /m:
10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)
11:   by smtp4.digitalpath.net with ESMTPA; 9 Mar 2010 xx:xx:xx -0000

header:

01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 21414 invoked by UID: [UID filtered]
07: Received: by simscan 1.3.1 ppID: [ID filtered]
08:          scanners: attach: 1.3.1 clamav: 0.92.1
09: /m:
10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)
11:   by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 xx:xx:xx -0000

IP: 196.22.137.194 ---> Hetzner, ZA

header:

01: Received: from mout.perfora.net (mout.perfora.net [74.208.4.194])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  9 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from ntxpwus92 (ntxpwus92.lxa.perfora.net [172.23.131.70])
05: 	by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis)
06: 	ID: [ID filtered]

Freenet, Teil 13. Anscheinend wird Freenet zur Zeit in Mugu-Foren als heisser Kandidat für den merkbefreitesten Provider Deutschlands gefeiert, den man nach belieben im Nasenring durch die Manege führen kann. Und Freenet wird wohl auch erst aus dem Tiefschlaf aufwachen, wenn deren Mailserver mal auf den richtigen großen Blacklists gelandet ist und kein Freenet-Kunde mehr seine Mails losbekommt. Dann ist das Geschreie und Geheule wahrscheinlich mal wieder groß....

header:

01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue,  9 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.14] (helo=4.mx.freenet.de)
07: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from adsl10174.4u.com.gh ([41.210.10.174]:60709 helo=User)
11: 	by 4.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (Exim 4.72 #2)
13: 	ID: [ID filtered]

IP: 41.210.10.174 ---> adsl10174.4u.com.gh

(Freenet)

header:

01: Received: from smtpout5.poczta.onet.pl (smtpout5.poczta.onet.pl
02: [213.180.147.165])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from [65.39.179.34] ([65.39.179.34]:1082 "EHLO
06: 	my530-a"
07: 	rhost-flags-FAIL-FAIL-OK-FAIL) by ps1.m5r2.onet with ESMTPA
08: 	ID: [ID filtered]
09: 	Wed, 10 Mar 2010 xx:xx:xx +0100

Freenet, Teil 14:

header:

01: Received: from mout0.freenet.de (mout0.freenet.de [195.4.92.90])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.26] (helo=16.mx.freenet.de)
07: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [41.211.238.95] (port=56601 helo=User)
11: 	by 16.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #2)
13: 	ID: [ID filtered]

IP: 41.211.238.95 ---> Direct-on-PC Limited, Nigeria

(Freenet)

Muguphon: +44-702-401-8863 ---> Magrathea Telecommunications Limited, UK

- kjz

wieder mal Hetzner, ZA:

header:

01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 21821 invoked by UID: [UID filtered]
07: Received: by simscan 1.3.1 ppID: [ID filtered]
08:          scanners: attach: 1.3.1 clamav: 0.92.1
09: /m:
10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)
11:   by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 xx:xx:xx -0000

IP: 196.22.137.194 ---> Hetz-Accessweb-Root, ZA

- kjz

und noch'en paar....

header:

01: Received: from ricovideo.ru (77.221.138.234.addr.datapoint.ru
02: [77.221.138.234])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 14 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from localhost (localhost [127.0.0.1])
06: 	by ricovideo.ru (Postfix) with ESMTP ID: [ID filtered]
07: 	Fri, 12 Mar 2010 xx:xx:xx +0300 (MSK)
08: Received: from ricovideo.ru ([127.0.0.1])
09: 	by localhost (ricovideo.ru [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (unknown [82.128.82.63])
12: 	(Authenticated sender: test)
13: 	by ricovideo.ru (Postfix) with ESMTPA ID: [ID filtered]
14: 	Fri, 12 Mar 2010 xx:xx:xx +0300 (MSK)

IP: 82.128.82.63 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +234-7095-236-452 ---> Multilinks Telecommunications Ltd., Nigeria

header:

