Return-Path: <apache@flatus.studio42.com>
Received: from flatus.studio42.com (10.1.42.10) by studio42.com with ESMTP 
(Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Sun, 23 Nov 2008 12:04:34 -0800
Received: from flatus.studio42.com (flatus [127.0.0.1])	by 
flatus.studio42.com (8.12.5/8.12.5) with ESMTP id mAN8uROV004675	for 
<chris@studio42.com>; Sun, 23 Nov 2008 00:56:27 -0800
Received: (from apache@localhost)	by flatus.studio42.com (8.12.5/8.12.5/Submit) 
id mAN8uRiM004673;	Sun, 23 Nov 2008 00:56:27 -0800
Date: Sun, 23 Nov 2008 00:56:27 -0800
Message-Id: <200811230856.mAN8uRiM004673@flatus.studio42.com>
Received: from [70.191.175.228]	by www.studio42.com (NMS FormMail 3.14c1)	
with HTTP; Sun, 23 Nov 2008 08:56:27 GMT	(script-name /cgi-bin/fuckoffspammers.cgi)	
(http-host www.studio42.com)	(http-referer http://www.studio42.com/forms/mailform.html)
X-Mailer: NMS FormMail 3.14c1
To: chris@studio42.com
From: raunyv@ezrbrh.com (njzsnekxul)
Subject: [email] Security Violation Located at 70.191.175.228 

Below is the result of your feedback form.  It was submitted by
njzsnekxul (raunyv@ezrbrh.com) on Sunday, November 23, 2008 at 00:56:27
---------------------------------------------------------------------------


Form-ID: Studio42 Generic Mail Form

subject: [email] Security Violation Located at 70.191.175.228

realname: njzsnekxul

email: raunyv@ezrbrh.com

phone: 953622466

Description: LwGEjs  <a href="http://gsinvciibqqn.com/">gsinvciibqqn</a>, [url=http://unmtufygeovl.com/]unmtufygeovl[/url], [link=http://kuyohakqwooi.com/]kuyohakqwooi[/link], http://jcvuaqtjhvcm.com/

Urgent: Yes

Contact: Phone

IP: 70.191.175.228

DNS: (none)

Referer: (none)

Page: www.studio42.com/forms/mailform.html

---------------------------------------------------------------------------

REMOTE_ADDR: 70.191.175.228
HTTP_USER_AGENT: Mozilla/5.0 (Windows; U; WinNT4.0; en-US; rv:1.7.11) Gecko/20050728


[studio42@flatus counter]$ host 70.191.175.228
228.175.191.70.in-addr.arpa domain name pointer ip70-191-175-228.pn.at.cox.net.
[studio42@flatus counter]$ whois 70.191.175.228@whois.arin.net
[whois.arin.net]
Cox Communications Inc. NETBLK-COX-ATLANTA-10 (NET-70-160-0-0-1)
                                  70.160.0.0 - 70.191.255.255
Cox Communications NETBLK-AT-RDC-70-191-160-0 (NET-70-191-160-0-1)
                                  70.191.160.0 - 70.191.191.255

# ARIN WHOIS database, last updated 2008-11-22 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

[studio42@flatus counter]$ whois NET-70-160-0-0-1@whois.arin.net
[whois.arin.net]

OrgName:    Cox Communications Inc.
OrgID:      CXA
Address:    1400 Lake Hearn Drive
City:       Atlanta
StateProv:  GA
PostalCode: 30313
Country:    US

NetRange:   70.160.0.0 - 70.191.255.255
CIDR:       70.160.0.0/11
NetName:    NETBLK-COX-ATLANTA-10
NetHandle:  NET-70-160-0-0-1
Parent:     NET-70-0-0-0-0
NetType:    Direct Allocation
NameServer: NS.COX.NET
NameServer: NS.WEST.COX.NET
NameServer: NS.EAST.COX.NET
Comment:    For legal requests/assistance please use the following contact infor
mation:
Comment:
Comment:    Cox Subpoena Phone: 404-269-0100
Comment:
Comment:    Cox Subpoena Info: http://www.cox.com/policy/leainformation/default.
asp
RegDate:    2004-07-21
Updated:    2007-03-27

OrgAbuseHandle: IC146-ARIN
OrgAbuseName:   Cox Communications, Inc
OrgAbusePhone:  +1-404-269-7626
OrgAbuseEmail:  abuse@cox.net

OrgTechHandle: SHACK-ARIN
OrgTechName:   Shackelford, Scott
OrgTechPhone:  +1-404-269-7626
OrgTechEmail:  scott.shackelford@cox.com

# ARIN WHOIS database, last updated 2008-11-22 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.