Talk:Spam blacklist/Archives/2007-03

From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search

Additions: Done

urlsnip.com

Used to insert a blacklisted viartis.net link into an article. I have the removal diff but I don't know when it was added or by whom.[1] --A. B. (talk) 15:47, 18 February 2007 (UTC)[]

Yes check.svg Done Already here, see above :-). Thank you. --.anaconda 18:07, 18 February 2007 (UTC)[]

lastmeasure.zoy.org

Another shock site, currently used in vandalism by Tooj117 sockpuppets at the English Wikipedia. Example. Lastmeasure is the "THIS PERSON IS LOOKING AT GAY PORN" website. No encyclopedic value.—Ryūlóng (竜龍) 03:15, 21 February 2007 (UTC)[]

Done.{admin} Pathoschild 04:02:52, 21 February 2007 (UTC)

cdjuridico.com

Website for selling CD/DVDs about law.

Articles:

I give up listing more diffs. You can see more on these articles:

Users (may me all the same user):

Mosca 17:01, 21 February 2007 (UTC)[]

Yes check.svg Done Quite clear pattern of abuse. Eagle 101 20:21, 21 February 2007 (UTC)[]

39 related domains

The following 39 domains were spammed across 68 articles on en:wikipedia.org from 80+ anonymous, dynamically assigned Malaysian IP addresses:

  • 40weekspregnancystages.com
  • about-credit-card.com
  • about-credit-report.com
  • aboutbodybuilding.net
  • acneskincareinfo.com
  • air-purifier-and-filter.com
  • all-soccer-info.com
  • asbestos-mesothelioma-cancer-info.com
  • atkindietplan.com
  • atkins-diet.cc
  • benefit-green-tea.com
  • breast-augmentation-and-enlargement.com
  • breast-augmentation-implants.com
  • cabbage-soup-diet-plan.com
  • carpetsearch.org
  • cell-phone-blog.net
  • credit-cards-n-debt.com
  • diabetes-diabetic-diet.com
  • dietpills-information.com
  • digital-camera-technology.com
  • dsl-broadband-isp.com
  • dsl-link.com
  • edi-guide.com
  • fitness-health-plan.com
  • grapefruit-diet.org
  • hdtv-lcd-plasma.com
  • lasik-surgery-info.com
  • lasiklasereyesurgeries.com
  • lowcarb.ca
  • satellite-service-providers.com
  • skincaresinformation.com
  • south-beach-diet-information.com
  • southbeachdietprogram.com
  • tech-guide.org
  • teleconferencing-technology.com
  • the-atkins-diet.info
  • the-atkins-diet.info double Eagle 101 21:14, 21 February 2007 (UTC) []
  • vpn-info.com
  • zonedietinformation.com

See: en:Wikipedia talk:WikiProject Spam#39 domains, 80 accounts, 68 articles (permanent link) for links to all 80 anonymous IP accounts' contribution histories. 99% of the edits come from these addresses were spam additions. That discussion also lists the articles spammed as well as Google Adsense account numbers where available. Links have been removed from all pages. --A. B. (talk) 21:09, 21 February 2007 (UTC)[]

Yes check.svg Done Eagle 101 21:14, 21 February 2007 (UTC)[]
Thanks! --A. B. (talk) 21:21, 21 February 2007 (UTC)[]

Adfunk spam on Wikipedia

The following 10 domains have been spammed across at least 47 articles on en:wikipedia by at least 6 accounts:

  • adfunk.blog-city.com
  • f1rezone.tblog.com
  • fiucer.blogsome.com
  • wtslink.com
  • mylink.tblog.com
  • tech2.blogsome.com
  • yellowpages1.blogspot.com
  • health1011.blogspot.com
  • ekhye.blogspot.com
  • internumber.blogspot.com

Adfunk has at least 11 affiliated sites and I recommend blacklisting them now as well:

  • evo.blogsome.com
  • engine.blogsome.com
  • adfunk.blogsome.com
  • ms1.blogsome.com
  • gnharrod.com
  • gangstarz.info
  • tech.shoutpost.com
  • mytaxi.blog-city.com
  • myl6.blogsome.com
  • prdeal.com
  • blog.myspace.com/adfunk
    • Note: blog.myspace.com domains are already blacklisted

Given all the controversy over myspace blogs, it's possible blog.myspace.com may come off the blacklist at some point. I recommend specifically blacklisting the blog.myspace.com/adfunk domain so that it stays on the blacklist if this happens.

For more information including links to contribution histories for each spam account, see:

Thanks, --A. B. (talk) 14:34, 22 February 2007 (UTC)[]

Links have been removed from all pages except en:User talk:Tech2blog. --A. B. (talk) 14:38, 22 February 2007 (UTC)[]
Note: some of the domains listed are actually sub-domains of large hosting services such as blogspot or blogsome. I recommend blacklisting only the subdomains as listed above. --A. B. (talk) 17:11, 22 February 2007 (UTC)[]
Yes check.svg Done I've blacklisted only the domains that were actually spammed. Eagle 101 17:39, 22 February 2007 (UTC)[]
Thanks -- and I'm sorry about forgetting to take the www's out. --A. B. (talk) 19:19, 22 February 2007 (UTC)[]

Another Maximus domain for blacklisting: xatpro.com

Other Maximus Business Solutions domains were blacklisted earlier this month; see:

In tracking down unrelated Adfunk spam on en.wikipedia, I found that an IP had added a link to a known Maximus domain last May at the same time as one to a domain I missed in my earlier request.[26][27]

  • xatpro.com

Currently, there are none of these links on any pages. Thanks, --A. B. (talk) 14:49, 22 February 2007 (UTC)[]

So, is there current spamming of this? I mean May is quite a while back... Eagle 101 17:35, 22 February 2007 (UTC)[]
This spammer has been so prolific that I can't say if that link's been added since May. It very well may have. I've waded through hundreds of article edits looking for Maximus spam. If you look at the WikiProject Spam discussion, there are probably more domains I missed and there are surely many IP accounts I've missed. The Maximus spammer has been active with 11 different IPs just in this month -- that I know of:
It's safe to assume that we will being playing Whac-a-mole with these guys for a long time. I recommend blacklisting that link, but it's certainly OK if it's not for now.
--A. B. (talk) 18:30, 22 February 2007 (UTC)[]
Yes check.svg Done - Ok, sorry for missing this one! It sorta got swept under the carpet, blacklisting due to multiple IP ranges. Eagle 101 03:21, 24 February 2007 (UTC)[]

Netbizsolutions.com spam on Wikipedia

At least 15 dynamically assigned, one-session use IPs spammed 6 domains across at least 38 articles on en.wikipedia. In all but one case, these IP addresses' contributions were 100% spam only.

Domains spammed (6):

  • affiliatedirectorysite.com
  • furniture-asian.com
  • netbizasia.com
  • netbizsolutions.com
  • sixco.ws (similar to tinyurl.com)
  • templatesnew.com

Affiliated domains -- I recommend blacklisting these now as well (5):

  • activehits4u.com
  • fluxservices.com
  • hostnetbiz.com
  • impotenceherbs4impotency.info
  • impotenceherbsextract.com

For more information and for links to all the accounts' contribution histories, see:

title=Wikipedia_talk:WikiProject_Spam&oldid=110095227#Netbizsolutions.com_spam_on_Wikipedia_using_punctuation link]

Currently, there are none of these links on any Wikipedia pages. --A. B. (talk) 16:57, 22 February 2007 (UTC)[]

Yes check.svg Done Quite clear spamming from multiple IP ranges. Eagle 101 17:29, 22 February 2007 (UTC)[]
To clarify, I'm only adding those that have actually been spammed. Eagle 101 17:31, 22 February 2007 (UTC)[]
Thanks! --A. B. (talk) 19:17, 22 February 2007 (UTC)[]

Lost .eu "game"

Links to "lost .eu" have been repeatedly removed from the dab page Wikipedia:Lost and snuck into a number of other pages with similar names. People from http://www.lost. eu are attempting to get sign-ups for some sort of social experiment contest, which is offering $5000 for the most sign-ups.

