Spamhuntress

Krin aka Romzes has been all over annelisabeth.com comment lately. To the point where I got fed up.

Here’s their user agent. Malconfigured, so pretty easy to block:

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)

I’m not kidding, that’s how it appears in the log. That User-Agent: is in front of a normal user agent. So block for User-Agent, and that should work, unless that breaks something else?

I also found their spambot a little later today:
205.177.122.162

This is a leased machine, that only does GET requests, interestingly enough, AFTER a comment has been posted. It also carries the same user agent.

This entry was posted on Saturday, June 25th, 2005 at 7:16 am and is filed under Comment spam. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.