Talk:Spam blacklist/Archives/2008-08

Add topic
Active discussions

Proposed additions

  This section is for completed requests that a website be blacklisted

tourist guide sites

Cross wiki spam. These are related by the IP's spamming them.

URLs





















IPs

















did also blank the reports User:COIBot/XWiki/aboutlausanne.com and User:COIBot/LinkReports/aboutlausanne.com




--Jorunn 23:07, 11 July 2008 (UTC)

These are perfectly good and informative sites. It would be better to block the spammers if possible.--Cato 14:23, 13 July 2008 (UTC)
It would be nice if we could block the spammer, but how can we do that? Even if the global blocking tool was available to the stewards they couldn't possibly range block sevral internet providers because of this?
Someone wrote this while complaining about the link copenhagencity.org having been removed on en.wikipedia: "I visited Copenhagen as a tourist two years ago and I personally visited most of the sights/attractions presented in the site. More, around 80% of the photos used in the site are original ones that I shoot personally. Yes the site is mine and yes I read the conflict of interest page."
It doesn't benefit encyclopedic articles to let everyone who has visitied any city, taken some photos and made a website about the city, to insert links to that website in each and any language edition of Wikipedia.
The link copenhagencity.org has been inserted here (all done by Romanian or Hungarian IPs, none by established users who has otherwise contibuted to the articles):
Afrikaans, Anglo-Saxon, Aragonés, Žemaitėška, Беларуская (тарашкевіца), Brezhoneg, Català, Kaszëbsczi, Česky, Чăвашла, Cymraeg, Deutsch, Zazaki, Ελληνικά, Español, Eesti, English, English, reinserting, English, reinserting one more time, Esperanto, Suomi, Français, article Orchestre, Français, article Copenhague, Íslenska, Italiano, Norsk (bokmål), Norsk (bokmål), moving the link further up in the list of external links, Polski, Română, Simple English, Svenska, article Köpenhamn, Svenska, article Copenhagen (which is about a horse), there might be more in the Wikipedias that isn't among the top 57.
While making the above list I found another URL inserted by the same spammer/s:


  • Google AdSense id: 5081061325759884, the same as copenhagencity.org, jamsankoski.com, bucegi.info and myrtle-beach-guide.org
A few more IPs:
















(I do not get up any website on aboutlausanne.com, and I have never seen the website, but I would not be surprised if the content of the website aboutlausanne.com simply has been moved to discoverlausanne.com, possibly because someone thought the aboutlausanne.com URL was ruined for Wikipedia insertion after the COIBot rapport.)
  • July 2: The link discoverlausanne.com was inserted to de.wikipedia by IP 79.119.18.192
  • July 10: The link discoverlausanne.com was inserted to en.wikipedia by IP 79.119.18.192 (who had blanked the COIBot rapports for aboutlausanne.com on June 30.)
--Jorunn 18:36, 13 July 2008 (UTC)
Given the scale here, I am concerned. However I agree that these may have marginal use, and we should be reluctant to blacklist here. I think it is worth blacklisting these, but I will not do so without some discussion here. Comments please.  — Mike.lifeguard | @en.wb 01:51, 16 July 2008 (UTC)
Listable to me. This is about behaviour not site content particularly. Someone is attempting to generate traffic for their websites via Foundation sites. That is the issue. --Herby talk thyme 13:31, 24 July 2008 (UTC)
And maybe - just maybe look here. Possibly a similarity/connection, not got time now. --Herby talk thyme 13:34, 24 July 2008 (UTC)

  Added then - apologies for the delay.  — Mike.lifeguard | @en.wb 00:32, 31 July 2008 (UTC)

aberystwyth-online.co.uk





This user seems to act in good faith in a lot of edits but this link is posted in many different projects (user has 1964 edits in 35 projects). EdBever 16:19, 25 July 2008 (UTC)

I'm inclined to list this one. People seem to forget this is an encyclopaedia not a tourist directory. However I think the many links on other wikis probably should be removed first & I'm out of time for now. I'll have a got at doing something with it tomorrow. Thanks for picking it up. Cheers --Herby talk thyme 18:16, 25 July 2008 (UTC)
Cleared from the top 57 now (en wp excepted, will look there later). --Herby talk thyme 07:59, 26 July 2008 (UTC)
Cleaned by someone -   Added  — Mike.lifeguard | @en.wb 13:03, 27 July 2008 (UTC)

rihannanow.com



I'm bringing this one here from en wp bl page as there are 20+ links on the top 20 wikis. On the en wp page it is stated that it is not the official site. If that is the case the link placement would seem to be spamming but on the couple of wikis I've had time to check the links have been there quite some time. Views appreciated, cheers --Herby talk thyme 11:26, 25 July 2008 (UTC)

Not a fan of fan sites either - I'd say most of these links can be removed uncontroversially; replace it with the official site if needed. I don't know that blacklisting is needed though. If users begin pushing the link after some cleanup, then revisit that though.  — Mike.lifeguard | @en.wb 22:57, 26 July 2008 (UTC)
Any idea what the real official site is?  — Mike.lifeguard | @en.wb 13:23, 27 July 2008 (UTC)
Enwiki has it listed as the official site. There seems to be no orchestrated attempt to push the link; the link has been placed gradually. I think this one is   Not done then.  — Mike.lifeguard | @en.wb 01:19, 4 August 2008 (UTC)

Spam war about w:en:Morro de São Paulo







These these hotels and travel guides are spamming and making a spam war about their services about an Brasilian touristic place. The spam is limited to one page, but they attack 6 wikipedias and never gave up in more than a year I'm following them.

Actually, almost all edits in 2008 in several wikis about w:en:Morro de São Paulo are spam edits.

  • en: (just a few examples, there are dozens) Feb-March 2008 [3] [4] [5] [6] (→ this one is more subtile, the link to the hotel is done through a to a travel guide) (skip some spam...) May 2008, just one edit in dozens of spam edits that months [7] (skip) [8] (today)
  • de:, since May 2007 and going on. [9] (the first spam in May 2007)
  • pt:, just one example, obviously portuguese-language project is the main place where those spammers are active. (here, Dec. 2007) [10]
  • ca:, the last one (27 Jul 2007) [11]
  • fr:, I know more about this one : since the very first version there is a boring and repetitive spam war in this nice article

Jérôme 10:14, 27 July 2008 (UTC)

Yes - if it were just one wiki other methods could be used but frankly this is just silly and abuse of Wikipedia to say nothing of the waste of everyone's time. Thanks for catching it -   Added. --Herby talk thyme 11:45, 27 July 2008 (UTC)

1host.in





In addition to en.wp, where the domain has been added to the local blacklist & the IP blocked for a second time in 2 weeks.. these are XWiki links containing malware executables (all have been reverted). fr pt ru uk no

I know it's a single IP that is spamming, but given there doesn't appear to be any other usage of this domain on WMF projects, I think it's worth global blacklisting to protect our users from this particular malware spamdal. --Versageek 07:03, 28 July 2008 (UTC)

Agreed & an important part of why this list is here.   Added and thanks --Herby talk thyme 07:24, 28 July 2008 (UTC)

cross-wiki spammer: 196.206.207.162





Resolve to 67.205.97.163




Resolve to 87.98.220.13


 — Mike.lifeguard | @en.wb 23:22, 1 August 2008 (UTC)

  Added  — Mike.lifeguard | @en.wb 23:23, 1 August 2008 (UTC)

hkc22.com

I think this one may be worth a look.



I came across it here. I've removed a few links on other wikis but there does seem to be a history with thisone & cross wiki. Here for example. I am not saying it should be listed but I think it is worth review. Cheers --Herby talk thyme 11:42, 2 August 2008 (UTC)

I think this one can be   Added.  — Mike.lifeguard | @en.wb 15:04, 4 August 2008 (UTC)

qindex.info





In ko.wp: [12][13][14][15] and en.wp:[16][17][18]

It would be better to block this spammer if possible. --ITurtle 09:23, 29 July 2008 (UTC)

Seems stale to me. Link seems rather widely used, so I'd be reluctant to blacklist in any case.   Declined I suppose.  — Mike.lifeguard | @en.wb 22:59, 11 August 2008 (UTC)

vimoutiers.net



I came across these IPs (here and here we have the global user contributions) who added this website to several articles on several wikis. It was a long time ago, but most of the links are still there. Using the antispam search, it's found 76 times just in the top 20 wikis, and 96 times in global search. --Gliu 00:06, 3 August 2008 (UTC)

  Declined - stale and can be managed without blacklisting.  — Mike.lifeguard | @en.wb 00:52, 13 August 2008 (UTC)

isfp.co.uk



added by



I already added it to the blacklist, because it's being spammed right now. However, I'm unsure whether or not we should actually blacklist it. I suggest reverting 79.173.65.24's edits and removing it from the blacklist in a day or two. What do others think? I'd be happy to revert it, but since the site seems useful and we're talking about quite a lot of edits, I want someone else's opinion first. --Erwin(85) 11:50, 7 August 2008 (UTC)

Adding now is - to me - quite correct & thanks. As you say the site seems useful. However it is the site "for" philosophers which I'm not sure I find convincing in terms of being really useful. Other views would be good. --Herby talk thyme 12:19, 7 August 2008 (UTC)
I reverted the edits as in the end it seemed to be self-promotion. --Erwin(85) 12:29, 7 August 2008 (UTC)
Erwin: Should we be adding this?  — Mike.lifeguard | @en.wb 00:12, 12 August 2008 (UTC)
Not sure. Giving it the benefit of the doubt, so I removed it. We can always re-add it. --Erwin(85) 12:55, 12 August 2008 (UTC)

nijmegennieuws.nl and doetinchemnieuws.nl

Added



and



Spammed by



The bots are down, so this request is for logging only. --Erwin(85) 12:22, 10 August 2008 (UTC)

What do you mean "for logging only" & what does that have to do with the bots being down? I must be missing something here.  — Mike.lifeguard | @en.wb 01:00, 13 August 2008 (UTC)
The LinkWatchers reported three edits for doetinchemnieuws.nl and then stopped reporting anything on IRC. Some time later I checked this IP's edits using Luxo's tool and noticed he kept on spamming. I added the request here to be able to refer the Spam blacklist/Log to this request, specifically Luxo, as I couldn't refer to XWiki reports. The one about doetinchemnieuws.nl showed three edits and there wasn't any on nijmegennieuws.nl. Does this explain? --Erwin(85) 08:04, 13 August 2008 (UTC)
OK, yeah. Perhaps I'm a bit off today.  — Mike.lifeguard | @en.wb 02:49, 14 August 2008 (UTC)

qpc.ro

Spam domain

Note that the specific pages linked are to probable copyright violations (they host copies of movies and TV shows):





Spam account




--A. B. (talk) 18:45, 14 August 2008 (UTC)

  Added & thanks.  — Mike.lifeguard | @en.wb 19:18, 20 August 2008 (UTC)

internationalbadminton.org

i'm not sure about this one. have a look at this diagnostic page: [19]. have there been comparable cases in past? -- seth 21:27, 17 August 2008 (UTC)

Thanks seth - to me malware sites are always listable to protect the many wikis who depend on this list.   Added, cheers --Herby talk thyme 14:14, 18 August 2008 (UTC)
i guess, the site is/was hacked temporarily. it is linked many times in :de and :en, probably because its content is useful. and i don't know how long google leaves hacked sites in its abuse-list. -- seth 16:45, 18 August 2008 (UTC)
I don't see any abuse (according to my database), I suggest that if the problem is gone, it is removed, as blacklisting here does disrupt the pages on-wiki (if someone vandalises the page and removes the link, the edit can not be reverted). (What we would need for these is a regex list of external links which are 'disabled', not 'blacklisted'). --Dirk Beetstra T C (en: U, T) 16:48, 18 August 2008 (UTC)
I've rem'd it out for now. We have (& should) BL sites that contain exploits but if it is not current that is another matter. Maybe we can get more on the google exploit one? Looked legit warning to me. Cheers --Herby talk thyme 16:52, 18 August 2008 (UTC)

tarkanfunclub.com



Spammers










Fansite. Spammer's contribs speak for themselves. See also w:WT:WPSPAM#Fanclub spammer (permanent link). MER-C 13:39, 18 August 2008 (UTC)

Yes - more than a nuisance,   Added. Thanks --Herby talk thyme 17:46, 18 August 2008 (UTC)


More domains spammed




  • Google Adsense: 5551319961929303


  • Google Adsense: 2743631921357480












  • Google Adsense: 5551319961929303


Related domain


--A. B. (talk) 00:03, 19 August 2008 (UTC)


Second batch   Added --A. B. (talk) 00:35, 19 August 2008 (UTC)

unitursa.com spam

Spam domains







Related domains











Spam account



Reference

--A. B. (talk) 00:12, 19 August 2008 (UTC)


  Added --A. B. (talk) 00:36, 19 August 2008 (UTC)

firme.rs spam

Spam domains




Google Adsense ID: 1349757567489797


Related domain



Spam accounts





Reference

--A. B. (talk) 00:16, 19 August 2008 (UTC)


  Added --A. B. (talk) 00:37, 19 August 2008 (UTC)

onlineseo.info

Domains




Google Adsense ID: 3239128903599293


Related domain



Accounts











Reference

--A. B. (talk) 00:17, 19 August 2008 (UTC)


  Added --A. B. (talk) 00:37, 19 August 2008 (UTC)

mysmp.com

Domain


Google Adsense ID: 0719114306637522


Accounts







Reference

--A. B. (talk) 03:24, 20 August 2008 (UTC)

  Added --A. B. (talk) 13:52, 20 August 2008 (UTC)

Rich Media Project

Domain



Accounts









References

--A. B. (talk) 03:34, 20 August 2008 (UTC)

  Added --A. B. (talk) 13:53, 20 August 2008 (UTC)

web-anatomy.com

Spam accounts







Spam domain


.


References

--A. B. (talk) 03:52, 20 August 2008 (UTC)

  Added --A. B. (talk) 13:53, 20 August 2008 (UTC)

ur1.ca



URL shortener. MER-C 06:23, 23 August 2008 (UTC)

  •   Added JzG 08:33, 23 August 2008 (UTC)

Porn spammer

Sites spammed




















Related domains




















































Spammed so far only on the English Wikipedia, but these sites have no use whatsoever on Wikimedia projects. See WikiProject Spam item (permanent link) for spammers and my notes on some of these domains. MER-C 09:00, 23 August 2008 (UTC)

  Added all - totally worthless for WMF projects.  — Mike.lifeguard | @en.wb 22:39, 25 August 2008 (UTC)

ilasabba spam

A prolific en.wikipedia spammer has branched into cross-wiki spam.


Prior en.wikipedia reports


Accounts