Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

18.05.2012, 15:54
carsten.gentsch

Hallo ich habe auch einen anzubieten...
Heute kam eine Bestellung rein die auf den ersten blick ok schien aber dann...

Zitat:

J* M*hat am 18.05.2012 um 13:29 unter der IP 41.190.3.173 bestaetigt die AGB usw....

haben wollte er gern die Domain: luchike.de
und das als Daten angegeben:

Zitat:

Vorname: J*
Nachname: M*
E-Mail-Adresse:
Postleitzahl: 51373
Stadt: Leverkusen
Land: Germany
Straße: W*
Telefon: 0171*

Leider stimmt die Adresse und Telefonnummer nur sind die Daten geklaut ich hatte ein Gespräch und hab den Besitzer mal auf dieses Forum hingwewiesen ;)
In unseren AGB steht ja auch drin das wir die Bestellungen prüfen, bei angabe falscher Daten die Zahlungen einbehalten weill vorsätzlich gegen die AGB verstoßen wird. Leider bisher keine Zahlung :(

Es zeigt sich also man sollte doch 3 mal hinsehen und prüfen bzw. mal nachfragen ;)

Gruß

Zur Vervollständigung der Kollektion würden gerne beitragen:

ein alter Bekannter:

header:
01: Received: from fabmail.rustonneli.ru (fabmail.rustonneli.ru [85.174.231.98])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Mon,  7 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from User (24.73.120.66) by fabmail.rustonneli.ru (192.168.60.14)
05:  with Microsoft SMTP Server ID: [ID filtered]
06: +0400
IP: 24.73.120.66 ---> rrcs-24-73-120-66.se.biz.rr.com

(Strato)

Muguphone: +601 0204 3538 ---> Celcom, Malaysia

header:
01: Received: from col0-omc4-s8.col0.hotmail.com
02: (col0-omc4-s8.col0.hotmail.com [65.55.34.210])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from COL119-W62 ([65.55.34.201]) by
07: col0-omc4-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
08: 	 Mon, 7 May 2012 xx:xx:xx -0700
X-Originating-IP: [175.142.165.188] ---> ADSLSTREAMYX/Telekom Malaysia

und wieder da:

header:
01: Received: from fabmail.rustonneli.ru (fabmail.rustonneli.ru [85.174.231.98])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Tue,  8 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from User (24.73.120.66) by fabmail.rustonneli.ru (192.168.60.14)
05:  with Microsoft SMTP Server ID: [ID filtered]
06: +0400
IP: 24.73.120.66 ---> rrcs-24-73-120-66.se.biz.rr.com

der Sternchen-Mugu:

header:
01: Received: from svr.18pluscash.nl (ns1.18pluscash.nl [93.190.139.145])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed,  9 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from [41.139.117.224] (helo=User)
05: 	by svr.18pluscash.nl with esmtpa (Exim 4.67)
06: 	(envelope-from <scanner [at] att.net>)
07: 	ID: [ID filtered]
IP: 41.139.117.224 ---> Mobitel Nigeria Limited

Zitat:

*/United Nations Office Of International Oversight Services (OIOS)/*//
*/Internal Audit, Monitoring, Consulting And Investigations Division/*//
*/From: Ms. Carman L. Lapointe/*//
*/Head Of United Nations Under-Secretary-/*//
*/General For Internal Oversight Services/*//

Muguphon: +234 812-610-7703 ---> Celtel Nigeria Limited/Zain

header:
01: Received: from okayapower.com (EHLO mail.okayapower.com) [125.19.36.27]
02:   by mx0.gmx.net (mx005) with SMTP; 15 May 2012 xx:xx:xx +0200
03: Received: from User (adsl-99-64-20-254.dsl.sndg02.sbcglobal.net
04: [99.64.20.254])
05: 	by mail.okayapower.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 16 May 2012 xx:xx:xx +0530 (IST)

Etwas Mugu hätt' ich noch:

header:

01: Received: from webhost3.isp-thailand.com (EHLO mail.issphosting.com)
02: [202.5.93.24]
03:   by mx0.gmx.net (mx027) with SMTP; 18 May 2012 xx:xx:xx +0200
04: Received: from User ([91.185.204.53]) by issphosting.com with MailEnable
05: ESMTP; Fri, 18 May 2012 xx:xx:xx +0700

IP: 91.185.204.53 ---> SI-TUSMOBIL

header:

01: Received: from coyote.nordtelekom.hu (coyote.nordtelekom.hu [213.134.7.218])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from localhost (unknown [213.134.7.221])
06: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
07: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
08: X-Virus-Scanned: Nordtelekom Content Filter
09: Received: from coyote.nordtelekom.hu ([213.134.7.218])
10: 	by localhost (mailserver.nordtelekom.hu [213.134.7.221]) (amavisd-new,
11: port 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from webmail.nordtelekom.hu (gogolak.nordtelekom.hu
14: [213.134.7.220])
15: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
16: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
17: Received: from 41.203.64.132
18:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
19:         by webmail.nordtelekom.hu with HTTP;
20:         Sat, 19 May 2012 xx:xx:xx +0200 (CEST)

header:

01: Received: from coyote.nordtelekom.hu (EHLO coyote.nordtelekom.hu)
02: [213.134.7.218]
03:   by mx0.gmx.net (mx030) with SMTP; 19 May 2012 xx:xx:xx +0200
04: Received: from localhost (unknown [213.134.7.221])
05: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
07: X-Virus-Scanned: Nordtelekom Content Filter
08: Received: from coyote.nordtelekom.hu ([213.134.7.218])
09: 	by localhost (mailserver.nordtelekom.hu [213.134.7.221]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from webmail.nordtelekom.hu (gogolak.nordtelekom.hu
13: [213.134.7.220])
14: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
15: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
16: Received: from 41.203.64.132
17:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
18:         by webmail.nordtelekom.hu with HTTP;
19:         Sat, 19 May 2012 xx:xx:xx +0200 (CEST)

header:

01: Received: from coyote.nordtelekom.hu (EHLO coyote.nordtelekom.hu)
02: [213.134.7.218]
03:   by mx0.gmx.net (mx027) with SMTP; 19 May 2012 xx:xx:xx +0200
04: Received: from localhost (unknown [213.134.7.221])
05: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
07: X-Virus-Scanned: Nordtelekom Content Filter
08: Received: from coyote.nordtelekom.hu ([213.134.7.218])
09: 	by localhost (mailserver.nordtelekom.hu [213.134.7.221]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from webmail.nordtelekom.hu (gogolak.nordtelekom.hu
13: [213.134.7.220])
14: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
15: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
16: Received: from 41.203.64.132
17:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
18:         by webmail.nordtelekom.hu with HTTP;
19:         Sat, 19 May 2012 xx:xx:xx +0200 (CEST)

IP: 41.203.64.132 ---> GLO-Mobile Network Services, Nigeria

gecrackt:

Und noch nicht mal die Ratware bedienen kann der Mugu:

Zitat:

You Are the user of %email% ? Please contact me with your details,full
names,telephone number & address for a profitable deal
Richard Lee

header:

01: Received: from nm8-vm1.bullet.mail.ird.yahoo.com
02: (nm8-vm1.bullet.mail.ird.yahoo.com [77.238.189.198])
03: 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 19 May 2012 xx:xx:xx -0400 (EDT)
05: Received: from [77.238.189.52] by nm8.bullet.mail.ird.yahoo.com with
06: NNFMP; 19 May 2012 xx:xx:xx -0000
07: Received: from [212.82.108.120] by tm5.bullet.mail.ird.yahoo.com with
08: NNFMP; 19 May 2012 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1029.mail.ird.yahoo.com with NNFMP; 19
10: May 2012 xx:xx:xx -0000
11: Received: from [196.201.65.156] by web28705.mail.ir2.yahoo.com via HTTP;
12: Sat, 19 May 2012 xx:xx:xx BST

IP: 196.201.65.156 ---> AVISONET, CI

der Sternchen-Mugu:

header:

01: Received: from nschwmtas04p.mx.bigpond.com (nschwmtas04p.mx.bigpond.com
02: [61.9.189.146])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 20 May 2012 xx:xx:xx +0200 (CEST)
05: Received: from nschwotgx03p.mx.bigpond.com ([165.228.150.40])
06:           by nschwmtas04p.mx.bigpond.com with ESMTP
07:           id
08: <......mx.bigpond.com [at] nschwotgx03p.mx.bigpond.com>;
09:           Sun, 20 May 2012 xx:xx:xx +0000
10: Received: from gsj.net.au ([165.228.150.40]) by nschwotgx03p.mx.bigpond.com
11:           with ESMTP
12:           id
13: <.....mx.bigpond.com [at] gsj.net.au>;
14:           Sun, 20 May 2012 xx:xx:xx +0000
15: Received: from User ([109.231.219.66]) by gsj.net.au with Microsoft
16: SMTPSVC(6.0.3790.4675);
17: 	 Sun, 20 May 2012 xx:xx:xx +1000