See, for background:

--Leflyman 01:37, 23 February 2007 (UTC)[]

notdone - Try dealing this with the normal means of stopping vandalism and spam. (ie, blocks, warnigns ect). If more IP addresses start popping up, drop a note here. Eagle 101 01:45, 23 February 2007 (UTC)[]
That's interesting -- I was tracking down unrelated laptopnik.com spam out of Malaysia and Singapore today and found that in addition to those links, someone using a Hewlett-Packard IP,128.88.255.35, tracerouting to Singapore had added lost.eu links. Leflyman's 72.138.68.246 spammer is a Rogers Cable customer in Canada. Neither IP is listed on any prominent open proxy/abusive IP lists[28][29], the first thing you think of when you see such geographically diverse spamming. That this is some sort of a contest would explain what we're seeing. Based on this, I think blacklisting is going to be our only sure fix short of blocking everyone but 127.0.0.1. --A. B. (talk) 02:21, 23 February 2007 (UTC)[]
Yes check.svg Done - if this is what we really think this is, lets go ahead and blacklist, we can take it off when the contest ends. Eagle 101 02:29, 23 February 2007 (UTC)[]
--Leflyman 03:34, 23 February 2007 (UTC)[]
Thanks for mentioning those, any idea on how long the "game" is going to last? Eagle 101 04:45, 23 February 2007 (UTC)[]

geocities.com/xpw5yearslater

Same content was previously hosted on another blacklisted site - www.declarationofindependents.net, and was repeatedly inserted into Tommy Dreamer by various IPs. 81.153.129.208 02:13, 23 February 2007 (UTC)[]

Yes check.svg Done - clear evidence above of multiple IP ranges. Eagle 101 02:38, 23 February 2007 (UTC)[]

modiarte.it

Yes check.svg Done - clear case of cross wiki spam. Eagle 101 03:39, 23 February 2007 (UTC)[]

mondeducirquelausanne87.blogspot.com

Yes check.svg Done - clear case of cross wiki spam. Eagle 101 03:43, 23 February 2007 (UTC)[]

charlie-parker.org

Yes check.svg Done - clear case of cross wiki spam. Eagle 101 03:54, 23 February 2007 (UTC)[]

kit-direito.com

This domain redirects to "cdjuridico.com" already blocked. Its the same user with another IP [42] For details see previous post #cdjuridico.comMosca 08:25, 23 February 2007 (UTC)[]

Yes check.svg Done redirect site to already blacklisted site. Eagle 101 17:19, 23 February 2007 (UTC)[]

tvsylt.com

Constant linkspam in many articles on de.wp by several IPs from the 80.130.*.* range, e. g. 80.130.112.205, 80.130.92.34, 80.130.115.117, 80.130.108.19. Please take it on the blacklist at least for two months or three. --Gardini 11:07, 23 February 2007 (UTC)[]

notdone - Could you try a block of 80.130.0.0/16 first? Try it for like 31 hours and see if he comes back or not. Eagle 101 17:17, 23 February 2007 (UTC)[]
Are you serious? (scnr) You advise us to block 64K IPs belonging to a big provider to try (!) to keep out one single spammer, wo is doing this for almost a week, for one single day? Sorry, but if Gardini or I would do this block, probably at least 10 other admins would undo it immediately. Needless to say that the blocked page is totally unsuited for linking it in an encyclopaedia. --FritzG 21:26, 23 February 2007 (UTC)[]
Problem is this list is not just for encyclopedias I believe that several hundred wikis use this. I am not aware of how large the host is. Some of them have little to no contributions. See some of the blocks done on en. I've found that very short blocks tends to stop them. Though if you guys are unable to deal with it using your normal admin tools, I will blacklist, its up to you folks. I'm just suggesting alternatives.Eagle 101 21:35, 23 February 2007 (UTC)[]
I don't think this link might be useful on any Wikimedia project, so it would be nice if you blacklisted, since the spammer continues with his wicked craft: 80.130.82.210. --Gardini 11:39, 27 February 2007 (UTC)[]
And again: 80.130.73.81. --Gardini 06:47, 1 March 2007 (UTC)[]
And it doesn't come to an end: 80.130.71.98. I'd also like you to remark this edit. Would you be so kind to blacklist this URL for one eternity or two? --Gardini 20:35, 5 March 2007 (UTC)[]
Yes check.svg Done - sorry I did not see the new developments. Thanks Gardini for telling me about it on my talk. Eagle 101 22:59, 5 March 2007 (UTC)[]

*.gratuliermir.de

Hi all,

crosswiki-spam by *.gratuliermir.de, where * stands for a geografical location, like:

gratuliermir.de is gaining content (fotos etc.) from jeder-tag.de (already blacklisted), see code from this example: wismar.gratuliermir.de. Thank you. --Gunnex 17:09, 24 February 2007 (UTC)[]

Are we sure there is an active attempt to spam this? Looks like different contributors to me. 4 different IP addresses for each wiki, unless those IP addresses are being used by the same person. Eagle 101 17:49, 24 February 2007 (UTC)[]

Hi Eagle, *.gratuliermir.de flooded - for example - almost all the language wikipedia´s related to the article Bamberg. In the meantime, i did some reverts... The spamer is reverting correction at language wikipedia´s with different ip´s. Following - for example - the spam-contributions by ip 84.139.246.17: bgwiki, cawiki, etwiki, eswiki, frwiki, idwiki, itwiki, lawiki, nowiki, plwiki, ptwiki, rowiki, and - interesting - eowiki: inserted link to jeder-tag.de before blacklisted. --Gunnex 19:14, 24 February 2007 (UTC)[]

Yes check.svg Done, clear case of cross wiki spam. Eagle 101 19:22, 24 February 2007 (UTC)[]

I think, that these photos are very beautiful. Why don't you like them? --84.242.65.251 22:54, 25 February 2007 (UTC) (User:Kirk from CsWiki)[]

You might think that, but the problem is not how "beautiful" the photos are, but rather the pattern of spamming that has been going on. Eagle 101 21:47, 26 February 2007 (UTC)[]

mannbeisstfilm.de

Persistent spamming on de:WP in several cases: [43] (already been cautioned) [44] [45] [46] (1 edit) [47] (1 edit) [48] (1 edit) There are more IPs with just 1 edit, but I can't be bothered to find/list them all. Thanks. --Michael 09:09, 26 February 2007 (UTC)[]

Yes check.svg Done (sorry I missed this earlier) Eagle 101 19:39, 27 February 2007 (UTC)[]

internet-history.tz4.com

Yes check.svg Done - cross wiki spam. Eagle 101 15:28, 26 February 2007 (UTC)[]

pavelnedved.110mb.com

Yes check.svg Done - cross wiki spam. Eagle 101 15:32, 26 February 2007 (UTC)[]

statisticsoftheworld.page.tl

Yes check.svg Done - cross wiki spam. Eagle 101 15:36, 26 February 2007 (UTC)[]

parkourstyle.com

Yes check.svg Done - cross wiki spam. Eagle 101 15:39, 26 February 2007 (UTC)[]

texaspoker.tk

Yes check.svg Done - cross wiki spam. Eagle 101 15:42, 26 February 2007 (UTC)[]

