Mar 24 15:47:07 www sendmail[27423]: h2OKl6527423: <ubkcjdmf03c21l45@munged.ext>... User unknown
Mar 24 15:47:07 www sendmail[27423]: h2OKl6527423: from=<gastest@yandex.ru>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[212.113.104.136]

ubkcjdmf03c21l45@munged.ext decodes to 212.113.104.136 2003-03-21 12:45

[21/Mar/2003:12:45:29 -0500] ts 212.113.104.136 "GET / HTTP/1.1" 200 4754 http://www.toastedspam.com/emaillist

inetnum:      212.113.104.0 - 212.113.104.255
netname:      SPBUJUR
descr:        Law faculty
descr:        State University
descr:        St-Petersburg.
country:      RU
admin-c:      DL3250-RIPE
tech-c:       DL3250-RIPE
status:       ASSIGNED PA
notify:       noc@relcom.eu.net
notify:       mot@jurfak.spb.ru
mnt-by:       AS2118-MNT
changed:      fil@relcom.eu.net 20000321
source:       RIPE

route:        212.113.96.0/19
descr:        Relcom Corp.
descr:        75, Stachek str.,
descr:        198031 St.-Petersburg
descr:        Russia
origin:       AS2118
notify:       noc@relcom.eu.net
notify:       fil@relcom.eu.net
mnt-by:       AS2118-MNT
changed:      fil@relcom.eu.net 19991130
source:       RIPE

person:       Dmitriy Lyutov
address:      Law faculty of SPbGU
address:      St.Petersburg, 191011
address:      Russia
phone:        +7 812 329 28 21
fax-no:       +7 812 329 28 00
nic-hdl:      DL3250-RIPE
changed:      mot@jurfak.spb.ru 20000321
source:       RIPE

[21/Mar/2003:12:44:25 -0500] ts 212.113.104.136 "GET /freespamlist HTTP/1.1" 200 6746 http://www.altavista.com/web/results?q=free+spam-list&stq=10
[21/Mar/2003:12:44:25 -0500] ts 212.113.104.136 "GET /toastedspamban.gif HTTP/1.1" 200 9305 http://www.toastedspam.com/freespamlist
[21/Mar/2003:12:44:26 -0500] cw 212.113.104.136 "GET /advert/dorkbanr.gif HTTP/1.1" 200 3954 http://www.toastedspam.com/freespamlist
[21/Mar/2003:12:44:28 -0500] ts 212.113.104.136 "GET /cgi-bin/cwcount?d=toastedfree&c=ib HTTP/1.1" 200 72 http://www.toastedspam.com/freespamlist
[21/Mar/2003:12:44:37 -0500] ts 212.113.104.136 "GET /freespamlist HTTP/1.1" 200 6749 http://www.altavista.com/web/results?q=free+spam-list&stq=10
[21/Mar/2003:12:44:38 -0500] cw 212.113.104.136 "GET /advert/corelife.gif HTTP/1.1" 200 35252 http://www.toastedspam.com/freespamlist
[21/Mar/2003:12:44:43 -0500] ts 212.113.104.136 "GET /freespamlist HTTP/1.1" 200 6745 http://www.altavista.com/web/results?q=free+spam-list&stq=10
[21/Mar/2003:12:44:43 -0500] cw 212.113.104.136 "GET /advert/talonban.gif HTTP/1.1" 200 6673 http://www.toastedspam.com/freespamlist
[21/Mar/2003:12:44:49 -0500] cw 212.113.104.136 "GET /advert/reverieban.gif HTTP/1.1" 200 4521 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:44:49 -0500] ts 212.113.104.136 "GET /cgi-bin/cwcount?d=toastedemail&c=ib HTTP/1.1" 200 71 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:45:03 -0500] ts 212.113.104.136 "GET /emaillist HTTP/1.1" 200 658842 http://www.toastedspam.com/freespamlist
[21/Mar/2003:12:45:22 -0500] ts 212.113.104.136 "GET /emaillist HTTP/1.1" 200 658113 -
[21/Mar/2003:12:45:29 -0500] ts 212.113.104.136 "GET / HTTP/1.1" 200 4754 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:45:30 -0500] cw 212.113.104.136 "GET /advert/redirect.cgi?http://www.sonicfoundry.com/promo.asp?keycode=9219 HTTP/1.1" 302 317 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:45:42 -0500] ts 212.113.104.136 "GET /stupid/ HTTP/1.1" 200 401315 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:45:43 -0500] ts 212.113.104.136 "GET /spambots/ HTTP/1.1" 200 2208 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:45:46 -0500] ts 212.113.104.136 "GET /larts/ HTTP/1.1" 200 3670 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:45:59 -0500] ts 212.113.104.136 "GET /formmail/ HTTP/1.1" 200 698430 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:45:59 -0500] ts 212.113.104.136 "GET /denylist HTTP/1.1" 200 221522 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:46:08 -0500] ts 212.113.104.136 "GET /favicon.ico HTTP/1.1" 404 375 -
[21/Mar/2003:12:49:05 -0500] ts 212.113.104.136 "GET /othersites HTTP/1.1" 200 2186 http://www.toastedspam.com/emaillist
[21/Mar/2003:12:49:05 -0500] cw 212.113.104.136 "GET /advert/elecpark.gif HTTP/1.1" 200 5340 http://www.toastedspam.com/othersites
[21/Mar/2003:12:49:05 -0500] ts 212.113.104.136 "GET /cgi-bin/cwcount?d=toastedother&c=ib HTTP/1.1" 200 61 http://www.toastedspam.com/othersites
[21/Mar/2003:12:49:09 -0500] cw 212.113.104.136 "GET /advert/yfcbanr.gif HTTP/1.1" 200 13916 http://www.toastedspam.com/phonelist
[21/Mar/2003:12:49:09 -0500] ts 212.113.104.136 "GET /cgi-bin/cwcount?d=toastedphone&c=ib HTTP/1.1" 200 71 http://www.toastedspam.com/phonelist
[21/Mar/2003:12:49:10 -0500] ts 212.113.104.136 "GET /phonelist HTTP/1.1" 200 106610 http://www.toastedspam.com/othersites
[21/Mar/2003:12:49:13 -0500] cw 212.113.104.136 "GET /advert/vegasdvso1.gif HTTP/1.1" 200 16226 http://www.toastedspam.com/stupid/
[21/Mar/2003:12:49:13 -0500] ts 212.113.104.136 "GET /cgi-bin/cwcount?d=toastedstupid&c=ib HTTP/1.1" 200 75 http://www.toastedspam.com/stupid/
[21/Mar/2003:12:49:16 -0500] ts 212.113.104.136 "GET /stupid/ HTTP/1.1" 200 188394 http://www.toastedspam.com/phonelist
[21/Mar/2003:12:49:17 -0500] cw 212.113.104.136 "GET /advert/teentest.jpg HTTP/1.1" 200 8041 http://www.toastedspam.com/stupid/disptext/americanmedical.com.ar_0001
[21/Mar/2003:12:49:17 -0500] ts 212.113.104.136 "GET /stupid/disptext/americanmedical.com.ar_0001 HTTP/1.1" 200 6247 http://www.toastedspam.com/stupid/
[21/Mar/2003:12:49:18 -0500] ts 212.113.104.136 "GET /cgi-bin/cwcount?d=toastedstupid&c=ib HTTP/1.1" 200 75 http://www.toastedspam.com/stupid/disptext/americanmedical.com.ar_0001
[21/Mar/2003:12:49:21 -0500] cw 212.113.104.136 "GET /advert/oneway.gif HTTP/1.1" 200 1175 http://www.toastedspam.com/stupid/
[21/Mar/2003:12:49:30 -0500] ts 212.113.104.136 "GET /stupid/ HTTP/1.1" 200 401321 http://www.toastedspam.com/phonelist