I've seen exploited servers in the past with odd .htaccess files, performing redirects to spam sites depending on the requestor's source IP or some other identi

I've seen exploited servers in the past with odd .htaccess files, performing redirects to spam sites depending on the requestor's source IP or some other identifier. Not sure how the server was exploited originally though.