Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

Die Schwarzhüte von Ghanatel lassen wieder grüßen:

header:

01: Received: from ns.tamtraining.com (EHLO ns.tamtraining.com) [71.16.135.242] by
02: 	mx0.gmx.net (mx015) with SMTP; 11 Apr 2009 xx:xx:xx +0200
03: X-Spam-Status: Yes, hits=10.0 required=3.0
04: 	tests=FORGED_MUA_OUTLOOK: 3.099,NIGERIAN_BODY1: 2.696,NIGERIAN_BODY2:
05: 0.858,
06: 	NIGERIAN_BODY3: 0.972,SARE_CHARSET_W1251: 1.666,SARE_FREE_WEBM_ZCom01: 0.7,
07: 	SARE_MSGID_EMPTY: 1.106,SARE_RECV_ADDR: 0.027,SARE_SUB_ACQUISITION: 0.739,
08: 	SARE_TOCC_NONE: 0.802
09: X-Spam-Flag: YES
10: X-Spam-Level: **********
11: Received: from User ([41.210.34.22]) (authenticated user spam [at] tamtraining.com)
12: 	by ns.tamtraining.com (Kerio MailServer 6.0.5); Fri, 3 Apr 2009 xx:xx:xx -0400

IP: 41.210.34.22 ---> Ghana Telecom ADSL

Post geht an:

header:

01: Received: from IMPaqm1.telefonica.net (impaqm1.telefonica.net [213.4.149.61])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from IMPmailhost2.adm.correo ([10.20.102.39]) by
04: 	IMPaqm1.telefonica.net with bizsmtp ID: [ID filtered]
05: Received: from cps9 ([10.20.100.209]) by IMPmailhost2.adm.correo with BIZ IMP
06: 	ID: [ID filtered]

Post geht an:

Muguphon: +22993181037 ---> BBCom, Benin

- kjz

Nachschub rollt, Sify aus IN ist wohl momentan bei dem Mugus der absolute Hit, wahrscheinlich haben die dort Dave Null am Abuse Desk sitzen....

header:

01: Received: from 69-64-72-148.dedicated.abac.net (69-64-72-148.dedicated.abac.net
02: 	[69.64.72.148]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: (qmail 8970 invoked from network); 8 Apr 2009 xx:xx:xx -0700
05: Received: from unknown (HELO User) (82.128.26.1) by 69-64-72-148.dedicated.abac.net
06: 	with SMTP; 8 Apr 2009 xx:xx:xx -0700

IP: 82.128.26.1 ---> Multilinks Telecommunications Limited, Nigeria

Post geht an:

header:

01: Received: from mail.cyccatv.net.tw (mail.cyccatv.net.tw [61.58.31.253]) (using
02: 	TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by
03: 	xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from localhost (localhost [127.0.0.1]) by mail.cyccatv.net.tw
05: 	(Postfix) with ESMTP ID: [ID filtered]
06: Received: from mail.cyccatv.net.tw ([127.0.0.1]) by localhost
07: 	(mail.cyccatv.net.tw [127.0.0.1]) (amavisd-new, port 10026) with ESMTP ID: [ID
08: 	filtered]
09: Received: from User (unknown [196.3.182.250]) by mail.cyccatv.net.tw (Postfix)
10: 	with ESMTPA ID: [ID filtered]

IP: 196.3.182.250 ---> CTACCESS, Abuja, Nigeria/Suburbantelecom

Post geht an:

- kjz

Und weiter:

header:

01: Received: from intserver2.isaco1.ir (unknown [217.218.102.132]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([62.60.136.28]) by intserver2.isaco1.ir with Microsoft
04: 	SMTPSVC(5.0.2195.6713); Sun, 12 Apr 2009 xx:xx:xx +0430

Post geht an:

header:

01: Received: from ipmail01.adl6.internode.on.net (ipmail01.adl6.internode.on.net
02: 	[203.16.214.146]) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from unknown (HELO User) ([41.211.230.57]) by
04: 	ipmail01.adl6.internode.on.net with ESMTP; 13 Apr 2009 xx:xx:xx +0930

IP: 41.211.230.57 ---> DIRECT ON PC LTD, Nigeria

Post geht an:

- kjz

Naaaachschuuuub:

header:

01: Received: from exchange.dslcc.edu (exchange.dslcc.edu [164.106.42.123]) by
02: 	xxxxx (Postfix) with ESMTP ID: [ID filtered]

Post geht an:

header:

01: Received: from dhuumrelay0.dtm.ops.eu.uu.net (dhuumrelay0.dtm.ops.eu.uu.net
02: 	[194.139.33.69]) 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User (dhcp183.myzipnet.com [41.202.18.3]) (authenticated bits=0)
05: 	by dhuumrelay0.dtm.ops.eu.uu.net (8.14.1/8.14.1) with ESMTP ID: [ID filtered]

Post geht an:

header:

01: Received: from gmmr3.centrum.cz (gmmr3.centrum.cz [90.183.38.155]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from rohlik (unknown [10.0.0.47]) by gmmr3.centrum.cz (Postfix) with
04: 	ESMTP ID: [ID filtered]

Post geht an:

- kjz

14.04.2009, 19:22
drboe

Einen besonderen Humor haben diese Leute, das muss man ihnen lassen:

Zitat:

Received: from User ([41.210.34.22]) (authenticated user spam [at] tamtraining.com)

Oder sie liefern über Server ein, die einen Spamfilter laufen haben, der den Absender immer dann tauscht, wenn spam erkannt wird. Da würde ich mich dann aber fragen, warum so ein Server als Relay agiert.