Some more, that I've just noticed. Eagle 101 16:08, 26 February 2007 (UTC)[]

ainfos.ca

Yes check.svg Done - cross wiki spam Eagle 101 15:50, 26 February 2007 (UTC)[]

dcestonian.com

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

cosplayx.com

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

katardat.org

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

anarkismo.net

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

nefac.net

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

bonsaimenorca.com

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

napolinelmondo.org

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

petrophoto.net

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[]

asociacionjacob52.com

Yes check.svg Done - cross wiki spam Eagle 101 16:01, 26 February 2007 (UTC)[]

harmonica.it

Yes check.svg Done - cross wiki spam. Eagle 101 16:10, 26 February 2007 (UTC)[]

wga.hu



Yes check.svg Done - cross wiki spam Eagle 101 16:12, 26 February 2007 (UTC)[]

I'm modifying this blacklist to wga.hu/html/t/tintoret as I might have gotten some collateral on the english wiki, we will find out soon enough if the domain will continue to give us problems. If it does I will make this block broader. Eagle 101 23:05, 26 February 2007 (UTC)[]

petrophoto.net

Yes check.svg Done - cross wiki spam Eagle 101 16:12, 26 February 2007 (UTC)[]

indiabroadband.net

Adsense pub-9588274242501467

  • {{en:linksearch|*.indiabroadband.net|indiabroadband.net}}
Spam sock accounts

en:User:202.177.186.18
en:User:210.214.91.194
en:User:61.17.226.112
en:User:202.177.185.81
en:User:210.214.91.202
en:User:202.177.186.169]]
en:User:210.214.91.188
http://www.bsnl-broadband.com
http://www.bsnl-internet.info
--AndrewCates 18:11, 26 February 2007 (UTC)[]

Yes check.svg Done Eagle 101 16:38, 27 February 2007 (UTC)[]

make-money-online4.tripod.com

Extensively spammed (usually being inserted over and over into each section of an article) by three different anon IPs on the English Wikipedia.

221.215.219.130

  • Money

221.208.14.248

  • online auction business model
  • Money, Money, Money

159.226.112.12

  • Business
  • Make
  • Make Room! Make Room!
  • Online auction business model

Notinasnaid 17:14, 27 February 2007 (UTC)[]

Yes check.svg Done Eagle 101 19:24, 27 February 2007 (UTC)[]

visitdaugavpils.lv

Yes check.svg Done cross wiki spam. Eagle 101 22:15, 27 February 2007 (UTC)[]

cosplay-world.com

Yes check.svg Done cross wiki spam. Eagle 101 22:15, 27 February 2007 (UTC)[]

ulkerfenerbahce.com

Yes check.svg Done cross wiki spam. Eagle 101 22:15, 27 February 2007 (UTC)[]

antu.com

Yes check.svg Done cross wiki spam. Eagle 101 22:15, 27 February 2007 (UTC)[]

bukkake.com

Yes check.svg Done cross wiki spam. Eagle 101 22:15, 27 February 2007 (UTC)[]

go-sierra-nevada.com

Yes check.svg Done - cross wiki spam Eagle 101 22:28, 27 February 2007 (UTC)[]

narutokage.135.it

Yes check.svg Done - cross wiki spam Eagle 101 22:28, 27 February 2007 (UTC)[]

go-passau-land.com

Yes check.svg Done - cross wiki spam Eagle 101 22:28, 27 February 2007 (UTC)[]

elrelojdesol.com

Yes check.svg Done - cross wiki spam Eagle 101 22:28, 27 February 2007 (UTC)[]

bratz.tv

Yes check.svg Done - cross wiki spam Eagle 101 22:28, 27 February 2007 (UTC)[]

Incest porn linkfarms

Quote http://en.wikipedia.org/w/index.php?title=Wikipedia_talk:WikiProject_Spam&oldid=111578479

>> I came across this yesterday and haven't had time to deal with it. See en:Special:Contributions/213.184.238.38 -- we had another Belorussian IP add such links earlier in 2006. Can someone get his 3 December links blacklisted? I won't have time. Given the incest/kiddie-sex connection, it's probably mandatory to get rid of these immediately and permanently under Florida and/or U.S. law (the legal jurisdictions for Wikipedia's servers). Thanks! [--A. B.]

These domains belong to a network of linkfarms, with hidden links in their HTML code between themselves and to various pornsites:

guatemalahist\.com
namibianhistory\.com
croatiahis\.com
zimbab\.net
xz5\.org

The links above were added directly by en:Special:Contributions/213.184.238.38, below are additional links I've gathered from scanning some of their pages.

z4o\.net
pxy1\.net
agablog\.com
akoblog\.com
familyincestbiz\.com
ackue\.info
aepwd\.org
aexqq\.org
aqhfc\.info
cqfnc\.info
cqhfs\.info
cxqqc\.org
foxqq\.org
xcjas\.com
xcjei\.com
xcjin\.com

Femto 15:28, 28 February 2007 (UTC)[]

Yes check.svg Done - I'm going to do them all, looks like the intent of this was to spam us. Eagle 101 17:51, 28 February 2007 (UTC)[]

tutorialspoint.com



Spam, (WPSPAM case), continues: en:Special:Contributions/59.144.76.115

example activities on other languages:

Femto 23:09, 1 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 16:14, 2 March 2007 (UTC)[]
en:Wikipedia_talk:WikiProject_Spam/2007_Archive_Apr#tutorialspoint.com_talentgroups.com_amrood.com note --Hu12 18:26, 8 June 2008 (UTC)[]

bonuslover.com

Spam see [49] [50] [51] [52] [53]

See also:

[54] 87.74.10.185 11:10, 3 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 17:25, 3 March 2007 (UTC)[]

jeffsfamilypharmacy.com and others

  • jeffsfamilypharmacy.com
  • thereddoorstore.com
  • bluevelvet.com

Spammed over a long time to the English Wikipedia, by the following: [55] [56] [57] [58] [59] [60] [61] [62]

Yes check.svg Done Eagle 101 01:20, 4 March 2007 (UTC)[]

obsessedwithwrestling.com/columns/jonathanbarber/

Multiple IPs linkspamming to articles written by banned user JB196, who has a long term abuse report. Please just block that part of the site, as the rest of the site is used in many other articles.

