Talk:Spam blacklist

From Meta, a Wikimedia project coordination wiki
This is an archived version of this page, as edited by Sj (talk | contribs) at 15:37, 1 December 2005 (→‎www.go.to/esb/). It may differ significantly from the current version.

Latest comment: 18 years ago by Zigger in topic Requests for addition

This file is for use by, e.g., the Mediawiki SpamBlacklist extension

This list is high overhead and only for hard cases which can't be dealt with using routine blocking methods. If IP blocks don't work and the spam is regular or in lots of wikis, it's a good candidate for listing here.

Is it really such high overhead? After an IRC discussion with Tim Starling and others, this is unclear. +sj+

If you haven't tried blocking and found it to be ineffective, it's not worth the great amount of time involved in verifying and adding a new entry, then dealing with any accidental blockings related to the listing. Administrators here will use their discretion in adding and removing entries by the guidelines laid out on this page.

If you are having problems with the spam list and aren't a spammer please include a link to the article you are having trouble saving and say which URL (without the leading http part) you are told is blocked. Any meta administrator can edit the spam blacklist.

For removals because they conflict with a known significant spammer, please include them in the whitelisting desired section so they can be specifically whitelisted later, while still keeping the generic block in place.

Requests for removal

Add new items to the end of this section. For each one, include:

  • The URL the error message mentions without the http:// prefix.
  • Links to the article or articles you were editing. Use a full URL if you're not sure how to write an interwiki link.
  • See /completed removals for removals which have been processed (either removed or reasons given for choosing not to remove). If not removed, you can still use a plain text form of the link.
  • Many of these should probably go into the whitelisting desired section - if it's just a single URL, that's probably where they belong.

balder.prohosting.com/mrod, essential to writing the en:Rodrigues Movement article. --213.114.31.89 16:49, 1 November 2005 (UTC)Reply

Done. silsor 23:05, 1 November 2005 (UTC)Reply

www.101languages.net I never heard of such a website, but it is blocking me from editing the en:Polish_language article

The link is no longer in the article. silsor 16:55, 7 November 2005 (UTC)Reply

www.tamiflu is blocked. www.tamiflu.com is a legitimate site by Roche with information about their drug, and it is essential to writing the en:oseltamivir (en:Tamiflu) page. The link has been there, but suddenly someone put this spamfilter on and I can't save my new edits on a different topic! User:Pigkeeper (I don't know how to link to my wiki name, i don't have a metawiki name). 9 Nov 2005, 19:50

Thanks for reporting this, I removed "tamiflu" from the list. I checked the other drug names as well but the only one that seems to have a real web site is "phentermine" for phentermine.com, and that site looks really suspicious (how can you have an "official" site for the generic name of the medication? silsor 20:40, 9 November 2005 (UTC)Reply

bmpx.kicks-ass.net is blocked. It is a legitimate website about a media player, and is essential for updating en:Beep_Media_Player page (as well as all tranlsations of that page). User:AbelCheung (I don't have metawiki name too) 19:58, 2005/11/11 (UTC)

It seems that kicks-ass.net was only spammed once here, so I've gone ahead and removed it. silsor 19:44, 12 November 2005 (UTC)Reply

101languages.net

This is my language web site. I guess I got a little overzealous and linked it to a few too many pages when I first published the site. However, I didn't realize I was breaking any of Wikipedia's spam rules. Never meant to spam!! Please remove this domain from the blacklist and I won't post any links, but allow others to do so! Thank you.

You have a second chance. silsor 18:06, 19 November 2005 (UTC)Reply

freedom4sale.com

Could you please let us know why our property website has been put on the spam blacklist. We definitely do not intend to spam and will make any changes to the site that are deemed spam. Please advise.


welcome.to

From Here:

I Am Unable To Add Other Enternal Sources, Because An Entry For welcome.to/ Already Exists On This Page. The Welcome.To Link Seems Valid, And Seems Like It Is About Martial Arts, So I Didn't Want to Remove It, But It Prevents Anyone From Updating This Page. - `Lex

