Seite 96 von 152 ErsteErste ... 46869495969798106146 ... LetzteLetzte
Ergebnis 951 bis 960 von 1513

Thema: Mugu Dubletten

  1. #951
    Mitglied
    Registriert seit
    30.12.2007
    Beiträge
    529

    Standard

    Zitat Zitat von Syphedias Beitrag anzeigen
    Könnte das Ganze durch ein "Skript" generiert worden sein... im Header taucht eine Originating Script Zeile auf. (Kenn ich so noch nicht. Irgendwer, der das kennt?)
    Das ist sehr wahrscheinlich das missbrauchte PHP-Script, mit dem der Mist verschickt wurde. Das sind oft PHP-Scripte mit Sicherheitslücken, die entweder eine unsichere Mail-Funktion haben, bei der man von außen alles beliebig einstellen kann, oder sogar erlauben, dass beliebige Kommandos auf dem Server ausgeführt werden.
    Solche Lücken werden systematisch gesucht und dann gebündelt in der "Szene" verkauft. Dann kann man Mails rausballern solang bis der Seitenbetreiber merkt, dass was nicht in Ordnung ist, und das Script löscht oder absichert. Das kann auch schon mal ein paar Wochen lang dauern :-(

    hoppala

  2. #952
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Und noch etwas Mugu-Rotz:


    header:
    01: Received: from posti.globalgear.fi ([109.204.232.99]) by mx-ha.gmx.net
    02: (mxgmx108) with ESMTP (Nemesis) ID: [ID filtered]
    03: Wed, 08 Jul 2015 xx:xx:xx +0200
    04: Received: from localhost (localhost.localdomain [127.0.0.1])
    05: by posti.globalgear.fi (Postfix) with ESMTP ID: [ID filtered]
    06: Tue, 7 Jul 2015 xx:xx:xx +0300 (EEST)
    07: Received: from posti.globalgear.fi ([127.0.0.1])
    08: by localhost (posti.globalgear.fi [127.0.0.1]) (amavisd-new, port 10024)
    09: with ESMTP ID: [ID filtered]
    10: Received: from [192.168.0.2] (unknown [105.112.8.223])
    11: (Authenticated sender: xerox [at] globalgear.fi)
    12: by posti.globalgear.fi (Postfix) with ESMTPSA ID: [ID filtered]
    13: Tue, 7 Jul 2015 xx:xx:xx +0300 (EEST

    IP: 105.112.8.223 ---> Airtel-Nigeria

    gecrackt: xerox@globalgear.fi

    evansloaners00@gmail.com



    header:
    01: Received: from mail-wg0-f44.google.com ([74.125.82.44]) by mx-ha.gmx.net
    02: (mxgmx110) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: by wgov12 with SMTP ID: [ID filtered]

    evansloaners00@gmail.com



    header:
    01: Received: from na01-bn1-obe.outbound.protection.outlook.com
    02: ([157.56.111.248]) by mx-ha.gmx.net (mxgmx106) with ESMTPS (Nemesis) id
    03: 0MAkPX-1ZJdTY0Qqh-00BtbP for xxxxx; Thu, 09 Jul 2015 xx:xx:xx +0200
    04: Received: from BY2PR02CA0057.namprd02.prod.outlook.com (10.141.216.47) by
    05: BY2PR02MB410.namprd02.prod.outlook.com (10.141.143.14) with Microsoft SMTP
    06: Server (TLS) ID: [ID filtered]
    07: Received: from BL2FFO11FD031.protection.gbl (2a01:111:f400:7c09::150) by
    08: BY2PR02CA0057.outlook.office365.com (2a01:111:e400:2c40::47) with Microsoft
    09: SMTP Server (TLS) ID: [ID filtered]
    10: xx:xx:xx +0000
    11: Received: from HUB02-NBED-FRD.nbed.nb.ca (204.81.14.23) by
    12: BL2FFO11FD031.mail.protection.outlook.com (10.173.160.71) with
    13: Microsoft SMTP Server (TLS) ID: [ID filtered]
    14: xx:xx:xx +0000
    15: Received: from MBX03-NBED-FRD.nbed.nb.ca ([204.81.14.8]) by
    16: HUB02-NBED-FRD.nbed.nb.ca ([204.81.14.12]) with mapi ID: [ID filtered]
    17: Thu, 9 Jul 2015 xx:xx:xx -0300

