Talk:Spam blacklist/Archives/2008-10

From Meta, a Wikimedia project coordination wiki
Jump to: navigation, search
Warning! Please do not post any new comments on this page. This is a discussion archive first created in October 2008, although the comments contained were likely posted before and after this date. See current discussion or the archives index.

Proposed additions

Symbol comment vote.svg This section is for completed requests that a website be blacklisted

shop.ebay.com



Per edits like this: [1], I simply cannot see any legitimate purpose for linking ebay shops from the encyclopaedia. I did a link search and the few I found were unambiguously spam. JzG 22:39, 23 September 2008 (UTC)

I don't have many additions (report pending), but indeed, these links are probably not 'long living', and I don't see use either. --Dirk Beetstra T C (en: U, T) 09:53, 24 September 2008 (UTC)
Yes check.svg Done -- good idea. --A. B. (talk) 15:22, 27 September 2008 (UTC)

audi-a1.org



Edits like: en, es, fr, or pt.



Edits like: nl 81.18.0.241 11:04, 24 September 2008 (UTC)

Added Added.  — Mike.lifeguard | talk 16:12, 24 September 2008 (UTC)

"silverbytes" spam

See this Wikipedia spamming suggestion posted by a domain-owner nicknamed "silverbytes"; he is tied to certain domains that have been spammed on our projects.[2][3]


Spam domains to beblacklisted




















Google Adsense IDs: 0123386179416224, 6880682249009473


Previously blacklisted domain



Related domain


Spam accounts
























Public domain registration

Freelancer

Estanislao del Campo 486
Villa Sarmiento, Buenos Aires 1706
Argentina


Previous discussion

--A. B. (talk)

Yes check.svg Done --A. B. (talk) 14:12, 27 September 2008 (UTC)
All links cleaned up. --A. B. (talk) 15:10, 27 September 2008 (UTC)

Some URL redirection sites

The following unrelated URL redirection domains have been added (and then deleted) to en:TinyURL this year. They haven't necessarily been spammed -- some may have been innocent additions.

















We blacklist URL redirection domains on sight since they can be used to bypass the blacklist. --A. B. (talk) 14:20, 29 September 2008 (UTC)

All have been used somewhere or somehow by IPs. COIBot reports on the way as additional proof. --Dirk Beetstra T C (en: U, T) 14:29, 29 September 2008 (UTC)
  • Yes check.svg Done. Logging now. JzG 14:37, 29 September 2008 (UTC)

tourmycountry.com spam

Spam domain



Spam accounts











--A. B. (talk) 17:30, 27 September 2008 (UTC)

Added Added  — Mike.lifeguard | talk 16:37, 5 October 2008 (UTC)
Note this is used legitimately. Blacklisting doesn't affect pre-existing links, but whitelisting or de-blacklisting may be necessary in the future.  — Mike.lifeguard | talk 16:39, 5 October 2008 (UTC)

quickfilepost.com





From enWP admin board; cross-wiki spam.

Likely original or master account:

And other projects.

  • on en:
Beetstra ran a COIbot report which also indicates cross-wiki spamming. The accounts are throwaways so the names will not match, but I don't think we need a cross-wiki CheckUser to see what's going on here.
Yes check.svg Done and logged. JzG 10:06, 4 October 2008 (UTC)

isoladiburano.it













--Jorunn 11:53, 4 October 2008 (UTC)

Added Added. Thanks. --Erwin(85) 11:57, 4 October 2008 (UTC)

Rob ten Berge

I am not giving all the links here in LinkSummary format, some are too broad. User promotes (or 'gives it for free' as he calls it) his own work:

  • members.home.nl/robtenberge/schema/b47full.jpg
  • members.home.nl/robtenberge/schema/animatie.html
  • farm2.static.flickr.com/1282/1344096823_c25a593078_b.jpg
  • farm1.static.flickr.com/88/243534260_bf5d79f1f7_o.jpg
  • farm2.static.flickr.com/1315/1332889069_b98e8bffea_o.jpg
  • members.home.nl/robtenberge/schema/b58full.jpg
  • members.home.nl/robtenberge/schema/b46full.jpg
  • members.home.nl/robtenberge/schema/b72full.jpg
  • members.home.nl/robtenberge/schema/b6dfull.jpg
  • members.home.nl/robtenberge/schema/texten/kernfysica.html
  • members.home.nl/robtenberge/schema/radiationsummary.html
  • members.home.nl/robtenberge/schema/b54full.jpg
  • members.home.nl/robtenberge/schema/b76full.jpg
  • members.home.nl/robtenberge/schema/b77full.jpg
  • farm1.static.flickr.com/120/250582489_502d133364_o.jpg
  • members.home.nl/robtenberge/schema/vitruvianman.html
  • robtenberge.nl/animatie
  • robtenberge.nl/animatie2
  • robtenberge.nl/images/xl_knowledge/b63full.jpg
  • robtenberge.nl/images/xl_knowledge/b64full.jpg
  • robtenberge.nl/images/xl_knowledge/b65full.jpg
  • robtenberge.nl/images/xl_knowledge/b66full.jpg
  • robtenberge.nl/images/xl_knowledge/b67full.jpg
  • farm1.static.flickr.com/79/250582482_305b4c1817_b.jpg
  • robtenberge.nl
  • robtenberge.nl/images/xl_knowledge/b83full.jpg
  • Image:Vitruvian Man (2) Rob ten Berge.jpg|thumb|right|robtenberge.nl]]

Linksummaries:





UserSummaries:






(The IP summary shows that the user is adding links to his work to quite some wikis), I suggest that the two domains robtenberge.nl and artstamps.dk), and specific links on the other servers (members.home.nl and flickr.com) are added to the blacklist.

User has linkfarms on his userpage, I deleted the userpage on en, it still exists on nl and de. --Dirk Beetstra T C (en: U, T) 12:00, 4 October 2008 (UTC)

  • Yup, that sounds reasonable. I'll do it now. JzG 13:21, 4 October 2008 (UTC)
  • Added Added, as I forgot to note above. JzG 17:46, 4 October 2008 (UTC)

searchoptima.com theclickinfo.com





Spammers














and more.

See WikiProject Spam item (permanent link). MER-C 13:25, 4 October 2008 (UTC)

Added Added  — Mike.lifeguard | talk 16:04, 4 October 2008 (UTC)

rock-fotos.de



Spammers














and more.

See WikiProject Spam item (permanent link). MER-C 12:50, 5 October 2008 (UTC)

Added Added  — Mike.lifeguard | talk 16:50, 5 October 2008 (UTC)

isurvived.org



Anti-Polish hate site both uncivil and a linkspammer, devoted entirely to promoting ethnic strife via racially motivated commentaries. Features copyrighted articles lifted from legitimate websites, mocked in brief quasi-reviews. Usually advertised at the bottom of related Wikipedia articles such as "Holocaust in Nazi-occupied Poland" and others. --Poeticbent talk 02:47, 7 October 2008 (UTC)

Can you point us towards some on-wiki discussion of this elsewhere, if there is any? As well, some examples of abuse across several wikis would be nice. Does this user edit with one username? With socks? Anonymously? As well, note this is used very extensively right now, so I'd be reluctant to blacklist without some thorough discussion. Thanks for the further info.  — Mike.lifeguard | @en.wb 19:08, 7 October 2008 (UTC)

Here are but a few examples of on-wiki confirmation (in Talk and at en:WP:AN/I) by a number of different users of vicious nature of isurvived.org:

  1. w:User_talk:Elmer_Clark/archive#isurvived.org
  2. w:User_talk:Zsero/Archive_1#Your_edits_to_Hiram_Bingham_IV
  3. w:Talk:History_of_the_Jews_in_Romania#ISurvived
  4. w:Special:LinkSearch/*.isurvived.org
  5. w:Wikipedia:Administrators'_noticeboard/IncidentArchive129#User:Webville
  6. w:Wikipedia:Administrators'_noticeboard/IncidentArchive183#User:Zsero

--Poeticbent talk 16:58, 7 October 2008 (UTC)

Where is there recent abuse? The latest evidence you have posted dates all the way back to January 2007.
I don't see anything cross wiki either.
This looks to me like an editorial decision. I don't see the link being abused across several wikis - this can be handled by the English Wikipedia community & the local blacklist team if necessary.  — Mike.lifeguard | @en.wb 21:11, 7 October 2008 (UTC)

Thanks for the feedback. You're probably right about the local blacklist team being a good venue. Here's where the link to isurvived.org has been added recently via prolonged edit war with an anon (wonder, whether it's the same person as per above).

