Code:
Parsing header:
Received: from data-22.beotel.net (unverified [194.106.162.49]) by beotel.net (SurgeMail 3.7b6) with ESMTP id 413446 for <x>; Wed, 02 Apr 2008 03:36:36 +0200
194.106.162.49 found
host 194.106.162.49 (getting name) = data-22.beotel.net.
data-22.beotel.net is 194.106.162.49
Possible spammer: 194.106.162.49
Received line accepted
Received: from mc.spamer.com ([82.208.216.7]) by iport2.beotel.net with ESMTP; 02 Apr 2008 03:28:07 +0200
82.208.216.7 found
host 82.208.216.7 (getting name) = mc.tenderi.com.
mc.tenderi.com is 82.208.216.7
194.106.162.49 not listed in dnsbl.njabl.org
194.106.162.49 not listed in cbl.abuseat.org
194.106.162.49 not listed in dnsbl.sorbs.net
194.106.162.49 is not an MX for beotel.net
ips are close enough
194.106.162.49 is close to an MX (194.106.162.48) for beotel.net
Possible spammer: 82.208.216.7
Host iport2.beotel.net (checking ip) = 194.106.162.53
194.106.162.53 not listed in dnsbl.njabl.org
194.106.162.53 not listed in cbl.abuseat.org
194.106.162.53 not listed in dnsbl.sorbs.net
Chain test:iport2.beotel.net =? data-22.beotel.net
Host data-22.beotel.net (checking ip) = 194.106.162.49
ips are close enough
194.106.162.49 is close to an MX (194.106.162.48) for beotel.net
194.106.162.49 is mx
iport2.beotel.net and data-22.beotel.net have close IP addresses - chain verified
Possible relay: 194.106.162.49
Received line accepted
Received: from 192.168.0.5 (bbn-aplikacija2 [192.168.0.5]) by mc.tenderi.com (Postfix) with ESMTP id 133F572952E for <x>; Tue, 1 Apr 2008 19:57:58 +0200 (CEST)
192.168.0.5 found
host 192.168.0.5 (getting name) no name
82.208.216.7 not listed in dnsbl.njabl.org
82.208.216.7 not listed in cbl.abuseat.org
82.208.216.7 not listed in dnsbl.sorbs.net
82.208.216.7 is not an MX for iport2.beotel.net
82.208.216.7 is not an MX for mc.tenderi.com
82.208.216.7 is not an MX for mc.tenderi.com
82.208.216.7 is not an MX for iport2.beotel.net
82.208.216.7 not listed in dnsbl.njabl.org
192.168.0.5 discarded
Tracking message source: 82.208.216.7:
Routing details for 82.208.216.7
[refresh/show] Cached whois for 82.208.216.7 :
[email protected] [email protected]
Using last resort contacts
[email protected] [email protected]
Message is 23 hours old
82.208.216.7 not listed in dnsbl.njabl.org
82.208.216.7 not listed in dnsbl.njabl.org
82.208.216.7 not listed in cbl.abuseat.org
82.208.216.7 not listed in dnsbl.sorbs.net
82.208.216.7 not listed in accredit.habeas.com
82.208.216.7 not listed in plus.bondedsender.org
82.208.216.7 not listed in iadb.isipp.com
Possible open relay: 194.106.162.49
Message is 23 hours old
No body text provided, check format of submission. Spam must have body text.
If reported today, reports would be sent to:
Re: 194.106.162.49 (Automated open-relay testing system(s))
Internal spamcop handling: (relays)
Re: 82.208.216.7 (Administrator of network where email originates)
[email protected]
[email protected]