---
title: 'The M.O. of the Comment Spammer?'
date: '2003-10-26T07:01:44-05:00'
permalink: /the-mo-of-the-comment-spammer/
tags:
    - networks
---

I’m finding googlings in my recent referrer logs that look like this:

> [MT-Blacklist](<http://www.google.com/ie?q=/archives/+%22posted+by%22+%22at+
> <br />
> august%22+2003+comments+%22post+a+comment%22+%22name:<br />
> <br />
> %22+%22email+address:%22+%22url:%22+%22comments:%22+%22<br />
> <br />
> remember+info%3F%22+-spam+-spammer&num=50&hl=en&lr=&ie=<br />
> <br />
> utf8&oe=utf-8&as_qdr=all&start=500&sa=n”></p>
> <pre>
>      google.com/ie?q=/archives/+%22posted+by%22+%22at+
>      august%22+2003+comments+%22post+a+comment%22+%22name:
>      %22+%22email+address:%22+%22url:%22+%22comments:%22+%22
>      remember+info%3F%22+-spam+-spammer&num=50&hl=en&lr=&ie=
>      utf8&oe=utf-8&as_qdr=all&start=500&sa=n</pre>
> <p></a></p></blockquote>
> <p>
> in which the search has been for:
> </p>
> <blockquote>
> <p>/archives/ “posted by” “at august” 2003 comments “post a comment” “name:” “email address:” “url:” “comments:” “remember info?” -spam -spammer</p>
> </blockquote>
> <p>
> No actual spam has yet resulted therefrom, but is there some other purpose such a search could possibly have?
>
> \[UPDATE, 10.26.03, 8.17 am: Yup. Confirmation: the IP of the search is listed in my referrer logs as 61.181.5.69, and I’ve just found in my activity log three entries that look like this:
>
> > ```
> >
> >      2003.10.25 02:14:10    61.181.5.69    MT-Blacklist comment denial:
> >                                              00000-online-casino.com
> > ```
>
> Jay Allen is my new hero.\]
>
>