All welcome.to links are fake. To make a proper link, open the welcome.to URL and find the URL of the frame it opens, then add this real URL to the article instead. I have done this on the Silat article for you. silsor 16:09, 17 November 2005 (UTC)Reply
This is a sweeping generalisation and is not correct! I used welcome.to myself to render my homepage's URL into a more readable, memorable form, and thanks to this inclusion, I now find that I can't save my own userinfo page. Welcome.to may get used for spam but it's not only used for spam. I object to this inclusion and would like to see it removed. 87.74.9.91 13:47, 21 November 2005 (UTC)Reply
I am the author of the above entry - Wikipedia user/editor LProven. 87.74.9.91 13:49, 21 November 2005 (UTC)Reply
The spam outweighs the very few pages where people use welcome.to URLs, especially considering that every legitimate welcome.to site can be linked to anyway. "Wikipedia forces me to link to the real URL of my home page" isn't enough to remove it, sorry. silsor 16:36, 21 November 2005 (UTC)Reply



Requests for addition

Add new items to the end of the list. See /completed additions for additions which have been processed (either added or reasons given for choosing not to add).

If you do not provide enough information, nothing will happen.

For each request, include:

  • Links to one or more page diffs which show the spam being added, preferably in many different wikis. We have to ensure that false requests aren't made for addition or deletion.
  • Include the URLs being promoted - they won't be added without a link to them. We need to document why we added something.
  • Do not include http://, even inside nowiki tags, otherwise we will run into the spam filter after the URL is added.
  • If the spam is in non-English on a non-English wiki, explain it as best you can. If you need translation, use Meta:Babel.

Show restraint in requesting additions for:

  • Spammers who spam once.
  • Spammers who target only one article.
  • Spammers who can be effectively blocked with IP blocks - use those instead.

www.anzwers.org

Interleaved with www.online-shopping.wb.st attacks on other projects, so it's probably the same spammer. Again, they have attacked at least two projects' talk pages with different IPs each time. Here are two diffs: [1] and [2]. (Donovan|Geocachernemesis|Interact) 02:15, 27 August 2005 (UTC)Reply

Any recent examples? silsor 17:23, 7 November 2005 (UTC)Reply

158hk.org & 158hk.net & hksaa.net

spammed in ja.wp. [3] [4] [5] [6]. --Tietew 15:14, 28 August 2005 (UTC)Reply

Sorry for the long delay. Does this spam still happen? silsor 17:08, 8 November 2005 (UTC)Reply

hotsex.bare.org

Spammed by 81.214.96.35 on pt.wikinews: [7] [8]. -- Get_It 20:55, 30 August 2005 (UTC)Reply

This should be handled by blocking 81.214.96.35. silsor 17:08, 8 November 2005 (UTC)Reply

qm008.com

Spam Dan100 09:22, 4 September 2005 (UTC)Reply

One spam isn't enough to blacklist on. silsor 17:08, 8 November 2005 (UTC)Reply

about 7 more in uk.wikipedia More, [9] [10] [11] Ilya K 13:14, 16 November 2005 (UTC)Reply

Were these all added in September as well? silsor 15:48, 16 November 2005 (UTC)Reply

Tax protester spam

www losthorizons com

Commerical "tax protester" site, added by multiple IPs to multiple articles on WP, including w:Tax protester [12]; w:Brushaber v. Union Pacific Railroad [13]; and innumerable additions to w:Income tax (e.g., [14], [15], [16] [17])

joebanister blogspot com

Another tax protester site, added by multiple IPs to w:Income tax multiple times ([18], [19], [20]), sometimes along with www losthorizons com above. Also added to w:IRS ([21]) — Mateo SA 23:10, 19 September 2005 (UTC)Reply

Neither of these sites seem to have been added since September. silsor 17:08, 8 November 2005 (UTC)Reply


cialis-online.bigclickmouse.com

Spam, spam, spammity spam![22] Garrett 14:31, 21 September 2005 (UTC)Reply

Are there any more examples of this spam? silsor 21:06, 12 October 2005 (UTC)Reply

bjicp.com, gloveboxes.com.cn, gloveboxes.cn

Spam, spam, lovely spam, spa-a-a-a-am![23] Garrett 21:20, 22 September 2005 (UTC)Reply

Are there any more examples of this spam? silsor 21:06, 12 October 2005 (UTC)Reply