01: Received: from eyou.net (mails.ccnu.edu.cn [202.114.32.23])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 14 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: (eyou anti_spam gateway 3.0); Sun, 14 Mar 2010 xx:xx:xx +0800
05: Received: from 41.245.37.71 by 202.114.32.23 with SMTP; Sun, 14 Mar 2010
06: xx:xx:xx +0800

IP: 41.245.37.71 ---> dsl-245-37-71.telkomadsl.co.za/Telkom SA Limited

hier ist auch der User der Russki-Kiste 'nett':

header:

01: Received: (qmail invoked by alias); 14 Mar 2010 xx:xx:xx -0000
02: Received: from 85-159-0-18-dynamic.retail.datagroup.ua (EHLO adt.com.ua)
03: [85.159.0.18]
04:   by mx0.gmx.net (mx091) with SMTP; 14 Mar 2010 xx:xx:xx +0100
05: Received: from User ([41.217.65.3])
06: 	(authenticated user spam [at] adt.com.ua)
07: 	by adt.com.ua (Kerio MailServer 6.4.0);
08: 	Mon, 1 Mar 2010 xx:xx:xx +0300

IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +44 703 189 2980 ---> Magrathea Telecommunications Limited, UK

- kjz

Da geht so richtig die Mugu-Post ab:

gecracktes SquirrelMail:

header:

01: Received: from sites.chicagopicks.com (server22.integrityserver.net
02: [67.19.2.146])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 10 Mar 2010 xx:xx:xx +0100 (CET)
07: Received: from localhost ([127.0.0.1] helo=webmail.studioridge.com)
08: 	by sites.chicagopicks.com with esmtpa (Exim 4.69)
09: 	(envelope-from <douglasezit86 [at] yahoo.com>)
10: 	ID: [ID filtered]
11: Received: from 41.124.209.55 ([41.124.209.55]) (proxying for 41.124.209.55)
12:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
13:         by webmail.studioridge.com with HTTP;
14:         Mon, 8 Mar 2010 xx:xx:xx -0600

IP: 41.124.209.55 ---> MTN Network Solutions, ZA

header:

01: Received: from mail.apex.com.my (unknown [210.19.31.175])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.apex.com.my (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 10 Mar 2010 xx:xx:xx +0800 (MYT)
07: Received: from mail.apex.com.my ([127.0.0.1])
08:  by localhost (mail.apex.com.my [127.0.0.1]) (amavisd-new, port 10024)
09:  with ESMTP ID: [ID filtered]
10: Received: from User (unknown [82.128.85.169])
11: 	by mail.apex.com.my (Postfix) with ESMTP ID: [ID filtered]
12: 	Wed, 10 Mar 2010 xx:xx:xx +0800 (MYT)

IP: 82.128.85.169 ---> Multilinks Telecommunications Limited, Nigeria

Hetzner, ZA:

header:

01: Received: from smtp4.digitalpath.net (smtp4.digitalpath.net [65.164.104.65])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: (qmail 21414 invoked by UID: [UID filtered]
07: Received: by simscan 1.3.1 ppID: [ID filtered]
08:          scanners: attach: 1.3.1 clamav: 0.92.1
09: /m:
10: Received: from unknown (HELO User) (summer [at] 196.22.137.194)
11:   by smtp4.digitalpath.net with ESMTPA; 10 Mar 2010 xx:xx:xx -0000

IP: 196.22.137.194 ---> Hetz-Accessweb-Root, ZA

gecracktes SquirrelMail:

header:

01: Received: from mail.health.go.ke (unknown [62.24.109.214])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from webmail.health.go.ke (localhost [127.0.0.1])
05: 	by mail.health.go.ke (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu, 11 Mar 2010 xx:xx:xx +0300 (EAT)
07: Received: from 41.206.15.2
08:         (SquirrelMail authenticated user dcdc)
09:         by webmail.health.go.ke with HTTP;
10:         Wed, 10 Mar 2010 xx:xx:xx -0000

header:

01: Received: from mail.health.go.ke (unknown [62.24.109.214])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from webmail.health.go.ke (localhost [127.0.0.1])
05: 	by mail.health.go.ke (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu, 11 Mar 2010 xx:xx:xx +0300 (EAT)
07: Received: from 41.206.15.1
08:         (SquirrelMail authenticated user dcdc)
09:         by webmail.health.go.ke with HTTP;
10:         Wed, 10 Mar 2010 xx:xx:xx -0000

IP: 41.206.15.2 ---> MTN Nigeria

Muguphon: +44-701-113-3045 ---> PNC Telecom Services Limited, UK

Mugufax: +44-707-505-5654 ---> Your Communications Ltd, UK

header:

01: Received: from mx4.hotmail.com
02: (51.46.68.68.unassigned.reliablehosting.com [68.68.46.51])
03: 	by mx.kundenserver.de (node=mxbap4) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0100

header:

01: Received: from imr-da05.mx.aol.com (imr-da05.mx.aol.com [205.188.105.147])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from mtaout-dc01.r1001.mx.aol.com
05: (mtaout-dc01.r1001.mx.aol.com [205.188.58.65])
06: 	by imr-da05.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Thu, 11 Mar 2010 xx:xx:xx -0500
08: Message-ID: [ID filtered]
09: Received: from User (unknown [41.217.65.3])
10: 	by mtaout-dc01.r1001.mx.aol.com (WebSuites/MUA Thirdparty client
11: Interface) with ESMTPA ID: [ID filtered]
12: 	Thu, 11 Mar 2010 xx:xx:xx -0500 (EST)

IP: 41.217.65.3 ---> ZOOM Mobile Nigeria Ltd.

Freenet, Teil 14:

header:

01: Received: from mout1.freenet.de (mout1.freenet.de [195.4.92.91])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.14] (helo=4.mx.freenet.de)
07: 	by mout1.freenet.de with esmtpa (ID: [ID filtered]
08: 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [82.128.81.42] (port=1772 helo=User)
11: 	by 4.mx.freenet.de with esmtpa (ID: [ID filtered]
12: 4.72 #2)
13: 	ID: [ID filtered]

IP: 82.128.81.42 ---> Multilinks Telecommunications Limited, Nigeria

(Freenet)

die Amsterdam-Madrid-Konnektion:

header:

01: Received: from cpsmtpb-ews05.kpnxchange.com
02: (cpsmtpb-ews05.kpnxchange.com [213.75.39.8])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 11 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from cpbrm-ews13.kpnxchange.com ([10.94.84.144]) by
06: cpsmtpb-ews05.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Thu, 11 Mar 2010 xx:xx:xx +0100
08: Received: from CPSMTPM-EML03.kpnxchange.com ([213.75.39.73]) by
09: cpbrm-ews13.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
10: 	 Thu, 11 Mar 2010 xx:xx:xx +0100
11: Received: from localhost ([10.94.77.200]) by
12: CPSMTPM-EML03.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
13: 	 Thu, 11 Mar 2010 xx:xx:xx +0100

Muguphon: +34-672-514-048 ---> Vodafone España, S.a.u.

header:

01: Received: from smtp21.orange.fr (smtp21.orange.fr [80.12.242.48])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2114.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2114.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)
10: Received: from User (unknown [62.161.78.142])
11: 	by mwinf2114.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Fri, 12 Mar 2010 xx:xx:xx +0100 (CET)

Muguphon: +234-807-0627-501 ---> Globacom Ltd., Nigeria

header:

01: Received: from mail1.legatum.com (EHLO mail.legatum.com) [87.83.216.42]
02:   by mx0.gmx.net (mx046) with SMTP; 12 Mar 2010 xx:xx:xx +0100
03: Received: from unknown (HELO MERLIN.legatum.org) ([192.168.100.114])
04:   by mail.legatum.com with ESMTP; 12 Mar 2010 xx:xx:xx +0000
05: Received: from thoth.legatum.org ([172.25.25.13]) by MERLIN.legatum.org
06: with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Fri, 12 Mar 2010 xx:xx:xx +0000
08: Received: from sneferu.legatum.org ([172.25.25.16]) by thoth.legatum.org
09: with Microsoft SMTPSVC(6.0.3790.3959);
10: 	 Fri, 12 Mar 2010 xx:xx:xx +0400
11: Received: from User ([119.51.93.162]) by sneferu.legatum.org with
12: Microsoft SMTPSVC(6.0.3790.3959);
13: 	 Fri, 12 Mar 2010 xx:xx:xx +0400