IP: 109.231.219.66 ---> 109-231-219-66.cust-109.exponential-e.net

Zitat:

*/Re: Bank Payment Notification/Wire Transfer Approvals/*//
*//*//
*//*//
*/We wish to inform you that you have been recommended by my Bank, to
pay you
the sum of US$42,500,000.00 which is based on the understanding and current
proposed legislative payment agreement./*//

Muguphon: +44 700 592 1528 ---> Invomo Ltd., UK

Als Mugus möchten sich in Erinnerung bringen:

header:

01: Received: from yums.yu.edu (fe5.prod.mis.yu.edu [10.11.12.55])
02: 	by fe7.prod.mis.yu.edu (Postfix) with ESMTP ID: [ID filtered]
03: 	Mon, 21 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from 41.203.64.130
05:         (SquirrelMail authenticated user Blatner)
06:         by yums.yu.edu with HTTP;
07:         Mon, 21 May 2012 xx:xx:xx -0400

IP: 41.203.64.130 ---> Gloworld, Nigeria

gecrackt:

header:

01: Received: from cdlac1-a1-2-156.ipcom.comunitel.net (EHLO
02: mx4.hotmail.com) [212.145.84.156]
03:   by mx0.gmx.net (mx006) with SMTP; 21 May 2012 xx:xx:xx +0200

der Mugu setzt auf Brachialgewalt:

header:

01: Received: from iron7.midco.net (iron7.midco.net [24.220.0.83])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 25 May 2012 xx:xx:xx +0200 (CEST)
04: Received: from smtpa.midco.net ([24.220.0.133])
05:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
06: Received: from [10.1.1.1] (unknown [180.75.252.203])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	(Authenticated sender: lwr [at] gra.midco.net)
10: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
11: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron7.midco.net (EHLO iron7.midco.net) [24.220.0.83]
02:   by mx0.gmx.net (mx005) with SMTP; 25 May 2012 xx:xx:xx +0200
03: Received: from smtpa.midco.net ([24.220.0.133])
04:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
05: Received: from [10.1.1.1] (unknown [180.75.252.203])
06: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
07: 	(No client certificate requested)
08: 	(Authenticated sender: lwr [at] gra.midco.net)
09: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
10: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron8.midco.net (EHLO iron8.midco.net) [24.220.0.94]
02:   by mx0.gmx.net (mx027) with SMTP; 25 May 2012 xx:xx:xx +0200
03: Received: from smtpa.midco.net ([24.220.0.133])
04:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
05: Received: from [10.1.1.1] (unknown [180.75.252.203])
06: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
07: 	(No client certificate requested)
08: 	(Authenticated sender: lwr [at] gra.midco.net)
09: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
10: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron5.midco.net (iron5.midco.net [24.220.0.86])
02: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: Received: from smtpa.midco.net ([24.220.0.133])
05:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
06: Received: from [10.1.1.1] (unknown [180.75.252.203])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	(Authenticated sender: lwr [at] gra.midco.net)
10: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
11: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron8.midco.net (iron8.midco.net [24.220.0.94])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 25 May 2012 xx:xx:xx +0200 (CEST)
04: Received: from smtpa.midco.net ([24.220.0.133])
05:   by out.vip.midco.net with ESMTP; 25 May 2012 xx:xx:xx -0500
06: Received: from [10.1.1.1] (unknown [180.75.45.0])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	(Authenticated sender: llewellyn [at] wil.midco.net)
10: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
11: 	Fri, 25 May 2012 xx:xx:xx -0500 (CDT)

IP: 180.75.252.203/180.75.45.0 ---> Packet One Networks (M) Sdn, Malaysia

gecrackt:

gecrackt:

In den letzten Tagen bekam ich vermehrt Mugu-Spam aus Malaysia. Malaysia ist wohl ein beliebtes 'Studienland' für Nigerianer und die Mugus müssen sich ihre Studiengebühren dort anscheinend per 419-Betrug verdienen...

