Seite 36 von 138 ErsteErste ... 2634353637384686136 ... LetzteLetzte
Ergebnis 351 bis 360 von 1378

Thema: Mugu Dubletten

  1. #351
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    8.805

    Standard

    Das Mugu Wochenende zum zweiten:



    header:
    01: Received: from smtp.csonline.net (smtp.csonline.net [68.234.57.130])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Thu, 15 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from localhost (localhost.localdomain [127.0.0.1])
    05: by smtp.csonline.net (Postfix) with ESMTP ID: [ID filtered]
    06: Thu, 15 Oct 2009 xx:xx:xx -0400 (EDT)
    07: Received: from smtp.csonline.net ([127.0.0.1])
    08: by localhost (smtp.csonline.net [127.0.0.1]) (amavisd-new, port 10024)
    09: with ESMTP ID: [ID filtered]
    10: Received: from User (dsl-245-18-89.telkomadsl.co.za [41.245.18.89])
    11: by smtp.csonline.net (Postfix) with ESMTP ID: [ID filtered]
    12: Thu, 15 Oct 2009 xx:xx:xx -0400 (EDT)

    kevin@gala.net

    kevintowns29@gmail.com



    header:
    01: Received: from mail.dte.org.in (unknown [121.244.82.20])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Thu, 15 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: from 41.202.18.172 ([41.202.18.172])
    07: by mail.dte.org.in (Kerio MailServer 6.5.0);
    08: Wed, 14 Oct 2009 xx:xx:xx +0530

    IP: 41.202.18.172 ---> dhcp18172.myzipnet.com, Ghana

    mrdanielkwasi01@aol.com

    mrdanielkwasi01@rediffmail.com



    header:
    01: Received: from sl1.irserverland.com (EHLO server3.visshost.com)
    02: [66.197.202.64]
    03: by mx0.gmx.net (mx117) with SMTP; 16 Oct 2009 xx:xx:xx +0200
    04: Received: from [222.95.22.44] (helo=User)
    05: by server3.visshost.com with esmtpa (Exim 4.69)
    06: (envelope-from <angelazhou55 [at] gmail.com>)
    07: ID: [ID filtered]

    IP: 222.95.22.44 ---> CHINANET jiangsu

    angelazhou55@gmail.com

    stevezhong47@gmail.com


    wieder die Dreckskiste aus Kuba, zudem: gibt's noch einen Freemailer, den der Mugu nicht missbraucht hat....:


    header:
    01: Received: from mx.rimed.cu (mx.rimed.cu [200.55.156.166])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Fri, 16 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from mailer.rimed.cu (mailer.rimed.cu [200.55.156.173])
    05: by mx.rimed.cu (Postfix) with ESMTP ID: [ID filtered]
    06: Thu, 15 Oct 2009 xx:xx:xx -0400 (CDT)
    07: Received: from localhost (unknown [200.55.156.163])
    08: by mailer.rimed.cu (Postfix) with ESMTP ID: [ID filtered]
    09: Thu, 15 Oct 2009 xx:xx:xx +0200 (CEST)
    10: Received: from 41.217.2.7 ([41.217.2.7]) by webmail.rimed.cu (Horde
    11: Framework) with HTTP; Thu, 15 Oct 2009 xx:xx:xx -0400

    IP: 41.217.2.7 ---> ZOOM Mobile Nigeria Ltd.

    hlfxbankplc6@googlemail.com

    mrsagueda.carlos2@gmail.com

    internatioanltransfer@halifaxbnkplc.co.uk

    mrjohn.kerryhalifaxbnk@live.com

    Muguphon: +447024074742 ---> Magrathea Telecommunications Limited, UK

    Mugufax: +448447743247 ---> Magrathea Telecommunications Limited, UK


    Ms. Abacha ist auch mal wieder dabei, die Story hat doch schon soooon Bart:


    header:
    01: Received: from rmutt.ac.th (unknown [203.158.253.29])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sat, 17 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User [82.128.32.132] by rmutt.ac.th with ESMTP
    05: (SMTPD32-8.15) ID: [ID filtered]

    IP: 82.128.32.132 ---> Multilinks Telecommunications Limited, Nigeria

    abachamariam11@gmail.com

    abacha_mariam101@yahoo.com.hk


    Zweimal:


    header:
    01: Received: from homeliferomano.com (unknown [206.108.180.94])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Fri, 16 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User ([8.9.209.2]) by homeliferomano.com with Microsoft
    05: SMTPSVC(6.0.3790.3959);
    06: Thu, 15 Oct 2009 xx:xx:xx -0400


    header:
    01: Received: from ismu.baikal.ru (unknown [80.237.126.83])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sat, 17 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: from User ([8.9.209.2])
    07: (authenticated user administrator [at] ismu.baikal.ru)
    08: by ismu.baikal.ru (Kerio MailServer 6.6.2);
    09: Wed, 14 Oct 2009 xx:xx:xx +0900

    upsx@inmail24.com

    ups01@post.ro

    administrator@ismu.baikal.ru

    Muguphon: +234-8134779191 ---> Nigeria



    header:
    01: Received: from cluster-d.mailcontroller.altohiway.com
    02: (clusterd.mailcontroller.co.uk [213.83.66.161])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Sat, 17 Oct 2009 xx:xx:xx +0200 (CEST)
    07: Received: from rlya6d.mailcontroller.altohiway.com
    08: (localhost.localdomain [127.0.0.1])
    09: by rlya6d.mailcontroller.altohiway.com (MailController) with ESMTP id
    10: n9HH1no1011993
    11: for xxxxx; Sat, 17 Oct 2009 xx:xx:xx +0100
    12: Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
    13: by rlya6d.mailcontroller.altohiway.com (MailControl) ID: [ID filtered]
    14: for xxxxx; Sat, 17 Oct 2009 xx:xx:xx +0100
    15: Received: from server1.thisworks.com ([91.85.153.249])
    16: by rlya6d-eth0.mailcontroller.altohiway.com (envelope-sender
    17: <91.85.153.249 [at] thisworks.com>) (MIMEDefang) with ESMTP id
    18: n9HH1abe009912; Sat, 17 Oct 2009 xx:xx:xx +0100 (BST)
    19: Received: from User ([41.210.3.219]) by server1.thisworks.com with
    20: Microsoft SMTPSVC(6.0.3790.3959);
    21: Sat, 17 Oct 2009 xx:xx:xx +0100

    IP: 41.210.3.219 ---> Ghana Telecommunications Ltd.

    paulrichard1@hotmail.co.uk

    paulrichard003@yahoo.com


    Auch dieser Pharaonen-Mugu weiss kaum noch, welchen Freemailer er denn noch missbrauchen soll:


    header:
    01: Received: from www.cdnavigator.ru (mail.cdnavigator.ru [217.23.137.226])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sun, 18 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: from [196.205.200.12] (helo=User)
    07: by www.cdnavigator.ru with esmtpa (Exim 4.50)
    08: ID: [ID filtered]

    IP: 196.205.200.12 ---> host-196-205-200-12.static.link.com.eg

    fbialertfundsgov@aim.com

    NBECONTRACTORS@AOL.COm

    NBECONTRACTORPAYLINES@LIVE.COM

    NBEFOREIGNCONTRACTPAYMENT@GMAIL.COM

    Muguphon: +20117409022 ---> Etisalat, Egypt

    Mugufax: +20118303233 ---> Etisalat, Egypt


    die Madrid-Konnektion:


    header:
    01: Received: from mail.ontwerp.tv (unknown [196.3.166.165])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sun, 18 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User (84.125.255.250.dyn.user.ono.com [84.125.255.250])
    05: by mail.ontwerp.tv (Postfix) with ESMTP
    06: ID: [ID filtered]

    repseek_lee09@yahoo.com.hk

    willleecomuk@live.com

    lwilliam67@yahoo.com.hk

    Muguphon: +447031973788 ---> Magrathea Telecommunications Limited, UK


    gecracktes SquirrelMail:


    header:
    01: Received: from server.moestab.gov.bd (server.moestab.gov.bd [123.49.32.76])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sun, 18 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: from server.moestab.gov.bd (localhost.localdomain [127.0.0.1])
    07: by server.moestab.gov.bd (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
    08: Sun, 18 Oct 2009 xx:xx:xx +0600
    09: Received: (from apache [at] localhost)
    10: by server.moestab.gov.bd (8.13.1/8.13.1/Submit) ID: [ID filtered]
    11: Sun, 18 Oct 2009 xx:xx:xx +0600
    12: X-Authentication-Warning: server.moestab.gov.bd: apache set sender to
    13: sgthunt1 [at] inmail24.com using -f
    14: Received: from 41.189.6.245
    15: (SquirrelMail authenticated user dcpirojpur)
    16: by www.moestab.gov.bd with HTTP;
    17: Sun, 18 Oct 2009 xx:xx:xx +0600 (BDT)

    IP: 41.189.6.245 ---> SWIFT NETWORKS LIMITED, Nigeria

    sgthunt1@inmail24.com

    sgtrwhunt22@aim.com

    dcpirojpur@moestab.gov.bd


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  2. #352
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    8.805

    Standard

    So, dann wollen wir mal wieder, zum ersten:

    die Madrid-Konnektion:


    header:
    01: Received: from 174.160.216.87.static.jazztel.es (EHLO mx4.hotmail.com)
    02: [87.216.160.174]
    03: by mx0.gmx.net (mx118) with SMTP; 21 Oct 2009 xx:xx:xx +0200

    euro20098@aim.com

    bxbljzpuw@hotmail.com

    winningdesk2000@aim.com

    Muguphon: +34-634-075-732 ---> mobile number, Spain



    header:
    01: Received: from ss68.shared.server-system.net (EHLO
    02: ss68.shared.server-system.net) [216.70.70.3]
    03: by mx0.gmx.net (mx054) with SMTP; 21 Oct 2009 xx:xx:xx +0200
    04: Received: from User ([59.154.25.30])
    05: (authenticated bits=0)
    06: by ss68.shared.server-system.net (8.12.11.20060308/8.12.11) with ESMTP
    07: ID: [ID filtered]
    08: Wed, 21 Oct 2009 xx:xx:xx -0700

    IP: 59.154.25.30 ---> OPTUS Customer Network

    samego1@sify.com


    gecracktes SquirrelMail:


    header:
    01: Received: from hosting2.ticinocom.com (hosting2.ticinocom.com
    02: [195.190.166.23])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Wed, 21 Oct 2009 xx:xx:xx +0200 (CEST)
    07: X-ClientAddr: 127.0.0.1
    08: Received: from www.overlandtravel.com (localhost.localdomain [127.0.0.1])
    09: by hosting2.ticinocom.com (8.12.11/8.12.11) with ESMTP ID: [ID filtered]
    10: Wed, 21 Oct 2009 xx:xx:xx +0200
    11: Received: from 200.110.32.114 (proxying for 196.1.177.97)
    12: (SquirrelMail authenticated user poor [at] spamvictim.tld)
    13: by www.overlandtravel.com with HTTP;
    14: Wed, 21 Oct 2009 xx:xx:xx +0200 (CEST)

    IP: 196.1.177.97 ---> Nigerian Telecommunications Ltd.

    test@overlandtravel.com

    shellfedearcredit@ireland.ir

    shellfedearcredit@tokyo.ir

    Muguphon: +(44)702-406-5927 ---> Magrathea Telecommunications Limited, UK


    Einmal:


    header:
    01: Received: from mailout06.t-online.de (mailout06.t-online.de [194.25.134.19])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Wed, 21 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from fwd05.aul.t-online.de
    05: by mailout06.t-online.de with smtp
    06: ID: [ID filtered]
    07: Received: from User
    08: (bLi0AiZrZhTxkwIgMqZnEU3sf9D6-z3VuNnkxxp7fJwhMnGagHzOShNOooEBTNSQYr@[68.184.93.21])
    09: by fwd05.t-online.de
    10: with esmtp ID: [ID filtered]

    IP: 68.184.93.21 ---> 68-184-93-21.dhcp.smyr.ga.charter.com

    fbiworldunit1@yahoo.co.jp

    beckmann.p@t-online.de


    Zweimal:


    header:
    01: Received: from mailout06.t-online.de (mailout06.t-online.de [194.25.134.19])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Wed, 21 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from fwd09.aul.t-online.de
    05: by mailout06.t-online.de with smtp
    06: ID: [ID filtered]
    07: Received: from User
    08: (GQlUcwZe8h8SN8O09cR2PlsrLSq4DVcjQavWcIHyIs7X7yY5Do+Qi3OoGqKf1RpZ6N@[68.184.93.21])
    09: by fwd09.t-online.de
    10: with esmtp ID: [ID filtered]

    gsmsa.ha@t-online.de


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  3. #353
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    8.805

    Standard

    und zum Zweiten:


    header:
    01: Received: from cluster-d.mailcontroller.altohiway.com
    02: (clusterd.mailcontroller.co.uk [213.83.66.161])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Sun, 18 Oct 2009 xx:xx:xx +0200 (CEST)
    07: Received: from rlya6d.mailcontroller.altohiway.com
    08: (localhost.localdomain [127.0.0.1])
    09: by rlya6d.mailcontroller.altohiway.com (MailController) with ESMTP id
    10: n9ILXxwd022518
    11: for xxxxx; Sun, 18 Oct 2009 xx:xx:xx +0100
    12: Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
    13: by rlya6d.mailcontroller.altohiway.com (MailControl) ID: [ID filtered]
    14: for xxxxx; Sun, 18 Oct 2009 xx:xx:xx +0100
    15: Received: from server1.thisworks.com ([91.85.153.249])
    16: by rlya6d-eth0.mailcontroller.altohiway.com (envelope-sender
    17: <91.85.153.249 [at] thisworks.com>) (MIMEDefang) with ESMTP id
    18: n9ILUWSY021065; Sun, 18 Oct 2009 xx:xx:xx +0100 (BST)
    19: Received: from User ([41.210.27.181]) by server1.thisworks.com with
    20: Microsoft SMTPSVC(6.0.3790.3959);
    21: Sun, 18 Oct 2009 xx:xx:xx +0100

    IP: 41.210.27.181 ---> adsl27181.4u.com.gh

    attn.paulrichard@sify.com

    paulrichard001@live.com


    der Dauer-Mugu:


    header:
    01: Received: from llwa693.servidoresdns.net (dns1.progresoweb.com
    02: [217.76.155.37])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Mon, 19 Oct 2009 xx:xx:xx +0200 (CEST)
    05: Received: from User (aluminium.onspeed.com [212.100.250.217])
    06: by llwa693.servidoresdns.net (Postfix) with ESMTP
    07: ID: [ID filtered]
    08: Received: from mtnngprs.com (trwKDgKdhT [at] mtnngprs.com [41.220.75.3])
    09: by aluminium.onspeed.com (SlipStream SP Server 6.0.19
    10: built 2007/11/22 xx:xx:xx -0500 (EST)); Mon, 19 Oct 2009 xx:xx:xx +0100
    11: (BST)

    X-Originating-IP: [41.220.75.3] ---> MTN, Nigeria

    lorenzo_mr.antonio@yahoo.com.hk

    atoion_8771@yahoo.co.jp

    Muguphon: +44-701-118-3680 ---> PNC Telecom Services Limited, UK



    header:
    01: Received: from ns1.daddyfixit.net (unknown [207.36.201.86])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Tue, 20 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: (qmail 2969 invoked from network); 13 Oct 2009 xx:xx:xx -0000
    07: Received: from unknown (HELO User) (66.46.180.180)
    08: by ns1.daddyfixit.net with SMTP; 13 Oct 2009 xx:xx:xx -0000

    workkoffi4@sify.com

    workkoffi2@sify.com



    header:
    01: Received: from ctrealtor.com (mail.ctrealtor.com [69.0.22.54])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Tue, 20 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User ([41.189.6.245] RDNS failed) by ctrealtor.com with
    05: Microsoft SMTPSVC(6.0.3790.3959);
    06: Sun, 18 Oct 2009 xx:xx:xx -0400

    IP: 41.189.6.245 ---> SWIFT NETWORKS LIMITED, Nigeria

    yagomailsss2009@sbcglobal.net

    yagolottomailsss@sify.com

    crawwffordanderson@hotmail.com

    Muguphon: +221-778-026 728 ---> Orange Sénégal (Sonatel Mobiles)



    header:
    01: Received: from mail.tcm.pa.gov.br (ns2.tcm.pa.gov.br [200.242.199.80])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Tue, 20 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from localhost (localhost [127.0.0.1])
    05: by mail.tcm.pa.gov.br (Postfix) with ESMTP ID: [ID filtered]
    06: Mon, 19 Oct 2009 xx:xx:xx -0300 (BRT)
    07: Received: from mail.tcm.pa.gov.br ([127.0.0.1])
    08: by localhost (web.tcm.pa.gov.br [127.0.0.1]) (amavisd-new, port 10024)
    09: with ESMTP ID: [ID filtered]
    10: Received: from User (unknown [77.104.239.1])
    11: by mail.tcm.pa.gov.br (Postfix) with ESMTPA ID: [ID filtered]
    12: Mon, 19 Oct 2009 xx:xx:xx -0300 (BRT)

    IP: 77.104.239.1 ---> minaretnet.cz

    evelynmartins16@yahoo.com.hk

    mschoolfees@ymail.com



    header:
    01: Received: from rlmailsrv.rantrans.local (mail.rantrans.com.tr
    02: [195.128.35.13])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Tue, 20 Oct 2009 xx:xx:xx +0200 (CEST)
    05: Received: from User ([192.168.16.200]) by rlmailsrv.rantrans.local with
    06: Microsoft SMTPSVC(6.0.3790.3959);
    07: Tue, 20 Oct 2009 xx:xx:xx +0300

    atmcard.cb01@gmail.com

    jeffreylowis0@gmail.com


    gecracktes SquirrelMail:


    header:
    01: Received: from stdwww.iimahd.ernet.in (stdwww.iimahd.ernet.in
    02: [202.41.76.247])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Tue, 20 Oct 2009 xx:xx:xx +0200 (CEST)
    05: Received: (from apache [at] localhost)
    06: by stdwww.iimahd.ernet.in (8.11.6/8.11.6) ID: [ID filtered]
    07: Tue, 20 Oct 2009 xx:xx:xx +0530
    08: X-Authentication-Warning: stdwww.iimahd.ernet.in: apache set sender to
    09: drgoodman2009 [at] yahoo.com.hk using -f
    10: Received: from 41.211.233.159
    11: (SquirrelMail authenticated user jpsingh);
    12: by stdwww.iimahd.ernet.in with HTTP;
    13: Mon, 19 Oct 2009 xx:xx:xx -0700 (PDT)

    IP: 41.211.233.159 ---> Direct-on-PC Limited, Nigeria

    drgoodman2009@yahoo.com.hk

    drernestobi009@gmail.com

    jpsingh@iimahd.ernet.in



    header:
    01: Received: from webmail1.one.com (webmail1.b-one.net [195.47.247.29])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Wed, 21 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from webmail01.one.com (localhost [127.0.0.1])
    05: by webmail1.one.com (Postfix) with ESMTP ID: [ID filtered]
    06: Wed, 21 Oct 2009 xx:xx:xx +0200 (CEST)
    07: Received: from 148.233.239.24 (proxying for 41.220.75.16)
    08: (SquirrelMail authenticated user poor [at] spamvictim.tld)
    09: by webmail01.one.com with HTTP;
    10: Wed, 21 Oct 2009 xx:xx:xx +0200

    IP: 41.220.75.16 ---> MTN Nigeria

    mr.benhamcole001@msn.com

    2009thebigbiglotto@gmail.com


    gecracktes SquirrelMail, die Madrid-Konnektion:


    header:
    01: Received: from mail.nau.edu.ua (mail.nau.edu.ua [193.178.34.9])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Wed, 21 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: from localhost (localhost.localdomain [127.0.0.1])
    07: by mail.nau.edu.ua (Postfix) with ESMTP ID: [ID filtered]
    08: Tue, 20 Oct 2009 xx:xx:xx +0300 (EEST)
    09: X-Virus-Scanned: amavisd-new at nau.du.ua
    10: Received: from mail.nau.edu.ua ([127.0.0.1])
    11: by localhost (mail.nau.edu.ua [127.0.0.1]) (amavisd-new, port 10024)
    12: with ESMTP ID: [ID filtered]
    13: Received: from mail.nau.edu.ua (localhost.localdomain [127.0.0.1])
    14: by mail.nau.edu.ua (Postfix) with ESMTP ID: [ID filtered]
    15: Tue, 20 Oct 2009 xx:xx:xx +0300 (EEST)
    16: Received: from 77.208.44.210
    17: (SquirrelMail authenticated user poor [at] spamvictim.tld)
    18: by mail.nau.edu.ua with HTTP;
    19: Tue, 20 Oct 2009 xx:xx:xx +0300 (EEST)

    IP: 77.208.44.210 ---> 77-208-44-210.red-acceso.airtel.net/Vodafone, ES

    stp@nau.edu.ua

    Euromillionjacjport.com@nau.edu.ua

    euro2009@latinmail.com

    Muguphon: + 34 - 680 - 349 - 414 ---> Telefónica Móviles España, S.a.u.

    Mugufax: + 34 - 679 - 551 - 377 ---> Telefónica Móviles España, S.a.u.


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  4. #354
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    8.805

    Standard

    Das Mugu-Wochenende, erster Teil:


    gecrackter Uni-Account der Amsterdam-Konnektion:


    header:
    01: Received: from securemail.missouristate.edu
    02: (securemail.MissouriState.edu [146.7.7.161])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Thu, 22 Oct 2009 xx:xx:xx +0200 (CEST)
    07: Received: from evh1-et1.EDUBEAR.NET (evh1-et1.MissouriState.edu
    08: [146.7.6.101])
    09: by securemail.missouristate.edu (8.13.8/8.13.8) with ESMTP id
    10: n9JD0puX008445;
    11: Mon, 19 Oct 2009 xx:xx:xx -0500
    12: Received: from evh1-ht1.EDUBEAR.NET (146.7.6.102) by evh1-et1.EDUBEAR.NET
    13: (146.7.6.101) with Microsoft SMTP Server (TLS) ID: [ID filtered]
    14: Oct 2009
    15: xx:xx:xx -0500
    16: Received: from evh1-ms1.EDUBEAR.NET ([2002:9207:667::9207:667]) by
    17: evh1-ht1.EDUBEAR.NET ([2002:9207:666::9207:666]) with mapi; Mon, 19 Oct
    18: 2009
    19: xx:xx:xx -0500

    SusanDollar@MissouriState.edu

    claimrep.lewis@live.nl

    Muguphon: +31 626 006 051 ---> Telfort B.V., NL



    header:
    01: Received: from bridge3.bridge.com.br (151027.bridge.com.br [200.150.151.27])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Thu, 22 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User (unverified [69.197.177.156]) by bridge3.bridge.com.br
    05: (Vircom SMTPRS 4.5.186) with ESMTP ID: [ID filtered]
    06: Thu, 22 Oct 2009 xx:xx:xx -0200

    st1923n@googlemail.com

    st1924a@googlemail.com

    st1923a@gmail.com


    gecrackter Account:


    header:
    01: Received: from mail2.mt.net (mail2.mt.net [206.127.64.145])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Thu, 22 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from mail2.mt.net (mail2.mt.net [206.127.64.145])
    05: by mail2.mt.net (Postfix) with ESMTP ID: [ID filtered]
    06: Thu, 22 Oct 2009 xx:xx:xx +0000 (UTC)
    07: Received: from 41.217.2.8 ([41.217.2.8]) by mail2.mt.net (Horde MIME
    08: library) with HTTP; Thu, 22 Oct 2009 xx:xx:xx +0000

    IP: 41.217.2.8 ---> ZOOM Mobile Nigeria Ltd.

    judycmic@lewistown.net

    mr.vincentcheng13@yahoo.com.hk



    header:
    01: Received: from imsm057dat.netvigator.com (imsm057.netvigator.com
    02: [218.102.48.210])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Fri, 23 Oct 2009 xx:xx:xx +0200 (CEST)
    05: Received: from User ([60.208.119.2]) by imsm058dat.netvigator.com
    06: (InterMail vM.7.05.01.01 201-2174-106-103-20060222) with ESMTP
    07: ID: [ID filtered]
    08: Fri, 23 Oct 2009 xx:xx:xx +0800

    IP: 60.208.119.2 ---> CNC Group CHINA169 Shandong

    okorojames66@gmail.com

    robert.devise@blueyonder.co.uk


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  5. #355
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    8.805

    Standard

    Das Mugu-Wochenende, zweiter Teil:



    header:
    01: Received: from mail.morselli.com
    02: (host247-197-149-62.serverdedicati.aruba.it [62.149.197.247])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Fri, 23 Oct 2009 xx:xx:xx +0200 (CEST)
    05: Received: from localhost (localhost.localdomain [127.0.0.1])
    06: by mail.morselli.com (Postfix) with ESMTP ID: [ID filtered]
    07: Fri, 23 Oct 2009 xx:xx:xx +0200 (CEST)
    08: Received: from mail.morselli.com ([127.0.0.1])
    09: by localhost (server.morselli.com [127.0.0.1]) (amavisd-new, port 10024)
    10: with ESMTP ID: [ID filtered]
    11: Received: from User (vfbb21470.4u.com.gh [41.218.214.70])
    12: by mail.morselli.com (Postfix) with ESMTPA ID: [ID filtered]
    13: Fri, 23 Oct 2009 xx:xx:xx +0200 (CEST)

    frankwuddah2009@volny.cz

    frankwuddahh@sify.com



    header:
    01: Received: from telkomsa.net (unknown [196.25.211.124])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Fri, 23 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: (qmail 3548 invoked from network); 23 Oct 2009 xx:xx:xx -0000
    05: Received: from unknown (HELO User)
    06: (online318874 [at] telkomsa.net@[218.25.99.135])
    07: (envelope-sender <poor [at] spamvictim.tld>)
    08: by O (qmail-ldap-1.03) with SMTP
    09: for <poor [at] spamvictim.tld>; 23 Oct 2009 xx:xx:xx -0000

    IP: 218.25.99.135 ---> China Unicom Liaoning

    mrpetermensah04@yahoo.com

    mr.petermensah05@tro.net

    mrpetermensah06@gmail.com

    online318874@telkomsa.net



    header:
    01: Received: from mail.zjqtly.com (unknown [60.191.0.36])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sat, 24 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: from User ([82.128.33.237])
    07: (authenticated user admin [at] zjqtly.com)
    08: by mail.zjqtly.com (Kerio MailServer 6.7.0 patch 1);
    09: Fri, 23 Oct 2009 xx:xx:xx +0800

    IP: 82.128.33.237 ---> Multilinks Telecommunications Limited, Nigeria

    admin@zjqtly.com

    info@fmfforeignpaymentregistry-nig.com

    visacard@intercontinentalbankplc-nig.com

    Muguphon: +234-704-235-3306 ---> Visafone Communications Ltd., Nigeria



    header:
    01: Received: from web84008.mail.mud.yahoo.com (web84008.mail.mud.yahoo.com
    02: [68.142.206.178])
    03: by xxxxx (Postfix) with SMTP ID: [ID filtered]
    04: for xxxxx; Sat, 24 Oct 2009 xx:xx:xx +0200 (CEST)
    05: Received: (qmail 10802 invoked by UID: [UID filtered]
    06: Received: from [41.191.86.105] by web84008.mail.mud.yahoo.com via HTTP;
    07: Sat, 24 Oct 2009 xx:xx:xx PDT

    IP: 41.191.86.105 ---> NETLAND, BJ

    kbblown50@yahoo.com

    western_union.04@sify.com

    Muguphon: +229 98455352 ---> Benin



    header:
    01: Received: from smtpcom.263xmail.com (smtpcom.263xmail.com [211.150.64.22])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sat, 24 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from smtpcom.263xmail.com (localhost.localdomain [127.0.0.1])
    05: by smtpcom.263xmail.com (Postfix) with ESMTP ID: [ID filtered]
    06: Sun, 25 Oct 2009 xx:xx:xx +0800 (CST)
    07: X-ABS-CHECKED:1
    08: X-KSVirus-check:0
    09: Received: from User (localhost.localdomain [127.0.0.1])
    10: by smtpcom.263xmail.com (Postfix) with ESMTP ID: [ID filtered]
    11: Sun, 25 Oct 2009 xx:xx:xx +0800 (CST)

    X-SENDER-IP: 82.128.32.55 ---> Multilinks Telecommunications Limited, Nigeria

    zyjsxx@gongmeigroup.com.cn

    robinpaish@maktoob.com

    mr.robinparish@yahoo.com

    inter.detelexdept1@live.com

    Muguphon: 07026359572 ---> Bouvet Island



    header:
    01: Received: from server.kamtec.com (kamtest.com [213.8.123.20])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sat, 24 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User ([82.128.20.6] RDNS failed) by server.kamtec.com
    05: with Microsoft SMTPSVC(6.0.3790.3959);
    06: Sat, 24 Oct 2009 xx:xx:xx +0200

    IP: 82.128.20.6 ---> Multilinks Telecommunications Limited, Nigeria

    drandynwaeze1@yahoo.com.hk

    andynwaeze@yahoo.com.au

    Muguphon: +234 8058137764 ---> Globacom Ltd., Nigeria



    header:
    01: Received: from mailhosting.pi.se (mailhosting.pi.se [195.7.64.8])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sat, 24 Oct 2009 xx:xx:xx +0200 (CEST)
    04: Received: from s4k.se (mail.s4k.se [195.149.159.204])
    05: by mailhosting.pi.se (Postfix) with SMTP ID: [ID filtered]
    06: Sat, 24 Oct 2009 xx:xx:xx +0200 (CEST)

    test@s4k.com

    euromillion1550@luckymail.com

    Muguphon: +32-489-603-804 ---> mobile phone, Belgium


    die Madrid-Konnektion, zweimal:


    header:
    01: Received: from mail2.icmc.usp.br (mail.icmc.usp.br [143.107.231.3])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sun, 25 Oct 2009 xx:xx:xx +0100 (CET)
    06: Received: by mail2.icmc.usp.br (Postfix, from userID: [ID filtered]
    07: ID: [ID filtered]
    08: Received: from mail2.icmc.usp.br (localhost [127.0.0.1])
    09: by mail2.icmc.usp.br (Postfix) with ESMTP ID: [ID filtered]
    10: Sun, 25 Oct 2009 xx:xx:xx -0200 (BRST)
    11: Received: from 212.166.64.10
    12: by mail2.icmc.usp.br with HTTP;
    13: Sun, 25 Oct 2009 xx:xx:xx -0200 (BRST)


    header:
    01: Received: from mail2.icmc.usp.br (mail.icmc.usp.br [143.107.231.3])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sun, 25 Oct 2009 xx:xx:xx +0100 (CET)
    06: Received: by mail2.icmc.usp.br (Postfix, from userID: [ID filtered]
    07: ID: [ID filtered]
    08: Received: from mail2.icmc.usp.br (localhost [127.0.0.1])
    09: by mail2.icmc.usp.br (Postfix) with ESMTP ID: [ID filtered]
    10: Sun, 25 Oct 2009 xx:xx:xx -0200 (BRST)
    11: Received: from 212.166.64.10
    12: by mail2.icmc.usp.br with HTTP;
    13: Sun, 25 Oct 2009 xx:xx:xx -0200 (BRST)

    IP: 212.166.64.10 ---> 10.64.166.212.ibercom.com

    mr.benhamcole@live.co.uk

    arraut@icmc.usp.br

    2009thebigbiglotto@gmail.com


    wieder mal der Dauer-Mugu:


    header:
    01: Received: from discover.discover-net.net (domain1.ec.wi.discover-net.net
    02: [208.75.152.8])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Sun, 25 Oct 2009 xx:xx:xx +0100 (CET)
    07: Received: from discover-net.net (discover.discover-net.net [127.0.0.1])
    08: by discover.discover-net.net (Postfix) with ESMTP ID: [ID filtered]
    09: Sun, 25 Oct 2009 xx:xx:xx -0500 (CDT)

    X-OriginatingIP: 41.220.75.3 (bleis) ---> mtnngprs.com/MTN, Nigeria

    ptr.wallace101@gmail.com

    mellisa@lewis.com


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  6. #356
    Graue Pestilenz Avatar von Fidul
    Registriert seit
    16.07.2005
    Beiträge
    6.405

    Standard

    Zitat Zitat von kjz1 Beitrag anzeigen
    header:
    01: Received: from mail.zjqtly.com (unknown [60.191.0.36])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sat, 24 Oct 2009 xx:xx:xx +0200 (CEST)
    06: Received: from User ([82.128.33.237])
    07: (authenticated user admin [at] zjqtly.com)
    08: by mail.zjqtly.com (Kerio MailServer 6.7.0 patch 1);
    09: Fri, 23 Oct 2009 xx:xx:xx +0800

    IP: 82.128.33.237 ---> Multilinks Telecommunications Limited, Nigeria

    admin@zjqtly.com

    info@fmfforeignpaymentregistry-nig.com

    visacard@intercontinentalbankplc-nig.com

    Muguphon: +234-704-235-3306 ---> Visafone Communications Ltd., Nigeria
    intercontinentalbankplc-nig.com ist schon sehr tot, aber das Finanzministerium lebt noch.

    AA419: http://db.aa419.org/fakebanksview.php?key=41080

    -> whois:http://liquidnetltd.net/?lang=en&action=aboutus&submenu=contactus für den Abschuß
    Wir kriegen euch alle!

  7. #357
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    8.805

    Standard

    frische Mugus, die jedoch ganz die alten sind:


    header:
    01: Received: from nschwmtas06p.mx.bigpond.com (nschwmtas06p.mx.bigpond.com
    02: [61.9.189.152])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Mon, 26 Oct 2009 xx:xx:xx +0100 (CET)
    05: Received: from nschwotgx02p.mx.bigpond.com ([165.228.117.68])
    06: by nschwmtas06p.mx.bigpond.com with ESMTP
    07: id
    08: <20091026035734.JFCH22839.nschwmtas06p.mx.bigpond.com [at] nschwotgx02p.mx.bigpond.com>;
    09: Mon, 26 Oct 2009 xx:xx:xx +0000
    10: Received: from internetonlycarousel.com.au ([165.228.117.68])
    11: by nschwotgx02p.mx.bigpond.com with ESMTP
    12: id
    13: <20091026035734.IPYB9934.nschwotgx02p.mx.bigpond.com [at] internetonlycarousel.com.au>;
    14: Mon, 26 Oct 2009 xx:xx:xx +0000
    15: Received: from User ([82.128.32.161]) by internetonlycarousel.com.au
    16: with Microsoft SMTPSVC(6.0.3790.3959);
    17: Sun, 25 Oct 2009 xx:xx:xx +0800

    IP: 82.128.32.161 ---> Multilinks Telecommunications Limited, Nigeria

    tonybright@orange.pl

    tonybright@doda.uz



    header:
    01: Received: from m1.ndb.com.tw (220-130-151-29.HINET-IP.hinet.net
    02: [220.130.151.29])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Tue, 27 Oct 2009 xx:xx:xx +0100 (CET)
    05: Received: from User ([41.211.239.178]) by m1.ndb.com.tw with Microsoft
    06: SMTPSVC(5.0.2195.6713);
    07: Tue, 27 Oct 2009 xx:xx:xx +0800

    IP: 41.211.239.178 ---> 178.239.211.41.client178.directonpc.net, Nigeria

    bank.draft20@googlemail.com

    wunion.m01@live.com


    die Amsterdam-Konnektion, zweimal:


    header:
    01: Received: from cpsmtpb-ews04.kpnxchange.com
    02: (cpsmtpb-ews04.kpnxchange.com [213.75.39.7])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Tue, 27 Oct 2009 xx:xx:xx +0100 (CET)
    05: Received: from cpbrm-ews02.kpnxchange.com ([10.94.84.133]) by
    06: cpsmtpb-ews04.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
    07: Tue, 27 Oct 2009 xx:xx:xx +0100
    08: Received: from CPSMTPM-EML04.kpnxchange.com ([213.75.39.74]) by
    09: cpbrm-ews02.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
    10: Tue, 27 Oct 2009 xx:xx:xx +0100
    11: Received: from localhost ([10.94.77.199]) by
    12: CPSMTPM-EML04.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
    13: Tue, 27 Oct 2009 xx:xx:xx +0100


    header:
    01: Received: from cpsmtpb-ews02.kpnxchange.com
    02: (cpsmtpb-ews02.kpnxchange.com [213.75.39.5])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Wed, 28 Oct 2009 xx:xx:xx +0100 (CET)
    05: Received: from cpbrm-ews07.kpnxchange.com ([10.94.84.138]) by
    06: cpsmtpb-ews02.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
    07: Wed, 28 Oct 2009 xx:xx:xx +0100
    08: Received: from CPSMTPM-EML07.kpnxchange.com ([213.75.39.77]) by
    09: cpbrm-ews07.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.3959);
    10: Wed, 28 Oct 2009 xx:xx:xx +0100
    11: Received: from localhost ([10.94.77.199]) by
    12: CPSMTPM-EML07.kpnxchange.com with Microsoft SMTPSVC(7.0.6001.18000);
    13: Wed, 28 Oct 2009 xx:xx:xx +0100

    ber739pn@kpnmail.nl

    richardtang177@yahoo.com.hk


    aus Ghana, ebenfalls zweimal:


    header:
    01: Received: from kalhajewelry.com (EHLO vps.graphicslava.com) [76.12.246.117]
    02: by mx0.gmx.net (mx113) with SMTP; 28 Oct 2009 xx:xx:xx +0100
    03: Received: (qmail 3450 invoked from network); 27 Oct 2009 xx:xx:xx -0400
    04: Received: from unknown (HELO User) (41.215.160.135)
    05: by kalhajewelry.com with SMTP; 27 Oct 2009 xx:xx:xx -0400


    header:
    01: Received: from kalhajewelry.com (EHLO vps.graphicslava.com) [76.12.246.117]
    02: by mx0.gmx.net (mx059) with SMTP; 28 Oct 2009 xx:xx:xx +0100
    03: Received: (qmail 3450 invoked from network); 27 Oct 2009 xx:xx:xx -0400
    04: Received: from unknown (HELO User) (41.215.160.135)
    05: by kalhajewelry.com with SMTP; 27 Oct 2009 xx:xx:xx -0400

