Seite 55 von 152 ErsteErste ... 545535455565765105 ... LetzteLetzte
Ergebnis 541 bis 550 von 1515

Thema: Mugu Dubletten

  1. #541
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Ach ja, die Nigeria-Boyz sind wieder da...

    Der Yahoo/ATT-Mugu:


    header:
    01: Received: from omp1056.mail.sp2.yahoo.com (HELO
    02: omp1056.mail.sp2.yahoo.com) [98.139.91.56]
    03: by mx0.gmx.net (mx104) with SMTP; 17 Jan 2011 xx:xx:xx +0100
    04: Received: (qmail 64658 invoked by UID: [UID filtered]
    05: Received: (qmail 1717 invoked by UID: [UID filtered]
    06: Received: from [41.0.52.6] by web83713.mail.sp1.yahoo.com via HTTP; Mon,
    07: 17 Jan 2011 xx:xx:xx PST

    IP: 41.0.52.6 ---> ---> Vodacom Bussiness (ASN 36994)

    X-RocketYMMF: sssa4@att.net

    lottery.60@rediffmail.com

    lottomanialottomania571@gmail.com

    watfordregion@hotmail.co.uk

    Muguphon: +447924551439 ---> Cloud9, mobile phone, UK


    die Madrid-Konnektion:


    header:
    01: Received: from a.relay.invitel.net (EHLO a.relay.invitel.net) [62.77.203.3]
    02: by mx0.gmx.net (mx088) with SMTP; 18 Jan 2011 xx:xx:xx +0100
    03: Received: from mail.invitel.hu (mail.invitel.hu [213.163.59.4])
    04: by a.relay.invitel.net (Invitel Core SMTP Transmitter) with ESMTP id
    05: 6E22111A5C8;
    06: Tue, 18 Jan 2011 xx:xx:xx +0100 (CET)
    07: Received: from User ([194.116.144.56])
    08: by mail.invitel.hu (Invitel Messaging Server)
    09: with ESMTPA ID: [ID filtered]
    10: 18 Jan 2011 xx:xx:xx +0100 (CET)

    IP: 194.116.144.56 ---> iseo.occterra.net

    szabone_57@invitel.hu

    valentina.lopez@cascosecuritynetwork.net

    info@cascosecuritynetwork.net

    Muguphon: +34 634031280 ---> Vodafone España, S.a.u.

    Mugufax: +34 911311879 ---> Jazz Telecom, S.a.u., ES


    'Kelvin Williams' ist sehr aktiv:


    header:
    01: Received: from unknown (EHLO mail.zhukovsky.net) [77.232.152.7]
    02: by mx0.gmx.net (mx106) with SMTP; 18 Jan 2011 xx:xx:xx +0100
    03: Received: from [208.115.201.206] (port=2693 helo=User)
    04: by mail.zhukovsky.net with esmtpa (Exim 4.69)
    05: (envelope-from <test [at] zami.com.cn>)
    06: ID: [ID filtered]

    IP: 208.115.201.206 ---> 206-201-115-208.reverse.lstn.net

    kelvinwilliams205@gmail.com



    header:
    01: Received: from 4-102.206-83.static-ip.oleane.fr (HELO srv_mail.opca.cgm)
    02: [83.206.102.4]
    03: by mx0.gmx.net (mx064) with SMTP; 19 Jan 2011 xx:xx:xx +0100
    04: Received: from User ([192.168.21.254]) by srv_mail.opca.cgm with
    05: Microsoft SMTPSVC(6.0.3790.1830);
    06: Wed, 19 Jan 2011 xx:xx:xx +0100

    kelvin.williams@administrativos.com

    Muguphon: +234-81-6111-9202 ---> Nigeria



    header:
    01: Received: from mail.norwestortho.com.au (shiman2.lnk.telstra.net
    02: [203.45.142.13])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Thu, 20 Jan 2011 xx:xx:xx +0100 (CET)
    05: Received: from User ([109.158.23.114]) by mail.norwestortho.com.au with
    06: Microsoft SMTPSVC(6.0.3790.4675);
    07: Thu, 20 Jan 2011 xx:xx:xx +1100

    IP: 109.158.23.114 ---> host109-158-23-114.range109-158.btcentralplus.com

    ruiznelson0@aol.co.uk

    CHALHENZ@yahoo.com


    Auch bei Strato werden die Server gecrackt:


    header:
    01: Received: from mo-p07-ob.rzone.de (EHLO mo-p07-ob.rzone.de) [81.169.146.188]
    02: by mx0.gmx.net (mx002) with SMTP; 20 Jan 2011 xx:xx:xx +0100
    03: Received: from User (dsl88-249-15353.ttnet.net.tr [88.249.59.249])
    04: by post.strato.de (mrclete mo6) (RZmta 24.12)
    05: with ESMTP ID: [ID filtered]

    captanthony12@globomail.com

    into@golec-transporte.de



    header:
    01: Received: from smtp.correiodopovo.com.br (EHLO
    02: smtp.correiodopovo.com.br) [200.248.244.129]
    03: by mx0.gmx.net (mx077) with SMTP; 21 Jan 2011 xx:xx:xx +0100
    04: Received: from User by smtp.correiodopovo.com.br (MDaemon PRO v10.1.0)
    05: with ESMTP ID: [ID filtered]
    06: Thu, 20 Jan 2011 xx:xx:xx -0200
    07: X-Spam-Processed: smtp.correiodopovo.com.br, Thu, 20 Jan 2011 xx:xx:xx -0200
    08: (not processed: message from trusted or authenticated source)

    X-Authenticated-Sender: comercialweb@radioguaiba.com.br

    X-MDRemoteIP: 98.215.146.12 ---> c-98-215-146-12.hsd1.il.comcast.net

    vweventclaims@live.de

    fenncorrales_claims@live.hk

    Muguphon: +44 701 117 2399 ---> Invomo Ltd., UK



    header:
    01: Received: from mail.igamer.ie (server213-171-198-211.live-servers.net
    02: [213.171.198.211])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Fri, 21 Jan 2011 xx:xx:xx +0100 (CET)
    05: Received: from User (rrcs-67-78-41-222.sw.biz.rr.com [67.78.41.222])
    06: (Authenticated sender: admin)
    07: by mail.igamer.ie (Postfix) with ESMTP ID: [ID filtered]
    08: Fri, 21 Jan 2011 xx:xx:xx +0000 (GMT)

    atmcardpayment_dept@yahoo.cn

    Muguphon: +234-809-128-8840 ---> EMTS/Etisalat, Nigeria


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  2. #542
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Aus westafrikanischen Gefilden treten noch an:

    wieder mal 'Kelvin Williams' über gecrackten Server:


    header:
    01: Received: from cpn.gyn-praxis-goerlitz.de (EHLO
    02: cpn.gyn-praxis-goerlitz.de) [217.86.143.217]
    03: by mx0.gmx.net (mx027) with SMTP; 19 Jan 2011 xx:xx:xx +0100
    04: Received: from User ([208.115.201.206]) by cpn.gyn-praxis-goerlitz.de
    05: with Microsoft SMTPSVC(6.0.3790.4675);
    06: Wed, 19 Jan 2011 xx:xx:xx +0100

    IP: 208.115.201.206 ---> 206-201-115-208.reverse.lstn.net

    kelvinwilliams205@gmail.com


    den Mugu hatten wir auch schon:


    header:
    01: Received: from mail.norwestortho.com.au (shiman2.lnk.telstra.net
    02: [203.45.142.13])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Thu, 20 Jan 2011 xx:xx:xx +0100 (CET)
    05: Received: from User ([109.158.23.114]) by mail.norwestortho.com.au with
    06: Microsoft SMTPSVC(6.0.3790.4675);
    07: Thu, 20 Jan 2011 xx:xx:xx +1100

    IP: 109.158.23.114 ---> host109-158-23-114.range109-158.btcentralplus.com

    ruiznelson0@aol.co.uk

    CHALHENZ@yahoo.com



    header:
    01: Received: from mail.chauraci.be (EHLO SRV-MAIL.chauraci.be) [81.246.33.218]
    02: by mx0.gmx.net (mx110) with SMTP; 23 Jan 2011 xx:xx:xx +0100

    springbankngplc02@gmail.com

    springbankngplc@ng.com

    Muguphon: +2347035207733 ---> MTN Nigeria Communications Ltd.


