Talk:Spam blacklist and User:Jak: Difference between pages

From Meta, a Wikimedia project coordination wiki
(Difference between pages)
Content deleted Content added
VisualWikitext
No edit summary
 
Tarawneh (talk | contribs)
246 edits
No edit summary
 
Line 1: Line 1:
Hi, I'm [[ar:مستخدم:Jak|Jak]] a [http://ar.wikipedia.org/w/index.php?title=%D8%AE%D8%A7%D8%B5%3AListusers&group=sysop&username= sysop] in [[ar:|arabic wikipedia]].
{{Projects}}


You can contact me in my [http://ar.wikipedia.org/wiki/%D9%86%D9%82%D8%A7%D8%B4_%D8%A7%D9%84%D9%85%D8%B3%D8%AA%D8%AE%D8%AF%D9%85:Jak discussion page].
This file is for use by, e.g., the Mediawiki [[SpamBlacklist extension]]

<div style="border: 2px solid; margin: 1em; padding: 1em; padding-top: 0; padding-bottom: 0">
*'''[[/completed removals]]'''
*'''[[/completed additions]]'''

This list is '''high overhead''' and only for '''hard cases''' which can't be dealt with using routine blocking methods. If IP blocks don't work and the spam is regular or in lots of wikis, it's a good candidate for listing here.
:: ''Is it really such high overhead? After an IRC discussion with Tim Starling and others, this is unclear. [[User:Sj|+sj]]</small>[[User Talk:Sj|<font color=#ff6996>+</font>]]''
If you haven't tried blocking and found it to be ineffective, it's not worth the great amount of time involved in verifying and adding a new entry, then dealing with any accidental blockings related to the listing. Administrators here will use their discretion in adding and removing entries by the guidelines laid out on this page.

If you are having problems with the spam list and aren't a spammer please include a link to the article you are having trouble saving and say which URL (without the leading http part) you are told is blocked. Any meta [[administrator]] can edit the spam blacklist.

For removals because they conflict with a known significant spammer, please include them in the whitelisting desired section so they can be specifically whitelisted later, while still keeping the generic block in place.
</div>

==Requests for removal==
<div style="border: 2px solid; margin: 1em; padding: 1em; padding-top: 0; padding-bottom: 0">
Add new items to the end of this section. For each one, include:
*The URL the error message mentions without the '''<nowiki>http://</nowiki>''' prefix.
*Links to the article or articles you were editing. Use a full URL if you're not sure how to write an interwiki link.
*See [[/completed removals]] for removals which have been processed (either removed or reasons given for choosing not to remove). If not removed, you can still use a plain text form of the link.
*Many of these should probably go into the whitelisting desired section - if it's just a single URL, that's probably where they belong.
</div>

===joyce.msk.ru===
joyce.msk.ru is being blocked because it matches msk.ru. Used in [[:ru:Джойс, Джеймс]] (James Joyce). [[User:Ornil|Ornil]] 03:15, 19 Jun 2005 (UTC) (admin on [[:ru:]])

===ac2i.homelinux.com===
Matches on "homelinux\.com" because of spam from "soma.home---xxx---linux.com/*".
But other pages on homelinux are no spam i.e. ac2i.homelinux.com/.
The block should be changed to "soma\.homelinux\.com"

===fansite-of-angel.serveftp.com===
This is a BBS about chinese dubbing artists and surely not a spam. Some articles in chinese wikipedia containing this address cannot be edit, e.g. [[:zh:雷碧文]]. --[[:zh:User:Netsonfong]]

==Requests for addition==
<div style="border: 2px solid; margin: 1em; padding: 1em; padding-top: 0; padding-bottom: 0">
Add new items to the <font color=blue>end of the list</font>. See [[/completed additions]] for additions which have been processed (either added or reasons given for choosing not to add).

'''If you do not provide enough information, nothing will happen.'''

For each request, please include:
*Links to one or more page diffs which show the spam being added. Preferably in many different wikis. Admins can check for cross-wiki spam ads using a special page.
*Include the URLs being promoted - they won't be added without a link to them. We need to document why we added something.
*Do not include anything where you can't point to a diff showing the spam being added - we also have to ensure that false requests aren't made for addition or deletion.
*Do not include http://, even inside nowiki tags, otherwise we will run into the spam filter while moving your entry if it is added.
Show restraint in requesting additions for:
*Spammers who spam once.
*Spammers who target only one article.
*Spammers who can be effectively blocked with IP blocks - use those instead.
</div>

===Persistent spamming from mycompiere.com===

This guy keeps adding his spam link in [[en:Compiere]] for nearly three weeks now, he is persistent and very active and also removes useful links to put in his own. He has been first warned, then blocked, but he has changed is IP or gets through using a proxy. He is also spamming [[de:Compiere]], [[es:Compiere]], [[fr:Compiere]], [[id:Compiere]], [[is:Compiere]], although the link is in English. He seems to think that by beeing so persistent people will get tired from removing his links. Thanks. --[[User:Khalid hassani|Khalid hassani]] 14:23, 16 Jun 2005 (UTC)
:Added, thank you. [[User:Silsor|silsor]] 15:07, Jun 16, 2005 (UTC)
::wow great ! thank you for your diligence [[User:Khalid hassani|Khalid hassani]] --[[User:81.192.230.152|81.192.230.152]] 18:34, 16 Jun 2005 (UTC)

===massive Linkspamming in german WP===

At least following entries were created by a link spammer:
* http://de.wikipedia.org/wiki/Diskussion:Tadalafil
* http://de.wikipedia.org/wiki/Diskussion:Cialis_februar

It contained following domains:
* www.ebusiness-cards.org
* www.globalflights.org
* www.voip-guide.org voip
* www.secure-network.info
* www.globalflights.org
* www.ecar-rentals.com
* www.ebackground-checks.com
* www.secure-network.info
* www.cruise-guide.org
* www.wedding-knot.com
* www.predictive-dialers.org

--[[User:Gunter.krebs|Gunter.krebs]] 12:53, 30 May 2005 (UTC)
:Thank you, added. [[User:Silsor|silsor]] 14:35, May 30, 2005 (UTC)

----

Please add the following: [http://is.wikipedia.org/w/index.php?title=Wikipedia%3A%C3%9E%C3%BD%C3%B0ing_%C3%A1_MediaWiki_hugb%C3%BAna%C3%B0inum&diff=26466&oldid=26465], it was posted on the Icelandic Wikipedia. —{{User:Ævar Arnfjörð Bjarmason/Sig}} 20:29, 27 Apr 2005 (UTC)
:Any more examples? Did it happen on more than one page? More than one IP? [[User:Silsor|silsor]] 14:15, May 17, 2005 (UTC)

=== www.spkpfh.de ===

Spams repeatedly, dozens of times and for months now on my talk page, under various IPs (example: http://de.wikipedia.org/w/index.php?title=Benutzer_Diskussion:AndreasPraefcke&diff=5906358&oldid=5905217, history: http://de.wikipedia.org/w/index.php?title=Benutzer_Diskussion:AndreasPraefcke&action=history - look for "some comments"),
also on my talk pages on en: (http://en.wikipedia.org/w/index.php?title=User_talk:AndreasPraefcke&action=history) and commons: (http://commons.wikimedia.org/w/index.php?title=User_talk:AndreasPraefcke&action=history), blocked in the meantime because of the spkpfh spams, the commons talk page showing no signs of it by now since the history has been cleared of the spammed versions. In the meantime they have also found my [[User talk:AndreasPraefcke]] on meta... I would like to have at least one working talk page without these abusive rants appearing daily (and often even a couple of times a day). --[[User:AndreasPraefcke|AndreasPraefcke]] 14:22, 19 May 2005 (UTC)
:Reviewed and blocked, despite the political connotations. Be aware that this may not stop the spam. [[User:Silsor|silsor]] 15:06, May 19, 2005 (UTC)
::As I suspected our spammer has just changed the format of the links, so I'll take the domain off the blacklist. This behaviour is still inexcusable but you'll have to go elsewhere to take care of it, I'm afraid. [[User:Silsor|silsor]] 18:24, May 21, 2005 (UTC)

:::Thanks. I wasn't sure how the block list works (I couldn't find any explanation), so I thought it might help. Alas, it was worth a try. By the way, could you block my user page and talk page on meta? It's really enough for me to have to take care of my German one (all other projects are blocked). The links to the de.-pages are already there. Thanks in advance. I tried to ask any meta.-sysop yesterday in the wikipedia chat, but no one answered my query there. --[[User:AndreasPraefcke|AndreasPraefcke]] 21:20, 21 May 2005 (UTC)


===www.p2l.info===
There seems to be a spam bot attacking www.the-gdf.org - We are a wiki that contains the current specifications of the Gnutella Protocol.
We've been attacked several times with spam that points to p2l.info
Here are several diffs

http://www.the-gdf.org/wiki/index.php?title=Current_events&curid=1011&diff=0&oldid=514
http://www.the-gdf.org/wiki/index.php?title=Help:Contents&curid=1013&diff=503&oldid=502
http://www.the-gdf.org/wiki/index.php?title=Gnutella_Developers:Community_Portal&curid=982&diff=0&oldid=491
http://www.the-gdf.org/wiki/index.php?title=Gnutella_Developers:About&curid=1007&diff=485&oldid=479

This has been going on since about two weeks now, all these diffs are only from today. We found this Spam Blacklist
extension, and we wanted to contribute by requesting p2l.info to be added to the BlackList.

The GDF
12:11, May 23 2005 (UTC)
http://www.the-gdf.org/wiki/index.php?title=Current_events&curid=1011&diff=0&oldid=514
:Thank you, added. [[User:Silsor|silsor]] 16:29, May 23, 2005 (UTC)
::Er, no, it looks like '''pl2'''.info was added, but not '''p2l'''.info...
::p.s. This spammer is pretty egregious (diffs on a wiki I administer: [http://abstract.cs.washington.edu/wiki/index.php?title=Help:Contents&curid=740&diff=883&oldid=882 1], [http://abstract.cs.washington.edu/wiki/index.php?title=Seattle_life&curid=731&diff=884&oldid=876 2], [http://abstract.cs.washington.edu/wiki/index.php?title=Soctech_seminar&curid=852&diff=0&oldid=873 3]) and posts from a wide variety of IP addresses. I've already put him in our local blacklist. --[http://abstract.cs.washington.edu/wiki/index.php/User:Keunwoo K]

:::I fixed it, changed pl2 to p2l -- [[User:Tim Starling|Tim Starling]] 05:36, 24 May 2005 (UTC)
:::Woop. [[User:Silsor|silsor]] 15:57, May 24, 2005 (UTC)

====p2l.info====
This spam bot is currently attacking www.signpuddle.net - a wiki for written sign langauge. It only creates new pages, attack several times an hour, and uses many different IPs. I installed the SpamBlacklist, but it was still attacking. I added a personal list and that seems to have stopped it. This seriously needs to be added to the blacklist.
:Sorry, there was a typo in the original addition. This should be blocked here now. [[User:Silsor|silsor]] 15:42, May 26, 2005 (UTC)

===azzacash.com===
This spam bot is just like the p2l.info one - posts intensly from a wide variety of IP addresses advertizing prescription drug sites like buy-fioricet.1.azzacash.com.

http://www.uuism.net/uuwiki/index.php?title=UUWiki:Community_Portal&curid=738&diff=2979&oldid=2972
http://www.uuism.net/uuwiki/index.php?title=UUWiki:About&curid=728&diff=2980&oldid=2974
http://www.uuism.net/uuwiki/index.php?title=Current_events&curid=739&diff=2978&oldid=2973

Seconded - I'm pretty sure it IS the p2l people; that was the only one I'd ever been spammed by and as soon as I started blocking them I got the azzacash garbage instead.

http://www.freebsdwiki.net/index.php?title=Help:Contents&curid=882&diff=2795&oldid=2794&rcid=1353
http://www.freebsdwiki.net/index.php?title=Current_events&curid=1402&diff=2798&oldid=2793&rcid=1352
:"azzacash" added to the blacklist. Thank you for the report. [[User:Silsor|silsor]] 15:43, May 26, 2005 (UTC)

Almost certainly the p2l people. Besides the similar MO, some of the IP addresses were identical or in the same netblock. Besides blacklisting azzacash, I banned /16 blocks for those addresses with an expiry of 40000 hours. Sucks for any legitimate users on those blocks, but this is ridiculous. :-(

===handy-cool.de/ 2-handys.de===
Guerrilla Marketing/ Spamming by the owner of the already added domain "handycool\.de":
( http://de.wikipedia.org/w/index.php?title=Mobiltelefon&action=history )

They own at least the following domains, please add them all:
*handycool.de (already added)
*handy-cool.de
*1-handys.de
*2-handys.de
*profi-handys.de
*handy-fun.tk
*handy-kaufhaus.tk

===round-robin domain spamming===
Within 6 hours of blacklisting azzacash, I had attacks from a bot blasting out repeated edits to "Current Events" for subdomains at all of the following:

badazz\.org
d\.la
silk\.com
prout\.be
bluelinecomputers\.be
blueline\.be
kyuran\.be
nux\.at
have-more-fun\.net
compblue\.com
phre\.net
is13\.de
thamaster\.de
ic5mp\.net
user-mode-linux\.net
debianbase\.de
onlinepeople\.net
opank\.com
ezua\.com
ns1\.name
plorp\.com
ygto\.com
aus\.cc
nazari\.org
bounceme\.net
bestdeals\.at
ns01\.us
z0rz\.com
egi\.biz
myserver\.org
blrf\.net
dnyp\.com
trickip\.net
soliday\.org
byinter\.net
a\.la
zapto\.org
findhere\.org
servequake\.com
fw\.nu
rutan\.org
ugly\.as
dynu\.com
informs\.com
b33r\.net
ddns\.ms
epac\.to
3-a\.net
trickip\.org
ruwe\.net
2mydns\.com
2myip\.com
x24hr\.com
pcanywhere\.net
2mydns\.net
portx\.net
dcclan\.co\.uk
pacehillel\.org
rawcomm\.net
softguy\.com
al0ne\.info
waw\.pl

This is a very active spambot. Examples:

http://www.freebsdwiki.net/index.php?title=Help:Contents&oldid=2806
http://www.freebsdwiki.net/index.php?title=Help:Contents&oldid=2802
http://www.freebsdwiki.net/index.php?title=Help:Contents&oldid=2800

Sigh. I blacklisted all of the above domains on my own local copy; but this is getting really and truly ridiculous. I fear somebody may have to come up with a better anti-spammer AI for the wikis if this keeps up.
:Awesome. Unfortunately many of those domains are top-level hosts that host many sites, including some legitimate ones. These appear to be small sites that open a frame to a search in UmaxSearch.com, who would seem to be the basic perpetrators of this spam. This is where this blacklist currently breaks down, so there's not a lot we can do about it. [[User:Silsor|silsor]] 22:25, May 26, 2005 (UTC)
::That is correct; a lot of them are - sorta like no-ip.com, which you guys are already blacklisting (and I approve of). I personally chose to blacklist the "lots of tiny little sites nobody bothers to get a real domain name for" subdomain type hosts that the Russian mafia types I seem to be having trouble with are using anyway, but I can understand not everybody would. Maybe sometime next month I'll get a chance to hack whitelisting into the php module so it's easier for other wiki admins to blacklist the hosts and still allow specific links. (Maybe alligators will fly, too, but who knows? =) --[[User:Freebsdwikinet|Freebsdwikinet]] 04:42, 27 May 2005 (UTC)

===worldescape.com===
Repeated adding of this URL in various languages, usually from [http://en.wikipedia.org/wiki/Special:Contributions/213.10.202.40 213.10.202.40]. May also include the other domains of this spammer - romeescape.com, amsterdamescape.com, newyorkescape.net, and maybe even more. [[User:Ahoerstemeier|Ahoerstemeier]] 13:22, 29 Jun 2005 (UTC)

===www.modz.de===

Spam with different IPs on several pages including the german wikipedia main page and the german wikinews mainpage. I tried to talk friendly to a person affiliated in IRC, who announced that this won't stop, because the website likes to get more hits.

"Important" Examples: [http://de.wikipedia.org/w/index.php?title=Vorlage%3AHauptseite_Wikipedia_aktuell&diff=7368561&oldid=7368539], [http://de.wikinews.org/w/index.php?title=Hauptseite&diff=41968&oldid=41962], [http://de.wikinews.org/w/index.php?title=Hauptseite&diff=42227&oldid=41972], ... --[[User:Avatar|Avatar]] 21:35, 1 Jul 2005 (UTC)

===consumeralertsystem.com===

Not a usual spam, seems to be instead some sort of adware which causes the links to be inserted (with obvious HTML formatting instead of wiki formatting) when a page is edited.

Samples can be found at [[en:Special:Contributions/70.146.152.173]]. For instance:
*[http://en.wikipedia.org/w/index.php?title=Catgirl&diff=prev&oldid=18420241]
*[http://en.wikipedia.org/w/index.php?title=Power_Rangers:_SPD&diff=prev&oldid=18407361]

--[[User:CesarB|cesarb]] 8 July 2005 22:03 (UTC)

:Also [[en:Special:Contributions/65.1.214.82]] and [http://en.wikipedia.org/w/index.php?title=Rock_in_Rio&diff=prev&oldid=17039797] and [[en:Special:Contributions/68.21.9.142]]. Looks like it's not a single infected computer. --[[User:CesarB|cesarb]] 20:14, 9 July 2005 (UTC)
::[http://meta.wikimedia.org/w/index.php?title=Spam_blacklist&curid=13107&diff=175008&oldid=173806 Added], thanks. --[[User:CesarB|cesarb]] 20:40, 9 July 2005 (UTC)

==Whitelisting desired==
<div style="border: 2px solid; margin: 1em; padding: 1em; padding-top: 0; padding-bottom: 0">
For individual URLs which can't be unblocked because they conflict with a significant spammer. Eventually the software will allow specifying exceptions to the general block rules.
</div>

=== Sites in domain "spb.ru" ===
* www.d-c.spb.ru - DESIGN and CONSTRUCTION journal
'''Municipal districts of the St-Petersburg (Russia)''' :
* mo-13.spb.ru
* narvski-okrug.spb.ru

--[[User:Kaganer|Kaganer]] 09:36, 13 Apr 2005 (UTC)
=== Sites in domain "spb.su" ===
* niimm.spb.su &mdash; Mathematics &amp; Mechanics Faculty of St. Petersburg State University
[[User:BACbKA|BACbKA]] 09:28, 14 Apr 2005 (UTC)

=== Sites in domain "msk.ru" ===
* metro.msk.ru &mdash; Site about Moskow metro (subway) --[[User:Kaganer|Kaganer]] 15:22, 29 Apr 2005 (UTC)
* echo.msk.ru - the site of radio station "Echo Moscow" [[:en:User:Grue|Grue]] 16:57, 10 May 2005 (UTC)
* rus-etrain.msk.ru Site about electric multiple unit trains [[User:Kneiphof|Kneiphof]] 13:24, 16 May 2005 (UTC)
**I wish to add my voice to the voice of [[User:Kneiphof|Kneiphof]]. Currently the link to rus-etrain in the article [[ru:Электропоезд]] (electric train) is more useful then the article itself, so it is morally difficult ;) to remove it. However, it is impossible to edit the article without removing the link, so that the spam protection system effectively blocks the article from editing. [[ru:Участник:Begemotv2718]]
***Remove the "http" part of the URL or put a space between it and the domain. [[User:Silsor|silsor]] 22:28, Jun 4, 2005 (UTC)
* www.kerc.msk.ru &mdash; Keldysh Research Center (English version: www.kerc.msk.ru/ipg/index_e.shtml) --[[User:RuPassenger|RuPassenger]] 15:38, 9 Jun 2005 (UTC)

=== Sites in domain "no-ip.info" ===
* aiglesrv.no-ip.info &mdash; More specifically: aiglesrv.no-ip.info:8080/particracy/main/ : an online political simulation game, so that links can be made to it from the wikipedia article concerning it: [[w:Particracy (web game)]]. [[User:203.87.119.116|203.87.119.116]] 06:47, 7 May 2005 (UTC)
**no-ip.info is currently unblocked. [[User:Silsor|silsor]] 19:38, Jun 16, 2005 (UTC)

=== Sites in domain "dynalias.net" ===
* (www.)fried.dynalias.net &mdash; my personal web site; I'd like to link it on my Wikipedia profile page! I understand that a lot of spam comes from the dynalias.net domain, but if you get anything from fried.dynalias.net you'll know who it's from (not that I'd ever do that, of course). [[User:Dave Fried|Dave Fried]] 21:03, 30 May 2005 (UTC)

==Other talk==
<div style="border: 2px solid; margin: 1em; padding: 1em; padding-top: 0; padding-bottom: 0">
Please leave all other talk in this section.
</div>

=== What's the difference? ===

Requesting from de.wiki for on-going spamming, I made an edit and add an entry. I expected it would work soon, but I had an additional report, spamming continued. What was wrong on my edit? Or it is a feature? --[[User:Aphaia|Aphaia]] | [[Translation requests/WQ/2/Ja:|<font color=lightseagreen>WQ2翻訳中</font>]] | [[User talk:Aphaia|talk]] 01:43, 28 Jan 2005 (UTC)

=== Diff ===

As suggested by Jamesday on IRC, here is a selection of diff URLs of typical spams from the biggest spammer on the English Wiktionary since October. The spams come from various IP ranges, the content contains either Chinese or the same badly translated into English. The URLs in the spam also change and seem to be something like tinyurls:
<pre>
"211.90.129.176" 02:22, 5 Nov 2004 Hippietrail blocked with an expiry time of 48 hours (quit spamvertising already)
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Esperanto_index&diff=120125&oldid=120123
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Esperanto_index&diff=112487&oldid=112087

"218.17.80.112" 10:08, 15 Nov 2004 Paul G blocked with an expiry time of 14 days (Persistent spamming)
http://en.wiktionary.org/w/wiki.phtml?title=Qur%27an&diff=117271&oldid=117268
http://en.wiktionary.org/w/wiki.phtml?title=Help:Contents&diff=117242&oldid=117235

"218.18.12.28" 10:36, 16 Nov 2004 Hippietrail blocked with an expiry time of 2 days (the spamvertiser returns)
http://en.wiktionary.org/w/wiki.phtml?title=Help:Contents&diff=117645&oldid=117642
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Community_Portal&diff=117650&oldid=117637
: done to here ~~~~
"218.18.87.200" 11:39, 4 Nov 2004 Hippietrail blocked with an expiry time of 24 hours (spamvertising again)
http://en.wiktionary.org/w/wiki.phtml?title=Slovene&diff=114324&oldid=114321
http://en.wiktionary.org/w/wiki.phtml?title=Russian&diff=114063&oldid=113973

"219.133.112.138" 07:22, 5 Nov 2004 Hippietrail blocked with an expiry time of 48 hours (repeat spamvertiser)
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Dutch_index&diff=114587&oldid=114569

"221.196.11.2" 07:18, 20 Nov 2004 Eclecticology blocked with an expiry time of 168 hours (vandalism)
http://en.wiktionary.org/w/wiki.phtml?title=Exponere&diff=118987&oldid=118968
http://en.wiktionary.org/w/wiki.phtml?title=Devil&diff=118982&oldid=118966

"221.196.82.226" 07:02, 13 Nov 2004 Hippietrail blocked with an expiry time of 96 hours (spamdork strikes again)
http://en.wiktionary.org/w/wiki.phtml?title=Megalomania&diff=116818&oldid=116812
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Recentchanges&diff=116817&oldid=116811

"221.197.16.90" "221.197.18.150"13:04, 10 Dec 2004 Polyglot blocked with an expiry time of 504 hours (vandalizing Wiktionary 3 days in a row)
http://en.wiktionary.org/w/wiki.phtml?title=Blue&diff=116635&oldid=116565
http://en.wiktionary.org/w/wiki.phtml?title=Onomatopoetic&diff=115406&oldid=114914

"221.197.18.150"13:04, 10 Dec 2004 Polyglot blocked with an expiry time of 504 hours (vandalizing Wiktionary 3 days in a row)
http://en.wiktionary.org/w/wiki.phtml?title=Soror&diff=125963&oldid=125957
http://en.wiktionary.org/w/wiki.phtml?title=Talk:Transwiki:Chortle&diff=125381&oldid=125312

"221.197.19.225" 06:49, 26 Nov 2004 Hippietrail blocked with an expiry time of 4 days (spamvertiser)
http://en.wiktionary.org/w/wiki.phtml?title=Mi&diff=124180&oldid=124103
http://en.wiktionary.org/w/wiki.phtml?title=Basketbrawl&diff=120998&oldid=120985

"60.25.120.218" 13:48, 11 Oct 2004 Hippietrail blocked with an expiry time of 24 hours (continuing spamvertising)
http://en.wiktionary.org/w/wiki.phtml?title=Lead&diff=108477&oldid=108407
http://en.wiktionary.org/w/wiki.phtml?title=Phoneme&diff=108562&oldid=108346

"60.25.122.177" 08:25, 17 Nov 2004 Hippietrail blocked with an expiry time of 3 days (spamvertiser)
http://en.wiktionary.org/w/wiki.phtml?title=Nu&diff=117897&oldid=117808
http://en.wiktionary.org/w/wiki.phtml?title=User:Gangleri/tests&diff=117898&oldid=117805

"61.145.136.171" 06:39, 11 Oct 2004 Polyglot blocked with an expiry time of 168 hours (repeated vandalism in several pages over the last 24 hours)
http://en.wiktionary.org/w/wiki.phtml?title=User:D%C5%82ugosz&diff=108377&oldid=108351
http://en.wiktionary.org/w/wiki.phtml?title=Help:Contents&diff=108241&oldid=10817
</pre>
&mdash; [[User:Hippietrail|Hippietrail]] 13:50, 11 Dec 2004 (UTC)

=== Spam protection filter bugs ===
(moved from [[User talk:Angela]])

I got the above message for the first time today, more than once. Many of the sites (because of which I got the above message) are not listed on [[m:Spam blacklist]]. Some users link to google on votes for deletion page and so, I cannot edit even those pages. [[User:Utcursch|Utcursch]] 13:37, 20 Dec 2004 (UTC)

:I have the same problem, on [[en:Viktor Yushchenko]] page. When I try to save the page, I get a message that biz.yahoo.co.uk and reuters.com are on [[m:Spam blacklist]], although none of them is listed there (and should not be listed, as those are frequently linked news sites). [[User:195.13.132.24|195.13.132.24]] 13:45, 20 Dec 2004 (UTC)

::I had the same problem. I think it was probably related to the server going read-only this morning. [[User:64.222.254.30|64.222.254.30]] 06:04, 21 Dec 2004 (UTC)

It was an over-broad spam filter rule. Unrelated to any server issues - I simply got a rule significantly wrong. [[User:JamesDay|Jamesday]] 21:33, 10 Jan 2005 (UTC)

===I've never done this===
A user (bryan Derksen) left a note on my [[wikipedia:en:User talk:TUF-KAT#potential spam blacklist problem|my en talk page]] regarding the website claudiabeni-fansite.6x.to, which is linked to on [[wikipedia:en:Claudia Beni]]. It seems like a perfectly appropriate website, but its presence was keeping him from adding a category. The website doesn't appear to be listed on the spam filter page, though, so I don't know how to fix this. Can someone help? [[User:TUF-KAT|TUF-KAT]] 14:44, 27 Feb 2005 (UTC)
:Nevermind, I got it. [[User:TUF-KAT|TUF-KAT]] 18:02, 27 Feb 2005 (UTC)