Weiterhin drängeln sich nach vorne:

der Yahoo/ATT-Mugu:

header:

01: Received: from [173.245.64.112] by web181216.mail.ne1.yahoo.com via
02: HTTP; Tue, 22 May 2012 xx:xx:xx PDT

IP: 173.245.64.112 ---> Egihosting

header:

01: Received: from [69.22.170.108] by web84506.mail.ne1.yahoo.com via HTTP;
02: Fri, 25 May 2012 xx:xx:xx PDT

IP: 69.22.170.108 ---> nLayer

header:

01: Received: from cable.sabotronic.co.rs (cable.sabotronic.co.rs
02: [212.200.122.10])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Sat, 26 May 2012 xx:xx:xx +0200 (CEST)
07: Received: from User (c-76-124-108-98.hsd1.pa.comcast.net [76.124.108.98])
08: 	(authenticated bits=0)
09: 	by cable.sabotronic.co.rs (8.14.4/8.14.4) with ESMTP ID: [ID filtered]
10: 	Sat, 26 May 2012 xx:xx:xx +0200

Muguphon: +60102914584 ---> Celcom, Malaysia

header:

01: Received: from mail-ob0-f178.google.com (mail-ob0-f178.google.com
02: [209.85.214.178])
03: 	by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: by mail-ob0-f178.google.com with SMTP ID: [ID filtered]
07:         for xxxxx; Sat, 26 May 2012 xx:xx:xx -0700 (PDT)
08: Received: by 10.50.135.37 with SMTP ID: [ID filtered]
09:  26 May 2012 xx:xx:xx -0700 (PDT)
10: Received: by 10.64.13.52 with HTTP; Sat, 26 May 2012 xx:xx:xx -0700 (PDT)

header:

01: Received: from mail-ob0-f179.google.com (mail-ob0-f179.google.com
02: [209.85.214.179])
03: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
04: 	for xxxxx; Sat, 26 May 2012 xx:xx:xx -0400 (EDT)
05: Received: by obbup19 with SMTP ID: [ID filtered]
06:         for xxxxx; Sat, 26 May 2012 xx:xx:xx
07: -0700 (PDT)
08: Received: by 10.50.87.198 with SMTP ID: [ID filtered]
09:  26 May 2012 xx:xx:xx -0700 (PDT)
10: Received: by 10.64.13.52 with HTTP; Sat, 26 May 2012 xx:xx:xx -0700 (PDT)

gecrackt:

header:

01: Received: from sydney.orbit-internet.co.uk (unknown [84.21.143.144])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 27 May 2012 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.78.239.194])
05:         by sydney.orbit-internet.co.uk (Sydney Mailserver) with ASMTP id
06: KXE13208; Sat, 26 May 2012 xx:xx:xx +0100

IP: 41.78.239.194 ---> broadband.fibre1.aquiva.co.zw

header:

01: Received: from static-74-100-190-4.lsanca.fios.verizon.net (EHLO
02: tonysmultiservice.com) [74.100.190.4]
03:   by mx0.gmx.net (mx072) with SMTP; 27 May 2012 xx:xx:xx +0200
04: Received: from inheritanceforums.com ([50.56.188.235]) by
05: tonysmultiservice.com with Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Sun, 27 May 2012 xx:xx:xx -0700

IP: 50.56.188.235 ---> 50-56-188-235.static.cloud-ips.com/Rackspace

die Madrid-Konnektion:

header:

01: Received: from 194-208-194-212.tele.net (EHLO mx4.hotmail.com)
02: [194.208.194.212]
03:   by mx0.gmx.net (mx079) with SMTP; 27 May 2012 xx:xx:xx +0200

Muguphon: +34 662-230-776 ---> Vodafone España, S.a.u.

Mugufax: +34-917 903 754 ---> Colt Telecom España, S.a.

gecracktes Horde:

header:

01: Received: from mail.copesnet.com.ar (EHLO mail.copesnet.com.ar)
02: [201.251.233.3]
03:   by mx0.gmx.net (mx057) with SMTP; 27 May 2012 xx:xx:xx +0200
04: Received: from mail.copesnet.com.ar (mail.nabarro.com.ar [127.0.0.1])
05: 	by mail.copesnet.com.ar (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
06: 	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
07: 	Sun, 27 May 2012 xx:xx:xx -0300
08: Received: (from apache [at] localhost)
09: 	by mail.copesnet.com.ar (8.13.8/8.13.8/Submit) ID: [ID filtered]
10: 	Sun, 27 May 2012 xx:xx:xx -0300
11: X-Authentication-Warning: mail.copesnet.com.ar: apache set sender to
12: info [at] copesnet.com.ar using -f
13: Received: from 65.49.68.194 ([65.49.68.194]) by webmail.copesnet.com.ar
14: 	(Horde Framework) with HTTP; Sun, 27 May 2012 xx:xx:xx

gecrackt:

Fröhliches Mugu-Treiben:

header:

01: Received: from static-74-100-190-4.lsanca.fios.verizon.net (EHLO
02: tonysmultiservice.com) [74.100.190.4]
03:   by mx0.gmx.net (mx061) with SMTP; 29 May 2012 xx:xx:xx +0200
04: Received: from inheritanceforums.com ([50.56.188.235]) by
05: tonysmultiservice.com with Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Mon, 28 May 2012 xx:xx:xx -0700

IP: 50.56.188.235 ---> 50-56-188-235.static.cloud-ips.com

header:

01: Received: from server107d.exghost.com (EHLO server107.appriver.com)
02: [204.232.236.207]
03:   by mx0.gmx.net (mx059) with SMTP; 30 May 2012 xx:xx:xx +0200
04: Received: from [10.238.9.126] (HELO mail07.appriver.com)
05:   by server107.appriver.com (CommuniGate Pro SMTP 5.4.4)
06:   with ESMTPS ID: [ID filtered]
07: Received: from [175.100.12.44] (account wwillis [at] helmsbriscoe.com HELO User)
08:   by mail07.appriver.com (CommuniGate Pro SMTP 5.4.3k)
09:   with ESMTPA ID: [ID filtered]

IP: 175.100.12.44] ---> VIETTEL-CAMBODIA

gecrackt:

header:

01: Received: from echoupal.com (relay.e-choupal.com [125.20.5.166])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed, 30 May 2012 xx:xx:xx -0400 (EDT)
04: Received: (qmail 6242 invoked by UID: [UID filtered]
05: Received: from unknown (HELO echoupal.com) ([192.168.5.13])
06:           (envelope-sender <poor [at] spamvictim.tld>)
07:           by 0 (qmail-ldap-1.03) with SMTP
08:           for xxxxx; 30 May 2012 xx:xx:xx -0000
09: Received: (qmail 26200 invoked by UID: [UID filtered]
10: Received: from 127.0.0.1 by mithimail2 (envelope-from
11: <09000609 [at] echoupal.com>, UID: [UID filtered]
12:  Clear:RC:1(127.0.0.1):. Processed in 0.029996 secs); 30 May 2012
13: xx:xx:xx -0000
14: Received: from unknown (HELO mithimail2) ([127.0.0.1])(envelope-sender
15: <09000609 [at] echoupal.com>)by 0 (qmail-ldap-1.03) with SMTPfor
16: <wrightwilliams2012 [at] yahoo.com.cn>; 30 May 2012 xx:xx:xx -0000

header:

01: Received: from karaja.e-projeti.com.br (karaja.e-projeti.com.br
02: [200.215.209.150])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Fri,  1 Jun 2012 xx:xx:xx +0200 (CEST)
07: Received: from higra by karaja.e-projeti.com.br with local (Exim 4.77)
08: 	(envelope-from <higra [at] karaja.e-projeti.com.br>)
09: 	ID: [ID filtered]
10: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx -0300
11: X-AntiAbuse: Sender Address Domain - karaja.e-projeti.com.br

gecrackt:

Man treibt es weiter:

header:

01: Received: from mail.roamware.com (EHLO roamware.com) [64.68.70.99]
02:   by mx0.gmx.net (mx027) with SMTP; 29 May 2012 xx:xx:xx +0200
03: Received: from User ([87.103.115.202]) by roamware.com with Microsoft
04: SMTPSVC(6.0.3790.4675);
05: 	 Tue, 29 May 2012 xx:xx:xx -0700

IP: 87.103.115.202 ---> smtp.enkrott.pt

Muguphon: +234-808-180-2556 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from mail.ronda.com.co (EHLO mail.ronda.com.co) [200.91.234.186]
02:   by mx0.gmx.net (mx032) with SMTP; 30 May 2012 xx:xx:xx +0200
03: Received: from localhost (localhost [127.0.0.1])
04: 	by mail.ronda.com.co (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 30 May 2012 xx:xx:xx -0500 (COT)
06: X-Virus-Scanned: amavisd-new at ronda.com.co
07: Received: from mail.ronda.com.co ([127.0.0.1])
08: 	by localhost (mail.ronda.com.co [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: 	Wed, 30 May 2012 xx:xx:xx -0500 (COT)
11: Received: from User-PC (unknown [41.233.228.189])
12: 	by mail.ronda.com.co (Postfix) with ESMTPSA ID: [ID filtered]
13: 	for xxxxx; Wed, 30 May 2012 xx:xx:xx -0500 (COT)

IP: 41.233.228.189 ---> host-41.233.228.189.tedata.net

header:

01: Received: from mail165.messagelabs.com (mail165.messagelabs.com
02: [216.82.253.147])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx +0200 (CEST)
07: Received: (qmail 27945 invoked from network); 31 May 2012 xx:xx:xx -0000
08: Received: from eth220-139.vic.adsl.internode.on.net (HELO
09: ?150.101.220.139?) (150.101.220.139)
10:   by server-8.tower-165.messagelabs.com with DHE-RSA-AES256-SHA
11: encrypted SMTP; 31 May 2012 xx:xx:xx -0000
12: Received: from localhost (localhost [127.0.0.1])
13: 	by e-v.vic (Postfix) with ESMTP ID: [ID filtered]
14: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx +1000 (EST)
15: Received: from HARVESTTIME-PC (unknown [111.90.151.105])
16: 	by e-v.vic (Postfix) with ESMTP ID: [ID filtered]
17: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx +1000 (EST)

IP: 111.90.151.105 ---> PIRADIUS NET, Malaysia (HARVESTTIME-PC, soso....)

die Madrid-Konnektion:

header:

01: Received: from User (europrom12 [at] 76.164.199.59 with login)
02:         by smtp104.mail.gq1.yahoo.com with SMTP; 31 May 2012 xx:xx:xx
03: -0700 PDT

IP: 76.164.199.59 ---> three15.pixiedustallergy.com/Versaweb

Muguphon: +34-634-119-039 ---> Vodafone España, S.a.u.

Mugufax: +34-911-820-118 ---> Jazz Telecom, S.a.u.

header:

01: Received: from action-uk.com (mx10.action-uk.com [213.170.130.250])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  1 Jun 2012 xx:xx:xx +0200 (CEST)
04: Received: from User ([115.236.19.233]) by action-uk.com with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Fri, 1 Jun 2012 xx:xx:xx +0100

IP: 115.236.19.233 ---> HANGZHOU-XIAOSHAN

Muguphon: +60102914584 ---> Celcom, Malaysia

header:

01: Received: from c2bthomr11.btconnect.com (EHLO mail.btconnect.com)
02: [213.123.20.129]
03:   by mx0.gmx.net (mx025) with SMTP; 01 Jun 2012 xx:xx:xx +0200
04: Received: from mail.btconnect.com (c2bthomr14.ncs.ibs-infra.bt.com
05: [10.87.69.235])
06: 	by c2bthomr11.btconnect.com (MOS 3.10.10a-GA)
07: 	with ESMTP ID: [ID filtered]
08: 	Fri, 1 Jun 2012 xx:xx:xx +0100 (BST)
09: Received: (from localhost [127.0.0.1])
10: 	by c2bthomr14.btconnect.com (MOS 4.3.3-GA)
11: 	ID: [ID filtered]
12: 	Fri,  1 Jun 2012 xx:xx:xx +0100 (BST)
13: Received: from serverr3.vscloud-cust.net (EHLO User) ([217.16.182.82])
14: 	by c2bthomr14.btconnect.com
15: 	with ESMTP ID: [ID filtered]
16: 	Fri, 01 Jun 2012 xx:xx:xx +0100 (BST)

IP: 217.16.182.82 ---> VSHosting

gecrackt:

header:

01: Received: from oms-db04.r1000.mx.aol.com (EHLO
02: oms-db04.r1000.mx.aol.com) [205.188.58.4]
03:   by mx0.gmx.net (mx076) with SMTP; 02 Jun 2012 xx:xx:xx +0200
04: Received: from mtaout-mb02.r1000.mx.aol.com
05: (mtaout-mb02.r1000.mx.aol.com [172.29.41.66])
06: 	by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
07: A36751C0002DA;
08: 	Sat,  2 Jun 2012 xx:xx:xx -0400 (EDT)
09: Received: from user (precivps.securesites.net [161.58.71.38])
10: 	by mtaout-mb02.r1000.mx.aol.com (MUA/Third Party Client Interface) with
11: ESMTPA ID: [ID filtered]
12: 	Sat,  2 Jun 2012 xx:xx:xx -0400 (EDT)

X-AOL-IP: 161.58.71.38 ---> precivps.securesites.net/Verio/NTT

header:

01: Received: from smtpna.posta.tim.it (EHLO fepna02-svc.tim.it)
02: [217.200.184.87]
03:   by mx0.gmx.net (mx028) with SMTP; 03 Jun 2012 xx:xx:xx +0200
04: Received: from User ([2.196.116.223]) by fepna02-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Sun, 3 Jun 2012 xx:xx:xx +0200

header:

01: Received: from blu0-omc2-s24.blu0.hotmail.com (EHLO
02: blu0-omc2-s24.blu0.hotmail.com) [65.55.111.99]
03:   by mx0.gmx.net (mx064) with SMTP; 03 Jun 2012 xx:xx:xx +0200
04: Received: from BLU164-W33 ([65.55.111.73]) by
05: blu0-omc2-s24.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sun, 3 Jun 2012 xx:xx:xx -0700

X-Originating-IP: [41.181.71.38] ---> MTN Business Solutions (Pty) Ltd.

Als Mugus lassen grüßen:

header:

01: Received: from draco.telkomsa.net (draco.telkomsa.net [196.25.211.120])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  4 Jun 2012 xx:xx:xx -0400 (EDT)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by draco.telkomsa.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  4 Jun 2012 xx:xx:xx +0200 (SAST)
07: X-Virus-Scanned: amavisd-new at draco.telkomsa.net
08: Received: from draco.telkomsa.net ([127.0.0.1])
09: 	by localhost (draco.telkomsa.net [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from mail8.telkomsa.net (unknown [192.168.16.221])
12: 	by draco.telkomsa.net (Postfix) with ESMTP ID: [ID filtered]
13: 	Mon,  4 Jun 2012 xx:xx:xx +0200 (SAST)

header:

01: Received: from intranet.sejmh.ro (EHLO intranet.sejmh.ro) [86.127.173.101]
02:   by mx0.gmx.net (mx024) with SMTP; 05 Jun 2012 xx:xx:xx +0200
03: Received: from User ([71.243.113.103]) by intranet.sejmh.ro with
04: Microsoft SMTPSVC(6.0.3790.3959);
05: 	 Tue, 5 Jun 2012 xx:xx:xx +0300

IP: 71.243.113.103 ---> static-71-243-113-103.bos.east.verizon.net

Der Tag geht, Johnny Walker kommt...

header:

01: Received: from oms-db03.r1000.mx.aol.com (oms-db03.r1000.mx.aol.com
02: [205.188.58.3])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue,  5 Jun 2012 xx:xx:xx +0200 (CEST)
05: Received: from mtaout-ma04.r1000.mx.aol.com
06: (mtaout-ma04.r1000.mx.aol.com [172.29.41.4])
07: 	by oms-db03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: A9AA91C000085;
09: 	Tue,  5 Jun 2012 xx:xx:xx -0400 (EDT)
10: Received: from User (unknown [219.139.76.173])
11: 	by mtaout-ma04.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTPA ID: [ID filtered]
13: 	Tue,  5 Jun 2012 xx:xx:xx -0400 (EDT)

X-AOL-IP: 219.139.76.173 ---> CHINANET hubei

Muguphon: +234 8050633240 ---> Globacom Ltd., Nigeria

header:

01: Received: from fepna01-svc.tim.it (smtpna.posta.tim.it [217.200.184.87])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  6 Jun 2012 xx:xx:xx +0200 (CEST)
04: Received: from User ([2.196.116.223]) by fepna01-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Wed, 6 Jun 2012 xx:xx:xx +0200

An der Mugu-Börse tummeln sich noch:

header:

01: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com
02: [64.12.102.138])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  8 Jun 2012 xx:xx:xx +0200 (CEST)
05: Received: from mtaout-da06.r1000.mx.aol.com
06: (mtaout-da06.r1000.mx.aol.com [172.29.51.134])
07: 	by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 4C7EB1C00008B;
09: 	Fri,  8 Jun 2012 xx:xx:xx -0400 (EDT)
10: Received: from User (unknown [174.128.249.227])
11: 	by mtaout-da06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTPA ID: [ID filtered]
13: 	Fri,  8 Jun 2012 xx:xx:xx -0400 (EDT)

X-AOL-IP: 174.128.249.227 ---> SHARKTECH

ein alter Bekannter der Madrid-Konnektion, die Mugus leisten sich sogar einen Zombie:

header:

01: Received: from User (euro.prom012 [at] 76.114.125.191 with login)
02:         by smtp201.mail.bf1.yahoo.com with SMTP; 09 Jun 2012 xx:xx:xx
03: -0700 PDT

IP: 76.114.125.191 ---> c-76-114-125-191.hsd1.tn.comcast.net

Muguphon: +34-634-119-039 ---> Vodafone España, S.a.u.