    Ansonsten: der Trend geht auch bei Mugus zum Versand via Zombie-PC. Kein Wunder, alle ISPs aus Nigeria dürften mittlerweile breitflächig in den schwärzesten Tiefen aller Blacklists festbetoniert sein.

    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  3. #543
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Mit schönen Grüßen an meine 'besonderen Freunde':

    gecrackter Uni-Account:


    header:
    01: Received: from EMAILCAS04.bsu.edu (emailcas04.bsu.edu [147.226.7.69])
    02: (using TLSv1 with cipher RC4-MD5 (128/128 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Mon, 24 Jan 2011 xx:xx:xx +0100 (CET)
    06: Received: from User (192.168.1.1) by EMAILCAS04.bsu.edu (192.168.1.18) with
    07: Microsoft SMTP Server ID: [ID filtered]

    kabuck@bsu.edu

    lauragreen11@aol.com



    header:
    01: Received: from darkstar.wavenet.com.br (EHLO darkstar.wavenet.com.br)
    02: [187.1.146.2]
    03: by mx0.gmx.net (mx018) with SMTP; 25 Jan 2011 xx:xx:xx +0100
    04: Received: from wavenet.com.br (argow.wavenet.com.br [187.1.146.5])
    05: (authenticated bits=0)
    06: by darkstar.wavenet.com.br (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
    07: Tue, 25 Jan 2011 xx:xx:xx -0300 (BRT)

    X-OriginatingIP: 109.111.190.57 (ribeiro) ---> 57.190.111.109.sta.211.ru

    fenncorrales-associates@live.hk

    fenncorrales_claims@live.hk

    Muguphon: +44 701 117 2399 ---> Invomo Ltd., UK



    header:
    01: Received: from mail2.webspeed.net (mail.webspeed.net [213.166.4.28])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Wed, 26 Jan 2011 xx:xx:xx +0100 (CET)
    04: Received: from User (unverified [213.120.114.85]) by mail2.webspeed.net
    05: (Vircom SMTPRS 4.4.568.66) with ESMTP ID: [ID filtered]
    06: Wed, 26 Jan 2011 xx:xx:xx +0000

    IP: 213.120.114.85 ---> host213-120-114-85.in-addr.btopenworld.com

    benhopkins@Safe-mail.net

    benhopkins@yahoo.cn



    header:
    01: Received: from server1.jallanstudios.com (server2.jallanstudios.com
    02: [209.190.184.216])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Wed, 26 Jan 2011 xx:xx:xx +0100 (CET)
    05: Received: from User (UnknownHost [82.128.108.46]) by
    06: server1.jallanstudios.com with SMTP;
    07: Mon, 24 Jan 2011 xx:xx:xx -0500

    IP: 82.128.108.46 ---> Multilinks Telecommunications Limited, Nigeria

    dchipman@aol.com

    rohmltd1@o2.pl

    Muguphon: +6010217045 ---> Celcom, Malaysia



    header:
    01: Received: from mailout2.ppohosted.fi (EHLO zmta1.ppohosted.fi)
    02: [82.141.106.235]
    03: by mx0.gmx.net (mx003) with SMTP; 26 Jan 2011 xx:xx:xx +0100
    04: Received: from zcluster2.ppohosted.fi (zmbs2.ppohosted.fi [212.50.215.38])
    05: by zmta1.ppohosted.fi (Postfix) with ESMTP ID: [ID filtered]
    06: Wed, 26 Jan 2011 xx:xx:xx +0200 (EET)
    07: Date: Wed, 26 Jan 2011 xx:xx:xx +0200 (EET)

    gray.richard01@msnzone.cn

    Muguphon: +447023063852 ---> Magrathea Telecommunications Limited, UK


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  4. #544
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    'Gute Freunde' kann man nie genug haben.....

    der Yahoo/Att-Mugu:


    header:
    01: Received: from nm9.bullet.mail.sp2.yahoo.com
    02: (nm9.bullet.mail.sp2.yahoo.com [98.139.91.79])
    03: by xxxxx (Postfix) with SMTP ID: [ID filtered]
    04: for xxxxx; Thu, 27 Jan 2011 xx:xx:xx +0100 (CET)
    05: Received: from [98.139.91.67] by nm9.bullet.mail.sp2.yahoo.com with
    06: NNFMP; 27 Jan 2011 xx:xx:xx -0000
    07: Received: from [98.139.91.59] by tm7.bullet.mail.sp2.yahoo.com with
    08: NNFMP; 27 Jan 2011 xx:xx:xx -0000
    09: Received: from [127.0.0.1] by omp1059.mail.sp2.yahoo.com with NNFMP; 27
    10: Jan 2011 xx:xx:xx -0000
    11: Received: (qmail 96997 invoked by UID: [UID filtered]
    12: Received: from [81.91.235.235] by web180609.mail.sp1.yahoo.com via HTTP;
    13: Thu, 27 Jan 2011 xx:xx:xx PST

    IP: 81.91.235.235 ---> BENINTELECOM

    officefile----006@att.net

    kellymore1@9.cn



    header:
    01: Received: from slim-4c.inet.it (EHLO slim-4c.inet.it) [213.92.5.127]
    02: by mx0.gmx.net (mx033) with SMTP; 28 Jan 2011 xx:xx:xx +0100
    03: Received: from ::ffff:124.160.27.162 ([::ffff:124.160.27.162]) by
    04: slim-4c.inet.it via I-SMTP-5.6.1-561
    05: ID: [ID filtered]


    header:
    01: Received: from slim-4c.inet.it (EHLO slim-4c.inet.it) [213.92.5.127]
    02: by mx0.gmx.net (mx033) with SMTP; 28 Jan 2011 xx:xx:xx +0100
    03: Received: from ::ffff:124.160.27.162 ([::ffff:124.160.27.162]) by
    04: slim-4c.inet.it via I-SMTP-5.6.1-561
    05: ID: [ID filtered]


    header:
    01: Received: from slim-4c.inet.it (slim-4c.inet.it [213.92.5.127])
    02: by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
    03: ID: [ID filtered]
    04: xx:xx:xx +0100
    05: Received: from ::ffff:124.160.27.162 ([::ffff:124.160.27.162]) by
    06: slim-4c.inet.it via I-SMTP-5.6.1-561
    07: ID: [ID filtered]

    IP: 124.160.27.162 ---> CNC Group CHINA169 Zhejiang

    belloabassa@gmail.com

    albertmuioy@gmail.com

    belloabass201@yahoo.com.hk

    Muguphon: +228-8522437 ---> Togo Cellulaire (Togocel)


    gecrackter Freenet-Account:


    header:
    01: Received: from mout7.freenet.de (mout7.freenet.de [195.4.92.97])
    02: by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
    03: for xxxxx; Sat, 29 Jan 2011 xx:xx:xx -0500 (EST)
    04: Received: from [195.4.92.13] (helo=3.mx.freenet.de)
    05: by mout7.freenet.de with esmtpa (ID: [ID filtered]
    06: (Exim 4.72 #3)
    07: ID: [ID filtered]
    08: Received: from [82.128.117.72] (port=4578 helo=User)
    09: by 3.mx.freenet.de with esmtpa (ID: [ID filtered]
    10: (Exim 4.72 #3)
    11: ID: [ID filtered]

    IP: 82.128.117.72 ---> Multilinks Telecommunications Limited, Nigeria

    welshman@freenet.de

    ggffdr@rediffmail.com

    Muguphon: +2348073143968 ---> Globacom Ltd., Nigeria


    und wieder ein Webmaster-Account bei Freenet gecrackt:


    header:
    01: Received: from mout5.freenet.de (EHLO mout5.freenet.de) [195.4.92.95]
    02: by mx0.gmx.net (mx053) with SMTP; 29 Jan 2011 xx:xx:xx +0100
    03: Received: from [195.4.92.23] (helo=13.mx.freenet.de)
    04: by mout5.freenet.de with esmtpa (ID: [ID filtered]
    05: 25) (Exim 4.72 #3)
    06: ID: [ID filtered]
    07: Received: from j103113.upc-j.chello.nl ([24.132.103.113]:2192 helo=User)
    08: by 13.mx.freenet.de with esmtpa (ID: [ID filtered]
    09: 587) (Exim 4.72 #3)
    10: ID: [ID filtered]

    webmaster@prisonbreake2.de

    risanko@yahoo.ie

    tanko_idris001@globomail.com

    tank_idris555@yahoo.co.jp

    Muguphon: +234-703-740-1857 ---> MTN Nigeria Communications Ltd.


