User:SpamReportBot/cw/pastor-russell.com
pastor-russell.com edit
pastor-russell.com
This list is intended to see how the external link gets used, it does not imply that involved accounts are having a conflict of interest in adding the link, or that the involved accounts are spamming the link.
First link added on 2008-04-21 09:26:36: last link added on 2008-04-22 12:52:10
Log entry:
\bpastor-russell\.com\b # ADMINNAME # [[User:SpamReportBot/cw/pastor-russell.com|ReportBot page]]
- (id_wikipedia) 2008-04-21 09:26:36 -- http://www.pastor-russell.com/ministry/pd.html added to: [Drama-Foto Penciptaan] by Mikhailov Kusserow -- diff
- (id_wikipedia) 2008-04-21 09:32:20 -- http://www.pastor-russell.com/ministry/pd.html added to: [Drama-Foto Penciptaan] by Mikhailov Kusserow -- diff
- (pl_wikipedia) 2008-04-21 10:06:56 -- http://www.pastor-russell.com/ministry/pd.html added to: [Fotodrama Stworzenia] by Mikhailov Kusserow -- diff
- (pt_wikipedia) 2008-04-21 10:16:07 -- http://www.pastor-russell.com/ministry/pd.html added to: [Fotodrama da Criação] by Mikhailov Kusserow -- diff
- (tr_wikipedia) 2008-04-21 10:20:32 -- http://www.pastor-russell.com/ministry/pd.html added to: [Yaratışın Fotodramı] by Mikhailov Kusserow -- diff
- (en_wikipedia) 2008-04-22 12:52:10 -- http://www.pastor-russell.com/legacy/giants.html added to: [Globalization] by ClueBot -- diff
Request Status - Closed
Hum - "site under development" & this user is now responsible for 4 or more of these reports. That says "spam" to me! --Herby talk thyme 15:54, 21 April 2008 (UTC)
- Herby, which sites? And more important, do they have the same IP? (see e.g the domaintools page), if so, pop it in a LinkSummary template here, and I will have a look in the database. --Dirk Beetstra T C (en: U, T) 16:19, 21 April 2008 (UTC)
Closing this report, discussion on Talk:Spam_blacklist#Multiple_sites_by_Mikhailov_Kusserow. --Dirk Beetstra T C (en: U, T) 14:20, 22 April 2008 (UTC)
What to do when there are more reports spammed by the same user/similar domains edit
This is linked to others, all via the same username, this is what I do:
1. I choose one main report, the others should be linked here ...
2. The username in a UserSummary template, COIBot does not do anything with this, but it contains some nice tools to other users. COIBot has to be commanded to make the report, that has to be done on IRC.
User:Mikhailov Kusserow
3. Put for all the others the linksummary-template here:
cournonjom.free.fr
photodrama.info
a2z.org
biblestudents.org
epifania.pl
n.domaindlx.com
agsconsulting.com
4. Then I do a 'show preview', and follow the link to domaintools for the data of the server, that states for epifania.pl: Server Data, IP-address 62.121.128.14. The same data can also be found from a COIBot report, in the top it says: "pastor-russell.com resolves to 72.10.58.207". I do that for all 7 (well, I use my on-IRC tool built into COIBot to get the data .. but well):
- pastor-russell.com: 72.10.58.207
- cournonjom.free.fr: 212.27.63.130
- photodrama.info: 209.157.71.50
- a2z.org: 209.188.11.222
- biblestudents.org: 209.254.108.16
- epifania.pl: 62.121.128.14
- n.domaindlx.com: 66.36.238.29
- agsconsulting.com: 66.244.251.252
5. In this case we are not too lucky, he is using urls on different servers. If these numbers are all the same (or there are quite some similar ones), then he has an own machine and it is worth to make COIBot to start monitoring the IP of that server, in that case:
- {{LinkSummary|ip-address}}
can be added here. When these reports change, as well as some other on-wiki pages, COIBot parses the diff for added LinkSummary templates, and starts monitoring the data in the template. Our spammer can now change username, or start using his IP, COIBot will notice.
6. The COIBot reports have a life url of the IP of the server (e.g [http://72.10.58.207 72.10.58.207]. That means that these reports can be found via Special:Linksearch. I put here the IP and a linksearch for the IP:
- 72.10.58.207 - Special:Linksearch/72.10.58.207
- 212.27.63.130 - Special:Linksearch/212.27.63.130
- 209.157.71.50 - Special:Linksearch/209.157.71.50
- 209.188.11.222 - Special:Linksearch/209.188.11.222
- 209.254.108.16 - Special:Linksearch/209.254.108.16
- 62.121.128.14 - Special:Linksearch/62.121.128.14
- 66.36.238.29 - Special:Linksearch/66.36.238.29
- 66.244.251.252 - Special:Linksearch/66.244.251.252
This is quite handy to find all reports on 'spammed' domains on this server. E.g. get very scared when you follow Special:Linksearch/72.14.207.191 (the IP of blogspot.com; most picked up by COIBot becuase <username>.blogspot.com is the same as their on-wiki username). I have asked nixeagle to have the resolved IP also automatically on these reports. Have not heard back yet.
Hope this explains. --Dirk Beetstra T C (en: U, T) 09:54, 22 April 2008 (UTC)
- I think in these cases, where there are multiple domains with one user, that it is better to close them all, and make one centralised discussion on Talk:Spam blacklist, this cleans the cw list, and makes the problem a bit more visible. --Dirk Beetstra T C (en: U, T) 14:25, 22 April 2008 (UTC)