<?xml version="1.0" encoding="UTF-8"?><!-- generator="wordpress/2.0.7" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: How I tracked down a spammer</title>
	<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/</link>
	<description>Just another WordPress weblog</description>
	<pubDate>Fri, 21 Nov 2008 14:43:04 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.0.7</generator>

	<item>
		<title>by: Vasilij</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-2927</link>
		<pubDate>Mon, 30 Jan 2006 14:15:59 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-2927</guid>
					<description>I yet believe that it must be the reason for these spammers to keep on bombing our sites with BS. And if it is not material reasons, what are their might be?

Vasilij,
An EU journalist.</description>
		<content:encoded><![CDATA[<p>I yet believe that it must be the reason for these spammers to keep on bombing our sites with BS. And if it is not material reasons, what are their might be?</p>
<p>Vasilij,<br />
An EU journalist.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: mahmood</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1099</link>
		<pubDate>Tue, 16 Aug 2005 12:38:07 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1099</guid>
					<description>i like to fucked bulgerian women

please contact with me
at my handphone number - 0088 0191144351
engineermahmud@yahoo.com</description>
		<content:encoded><![CDATA[<p>i like to fucked bulgerian women</p>
<p>please contact with me<br />
at my handphone number - 0088 0191144351<br />
<a href="mailto:engineermahmud@yahoo.com">engineermahmud@yahoo.com</a>
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Spam Huntress  &#187; Blog Archive   &#187; A Bulgarian thinks I made it up</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1044</link>
		<pubDate>Tue, 19 Jul 2005 22:08:34 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1044</guid>
					<description>[...] t spamware 			 		 	 		 			A Bulgarian thinks I made it up 	 			 					I got a comment on my How I tracked down a spammer post today: 	 #  Tony (Bulgarian) Says: July 19th,  [...]</description>
		<content:encoded><![CDATA[<p>[&#8230;] t spamware 			 		 	 		 			A Bulgarian thinks I made it up 	 			 					I got a comment on my How I tracked down a spammer post today: 	 #  Tony (Bulgarian) Says: July 19th,  [&#8230;]
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Administrator</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1043</link>
		<pubDate>Tue, 19 Jul 2005 22:04:43 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1043</guid>
					<description>Well, Tony, I guess it's you who don't understand spam tracking.

Forget what you learned about tracking mail spammers. Linkspammers are a different breed entirely. Currently their favored method is using a server they lease or colocate as their spambot. Most of them don't even layer a proxy on top of that spambot.

Why? Because webhosts don't understand linkspam, and some of the big colocation/leasing facilities are spam supporters when it comes to linkspam.

Also, while linkspammers learn, they often use their own ISP connections when spamming.

I stand by my conclusions. And no, I don't think Bulgarians are all spammers. In fact, there are extremely few Bulgarian spammers. Most are Russians...</description>
		<content:encoded><![CDATA[<p>Well, Tony, I guess it&#8217;s you who don&#8217;t understand spam tracking.</p>
<p>Forget what you learned about tracking mail spammers. Linkspammers are a different breed entirely. Currently their favored method is using a server they lease or colocate as their spambot. Most of them don&#8217;t even layer a proxy on top of that spambot.</p>
<p>Why? Because webhosts don&#8217;t understand linkspam, and some of the big colocation/leasing facilities are spam supporters when it comes to linkspam.</p>
<p>Also, while linkspammers learn, they often use their own ISP connections when spamming.</p>
<p>I stand by my conclusions. And no, I don&#8217;t think Bulgarians are all spammers. In fact, there are extremely few Bulgarian spammers. Most are Russians&#8230;
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Tony (Bulgarian)</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1042</link>
		<pubDate>Tue, 19 Jul 2005 20:34:08 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-1042</guid>
					<description>Like many others I came to this site googling for something containing "bulgarian"...
 
After reading the way you track spammers, I can only say:
Guys, what a shame! You absolutelly do not know and do not undersrtand the spamming techniques and still you have the bravery of labeling the whole Bulgarian nation as spammers!