72.36.195.242 [63][64]

217.160.226.33 [65][66][67][68][69][70][71][72][73][74][75][76][77][78][79][80][81]

72.36.223.93 [82][83][84]

More IPs were used, but based on previous experience that should be enough? 81.155.77.73 05:32, 4 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 05:38, 4 March 2007 (UTC)[]

ffring.com and www.ffring.com

IPs and accounts spamming this unnecessary Final Fantasy fansite in articles concerning this video game series. Sometimes link to their site main page, and sometimes directly to some video game trailers hosted on their site. They change serveur and site name.82.66.36.11 08:30, 8 April 2007 (UTC)[]

Yes check.svg Done Eagle 101 05:40, 5 March 2007 (UTC)[]

moviesbuzz.com

Spammed by several single-purpose accounts:

Very low content/high ad site. The little content that is present is copyvio (based on what I have checked), much of it taken from Wikipedia. Many of the links added in fact led to articles copied from Wikipedia without proper citation. Recent addition: added content copied from music buzz and added link to the website - even though the content itself had originally been copied from the Wikipedia article being spammed. That IP in particlarmusicbuzz. Other examples: Alicia Keys copyvio. Today's version - spamming both the talk page and article. Lots of links to galleries of Indian movie stars with only a handful of pictures and no other redeemable content: [140] Nposs 22:42, 4 March 2007 (UTC)[]

Yes check.svg Done - multiple IP range spam. Eagle 101 05:42, 5 March 2007 (UTC)[]

pornoass.iespana.es

from IP 87.118.108.81 also from this IP came the already blacklisted diff diff diff

Yes check.svg Done. Block that IP address. --.anaconda 12:57, 5 March 2007 (UTC)[]

pages.citebite.com

URL-shrinking service; the user inputs a quote and a URL and gets a URL that mirrors the original, but with the quote highlighted. Veinor 22:43, 5 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 22:55, 5 March 2007 (UTC)[]

gamefreaks365.com

Spammed by an anon quite a bit (see en:Special:Contributions/70.224.58.15) and also by others to a number of gaming articles, e.g. [142], [143], [144] - link list on en after reversionof the anon's edits was:

  1. gamefreaks365.com/article.php?pid=105 linked from XaviXPort gaming console
  2. gamefreaks365.com/article.php?pid=110 linked from Matt Leto
  3. gamefreaks365.com/article.php?pid=170 linked from Metroid Prime Hunters
  4. gamefreaks365.com/article.php?pid=55 linked from XGameStation
  5. gamefreaks365.com/article.php?pid=68 linked from GameZone
  6. gamefreaks365.com/modules.php?name=Content&pa=showpage&pid=71 linked from Talk:Comparison of handheld gaming consoles
  7. gamefreaks365.com/modules.php?name=Sections&op=viewarticle&artid=446 linked from Teenage Mutant Ninja Turtles: Turtles in Time
  8. gamefreaks365.com/newsarticle.php?sid=1833 linked from Eidos Interactive
  9. gamefreaks365.com/review.php?artid=1091 linked from Avatar: The Last Airbender (video game)
 10. gamefreaks365.com/review.php?artid=1120 linked from NBA Street: Homecourt
 11. gamefreaks365.com/review.php?artid=393 linked from Alex Kidd in Miracle World
 12. www.gamefreaks365.com/forums linked from Wikipedia:Dead external links/301/g
 13. www.gamefreaks365.com/review.php?artid=1109 linked from Def Jam: Icon
 14. www.gamefreaks365.com/screenshots linked from Wikipedia:Dead external links/301/g

Also some on nl: and maybe other projects, I'm checking. Just zis Guy, you know? 15:29, 21 February 2007 (UTC)[]

Can you show me the ones from other projects? Eagle 101 20:13, 21 February 2007 (UTC)[]
I deleted the ones from nl:, three Alex Kidd related nl:Alex Kidd The Lost Stars, nl:Alex Kidd in Shinobi World, .nl:Alex Kidd in Miracle World. Just zis Guy, you know? 23:19, 21 February 2007 (UTC)[]
I will look at this further in a few hours Eagle 101 20:12, 22 February 2007 (UTC)[]
Yes check.svg Done Ok I will blacklist, sorry for the delay later today when I have time to log it and all. Eagle 101 17:07, 6 March 2007 (UTC)[]

ruswar.com

Yes check.svg Done - clear case of cross wiki spam. Eagle 101 03:44, 23 February 2007 (UTC)[]

Why this useful site is considered to be a spam? Who decide it for all people? Did you look the site youself? Or maybe you been on a war? This collection of RARE war PHOTOGRAPHY and DOCUMENTARY is unic non-commercial project, built by veterans of Afghanistan war. It looks like somebody has a personal problems and no respect to died soldiers. God has no forgivness for such vandalism. If it dos not mach a language criteria??? just remove the link from unappropriate page. The preceding unsigned comment was added by Bladerunner4545 (talk • contribs) 01:09, 26 February 2007 (UTC)
I've already replied on the request for removal below, but basically it has been spammed across multiple wikis. I'm leaving this up to another meta admin to choose to remove it or not. Though I will ask you to please tone down the language, I don't have a "war" against much anything. Thanks. Eagle 101 15:02, 26 February 2007 (UTC)[]

Mr. Eagle 101, Wikipedia is public project initialy created to help people find useful information. 1)By designating www.ruswar.com as a spam and removing from related pages you cut off people from the access to the source of valuable materials. Ruswar.com not only provides Copyrighted unique Photos and Documentary of Afghanistan war 1979-1989, Salang road, Soviet Army, it also helps people around the world to keep the memory of the past - Langauge is not the issue. 2)If one terrorist oriented person did not like the photography of Russian Army and the mission in Afghanistan, it's not the signal to you to label ruswar.com as a spam. 3)You undertook liability to make this action without discussion with other 40 administrators and consideration opinion of the page's authors. Moreover, it is a shame and a sin to call charity work - SPAM.

OK, here are some comments from a bystander. I'm not an admin and I don't make decisions here -- what follows is strictly my own opinion:
First of all, attacking Eagle 101 is wrong -- he's just following the rules in response to a request from others. Just as I was following the normal protocol when I deleted your links from the English Wikipedia; once a link is blacklisted, you can't edit any pages that contain it until the link is removed, so I was removing the link to free up the pages.
I looked at your photos and I liked them. I would not have requested they be blacklisted myself. Having said that, take a look at these to guidelines from the English language Wikipedia:
  • Conflict of Interest Guideline -- in a nutshell, never link to your own website even if it's non-commercial and even if the links otherwise meet all of our requirements
  • Spam Guideline -- if you start adding a bunch of links to your own website, it's going to lok like spam to us. If you start doing it across multiple Wikipedias, then it really rings alarm bells. When one IP address adds only links and does it across multiple Wikipedias, it's classic spam >95% of the time.
  • Civility Policy -- please do not bite off Eagle 101's head. He's a real person, just like you. Besides, if you'd like to see your links on Wikipedia, it's counterporductive
  • What Wikipedia is Not -- especially the section that says [[en:WP:NOT#SOAP|Wikipedia is not a directory or link-farm. Wikipedia is an encyclopedia.
  • External Links Guideline -- most useful or interesting sites do not meet our standards of "encyclopedic". I have two great web sites myself that are well-respected and widely cited in their niche yet they do not meet our guideline (and don't have links on Wikipedia).
  • Finally, you're bound to wonder "Well what about all the links to really rotten sites that Wikipedia has? My site is much better. Why have links to those others?" The answer is that on the English Wikipedia alone, we have 3 million+ links, many of them low quality (even if they're not classic "spam") and we welcome all the help we can get to reduce the problem. There a just a few dozen volunteers working on link improvement. As you see noncompliant links, please delete it (just don't go on a deletion spree out of anger -- see en:WP:POINT).
--A. B. (talk) 14:28, 27 February 2007 (UTC)[]
A. B. to clarify, I am the one that listed that, I blacklisted to stop the cross wiki spam. I'm willing to take it off in a few weeks and try again (see if spamming keeps up or not). Eagle 101 16:54, 27 February 2007 (UTC)[]
I would recommend not removing as there is clear evidence of cross-wiki spam. Naconkantari 19:29, 12 March 2007 (UTC)[]

Various Spam Links

  1. misa.pimpblog.nl
  2. vesna.reciter.com
  3. viva.reciter.com
  4. www.blogagotchi.com/bobovina
  5. www.blogagotchi.com/busek
  6. www.blogagotchi.com/cher

Spammed the sonikmatter wiki (and many others - google any of the links +mediawiki)

Examples 1 and 2

The Puppeteer 01:51, 24 February 2007 (UTC)[]

It looks like a user account, try blocking the user on that wiki. Either that or demonstrate on this page that there is cross wiki spam (at least 3 or 4 wikis will do). Thanks! Eagle 101 02:44, 24 February 2007 (UTC)[]
User accounts are randomly generated by bots. The user has been blocked, but the bot will just create a new account with random numbers.