  1. link to isurvived.org added by an anon (en:User:63.22.131.220)
  2. (removing copyvio link per wikipedia policy, its an op-ed piece with links that simply loads pages directly from other sites but within this site's frames, which violates copyrights)
  3. (Reverted edits by 68.155.118.168 (talk) to last revision by 67.160.159.171)
  4. (reverting - the site has no original content related to this article, it places other websites content within frames on its own, making it copyvio and against wikipedia linking policy)
  5. (Reverted edits by 68.155.118.172 (talk) to last revision by SlimVirgin)
  6. (actual webpage title)
  7. amiable link to the same site removed by (en:User:12.76.173.180)
  8. (Reverted edits by 12.76.173.180 (talk) to last version by Pharos)

--Poeticbent talk 22:42, 7 October 2008 (UTC)

Sorry, that's all on enwiki, and it's all old (2007) - except the last two diffs provided, which don't show the link being added or removed. Unless abuse of this link is cross-wiki (or especially egregious, with the expectation of going cross-wiki after enwiki blacklisting) then there's no reason to blacklist it globally.
Declined Declined on that basis - if there is ongoing abuse (which doesn't seem to be the case) then you may pursue this at w:en:MediaWiki talk:Spam-blacklist.  — Mike.lifeguard | @en.wb 00:51, 8 October 2008 (UTC)

Video game spam







  • Looking at behaviour, I think we're dealing with the same spammer on these ones. Not an emergency, I think.  — Mike.lifeguard | @en.wb 02:33, 10 October 2008 (UTC)
    OK, they're not stopping, so Added Added  — Mike.lifeguard | @en.wb 02:55, 10 October 2008 (UTC)

snore/Lazik/zit spam

Domains








Google Adsense ID 1745586463776725


Related domains





Already blacklisted on meta


See:


Accounts








--A. B. (talk) 01:40, 13 October 2008 (UTC)


Added Added --A. B. (talk) 02:19, 13 October 2008 (UTC)

twisturl.com



URL shortener. MER-C 10:21, 13 October 2008 (UTC)

Added Added  — Mike.lifeguard | @en.wb 19:57, 13 October 2008 (UTC)

bluecruisesturkey.com spam

Domains









Related domains

















Spam accounts






--A. B. (talk) 00:09, 14 October 2008 (UTC)

Added Added  — Mike.lifeguard | @en.wb 00:28, 14 October 2008 (UTC)

tanolis.onesite.com



Enwiki: added regurarly by sockpuppets of indef-blocked en:User:Pakhtun Tanoli, specially multiple IPs (see en:Category:Suspected_Wikipedia_sockpuppets_of_Pakhtun_Tanoli). en:Tanoli has been semi-protected a pair of times, but the link has been inserted at multiple talk pages[39][40].

Simple wiki: added by several IPs (most certainly the user that was blocked from enwiki) [41][42]

Eswiki: [43] diff fresh from today --Enric Naval 18:38, 16 October 2008 (UTC)

Comment Comment. The article has been deleted on es-wiki up to 10 times and the link is really spammy. I suggest the addition.
Dferg (talk) 06:54, 17 October 2008 (UTC)
This looks like a social networking site? Regardless, it's been spammed, so Added Added  — Mike.lifeguard | @en.wb 15:05, 17 October 2008 (UTC)

melandroweb.it



Added 10x times yesterday on en:wp, 3 times on nl:wp. Some 37 instances remaining after I removed a lot of these links manually. Luxo's on toolserver seems to be down for the moment. See COIbot for previous additions (march 2008). Site shows a "Link popularity check" at the bottom, enough said I think. EdBever 07:13, 17 October 2008 (UTC)

