this spam was sent to spamtrap address nts-fdjebgbc04e23o03@munged.ext
which decodes to 64.105.27.23 2004-05-23 15:03

Nov 20 08:51:24 www sendmail[25524]: iAKDpM725524: from=<tdluzinfnl@mailblocks.com>, size=1867, class=0, nrcpts=1, msgid=<7675846184686.56564@tdluzinfnl@mailblocks.com>, proto=SMTP, daemon=MTA, relay=kwmistsbgmzd@ip84.41.1411A-CUD12K-02.ish.de [62.143.41.84]
Nov 20 08:51:25 www sendmail[25526]: iAKDpM725524: ctladdr=<nts-fdjebgbc04e23o03@munged.ext> (8/0), delay=00:00:02, xdelay=00:00:01, mailer=prog, pri=30581, dsn=2.0.0, stat=Sent

[23/May/2004:15:02:49 -0400] ts h-64-105-27-23.lsanca54.covad.net "GET /articles/ HTTP/1.1" 200 3140 http://www.munged.ext/stupid/
[23/May/2004:15:02:49 -0400] cw h-64-105-27-23.lsanca54.covad.net "GET /advert/cwlogo.gif HTTP/1.1" 200 3503 http://www.munged.ext/articles/
[23/May/2004:15:02:52 -0400] ts h-64-105-27-23.lsanca54.covad.net "GET /cgi-bin/cwcount?d=toastedarticles&c=ib HTTP/1.1" 200 72 http://www.munged.ext/articles/
[23/May/2004:15:02:58 -0400] ts h-64-105-27-23.lsanca54.covad.net "GET /articles/disptext/munged.ext_0001 HTTP/1.1" 200 11828 http://www.munged.ext/articles/
[23/May/2004:15:02:59 -0400] ts h-64-105-27-23.lsanca54.covad.net "GET /cgi-bin/cwcount?d=toastedarticles&c=ib HTTP/1.1" 200 72 http://www.munged.ext/articles/disptext/munged.ext_0001
[23/May/2004:15:03:39 -0400] ts h-64-105-27-23.lsanca54.covad.net "GET /nettest/ HTTP/1.1" 200 9596 http://www.munged.ext/articles/disptext/munged.ext_0001
[23/May/2004:15:03:39 -0400] cw h-64-105-27-23.lsanca54.covad.net "GET /advert/cardshop.gif HTTP/1.1" 200 5183 http://www.munged.ext/nettest/
[23/May/2004:15:03:39 -0400] ts h-64-105-27-23.lsanca54.covad.net "GET /cgi-bin/cwcount?d=toastednettest&c=ib HTTP/1.1" 200 71 http://www.munged.ext/nettest/
[23/May/2004:15:10:41 -0400] ts h-64-105-27-23.lsanca54.covad.net "GET /favicon.ico HTTP/1.1" 200 3262 -

  Search results for: 64.105.27.23

OrgName:    Covad Communications
OrgID:      CVAD
Address:    2510 Zanker Rd
City:       San Jose
StateProv:  CA
PostalCode: 95131-1127
Country:    US

ReferralServer: rwhois://rwhois.covad.net:4321

NetRange:   64.105.0.0 - 64.105.255.255
CIDR:       64.105.0.0/16
NetName:    COVAD-IP-1-NET
NetHandle:  NET-64-105-0-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS3.COVAD.COM
NameServer: NS4.COVAD.COM
Comment:    for abuse issues, please contact abuse-isp@covad.com
Comment:    Reassignment information for this block of addresses can
Comment:    be found at rwhois://rwhois.laserlink.net:4321/
RegDate:    2000-06-07
Updated:    2004-03-11

AbuseHandle: CART-ARIN
AbuseName:   Covad abuse reporting team
AbusePhone:  +1-703-376-2830
AbuseEmail:  abuse-isp@covad.com

TechHandle: ZC178-ARIN
TechName:   Admin
TechPhone:  +1-888-801-6285
TechEmail:  ip_admin@covad.com

OrgAbuseHandle: CART-ARIN
OrgAbuseName:   Covad abuse reporting team
OrgAbusePhone:  +1-703-376-2830
OrgAbuseEmail:  abuse-isp@covad.com

OrgNOCHandle: CIN-ARIN
OrgNOCName:   COVAD IP NOC
OrgNOCPhone:  +1-888-801-6285
OrgNOCEmail:  noc-ipservices@covad.com