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  5. #545
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Auch meine 'Haus-Mugus' waren wieder fleissig:


    header:
    01: Received: from 123-243-9-65.static.tpgi.com.au (EHLO everx.com.au)
    02: [123.243.9.65]
    03: by mx0.gmx.net (mx054) with SMTP; 31 Jan 2011 xx:xx:xx +0100
    04: Received: from User ([41.217.65.11] RDNS failed) by everx.com.au with
    05: Microsoft SMTPSVC(6.0.3790.4675);
    06: Thu, 27 Jan 2011 xx:xx:xx +1100

    IP: 41.217.65.11 ---> ZOOM Mobile Nigeria Ltd.

    mrmichealcmorgan1@yahoo.co.jp

    mrmichealcmorgan@yahoo.co.jp

    k_kelvin_coleman@yahoo.co.uk


    gecrackter Account:


    header:
    01: Received: from mail.roster.com.pe (EHLO mail.roster.com.pe) [190.223.155.14]
    02: by mx0.gmx.net (mx019) with SMTP; 31 Jan 2011 xx:xx:xx +0100
    03: Received: from localhost (localhost.localdomain [127.0.0.1])
    04: by mail.roster.com.pe (Postfix) with ESMTP ID: [ID filtered]
    05: Mon, 31 Jan 2011 xx:xx:xx -0500 (PET)
    06: Received: from mail.roster.com.pe ([127.0.0.1])
    07: by localhost (mail.roster.com.pe [127.0.0.1]) (amavisd-new, port 10024)
    08: with ESMTP ID: [ID filtered]
    09: Received: from mail.roster.com.pe (mail.roster.com.pe [172.16.1.3])
    10: by mail.roster.com.pe (Postfix) with ESMTP ID: [ID filtered]
    11: Mon, 31 Jan 2011 xx:xx:xx -0500 (PET)

    aalcantara@roster.com.pe

    barr.perezgonzalo@gala.net

    Muguphon: +59387395173 ---> mobile number, Ecuador


    wieder ein gecrackter Account:


    header:
    01: Received: from mail.cablemail.bg (EHLO mail.cablemail.bg) [217.9.224.207]
    02: by mx0.gmx.net (mx118) with SMTP; 31 Jan 2011 xx:xx:xx +0100
    03: Received: from mail.cablemail.bg (localhost [127.0.0.1])
    04: by mail.cablemail.bg (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sun, 30 Jan 2011 xx:xx:xx +0200 (EET)
    06: Received: from mail.cablemail.bg ([127.0.0.1])
    07: by mail.cablemail.bg (mail.cablemail.bg [127.0.0.1]) (amavisd-new, port
    08: 10024)
    09: with ESMTP ID: [ID filtered]
    10: Sun, 30 Jan 2011 xx:xx:xx +0200 (EET)
    11: Received: from PERSONAL-43F0F3 (unknown [41.220.69.10])
    12: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    13: (No client certificate requested)
    14: (Authenticated sender: ferri [at] cablemail.bg)
    15: by mail.cablemail.bg (Postfix) with ESMTPSA ID: [ID filtered]
    16: for xxxxx; Sun, 30 Jan 2011 xx:xx:xx +0200 (EET)

    IP: 41.220.69.10 ---> 69-10.vgccl.net/MTN Nigeria

    ferri@cablemail.bg

    brspen1@aol.com

    brspen1@blumail.org



    header:
    01: Received: (qmail invoked by alias); 01 Feb 2011 xx:xx:xx -0000
    02: Received: from aquilum.com (EHLO mail.aquilum.com) [86.109.112.44]
    03: by mx0.gmx.net (mx073) with SMTP; 01 Feb 2011 xx:xx:xx +0100
    04: Received: from User ([41.222.71.37]) by aquilum.com with MailEnable
    05: ESMTP; Mon, 17 Jan 2011 xx:xx:xx +0100

    IP: 41.222.71.37 ---> SWIFT NETWORKS, Nigeria

    euleensui54@aol.com



    header:
    01: Received: from unknown (EHLO pwdmail.mahapwd.com) [210.212.169.163]
    02: by mx0.gmx.net (mx006) with SMTP; 02 Feb 2011 xx:xx:xx +0100
    03: Received: from User (pwdfirewall [172.17.1.254])
    04: by pwdmail.mahapwd.com (Postfix) with ESMTP ID: [ID filtered]
    05: Wed, 2 Feb 2011 xx:xx:xx +0530 (IST)

    daveben52@yahoo.com


    volles Rohr von der Amsterdam-Konnektion:


    header:
    01: Received: from nbbesmed.com (221-12-55-250.zjnetcom.com [221.12.55.250])
    02: by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)
    03: ID: [ID filtered]
    04: xx:xx:xx +0100
    05: Received: from User ([80.56.181.197])
    06: (envelope-sender <songli [at] yahoo.com.hk>)
    07: by 192.168.1.254 with ESMTP
    08: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800


    header:
    01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)
    02: [221.12.55.250]
    03: by mx0.gmx.net (mx031) with SMTP; 02 Feb 2011 xx:xx:xx +0100
    04: Received: from User ([80.56.181.197])
    05: (envelope-sender <songli [at] yahoo.com.hk>)
    06: by 192.168.1.254 with ESMTP
    07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800


    header:
    01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)
    02: [221.12.55.250]
    03: by mx0.gmx.net (mx080) with SMTP; 02 Feb 2011 xx:xx:xx +0100
    04: Received: from User ([80.56.181.197])
    05: (envelope-sender <songli [at] yahoo.com.hk>)
    06: by 192.168.1.254 with ESMTP
    07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800

    IP: 80.56.181.197 ---> f181197.upc-f.chello.nl

    songli@yahoo.com.hk

    songli101@yahoo.com.hk


    wieder die volle Ladung, denn Chello ist ja völlig merkbefreit:


    header:
    01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)
    02: [221.12.55.250]
    03: by mx0.gmx.net (mx032) with SMTP; 02 Feb 2011 xx:xx:xx +0100
    04: Received: from User ([80.56.181.197])
    05: (envelope-sender <ipw_lotto [at] yahoo.com>)
    06: by 192.168.1.254 with ESMTP
    07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800


    header:
    01: Received: from 221-12-55-250.zjnetcom.com (HELO nbbesmed.com)
    02: [221.12.55.250]
    03: by mx0.gmx.net (mx021) with SMTP; 02 Feb 2011 xx:xx:xx +0100
    04: Received: from User ([80.56.181.197])
    05: (envelope-sender <ipw_lotto [at] yahoo.com>)
    06: by 192.168.1.254 with ESMTP
    07: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800


    header:
    01: Received: from nbbesmed.com (221-12-55-250.zjnetcom.com [221.12.55.250])
    02: by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
    03: ID: [ID filtered]
    04: xx:xx:xx +0100
    05: Received: from User ([80.56.181.197])
    06: (envelope-sender <ipw_lotto [at] yahoo.com>)
    07: by 192.168.1.254 with ESMTP
    08: for xxxxx; Wed, 02 Feb 2011 xx:xx:xx +0800