For evidence of cross wiki spamming, see the following links

  1. Google Search misa-pimpblog-nl
  2. Google Search vesna-reciter-com
  3. Google Search viva-reciter-com
  4. Google Search www-blogagotchi-com-bobovina
  5. Google Search www-blogagotchi-com-busek
  6. Google Search www-blogagotchi-com-cher

203.59.114.60 02:14, 27 February 2007 (UTC)[]

Um, what am I looking for here with these google searches.... Eagle 101 17:08, 6 March 2007 (UTC)[]
Yes check.svg Done Naconkantari 19:25, 12 March 2007 (UTC)[]

*.astore.amazon.com

please, check these edits: diff and diff. That's shoking, they have added (or modified) links to Amazon through the "partner program", in order to get money from the books buyed by wikipedians. Can you go to all the others wikis to control if the links to Amazon are 'clean'? Thanks, thanks a lot! --81.211.181.164 00:34, 25 February 2007 (UTC) - PS: they are everywere: [145], [146], [147]. --81.211.181.164 00:46, 25 February 2007 (UTC)[]

So wait... this is a request to add or remove? Eagle 101 01:28, 25 February 2007 (UTC)[]
add to the Spam blacklist; thanks. --81.211.181.164 02:46, 25 February 2007 (UTC)[]
moved to right place, support the request--Jollyroger 16:22, 27 February 2007 (UTC)[]
I support the request to blacklist this domain. It consists solely of affiliate sites - even if you consider Amazon.com a useful link there is no value added by this sub-domain. We have removed thousands of these links from the English Wikipedia. The links are a bit difficult to track down now they have been removed, but here and here are just two examples. another example and another. And more discussion here. There have also been links to astore.amazon.de and astore.amazon.fr and astore.amazon.co.uk so I think that these should be also added to the regexp. zzuuzz (talk) 14:18, 28 February 2007 (UTC)[]
Yes check.svg Done Naconkantari 22:57, 7 March 2007 (UTC)[]

isbn-check.com + books-by-isbn.com + isbn-check.de

these 3 websites are present in many wikis, mainly in the 'Wikipedia:Book sources' special pages (just removed from it.wiki ). If you search a book, the websites are always redirecting to Amazon (pay-per-link system). The same system is adopted by isbndb.com (Amazon and others). Probably the special pages related to Special:Booksources are full of this kind of spam in every wiki. --81.211.181.164 00:05, 25 February 2007 (UTC)[]

Please provide diff links to the spam. Thanks, Naconkantari 05:32, 9 March 2007 (UTC)[]
the 3 websites on the topic title belong to the same author: he is making money with the "referral profiteering" system (when you get a book description then the links are pointing to amazon). Links are mainly in the "Wikipedia:Book sources" pages on several wikis, for example: en, fr, es, fi, it, de. It is allowed to make money in this way? --81.211.176.241 00:21, 10 March 2007 (UTC)[]
Yes check.svg Done, thanks Naconkantari 19:21, 12 March 2007 (UTC)[]
Moved a removal request to the proper section, below. EdJohnston 01:39, 17 March 2007 (UTC)[]

Medha Hari spam on Wikipedia

Medha Hari is an Indian dancer. She and/or supporters have aggressively spammed her promotional links and photos for two years using dozens of sock-puppets:

Spammed domains

  • voila.fr/bharatanatyam-dance
  • geocities.com/medhahari
  • medha.info

Articles affected on en.wikipedia:

Spams cross-wiki: English, German, Polish, Italian, French

We thought the problem was solved after the big checkuser investigation and a number of blocks six weeks ago, but a new sock has just added the link again.[148] --A. B. (talk) 02:51, 28 February 2007 (UTC)[]

All means have been tried, consider this Yes check.svg Done Eagle 101 04:18, 28 February 2007 (UTC)[]
I am sorry if I am wrong, but, for example, one link ( in.geocities.com/medhahari/bharatanatyam/bharatanatyam.html ) cannot be categorized as spam according to the Wikipedia rules because

1. the link has been placed in the relevant category 2. the link is highly relevant 3. the link provided extended info on Wiki's article 4. the link is not related to Medha Hari, even though contains some links to her pages (as well as dozens of other pages, including Wikipedia!!!) 5. the link does not contain any promotion of any commercial product

Therefore, I consider all the vandalism of the A. B. group (who use plausible interpretations of Wiki's antispam policy) as abusive. 121.247.36.38 03:34, 1 March 2007 (UTC)[]

A detailed discussion of these links including their promotional nature can be found at en:talk::Bharatanatyam. The advocates for this link were sockpuppets as established by checkuser. Most were blocked by independent admins, not myself. A wide range of Wikipedia policies and guidelines were violated these sockpuppets including en:WP:SPAM, en:WP:NOT#SOAP, en:WP:COI, en:WP:VAND, en:WP:EL, and en:WP:SOCK.en:WP:CIVIL, en:WP:NPA. The record of the accounts adding this link as detailed in all of the links provided above speaks for itself. If this editor has further concerns, she/he can ask for a second opinion at en:WT:WPSPAM; if the reviewing editors there find my actions have been inappropriate, they will certainly overturn them. --A. B. (talk) 04:06, 1 March 2007 (UTC)[]
Hi AB! :-)Blessings from Madras! :-) I read a recent review in the Hindu about this site, so am new to Wikipedia, and, frankly speaking do not understand your personal vendetta against that little girl's web site! OK, sockpuppets are bad, but don't you want to throw the baby out with the water? If you start deleting all links because they lend some vague "promotional nature" to the sites, do you seriosly think you are contributing positively to Wikipedia, or just destroying it? All in all, I think that the reviewing editors will find that "medhahari/bharatanatyam/bharatanatyam.html" does belong to where it used to be.

P.S. Just read that article. I believe that you don't like that link because it offers quite a different view from those in the W's article! Take the origin of "Bharatanatyam": if you care to read what that "nasty Medhahari's page" contains, you will see that it is a much more serious and better-grounded write-up than the maimed mess that is created here. Regards. Sethumadhavan33 13:08, 1 March 2007 (UTC)[]

Dear users of the A.B. group, your argument that a particular link has to be blacklisted merely as long as it is added by a few 'sockpuppets' does not hold water if this link has been ALSO added by a number of non-'sockpuppets' (which you admitted). There are two separate issues that you, for some reason, chose to combine into one.

121.247.44.14 03:57, 2 March 2007 (UTC)[]

I urge everyone to scrutinize the Bharatanatyam article discussion page before making up their minds to indiscriminately delete everything that they don't like. Jag Ju 10:50, 4 March 2007 (UTC)[]
Here is the proof that such self-declared "spam-fighters" as A. B. have been vandalizing Wikipedia. While deleting links from classical Indian dance, our dear over-zealous spam-fighters have nevertheless left the promotional and commercial link to dancevillage.org (which only link to Barnes&Nobles shop!) and closed their eyes on the fact that the eventsindia link was about volleyball, ceramics, anything but classical Indian dance.