OrgTechHandle: TJW4-ARIN
OrgTechName:   Williamson, Todd J
OrgTechPhone:  +1-408-434-4826
OrgTechEmail:  twilliam@covad.com

# ARIN WHOIS database, last updated 2004-08-29 19:10

this sender requested network testing services with the following email:

------------------------------------------------------------

Return-path: tdluzinfnl@mailblocks.com Sat Nov 20 08:51:24 2004 [2004-11-20 08:51:24 103396]
Received: from ip84.41.1411A-CUD12K-02.ish.de (kwmistsbgmzd@ip84.41.1411A-CUD12K-02.ish.de [62.143.41.84])
   by www.munged.ext (8.11.6/8.11.6) with SMTP id iAKDpM725524
   for <nts-fdjebgbc04e23o03@munged.ext>; Sat, 20 Nov 2004 08:51:23 -0500
X-Message-Info: t/LV+9/HI/p+403/625149930759149
Received: from cony725.erode.tdluzinfnl@mailblocks.com (cousin944.tdluzinfnl@mailblocks.com [62.143.41.84])
   by smtp-dahlia.defendant.tdluzinfnl@mailblocks.com (Postfix) with SMTP id 596MOL2RY21E
   for <nts-fdjebgbc04e23o03@munged.ext>; Sat, 20 Nov 2004 18:53:07 +0500
Received: from smtp-swallow.technician.tdluzinfnl@mailblocks.com ([62.143.41.84]) by p44-gld8.tdluzinfnl@mailblocks.com with Microsoft SMTPSVC(5.0.0295.6465);
Sat, 20 Nov 2004 11:47:07 -0200
Received: from smtp-victorian.it'd.tdluzinfnl@mailblocks.com ([62.143.41.84]) by boe8-d19.tdluzinfnl@mailblocks.com with Microsoft SMTPSVC(5.0.2640.6094);
Sat, 20 Nov 2004 11:53:07 -0200
X-Message-Info: LFKER+%ND_LC_CHAR[1-3]90+sfd+C+5/7617726208
Received: from fabulous.tdluzinfnl@mailblocks.com ([207.0.9.175]) by appearance.tdluzinfnl@mailblocks.com with MailEnable ESMTP; Sat, 20 Nov 2004 15:52:07 +0200
Date: Sat, 20 Nov 2004 17:45:07 +0400
Message-Id: <7675846184686.56564@tdluzinfnl@mailblocks.com>
From: Ulysses Leonard <tdluzinfnl@mailblocks.com>
To: Nts-fdjebgbc04e23o03 <nts-fdjebgbc04e23o03@munged.ext>
Subject: do you hate red light cameras?
X-spamfilt: Chienworks* SpamFilt - 2004-11-20 08:51:24 - [103396]
X-spamfilt: b-/b - 1 - rem[o0]ve\W?me
X-spamfilt: bay hits: +0 -1
X-spamfilt: bay head: +13.5 -241.3
X-spamfilt: bay body: +100.4 -209.4
X-spamfilt: bay html: + -
X-spamfilt: bay index: 0.798610374456349
X-spamfilt: #0 +0 -1 =0

This PHOTO-BLOCKER really does work, as a matter of fact, it works great! =

I ran a red light, saw the flash, and its been 2 months and still no word,=
well ya know what they say no news is good news!
Thx again photo-blocker, for creating such a great product!!!"

http://bbahostcity.com/index.php?id=3D173&affid=3D6539







remove me plz
http://kaffaf.fbnhjenm.info/


----843513381891241666--

------------------------------------------------------------

[whois.opensrs.net]
Registrant:
 llc
 po box 234
 baabda, ba 45674
 LB

 Domain name: BBAHOSTCITY.COM

 Administrative Contact:
    veerkoek, harry  mushuporkman0@netscape.net
    po box 234
    baabda, ba 45674
    LB
    +1.5094718893
 Technical Contact:
    veerkoek, harry  mushuporkman0@netscape.net
    po box 234
    baabda, ba 45674
    LB
    +1.5094718893

 Registrar of Record: TUCOWS, INC.
 Record last updated on 30-Nov-2004.
 Record expires on 08-Nov-2005.
 Record created on 08-Nov-2004.

 Domain servers in listed order:
    NS2.BBAHOSTCHAT.COM   222.208.168.120
    NS5.BBAHOSTCHAT.COM   221.11.133.63

bbahostcity.com has address 221.11.133.65