Eine neue Mugu-Runde...
Der Dumm-Mugu versucht es via Wörterbuch und Brute Force:
header:
01: Received: from sms.etam.com.cn (mail.eischina.cn [58.246.226.154])
02: by mx.kundenserver.de (node=mxeu1) with ESMTP (Nemesis)
03: ID: [ID filtered]
04: xx:xx:xx +0100
05: X-AuditID: [ID filtered]
06: Received: from etam_gate2.ecn.com (Unknown_Domain [192.168.3.2])
07: by sms.etam.com.cn (Symantec Messaging Gateway) with SMTP id
08: 87.AA.03717.584C9115; Tue, 12 Feb 2013 xx:xx:xx +0800 (HKT)
09: To: undisclosed-recipients:;
10: Received: from User ([197.242.112.245]) by etam_gate2.ecn.com with
11: Microsoft SMTPSVC(6.0.3790.4675);
12: Tue, 12 Feb 2013 xx:xx:xx +0800
header:
01: Received: from sms.etam.com.cn ([61.152.161.169]) by mx-ha.gmx.net
02: (mxgmx009)
03: with ESMTP (Nemesis) ID: [ID filtered]
04: Feb 2013 xx:xx:xx +0100
05: X-AuditID: [ID filtered]
06: Received: from etam_gate2.ecn.com (Unknown_Domain [192.168.3.2])
07: by sms.etam.com.cn (Symantec Messaging Gateway) with SMTP id
08: 87.AA.03717.584C9115; Tue, 12 Feb 2013 xx:xx:xx +0800 (HKT)
09: To: undisclosed-recipients:;
10: Received: from User ([197.242.112.245]) by etam_gate2.ecn.com with
11: Microsoft SMTPSVC(6.0.3790.4675);
12: Tue, 12 Feb 2013 xx:xx:xx +0800
header:
01: Received: from sms.etam.com.cn ([58.246.226.154]) by mx-ha.gmx.net
02: (mxgmx102)
03: with ESMTP (Nemesis) ID: [ID filtered]
04: Feb 2013 xx:xx:xx +0100
05: X-AuditID: [ID filtered]
06: Received: from etam_gate2.ecn.com (Unknown_Domain [192.168.3.2])
07: by sms.etam.com.cn (Symantec Messaging Gateway) with SMTP id
08: 87.AA.03717.584C9115; Tue, 12 Feb 2013 xx:xx:xx +0800 (HKT)
09: To: undisclosed-recipients:;
10: Received: from User ([197.242.112.245]) by etam_gate2.ecn.com with
11: Microsoft SMTPSVC(6.0.3790.4675);
12: Tue, 12 Feb 2013 xx:xx:xx +0800
IP: 197.242.112.245 ---> SPECTRANET LIMITED, Nigeria
header:
01: Received: from mout.perfora.net ([74.208.4.195]) by mx-ha.gmx.net (mxgmx003)
02: with ESMTP (Nemesis) ID: [ID filtered]
03: Feb 2013 xx:xx:xx +0100
04: Received: from winxedgeus02.exchange.xchg (winxedgeus02.lxa.perfora.net
05: [172.23.130.34])
06: by mrelay.perfora.net (node=mrus3) with ESMTP (Nemesis)
07: ID: [ID filtered]
08: Received: from winxhubus02.exchange.xchg (172.23.130.14) by
09: winxedgeus02.exchange.xchg (172.23.130.34) with Microsoft SMTP Server (TLS)
10: ID: [ID filtered]
11: Received: from WINXBEUS26.exchange.xchg ([172.23.130.69]) by
12: winxhubus02.exchange.xchg ([172.23.130.14]) with mapi; Tue, 12 Feb 2013
13: xx:xx:xx -0500
header:
01: Received: from mv-osn-hcb008.ocn.ad.jp ([118.23.100.201]) by mx-ha.gmx.net
02: (mxgmx104) with ESMTP (Nemesis) ID: [ID filtered]
03: Mon, 11 Feb 2013 xx:xx:xx +0100
04: Received: from vcfeel.ocn.ne.jp (mv-osn-hcb008 [118.23.100.201])
05: by mv-osn-hcb008.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
06: Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
07: Received: from User (p31061-ipngn1601hodogaya.kanagawa.ocn.ne.jp
08: [180.0.60.61])
09: by vcfeel.ocn.ne.jp (Postfix) with ESMTP;
10: Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
header:
01: Received: from defer115.ocn.ad.jp (defer115.ocn.ad.jp [125.206.148.13])
02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Tue, 12 Feb 2013 xx:xx:xx +0100 (CET)
04: Received: from mv-osn-hcb007.ocn.ad.jp (mv-osn-hcb007.ocn.ad.jp
05: [118.23.180.69])
06: by defer115.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
07: for xxxxx; Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
08: Received: from vcgold.ocn.ne.jp (mv-osn-hcb007 [118.23.180.69])
09: by mv-osn-hcb007.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
10: Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
11: Received: from User (p1174-ipbfp2905tokaisakaetozai.aichi.ocn.ne.jp
12: [114.171.40.174])
13: by vcgold.ocn.ne.jp (Postfix) with ESMTP;
14: Tue, 12 Feb 2013 xx:xx:xx +0900 (JST)
header:
01: Received: from ip-9-125.sn-212-110.eutelia.it ([212.110.9.125]) by
02: mx-ha.gmx.net (mxgmx113) with ESMTP (Nemesis) id
03: 0LlZ87-1UfM8K0fG3-00bGCo for xxxxx; Tue, 12 Feb 2013 xx:xx:xx +0100
wieder im Portfolio:
header:
01: Received: from User (johnson_us4556 [at] 216.38.33.199 with login)
02: by smtp219.mail.gq1.yahoo.com with SMTP; 13 Feb 2013 xx:xx:xx
03: -0800 PST
IP: 216.38.33.199 ---> hct-bb.216.38.33.199.redwing.net