I believe that the admins have to seriously look into cases of vandalizing Wikipedia under the pretence of cleaning the "spam". Jag Ju 11:18, 4 March 2007 (UTC) Jag Ju 11:18, 4 March 2007 (UTC)[]

I'm pretty sure that A. B. is not a vandal, Please assume good faith in him. If these were done in error, please list a request for removal with sound reasons why they should be removed. Please try to avoid attacking anyone while doing so. Thanks. Eagle 101 02:29, 7 March 2007 (UTC)[]

outrate.net

Multi article multi IP porn spammer. WPSPAM case.--Hu12 19:39, 1 March 2007 (UTC)
[]

Permanent link to the WPSPAM page here. Eagle 101 15:50, 2 March 2007 (UTC)[]

Yes check.svg Done sorry for the delay, I'm trying to set up linux on my personal computer. Eagle 101 15:54, 2 March 2007 (UTC)[]

321books.co.uk

Repeatedly spammed site, an apparant adsense campaign on the English Wikipedia. Additions from Multiple IP's and sock accounts. more IP's and socks WPSPAM case.--Hu12 01:02, 7 March 2007 (UTC)[]

Yes check.svg Done, thank you. --.anaconda 01:14, 7 March 2007 (UTC)[]

haber80.net

massive interwiki spam via new article creation:

a few examples: http://ta.wikipedia.org/wiki/Osmaniye http://ml.wikipedia.org/wiki/Osmaniye http://yi.wikipedia.org/wiki/Osmaniye --Versageek 12:14, 7 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 15:44, 7 March 2007 (UTC)[]

tinyurl.us

url shrinking site - spammed here --Versageek 23:17, 7 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:32, 9 March 2007 (UTC)[]

lonympics.co.uk

Chronic spammer Newuser123 has used at least 57 accounts to spam lonympics.co.uk links across a wide range of en.wikipedia articles for months since first being confronted in August 2006. Still at it within the last week.[174][175][176][177]

--A. B. (talk) 07:43, 8 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:33, 9 March 2007 (UTC)[]

liveeyetv.org

w:en:Special:Contributions/66.212.64.234 keeps spamming his/her blog on articles about music groups: [178] [179] [180] [181] [182] [183] [184] [185] [186] [187]

82.66.36.11 21:23, 8 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:30, 9 March 2007 (UTC)[]

srisathyasaibookcentre.org.uk

Anonymous editors (sockpuppets?) continue to insert spam/commercial links into w:Sathya Sai Baba in spite of several reports to admin, resulting blocks, etc. Problem has been ongoing for a long time and continues: diff1, diff2, diff3, diff4, diff5, diff6. All editors are becoming exhausted with removing this spamlink that is inserted on a daily basis. Ekantik talk 01:24, 9 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:30, 9 March 2007 (UTC)[]

mp3lyrics.org

Site hosting song lyrics without permission of copyright holders. Inserted into numerous articles on en.wp. Here are some of the ones I found. --Slowking Man 02:05, 9 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:36, 9 March 2007 (UTC)[]

lyricsandsongs.com

Same as above. --Slowking Man 02:05, 9 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:37, 9 March 2007 (UTC)[]

yahoo.335-i.com/BMW

wwww.yahoo.335-i.com/BMW - url shorterner. leads to a cars sales site. spammer contribs. JoeSmack 05:13, 9 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:29, 9 March 2007 (UTC)[]

Insureme.com and VsiSoftware.com Spam on Wikipedia - Round 4

Insureme.com and affiliated sites were blacklisted last month:

Here's the latest insureme.com site that's turned up:[188]

  • auto-insurance-company.net

--A. B. (talk) 13:02, 9 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 19:17, 12 March 2007 (UTC)[]

geiz-gorilla.com

Spammed by Deutsche Telekom addresses 84.185.216.42, 84.185.249.66, and 84.185.225.217 to articles on en, es, it, sv, and possibly others. LX (talk, contribs) 14:01, 9 March 2007 (UTC)[]

Yes check.svg Done clear case of problems. Eagle 101 04:49, 10 March 2007 (UTC)[]

coffeereview.net and Yosemite spam

Links:

  • extranomical.com
  • yosemitetours.travel
  • coffeereview.net

Added by Emotionlovesyou and at least one anonymous IP that we know of, 64.142.88.201 to a range of en:wikipedia articles related to either coffee or en:Yosemite National Park. Numerous warnings and an indefinite block have not stopped the problem.[189][190]. --A. B. (talk) 03:54, 10 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 19:16, 12 March 2007 (UTC)[]

Better Solution Spam

bettersolutions.com Frequent spamming of Better Solution links on Microsoft PowerPoint, Microsoft Word and Microsoft Excel. User has been caught and banned impersonating administrationship when his links have been reverted. See [191]. Latest spamming include vandalism of external link by replacing Microsoft Office official page with Better Solution's link.

Yes check.svg Done Naconkantari 19:16, 12 March 2007 (UTC)[]

Suggestion: Disallow redirect sites

Sometimes the danish wiki has experienced linkspam to linkredirect/shortlink sites. Would it not be a good idea to disallow such sites?:

E.g.:

relurl.com/
urlkick.com/
1url.org/go/
masl.to/
lnk.in/

It is best that people directly can see the domain they are going to. --Glenn 20:54, 10 March 2007 (UTC)[]

What triggered Glenn's above comment are links to Flash versions of games added across several (if not multiple Wikipedia versions; e.g. I found the same links in de:, nn:, and no: where acticles were available). The links are added from the address ranges 89.0.0.0-89.1.255.255 and 62.90.5.192-62.90.5.223 (and possibly others).

Examples of the added links taken from da:

- Kaare 21:18, 10 March 2007 (UTC)[]

Redirect sites are prohibited. Yes check.svg Done Naconkantari 19:14, 12 March 2007 (UTC)[]

Open proxy

Another proxy being used to evade the spam blacklist: [192]. Silly, since the site being linked is not actually on the blacklist, although it has been spammed mercilessly by en:User:JB196. Just zis Guy, you know? 08:45, 11 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 19:12, 12 March 2007 (UTC)[]

kitzor.com, tinyshorturl.com gamesff.com zluf.com

Spammer on many Wikis:

Spammer spams mainly Tetris, and Pac-Man articles. From yesterday I'm trying to clean everywhere he was. Hołek 12:22, 11 March 2007 (UTC)[]

Links only to pl.wiki are here, because you can access other by interwiki... He spams everywhere on Wikipedia. (Maybe single-block for 89.0.*.* ?) Hołek 12:43, 11 March 2007 (UTC)[]
Yes check.svg Done Naconkantari 19:13, 12 March 2007 (UTC)[]

Brass India returns

This guy http://meta.wikimedia.org/w/index.php?title=Talk:Spam_blacklist&oldid=502607#Conex_India_linkfarms returns with new domains. Femto 14:34, 12 March 2007 (UTC)[]

aksharmetal.com
appleeou.com
appleinternational.com
appleinternationalenggworks.com
appleinternational.co.in
appleinternational.co.in
appleinternational.in
appleworldwide.com
autobrassonline.com
brassbuildinghardware.com
brasscableglands.com
brasselectrical.com
brasselectricalaccessories.com
brasselectricalcomponents.com
brassfastenersindia.com
brass-fasteners.com
brass-fasteners-india.com
brassfittingcomponents.com
brassinsertsbrassnutsbrassbolts.com
brass-inserts-fasteners-india.com
brassneutrallinks.com
brassnuts-brassbolts.com
brasspartsindia.com
brassparts.ind.in
brassprecisionparts.com 
brass-screws-bolts-nuts.com
brassterminalconnectors.com
brassturnedcomponents.com
cableglands-india.com
cable-glands-asia.com
cableglandsworldwide.com
hindustanimpex.com
jamnagaronline.com
rathodind.com
sahajanandbrass.com
skynetindia.info
siliconbronzefasteners.com
shivombrass.com
webnettechindia.com
Yes check.svg Done Naconkantari 19:10, 12 March 2007 (UTC)[]