I regenerated the coibot report. --Dirk Beetstra T C (en: U, T) 10:16, 17 October 2008 (UTC)
46 links were placed on many projects, i request a global blacklisting EdBever 11:13, 17 October 2008 (UTC)
I have asked via the italian wikipedia embassy that the italians have a look at the value of this link for their project. EdBever 20:54, 17 October 2008 (UTC)
And they say it's also considered spam on their project: [44]. EdBever 10:06, 18 October 2008 (UTC)
Added Added  — Mike.lifeguard | @en.wb 15:38, 18 October 2008 (UTC)

makulit.info







Cross-wiki contribs not working for S2 servers right now, so there could be more. No use to Wikimedia projects. See w:WT:WPSPAM#spam.makulit.info (permanent link). MER-C 12:24, 17 October 2008 (UTC)

Added Added - pure spam.  — Mike.lifeguard | @en.wb 15:42, 18 October 2008 (UTC)

tuttofassa.stepdev.org






Toolserver still not working. User has been blocked on nl: (5x linkspam) and warned on de: (8 contribs) wikipedias. 25 links have been placed on 12 wikis. IP is dynamic. EdBever 08:43, 18 October 2008 (UTC)

I have removed most links manually except those in it: wikipedia and in one de: user talk archive. EdBever 09:07, 18 October 2008 (UTC)
Added Added. Thanks. --Erwin(85) 20:07, 18 October 2008 (UTC)

rankingoogle.com black hat linkspamming on Wikipedia

Spam domains
  • rankingoogle.com




  • Previously blacklisted


  • Previously blacklisted


  • Previously blacklisted
  • webseos.5gigs.com


  • geocities.com/search_engine_ranker



Related domains
  • .webseos.com


  • new-york-divorce-attorney.com SEO client


  • pharmacareerguide.com SEO client


  • theactivechild.com SEO client



Spam accounts




































































































--A. B. (talk) 14:30, 20 October 2008 (UTC)

117.194.1.252 added webseos.com (listed as a related domain), I commanded the bot to create the other reports, but I see that the 117 and 59 ranges are very active in adding this, maybe some more accounts will follow from the reports. --Dirk Beetstra T C (en: U, T) 15:51, 20 October 2008 (UTC)
Added Adding these now - we may take additional action later as required.  — Mike.lifeguard | @en.wb 13:49, 21 October 2008 (UTC)

trainpetdog.com



(from en:MediaWiki_talk:Spam-blacklist)

This domain has been repeatedly added to dog-related articles. I removed it from 25 en.wikipedia articles yesterday and from pt.wikipedia and no.wikipedia today. After reading this link and this link I can only conclude that this is a criminal scam run from India and it should be blacklisted immediately. The pattern of adding the spam is interesting, a different IP address is used each time, but always from the same Indian-registered ISP. Below are a few of the IP addresses used, but this list is by no means exhaustive:














I have seen this one before, so am adding it now. JzG 00:28, 22 October 2008 (UTC)

  • This seems to be a well-known scam, and we have seen similar reports before, so I am expanding the listing to include the scammer's other known sites:




































FYI, both sets got Added Added and logged.  — Mike.lifeguard | @en.wb 03:46, 22 October 2008 (UTC)

alojamientosruralesdecantabria.com and alojamientosrurales.net









See Coibot reports. This is pure spam, please add this on to the blacklist soon. I have removed all links manually. This user is a persistent spammer. Besides the links mentioned above he spams:

  • santillana-del-mar.com
  • santillana-del-mar.ES
  • hellwars.com

This user deserves a global block in my opinion (at least several days). EdBever 11:51, 22 October 2008 (UTC)

  • Comment Comment The preceding reported links have been reverted on es-wiki. Thank you. Dferg (T-ES) 16:25, 22 October 2008 (UTC)
Added Added all  — Mike.lifeguard | @en.wb 17:58, 22 October 2008 (UTC)

ceo-europe.com



See Coibot report. This is commercial spam. EdBever 11:37, 23 October 2008 (UTC)

Added Added. --Erwin(85) 18:15, 23 October 2008 (UTC)

Online Tools & Documents Inc. spam

Domains

































Accounts