    IP: 80.56.181.197 ---> f181197.upc-f.chello.nl

    ipw_lotto@yahoo.com

    payoffice101@aim.com

    payoffice101@aol.nl

    Muguphon: +31-684-455-145 ---> Lycamobile, NL



    header:
    01: Received: from he.lss.gov.cn ([121.28.149.39])
    02: by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
    03: ID: [ID filtered]
    04: xx:xx:xx +0100
    05: Received: from User (unknown [81.168.181.178])
    06: by mail (Coremail) with SMTP ID: [ID filtered]
    07: Mon, 31 Jan 2011 xx:xx:xx +0800 (CST)

    IP: 81.168.181.178 ---> xdsl-1202.lodz.dialog.net.pl

    test@he.lss.gov.cn

    atm.dept3@hotmail.com


    sagte ich schon, dass Chello wohl ein Schwarzhut ist....


    header:
    01: Received: from mail.belnet.ru (mail.belnet.ru [82.151.104.66])
    02: by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)
    03: ID: [ID filtered]
    04: xx:xx:xx +0100
    05: Received: from User [77.250.44.48] by mail.belnet.ru with ESMTP
    06: (SMTPD-10.02) ID: [ID filtered]


    header:
    01: Received: from mail.belnet.ru (EHLO mail.belnet.ru) [82.151.104.66]
    02: by mx0.gmx.net (mx062) with SMTP; 03 Feb 2011 xx:xx:xx +0100
    03: Received: from User [77.250.44.48] by mail.belnet.ru with ESMTP
    04: (SMTPD-10.02) ID: [ID filtered]


    header:
    01: Received: from mail.belnet.ru (EHLO mail.belnet.ru) [82.151.104.66]
    02: by mx0.gmx.net (mx002) with SMTP; 03 Feb 2011 xx:xx:xx +0100
    03: Received: from User [77.250.44.48] by mail.belnet.ru with ESMTP
    04: (SMTPD-10.02) ID: [ID filtered]

    IP: 77.250.44.48 ---> dhcp-077-250-044-048.chello.nl

    ipw_lotto@yahoo.com

    payoffice101@aol.nl

    Muguphon: +31-684-455-145 ---> Lycamobile, NL


    die Madrid-Konnektion:


    header:
    01: Received: from pip10.ptt.js.cn (HELO jlonline.com) [61.155.13.240]
    02: by mx0.gmx.net (mx025) with SMTP; 04 Feb 2011 xx:xx:xx +0100
    03: Received: from User([114.46.149.72]) by ptt.js.cn(AIMC 3.2.0.0)
    04: with SMTP ID: [ID filtered]

    IP: 114.46.149.72 ---> 114-46-149-72.dynamic.hinet.net

    emapinto@blumail.org

    emmpinto001@fastwebmail.it

    Muguphon: +34 672 901 053 ---> mobile number, Espana

    Mugufax: +34 917 692 733 ---> Colt Telecom España, S.a.


    gecrackter Account:


    header:
    01: Received: from idknet.com (mail.idknet.com [217.19.208.25])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Fri, 4 Feb 2011 xx:xx:xx +0100 (CET)
    04: Received: from [127.0.0.1] (account katerina91 HELO mail.idknet.com)
    05: by idknet.com (CommuniGate Pro SMTP 5.1.16)
    06: with ESMTPA ID: [ID filtered]
    07: Received: from User ([95.87.223.82] helo=User) with IPv4:125 by
    08: mail.idknet.com; 4 Feb 2011 xx:xx:xx +0200

    IP: 95.87.223.82 ---> drujba2-95-87-223-82.net1.bg


    header:
    01: Received: from idknet.com (mail.idknet.com [217.19.208.25])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxxx; Mon, 7 Feb 2011 xx:xx:xx +0100 (CET)
    04: Received: from [127.0.0.1] (account katerina91 HELO mail.idknet.com)
    05: by idknet.com (CommuniGate Pro SMTP 5.1.16)
    06: with ESMTPA ID: [ID filtered]
    07: Received: from User ([82.128.87.61] helo=User) with IPv4:125 by
    08: mail.idknet.com; 7 Feb 2011 xx:xx:xx +0200

    IP: 82.128.87.61 ---> Multilinks Telecommunications Limited, Nigeria

    katerina91@idknet.com

    jamesobi29@live.com

    jamesobi30@live.com

    acntntgenobjas@gmail.com

    Muguphon: +234-709-236-7810 ---> Multi-links Telecommunications Ltd., Nigeria


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  6. #546
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Tja, meine 'Mugu-Freunde' geben wohl nie auf:


    header:
    01: Received: from ns.alephnet.co.jp (EHLO mail.alephnet.co.jp) [210.250.131.1]
    02: by mx0.gmx.net (mx098) with SMTP; 31 Jan 2011 xx:xx:xx +0100
    03: Received: from User (unknown [41.191.85.137])
    04: by mail.alephnet.co.jp (Postfix) with ESMTP ID: [ID filtered]
    05: Tue, 1 Feb 2011 xx:xx:xx +0900 (JST)

    IP: 41.191.85.137 ---> DAZAN-CYBER, Benin

    office3325@att.net

    standardcharteredbank@freemotion.bb

    Muguphon: +44 702 4051 845 ---> Magrathea Telecommunications Limited, UK


    auch diesen Mugu von der Madrid-Konnektion hatten wir schon:


    header:
    01: Received: from nm3-vm1.bullet.mail.sp2.yahoo.com (HELO
    02: nm3-vm1.bullet.mail.sp2.yahoo.com) [98.139.90.231]
    03: by mx0.gmx.net (mx046) with SMTP; 03 Feb 2011 xx:xx:xx +0100
    04: Received: from [98.139.91.68] by nm3.bullet.mail.sp2.yahoo.com with
    05: NNFMP; 03 Feb 2011 xx:xx:xx -0000
    06: Received: from [98.139.91.45] by tm8.bullet.mail.sp2.yahoo.com with
    07: NNFMP; 03 Feb 2011 xx:xx:xx -0000
    08: Received: from [127.0.0.1] by omp1045.mail.sp2.yahoo.com with NNFMP; 03
    09: Feb 2011 xx:xx:xx -0000
    10: Received: (qmail 23795 invoked from network); 3 Feb 2011 xx:xx:xx -0000
    11: Received: from User (eemmap35 [at] 61.153.4.134 with login)
    12: by smtp101.sbc.mail.gq1.yahoo.com with SMTP; 03 Feb 2011
    13: xx:xx:xx -0800 PST

    IP: 61.153.4.134 ---> HANGZHOU-TELE-BRANCH, CN

    eemmap35@live.com

    emapinto@blumail.org

    emmpinto001@fastwebmail.it

    Muguphon: +34 672 901 053 ---> mobile number, Espana

    Mugufax: +34 917 692 733 ---> Colt Telecom España, S.a.



    header:
    01: Received: from vsmtp6.jaring.my (EHLO vsmtp6.jaring.my) [192.228.250.86]
    02: by mx0.gmx.net (mx075) with SMTP; 05 Feb 2011 xx:xx:xx +0100
    03: Received: from localhost (localhost.jaring.my [127.0.0.1])
    04: by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
    05: Sat, 5 Feb 2011 xx:xx:xx +0800 (MYT)
    06: (envelope-from rdalrymple [at] extons.co.uk)
    07: X-Virus-Scanned: by JARING Malware Filters (jaring.my)
    08: Received: from vsmtp6.jaring.my ([127.0.0.1])
    09: by localhost (vsmtp6.jaring.my [127.0.0.1]) (amavisd-new, port 10024)
    10: with LMTP ID: [ID filtered]
    11: Received: from User ([76.164.31.6])
    12: (authenticated bits=0)
    13: by vsmtp6.jaring.my (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
    14: Sat, 5 Feb 2011 xx:xx:xx +0800 (MYT)

    blovecole@freemail.hu

    Muguphon: +44-702-402-9183 ---> Magrathea Telecommunications Limited, UK


    der Mugu mit dem Telefon-Fimmel:


    header:
    01: Received: from relay2.PeterStar.ru (EHLO f0.peterstar.ru) [217.195.65.11]
    02: by mx0.gmx.net (mx036) with SMTP; 05 Feb 2011 xx:xx:xx +0100
    03: Received: from proxy.classic.sp.ru ([84.204.43.122])
    04: by f0.peterstar.ru (8.14.3/8.12.11) with ESMTP ID: [ID filtered]
    05: Sat, 5 Feb 2011 xx:xx:xx +0300 (MSK)
    06: Message-ID: [ID filtered]
    07: Received: from [61.5.158.93] (helo=User)
    08: by proxy.classic.sp.ru with esmtpa (Exim 4.44)
    09: ID: [ID filtered]


    header:
    01: Received: from relay2.PeterStar.ru (EHLO f0.peterstar.ru) [217.195.65.11]
    02: by mx0.gmx.net (mx047) with SMTP; 06 Feb 2011 xx:xx:xx +0100
    03: Received: from proxy.classic.sp.ru ([84.204.43.122])
    04: by f0.peterstar.ru (8.14.3/8.12.11) with ESMTP ID: [ID filtered]
    05: Sun, 6 Feb 2011 xx:xx:xx +0300 (MSK)
    06: Message-ID: [ID filtered]
    07: Received: from [61.5.158.93] (helo=User)
    08: by proxy.classic.sp.ru with esmtpa (Exim 4.44)
    09: ID: [ID filtered]