    x-originating-ip: [204.81.14.24] ---> 204.81.14.24.nbed.nb.ca

    gecrackt: Brenda.Phillips@NBED.NB.CA

    hsbcreditsolution01@gmail.com



    header:
    01: Received: from icd.nosu.ru ([78.111.246.3]) by mx-ha.gmx.net (mxgmx103) with
    02: ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from u18097758.onlinehome-server.com ([74.208.68.233] helo=User) by
    04: icd.nosu.ru with esmtpa (Exim 4.72) (envelope-from <info [at] ttc.com>) ID: [ID filtered]
    05: charset="Windows-1251"

    bossyjunes@ukr.net
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  3. #953
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Auch der Mugu-Rotz hört nicht auf:


    header:
    01: Received: from na01-by2-obe.outbound.protection.outlook.com
    02: ([207.46.100.247]) by mx-ha.gmx.net (mxgmx103) with ESMTPS (Nemesis) id
    03: 0M837l-1Yr5Od2zSb-00vfxO for xxxxx; Fri, 10 Jul 2015 xx:xx:xx +0200
    04: Received: from CY1PR0201CA0006.namprd02.prod.outlook.com (10.163.30.144) by
    05: BN1PR0201MB0579.namprd02.prod.outlook.com (10.160.169.148) with Microsoft
    06: SMTP Server (TLS) ID: [ID filtered]
    07: Received: from BL2FFO11FD015.protection.gbl (2a01:111:f400:7c09::109) by
    08: CY1PR0201CA0006.outlook.office365.com (2a01:111:e400:58b9::16) with
    09: MicrosoftSMTP Server (TLS) ID: [ID filtered]
    10: xx:xx:xx +0000
    11: Received: from fsu-exch-nwr02.fsu.edu (146.201.58.209) by
    12: BL2FFO11FD015.mail.protection.outlook.com (10.173.160.223) with Microsoft
    13: SMTP Server (TLS) ID: [ID filtered]
    14: xx:xx:xx +0000
    15: Received: from [192.168.0.105] (197.231.183.78) by fsu-exch-nwr02.fsu.edu
    16: (10.146.58.166) with Microsoft SMTP Server (TLS) ID: [ID filtered]
    17: 2015 xx:xx:xx -0400

    X-Originating-IP: [197.231.183.78] ---> Frontier Optical Networks Ltd, Kenya

    gecrackt: jmoon2@fsu.edu

    mzpatrdler1@outlook.com



    header:
    01: Received: from s17470203.onlinehome-server.info ([87.106.243.131]) by
    02: mx-ha.gmx.net (mxgmx105) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from kufafoqe (unknown [27.74.227.12]) by
    04: s17470203.onlinehome-server.info (Postfix) with ESMTPA ID: [ID filtered]

    gecrackt: markus-albert@game-test.de

    mihey.iresha.bor@gmail.com
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  4. #954
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Alsda an Mugus wären:


    header:
    01: Received: from mail.leightoncontractors.com.au ([212.48.74.135]) by
    02: mx-ha.gmx.net (mxgmx007) with ESMTP (Nemesis) ID: [ID filtered]
    03: Received: from ip246.50-31-2.static.steadfastdns.net
    04: (ip246.50-31-2.static.steadfastdns.net [50.31.2.246]) by
    05: mail.leightoncontractors.com.au (Postfix) with ESMTPA ID: [ID filtered]

    riad.qabbani1@peoplepc.com

    riadqabbani@olegenni.com

    afsurkazeem@gmail.com



    header:
    01: Received: from pbtsltd.co.uk ([81.138.236.116]) by mx-ha.gmx.net (mxgmx110)
    02: with ESMTP (Nemesis) ID: [ID filtered]
    03: Received: from myxemub ([123.26.38.5]) by pbtsltd.co.uk with Microsoft
    04: SMTPSVC(6.0.3790.4675); Mon, 13 Jul 2015 xx:xx:xx +0100