Let me give you some explanations:
- no spammer uses its own IP address
- all spammers use forged IP addresses
- the IP addresses the spammers use are usually IPs of vulnerable un-pached servers and workstations on the internet, thus allowing the spammer to use it. 

Well, let me ask you some questions: 
- how exactly you are tracking a forged IP address? If you have a real answer for this, you can become very rich by pattenting this, your first client will be FBI...

Best (Bulgarian) regards...</description>
		<content:encoded><![CDATA[<p>Like many others I came to this site googling for something containing &#8220;bulgarian&#8221;&#8230;</p>
<p>After reading the way you track spammers, I can only say:<br />
Guys, what a shame! You absolutelly do not know and do not undersrtand the spamming techniques and still you have the bravery of labeling the whole Bulgarian nation as spammers!</p>
<p>Let me give you some explanations:<br />
- no spammer uses its own IP address<br />
- all spammers use forged IP addresses<br />
- the IP addresses the spammers use are usually IPs of vulnerable un-pached servers and workstations on the internet, thus allowing the spammer to use it. </p>
<p>Well, let me ask you some questions:<br />
- how exactly you are tracking a forged IP address? If you have a real answer for this, you can become very rich by pattenting this, your first client will be FBI&#8230;</p>
<p>Best (Bulgarian) regards&#8230;
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Administrator</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-924</link>
		<pubDate>Fri, 24 Jun 2005 10:54:19 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-924</guid>
					<description>I sent you an e-mail to the dir address, with the MSN messenger details.</description>
		<content:encoded><![CDATA[<p>I sent you an e-mail to the dir address, with the MSN messenger details.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Vesselin</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-923</link>
		<pubDate>Fri, 24 Jun 2005 10:45:34 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-923</guid>
					<description>i want to speak with you but those posts are kind of slow, got icq or something like it ?</description>
		<content:encoded><![CDATA[<p>i want to speak with you but those posts are kind of slow, got icq or something like it ?
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Vesselin</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-922</link>
		<pubDate>Fri, 24 Jun 2005 10:42:45 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-922</guid>
					<description>kewl :)</description>
		<content:encoded><![CDATA[<p>kewl <img src='http://spamhuntress.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Vesselin</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-921</link>
		<pubDate>Fri, 24 Jun 2005 10:36:16 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-921</guid>
					<description>ok, it may be serbian or macedonian but i can translate those as well... those are very common.

email me at slmr at dir dot bg or slmr at abv dot bg cause i don't use slaymer at netbg dot com so often

Moderator: I munged the addresses. Harvesters come through here now and then...</description>
		<content:encoded><![CDATA[<p>ok, it may be serbian or macedonian but i can translate those as well&#8230; those are very common.</p>
<p>email me at slmr at dir dot bg or slmr at abv dot bg cause i don&#8217;t use slaymer at netbg dot com so often</p>
<p>Moderator: I munged the addresses. Harvesters come through here now and then&#8230;
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Administrator</title>
		<link>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-920</link>
		<pubDate>Fri, 24 Jun 2005 10:30:09 +0000</pubDate>
		<guid>http://spamhuntress.com/2005/03/06/how-i-tracked-down-a-spammer/#comment-920</guid>
					<description>Nothing right now. I'll e-mail you next time I come across something that looks like Russian and isn't. Usually that happens when I chase spammers. I remember one time I saw something that might have been Bulgarian, connected somehow with a spammer. But it may have been another language. Hard for me to know, unless the webpage makes it obvious.</description>
		<content:encoded><![CDATA[<p>Nothing right now. I&#8217;ll e-mail you next time I come across something that looks like Russian and isn&#8217;t. Usually that happens when I chase spammers. I remember one time I saw something that might have been Bulgarian, connected somehow with a spammer. But it may have been another language. Hard for me to know, unless the webpage makes it obvious.
</p>
]]></content:encoded>
				</item>
</channel>
</rss>