    IP: 61.5.158.93 ---> CYBER INTERNET SERVICES (PVT.) LTD., PK

    fdciarygent@gmail.com

    make_take45@yahoo.com

    Muguphon: +44 702 405-5051 ---> Magrathea Telecommunications Limited, UK

    Muguphon: +44 702 407-7324 ---> Magrathea Telecommunications Limited

    Muguphon: +44 702 406-1363 ---> Magrathea Telecommunications Limited

    BTW: ist niemand in der Lage, bei Magrathea mal den Stecker zu ziehen....


    gecracktes SquirrelMail:


    header:
    01: Received: from ueamailgate01.uea.ac.uk (EHLO ueamailgate01.uea.ac.uk)
    02: [139.222.131.184]
    03: by mx0.gmx.net (mx103) with SMTP; 05 Feb 2011 xx:xx:xx +0100
    04: Received: from ueams01.uea.ac.uk (ueams01.uea.ac.uk [139.222.131.78])
    05: by ueamailgate01.uea.ac.uk (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
    06: Sat, 5 Feb 2011 xx:xx:xx GMT
    07: Received: from [139.222.130.127] (helo=webmail.uea.ac.uk)
    08: by ueams01.uea.ac.uk with esmtp (Exim 4.69)
    09: (envelope-from <A.Marler [at] uea.ac.uk>)
    10: ID: [ID filtered]
    11: Received: from 41.138.183.112
    12: (SquirrelMail authenticated user dcs09hwu)
    13: by webmail.uea.ac.uk with HTTP;
    14: Sat, 5 Feb 2011 xx:xx:xx -0000 (GMT)

    IP: 41.138.183.112 ---> Visafone Communications Limited, Nigeria

    A.Marler@uea.ac.uk

    mr.fredpeters16@yahoo.com.hk

    mr.fredpeters10@yahoo.ie

    Muguphon: +44 702 405-1534 ---> Magrathea Telecommunications Limited, UK

    Muguphon: +44 702 401-3832 ---> Magrathea Telecommunications Limited


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  7. #547
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Da kann ich doch mal gleich ergänzen:


    header:
    01: Received: from idknet.com (mail.idknet.com [217.19.208.25])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Mon, 7 Feb 2011 xx:xx:xx +0100 (CET)
    04: Received: from [127.0.0.1] (account katerina91 HELO mail.idknet.com)
    05: by idknet.com (CommuniGate Pro SMTP 5.1.16)
    06: with ESMTPA ID: [ID filtered]
    07: Received: from User ([82.128.87.61] helo=User) with IPv4:125 by
    08: mail.idknet.com; 7 Feb 2011 xx:xx:xx +0200

    IP: 82.128.87.61 ---> Multilinks Telecommunications Limited, Nigeria

    accntgenobjas@gmail.com

    jamesobi29@live.com

    Muguphon: +234-709-236-7810 ---> Multilinks Telecommunications Ltd., Nigeria



    header:
    01: Received: from thor.bliksemdetectie.nl (thor.bliksemdetectie.nl
    02: [85.12.27.91])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Wed, 9 Feb 2011 xx:xx:xx +0100 (CET)
    07: Received: from [80.69.41.3] (helo=User)
    08: by thor.bliksemdetectie.nl with esmtpa (Exim 4.73)
    09: (envelope-from <jr [at] jrrouse.com>)
    10: ID: [ID filtered]


    header:
    01: Received: from thor.bliksemdetectie.nl (thor.bliksemdetectie.nl
    02: [85.12.27.91])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Wed, 9 Feb 2011 xx:xx:xx +0100 (CET)
    07: Received: from [80.69.41.3] (helo=User)
    08: by thor.bliksemdetectie.nl with esmtpa (Exim 4.73)
    09: (envelope-from <jr [at] jrrouse.com>)
    10: ID: [ID filtered]

    IP: 80.69.41.3 ---> marschall-net, DE

    isa101@yahoo.cn


    gecrackter Uni-Account:


    header:
    01: Received: from Mail-1.carrollu.edu (mail-1.carrollu.edu [140.104.157.2])
    02: (using TLSv1 with cipher AES128-SHA (128/128 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Thu, 10 Feb 2011 xx:xx:xx +0100 (CET)
    06: Received: from CMAIL.carrollu.edu ([fe80::f1eb:db80:cc08:68d5]) by
    07: Mail-1.carrollu.edu ([2002:8c68:9d02::8c68:9d02]) with mapi; Thu, 10
    08: Feb 2011
    09: xx:xx:xx -0600

    wrobinso@carrollu.edu

    loanapproval12@gncn.net



    header:
    01: Received: from ironport2-out.pppoe.ca (ironport2-out.teksavvy.com
    02: [206.248.154.183])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Thu, 10 Feb 2011 xx:xx:xx +0100 (CET)
    05: Received: from mail.teksavvy.com (HELO mail.pppoe.ca) ([206.248.188.90])
    06: by ironport2-out.pppoe.ca with ESMTP; 10 Feb 2011 xx:xx:xx -0500
    07: Received: from User ([218.56.50.213])
    08: by mail.pppoe.ca (Internet Mail Server v1.0) with ASMTP ID: [ID filtered]
    09: Thu, 10 Feb 2011 xx:xx:xx -0500

    IP: 218.56.50.213 ---> Shandong Provinceshandong University Huatian Technology Stock Corporation

    isa101@yahoo.cn


    gecrackter Web.de Account:


    header:
    01: Received: from fmmailgate04.web.de (EHLO fmmailgate04.web.de)
    02: [217.72.192.242]
    03: by mx0.gmx.net (mx091) with SMTP; 11 Feb 2011 xx:xx:xx +0100
    04: Received: from mwmweb005 ( [172.20.18.14])
    05: by fmmailgate04.web.de (Postfix) with ESMTP ID: [ID filtered]
    06: Fri, 11 Feb 2011 xx:xx:xx +0100 (CET)
    07: Received: from [77.70.128.219] by mwmweb005 with HTTP; Fri
    08: Feb 11 xx:xx:xx CET 2011

    IP: 77.70.128.219 ---> Comgeo Services, Nigeria

    rudolphj@web.de

    fatherjohnson196@aol.com

    Kontakt_fatherjohnson301@aol.com

    fatherjohnson301@aol.com

    Muguphon: +44 702 405 4861 ---> Magrathea Telecommunications Limited, UK

    Muguphon: +44 702 405 8748 ---> Magrathea Telecommunications Limited, UK


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  8. #548
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Ach ja, noch ein paar Mugu-Gauner, soviel Zeit muss sein:


    So viele Filter, eine Spamscore von 20 und trotzdem den Dreck rausgeblasen. Wie definiert man noch einmal hirnlose Merkbefreiung?