    mihey.iresha.bor@gmail.com

    gecrackt: ltaiwo@pbtsltd.co.uk



    header:
    01: Received: from mail.iepcjalisco.org.mx ([187.254.143.228]) by mx-ha.gmx.net
    02: (mxgmx005) with ESMTP (Nemesis) ID: [ID filtered]
    03: Received: from mail.iepcjalisco.org.mx (MailServer [192.168.74.12]) by
    04: mail.iepcjalisco.org.mx with ESMTPA; Sun, 26 Jul 2015 xx:xx:xx -0500

    gecrackt: in-fo@iepcjalisco.org.mx

    cooperativeloanfunds@outlook.com
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  5. #955
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Etwas Mugu-Nachtrag:


    header:
    01: Received: from smtp.aeict.nl ([37.153.237.3]) by mx-ha.gmx.net
    02: (mxgmx004) with ESMTPS (Nemesis) ID: [ID filtered]
    03: 2015 xx:xx:xx +0200
    04: Received: (qmail 29557 invoked by UID: [UID filtered]
    05: Received: by simscan 1.1.0 ppID: [ID filtered]
    06: scanners: clamav: 0.96/m:
    07: Received: from unknown (HELO ?10.197.86.65?)
    08: (piet [at] geleijn-transport.nl@5.170.152.229)
    09: by smtp.aeict.nl with SMTP; 26 Jul 2015 xx:xx:xx +0200

    gecrackt: piet@geleijn-transport.nl

    damo@yahoo.co.jp

    adamoedoardo@aol.com



    header:
    01: Received: from dolans.ie ([89.108.88.213]) by mx-ha.gmx.net (mxgmx004) with
    02: ESMTP (Nemesis) ID: [ID filtered]
    03: 2015 xx:xx:xx +0200

    whois:http://letsmeet-today.com/31528-30/

    IP: 46.161.30.19 ---> Net for customer ID 12510, RU



    header:
    01: Received: from mail.potatoes.com ([64.146.167.109]) by mx-ha.gmx.net
    02: (mxgmx003) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from localhost ([127.0.0.1]) by mail.potatoes.com; Fri, 31 Jul 2015
    04: xx:xx:xx -0700
    05: charset="Windows-1251"


    header:
    01: Received: from mail.potatoes.com ([64.146.167.109]) by mx-ha.gmx.net
    02: (mxgmx005) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from localhost ([127.0.0.1]) by mail.potatoes.com; Fri, 31 Jul 2015
    04: xx:xx:xx -0700


    connecta_connecta@yahoo.com.hk

    aa.connectt1@yahoo.com.ph



    header:
    01: Received: from emea01-db3-obe.outbound.protection.outlook.com
    02: (mail-db3hn0246.outbound.protection.outlook.com [157.55.234.246])
    03: by xxxxx (Postfix) with ESMTPS
    04: for xxxxx; Sun, 2 Aug 2015 xx:xx:xx +0200 (CEST)
    05: Received: from YdeaPad.Home (88.1.251.162) by
    06: DB5PR01MB1477.eurprd01.prod.exchangelabs.com (10.164.36.139) with Microsoft
    07: SMTP Server (TLS) ID: [ID filtered]


    header:
    01: Received: from emea01-am1-obe.outbound.protection.outlook.com
    02: ([157.56.112.252]) by mx-ha.gmx.net (mxgmx005) with ESMTPS (Nemesis) id
    03: 0MVaT1-1ZN0y21gBr-00Yxep for xxxxx; Sun, 02 Aug 2015 xx:xx:xx +0200
    04: Received: from YdeaPad.Home (88.1.251.162) by
    05: VI1PR01MB1118.eurprd01.prod.exchangelabs.com (10.162.118.148) with
    06: Microsoft SMTP Server (TLS) ID: [ID filtered]


    header:
    01: Received: from emea01-db3-obe.outbound.protection.outlook.com
    02: (mail-db3hn0246.outbound.protection.outlook.com [157.55.234.246])
    03: by xxxxx (Postfix) with ESMTPS
    04: for xxxxx; Sun, 2 Aug 2015 xx:xx:xx +0200 (CEST)
    05: Received: from YdeaPad.Home (88.1.251.162) by
    06: DB5PR01MB1477.eurprd01.prod.exchangelabs.com (10.164.36.139) with Microsoft
    07: SMTP Server (TLS) ID: [ID filtered]


    header:
    01: Received: from emea01-db3-obe.outbound.protection.outlook.com
    02: ([157.55.234.246]) by mx-ha.gmx.net (mxgmx012) with ESMTPS (Nemesis) id
    03: 0MWOkM-1ZKjFb2Ok6-00XcgI for xxxxx; Thu, 06 Aug 2015 xx:xx:xx +0200
    04: Received: from YdeaPad.Home (88.1.251.162) by
    05: AM3PR08MB0673.eurprd08.prod.outlook.com (10.163.189.15) with Microsoft SMTP
    06: Server (TLS) ID: [ID filtered]

    X-Originating-IP: [88.1.251.162] ---> 162.Red-88-1-251.dynamicIP.rima-tde.net

    a17@wilsonChurch.onmicrosoft.com

    b17@balejoel.onmicrosoft.com

    wilsonstephenandrew@gmail.com
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  6. #956
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Noch etwas Nachschlag:


    header:
    01: Received: from zmmimta1.jfc.com.ph (mx1.manginasal.com [46.51.218.102])
    02: by xxxxx (Postfix) with ESMTP
    03: for xxxxx; Fri, 7 Aug 2015 xx:xx:xx +0200 (CEST)
    04: Received: from localhost (localhost [127.0.0.1])
    05: by zmmimta1.jfc.com.ph (Postfix) with ESMTP ID: [ID filtered]
    06: Fri, 7 Aug 2015 xx:xx:xx +0800 (PHT)
    07: X-Virus-Scanned: amavisd-new at manginasal.com
    08: Received: from zmmimta1.jfc.com.ph ([127.0.0.1])
    09: by localhost (zmmimta1.jfc.com.ph [127.0.0.1]) (amavisd-new, port 10024)
    10: with ESMTP ID: [ID filtered]
    11: Received: from zmmibox1.jfc.com.ph (zmmi-box1.jfc.com.ph [172.20.27.21])
    12: by zmmimta1.jfc.com.ph (Postfix) with ESMTP ID: [ID filtered]
    13: Fri, 7 Aug 2015 xx:xx:xx +0800 (PHT)
    14: Received: from localhost (localhost [127.0.0.1])
    15: by zmmibox1.jfc.com.ph (Postfix) with ESMTP ID: [ID filtered]
    16: Fri, 7 Aug 2015 xx:xx:xx +0800 (PHT)
    17: Received: from zmmibox1.jfc.com.ph ([127.0.0.1])
    18: by localhost (zmmibox1.jfc.com.ph [127.0.0.1]) (amavisd-new, port 10024)
    19: with ESMTP ID: [ID filtered]
    20: Received: from zmmibox1.jfc.com.ph (localhost [127.0.0.1])
    21: by zmmibox1.jfc.com.ph (Postfix) with ESMTP ID: [ID filtered]
    22: Fri, 7 Aug 2015 xx:xx:xx +0800 (PHT)

    gecrackt: mi0404@manginasal.com

    gregcredithome@gmail.com



    header:
    01: Received: from mail.ribblebox.nl ([83.160.113.146]) by mx-ha.gmx.net
    02: (mxgmx012) with ESMTP (Nemesis) ID: [ID filtered]
    03: Mon, 17 Aug 2015 xx:xx:xx +0200
    04: Received: from User ([172.245.104.187]) by mail.ribblebox.nl with
    05: Microsoft SMTPSVC(6.0.3790.4675); Sat, 15 Aug 2015 xx:xx:xx +0200

    foxw5300@gmail.com

    williamsfox9087@gmail.com

    williamsfox09@Safe-mail.net
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  7. #957
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Und noch etwas Mugu-Futter:


    header:
    01: Received: from mail.ppn.co.th ([61.90.139.163]) by mx-ha.gmx.net (mxgmx111)
    02: with ESMTP (Nemesis) ID: [ID filtered]
    03: Aug 2015 xx:xx:xx +0200
    04: Received: from localhost (mail.ppn.co.th [127.0.0.1])
    05: by mail.ppn.co.th (iRedMail) with ESMTP ID: [ID filtered]
    06: Fri, 7 Aug 2015 xx:xx:xx +0700 (ICT)
    07: Received: from mail.ppn.co.th ([127.0.0.1])
    08: by localhost (mail.ppn.co.th [127.0.0.1]) (amavisd-new, port 10024)
    09: with ESMTP ID: [ID filtered]
    10: Received: from User (unknown [197.211.52.14])
    11: by mail.ppn.co.th (iRedMail) with ESMTPA ID: [ID filtered]
    12: Fri, 7 Aug 2015 xx:xx:xx +0700 (ICT)
    13: charset="Windows-1250"