IP: 119.51.93.162 ---> China Unicom Jilin

- kjz

Das neueste aus Afrika:

header:

01: Received: from petrest.com.au (petres.lnk.telstra.net [203.45.31.131])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from nospam.petrest.local ([192.168.1.10]) by petrest.com.au
05: with Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Tue, 16 Mar 2010 xx:xx:xx +1100
07: Received: from User ([82.128.85.216] helo=User) with IPv4:25 by
08: 	nospam.petrest.local; 16 Mar 2010 xx:xx:xx +1100

IP: 82.128.85.216 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from mail1.hcmute.edu.vn (EHLO mail1.hcmute.edu.vn)
02: [203.113.147.179]
03:   by mx0.gmx.net (mx002) with SMTP; 17 Mar 2010 xx:xx:xx +0100
04: Received: from User (vc-41-29-79-102.umts.vodacom.co.za [41.29.79.102])
05: 	(authenticated bits=0)
06: 	by mail1.hcmute.edu.vn (8.14.2/8.14.2) with ESMTP ID: [ID filtered]
07: 	Wed, 17 Mar 2010 xx:xx:xx +0700

IP: 41.29.79.102 ---> Vodacom_UMTS_Gauteng

Muguphon: +27-834-515-403 ---> MTN, ZA

- kjz

als neue Kandidaten melden sich:

über gecracktes SquirrelMail:

header:

01: Received: from mingob.gob.pa (unknown [200.46.243.242])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 15 Mar 2010 xx:xx:xx +0100 (CET)

Muguphon: +447035946006 ---> Open Telecom International Ltd., UK

header:

01: Received: from mail.craven-services.com (EHLO craven-services.co.uk)
02: [217.37.223.30]
03:   by mx0.gmx.net (mx004) with SMTP; 15 Mar 2010 xx:xx:xx +0100
04: Received: from User ([81.215.14.21]) by craven-services.co.uk with
05: Microsoft SMTPSVC(6.0.3790.1830);
06: 	 Sun, 14 Mar 2010 xx:xx:xx +0000

IP: 81.215.14.21 ---> www.zmmae.gov.tr

Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.

die Amsterdam-Konnektion:

header:

01: Received: from psmtp1.dnsg.net (psmtp1.dnsg.net [193.168.128.41])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: (qmail 4658 invoked from network); 15 Mar 2010 xx:xx:xx +0100
05: Received: from ip121-196-210-87.adsl2.static.versatel.nl (HELO User)
06: (morgenbrodt [at] 87.210.196.121)
07:   by psmtp1.dnsg.net with SMTP; 15 Mar 2010 xx:xx:xx +0100

Muguphon: +31-647-226-334 ---> Telfort B.V., NL/Tiscali

gecrackter Uni-Account:

header:

01: Received: from mx1.umbc.edu (mx1.umbc.edu [130.85.25.76])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from smtp.umbc.edu (localhost [127.0.0.1])
07: 	by umbc.edu (mx1.umbc.edu) with ESMTP ID: [ID filtered]
08: 	Tue, 16 Mar 2010 xx:xx:xx -0400 (EDT)
09: Received: from User (linux3.gl.umbc.edu [130.85.24.92])
10: 	by smtp.umbc.edu (mx1-relay.umbc.edu) with SMTP ID: [ID filtered]
11: 	Tue, 16 Mar 2010 xx:xx:xx -0400 (EDT)

header:

01: Received: from ZixVPM03.firsthealth.com (zixvpm03.firsthealth.com
02: [12.10.217.76])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Tue, 16 Mar 2010 xx:xx:xx +0100 (CET)
07: Received: from ZixVPM03.firsthealth.com (ZixVPM [127.0.0.1])
08: 	by Outbound.firsthealth.com (Proprietary) with ESMTP ID: [ID filtered]
09: 	for xxxxx; Tue, 16 Mar 2010 xx:xx:xx -0700 (MST)
10: Received: from AZPH-SRV-MA07.cvty.com (unknown [10.40.249.134])
11: 	by ZixVPM03.firsthealth.com (Proprietary) with ESMTP ID: [ID filtered]
12: 	Tue, 16 Mar 2010 xx:xx:xx -0700 (MST)
13: Received: from AZPH-SRV-MAIL03.cvty.com ([10.40.177.36]) by
14: AZPH-SRV-MA07.cvty.com with Microsoft SMTPSVC(6.0.3790.3959);
15: 	 Tue, 16 Mar 2010 xx:xx:xx -0700

Muguphon: +(234)808 388 0641 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from 61-25-200-184.rev.home.ne.jp (EHLO ma.ctk23.ne.jp)
02: [61.25.200.184]
03:   by mx0.gmx.net (mx084) with SMTP; 17 Mar 2010 xx:xx:xx +0100
04: Received: from User (biuro-masq.itv.com.pl [80.55.19.246])
05: 	by ma.ctk23.ne.jp (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 17 Mar 2010 xx:xx:xx +0900 (JST)

header:

01: Received: from 61-25-200-184.rev.home.ne.jp (EHLO ma.ctk23.ne.jp)
02: [61.25.200.184]
03:   by mx0.gmx.net (mx084) with SMTP; 17 Mar 2010 xx:xx:xx +0100
04: Received: from User (biuro-masq.itv.com.pl [80.55.19.246])
05: 	by ma.ctk23.ne.jp (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 17 Mar 2010 xx:xx:xx +0900 (JST)

Muguphon: +447031945911 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from cpsmtpb-ews02.kpnxchange.com
02: (cpsmtpb-ews02.kpnxchange.com [213.75.39.5])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from cpbrm-ews10.kpnxchange.com ([10.94.84.141]) by
06: cpsmtpb-ews02.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Wed, 17 Mar 2010 xx:xx:xx +0100
08: Received: from CPSMTPM-EML07.kpnxchange.com ([213.75.39.77]) by
09: cpbrm-ews10.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
10: 	 Wed, 17 Mar 2010 xx:xx:xx +0100
11: Received: from localhost ([10.94.77.199]) by
12: CPSMTPM-EML07.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
13: 	 Wed, 17 Mar 2010 xx:xx:xx +0100

header:

01: Received: from 212.183.204.45.static.user.ono.com (EHLO
02: mail.coaatleon.es) [212.183.204.45]
03:   by mx0.gmx.net (mx033) with SMTP; 17 Mar 2010 xx:xx:xx +0100
04: Received: from User ([41.217.65.14])
05: 	(authenticated bits=0)
06: 	by mail.coaatleon.es (8.12.5/8.12.8) with ESMTP ID: [ID filtered]
07: 	Mon, 15 Mar 2010 xx:xx:xx +0100

IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +23354 6155335 ---> MTN, Ghana

header:

01: Received: from very-e.com (unknown [121.11.84.240])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User [82.128.20.182] by very-e.com with ESMTP
05:   (SMTPD32-8.01) ID: [ID filtered]

header:

01: Received: from very-e.com (unknown [121.11.84.240])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User [82.128.20.41] by very-e.com with ESMTP
05:   (SMTPD32-8.01) ID: [ID filtered]

IP: 82.128.20.182 ---> ml82.128.20.182.multilinks.com, Nigeria

Freenet, Teil 15:

header:

01: Received: from mout6.freenet.de (mout6.freenet.de [195.4.92.96])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.22] (helo=12.mx.freenet.de)
07: 	by mout6.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #1)
09: 	ID: [ID filtered]
10: Received: from [41.217.65.14] (port=22772 helo=User)
11: 	by 12.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (Exim 4.72 #2)
13: 	ID: [ID filtered]

IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.