    header:
    01: Received: from asmtpout022.mac.com (EHLO asmtpout022.mac.com) [17.148.16.97]
    02: by mx0.gmx.net (mx032) with SMTP; 07 Feb 2011 xx:xx:xx +0100
    03: MIME-version: 1.0
    04: Content-type: multipart/alternative;
    05: boundary="Boundary_(ID_t+9PEcOPA5L0nX1T7OcvUA)"
    06: Received: from spool002.mac.com ([10.150.69.52])
    07: by asmtp022.mac.com (Oracle Communications Messaging Exchange Server
    08: 7u4-20.01
    09: 64bit (built Nov 21 2010)) with ESMTP id
    10: <0LG9006ZNFAU2U50 [at] asmtp022.mac.com>
    11: for xxxxx; Mon, 07 Feb 2011 xx:xx:xx -0800 (PST)
    12: X-Proofpoint-Virus-Version: vendor=fsecure
    13: engine=2.50.10432:5.2.15,1.0.148,0.0.0000
    14: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0
    15: X-Proofpoint-Spam-Details: rule=notspam policy=default score=2 spamscore=2
    16: ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=0
    17: classifier=spam
    18: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1102070086
    19: Received: from localhost ([10.150.79.234])
    20: by spool002.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01
    21: (built Dec
    22: 16 2008; 32bit)) with ESMTP ID: [ID filtered]
    23: 07 Feb 2011 xx:xx:xx -0800 (PST)
    24: X-Proofpoint-Spam-Details: rule=notspam policy=default score=20 spamscore=20
    25: ipscore=0 suspectscore=0 phishscore=1 bulkscore=0 adultscore=0
    26: classifier=spam
    27: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1102070086
    28: X-Proofpoint-Virus-Version: vendor=fsecure
    29: engine=2.50.10432:5.2.15,1.0.148,0.0.0000
    30: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0


    header:
    01: Received: from asmtpout022.mac.com (EHLO asmtpout022.mac.com) [17.148.16.97]
    02: by mx0.gmx.net (mx007) with SMTP; 07 Feb 2011 xx:xx:xx +0100
    03: MIME-version: 1.0
    04: Content-type: multipart/alternative;
    05: boundary="Boundary_(ID_Xc8lZ4HA35pALyrz+cr1jw)"
    06: Received: from spool002.mac.com ([10.150.69.52])
    07: by asmtp022.mac.com (Oracle Communications Messaging Exchange Server
    08: 7u4-20.01
    09: 64bit (built Nov 21 2010)) with ESMTP id
    10: <0LG9006ZNFAU2U50 [at] asmtp022.mac.com>
    11: for xxxxx; Mon, 07 Feb 2011 xx:xx:xx -0800 (PST)
    12: X-Proofpoint-Virus-Version: vendor=fsecure
    13: engine=2.50.10432:5.2.15,1.0.148,0.0.0000
    14: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0
    15: X-Proofpoint-Spam-Details: rule=notspam policy=default score=2 spamscore=2
    16: ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=0
    17: classifier=spam
    18: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1102070086
    19: Received: from localhost ([10.150.79.234])
    20: by spool002.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01
    21: (built Dec
    22: 16 2008; 32bit)) with ESMTP ID: [ID filtered]
    23: 07 Feb 2011 xx:xx:xx -0800 (PST)
    24: X-Proofpoint-Spam-Details: rule=notspam policy=default score=20 spamscore=20
    25: ipscore=0 suspectscore=0 phishscore=1 bulkscore=0 adultscore=0
    26: classifier=spam
    27: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1102070086
    28: X-Proofpoint-Virus-Version: vendor=fsecure
    29: engine=2.50.10432:5.2.15,1.0.148,0.0.0000
    30: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0


    header:
    01: Received-SPF: pass (mxeu2: domain of me.com designates 17.148.16.97 as
    02: permitted sender) client-ip=17.148.16.97;
    03: envelope-from=henry0000015 [at] me.com; helo=asmtpout022.mac.com;
    04: Received: from asmtpout022.mac.com (asmtpout022.mac.com [17.148.16.97])
    05: by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
    06: ID: [ID filtered]
    07: xx:xx:xx +0100
    08: MIME-version: 1.0
    09: Content-type: multipart/alternative;
    10: boundary="Boundary_(ID_INfhuULuXQvCMmdTFSgCeQ)"
    11: Received: from spool002.mac.com ([10.150.69.52])
    12: by asmtp022.mac.com (Oracle Communications Messaging Exchange Server
    13: 7u4-20.01
    14: 64bit (built Nov 21 2010)) with ESMTP id
    15: <0LG9006ZNFAU2U50 [at] asmtp022.mac.com>
    16: for xxxxx; Mon, 07 Feb 2011 xx:xx:xx -0800 (PST)
    17: X-Proofpoint-Virus-Version: vendor=fsecure
    18: engine=2.50.10432:5.2.15,1.0.148,0.0.0000
    19: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0
    20: X-Proofpoint-Spam-Details: rule=notspam policy=default score=2 spamscore=2
    21: ipscore=0 suspectscore=0 phishscore=0 bulkscore=0 adultscore=0
    22: classifier=spam
    23: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1102070086
    24: Received: from localhost ([10.150.79.234])
    25: by spool002.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01
    26: (built Dec
    27: 16 2008; 32bit)) with ESMTP ID: [ID filtered]
    28: 07 Feb 2011 xx:xx:xx -0800 (PST)
    29: X-Proofpoint-Spam-Details: rule=notspam policy=default score=20 spamscore=20
    30: ipscore=0 suspectscore=0 phishscore=1 bulkscore=0 adultscore=0
    31: classifier=spam
    32: adjust=0 reason=mlx engine=6.0.2-1012030000 definitions=main-1102070086
    33: X-Proofpoint-Virus-Version: vendor=fsecure
    34: engine=2.50.10432:5.2.15,1.0.148,0.0.0000
    35: definitions=2011-02-07_06:2011-02-07,2011-02-07,1970-01-01 signatures=0

    henry0000015@me.com


    auch diese Muguline ist nicht neu:


    header:
    01: Received: from mo-p07-ob.rzone.de (mo-p07-ob.rzone.de [81.169.146.188])
    02: (using TLSv1 with cipher EDH-RSA-DES-CBC3-SHA (168/168 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Wed, 9 Feb 2011 xx:xx:xx +0100 (CET)
    06: Received: from User ([80.69.41.3])
    07: by post.strato.de (fruni mo45) (RZmta 25.1)
    08: with ESMTPA ID: [ID filtered]

    IP: 80.69.41.3 ---> SMES - Siegbert Marschall/net-lab GmbH

    isa101@yahoo.cn



    header:
    01: Received: from fmmailgate05.web.de (EHLO fmmailgate05.web.de)
    02: [217.72.192.243]
    03: by mx0.gmx.net (mx081) with SMTP; 10 Feb 2011 xx:xx:xx +0100
    04: Received: from mwmweb007 ( [172.20.18.16])
    05: by fmmailgate05.web.de (Postfix) with ESMTP ID: [ID filtered]
    06: Thu, 10 Feb 2011 xx:xx:xx +0100 (CET)
    07: Received: from [178.63.231.91] by mwmweb007 with HTTP; Thu
    08: Feb 10 xx:xx:xx CET 2011

    IP: 178.63.231.91 ---> static.91.231.63.178.clients.your-server.de/Hetzner

    info@nhlottousa-org.co.cc

    nhlotterie.org@nhlottery.cc

    Muguphon: +16465978815 ---> geographic number, New York



    header:
    01: Received: from smtp.webfaction.com (mail6.webfaction.com [74.55.86.74])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sat, 12 Feb 2011 xx:xx:xx +0100 (CET)
    04: Received: from User (unknown [74.10.42.158])
    05: by smtp.webfaction.com (Postfix) with ESMTP ID: [ID filtered]
    06: Sat, 12 Feb 2011 xx:xx:xx -0600 (CST)

