Mar 27 23:51:30 www sendmail[9648]: h2S4pRG09648: <ufngocuh03c27t37@munged.ext>... User unknown
Mar 27 23:51:31 www sendmail[9648]: h2S4pRG09648: from=<ikefrank2002@aol.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=216-147-153-218.globalsat.net [216.147.153.218] (may be forged)

amusing side reference: http://www.toastedspam.com/stupid/disptext/nigeria_banking_scam_0002

ufngocuh03c27t37@munged.ext decodes to 216.147.153.218 2003-03-27 20:37

[27/Mar/2003:20:37:43 -0500] sk 216-147-153-218.globalsat.net "GET / HTTP/1.1" 200 18515 http://www.toastedspam.com/emaillist

Search results for: ! NET-216-147-152-0-1 

     OrgName:    Segovia
     OrgID:      SEGOV
     Address:    1313 Dolley Madison Blvd
     Address:    Suite 305
     City:       Mclean
     StateProv:  VA
     PostalCode: 22101
     Country:    US

     NetRange:   216.147.152.0 - 216.147.156.255
     CIDR:       216.147.152.0/22, 216.147.156.0/24
     NetName:    SEGOVIA
     NetHandle:  NET-216-147-152-0-1
     Parent:     NET-216-147-128-0-1
     NetType:    Reallocated
     NameServer: NS1.GLOBALSAT.NET
     NameServer: NS2.GLOBALSAT.NET
     Comment:
     RegDate:    2003-02-25
     Updated:    2003-02-25

     TechHandle: BHO11-ARIN
     TechName:   Hortenstine, Bill
     TechPhone:  +1-703-760-1142
     TechEmail:  bill@segovia-ltd.com

     OrgTechHandle: MWH13-ARIN
     OrgTechName:   Wheeler, Mike
     OrgTechPhone:  +1-703-760-1142
     OrgTechEmail:  mike.wheeler@segovia-ltd.com

     # ARIN WHOIS database, last updated 2003-03-27 20:00

Search results for: ! NET-216-147-128-0-1 

     OrgName:    Lyman Bros Inc.
     OrgID:      OKCC
     Address:    10288 South Jordan Gateway #K
     City:       South Jordan
     StateProv:  UT
     PostalCode: 84095
     Country:    US

     NetRange:   216.147.128.0 - 216.147.159.255
     CIDR:       216.147.128.0/19
     NetName:    LYMANBROS-1
     NetHandle:  NET-216-147-128-0-1
     Parent:     NET-216-0-0-0-0
     NetType:    Direct Allocation
     NameServer: NS1.GLOBALSAT.NET
     NameServer: NS2.GLOBALSAT.NET
     Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
     RegDate:    1998-12-17
     Updated:    2002-01-03

     TechHandle: RH1256-ARIN
     TechName:   Hettich, Ron
     TechPhone:  +1-301-241-3747
     TechEmail:  rhettich@lymanbros.com

     # ARIN WHOIS database, last updated 2003-03-27 20:00

[26/Mar/2003:23:20:48 -0500] ts 216-147-153-218.globalsat.net "GET /emaillist HTTP/1.1" 200 347856 -
[27/Mar/2003:19:26:51 -0500] ts 216-147-153-218.globalsat.net "GET /emaillist HTTP/1.1" 200 346199 -
[27/Mar/2003:20:35:50 -0500] ts 216-147-153-218.globalsat.net "GET / HTTP/1.1" 200 4686 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:35:56 -0500] cw 216-147-153-218.globalsat.net "GET /advert/redirect.cgi?http://www.chienworks.com/ HTTP/1.1" 302 293 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:35:59 -0500] cw 216-147-153-218.globalsat.net "GET / HTTP/1.1" 200 5998 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:36:13 -0500] ts 216-147-153-218.globalsat.net "GET /stupid/ HTTP/1.1" 200 409041 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:36:15 -0500] ts 216-147-153-218.globalsat.net "GET /spambots/ HTTP/1.1" 200 2618 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:36:21 -0500] ts 216-147-153-218.globalsat.net "GET /larts/ HTTP/1.1" 200 3644 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:36:35 -0500] ts 216-147-153-218.globalsat.net "GET /formmail/ HTTP/1.1" 200 815854 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:36:43 -0500] ts 216-147-153-218.globalsat.net "GET /phonelist HTTP/1.1" 200 108393 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:36:46 -0500] ts 216-147-153-218.globalsat.net "GET /denylist HTTP/1.1" 200 403152 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:36:51 -0500] ts 216-147-153-218.globalsat.net "GET /freespamlist HTTP/1.1" 200 6821 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:37:01 -0500] ts 216-147-153-218.globalsat.net "GET /forum/index HTTP/1.1" 200 4021 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:37:02 -0500] ts 216-147-153-218.globalsat.net "GET /removereq HTTP/1.1" 200 4479 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:37:21 -0500] ts 216-147-153-218.globalsat.net "GET /decode64 HTTP/1.1" 200 1887 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:37:21 -0500] ts 216-147-153-218.globalsat.net "GET /decodeqp HTTP/1.1" 200 1694 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:37:24 -0500] ts 216-147-153-218.globalsat.net "GET /decodeip HTTP/1.1" 500 606 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:37:27 -0500] ts 216-147-153-218.globalsat.net "GET /othersites HTTP/1.1" 200 2403 http://www.toastedspam.com/emaillist
[27/Mar/2003:20:37:43 -0500] sk 216-147-153-218.globalsat.net "GET / HTTP/1.1" 200 18515 http://www.toastedspam.com/emaillist