M. Boettcher

Nachschub:

header:

01: Received: from es1.domain.asse.com (mail.asse.com [65.60.105.75]) by xxxxx
02: 	(Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([219.89.127.134]) by es1.domain.asse.com with Microsoft
04: 	SMTPSVC(6.0.3790.1830); Tue, 14 Apr 2009 xx:xx:xx -0700

Post geht an:

header:

01: Received: from relay3.bagan.net.mm (relay3.bagan.net.mm [203.81.162.126]) by
02: 	xxxxx (Postfix) with SMTP ID: [ID filtered]
03: Received: (qmail 27458 invoked from network); 14 Apr 2009 xx:xx:xx -0000
04: Received: from owm.bagan.net.mm (HELO myanmar.com.mm) (203.81.71.113) by
05: 	relay3.bagan.net.mm with SMTP; 14 Apr 2009 xx:xx:xx -0000

Post geht an:

header:

01: Received: from dsl170-159.doosa.jo (EHLO server.agaamman.com)
02: [80.90.170.159] by mx0.gmx.net (mx055) with SMTP; 15 Apr 2009 xx:xx:xx +0200
03: Received: from User ([83.138.172.76] RDNS failed) by server.agaamman.com with
04: 	Microsoft SMTPSVC(6.0.3790.3959); Wed, 15 Apr 2009 xx:xx:xx +0300
05: Received: from inf-ip-203-i128-092.africaonline.com.gh
06: 	(markowell [at] inf-ip-203-i128-092.africaonline.com.gh [212.85.203.92]) by
07: 	chromium.onspeed.com (SlipStream SP Server 6.0.19 built 2007/11/22 xx:xx:xx -0500 (EST));
08: 	Wed, 15 Apr 2009 xx:xx:xx +0100 (BST)

Man beachte:

X-Originating-IP: [212.85.203.92] ---> inf-ip-203-i128-092.africaonline.com.gh
X-Originating-User: [markowell]

Post geht an:

- kjz

Einen hätt' ich noch, da steht wohl bei einem Kundenserver von Inode mal wieder der Hosenlatz offen:

header:

01: Received: from mx.inode.at (mx07.lb01.inode.at [62.99.145.7]) (using TLSv1 with
02: 	cipher AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx (Postfix) with
03: 	ESMTP ID: [ID filtered]
04: Received: from [213.47.214.141] (port=14062 helo=webmail) by
05: 	smartmx-07.inode.at with esmtp (Exim 4.69) (envelope-from <info [at] sky.org>) ID: [ID
06: 	filtered]
07: Received: from [127.0.0.1] (helo=inode.at) by webmail with smtp (Exim 4.67)
08: 	(envelope-from <info [at] sky.org>) ID: [ID filtered]
09: Received: from 82.128.17.194 (SquirrelMail authenticated user liver.pool [at] inode.at) by
10: 	webmail.inode.at with HTTP; Thu, 16 Apr 2009 xx:xx:xx +0200 (CEST)

IP: 82.128.17.194 ---> ml82.128.17.194.multilinks.com, Nigeria

Post geht an:

- kjz

Noch einer:

header:

01: Received: from poczta1.linux.webserwer.pl (poczta1.linux.webserwer.pl
02: 	[83.142.47.108]) 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from [196.3.183.72] (helo=User) by poczta.webserwer.pl with esmtpa
05: 	(Exim 4.69) (envelope-from <japata [at] qUIDels.webserwer.pl>) ID: [UID filtered]

IP: 196.3.183.72 ---> Suburban telecom, Nigeria

Post geht an:

- kjz

Wieder mal:

header:
01: Received: from mail07.syd.optusnet.com.au (mail07.syd.optusnet.com.au
02: 	[211.29.132.188]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No
03: 	client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: Received: from User ([41.211.228.22]) (authenticated sender mjdhgfa) 	by
05: 	mail07.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
IP: 41.211.228.22 ---> DIRECT ON PC LTD, Nigeria

Post geht an:

Muguphon:

+44 70359 46238 ---> Open Telecom International Ltd, UK

+44 70359 48155 ---> Open Telecom International Ltd., UK

+44 870 28 7323 ---> Nationwide Residential Ltd, UK

- kjz

Jener hier hat besonders viele Adressen zum spielen....

header:
01: Received: from descpa.com (24-240-175-174.static.hckr.nc.charter.com
02: 	[24.240.175.174]) by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: Received: from User ([213.255.218.244]) by descpa.com with Microsoft
04: 	SMTPSVC(6.0.3790.3959); Fri, 17 Apr 2009 xx:xx:xx -0400
IP: 213.255.218.244 ---> Cyberspace Link 3 Lagos, Nigeria/SkyVision Network

Post geht an:

Muguphon: +234-702-622-5841 ---> Pank Shin, Nigeria

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen