I've gotten serveral of these the past few minutes.
Below are the full headers ..I'm assuming they are trying to relay ???
There was no subject nor message as well as a rcpt to ...
Also it seems that declude is claiming that 216.204.154.7 has no MX.
DnsStuff.com reports:
How I am searching:
Asking e.root-servers.net for 7.154.204.216.in-addr.arpa PTR record:
e.root-servers.net says to go to indigo.arin.net. (zone:
216.in-addr.arpa.)
Asking indigo.arin.net. for 7.154.204.216.in-addr.arpa PTR record:
indigo.arin.net says to go to ns2.net-resource.com. (zone:
204.216.in-addr.arpa.)
Asking ns2.net-resource.com. for 7.154.204.216.in-addr.arpa PTR record:
Reports mx1.maineconnect.net.
Answer:
216.204.154.7 PTR record: mx1.maineconnect.net. [TTL 3600s]
[A=216.204.154.7]
Now for the headers:
Received: from maineconnect.net [216.204.154.7] by mail.sslsales.com with
ESMTP
(SMTPD32-7.14) id A37517B5029E; Mon, 01 Dec 2003 18:49:09 -0500
Received: from 216.204.154.7 [24.241.184.85] by maineconnect.net
(SMTPD32-8.01) id A524B75700F8; Mon, 01 Dec 2003 18:56:20 -0500
Received: from 156.201.162.174
X-RBL-Warning: Declude Labeled Spam-SPAMCOP
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[8c200000].
X-RBL-Warning: HELOBOGUS: Domain 216.204.154.7 has no MX or A records.
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 24.241.184.85
with no reverse DNS entry.
X-RBL-Warning: Declude Labeled Spam-WEIGHT 15
X-Declude-Sender: [EMAIL PROTECTED] [24.241.184.85]
X-Declude-Spoolname: Dd524b75700f8bb13.SMD
X-Note: This E-mail was scanned for Spam by Secure Services Inc
Organization: Secure Sevices Inc.
X-UIDL: 327709429
Thanks !!
Dave
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
