[Exim] ACL to block specific Hello & IP

I see H= in my logs with MY domain name in them.
The [ ip ] is NOT mine, and these are almost always SPAMMERS.

Could someone suggest an ACL which
rejects a connection which offers MY domain name in the H= but which
also does NOT have my IP number?

I would like a caseless partial search for "qcislands" in the H= , and
for a partial IP match.

any help would be appreciated.

Jim