Just got an eBay phishing email that made it past SpamAssassin and Clam-AV – the site it lists:
203.48.154.161
appears to be at Telstra, and uses an HTML form post to a mailform program in Italy to send an email to a Yahoo email address.
Reported it to those who should know..