Jump to content
Sign in to follow this  
p7272

Blank Spam Email

Recommended Posts

Date: Mon, 5 Apr 2004 20:11:14 +0000 (GMT)

X-Comment: Sending client does not conform to RFC822 minimum requirements

X-Comment: Date has been added by Maillennium

Received: from pool-68-161-207-54.ny325.east.verizon.net ([68.161.207.54])

by sccrmxc12.comcast.net (sccrmxc12) with SMTP

id <20040405201112s1200g23uje>; Mon, 5 Apr 2004 20:11:13 +0000

X-Originating-IP: [68.161.207.54]

Status: U

Return-Path: <wpspxuuootis[at]nycmail.com>

Received: from whatever.mail.demountable.com ([8.248.211.196])

by penguin (ambrosial SMTP Server) with SMTP id U[7

The above header info is from a blank email that I get every now and then. It has no from and no subject, but I get it. I try to report it, but spamcop can not process the email. I tried emailtracker pro from visualware.com and it says that it came from

8.248.211.196. Why can't spamcop see the same result??? And is this result correct??? :mellow:

Share this post


Link to post
Share on other sites

I would assume it came from an infected machine on a verizon dsl account..

Received: from pool-68-161-207-54.ny325.east.verizon.net ([68.161.207.54])

Those messages are so much fun, they also seem to make most windows antivirus programs terminate the connection/hang it up..

I guess comcast should just filter those messages out..

Share this post


Link to post
Share on other sites

I suspect that the viruses broadcast them out to a spammer's program that is looking for a blank message to tell them the I.P. of a system that they can remotely control.

They send them to other addresses so that the ones sent to a spammer will not stand out.

If you can convince your mail server operator to use the sbl-xbl.spamhaus.org to reject known spam sources, you will not see many of these.

-John

Personal Opinion Only

Share this post


Link to post
Share on other sites

Could you tell me more about bl-xbl.spamhaus.org??? Think about it, I call Comcast tech support, tell them about the issue and to use bl-xbl.spamhaus.org and then the questions will start. I have to know what I'm talking about before suggesting something. ;)

Share this post


Link to post
Share on other sites
Visit them at http://www.spamhaus.org

It's a great outfit, used by Government, Military and

Business (and, of course, anyone wanting to eliminate

spam). I have never know them to be wrong - yet.

Thats good because we use them!

Share this post


Link to post
Share on other sites
I tried emailtracker pro from visualware.com and it says that it came from 8.248.211.196. Why can't spamcop see the same result??? And is this result correct???

SpamCop didn't see it (of course, it never got around to looking at much due to the bad shape of what's been provided) .. but no, it is no where close to being in the same ballpark as "correct" ... This sure doesn't say much for the "pro" version of this emailtracker app.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×