    IP: 41.215.160.135 ---> Millicom Ghana Limited

    mineassc2009@buzonabc.com

    glennichol@aol.com

    Muguphon: +233272926604 ---> Mobitel, Ghana/Millicom/Tigo


    auch Netsol läßt Missbrauch zu:


    header:
    01: Received: from omr4.networksolutionsemail.com (EHLO
    02: omr4.networksolutionsemail.com) [205.178.146.54]
    03: by mx0.gmx.net (mx087) with SMTP; 28 Oct 2009 xx:xx:xx +0100
    04: Received: from mail.networksolutionsemail.com
    05: (mail.networksolutionsemail.com [205.178.146.50])
    06: by omr4.networksolutionsemail.com (8.13.6/8.13.6) with SMTP id
    07: n9S098X7022828
    08: for xxxxx; Tue, 27 Oct 2009 xx:xx:xx -0400
    09: Message-ID: [ID filtered]
    10: Received: (qmail 8539 invoked by UID: [UID filtered]
    11: Received: from unknown (HELO User) (money2 [at] payreason.org@41.208.139.104)
    12: by ns-omr3.lb.hosting.dc2.netsol.com with SMTP; 28 Oct 2009 xx:xx:xx
    13: -0000

    IP: 41.208.139.104 ---> SONATEL, SN

    msariana@i12.com


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  8. #358
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    8.805

    Standard

    Und es gibt nochmal Nachschub:


    header:
    01: Received: from mout7.freenet.de (mout7.freenet.de [195.4.92.97])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Tue, 27 Oct 2009 xx:xx:xx +0100 (CET)
    06: Received: from [195.4.92.26] (helo=16.mx.freenet.de)
    07: by mout7.freenet.de with esmtpa (ID: [ID filtered]
    08: (port 25) (Exim 4.69 #92)
    09: ID: [ID filtered]
    10: Received: from [41.211.233.190] (port=62608 helo=User)
    11: by 16.mx.freenet.de with esmtpa (ID: [ID filtered]
    12: (port 25) (Exim 4.69 #94)
    13: ID: [ID filtered]

    IP: 41.211.233.190 ---> 190.233.211.41.client190.directonpc.net, Nigeria

    benbernanke40003@freakmail.de

    mrbenbernanke2251@gmail.com

    bernankeben26@yahoo.com


    Und im Doppelpack, 2 versch. 'Märchen', aber 1 Mugu:


    header:
    01: Received: from cvda-dc1.cvda.local
    02: (68-190-176-86.static.reno.nv.charter.com [68.190.176.86])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Thu, 29 Oct 2009 xx:xx:xx +0100 (CET)
    05: Received: from User ([116.206.175.83]) by cvda-dc1.cvda.local with
    06: Microsoft SMTPSVC(6.0.3790.3959);
    07: Thu, 29 Oct 2009 xx:xx:xx -0800

    IP: 116.206.175.83 ---> iZZinet Sdn. Bhd., MY

    markllopez@sify.com

    susaroy@sify.com

    sussanroy@sify.com


    header:
    01: Received: from kolhamusica.com (mail.kolhamusica.com [199.203.111.240])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Thu, 29 Oct 2009 xx:xx:xx +0100 (CET)
    04: Received: from User ([116.206.147.91]) by kolhamusica.com with Microsoft
    05: SMTPSVC(6.0.3790.3959);
    06: Wed, 28 Oct 2009 xx:xx:xx +0200

    IP: 116.206.147.91 ---> iZZinet Sdn. Bhd.

    markllopez@sify.com

    mark1lopez@sify.com


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  9. #359
    Verbalakrobat Avatar von Goofy
    Registriert seit
    17.07.2005
    Ort
    Überall und nirgends
    Beiträge
    24.610

    Standard

    Ich stelle fest: von der Strafaktion mit Sprengung von 18 "Syndikaten" (waren wohl nur Klein-Gangs...) war dieser Ring hier nicht betroffen. Die machen lustig weiter wie bisher. Obwohl die Mails wohl sicher aus Nigeria kommen.
    Goofy
    ______________________________
    Weisheiten des Trullius L. Guficus, 80 v.Chr.:
    "Luscinia, te pedem supplodere audio" - Nachtigall, ick hör dir trapsen
    "Vita praediolum eculeorum non est" - Das Leben ist kein Ponyhof
    "Avia mea in stabulo gallinario rotam automotam vehit" - Meine Oma fährt im Hühnerstall Motorrad
    "Sed illi, dicito: me in ano lambere potest" - Jenem aber, sag es ihm: er kann mich am Arsch lecken

  10. #360
    Graue Pestilenz Avatar von Fidul
    Registriert seit
    16.07.2005
    Beiträge
    6.405

    Standard

    Zitat Zitat von kjz1 Beitrag anzeigen
    auch Netsol läßt Missbrauch zu:
    Normalerweise verschwinden solche für das Spammen registrierte Domains dort sehr schnell und gründlich. payreason.org dürfte bald das gleiche Schicksal erleiden. Hatte die Seite einen aussagekräftigen Namen in der Mail?

    Ach ja, das FMF von oben ist bereits ganz tot.
    Wir kriegen euch alle!

Lesezeichen

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
Partnerlink:
REDDOXX Anti-Spam Lösungen