Nun, die Mail ging an sales &at& open-telecom.co.uk und abuse &at& open-telecom.co.uk. Geantwortet hat dann ein Peter.... Das wird anscheinend tatsächlich gelesen.
- kjz
Druckbare Version
Dafür gibt's jetzt einen Mugu, der im Usenet erntet:
header:01: Received: from mail.spammotel.com (EHLO spammotel.com) [209.190.47.10] by02: mx0.gmx.net (mx053) with SMTP; 26 Feb 2009 xx:xx:xx +010003: Received: by spammotel.com (Postfix, from userID: [ID filtered]04: Received: from easternsolutionsnet.com (unknown [66.45.64.84]) by spammotel.com05: (Postfix) with ESMTP ID: [ID filtered]06: Received: from User (213.37.112.102.dyn.user.ono.com [213.37.112.102])07: (authenticated) by easternsolutionsnet.com (8.11.6/8.11.6) with ESMTP ID: [ID filtered]
Abgeworfen im span. Mugu-Paradies (213.37.112.102.dyn.user.ono.com).
Post geht an:
- kjz
Und wieder mal:
whois:Received: from firewall.localdomain (correo.gtcolombia.com [201.245.37.234]) by xxxxx (Postfix) with ESMTP id 262D6789003F for xxxxx; Fri, 27 Feb 2009 17:51:32 +0100 (CET)
Received: from gtcolombia.com (firewall.gtcolombia.com [127.0.0.1]) by firewall.localdomain (Postfix) with ESMTP id 7E18211541; Fri, 27 Feb 2009 11:21:17 -0500 (COT)
Man beachte:
X-OriginatingIP: 62.56.174.234 (infobmanga) ---> IL-IPPLANET/Gilat
Mal wieder die merkbefreiten Mugu-Freunde aus IL.
Post hätte gerne:
- kjz
Weiter geht's:
header:01: Received: from batelco.com.bh (cgpfe2.batelco.com.bh [193.188.97.110]) by xxxxx02: (Postfix) with ESMTP ID: [ID filtered]03: Received: from [196.3.183.73] (account emco [at] batelco.com.bh HELO User) by04: cgpfe2.batelco.com.bh (CommuniGate Pro SMTP 5.2.9) with ESMTPA ID: [ID filtered]
IP: 196.3.183.73 ---> Suburban telecom, Nigeria
Post geht an:
header:01: Received: from news.direclynx.net (EHLO db.direclynx.net) [65.64.8.6] by02: mx0.gmx.net (mx011) with SMTP; 28 Feb 2009 xx:xx:xx +010003: Received: from db.direclynx.net (db.direclynx.net [127.0.0.1]) by04: db.direclynx.net (8.13.8/8.13.8) with ESMTP ID: [ID filtered]05: Received: (from apache [at] localhost) by db.direclynx.net (8.13.8/8.13.8/Submit) ID: [ID06: filtered]07: X-Authentication-Warning: db.direclynx.net: apache set sender to08: info-data [at] british.co.uk using -f09: Received: from 41.220.75.230 ([41.220.75.230]) by webmail.direclynx.net (Horde10: MIME library) with HTTP for <poor [at] spamvictim.tld>; Fri, 27 Feb 2009 xx:xx:xx -0600
IP: 41.220.75.230 ---> MTN Nigeria
Post geht an:
Und eine M$oft Live Domain hat sich der Mugu auch noch erstellt:
header:01: Received: from tempo.di-net.ru (tempo.di-net.ru [213.248.12.5]) (using TLSv102: with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx (Postfix)03: with ESMTP ID: [ID filtered]04: Received: from localhost ([127.0.0.1] helo=webmail.msm.ru) by tempo.di-net.ru05: with esmtp (Exim 4.69) (envelope-from <info [at] nlh.org>) ID: [ID filtered]06: Received: from 41.220.75.3 (SquirrelMail authenticated user gratus [at] msm.ru) by07: webmail.msm.ru with HTTP; Sat, 28 Feb 2009 xx:xx:xx +0300 (MSK)
Die altbekannte Dauer-Mugu IP: 41.220.75.3 ---> mtnngprs.com/MTN Nigeria
Post geht an:
- kjz
Noch'en Mugu:
header:01: Received: from mail05.syd.optusnet.com.au (mail05.syd.optusnet.com.au02: [211.29.132.186]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No03: client certificate requested) by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: Received: from User (b180B.static.pacific.net.au [202.7.93.11]) (authenticated05: sender haysie1 [at] optusnet.com.au) by mail05.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID:06: [ID filtered]
Post geht an:
Muguphon: +234 1 7938496 ---> Multilinks, Nigeria
- kjz
Wieder mal:
header:01: Received: from smtp-out5.iol.cz (smtp-out5.iol.cz [194.228.2.77]) by xxxxx02: (Postfix) with ESMTP ID: [ID filtered]03: Received: from User (unknown [222.237.78.10]) by smtp-out5.iol.cz (Postfix)04: with ESMTP id05: 39BC05AE8F5; Sun, 1 Mar 2009 xx:xx:xx +0100 (CET)
IP: 222.237.78.10 ---> 222-237-78-10.tongkni.co.kr
Post geht an:
header:01: Received: from 62-48-115-144.adsl.ticino.com (EHLO02: SERVER1.SYTCO.SWISS.CH) [62.48.115.144] by mx0.gmx.net (mx042) with SMTP; 01 Mar 200903: xx:xx:xx +010004: Received: from User ([121.8.124.42]) by SERVER1.SYTCO.SWISS.CH with Microsoft05: SMTPSVC(6.0.3790.3959); Sat, 28 Feb 2009 xx:xx:xx +0100
Post geht an:
- kjz
Mugu hier, Mugu da....
header:01: Received: from linkserve.com (mighty.linkserve.com [195.166.237.3]) by xxxxx02: (Postfix) with ESMTP ID: [ID filtered]03: Received: from [92.41.98.205] (account office [at] atlantika.org.ng HELO User) by04: linkserve.com (CommuniGate Pro SMTP 4.2) with ESMTP ID: [ID filtered]05: Received-SPF: none receiver=linkserve.com; client-ip=92.41.98.205;06: envelope-from=reeecepp [at] yahoo.com
Erstaunlich, abgekippt über Linkserve (Nigeria), aber Einlieferer ist 92.41.98.205 ---> 92.41.98.205.sub.mbb.three.co.uk.
Post geht an:
- kjz
Katherine gibt keine Ruhe:
header:01: Received: from NS1.abissnet.al (ns1.abissnet.al [80.91.126.2]) by02: mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis) ID: [ID filtered]03: Received: from User ([218.90.161.189]) (authenticated bits=0) by04: NS1.abissnet.al (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
Post geht an:
header:01: Received: from jfhost.namliong.com.tw (unknown [60.190.137.218]) by xxxxx02: (Postfix) with ESMTP ID: [ID filtered]03: Received: from User ([196.3.183.73]) (authenticated) by jfhost.namliong.com.tw04: (8.10.1/8.10.1) with ESMTP ID: [ID filtered]
IP: 196.3.183.73 ---> Suburban telecom, Nigeria
Post geht an:
Muguphon: +234-806-762-3581 ---> MTN, Nigeria
- kjz
Nur leicht geänderte Masche vom christlichen Freemailer:
header:01: Received: from ecunet.org (mail.ecunet.org [69.2.213.90]) (using TLSv1 with02: cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by xxxxx03: (Postfix) with ESMTP ID: [ID filtered]04: Received-SPF: pass (ecunet.org: 192.168.0.92 is whitelisted)05: receiver=ecunet.org; client-ip=192.168.0.92; helo=ecunet-web-1.ecunet.org;06: envelope-from=fortune_dona3 [at] ecunet.org; x-software=spfmilter 0.9707: http://www.acme.com/software/spfmilter/ with libspf2-1.0.0;08: Received: from ecunet-web-1.ecunet.org (ecunet-web-1 [192.168.0.92]) by09: ecunet.org (8.14.1/8.14.1) with ESMTP ID: [ID filtered]10: Received: from ecunet-web-1.ecunet.org (localhost.localdomain [127.0.0.1]) by11: ecunet-web-1.ecunet.org (8.13.8/8.13.8) with ESMTP ID: [ID filtered]12: Received: (from httpd [at] localhost) by ecunet-web-1.ecunet.org (8.13.8/8.13.8/Submit) ID:13: [ID filtered]
Post geht an:
- kjz