===Redirect spam===
Not sure if this can be part of the spamfilter, but a particularily nasty vandal redirected pages to some cache> the text he inserted was <nowiki>#REDIRECT[[cache:http://www.oralse.cx/]]</nowiki>. See the [http://en.wikipedia.org/w/index.php?title=Special:Contributions&target=Dangerous_vandal%21_Block_it%21 Contributions]. Of ocurse, better would be if outside redirects are disabled in general. -- [[User:Chris 73|Chris 73]] 11:56, 18 Feb 2005 (UTC)
:Brion disabled this, shouldn't be a problem anymore. [[User:Silsor|silsor]] 12:51, Feb 18, 2005 (UTC)

=== Multi-wiki collaborative blacklist ===

There's a very good multi-wiki collaborative blacklist at http://www.emacswiki.org/cw/BannedContent . It's automagically collated from a number of different sources. Some sort of cooperation would probably be helpful for Wikimedia and other wikis. --[[User:Evan|Evan]] 22:48, 18 Mar 2005 (UTC)

:Chongqed.org also has a blacklist. In this case it is built up largely from their [http://chongqed.org/submit.html spam submission] system. http://blacklist.chongqed.org/
:Submissions are checked, so it should be reliable list of regular expressions for spam all over wikidom. By submitting details of a spammer here, you also add the spammer to their database, which means you can 'chongq' them (steal search engine rankings from them by linking to the database) -- [http://wiki.chongqed.org//Halz Halz] - 25th Apr 2005

=== Can article titles be blocked by Regexp? ===

In german Wikipedia a troll tries to recreate a deleted article and uses Unicode tricks (substituting cyrillic letters of same appearance, special dots or even the simple large I vs small el trick) to create it under a large number of different names. The original name was [[:de:K.D.St.V. Carolus Magnus]], a recent attempt was [[:de:K․D․Ѕt․V․ CarоIuѕ Μaɡnuѕ]], more attempts usually visible at the delete log [http://de.wikipedia.org/w/index.php?title=Spezial%3ALog&type=delete&user=&page=].

As there are some latin letters which cannot be faked, I think it would be possible to find a regexp for blocking, if there is a software feature to block article titles by regexp.

[[User:Pjacobi|Pjacobi]] 21:00, 2005 Mar 27 (UTC)

:The spam blacklist deals only with external links. [[User:Silsor|silsor]] 21:18, Mar 27, 2005 (UTC)

=== Unable to revert vandalism ===
Hi, not sure if this is the rigth place, but: <br>
[[en:Ambigram]] has been vandalised by replasing all links with nonsense, and trying to revert it sends me to the spam protection filter because one of the links is a numbers only link ( <nowiki> 01101001.com </nowiki> ). The page is a relevant link for the article. [[en:User:Demo]] 07:30, 19 May 2005 (UTC)

=== Edits delayed in ?action=raw ===
So, I'm using the load_lists script in SpamBlacklist, and it appears that the URL it fetches --- http://meta.wikimedia.org/wiki/Spam_blacklist?action=raw --- does not track the actual contents of the page. For example, azzacash was added yesterday, and is clearly visible on the [[Spam blacklist]] page, but the ?action=raw URL doesn't pick it up. I'm not sure where to report this --- it looks like a MediaWiki bug to me. -[http://abstract.cs.washington.edu/wiki/index.php/User:Keunwoo K]
:It was only added 4 hours ago, but this still shouldn't happen. You can file a bug at http://bugzilla.wikimedia.org/. [[User:Silsor|silsor]] 18:49, May 26, 2005 (UTC)
::I get a "Forbidden - Raw pages must be accessed through the primary script entry point." error when loading that URL, but this URL seems to work instead http://meta.wikimedia.org/w/index.php?title=Spam_blacklist&action=raw --[[User:Travisd666|Travisd666]] 16:28, 13 July 2005 (UTC)

===[[en:Stanley Unwin (comedian)|Stanley Unwin]]===
Does anyone know why stanleyunwin.com is being blocked? It used to be in the [[en:Stanley Unwin (comedian)|Stanley Unwin]] article but is being filtered despite not appearing in this list and not looking like a spam link. [[User:Angela|Angela]] 00:03, 29 Apr 2005 (UTC)
:It was added recently by Yann, in what may have been an overzealous filtering. The domain "win.com" was filtering "stanleyunwin.com". Removed. [[User:Silsor|silsor]] 03:50, Apr 29, 2005 (UTC)
::Is it supposed to work like this? fiji.com in the blacklist is also blocking alliancefiji.com. [[User:Angela|Angela]] 13:30, 1 May 2005 (UTC)
:::Unfortunately yes. This can occasionally be prevented, though, by using filters like \.fiji\.com. [[User:Silsor|silsor]] 16:34, May 1, 2005 (UTC)