Insureme.com and VsiSoftware.com Spam on Wikipedia - Round 6

Insureme.com and affiliated sites were blacklisted last month:

Here's the latest insureme.com site that's turned up:[193]

  • free-car-insurance-quote.net

--A. B. (talk) 16:24, 14 March 2007 (UTC)[]

topjobnet.org

A recent outburst of spamming for the same Tramadol site on en.wikipedia from multiple IPs:

All have been spamming the same link to topjobnet.org/tramadol/index.html across multiple medical and chemical articles. The entire topjobnet.org domain appears to be down right now, but it might be worth seeing if the domain should be blacklisted or just this particular URL. Thanks, Gwernol 11:33, 15 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 14:02, 15 March 2007 (UTC)[]

www.chabad-baden.de

Having been inserted repeatedly for a long time into de.wikipedia articles concerning judaism-related topics. The site does not have more or better content than the de.wp articles have; mostly, the pages linked aren't even written in german language which is one major argument for/against external links at least on de. The owner of the website and the chabad of Baden have been informed about this twice without any reaction, the link is inserted even more often after contacting those. See contributions of

and many others.

Thanks, rdb (de) 14:04, 15 March 2007 (UTC)

Yes check.svg Done Eagle 101 18:59, 16 March 2007 (UTC)[]

israelnewsagency.com

Israelnewsagency.com is a website run by Joel Leyden, who is banned for spamming and disruption. Links keep creeping in, often from sockpuppets of en:User:Israelbeach, see en:Wikipedia:Long term abuse/Israelbeach. These links are generally reverted. The site is not a news agency as such, it's more of a blog. I assumed good faith in my latest dealing with an obsessive user over a link [198], but www.israelnewsagency.com/wikipediaterrorismiranrussialeninisraelcensorship4877031407.html makes it clear that this was just another sock. I believe the time for assuming good faith in respect of this site is past. It is not a reliable source, it represents itself as a news agency but has no known editorial process and reprints as fact pretty much anything the Israeli Government sends it. Links have been added to en: many times, also to no: (e.g. [199]) and nl: (e.g. [200]). Some of the content linked has been copy-paste lifted from other sources, e.g. [201] which was an interview from the Jerusalem Post. Since we have spamming, conflict of interest, more than one project, offsite copyright violation, attacks on named Wikipedians and the site is not itself a reliable or attributable source, I think blacklisting is probably justified at this point. Just zis Guy, you know? 15:50, 15 March 2007 (UTC)[]

  • Oh, and outing anonymous Wikipedians, too, per www.israelnewsagency.com/wikipedialibelslandersexwoolencyclopedia48330508.html, so that's a 100% prohibition on linking in enWP for the time being. Just zis Guy, you know? 23:57, 15 March 2007 (UTC)[]
Yes check.svg Done Naconkantari 03:34, 17 March 2007 (UTC)[]
    • Sorry if this is a stupid question, but what exactly was done? I don't see that a link has been added to the content page. Just trying to figure out the system here. Thanks. en:user:woggly09:20, 18 March 2007 (UTC)[]
  • Not sure if it was edit-conflicted or something, but it's not on the blacklist. Just zis Guy, you know? 13:14, 18 March 2007 (UTC)[]
Should be added now, I must have been distracted Naconkantari 18:39, 18 March 2007 (UTC)[]
Cool, thanks. Just zis Guy, you know? 20:10, 18 March 2007 (UTC)[]

Insureme.com and VsiSoftware.com Spam on Wikipedia - Round 7

Insureme.com and affiliated sites were blacklisted last month:

Here's the latest insureme.com site that's turned up:[202]

  • affordable-car-insurance.net

--A. B. (talk) 15:58, 16 March 2007 (UTC)[]

This site has not ties with insureme.com. It seems that this webmaster has copied insureme.com website after joining there affiliate program. This is against there policies and they are working on correcting. Check out the domain owner. Not related.

Yes check.svg Done - we are getting tons of spam from affiliate websites, this is just another case. Eagle 101 20:12, 23 March 2007 (UTC)[]

controlling21.de, controlling21.eu

Different t-dialin IPs are abusing de.wikipedia.org for search engine optimization in a really dumb way. Some diffs:

Blocking the IP did not work because these are dialin IPs of the largest provider in Germany. --217.232.148.195 07:37, 18 March 2007 (UTC)[]

Doesn't give up:

--217.232.148.195 07:43, 18 March 2007 (UTC)[]

Also has domains controlling21.net, controlling21.com, controlling21.org, controlling21.biz, controlling21.at, controlling21.ch, controlling21.info, multimedia-beratung.de that could be used for future spamming. --217.232.148.195 08:22, 18 March 2007 (UTC)[]
Goes on spamming: [210] --217.232.151.3 21:15, 20 March 2007 (UTC)[]
Older spam: [211] --217.232.151.3 21:21, 20 March 2007 (UTC)[]
Yes check.svg Done all of them. Eagle 101 20:19, 23 March 2007 (UTC)[]

beam.to

This is a url redirect site, it's already in 5 mainspace pages on en.wp --Versageek 12:51, 18 March 2007 (UTC)[]

Yes check.svg Done. MaxSem 16:36, 19 March 2007 (UTC)[]

mortgagequeen.us

www dot mortgagequeen dot us (not .com) has been spammed at intervals over the last week or so to English wikipedia; each time by a different anon IP, who does not return calls. The current technique is to replace an existing link in the references section, to disguise the spam. Recorded instances (there may be others): 69.228.86.173 Hard money loan, 69.228.88.201 Mortgage, Commercial mortgage, 69.228.94.209 Commercial mortgage 69.228.91.42 Hard money lender, Hard money loan, Mortgage, Commercial mortgage -- Notinasnaid 12:04, 19 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 20:40, 23 March 2007 (UTC)[]

chabad-baden, again

A week ago, I requested to add the domain "chabad-baden.de" to the blacklist, which was done by User:Eagle 101. Now, after having http://de.wikipedia.org/w/index.php?title=Schawuot&diff=prev&oldid=29390917 removed] all links to the site, a user having before added links to chabad-baden.de now shows up with links to de.chabad.org immediately after my removal. de.chabad.org is (at least in its content) obviously exactly the same site as the one before, so I request to block this as well. Thanks, rdb (de) 23:44, 19 March 2007 (UTC)

Yes check.svg Done Eagle 101 20:41, 23 March 2007 (UTC)[]

anemony.info, nasturciya.info, kolokolchiki.info, orchideya.info, magnoliya.info, tyulpan.info, vasilyok.info, landysh.info, azaliya.info, lutik.info

Multiple related domains spammed the sonikmatter wiki - History

Spam is widespread see google for a list of other affected wiki's. Some examples [212], [213] [214]

The Puppeteer 04:08, 21 March 2007 (UTC)[]

Yes check.svg Done looks like an issue, I don't know if the blacklistings here will affect all of these wikis, but it will get at least a few of them. In any case that is blatant spam. Eagle 101 20:49, 23 March 2007 (UTC)[]
Note I did run a check of the top 15 language wikipedia's for all these links, I did not find any existing spam. Eagle 101 20:52, 23 March 2007 (UTC)[]