5737.net

This user add this gambling website in his user page for advertise: [24] --Moses 16:31, 8 October 2005 (UTC)Reply

Only once? silsor 21:06, 12 October 2005 (UTC)Reply

[*.web.com, *.big.de.com

Repeat spammer bot, particularly using casino-related (*.888.web.com), (*.pokera.web.com), www.play-online-casino.de.com, (*.big.de.com).

example wikispam. - Amgine/talk 15:28, 13 October 2005 (UTC)Reply

All specific domains added for now. silsor 15:52, 13 October 2005 (UTC)Reply

Starting a laundry list from recent WN blocks:

Domain diff
sexclub69.zap3x.com/ 1
www.searchadv.com, www.buy-online-pharmacy-best.cheap-buy-free-online.com 2
www.rolelit.com 3
www.anzwers.or 4

freesex31.zap3x.com

Spam spam lovely spam! [25] Garrett 02:56, 15 October 2005 (UTC)Reply

Has it happened more than once? silsor 16:49, 15 October 2005 (UTC)Reply

Pagina

Every month there are a few more links to this link farm. One, Another. All go http:// [something like the pagename] .pagina.nl

That doesn't look very serious at all, and isn't pagina a free host? silsor 14:41, 16 October 2005 (UTC)Reply
Pagina is a webdirectory/linkfarm. 68.39.174.238 03:50, 19 October 2005 (UTC)Reply

www.kvdeutschland.q27.de

Nazi page which probably is illegal (not sure), set by an user of de: on many pages. Thanks, Rdb/de:Benutzer:Rdb 14:00, 18 October 2005 (UTC)Reply

Could you please provide some examples? silsor 05:45, 6 November 2005 (UTC)Reply

From Seattleeva.org

See this spam we were so fortunate to recieve:

  • [26] This one was kind enough to identify itself as spam: div id="wikiSpam"
rx-seote\.com
  • [27] This one was kind enough to use the signature, doesn't look very botish.

<!pre> drugs\.com lrginc\.com Aciphex\.com Actonel\.com Actos\.com Acyclovir\.com Alendronate\.com Allegra\.com Altace\.com Amoxycillin\.com Atorvastatin\.com Augmentin\.com Avandia\.com Azithromycin\.com Bupropion\.com Bupropion\.com Carisoprodol\.com Cefixime\.com Celebrex\.com Celecoxib\.com Cephalexin\.com Cetirizine-HCL\.com Cialis\.com Cipro\.com Ciprofloxacin\.com Clarinex\.com Claritin\.com Clomid\.com Clomiphene\.com Cozaar\.com Desloratadine\.com Diflucan\.com Esomeprazole\.com Fexofenadine\.com Finasteride\.com Flomax\.com Fluconazole\.com Fluoxetine\.com Fosamax\.com Glucophage\.com Imitrex\.com Keflex\.com Lamisil\.com Levitra\.com Lipitor\.com Loratadine\.com Losartan\.com Meridia\.com Metformin\.com Montalukast\.com Nexium\.com Omeprazole\.com Orlistat\.com Pantoprazole\.com Paroxetine\.com Paxil\.com Pioglitazone\.com Pravachol\.com Pravastatin\.com Prilosec\.com Propecia\.com Proscar\.com Protonix\.com Prozac\.com Rabeprazole\.com Ramipril\.com Risedronate\.com Rosiglitazone\.com Sertraline\.com Sibutramine\.com Sildenafil\.com Singulair\.com Softtabs\.com Softtabs\.com Soma\.com Sumatriptan\.com Suprax\.com Tadalafil\.com Tamsulosin\.com Terbinafine\.com Tretinoin-Gel\.com Valacyclovir\.com Valtrex\.com Vardenafil\.com Viagra\.com Wellbutrin\.com Xenical\.com Zithromax\.com Zoloft\.com Zovirax\.com Zyban\.com Zyrtec\.com <!/pre>

Thanks for reporting this. I added a few from the top, rx-seote.com and mx.gs. The others from the top appear to be legitimate hosting sites that had spam domains on them. The long list of pharmaceuticals is confusing; some of them are probably spammer-owned but there are others that appear to be legitimate (like viagra.com). Perhaps some spam links were listed alongside legitimate links in order to improve search engine rankings? Not adding for now. silsor 23:10, 31 October 2005 (UTC)Reply

Bot 1 [_pw##_]

<!pre> mx\.gs sie\.pl omet\.pl czytelnia\.net fragism\.com spiritualitea\.net <!/pre>

These have been reviewed by silsor, rearranged them for ease of later additions.
flappie\.nl
zwap\.to
ubtt\.org
xanga\.com
diaryland\.com
ojr\.org
japanmediareview\.com
islovely\.com
cutezone\.com
athome\.to
loveslife\.com
cutecity\.com
isfriendly\.com
duvx\.com
ismad\.com
isyummy\.com
ven\.bz

Bot 2 section replacer

Looks like a new Bot, it appear to be replacing the first section on user pages. --D0li0 00:58, 6 November 2005 (UTC)Reply

viprape\.com
golft\.nl
Added those two domains (a rape fetish site and domain hiding service). silsor 05:44, 6 November 2005 (UTC)Reply

It's back.. Replacing sections again.

lau\.biz
fiberia\.com
The fiberia link is now covered under "phentermine", and lau.biz is added. silsor 21:10, 8 November 2005 (UTC)Reply
airmode\.de
#green-tea\.co\.nr
#green-tea-300\.co\.nr
hosting\.q4w\.net
co\.nr
fw\.nu

[38] --D0li0 09:32, 20 November 2005 (UTC)Reply

narod\.ru

huter.t35.com

See some diffs: [39], [40], [41]... Thanks. Korg 02:07, 1 November 2005 (UTC)Reply

Reported to abuse department. silsor 23:05, 1 November 2005 (UTC)Reply
Thank you again. :) Korg 22:20, 4 November 2005 (UTC)Reply

www.angelfire.com/poetry/seidel/

  • URLs being promoted:
    • www.angelfire.com/poetry/seidel/

--de:Benutzer:webmaster@sgovd.org / 84.61.2.19 23:48, 1 November 2005 (UTC)Reply
support, de:Benutzer:He3nry/ --145.254.215.119 13:16, 3 November 2005 (UTC)Reply

Try protection first. silsor 15:22, 3 November 2005 (UTC)Reply
Well, protection is a bad solution because there are no other vandals, only the IP is trying to put in his link for several months... it's really getting annoying... 134.155.99.42 17:00, 5 November 2005 (UTC) de:Benutzer:Gunfighter-6Reply
We're trying protection now. I expect it to be a successful approach, but—as you may know—it has certain drawbacks like prohibiting normal users from editing the page.--80.136.149.131 18:41, 5 November 2005 (UTC)Reply
If he doesn't go away after the page has been protected for a reasonable amount of time then the link is a good candidate for addition. silsor 19:27, 5 November 2005 (UTC)Reply

Well, the article was protected for several weeks, but he obviously did not go away. Protection was removed yesterday (26th) at 12:59, at 16:32 the link showed up again... [51] [52] de:Benutzer:Bomberman -80.145.120.224 12:38, 27 November 2005 (UTC)Reply

www5f.biglobe.ne.jp/~kokumin-shinbun/

Spammed in Ja.wikipedia. Spams are from multiple account (sockpuppets) and open proxies.

--Tietew 20:53, 5 November 2005 (UTC)Reply

Added. Would you mind saying what the site is about? silsor 05:41, 6 November 2005 (UTC)Reply
I cannot understand why this site is categorized as SPAM. Even if these links are submitted from an open proxy by someone, it does not mean the site itself is a SPAM site. This site includes some useful news articles because Japanese major news sites do not maintain old news articles, but this site does. This site should be dropped from spam list --Extrahitz 10:19, 15 November 2005 (UTC)Reply
Contibutions above are really spam. How about blacklist www5f.biglobe.ne.jp/~kokumin-shinbun/S47/4708/470801 instead? --Tietew 10:40, 15 November 2005 (UTC)Reply
Since the linked pages themselves are not SPAMs, banning the pages is not a proper solution. Blocking the proxy and the account is appropriate in this case (if it is contributed from proxy or multiple acounts). I don't know if links the specific pages above are needed in wiki (in the future). However, we should not limit links unless the site has SPAMing intention. --Extrahitz 11:55, 15 November 2005 (UTC)Reply
You still have not answered my question - what is the site about? I have made the block more specific. silsor 13:10, 15 November 2005 (UTC)Reply
This site is a Japanese right-wing paper's site. Articles above are about a 1970's "secret document" so called "Chinese Communist Party's direction for liberation of Japan". They say the "document" describe the way to overthrow the Japanese regime by their agents. I don't know if the article is precise. --Extrahitz 07:03, 16 November 2005 (UTC)Reply

I support Tietew's view they are spamming. Tbe relevance between articles and the site is very weak and presumably they were propaganda and/or advertisement. --Aphaia 03:13, 18 November 2005 (UTC)Reply

The three wiki articles above are "Mao Zedong", "Chinese Communist Party", "Chinese National Security Bureau". You should explain these basic facts before you mention the relavance. And you neglect what I wrote. Those responsible are contributor, not the site. --Extrahitz 12:18, 18 November 2005 (UTC)(typo correction)--Extrahitz 12:23, 18 November 2005 (UTC)Reply

joia.com

Pharmaceutical linkspam: [65], [66], [67], [68], [69], [70], [71], [72], [73], [74], [75], etc. :) Korg 00:42, 7 November 2005 (UTC)Reply

This appears to be a cracked site used for hosting drug spam. Added for now, should be removed later after the server has been taken down or cleaned out. silsor 16:55, 8 November 2005 (UTC)Reply
Ok, thanks. Korg 22:20, 8 November 2005 (UTC)Reply

popular drug names used by spammer scripts

Just wanted to mention these keywords (of popular drugs) are massively used by spam scripts and probably never inside a legitimate URL:

hydrocodone

didrex

tamiflu

phentermine

adipex

a typical spam from this kind of bot always starts like this:

<div id="wiki123" style="overflow:auto; height: 1px;..

which causes the content to be hidden in article view, and its being followed by various changing URLs containg the above keywords.

Added these - we'll see whether they cause any problems with legitimate URLs. silsor 16:55, 8 November 2005 (UTC)Reply

lau.biz

please add lau.biz to the blacklist, see for example this edit. There have been a few more of those to the same user page, and probably elsewhere on the wiki. The editors IP seems to change for every edit. -- Duesentrieb 00:09, 9 November 2005 (UTC)Reply

Already done. silsor 04:28, 9 November 2005 (UTC)Reply
thanks -- Duesentrieb 11:28, 9 November 2005 (UTC)Reply

fiberia.com

same as above -- Duesentrieb 11:28, 9 November 2005 (UTC)Reply

Added. silsor 12:28, 9 November 2005 (UTC)Reply


villepin2007.org

Spams every day for months in fr:Dominique de Villepin. Thanks ! Turb 22:06, 9 November 2005 (UTC)

Again and again : [76] [77] [78] [79] [80] [81]
I think there needs to be a better reason to blacklist the site than the fact that it has been added to an article repeatedly. My French is not good enough to judge whether the link is good or bad, and even if it were, I would not try to make fr.wikipedia policy from here on meta by blacklisting the site. Is there a consensus among fr.wikipedia users to keep it out of the article? silsor 19:38, 12 November 2005 (UTC)Reply
imho, this link is non-encyclopedic and gives nothing to the encyclopaedia. And all others contributors that saw it had the same reflex, month after month. At this point, nothing more to do (except put away the link), but the webmaster seems to have a part of its day dedicated to put the link again and again. Me, and others, can continue during months to revert it, but blacklisting can be a solution to stop her or him (I have envisaged the blocking of the page during a few days to discourage her/him, but this article is linked to current news and changes a lot). I just have started a topic about it on w:fr:Discuter:Dominique de Villepin pointing to this page. Turb 19:34, 13 November 2005 (UTC)
Added: I think the only way to automatically blacklist an url on fr: is for all project. Am I wrong ? Turb 19:40, 13 November 2005 (UTC)
That's correct. silsor 19:47, 13 November 2005 (UTC)Reply
We are, at this time, 3 fr: sysops and 1 contributor supporting this request. Turb 13:18, 15 November 2005 (UTC)
Thank you for taking the extra time to do this. I have added the link to the blacklist. silsor 21:36, 15 November 2005 (UTC)Reply
Thank to you; and to be vigilant. I understand this blacklist should not lead to abuses. Turb 21:59, 15 November 2005 (UTC)

green-tea.airmode.de/Green-tea.html

Added a couple times on Wikinews by anon ips. [82] (not a big issue, and very specific url, just annoying.) - Amgine 09:15, 11 November 2005 (UTC)Reply

yea, please block. BTW: for some reason, commons:User talk:Notafish seems to be a favorite target for link spammers. -- Duesentrieb 13:23, 11 November 2005 (UTC)Reply

Added. silsor 16:58, 11 November 2005 (UTC)Reply

crazymaidens.info

The link www.crazymaidens.info/* was added many times by a anon ip [83] at the main namespace. -- Get_It 17:51, 11 November 2005 (UTC)Reply

Added, pure spam. silsor 19:51, 12 November 2005 (UTC)Reply

www.cyberlink.com

Spam coming in from multiple dynamic IPs. For example [84], [85] and several spam articles created, (now deleted) this, and this. These are all just from today. This is just a commercial website of an unnotable company, so there's no danger of collateral damage here, too. 134.10.44.224 08:10, 12 November 2005 (UTC)Reply

This isn't full-blown spam - should settle without intervention. Post again if they don't go away. silsor 19:51, 12 November 2005 (UTC)Reply

www.robbeklobbe.de, www.robbeklobbe.ch.vu

For almost one year now links to these pages are added to various seal- and mammal-related articles in German Wikipedia. The page pretends to be a satirical site about seal hunting. The main focus is the selling of t-shirts with imprints "Kill the whales" and similar stuff. See here for the newest series of additions but these links are almost added every week. See here for an addition in January 2005 or here for series of vandalism with spamming this link in the seal article (which is now locked due to this permanent spamming). -- Baldhur 13:19, 16 November 2005 (UTC)Reply

I will take the continued protection of the article as evidence that de.wikipedia wants the link gone. Added. silsor 16:10, 16 November 2005 (UTC)Reply
Obviously there is another URL leading to the same page: web524.beta.web.expressmedia.de/index2.html (actually robbeklobbe.de redirects to that page). Could that domain be added to the blacklist as well, since the spammer has begun to add this link to the articles? I hope that the case will be finished afterwards. -- Baldhur 15:44, 17 November 2005 (UTC)Reply
Done. silsor 16:09, 17 November 2005 (UTC)Reply

blastfanclub.com

Spamming like mad, advertising pills: http://www.google.com/search?q=%22www.blastfanclub.com%22

This appears to have been a hacked site that has since been cleaned up. I can't find any spam links that still work. silsor 00:56, 18 November 2005 (UTC)Reply

http://www.hundefeind.de

This domain is repeatedly included in german dog-related articles (eg. de:Kampfhund, de:Haushund). This link is very offensive and polemic and propagates the killing of dogs. It is only included to provoce. --84.177.79.8 22:37, 17 November 2005 (UTC) de:Benutzer:Gunter.krebsReply

Could you please demonstrate that de.wikipedia rejects this URL from addition? For example, the community-supported protection of an article to keep the link out, or a consensus among users that the link is worthless in your articles. silsor 01:59, 18 November 2005 (UTC)Reply

www.dralex.info

Being spambotted into fake wiki pages, such as [[Wiktionary Appendix:Community Portal]] There are no examples anymore on Wikinews, and few elsewhere, but chasing it down is annoying. - Amgine 06:10, 18 November 2005 (UTC)Reply

ar, es, zh Jurispedia was spammed too Hjv 07:09, 18 November 2005 (UTC)Reply
nah, br, fo Wiktionaries were spammed too. This happened a month ago on all small Wiktionaries, as I posted on wikitech-1 here --birdy (:> )=| 13:32, 21 November 2005 (UTC)Reply
also on als, as, ast, az, be, bo, co, eu, kl, maybe more. I cleaned the mentioned. --birdy (:> )=| 11:29, 25 November 2005 (UTC)Reply
Added by Brion. Korg 01:57, 28 November 2005 (UTC)Reply

lookscool\.com

Tonite here on meta: http://meta.wikimedia.org/w/index.php?title=Goings-on&diff=239115&oldid=239095 --M/ 09:15, 21 November 2005 (UTC)Reply

www.mixtapeman.net, www.beatclappaz.com, and www.download-mixtapes.net

A user from the IP address 68.61.122.63 [86] constantly spams links to www.mixtapeman.net , www.beatclappaz.com and www.download-mixtapes.net on en.wikipedia.org. [87] and [88] are a couple of examples, but the entirity of his spamming can be found at his contributions page.--152.2.62.69 22:29, 21 November 2005 (UTC) user droptone[89] on en.wikipedia.orgReply

www.zya9.info, .a.zya9.info

MediaWikiDefaultPagesSpam on many small projects, e.g. aa.wikibooks, ga.wikibooks, ... --Zigger 21:29, 30 November 2005 (UTC)Reply

Also on meta: #1 and #2 --M/ 23:35, 30 November 2005 (UTC)Reply
Also on fo.Wiktionary (faroese): dl, nah.Wiktionary rc (nahuatl), br.Wiktionary rc (breton). But I am very sure they have also spamed other small Wiktionaries, it is the same type of spam like dralex.info (see above). I am sorry but this time I don't have the time to go through so many Wiktionaries, I just cleanded the mentioned. Maybe it would be a good idea to protect those pages on inactive Wiktionaries (like: Wikipedia:Communitiy Portal, Wiktionary:Community Portal, Wiktionary:About, Wikipedia:About, Help:Contents, Current Events, Wiktionary:General disclaimer, Wikipedia:General disclaimer) because those are the pages usually spammed. thanks --birdy (:> )=| 11:47, 1 December 2005 (UTC)Reply
Also hosts in the domain a.zya9.info, e.g. at cy.wikibooks --Zigger 13:34, 1 December 2005 (UTC)Reply

drug.prtime.ru

Hidden in div, e.g. wikibooks:gn:Index.php --Zigger 21:47, 30 November 2005 (UTC)Reply

.a.mq6.info .a.wik1.info

Various hosts in domain a.mq6.info, at, e.g., http://nds.wikibooks.org/w/index.php?title=Current_events&oldid=2380 --Zigger 21:57, 30 November 2005 (UTC)Reply

Also hosts in a.wik1.info, at, e.g. http://gn.wikibooks.org/w/index.php?title=Wikibooks:General_disclaimer&oldid=2505 --Zigger 22:07, 30 November 2005 (UTC)Reply

.bravenet.com, 4allfree.com, .findlap.com, parkinsons-disease.find22.com

Multi-spam all by the one address 148.202.105.241, for a change, at [90], [91], [92], [93] --Zigger 14:09, 1 December 2005 (UTC)Reply

Whitelisting desired

For individual URLs which can't be unblocked because they conflict with a significant spammer. Eventually the software will allow specifying exceptions to the general block rules.

Sites in domain "dynalias.net"

  • (www.)fried.dynalias.net — my personal web site; I'd like to link it on my Wikipedia profile page! I understand that a lot of spam comes from the dynalias.net domain, but if you get anything from fried.dynalias.net you'll know who it's from (not that I'd ever do that, of course). Dave Fried 21:03, 30 May 2005 (UTC)Reply
Sorry, missed this request before. dynalias.net was added after being spammed by only one person on meta so I have removed it. silsor 19:54, 12 November 2005 (UTC)Reply

Sites in domain "newmail.ru"

http: // icehouse dot 4mg dot com/icehouse.html Icehouse

Can someone unblock this one? Thanks!

4mg.com might be unblocked if there were a useful site on it that somebody wanted to add to an article. silsor 23:35, 31 October 2005 (UTC)Reply
4mg.com is currently unblocked, but that site is still awful. silsor 23:11, 20 November 2005 (UTC)Reply

www.geto8.com

Fixed. silsor 13:10, 15 November 2005 (UTC)Reply

Site in domain 4mg.com

4mg.com is now allowed. silsor 23:11, 20 November 2005 (UTC)Reply

worlds-best-online-casinos.com/Articles/playtech-list.html

Generally I agree that online casino sites are harmful and abuse wikipedia for links. None the less I have a real problem. I was creating an article regarding Playtech and wanted to include a cohesive list of all online casinos using their platform. The best unbiased list I could find is located on the above URL. Among other external links on the article I have posted a link to this list and the entire article has got blocked for spam. I am going to submit the article without this link but I still think it's a shame I can't add a genuine piece of information to an article.

www.beauty-of-paris-hilton.com

http://www. beauty-of-paris-hilton .com is being flagged as spam for an external link addition to http://en.wikipedia.org/wiki/Paris_Hilton. Is this correct? Note that I can't add the url to this area either. Please review and correct as you see fit. Very best regards, Cisco.

allisonhugs kievconsulting 7restaurant....

In en.jurispedia, maybe in wikipedia nextly...

allisonhugs\.org kievconsulting\.com 7restaurant\.us summerspage\.com quickcomminc\.net hartsflorist\.com Kind regards, Hjv 09:08, 28 November 2005 (UTC)Reply

www.go.to/esb/

In en:European School, Bergen, one of the external links links to www.go.to/esb/ . This website is a listing of alumni of that school and is therefore relevant to the article. If the domain go.to has a reputation of being a hotbed for spamlinks, could you please make an exceotion for go.to/esb/? Thanks. 146.50.202.133 14:04, 30 November 2005 (UTC)Reply

I don't know, that's still an evil site; popups on join and departure, and what look like spam links within the text... Sj

Other talk

Please leave all other talk in this section. Archive at /archive.

feature request: customized spam blocklists for national subdomains/projects

Recently the administrators of ruwiki have proposed (see ru:Википедия:Форум) to introduce new MediaWiki pages MediaWiki:blacklist and MediaWiki:whitelist which would work as a substitute for the meta blacklist. The rationale is that meta blacklist updates come quite rarely.

In the case these messages are not initialized, the meta blacklist is used.--ACrush ?!/© 08:27, 14 September 2005 (UTC)Reply

there seems to be a new bot in town

This wiki bot seems to have upgraded from attacking just front and the default help page (Help:Contents) to "remembering other pages it has found." By default the bot always tags it victim page and uses a 1px high div tag to hide it's actions.

the tag looks something like these:"[_pw15_]", "[_pw16_]", "[_pw17_]" and the bot has traditionally hit the site four to six times daily.

I did a google on just the tag an found massive numbers of wiki's and with the exeption of a Linux distro's wiki (SuSi if I recall) they all wiki's had been unaware of the attack. Using google to leave a message and remove the spam was too slow as theier were to many wiki and the repeate rate was too high.

FixTheLawco.uk reported a new varient which left all three tags given above as well as this message:

We leave content intact . We allow you to easily remove the additions We respect your pages and appologize for the spam We are the Ethical Spammers group - (this is an oximoron - two terms that are put together but are opposed meaning)

unlike prior uses of this bot they were a lot less offensive: see history

This is a good example of the original flavour: here you can also find stacks more by googleing [_pwxx_] where xx is any number you fancy.

--194.164.38.128 19:39, 5 November 2005 (UTC)Reply

Thank you very much for reporting this. I'm currently looking over patterns to block this bot on Wikimedia sites but this page still need specific spam reports to be effective. silsor 20:52, 8 November 2005 (UTC)Reply
Many of these spams are now blocked for people who use this spam blacklist due to addition of drug patterns and some domain hiding services. silsor 20:59, 8 November 2005 (UTC)Reply

I did a little research. You can contact the guy who's doing this on YIM at TheMarketerDude or at themarketerdude@yahoo.com via email. 24.224.153.40 01:40, 13 November 2005 (UTC)Reply

bug

If there's an underscore in the url, the blocker won't catch the url. For example, if you block fiberia\.com, blah_blah.fiberia.com can still get passed the blocker. 24.224.153.40 01:05, 12 November 2005 (UTC)Reply

Thanks a lot for reporting this. I opened a new bug on the bugzilla here. silsor 05:35, 12 November 2005 (UTC)Reply
This bug is now fixed. silsor 00:46, 17 November 2005 (UTC)Reply