Headers are as follows:
From email@example.com Sun Jan 16 23:15:39 2005 Return-Path: <firstname.lastname@example.org> Received: from dyn-83-154-168-192.ppp.tiscali.fr (dyn-83-154-168-192.ppp.tiscali.fr [220.127.116.11]) by pgts04.pgts.com.au (8.11.6/8.11.6) with SMTP id j0GCFYm41527 for <email@example.com>; Sun, 16 Jan 2005 23:15:36 +1100 (EST) (envelope-from firstname.lastname@example.org) Message-ID: <email@example.com> From: "Susan M. Taylor" <firstname.lastname@example.org> To: email@example.com Subject: =?iso-8859-1?B?U3dpc3Mgd2F0Y2hlcyAtIHJlcGxpY2E=?= Date: Sun, 16 Jan 2005 11:52:11 +0000 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0000_FA385981.9B2A4014" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
And according to nslookup:
Non-authoritative answer: 192.168.154.83.in-addr.arpa name = dyn-83-154-168-192.ppp.tiscali.fr. Authoritative answers can be found from: 154.83.in-addr.arpa nameserver = ns3.libertysurf.net. 154.83.in-addr.arpa nameserver = ns.ripe.net. 154.83.in-addr.arpa nameserver = ns.libertysurf.net. 154.83.in-addr.arpa nameserver = ns2.libertysurf.net.
The address 18.104.22.168 is listed in only four lists in OpenRBL (3 lists that i do not use, since they are too agressive). It was listed in SORBS, however there was a removal request!
Tiscali seem to be an International firm providing broadband services. The fact that they are so large, may acoount for their popularity amongst spammers.
Well at least, I have finished the program that formats this blog ... so I can put it online. Next I need to finish the software for editing.