    IP: 197.211.52.14 ---> GLOMOBILE, Nigeria

    grcrackt: estimate@ppn.co.th

    funds.transfer@gtb-uk.co

    paulyoung147@gmail.com

    Muguphon: +44 - (704) 579 3366 ---> Open Telecom International Ltd, UK



    header:
    01: Received: from hac.hacc.org ([192.163.213.92]) by mx-ha.gmx.net (mxgmx109)
    02: with ESMTPS (Nemesis) ID: [ID filtered]
    03: Aug 2015 xx:xx:xx +0200
    04: Received: from u18494130.onlinehome-server.com ([50.21.181.41]:58345
    05: helo=User) by hac.hacc.org with esmtpa (Exim 4.85) (envelope-from <careers [at] hacc.org>)
    06: ID: [ID filtered]
    07: charset="Windows-1251"

    gecrackt: careers@hacc.org

    pwilliam1975@yahoo.com.hk



    header:
    01: Received: from igb.igbassetmanagement.com ([192.254.168.235]) by
    02: mx-ha.gmx.net
    03: (mxgmx011) with ESMTPS (Nemesis) ID: [ID filtered]
    04: Received: from [46.29.255.136] (port=4049 helo=User) by
    05: igb.igbassetmanagement.com with esmtpa (Exim 4.85)
    06: (envelope-from <jeffery.obi1010 [at] gmail.com>)
    07: ID: [ID filtered]
    08: charset="Windows-1251"

    gecrackt: info@1920vnantiques.com

    gerhard.foster@aol.com

    jeffery.obi1010@gmail.com



    header:
    01: Received: from correo.mindeporte.gob.ve ([200.11.198.218]) by mx-ha.gmx.net
    02: (mxgmx111) with ESMTP (Nemesis) ID: [ID filtered]
    03: Received: from localhost (localhost.localdomain [127.0.0.1])
    04: by correo.mindeporte.gob.ve (Postfix) with ESMTP ID: [ID filtered]
    05: Thu, 13 Aug 2015 xx:xx:xx -0430 (VET)
    06: X-Virus-Scanned: amavisd-new at mindeporte.gob.ve
    07: Received: from correo.mindeporte.gob.ve ([127.0.0.1])
    08: by localhost (correo.mindeporte.gob.ve [127.0.0.1]) (amavisd-new, port
    09: 10024)
    10: with ESMTP ID: [ID filtered]
    11: Received: from correo.mindeporte.gob.ve (correo.mindeporte.gob.ve
    12: [10.1.110.10])
    13: by correo.mindeporte.gob.ve (Postfix) with ESMTP ID: [ID filtered]
    14: Thu, 13 Aug 2015 xx:xx:xx -0430 (VET)

    X-Originating-IP: [41.216.50.102] ---> BENINTELECOMS

    gecrackt: ctorrealba01@mindeporte.gob.ve

    david.drummond.guk.05@gmail.com



    header:
    01: Received: from mailgateway.vdc3.vn ([203.162.31.126]) by mx-ha.gmx.net
    02: (mxgmx104) with ESMTP (Nemesis) ID: [ID filtered]
    03: Fri, 14 Aug 2015 xx:xx:xx +0200
    04: Received: from mail.vas2.vdc3.vn ([203.162.31.113]) by mailgateway.vdc3.vn;
    05: Fri, 14 Aug 2015 xx:xx:xx +0700
    06: Received: from User ([87.22.44.78]) by vas2.vdc3.vn with MailEnable
    07: ESMTP; Fri, 14 Aug 2015 xx:xx:xx +0700
    08: charset="Windows-1251"

    slamido722@aol.com

    fbicomeyjrr@hotmail.com

    Muguphon: 011 234 803 860 4856 ---> MTN Nigeria Communications Ltd.



