Mugu Dubletten

neue Meldungen von der 'Mugu-Front':

header:

01: Received: from kirsi1.inet.fi (mta-out.inet.fi [195.156.147.13])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  6 Dec 2010 xx:xx:xx +0100 (CET)
04: Received: from User (41.203.64.242) by kirsi1.inet.fi (8.5.122)
05: (authenticated as kuivta-1)
06:         ID: [ID filtered]

IP: 41.203.64.242 ---> GLO-Mobile Network Services, Nigeria

header:

01: Received: from bay0-omc2-s21.bay0.hotmail.com
02: (bay0-omc2-s21.bay0.hotmail.com [65.54.190.96])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Mon,  6 Dec 2010 xx:xx:xx +0100 (CET)
05: Received: from BAY130-W21 ([65.54.190.125]) by
06: bay0-omc2-s21.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Mon, 6 Dec 2010 xx:xx:xx -0800

X-Originating-IP: [173.208.36.232] ---> Ubiquity/Nobis




gecrackter Freenet-Account:

header:

01: Received: from mout4.freenet.de (mout4.freenet.de [195.4.92.94])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon,  6 Dec 2010 xx:xx:xx +0100 (CET)
06: Received: from [195.4.92.17] (helo=7.mx.freenet.de)
07: 	by mout4.freenet.de with esmtpa (ID: [ID filtered]
08: (Exim 4.72 #3)
09: 	ID: [ID filtered]
10: Received: from [82.128.85.146] (port=50612 helo=User)
11: 	by 7.mx.freenet.de with esmtpa (ID: [ID filtered]
12: (Exim 4.72 #3)
13: 	ID: [ID filtered]

IP: 82.128.85.146 ---> Multilinks Telecommunications Limited, Nigeria








gecrackter Schul-Account:

header:

01: Received: from EXCH-ETS-1.vusd.org (exch-ets-1.vusd.org [206.78.7.157])
02: 	(using TLSv1 with cipher AES128-SHA (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Tue,  7 Dec 2010 xx:xx:xx +0100 (CET)
06: Received: from EXCH-JNL-1.vusd (10.33.120.13) by exch-ets-1.vusd.org
07:  (206.78.7.157) with Microsoft SMTP Server (TLS) ID: [ID filtered]
08: Dec 2010
09:  xx:xx:xx -0800
10: Received: from EXCH-MBC-1.vusd ([fe80::285a:2887:aae1:d7fe]) by
11:  EXCH-JNL-1.vusd ([::1]) with mapi; Tue, 7 Dec 2010 xx:xx:xx -0800

header:

01: Received: from mail.dalkia.hu (mail.dalkia.hu [213.163.29.219])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue,  7 Dec 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([82.128.62.93]) by mail.dalkia.hu with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Tue, 7 Dec 2010 xx:xx:xx +0100

IP: 82.128.62.93 ---> Multilinks Telecommunications Limited, Nigeria






gecrackter Account:

header:

01: Received: from mail.sibtea.ru (mail.sibtea.ru [195.189.218.251])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu,  9 Dec 2010 xx:xx:xx +0100 (CET)
04: Received: from User ([41.203.64.241])
05: 	(authenticated user larisa [at] sibtea.ru)
06: 	by mail.sibtea.ru (Kerio MailServer 6.4.1 patch 1);
07: 	Thu, 9 Dec 2010 xx:xx:xx +0600

IP: 41.203.64.241 ---> GLO-Mobile Network Services, Nigeria






gecrackter Account:

header:

01: Received: from outbound-mail02.westnet.com.au (EHLO
02: outbound-mail02.westnet.com.au) [203.10.1.243]
03:   by mx0.gmx.net (mx079) with SMTP; 09 Dec 2010 xx:xx:xx +0100
04: Received: from unknown (HELO webmail04.westnet.com.au) ([192.168.39.44])
05:   by outbound-mail02.westnet.com.au with ESMTP; 09 Dec 2010 xx:xx:xx +0800

- kjz

Kleiner Nachschlag:

header:

01: Received: from mx-ll-58.147.89-7.static.tttmaxnet.com (EHLO
02: mail.goldensoft.co.th) [58.147.89.7]
03:   by mx0.gmx.net (mx050) with SMTP; 10 Dec 2010 xx:xx:xx +0100
04: Received: from User ([82.128.16.199])
05:         by mail.goldensoft.co.th (IceWarp 9.1.0) with ASMTP ID: [ID filtered]
06:         Sat, 11 Dec 2010 xx:xx:xx +0700

IP: 82.128.16.199 ---> ml82.128.16.199.multilinks.com, Nigeria

header:

01: Received: from sbs2005.sbsmenis.edu.pl (hbr68.internetdsl.tpnet.pl
02: [79.187.43.68])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 11 Dec 2010 xx:xx:xx +0100 (CET)
05: Received: from User ([210.110.117.245]) by sbs2005.sbsmenis.edu.pl with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Wed, 1 Dec 2010 xx:xx:xx +0100

header:

01: Received: from 58.108.172.9.optusnet.com.au (EHLO aveng.com.au)
02: [58.108.172.9]
03:   by mx0.gmx.net (mx084) with SMTP; 12 Dec 2010 xx:xx:xx +0100
04: Received: from User ([76.164.192.14]) by aveng.com.au with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Mon, 13 Dec 2010 xx:xx:xx +1000

header:

01: Received: from 58.108.172.9.optusnet.com.au (EHLO aveng.com.au)
02: [58.108.172.9]
03:   by mx0.gmx.net (mx083) with SMTP; 12 Dec 2010 xx:xx:xx +0100
04: Received: from User ([76.164.192.14]) by aveng.com.au with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Mon, 13 Dec 2010 xx:xx:xx +1000

IP: 76.164.192.14 ---> 72.164.192.14.svservers.com








- kjz

So, da wären sie wieder...

header:

01: Received: from aveng.com.au (58.108.172.9.optusnet.com.au [58.108.172.9])
02: 	by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0100
05: Received: from User ([76.164.192.14]) by aveng.com.au with Microsoft
06: SMTPSVC(6.0.3790.4675);
07: 	 Mon, 13 Dec 2010 xx:xx:xx +1000

IP: 76.164.192.14 ---> 72.164.192.14.svservers.com

header:

01: Received: from mail.nsi.sg (dyn60-b59-access.superdsl.com.sg [202.73.59.60])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 14 Dec 2010 xx:xx:xx +0100 (CET)
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.nsi.sg (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon, 13 Dec 2010 xx:xx:xx -0800 (PST)
07: Received: from mail.nsi.sg ([127.0.0.1])
08: 	by localhost (mail.nsi.sg [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from User (mpc1.materialsprocessing.com [209.23.159.50])
11: 	by mail.nsi.sg (Postfix) with ESMTPA ID: [ID filtered]
12: 	Mon, 13 Dec 2010 xx:xx:xx -0800 (PST)

header:

01: Received: from nskntmtas05p.mx.bigpond.com (nskntmtas05p.mx.bigpond.com
02: [61.9.168.149])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 14 Dec 2010 xx:xx:xx +0100 (CET)
05: Received: from nskntotgx03p.mx.bigpond.com ([121.13.149.153])
06:           by nskntmtas05p.mx.bigpond.com with ESMTP
07:           id
08: <20101214135100.BBEA24614.nskntmtas05p.mx.bigpond.com [at] nskntotgx03p.mx.bigpond.com>;
09:           Tue, 14 Dec 2010 xx:xx:xx +0000
10: Received: from User ([121.13.149.153]) by nskntotgx03p.mx.bigpond.com
11:           with ESMTP
12:           ID: [ID filtered]
13:           Tue, 14 Dec 2010 xx:xx:xx +0000

IP: 121.13.149.153 ---> CHINANET Guangdong

header:

01: Received: from web121405.mail.ne1.yahoo.com (HELO
02: web121405.mail.ne1.yahoo.com) [98.138.90.99]
03:   by mx0.gmx.net (mx036) with SMTP; 15 Dec 2010 xx:xx:xx +0100
04: Received: (qmail 47541 invoked by UID: [UID filtered]
05: Received: from [41.216.40.128] by web121405.mail.ne1.yahoo.com via HTTP;
06: Wed, 15 Dec 2010 xx:xx:xx PST

IP: 41.216.40.128 ---> BENIN TELECOM

header:

01: Received: from hq-smtp-01.mofa.gov.qa (mail1.mofa.gov.qa [206.82.133.222])
02: 	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 16 Dec 2010 xx:xx:xx +0100 (CET)
06: Received: from exchange.MOFA.LOCAL (172.16.50.151) by hq-smtp-01.mofa.gov.qa
07:  (172.31.1.10) with Microsoft SMTP Server ID: [ID filtered]
08:  xx:xx:xx +0300

header:

01: Received: from Static-IP-cr19084237250.cable.net.co (EHLO
02: servidor.daodigital.com) [190.84.237.250]
03:   by mx0.gmx.net (mx108) with SMTP; 17 Dec 2010 xx:xx:xx +0100
04: Received: from User (live.com [184.154.8.138] (may be forged))
05: 	(authenticated bits=0)
06: 	by servidor.daodigital.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Thu, 16 Dec 2010 xx:xx:xx -0500

header:

01: Received: from Static-IP-cr19084237250.cable.net.co (EHLO
02: servidor.daodigital.com) [190.84.237.250]
03:   by mx0.gmx.net (mx108) with SMTP; 17 Dec 2010 xx:xx:xx +0100
04: Received: from User (live.com [184.154.8.138] (may be forged))
05: 	(authenticated bits=0)
06: 	by servidor.daodigital.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Thu, 16 Dec 2010 xx:xx:xx -0500

- kjz

Des weiteren hätte ich noch zu bieten:

header:

01: Received: from omr-m32.mx.aol.com (EHLO omr-m32.mx.aol.com) [64.12.143.152]
02:   by mx0.gmx.net (mx086) with SMTP; 23 Dec 2010 xx:xx:xx +0100
03: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com
04: [64.12.102.138])
05: 	by omr-m32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Thu, 23 Dec 2010 xx:xx:xx -0500
07: Message-ID: [ID filtered]
08: Received: from mtaout-db03.r1000.mx.aol.com
09: (mtaout-db03.r1000.mx.aol.com [172.29.51.195])
10: 	by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
11: E6E201C00021C;
12: 	Thu, 23 Dec 2010 xx:xx:xx -0500 (EST)
13: Received: from User (rrcs-24-106-56-178.west.biz.rr.com [24.106.56.178])
14: 	by mtaout-db03.r1000.mx.aol.com (MUA/Third Party Client Interface) with
15: ESMTPA ID: [ID filtered]
16: 	Thu, 23 Dec 2010 xx:xx:xx -0500 (EST)

header:

01: Received: from mail.spammotel.com (EHLO spammotel.com) [209.190.47.10]
02:   by mx0.gmx.net (mx046) with SMTP; 24 Dec 2010 xx:xx:xx +0100
03: Received: by spammotel.com (Postfix, from userID: [ID filtered]
04: 	ID: [ID filtered]
05: Received: from nm25-vm0.bullet.mail.sp2.yahoo.com
06: (nm25-vm0.bullet.mail.sp2.yahoo.com [98.139.91.228])
07: 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
08: 	for xxxxx; Thu, 23 Dec 2010 xx:xx:xx -0500 (EST)
09: Received: from [98.139.91.61] by nm25.bullet.mail.sp2.yahoo.com with
10: NNFMP; 23 Dec 2010 xx:xx:xx -0000
11: Received: from [98.139.91.37] by tm1.bullet.mail.sp2.yahoo.com with
12: NNFMP; 23 Dec 2010 xx:xx:xx -0000
13: Received: from [127.0.0.1] by omp1037.mail.sp2.yahoo.com with NNFMP; 23
14: Dec 2010 xx:xx:xx -0000
15: Received: from [41.203.239.224] by web44707.mail.sp1.yahoo.com via HTTP;
16: Thu, 23 Dec 2010 xx:xx:xx PST

IP: 41.203.239.224 ---> POOL ADSL ONATEL, BF






- kjz

header:

01: Received: from mail.accesstime.cl (accesstime.cl [127.0.0.1])
02:     by mail.accesstime.cl (Postfix) with ESMTP ID: [ID filtered]
03:     Thu, 30 Dec 2010 xx:xx:xx -0300 (CLST)
04: From: "OFFICE OF THE SENATE HOUSE" <info [at] atm.com>
05: Reply-To: atmmasterdeliveringservice [at] yahoo.com.hk
06: Subject: RE:
07: Date: Thu, 30 Dec 2010 xx:xx:xx -0400
08: Message-ID: [ID filtered]
09: X-Mailer: Open WebMail 2.51 20050228
10: X-OriginatingIP: 41.217.69.5 (vespinos)
11: MIME-Version: 1.0
12: Content-Type: text/plain;
13:     charset=iso-8859-1
14: To: undisclosed-recipients:;
15: X-Junkmail-SD-Raw: score=unknown,
16:     refid=str=0001.0A0B0208.4D1C8F82.0171,ss=1,pt=DBB_66867,fgs=0,
17:     ip=201.238.243.147,
18:     so=2009-06-02 xx:xx:xx,
19:     dmn=5.7.1/2009-08-27,
20:     mode=single engine
21: Return-Path: info [at] atm.com

Zitat:

---

The office of the senate house of Assembly has chosen you by the board
oftrustees that you have just been awarded ATM Master Card Value of $6.8
Million USD Contact Us with Details:-

Name:____________
Adress:____________
Tel:____________
Country:____________

---

IP: 41.217.69.5 = ZOOM Mobile Nigeria Ltd






Eniac

aus meiner Mugu-Liste:

der Yahoo/ATT-Mugu:

header:

01: Received: from nm15-vm1.bullet.mail.sp2.yahoo.com
02: (nm15-vm1.bullet.mail.sp2.yahoo.com [98.139.91.209])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 19 Dec 2010 xx:xx:xx +0100 (CET)
05: Received: from [98.139.91.66] by nm15.bullet.mail.sp2.yahoo.com with
06: NNFMP; 19 Dec 2010 xx:xx:xx -0000
07: Received: from [98.139.91.37] by tm6.bullet.mail.sp2.yahoo.com with
08: NNFMP; 19 Dec 2010 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1037.mail.sp2.yahoo.com with NNFMP; 19
10: Dec 2010 xx:xx:xx -0000
11: Received: (qmail 59048 invoked by UID: [UID filtered]
12: Received: from [41.114.168.172] by web180615.mail.sp1.yahoo.com via
13: HTTP; Sun, 19 Dec 2010 xx:xx:xx PST

IP: 41.114.168.172 ---> MTN Business Solutions, ZA

header:

01: Received: from imr-ma05.mx.aol.com (imr-ma05.mx.aol.com [64.12.100.31])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 20 Dec 2010 xx:xx:xx +0100 (CET)
04: Received: from mtaout-db03.r1000.mx.aol.com
05: (mtaout-db03.r1000.mx.aol.com [172.29.51.195])
06: 	by imr-ma05.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Sun, 19 Dec 2010 xx:xx:xx -0500
08: Message-ID: [ID filtered]
09: Received: from User (unknown [216.119.149.41])
10: 	by mtaout-db03.r1000.mx.aol.com (MUA/Third Party Client Interface) with
11: ESMTPA ID: [ID filtered]
12: 	Sun, 19 Dec 2010 xx:xx:xx -0500 (EST)

IP: 216.119.149.41 ---> 216.119.149.41.static.midphase.com

header:

01: Received: from mail.barceloscia.com.br (EHLO barceloscia.com.br)
02: [189.52.11.226]
03:   by mx0.gmx.net (mx021) with SMTP; 21 Dec 2010 xx:xx:xx +0100
04: BrmaOutput: PTR [70.25.1.190] (may be forged)
05: Received: from User (PTR [70.25.1.190] (may be forged))
06: 	(authenticated bits=0)
07: 	by barceloscia.com.br (8.12.11.20060308/8.12.11) with ESMTP id
08: oBL5d1b6025920;
09: 	Tue, 21 Dec 2010 xx:xx:xx -0200

header:

01: Received: from barceloscia.com.br ([189.52.11.226])
02: 	by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0100
05: BrmaOutput: PTR [70.25.1.190] (may be forged)
06: Received: from User (PTR [70.25.1.190] (may be forged))
07: 	(authenticated bits=0)
08: 	by barceloscia.com.br (8.12.11.20060308/8.12.11) with ESMTP id
09: oBL5d1b6025920;
10: 	Tue, 21 Dec 2010 xx:xx:xx -0200

header:

01: Received: from mail.barceloscia.com.br (EHLO barceloscia.com.br)
02: [189.52.11.226]
03:   by mx0.gmx.net (mx090) with SMTP; 21 Dec 2010 xx:xx:xx +0100
04: BrmaOutput: PTR [70.25.1.190] (may be forged)
05: Received: from User (PTR [70.25.1.190] (may be forged))
06: 	(authenticated bits=0)
07: 	by barceloscia.com.br (8.12.11.20060308/8.12.11) with ESMTP id
08: oBL5d1Ue025919;
09: 	Tue, 21 Dec 2010 xx:xx:xx -0200

Muguphon: +44 702 408 1092 ---> Magrathea Telecommunications Limited, UK


auch Kärcher ist betroffen:

header:

01: Received: from mail.karcher-asia.com (EHLO mail.karcher-asia.com)
02: [58.185.113.149]
03:   by mx0.gmx.net (mx007) with SMTP; 22 Dec 2010 xx:xx:xx +0100
04: Received: from User ([92.63.13.40]) by karcher01.karcher-asia.com with
05: MailEnable ESMTP; Wed, 22 Dec 2010 xx:xx:xx +0800

IP: 92.63.13.40 ---> 92-63-13-40.nethouse.net




gecracktes SquirrelMail:

header:

01: Received: from coise.univ-st-etienne.fr (coise.univ-st-etienne.fr
02: [161.3.1.3])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)
05: Received: from localhost (localhost [127.0.0.1])
06: 	by coise.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]
07: 	Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)
08: X-Virus-Scanned: Debian amavisd-new at univ-st-etienne.fr
09: Received: from coise.univ-st-etienne.fr ([127.0.0.1])
10: 	by localhost (coise.univ-st-etienne.fr [127.0.0.1]) (amavisd-new, port
11: 10024)
12: 	with LMTP ID: [ID filtered]
13: Received: from onzon.univ-st-etienne.fr (onzon.univ-st-etienne.fr
14: [161.3.152.26])
15: 	by coise.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]
16: 	Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)
17: Received: from lourdon.univ-st-etienne.fr (lourdon.univ-st-etienne.fr
18: [161.3.152.11])
19: 	by onzon.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]
20: 	Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)
21: X-Virus-Scanned: Debian amavisd-new at lourdon.univ-st-etienne.fr
22: Received: from onzon.univ-st-etienne.fr ([161.3.152.26])
23: 	by lourdon.univ-st-etienne.fr (lourdon.univ-st-etienne.fr
24: [161.3.152.11]) (amavisd-new, port 10024)
25: 	with LMTP ID: [ID filtered]
26: Received: by onzon.univ-st-etienne.fr (Postfix, from userID: [ID filtered]
27: 	ID: [ID filtered]
28: Received: from arcon.univ-st-etienne.fr (beal.univ-st-etienne.fr
29: [161.3.152.36])
30: 	by onzon.univ-st-etienne.fr (Postfix) with ESMTP ID: [ID filtered]
31: 	Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)
32: Received: from 74.115.1.5
33:         (SquirrelMail authenticated user surrel)
34:         by arcon.univ-st-etienne.fr with HTTP;
35:         Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)

IP: 74.115.1.5 ---> 74-115-1-5.anchorfree.com








2 gecrackte Accounts:

header:

01: Received: from mout1.freenet.de (EHLO mout1.freenet.de) [195.4.92.91]
02:   by mx0.gmx.net (mx015) with SMTP; 22 Dec 2010 xx:xx:xx +0100
03: Received: from [195.4.92.19] (helo=9.mx.freenet.de)
04: 	by mout1.freenet.de with esmtpa (ID: [ID filtered]
05: (Exim 4.72 #3)
06: 	ID: [ID filtered]
07: Received: from [212.95.45.64] (port=2832 helo=User)
08: 	by 9.mx.freenet.de with esmtpa (ID: [ID filtered]
09: (Exim 4.72 #3)
10: 	ID: [ID filtered]

IP: 212.95.45.64 ---> NETDIRECT-NET

header:

01: Received: from mout0.freenet.de (EHLO mout0.freenet.de) [195.4.92.90]
02:   by mx0.gmx.net (mx021) with SMTP; 22 Dec 2010 xx:xx:xx +0100
03: Received: from [195.4.92.18] (helo=8.mx.freenet.de)
04: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.72 #3)
06: 	ID: [ID filtered]
07: Received: from [178.33.149.164] (port=58488 helo=User)
08: 	by 8.mx.freenet.de with esmtpa (ID: [ID filtered]
09: 587) (Exim 4.72 #3)
10: 	ID: [ID filtered]

IP: 178.33.149.164 ---> OVH, FR








gecracktes SquirrelMail:

header:

01: Received: from cpanel.pesat.net.ID: [ID filtered]
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu, 23 Dec 2010 xx:xx:xx +0100 (CET)
06: Received: from localhost ([127.0.0.1] helo=www.pesat.net.id)
07: 	by cpanel.pesat.net.ID: [ID filtered]
08: 	(envelope-from <eurobank [at] eurobank.com>)
09: 	ID: [ID filtered]
10: Received: from 87.203.72.251 ([87.203.72.251])
11:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
12:         by www.pesat.net.id with HTTP;
13:         Thu, 23 Dec 2010 xx:xx:xx +0700

IP: 87.203.72.251 ---> athedsl-81837.home.otenet.gr






- kjz

Auch die Mugus lassen nach:

header:

01: Received: from mail.belnet.ru (EHLO mail.belnet.ru) [82.151.104.66]
02:   by mx0.gmx.net (mx008) with SMTP; 03 Jan 2011 xx:xx:xx +0100
03: Received: from User [80.13.58.28] by mail.belnet.ru with ESMTP
04:   (SMTPD-10.02) ID: [ID filtered]

IP: 80.13.58.28 ---> LRouen-151-73-27-28.w80-13.abo.wanadoo.fr

header:

01: Received: from mx4.hotmail.com (213.37.86.97.static.user.ono.com
02: [213.37.86.97])
03: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
04: 	ID: [ID filtered]

header:

01: Received: from omr-m33.mx.aol.com (EHLO omr-m33.mx.aol.com) [64.12.143.145]
02:   by mx0.gmx.net (mx031) with SMTP; 06 Jan 2011 xx:xx:xx +0100
03: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com
04: [64.12.102.138])
05: 	by omr-m33.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Thu, 6 Jan 2011 xx:xx:xx -0500
07: Message-ID: [ID filtered]
08: Received: from mtaout-da02.r1000.mx.aol.com
09: (mtaout-da02.r1000.mx.aol.com [172.29.51.130])
10: 	by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
11: AE3071C010D92;
12: 	Thu,  6 Jan 2011 xx:xx:xx -0500 (EST)
13: Received: from User (75-142-191-188.dhcp.ftwo.tx.charter.com
14: [75.142.191.188])
15: 	by mtaout-da02.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: 	Thu,  6 Jan 2011 xx:xx:xx -0500 (EST)

header:

01: Received: from emztd1056.com (unknown [203.92.76.202])
02: 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Thu,  6 Jan 2011 xx:xx:xx -0500 (EST)

Muguphon: +34-688-221-505 ---> mobile number, ES


- kjz

Ein Nachügler noch:

header:

01: Received: from ab17c2160.com (unknown [203.92.76.202])
02: 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Thu,  6 Jan 2011 xx:xx:xx -0500 (EST)

IP: 203.92.76.202 ---> host-203-92-76-202.lga.net.sg







Muguphon: +34-688-221-505 ---> mobile number, ES


- kjz

In die Mugu-Liste dürfen sich einreihen:

header:

01: Received: from mail.ultimare.com (EHLO mail.ultimare.com) [216.150.17.53]
02:   by mx0.gmx.net (mx118) with SMTP; 10 Jan 2011 xx:xx:xx +0100
03: Received: from User [216.45.51.235] by ultimare.com with ESMTP
04:   (SMTPD-9.20) ID: [ID filtered]

IP: 216.45.51.235 ---> OC3 Networks & Web Solutions, LLC/Quadranet






gecrackter SquirrelMail-Account:

header:

01: Received: from cpanel.pesat.net.ID: [ID filtered]
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon, 10 Jan 2011 xx:xx:xx +0100 (CET)
06: Received: from localhost ([127.0.0.1] helo=www.pesat.net.id)
07: 	by cpanel.pesat.net.ID: [ID filtered]
08: 	(envelope-from <eurobank [at] eurobank.com>)
09: 	ID: [ID filtered]
10: Received: from 94.65.210.222 ([94.65.210.222])
11:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
12:         by www.pesat.net.id with HTTP;
13:         Tue, 11 Jan 2011 xx:xx:xx +0700

IP: 94.65.210.222 ---> ppp-94-65-210-222.home.otenet.gr






wieder gecrackter SquirrelMail-Account:

header:

01: Received: from mta03.eastlink.ca (EHLO mta03.eastlink.ca) [24.224.136.9]
02:   by mx0.gmx.net (mx095) with SMTP; 11 Jan 2011 xx:xx:xx +0100
03: Received: from ip01.eastlink.ca ([unknown] [24.222.39.10])
04:  by mta03.eastlink.ca (Sun Java(tm) System Messaging Server 7.3-11.01 64bit
05:  (built Sep  1 2009)) with ESMTP ID: [ID filtered]
06:  xxxxx; Tue, 11 Jan 2011 xx:xx:xx -0400 (AST)
07: Received: from mail.amtelecom.net ([67.58.192.15])
08:  by ip01.eastlink.ca with ESMTP; Tue, 11 Jan 2011 xx:xx:xx -0400
09: Received: (qmail 29608 invoked from network); Tue, 11 Jan 2011 xx:xx:xx
10: +0000
11: Received: from localhost (HELO mail.amtelecom.net) ([127.0.0.1])
12:  (envelope-sender <volksmotors [at] volkswagen.co.uk>)
13:  by mail.amtelecom.net (qmail-ldap-1.03) with SMTP for <poor [at] spamvictim.tld>;
14:  Tue, 11 Jan 2011 xx:xx:xx +0000
15: Received: from 65.49.14.60
16:  (SquirrelMail authenticated user averhaeg [at] amtelecom.net)
17:  by mail.amtelecom.net with HTTP; Tue, 11 Jan 2011 xx:xx:xx -0500 (EST)

header:

01: Received: from host.advancednetworksystems.net
02: (host.advancednetworksystems.net [209.239.42.40])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 13 Jan 2011 xx:xx:xx +0100 (CET)
05: Received: from localhost.localdomain (localhost [127.0.0.1])
06: 	by host.advancednetworksystems.net (8.12.11.20060614/8.12.10) with
07: ESMTP ID: [ID filtered]
08: 	Wed, 12 Jan 2011 xx:xx:xx -0500

X-OriginatingIP: 82.128.25.87 (test) ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from omr-m32.mx.aol.com (EHLO omr-m32.mx.aol.com) [64.12.143.152]
02:   by mx0.gmx.net (mx001) with SMTP; 13 Jan 2011 xx:xx:xx +0100
03: Received: from oms-mb01.r1000.mx.aol.com (oms-mb01.r1000.mx.aol.com
04: [64.12.102.137])
05: 	by omr-m32.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Thu, 13 Jan 2011 xx:xx:xx -0500
07: Message-ID: [ID filtered]
08: Received: from mtaout-ma06.r1000.mx.aol.com
09: (mtaout-ma06.r1000.mx.aol.com [172.29.41.6])
10: 	by oms-mb01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
11: 809101C0000B7;
12: 	Thu, 13 Jan 2011 xx:xx:xx -0500 (EST)
13: Received: from User (adsl-065-013-197-051.sip.sav.bellsouth.net
14: [65.13.197.51])
15: 	by mtaout-ma06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: 	Thu, 13 Jan 2011 xx:xx:xx -0500 (EST)

gecrackter Uni-Account:

header:

01: Received: from EMAILCAS01.bsu.edu (emailcas01.bsu.edu [147.226.7.66])
02: 	(using TLSv1 with cipher RC4-MD5 (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Fri, 14 Jan 2011 xx:xx:xx +0100 (CET)
06: Received: from User (192.168.1.1) by EMAILCAS01.bsu.edu (192.168.1.15) with
07:  Microsoft SMTP Server ID: [ID filtered]

header:

01: Received: from mail.ecustoms.mn (mail.ecustoms.mn [202.131.234.5])
02: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 13 Jan 2011 xx:xx:xx +0100 (CET)
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.ecustoms.mn (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 14 Jan 2011 xx:xx:xx +0800 (ULAT)
07: X-Virus-Scanned: amavisd-new at ecustoms.mn
08: Received: from mail.ecustoms.mn ([127.0.0.1])
09: 	by localhost (mail.ecustoms.mn [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from mail.ecustoms.mn (mail.ecustoms.mn [192.168.249.97])
12: 	by mail.ecustoms.mn (Postfix) with ESMTP ID: [ID filtered]
13: 	Fri, 14 Jan 2011 xx:xx:xx +0800 (ULAT)

- kjz

Bei den Mugus gibt es noch Zuwachs:

header:

01: Received: from 66-189-23-129.static.oxfr.ma.charter.com (EHLO
02: davidfrenchmusic.com) [66.189.23.129]
03:   by mx0.gmx.net (mx006) with SMTP; 13 Jan 2011 xx:xx:xx +0100
04: Received: from User ([::ffff:217.77.222.227])
05: 	by davidfrenchmusic.com with ESMTP; Thu, 13 Jan 2011 xx:xx:xx -0500

IP: 217.77.222.227 ---> static-217-77-222-227.wildpark.net






gecrackter Account:

header:

01: Received: from sprite.amon-co.cz (EHLO sprite.amon-co.cz) [93.99.121.123]
02:   by mx0.gmx.net (mx107) with SMTP; 13 Jan 2011 xx:xx:xx +0100
03: Received: from User ([202.125.140.37])
04: 	(authenticated user birgit [at] amon-co.cz)
05: 	by sprite.amon-co.cz (Kerio MailServer 6.4.2);
06: 	Thu, 13 Jan 2011 xx:xx:xx +0100

IP: 202.125.140.37 ---> lhr63.pie.net.pk





Muguphon: +234-7082909033 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from mail.plusnet.pl (EHLO mail.plusnet.pl) [212.2.120.80]
02:   by mx0.gmx.net (mx067) with SMTP; 14 Jan 2011 xx:xx:xx +0100
03: Received: from [64.207.18.74] (helo=User)
04: 	by plusnetfe3 with esmtpa (Exim 4.63)
05: 	(envelope-from <info [at] info.com>)
06: 	ID: [ID filtered]

IP: 64.207.18.74 ---> CBEYOND COMMUNICATIONS, LLC

header:

01: Received: from fmmailgate09.web.de (fmmailgate09.web.de [217.72.192.184])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 15 Jan 2011 xx:xx:xx +0100 (CET)
04: Received:  from fmmailgate06.web.de  ( [172.20.1.52])
05: 	by fmmailgate09.web.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 15 Jan 2011 xx:xx:xx +0100 (CET)
07: Received:  from mwmweb045  ( [172.20.18.54])
08: 	by fmmailgate06.web.de (Postfix) with ESMTP ID: [ID filtered]
09: 	Sat, 15 Jan 2011 xx:xx:xx +0100 (CET)
10: Received:  from [41.206.12.3]  by  mwmweb045  with HTTP; Sat Jan
11:  15 xx:xx:xx CET 2011

IP: 41.206.12.3 ---> MTN Nigeria





Muguphon: +2348183309807 ---> Nigeria


gecrackter Account:

header:

01: Received: from pitbull.bmi.net (EHLO pitbull.bmi.net) [216.38.25.2]
02:   by mx0.gmx.net (mx081) with SMTP; 16 Jan 2011 xx:xx:xx +0100
03: Received: from apache by pitbull.bmi.net with local (Exim 4.72)
04: 	(envelope-from <hansonbr [at] bmi.net>)
05: 	ID: [ID filtered]

header:

01: Received: from usloft2119.serverloft.com (EHLO
02: usloft2119.serverloft.com) [173.224.120.151]
03:   by mx0.gmx.net (mx022) with SMTP; 16 Jan 2011 xx:xx:xx +0100
04: Received: from [96.45.14.19] (helo=User)
05: 	by usloft2119.serverloft.com with esmtpa (Exim 4.69)
06: 	(envelope-from <farida01 [at] yahoo.com>)
07: 	ID: [ID filtered]

IP: 96.45.14.19 ---> h96-45-14-19-eidnet.org.14.45.96.in-addr.arpa






- kjz