Talk:Spam blacklist/Archive/Ukrainian paper-writing spam

From Meta, a Wikimedia project coordination wiki
Jump to: navigation, search

Contents

Ukrainian paper-writing spam

Goes back to 2005.

Username accounts

Latest spam accounts







Earlier spam usernames

>130 identified so far:

































































































































































































































































  • There appear to have been different people using this common English name, Vivian, on different projects dating back to 2003; only the account on ik.wikipedia.org has spammed these domains













Anonymous IPs

At least 32:

Ukraine:






































Russia:




Philippines:










Turkey:




Denmark:



  • Tagged by Project Honeypot as a source of linkspam[28]


Japan:



  • blocked on ja.wikipedia as an open proxy


US



  • reportedly a frequent blog spammer[31]


  • noted as a shared IP belonging to the North Carolina (USA) statewide school system


  • blocked on ja.wikipedia as an open proxy



Brazil:



  • blocked as an open proxy on several projects


Venezuela:



  • blocked as an open proxy on several projects

Domains

Spam domains

31 total:
































































Related domains

12 domains:


























Possibly related domain



Previously blacklisted

At least 27:























































}}


Discussion

Previous discussions:


Affected projects

At least 60:

  • Afrikaans: af.wikipedia.org
  • Anglo-Saxon: ang.wikibooks.org, ang.wikipedia.org, ang.wikiquote.org
  • Breton: br.wikipedia.org
  • Bulgarian: bg.wikipedia.org
  • Catalan: ca.wikipedia.org
  • Chinese: zh.wikipedia.org
  • Croatian: hr.wikipedia.org
  • Czech: cs.wikipedia.org
  • Dzongkha: dz.wikipedia.org
  • English: en.wikibooks.org, en.wikinews.org, en.wikipedia.org, en.wikiquote.org, en.wikisource.org, en.wikiversity.org, en.wiktionary.org
  • Esperanta: eo.wikipedia.org
  • Estonian: et.wikipedia.org
  • Faroese: fo.wikipedia.org
  • French: fr.wikipedia.org
  • Haitian: ht.wikipedia.org
  • Hindi: hi.wikipedia.org, hi.wiktionary.org
  • Hungarian: hu.wikipedia.org
  • Ido: io.wikipedia.org
  • Interlingua: ia.wikipedia.org
  • Inuktitut: iu.wikipedia.org
  • Italian: it.wikipedia.org
  • Japanese: ja.wikipedia.org
  • Kashmiri: ks.wikipedia.org
  • Kinyarwanda: rw.wikipedia.org
  • Macedonian: mk.wikipedia.org
  • Nepalbhasha: new.wikipedia.org
  • Norwegian (bokmål): no.wikipedia.org
  • Ossetic: os.wikipedia.org
  • Polish: pl.wikipedia.org
  • Portuguese: pt.wikipedia.org
  • Punjabi: pa.wikipedia.org, pa.wiktionary.org
  • Russian: ru.wikipedia.org
  • Simple English: simple.wikipedia.org, simple.wiktionary.org, simple.wikiquote.org
  • Spanish: es.wikipedia.org
  • Sundanese: su.wikiquote.org
  • Tok Pisin: tpi.wikipedia.org
  • Turkish: tr.wikipedia.org
  • Ukrainian: uk.wikipedia.org
  • Vietnamese: vi.wiktionary.org
  • Volapük: vo.wikipedia.org
  • Xhosa: xh.wikipedia.org
  • Yoruba: yo.wikipedia.org
  • Other: beta.wikiversity.org, commons.wikimedia.org, incubator.wikimedia.org, meta.wikimedia.org, wikisource.org, mediawiki.org

This is Ukrainian spam however it has originated from a number of IPs from around the world (many of them open proxies or zombie PCs). In some cases, it came from Philippine IPs on what may have been a spam-your-links-for-a-fee. Some has come from Russian IPs, perhaps on a similar deal. Given the depth, sockpuppetry and persistence of this spammer, I recommend any future English-language essay-writing or gambling spam originating from the Ukraine, Russian or the Philippines be blacklisted immediately here on site; I see no point in wasting time with warnings or blocks.
--A. B. (talk) 15:27, 14 May 2010 (UTC)

Added Added 43 spam and related domains above; I did not add the "possibly" related domain (dotabestguides.com) without further evidence. --A. B. (talk) 15:52, 14 May 2010 (UTC)
More to come
I will add a subsection for the related Philippine spam in the next day or two. --A. B. (talk) 16:26, 14 May 2010 (UTC)


seopinay.com spam

Note the comment above about some of the Ukrainian gambling and paper-writing domains being spammed by Philippine IPs on a possible spam-your-links-for-a-fee basis. These non-Ukrainian domains were added by some of those accounts:[37][38][39][40]


{{hidden|1=List of seopinay.com domains and spam accounts |2=