    header:
    01: Received: from mailout05.t-online.de ([194.25.134.82]) by mx-ha.gmx.net
    02: (mxgmx111) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from mailin64.aul.t-online.de (mailin64.aul.t-online.de
    04: [172.20.27.243])
    05: by mailout05.t-online.de (Postfix) with SMTP ID: [ID filtered]
    06: Sat, 15 Aug 2015 xx:xx:xx +0200 (CEST)
    07: Received: from snegmortgageteam.ca ([197.221.16.14]) by
    08: mailin64.aul.t-online.de
    09: with esmtp ID: [ID filtered]

    IP: 197.221.16.14 ---> Hetzner, Südafrika

    Skype: umas99



    header:
    01: Received: from APAC01-HK1-obe.outbound.protection.outlook.com
    02: ([134.170.140.247]) by mx-ha.gmx.net (mxgmx107) with ESMTPS (Nemesis) id
    03: 0M6wvZ-1YcuFG14mj-00wklX for xxxxx; Sat, 15 Aug 2015 xx:xx:xx +0200
    04: Received: from [106.204.232.60] (106.204.232.60) by
    05: HKXPR06MB0581.apcprd06.prod.outlook.com (10.161.181.142) with Microsoft
    06: SMTP Server (TLS) ID: [ID filtered]

    X-Originating-IP: [106.204.232.60] ---> Bharti Airtel Ltd.

    cooperativeloanfunds1@outlook.com



    header:
    01: Received: from APC01-SG2-obe.outbound.protection.outlook.com
    02: ([104.47.125.238]) by mx-ha.gmx.net (mxgmx002) with ESMTPS (Nemesis) id
    03: 0LfSW1-1Z2J7W13mL-00p6pw for xxxxx; Sat, 15 Aug 2015 xx:xx:xx +0200
    04: Received: from [100.64.216.220] (116.203.75.99) by
    05: PS1PR02MB1196.apcprd02.prod.outlook.com (10.165.34.22) with Microsoft SMTP
    06: Server (TLS) ID: [ID filtered]

    X-Originating-IP: [116.203.75.99] ---> MTS-INDIA

    ouedragomrsvera@gmail.com



    header:
    01: Received: from APC01-SG2-obe.outbound.protection.outlook.com
    02: (mail-sg2apc01hn0235.outbound.protection.outlook.com [104.47.125.235])
    03: by xxxxx (Postfix) with ESMTPS
    04: for xxxxx; Sat, 15 Aug 2015 xx:xx:xx +0200 (CEST)
    05: Received: from [100.64.216.220] (116.203.75.99) by
    06: HK2PR02MB1185.apcprd02.prod.outlook.com (10.165.56.15) with Microsoft SMTP
    07: Server (TLS) ID: [ID filtered]

    X-Originating-IP: [116.203.75.99] ---> MTS-INDIA

    ouedragomrsvera@gmail.com


    Da die Mugu-Boyz mittlerweile ja zu blöde sind, um einen Eimer Wasser umzutreten, muss halt Ratware bei der Russenmafia eingekauft werden. Und Office365 erfreut sich zunehmender Beliebtheit.
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  8. #958

  9. #959
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Wieder etwas Mugu-Futter, alles dank fröhlicher Unterstützung der Russenmafia:


    header:
    01: Received: from mail.ribblebox.nl ([83.160.113.146]) by mx-ha.gmx.net
    02: (mxgmx012) with ESMTP (Nemesis) ID: [ID filtered]
    03: Mon, 17 Aug 2015 xx:xx:xx +0200
    04: Received: from User ([172.245.104.187]) by mail.ribblebox.nl with
    05: Microsoft SMTPSVC(6.0.3790.4675); Sat, 15 Aug 2015 xx:xx:xx +0200
    06: charset="Windows-1251"

    foxw5300@gmail.com

    williamsfox9087@gmail.com

    williamsfox09@Safe-mail.net


    derselbe Mugu:


    header:
    01: Received: from mail.vanderkooijadvocaten.nl ([82.95.121.30]) by
    02: mx-ha.gmx.net
    03: (mxgmx011) with ESMTP (Nemesis) ID: [ID filtered]
    04: Wed, 19 Aug 2015 xx:xx:xx +0200 ---> mail.vanderkooijadvocaten.nl
    05: Received: from User ([172.245.104.187]) by mail.vanderkooijadvocaten.nl
    06: with Microsoft SMTPSVC(6.0.3790.4675); Tue, 18 Aug 2015 xx:xx:xx +0200
    07: charset="Windows-1251"

    foxw5300@gmail.com

    williamsfox9087@gmail.com

    williamsfox09@Safe-mail.net



    header:
    01: Received: from server.model-lab.local ([78.188.23.137]) by mx-ha.gmx.net
    02: (mxgmx105) with ESMTP (Nemesis) ID: [ID filtered]
    03: Received: from User (197.211.53.5) by server.model-lab.local (192.168.1.2)
    04: with Microsoft SMTP Server ID: [ID filtered]
    05: charset="Windows-1251"

    X-GFI-SMTP-RemoteIP: 197.211.53.5 ---> GLOMOBILE, Nigeria

    revmartinc01@gmail.com

    atmcardf@gmail.com

    Muguphon: +234-810-073-3632 ---> Nigeria



    header:
    01: Received: from vps-1014083-1312.smarthostnet.com ([203.86.237.131]) by
    02: mx-ha.gmx.net (mxgmx108) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from User (unknown [178.108.113.228]) by
    04: vps-1014083-1312.smarthostnet.com (Postfix) with ESMTPA ID: [ID filtered]
    05: charset="Windows-1251"

    IP: 178.108.113.228 ---> customer29157.108.kt.cust.t-mobile.co.uk

    quickfinanceplc@gmail.com

    quickfinanceloan7@gmail.com
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  10. #960
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.060

    Standard

    Und noch ein paar für die Sammlung:


    header:
    01: Received: from rcdcomponents.com ([64.140.242.242]) by mx-ha.gmx.net
    02: (mxgmx011) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from User by rcdcomponents.com (MDaemon PRO v14.5.4)
    04: with ESMTPA ID: [ID filtered]
    05: Mon, 17 Aug 2015 xx:xx:xx -0400
    06: X-Spam-Processed: rcdcomponents.com, Mon, 17 Aug 2015 xx:xx:xx -0400
    07: (not processed: message from trusted or authenticated source)
    08: charset="Windows-1251"

    X-MDRemoteIP: 208.180.231.139 ---> s208-180-231-139.bcstcmta01.clsttx.tl.sta.suddenlink.net

    mrjondykes001@qq.com


    noch ein Bekannter:


    header:
    01: Received: from vps-1014083-1312.smarthostnet.com ([203.86.237.131]) by
    02: mx-ha.gmx.net (mxgmx009) with ESMTPS (Nemesis) ID: [ID filtered]
    03: Received: from User (unknown [178.108.113.228]) by
    04: vps-1014083-1312.smarthostnet.com (Postfix) with ESMTPA ID: [ID filtered]
    05: Wed, 19 Aug 2015 xx:xx:xx +0800 (HKT)
    06: charset="Windows-1251"

    quickfinanceloan7@gmail.com

    quickfinanceplc@gmail.com



    header:
    01: Received: from APAC01-HK1-obe.outbound.protection.outlook.com
    02: ([134.170.140.245]) by mx-ha.gmx.net (mxgmx012) with ESMTPS (Nemesis) id
    03: 0MVZnj-1ZFTbY2MDH-00Yzfx for xxxxx; Sun, 23 Aug 2015 xx:xx:xx +0200
    04: Received: from [100.88.190.33] (101.62.157.58) by
    05: HKXPR06MB1016.apcprd06.prod.outlook.com (10.161.181.156) with Microsoft
    06: SMTP Server (TLS) ID: [ID filtered]

    X-Originating-IP: [101.62.157.58] ---> RCOM-Wireless-Pool, India

    ronenyael02147@hotmail.com


    Auch diese Betrüger haben wir größtenteils wieder der Ratware der Russenmafia zu verdanken...
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

Lesezeichen

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
Partnerlink:
REDDOXX Anti-Spam Lösungen