    IP: 74.10.42.158 ---> PaeTec Communications

    sanchez.sam2313@att.net

    tiruapo@gmail.com



    header:
    01: Received: from hbmail.lyris.net (EHLO hbmail.lyris.net) [8.8.12.46]
    02: by mx0.gmx.net (mx112) with SMTP; 13 Feb 2011 xx:xx:xx +0100
    03: Received: from User (75-213-63-74.servebyte.net [74.63.213.75])
    04: by hbmail.lyris.net (Postfix) with ESMTP ID: [ID filtered]
    05: Sat, 12 Feb 2011 xx:xx:xx -0800 (PST)

    bridget_monica2011@yahoo.co.jp

    brid_monic@att.net


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  9. #549
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Aus meinen (anscheinend nie versiegenden) Mugu-Quellen:


    header:
    01: Received: from rediffmail.com (f4mail-234-231.rediffmail.com
    02: [202.137.234.231])
    03: by xxxxx (Postfix) with SMTP ID: [ID filtered]
    04: for xxxxx; Tue, 15 Feb 2011 xx:xx:xx +0100 (CET)
    05: Received: (qmail 52555 invoked by UID: [UID filtered]
    06: Received: from unknown 174.36.32.177 by rediffmail.com via HTTP; 15 Feb
    07: 2011 xx:xx:xx -0000

    IP: 174.36.32.177 ---> 174.36.32.177-static.reverse.softlayer.com

    konstantinnovoselov1@rediffmail.com

    konstantinnovoselov.novo@ozu.es



    header:
    01: Received: from nm1-vm1.bullet.mail.kr3.yahoo.com
    02: (nm1-vm1.bullet.mail.kr3.yahoo.com [111.67.240.243])
    03: by xxxxx (Postfix) with SMTP ID: [ID filtered]
    04: for xxxxx; Tue, 15 Feb 2011 xx:xx:xx +0100 (CET)
    05: Received: from [111.67.240.251] by nm1.bullet.mail.kr3.yahoo.com with
    06: NNFMP; 15 Feb 2011 xx:xx:xx -0000
    07: Received: from [111.67.240.253] by tm2.bullet.mail.kr3.yahoo.com with
    08: NNFMP; 15 Feb 2011 xx:xx:xx -0000
    09: Received: from [127.0.0.1] by omp1002.mail.kr3.yahoo.com with NNFMP; 15
    10: Feb 2011 xx:xx:xx -0000
    11: Received: from [41.216.50.26] by web70701.mail.kr3.yahoo.com via HTTP;
    12: Tue, 15 Feb 2011 xx:xx:xx KST

    IP: 41.216.50.26 ---> Benin Telecoms SA

    glevreu.1893@rediffmail.com

    dhlcourier.plc31@msn.com

    Muguphon: +229-960-380-72 ---> mobile number, Benin


    gecracktes SquirrelMail:


    header:
    01: Received: from mail.scpasivex.com (EHLO scpasivex.com) [212.180.62.213]
    02: by mx0.gmx.net (mx014) with SMTP; 16 Feb 2011 xx:xx:xx +0100
    03: Received: from localhost (localhost [127.0.0.1])
    04: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]
    05: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)
    06: Received: from scpasivex.com ([127.0.0.1])
    07: by localhost (serveur.scpasivex.com [127.0.0.1]) (amavisd-new, port 10024)
    08: with ESMTP ID: [ID filtered]
    09: Received: from scpasivex.com (localhost [127.0.0.1])
    10: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]
    11: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)
    12: Received: from 41.220.69.20
    13: (SquirrelMail authenticated user ssi)
    14: by scpasivex.com with HTTP;
    15: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)


    header:
    01: Received: from mail.scpasivex.com (EHLO scpasivex.com) [212.180.62.213]
    02: by mx0.gmx.net (mx092) with SMTP; 16 Feb 2011 xx:xx:xx +0100
    03: Received: from localhost (localhost [127.0.0.1])
    04: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]
    05: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)
    06: Received: from scpasivex.com ([127.0.0.1])
    07: by localhost (serveur.scpasivex.com [127.0.0.1]) (amavisd-new, port 10024)
    08: with ESMTP ID: [ID filtered]
    09: Received: from scpasivex.com (localhost [127.0.0.1])
    10: by scpasivex.com (Postfix) with ESMTP ID: [ID filtered]
    11: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)
    12: Received: from 41.220.69.20
    13: (SquirrelMail authenticated user ssi)
    14: by scpasivex.com with HTTP;
    15: Wed, 16 Feb 2011 xx:xx:xx +0100 (CET)

    IP: 41.220.69.20 ---> 69-20.vgccl.net/MTN, Nigeria

    ssi@scpasivex.com

    markspector1@hotmail.co.uk

    markspector11@hotmail.co.uk



    header:
    01: Received: from ws6-1.us4.outblaze.com (ws6-1.us4.outblaze.com
    02: [205.158.62.196])
    03: by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
    04: ID: [ID filtered]
    05: xx:xx:xx +0100
    06: Message-ID: [ID filtered]
    07: Cc: recipient list not shown: ;
    08: X-ob-auth: rjohnson:silverstar.com [at] ob-silverstar.com
    09: Received: from unknown (HELO admin) (rjohnson [at] silverstar.com@89.238.164.24)
    10: by ws6-1.us4.outblaze.com with SMTP; 16 Feb 2011 xx:xx:xx -0000


    header:
    01: Received: from ws6-1.us4.outblaze.com (HELO ws6-1.us4.outblaze.com)
    02: [205.158.62.196]
    03: by mx0.gmx.net (mx023) with SMTP; 17 Feb 2011 xx:xx:xx +0100
    04: Message-ID: [ID filtered]
    05: Cc: recipient list not shown: ;
    06: X-ob-auth: rjohnson:silverstar.com [at] ob-silverstar.com
    07: Received: from unknown (HELO admin) (rjohnson [at] silverstar.com@89.238.164.24)
    08: by ws6-1.us4.outblaze.com with SMTP; 16 Feb 2011 xx:xx:xx -0000


    header:
    01: Received: from ws6-1.us4.outblaze.com (HELO ws6-1.us4.outblaze.com)
    02: [205.158.62.196]
    03: by mx0.gmx.net (mx088) with SMTP; 17 Feb 2011 xx:xx:xx +0100
    04: Message-ID: [ID filtered]
    05: Cc: recipient list not shown: ;
    06: X-ob-auth: rjohnson:silverstar.com [at] ob-silverstar.com
    07: Received: from unknown (HELO admin) (rjohnson [at] silverstar.com@89.238.164.24)
    08: by ws6-1.us4.outblaze.com with SMTP; 16 Feb 2011 xx:xx:xx -0000

    IP: 89.238.164.24 ---> db.serviture.net/OH Telecom

    junhuan11@fm.bb

    rjohnson@silverstar.com

    junhuan61@yahoo.com.hk



    header:
    01: Received: from outbound-mail02.westnet.com.au (EHLO
    02: outbound-mail02.westnet.com.au) [203.10.1.243]
    03: by mx0.gmx.net (mx046) with SMTP; 17 Feb 2011 xx:xx:xx +0100
    04: Received: from unknown (HELO webmail03.westnet.com.au) ([192.168.39.43])
    05: by outbound-mail02.westnet.com.au with ESMTP; 17 Feb 2011 xx:xx:xx +0800

    sunlightpromotion@southcountysteel.com

    munchie1@westnet.com.au

    bean.karen2010@yahoo.com

    whois:http://www.sunlightprocessing.com



    header:
    01: Received: from mail.beifa.com (www.beifa.com [202.101.188.84])
    02: by xxxxx (Postfix) with SMTP ID: [ID filtered]
    03: for xxxxx; Fri, 18 Feb 2011 xx:xx:xx +0100 (CET)
    04: Received: (qmail 25707 invoked from network); 17 Feb 2011 xx:xx:xx -0000
    05: Received: from unknown (HELO User) (alec [at] 216.2.161.6)
    06: by www.beifa.com with SMTP; 17 Feb 2011 xx:xx:xx -0000

    IP: 216.2.161.6 ---> XO Communications

    odinga013@gmail.com

    odinga002@gmail.com

    Ausnahmsweise hier mal das Mugu-Märchen, da ich diese Variante bisher noch nicht gesehen habe:

    Good day,

    I am looking for your co-operation in building a Tourist Hotel or Real
    Estate in your country. I am sorry if this is not in line with your
    business. I need an experienced person like you to assist me to set up
    and develop the project. On the resumption of the project, you will be
    made a Director for the role and the assistance you rendered. You will
    also be entitled to a percentage agreed upon between me (Hon. Raila
    Amolo Odinga) and you before the commencement of the project. Your
    immediate reply will be highly appreciated and I shall give you more
    information on this project.

