Comments on: SERVER ERROR http://spamhuntress.com/2006/09/04/server-error-2/ Just another WordPress weblog Fri, 21 Nov 2008 06:02:15 +0000 http://wordpress.org/?v=2.0.7 by: Olliver http://spamhuntress.com/2006/09/04/server-error-2/#comment-311671 Wed, 02 Jan 2008 23:15:48 +0000 http://spamhuntress.com/2006/09/04/server-error-2/#comment-311671 Hm, now that's really silly: I really overlooked that small detail you mentioned, maybe because I was moving within the referrer spam section and probably did not expect to be thrown that far back in time. Never mind and happy new year anyway, Olliver Hm, now that’s really silly: I really overlooked that small detail you mentioned, maybe because I was moving within the referrer spam section and probably did not expect to be thrown that far back in time.

Never mind and happy new year anyway,
Olliver

]]> by: admin http://spamhuntress.com/2006/09/04/server-error-2/#comment-311646 Wed, 02 Jan 2008 20:41:44 +0000 http://spamhuntress.com/2006/09/04/server-error-2/#comment-311646 To Olliver: Umm, that WAS in 2006 - you found an old post. To Olliver:

Umm, that WAS in 2006 - you found an old post.

]]> by: Olliver http://spamhuntress.com/2006/09/04/server-error-2/#comment-311628 Wed, 02 Jan 2008 18:49:14 +0000 http://spamhuntress.com/2006/09/04/server-error-2/#comment-311628 Forgot about sumthin: Back in summer 2006, this guy had another server hosted by ThePlanet of Spam. Dunno whether it is still alive but back then the ip address was 70.87.208.34. Olliver Forgot about sumthin:
Back in summer 2006, this guy had another server hosted by ThePlanet of Spam. Dunno whether it is still alive but back then the ip address was 70.87.208.34.

Olliver

]]> by: Olliver http://spamhuntress.com/2006/09/04/server-error-2/#comment-311627 Wed, 02 Jan 2008 18:44:06 +0000 http://spamhuntress.com/2006/09/04/server-error-2/#comment-311627 Now that is almost unbelievable.... When I saw the hostname and learnt about the tactics, I thought for a moment: "Where have I seen that before..." That said, pulled some ancient spam logs from summer 2006 and bingo, it's the same spammer. 18 months have passed since then without Canaca doing anything about it . Esrun is right on that, It's an extremely sneaky spammer who does a lot of rewrite trickery to avoid being caught by "antis". When I analysed his tactics back then, I was amazed about the level of details he had put into consideration for his trickery. But as of now that is of no concern to me any longer because meanwhile I run my own dedicated server and simply firewall all my "favourite ranges". Result, a spam free happy life and more time for pleasant things :-) Cheers, Olliver Now that is almost unbelievable…. When I saw the hostname and learnt about the tactics, I thought for a moment:
“Where have I seen that before…”

That said, pulled some ancient spam logs from summer 2006 and bingo, it’s the same spammer. 18 months have passed since then without Canaca doing anything about it . Esrun is right on that, It’s an extremely sneaky spammer who does a lot of rewrite trickery to avoid being caught by “antis”. When I analysed his tactics back then, I was amazed about the level of details he had put into consideration for his trickery.

But as of now that is of no concern to me any longer because meanwhile I run my own dedicated server and simply firewall all my “favourite ranges”. Result, a spam free happy life and more time for pleasant things :-)

Cheers,
Olliver

]]> by: Alden Bates http://spamhuntress.com/2006/09/04/server-error-2/#comment-37681 Tue, 05 Sep 2006 07:34:58 +0000 http://spamhuntress.com/2006/09/04/server-error-2/#comment-37681 That trick fooled me... once. Then I remembered to check the source. :P That trick fooled me… once. Then I remembered to check the source. :P

]]> by: Esrun http://spamhuntress.com/2006/09/04/server-error-2/#comment-37479 Mon, 04 Sep 2006 15:23:28 +0000 http://spamhuntress.com/2006/09/04/server-error-2/#comment-37479 Good idea, similar to those who cloak their sites to show a 'This webpage has been suspended message' whenever someone clicks through to the site from anywhere other than a search engine(based on referer). Good idea, similar to those who cloak their sites to show a ‘This webpage has been suspended message’ whenever someone clicks through to the site from anywhere other than a search engine(based on referer).

]]>