===Janet Jackson===
Hi,

Does anyone know why is Janet Jackson's official site www.janet-jackson.com on the list? [[hu:user:Alensha]]
:It's really "janet-jackson", and it's probably a holdover from porn spam that included that text in the domain name. It's been in the blacklist since the beginning so there shouldn't be too much harm in removing it. [[User:Silsor|silsor]] 23:02, May 19, 2005 (UTC)

=== IP list from Anarchopedia ===

95% of this IPs spammed Anarchopedia today. If you need more details, tell me what do I need to ask MySQL for deleted pages? --[[User:Millosh|Millosh]] 19:28, 26 May 2005 (UTC)

24.239.248.21
61.185.19.77
61.205.205.42
62.90.251.129
62.139.105.29
63.145.115.131
66.47.217.98
66.160.69.101
66.178.21.203
69.50.184.211
69.50.187.93
81.115.31.217
81.144.146.194
82.129.167.165
82.129.167.171
82.194.62.22
148.235.92.153
148.244.150.57
161.200.255.161
193.188.105.22
195.175.37.71
200.162.244.20
200.164.88.146
200.165.76.250
200.247.92.130
201.9.127.141
202.47.247.130
202.154.157.205
203.64.76.228
203.144.143.2
203.177.60.237
210.68.141.70
212.92.8.103
213.175.169.2
217.29.240.36
217.196.166.105
219.240.37.28

:This spam blacklist blocks sites from being added by any user, not specific IPs from editing articles. [[User:Silsor|silsor]] 19:52, May 26, 2005 (UTC)

::Email blacklists block sending email by any user. User who thinks that (s)he is not a (wiki) spammer should send an email. Note that this list is generated today (an the list still grows)! I'll try to make statistics about operating systems of that IPs tomorrow, but I think that we would get high percentage of Unix-like OSs. (The only other possibility is that IPs belong to infected Windows machines, but I don't think so...) --[[User:Millosh|Millosh]] 20:21, 26 May 2005 (UTC)

:::This spam blacklist blocks sites from being added by any user, not specific IPs from editing articles. [[User:Silsor|silsor]] 19:52, May 26, 2005 (UTC)

===request 16 06 2005 ===

An editor is asking that http://havardDOTno-ipDOTinfo be removed from the list so that he can add it to his newly created user page. He considers the site legitimate. Does anyone see an objection to this removal ?

THanks for the answer :-)

[[User:Anthere|Anthere]] 18:00, 16 Jun 2005 (UTC)
:Removed, we'll see what happens. This is a second-level-domain site that has been used by some spammers in the past. [[User:Silsor|silsor]] 19:38, Jun 16, 2005 (UTC)

=== .homelinux.com ===

I don't see why all homelinux.com DynDNS urls have to be blocked. The ones I'd like to add are:
http://jedilinux-ukDOThomelinuxDOTcom
and
http://lakerdonaldDOThomelinuxDOTcom
Both of them for the [http://en.wikipedia.org/wiki/Jedi_Linux Jedi Linux] page.
Thanks.

=== blacklisted spam can be posted from DIV tags ===

Sadly, the drug spammers have found a loophole. See below:

<div style="overflow:auto;">[http://www9.trickip.org/xanax-online/ xanax online] ...
</div>

I'll spare you the bajillion actual entries in the spam - they're all the ones I listed above in the comment titled "round-robin domain spamming." They're ALL blacklisted, but unfortunately they can be posted successfully when wrapped in a DIV tag as shown above. --[[User:Freebsdwikinet|Freebsdwikinet]] 03:15, 19 Jun 2005 (UTC)
:I tested this on enwiki using the exact HTML fragment above with a domain from our blacklist, but it was successfully blocked by the spam filter. Can you demonstrate with, say, predictive-dialers.org on [[:en:User:Silsor/sandbox]]? [[User:Silsor|silsor]] 06:29, Jun 19, 2005 (UTC)

===sex spam on nah:===
* [http://nah.wikipedia.org/w/index.php?title=Main_Page&oldid=6435 diff from main page spam]
* [http://www.google.com/search?hl=en&hs=wUX&lr=&client=firefox-a&rls=org.mozilla:en-US:official&q=%22www.show-your-pussy.info%22 Google search] for other targetted sites
[[User:Sj|+sj]] <small>| [[WQ/3|Translate the Quarto]] |</small>[[User Talk:Sj|<font color=#ff6996>+</font>]] 01:56, 14 July 2005 (UTC)

Revision as of 19:46, 13 October 2005

Hi, I'm Jak a sysop in arabic wikipedia.

You can contact me in my discussion page.

Retrieved from "https://meta.wikimedia.org/w/index.php?title=Talk:Spam_blacklist&oldid=220615"