    Please contact me at my private e-mail address odinga013@gmail.com


    Thanks and God bless.

    Hon. Raila Amolo Odinga


    header:
    01: Received: from alboreto.otenet-telecom.net (alboreto.otenet-telecom.net
    02: [213.207.140.122])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Thu, 17 Feb 2011 xx:xx:xx +0100 (CET)
    05: Received: from localhost (localhost [127.0.0.1])
    06: by alboreto.otenet-telecom.net (Postfix) with ESMTP ID: [ID filtered]
    07: Thu, 17 Feb 2011 xx:xx:xx +0200 (EET)
    08: X-Virus-Scanned: Debian amavisd-new at alboreto.otenet-telecom.net
    09: Received: from alboreto.otenet-telecom.net ([127.0.0.1])
    10: by localhost (alboreto.otenet-telecom.net [127.0.0.1]) (amavisd-new,
    11: port 10024)
    12: with ESMTP ID: [ID filtered]
    13: Received: from User (unknown [82.128.88.223])
    14: by alboreto.otenet-telecom.net (Postfix) with ESMTPA ID: [ID filtered]
    15: Thu, 17 Feb 2011 xx:xx:xx +0200 (EET)

    IP: 82.128.88.223 ---> Multilinks Telecommunications Limited, Nigeria

    janemilne1@gmail.com

    dhl.express@live.co.uk

    Muguphon: +44 702 408 4102 ---> Magrathea Telecommunications Limited, UK


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  10. #550
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.064

    Standard

    Meine Quellen sprudeln reichlich:


    header:
    01: Received: from mail.lbasantarem.com.br (EHLO www.lwww) [201.72.87.140]
    02: by mx0.gmx.net (mx086) with SMTP; 15 Feb 2011 xx:xx:xx +0100
    03: Received: from lbasantarem.com.br (localhost.localdomain [127.0.0.1])
    04: by www.lwww (Postfix) with ESMTP ID: [ID filtered]
    05: Tue, 15 Feb 2011 xx:xx:xx -0300 (BRT)

    X-OriginatingIP: 41.203.64.250 (paulo) ---> GLO-Mobile Network Services, Nigeria

    paulo@lbasantarem.com.br

    dhl.2011@yahoo.com.hk

    Mugphon: +2348072430217 ---> Globacom Ltd., Nigeria



    header:
    01: Received: from omr-d33.mx.aol.com (EHLO omr-d33.mx.aol.com)
    02: [205.188.249.131]
    03: by mx0.gmx.net (mx028) with SMTP; 15 Feb 2011 xx:xx:xx +0100
    04: Received: from oms-mb01.r1000.mx.aol.com (oms-mb01.r1000.mx.aol.com
    05: [64.12.102.137])
    06: by omr-d33.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
    07: Tue, 15 Feb 2011 xx:xx:xx -0500
    08: Message-ID: [ID filtered]
    09: Received: from mtaout-ma01.r1000.mx.aol.com
    10: (mtaout-ma01.r1000.mx.aol.com [172.29.41.1])
    11: by oms-mb01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
    12: 84B9C1C00008B;
    13: Tue, 15 Feb 2011 xx:xx:xx -0500 (EST)
    14: Received: from WIN-Q9I620H8H9I (unknown [178.33.149.185])
    15: by mtaout-ma01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
    16: ESMTPA ID: [ID filtered]
    17: Tue, 15 Feb 2011 xx:xx:xx -0500 (EST)

    IP: 178.33.149.185 ---> SANTREX/OVH

    aliyu.gusau@blumail.org

    Breakdown866@aol.com

    Muguphon: +234-708-479-9600 ---> Celtel Nigeria Limited/Zain



    header:
    01: Received: from bit.bg (EHLO BIT.bg) [193.108.24.210]
    02: by mx0.gmx.net (mx118) with SMTP; 16 Feb 2011 xx:xx:xx +0100
    03: Received: from User ([202.1.114.170])
    04: (authenticated bits=0)
    05: by BIT.bg (8.14.4/8.14.4) with ESMTP ID: [ID filtered]
    06: Wed, 16 Feb 2011 xx:xx:xx +0200

    IP: 202.1.114.170 ---> Globalstride, PH

    redazione@acra.it


    Und wieder mal einen Uni-Account gecrackt:


    header:
    01: Received: from dns.hsps.tpc.edu.tw (EHLO dns.hsps.tpc.edu.tw) [163.20.58.1]
    02: by mx0.gmx.net (mx115) with SMTP; 18 Feb 2011 xx:xx:xx +0100
    03: Received: from dns.hsps.tpc.edu.tw (localhost [127.0.0.1])
    04: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
    05: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)
    06: Received: from hsps.tpc.edu.tw (localhost [127.0.0.1])
    07: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
    08: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)


    header:
    01: Received: from dns.hsps.tpc.edu.tw (EHLO dns.hsps.tpc.edu.tw) [163.20.58.1]
    02: by mx0.gmx.net (mx107) with SMTP; 18 Feb 2011 xx:xx:xx +0100
    03: Received: from dns.hsps.tpc.edu.tw (localhost [127.0.0.1])
    04: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
    05: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)
    06: Received: from hsps.tpc.edu.tw (localhost [127.0.0.1])
    07: by dns.hsps.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]
    08: Fri, 18 Feb 2011 xx:xx:xx +0800 (CST)

    X-OriginatingIP: 82.128.16.118 (e60730) ---> ml82.128.16.118.multilinks.com, Nigeria

    uk_sweepstakes0001@live.com

    Muguphon: +44 702 4031519 ---> Magrathea Telecommunications Limited, UK



    header:
    01: Received: from osxserver.canberra-urology.com (unknown [203.29.87.57])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sat, 19 Feb 2011 xx:xx:xx +0100 (CET)
    06: Received: from User ([80.69.41.3])
    07: (authenticated user accounts [at] canberra-urology.com)
    08: by osxserver.canberra-urology.com (Kerio Connect 7.1.2);
    09: Sat, 19 Feb 2011 xx:xx:xx +1100

    IP: 80.69.41.3 ---> Siegbert Marschall DE-based infratructure net (bitte merken)

    western.union1912@globomail.com

    davem@teksavvy.com

    accounts@canberra-urology.com



    header:
    01: Received: from frontend03n.mail.kz (EHLO mail.kz) [92.46.53.18]
    02: by mx0.gmx.net (mx095) with SMTP; 20 Feb 2011 xx:xx:xx +0100
    03: Received: from [76.164.31.6] (account anne [at] mail.kz HELO User)
    04: by backend01n.mail.kz (CommuniGate Pro SMTP 5.2.13)
    05: with ESMTPA ID: [ID filtered]

    IP: 76.164.31.6 ---> Integra Telecom, Inc.

    anne@mail.kz

    bcole15@freemail.hu

    Muguphon: +44-702-402-9183 ---> Magrathea Telecommunications Limited, UK



    header:
    01: Received: from unknown (EHLO ns1-131.psychodev.net) [122.155.13.43]
    02: by mx0.gmx.net (mx031) with SMTP; 20 Feb 2011 xx:xx:xx +0100
    03: Received: from [123.108.110.47] (helo=User)
    04: by ns1-131.psychodev.net with esmtpa (Exim 4.67)
    05: (envelope-from <erickrocher [at] yahoo.com>)
    06: ID: [ID filtered]

    IP: 123.108.110.47 ---> Pang International Limited, HK

    erickrocher@yahoo.com

    eric_krocher1@yahoo.co.jp


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

Lesezeichen

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
Partnerlink:
REDDOXX Anti-Spam Lösungen