Mugufax: +34-911-820-118 ---> Jazz Telecom, S.a.u.

header:

01: Received: from hurrican.hg1.mil.ec (hg1.mil.ec [190.95.217.102])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 10 Jun 2012 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by hurrican.hg1.mil.ec (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 10 Jun 2012 xx:xx:xx -0500 (ECT)
07: X-Virus-Scanned: amavisd-new at hg1.mil.ec
08: Received: from hurrican.hg1.mil.ec ([127.0.0.1])
09: 	by localhost (hurrican.hg1.mil.ec [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from hurrican.hg1.mil.ec (hurrican.hg1.mil.ec [172.16.60.46])
12: 	by hurrican.hg1.mil.ec (Postfix) with ESMTP ID: [ID filtered]
13: 	Sun, 10 Jun 2012 xx:xx:xx -0500 (ECT)

Nephrologie im Militärkrankenhaus gecrackt, peinlich...:

header:

01: Received: from mail4.novara.ie (mail4.novara.ie [80.93.17.5])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Sun, 10 Jun 2012 xx:xx:xx -0400 (EDT)
04: Received: (qmail 22787 invoked by UID: [UID filtered]
05: Received: from 31.200.191.117 ([31.200.191.117]) by 80.93.17.5 (Horde
06: 	Framework) with HTTP; Sun, 10 Jun 2012 xx:xx:xx +0100

IP: 31.200.191.117 ---> Hutchison 3G Ireland Limited

gecrackt:

Die Mugus lassen nicht lange bitten:

header:

01: Received: from mail.meline.com.sg (EHLO mail.meline.com.sg) [119.73.202.51]
02:   by mx0.gmx.net (mx061) with SMTP; 10 Jun 2012 xx:xx:xx +0200
03: Received: from User ([64.120.54.106]) by mail.meline.com.sg with
04: Microsoft SMTPSVC(6.0.3790.4675);
05: 	 Sun, 10 Jun 2012 xx:xx:xx +0800

IP: 64.120.54.106 ---> 64.120.54.106.ubiquityservers.com

Muguphon: +234-8055853338 ---> Globacom Ltd., Nigeria

header:

01: Received: from [109.228.240.181] by web132105.mail.ird.yahoo.com via
02: HTTP; Tue, 12 Jun 2012 xx:xx:xx BST

IP: 109.228.240.181 ---> MILLENICOM-DSLNET2

Mugu zum Ersten:

header:

01: Received: from webmail1.posta.tim.it (EHLO fep01-svc.tim.it)
02: [213.230.128.226]
03:   by mx0.gmx.net (mx064) with SMTP; 15 Jun 2012 xx:xx:xx +0200
04: Received: from User ([2.196.116.223]) by fep07-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Thu, 14 Jun 2012 xx:xx:xx +0200

IP: 2.196.116.223 ---> Telecom Italia Mobile

header:

01: Received: from relay3.ptmail.sapo.pt (HELO sapo.pt) [212.55.154.23]
02:   by mx0.gmx.net (mx074) with SMTP; 15 Jun 2012 xx:xx:xx +0200
03: Received: (qmail 1807 invoked from network); 15 Jun 2012 xx:xx:xx -0000
04: Received: from unknown (HELO sapo.pt) (10.134.37.164)
05:   by relay3 with SMTP; 15 Jun 2012 xx:xx:xx -0000
06: Received: (qmail 9251 invoked from network); 15 Jun 2012 xx:xx:xx -0000
07: Received: from unknown (HELO User) (vdawq [at] sapo.pt@[115.236.19.233])
08:           (envelope-sender <poor [at] spamvictim.tld>)
09:           by mta14 (qmail-ptmail-1.0.0) with SMTP

IP: 115.236.19.233 ---> CHINANET-ZJ Hangzhou

Mugu zum Zweiten:

header:

01: Received: from smtpna.posta.tim.it (EHLO fepna02-svc.tim.it)
02: [217.200.184.87]
03:   by mx0.gmx.net (mx027) with SMTP; 18 Jun 2012 xx:xx:xx +0200
04: Received: from User ([2.196.116.223]) by fepna02-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Mon, 18 Jun 2012 xx:xx:xx +0200

IP: 2.196.116.223 ---> Telecom Italia Mobile

40 Beiträge dieses Themas auf einer Seite anzeigen