(Freenet)

- kjz

Die Mugus legen los:

die Amsterdam-Konnektion:

header:

01: Received: from cosr001.CORMANO.LOCAL
02: (host131-22-static.223-195-b.business.telecomitalia.it [195.223.22.131])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([87.210.95.21]) by cosr001.CORMANO.LOCAL with
06: Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Tue, 16 Mar 2010 xx:xx:xx +0100

IP: 87.210.95.21 ---> ip21-95-210-87.adsl2.static.versatel.nl

header:

01: Received: from slw.com.tw (220-130-52-115.HINET-IP.hinet.net
02: [220.130.52.115])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Wed, 17 Mar 2010 xx:xx:xx +0100 (CET)
07: Received: from User (ml82.128.20.189.multilinks.com [82.128.20.189])
08: 	(authenticated bits=0)
09: 	by slw.com.tw (8.12.8/8.12.8) with ESMTP ID: [ID filtered]
10: 	Wed, 17 Mar 2010 xx:xx:xx +0800

IP: 82.128.20.189 ---> Multilinks, Nigeria

header:

01: Received: from nmsbs.normark.local (211-23-203-98.HINET-IP.hinet.net
02: [211.23.203.98])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 18 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([192.168.1.1]) by nmsbs.normark.local with
06: Microsoft SMTPSVC(6.0.3790.3959);
07: 	 Thu, 18 Mar 2010 xx:xx:xx +0800

Muguphon: +44 702 4017 962 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mail.dynisys.net
02: (24-180-248-18.static.bycy.mi.charter.com [24.180.248.18])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 18 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from User [41.138.190.43] by mail.dynisys.net with ESMTP
06:   (SMTPD32-7.15) ID: [ID filtered]

IP: 41.138.190.43 ---> Visafone Communications Limited, Nigeria

Muguphon: +44 702 4039830 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 702 4075668 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from smtpout6.poczta.onet.pl (smtpout6.poczta.onet.pl
02: [213.180.147.166])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 18 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: from [196.46.246.21] ([196.46.246.21]:30102 "EHLO
06: 	d600-pc"
07: 	rhost-flags-FAIL-FAIL-OK-FAIL) by ps2.m5r2.onet with ESMTPA
08: 	ID: [ID filtered]
09: 	Thu, 18 Mar 2010 xx:xx:xx +0100

IP: 196.46.246.21 ---> Celtel Nigeria Limited/Zain

Muguphon: + 234-7056665788 ---> Globacom Ltd., Nigeria

header:

01: Received: from mail.segynonc.net (EHLO mail.segynonc.net) [209.177.232.5]
02:   by mx0.gmx.net (mx011) with SMTP; 19 Mar 2010 xx:xx:xx +0100
03: Received: from User ([203.31.191.226] RDNS failed) by mail.segynonc.net
04: with Microsoft SMTPSVC(6.0.3790.3959);
05: 	 Thu, 18 Mar 2010 xx:xx:xx -0400

Und hier sieht man auch, wie Yahoo die Source-IP mitliefert:

header:

01: Received: from n10.bullet.mail.mud.yahoo.com (HELO
02: n10.bullet.mail.mud.yahoo.com) [209.191.125.208]
03:   by mx0.gmx.net (mx053) with SMTP; 19 Mar 2010 xx:xx:xx +0100
04: Received: from [68.142.200.225] by n10.bullet.mail.mud.yahoo.com with
05: NNFMP; 19 Mar 2010 xx:xx:xx -0000
06: Received: from [66.196.97.142] by t6.bullet.mud.yahoo.com with NNFMP; 19
07: Mar 2010 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp110.mail.re3.yahoo.com with NNFMP; 19
09: Mar 2010 xx:xx:xx -0000
10: Received: from [77.70.128.170] by web88008.mail.re2.yahoo.com via HTTP;
11: Fri, 19 Mar 2010 xx:xx:xx PDT

IP: 77.70.128.170 ---> Comgeo Services, Nigeria/Taide

Muguphon: +447031883670 ---> Magrathea Telecommunications Limited, UK

- kjz

Der Nachschub geht nie aus:

header:

01: Received: from ns.GmNex.com (unknown [220.90.213.57])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([41.218.228.37]) by ns.GmNex.com with Microsoft
05: SMTPSVC(6.0.3790.3959);
06: 	 Sat, 20 Mar 2010 xx:xx:xx +0900

IP: 41.218.228.37 ---> vfbb22837.4u.com.gh

header:

01: Received: from ip179.208-100-3.static.steadfast.net (EHLO
02: mail.imageworldwide.com) [208.100.3.179]
03:   by mx0.gmx.net (mx039) with SMTP; 20 Mar 2010 xx:xx:xx +0100
04: Received: from UnknownHost [41.217.65.14] by mail.imageworldwide.com
05: with SMTP;
06:    Fri, 19 Mar 2010 xx:xx:xx -0500

IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +234-813-756-89-22 ---> Nigeria

header:

01: Received: from etmail.namliong.com.tw (unknown [210.75.26.90])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from localhost (localhost [127.0.0.1])
05: 	by etmail.namliong.com.tw (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 20 Mar 2010 xx:xx:xx +0800 (CST)
07: X-Virus-Scanned: amavisd-new at namliong.com.tw
08: Received: from etmail.namliong.com.tw ([127.0.0.1])
09: 	by localhost (nat.namliong.com.tw [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from etmail.namliong.com.tw (localhost [127.0.0.1])
12: 	by etmail.namliong.com.tw (Postfix) with ESMTP ID: [ID filtered]
13: 	Sat, 20 Mar 2010 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.203.65.44 (test) ---> Globacom Ltd., Nigeria

header:

01: Received: from 90.41.68.68.client.static.strong10.reliablehosting.com
02: (EHLO mx4.hotmail.com) [68.68.41.90]
03:   by mx0.gmx.net (mx039) with SMTP; 20 Mar 2010 xx:xx:xx +0100

header:

01: Received: from smtp2web.tin.it (smtp2web.tin.it [212.216.176.236])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from pswm15.cp.tin.it (192.168.70.60) by smtp2web.tin.it (8.5.113)
05:         ID: [ID filtered]

X-Originating-IP: 41.184.6.30 ---> 41-184-6-30.rv.ipnxtelecoms.com/ipNX, Nigeria

header:

01: Received: from smtpgate3.pacific.net.sg (smtpgate3.pacific.net.sg
02: [203.81.36.33])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 20 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: (qmail 18053 invoked from network); 20 Mar 2010 xx:xx:xx -0000
06: Received: from unknown (HELO mail.pacific.net.sg)
07: (eelt [at] pacific.net.sg@93.174.138.75)
08:   by smtpgate3.pacific.net.sg with ESMTPA; 20 Mar 2010 xx:xx:xx -0000

header:

01: Received: from mail.inorogul.ro (mail.inorogul.ro [86.121.32.176])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 21 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User (unknown [41.217.65.14])
05: 	by mail.inorogul.ro (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 20 Mar 2010 xx:xx:xx +0200 (EET)

IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.

Muguphon: +229-96144885 ---> mobile number, Benin

- kjz

Neues aus der Mugu-Küche:

header:

01: Received: from unknown (EHLO intzvill.com) [221.143.46.154]
02:   by mx0.gmx.net (mx116) with SMTP; 22 Mar 2010 xx:xx:xx +0100
03: Received: from User (www.zmmae.gov.tr [81.215.14.21])
04: 	(authenticated bits=0)
05: 	by intzvill.com (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
06: 	Mon, 22 Mar 2010 xx:xx:xx +0900

Muguphon: +234 80-386-59-174 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from mail.ncsamericas.com (EHLO ncsamericas.com) [146.82.90.20]
02:   by mx0.gmx.net (mx007) with SMTP; 23 Mar 2010 xx:xx:xx +0100
03: Received: (qmail 8237 invoked from network); 17 Mar 2010 xx:xx:xx -0400
04: Received: from unknown (HELO User) (41.217.65.13)
05:   by pbc.cl with SMTP; 17 Mar 2010 xx:xx:xx -0400

IP: 41.217.65.13 --> ZOOM Mobile Nigeria Ltd.

header:

01: Received: from smtpgate2.pacific.net.sg (smtpgate2.pacific.net.sg
02: [203.120.90.32])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 23 Mar 2010 xx:xx:xx +0100 (CET)
05: Received: (qmail 21415 invoked from network); 22 Mar 2010 xx:xx:xx -0000
06: Received: from unknown (HELO pacific.net.sg)
07: (jhpl [at] pacific.net.sg@124.160.67.70)
08:   by smtpgate2.pacific.net.sg with ESMTPA; 22 Mar 2010 xx:xx:xx -0000

IP: 124.160.67.70 ---> China Unicom Zhejiang

header:

01: Received: from bowang.net (unknown [61.135.149.42])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 23 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([41.217.65.13])
05: 	(envelope-sender <capital_manager [at] yahoo.com>)
06: 	by 61.135.149.42 with ESMTP
07: 	for <poor [at] spamvictim.tld>; Tue, 23 Mar 2010 xx:xx:xx +0800

IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd. (siehe oben, da treten sich die Mugus im Café wohl die Füsse platt...)

Muguphon: +234 702 986 5890 ---> Starcomms PLC, Nigeria

header:

01: Received: from webmail.enter.net (www.entermail.net [216.193.128.33])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 22 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: by webmail.enter.net (Postfix, from userID: [ID filtered]
05: 	ID: [ID filtered]
06: Received: from webmail.enter.net (www.entermail.net [216.193.128.33])
07: 	by webmail.enter.net (Postfix) with ESMTP ID: [ID filtered]
08: 	Mon, 22 Mar 2010 xx:xx:xx -0400 (EDT)

X-OriginatingIP: 120.29.240.2 (amadaday) ---> 240-2.tasmanet.com.au

header:

01: Received: from unknown (HELO pop.cheayu.com) [61.28.41.51]
02:   by mx0.gmx.net (mx022) with SMTP; 23 Mar 2010 xx:xx:xx +0100
03: Received: from User ([82.128.25.82])
04: 	(envelope-sender <ezewilliamoffice [at] terra.es>)
05: 	by 192.168.1.1 with ESMTP
06: 	for <poor [at] spamvictim.tld>; Tue, 23 Mar 2010 xx:xx:xx +0800

IP: 82.128.25.82 ---> MULTILINKS NETWORK & SYSTEM INFRASTRUCTURE - SUBNET 1, NG

Muguphon: +234-706-292-3142 ---> MTN Nigeria Communications Ltd.

gecrackter T-Offline Account:

header:

01: Received: from mailout04.t-online.de (mailout04.t-online.de [194.25.134.18])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 23 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from fwd03.aul.t-online.de (fwd03.aul.t-online.de )
05: 	by mailout04.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (Vmij0MZXwt2xQhESUkfBwYPBJMnGGvdt1+1dqOnX5yYhc+1XgAOBlys83JDBnYINC493msq4Rz@[24.102.192.36&
09: 	93;)
10: by fwd03.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 24.102.192.36 ---> 24.102.192.36.res-cmts.tv13.ptd.net

Muguphon: +44 70 240 63740 ---> Magrathea Telecommunications Limited, UK

Mugufax: +44 84 477 42856 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from host2host.com (host2host.com [216.117.164.247])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 24 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User [82.128.70.148] by host2host.com with ESMTP
05:   (SMTPD32-8.05) ID: [ID filtered]

IP: 82.128.70.148 ---> Multilinks Telecommunications Limited, Nigeria

Tja, wenn der Mugu zu blöd ist, die Adresse richtig zu schreiben hier noch einmal:

header:

01: Received: from user-kjr0o2k4ii.dailysteel.com (unknown [116.228.63.243])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 24 Mar 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([69.64.92.202]) by user-kjr0o2k4ii.dailysteel.com
05: with Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Wed, 24 Mar 2010 xx:xx:xx +0800

IP: 69.64.92.202 ---> 69-64-92-202.dedicated.abac.net

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen

Alle Zeitangaben in WEZ +2. Es ist jetzt 07:52 Uhr.

Antispam e.V. / Impressum