Insureme.com and VsiSoftware.com Spam on Wikipedia - Round 8

Insureme.com and affiliated sites were blacklisted February 2007:

Here's the latest insureme.com site that's turned up:[215][216]

  • affordable-auto-insurance.biz

--A. B. (talk) 00:48, 22 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 20:57, 23 March 2007 (UTC)[]

pressarchive.net

Frame site added by around 20 spam sockpuppets so far. The frame adds a pop-up ad and a frame around the linked website (in all 250 additions so far - a website (www.moviehole.com) that features interviews with actors). Each spammer registers for a generic username, adds around 10 links, and never returns. Socks use similar edit summaries and idiosyncratically format the url (e.g. www.PressArchive.net ex. diff ex. diff). Full list of spammers and techniques on WP Project spam. So far all 250 additions have been frame link-throughs to www.moviehole.com - in particular, interviews with actors. Nposs 02:36, 23 March 2007 (UTC)[]

Yes check.svg Done constant spam issue. If there are legit links, use the whitelist. Eagle 101 21:20, 23 March 2007 (UTC)[]

Business English Solutions International, LLC spam

See:

Links:

  • allthingschina.com
  • AllthingsChina.org
  • alternateroutestravel.com
  • businessesi.com
  • businessesi.org
  • chinahearts.com
  • chinaschoolreview.org
  • chinatravelfacts.com
  • ChinaVisaService.org
  • eslfranchise.com
  • esljobschina.com
  • eslschoolreview.com
  • eslz.net
  • hunanteach.com
  • journeyeast.org
  • journeywest.org
  • learnchinesenow.net
  • studenttravelchina.org
  • teach-and-travel.org
  • teach-in-Beijing.com
  • teach-in-zhejiang.org
  • TEFLjobs.org
  • z-visa.com

Previous remedies did not stop editor from resuming his campaign today.[217]

I suggest blacklisting the domains this time. --A. B. (talk) 04:46, 23 March 2007 (UTC)[]

Yes check.svg Done seems like we have no choice in the matter. Eagle 101 21:22, 23 March 2007 (UTC)[]

tz4.com

Seems to be a spammer. See:

--81.189.41.189 08:47, 25 March 2007 (UTC)[]

Yes check.svg Done - seems to be a minor problem on that wiki :) Eagle 101 14:40, 25 March 2007 (UTC)[]

VsiSoftware.com, Inc. and Insureme.com spam -- round 3

Insureme.com and affiliated sites were blacklisted last month:

Now we have still another insureme.com site that's turned up:[218][219]

  • lowcostcarinsurance.us

--A. B. (talk) 08:14, 8 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 05:34, 9 March 2007 (UTC)[]

Hang on please! Have you researched this before blacklisting? Show me one place where insureme.com has placed a direct link. These sites you are listing are not insureme.com. They are simply affiliates through a third company. Insureme.com has no control of this without know these sites are spamming. They should be warned first. Now as for the sites such as lowcostcarinsurance.com they should be blacklisted for spamming. As for insureme it should not be unless it has spammed itself. Many major companies have this third party as an affiliate manager. I know two sites in which they are in the top 10 websites on the Internet. We shouldn't ban them. What we will have to do is take these sites on a case by case basis and blacklist them. It may be more work, but at least we will meet wikipedia.org standards. If insureme.com has spammed please place the link. If this is the case they should be blacklisted.

And the value of the link? Eagle 101 21:52, 13 March 2007 (UTC)[]

Insureme.com has many link values. They are listed as the third listing in google.com for auto insurance. In addition to this they have more than 50 registered auto insurance agents. They have a blog that is linked to more than 11,000 websites in which webmasters are seeking experts opinions. They have many valuable auto insurance tools that are trademarked and resources to all 50 states. I am not saying add these sites to an external link. But, some editor or user may want to provide this valuable content to wikipedia.org. They want be able to because you blacklisted a website in which has not spammed wikipedia.org. Like I stated earlier insureme.com hasn't spammed directly. Quit being lazy and whitelist this website!!! We will have to take the affiliates who spam and blacklist them on a case by case basis. But, if I was to go out and buy a website and join there affiliate program and spam wikipedia.org why should insureme.com have to pay for this. I should be the one owho gets blacklisted since I spammed.


  1. 1 Guideline for wikipedia.org - Only blacklist for widespread, unmanageable spam.

So don't blacklist simply because of no link value. If this was the case you would need to put a blacklist on 95% of all the websites on the web.

Problem is that we are getting spammed many times by related links, Someone blacklists one, another one pops up. Eagle 101 18:38, 23 March 2007 (UTC)[]

I understand but this isn't going to fix the problem. We must deal with these sites on a one on one basis. They are all duferent urls. So by blacklisting insureme.com who has not made one edit doesn't make sense.

Insureme.com and VsiSoftware.com Spam on Wikipedia - Round 5

Insureme.com and affiliated sites were blacklisted last month:

Here's the latest insureme.com site that's turned up:[220]

  • classic-car-insurance.biz

The same IP also spammed:

  • free-mortgage-calculator.info[221]

--A. B. (talk) 22:29, 13 March 2007 (UTC)[]

Yes check.svg Done Naconkantari 22:48, 13 March 2007 (UTC)[]

Please quit putting insureme.com as part of this spammer. This website is not insureme.com it is free-mortgage-calculator.info and classic-car-insurance.biz. This has nothin g to do with insureme.com. If we think this is part of insureme.com then we need to start one websites running google ads. Google does not own the websites running google adsense. Insureme.com doesn't own the sites running there ads either.

Change title above to


free-mortgage-calculator.info and classic-car-insurance.biz

Err, actually it is from those companies, I'm wondering why we are constantly getting hit with related spam. All these sites are related to Insureme.com in some way. Eagle 101 18:40, 23 March 2007 (UTC)[]

They are related to insureme.com as sites with google adsense ads are to google. We shouldn't punish google or insureme.com for not making edits.

Porn linkspam

Sites to block are laurenphoenix.net , lanitodd.org , masonmarconi.org , monicasweet.org , nicolevoss.org , rayveness.org , sydneecapri.net , terabond.org , and tianalynn.org Persistent anon vandal keeps adding links to these porn websites to the stars' articles - in the case of the Lauren Phoenix link, it has been added and removed 10 times since March 12/07 (edits one, two, three, four, five, six, seven, eight, nine, and ten). The IP that is used is different each time so it's not possible to block the IP address, and I fear that this vandalism will continue unless the links are blocked. Tabercil 23:11, 26 March 2007 (UTC)[]

partially done - I blacklisted laurenphoenix.net. I would appreciate evidence on the other set. Just show me the page history, and a few sample diffs of each. Thanks. Eagle 101 04:14, 27 March 2007 (UTC)[]

K... here we go:

Lani Todd: one, two, three, four.

Mason Marconi: one, two, three, four.

Rayveness: one, two, three, four

Sydnee Capri: one, two, three, four.

Tiana Lynn: one, two, three, four.

Monica Sweet: one, two, three, four.

Nicole Voss: one, two, three, four.

Tera Bond: one, two, three, four.

Is that enough? If not, just clarify and I'll be more than happy to give you whatever info you need. This idiot's consumed too much of my time and patience. Okay? Tabercil 04:43, 27 March 2007 (UTC)[]

Yes check.svg Done, thank you. --.anaconda 09:15, 27 March 2007 (UTC)[]

freemasonwatch.freepress-freespeech.com

freemasonrywatch\.org is on the list, but they have a new redirect: freemasonwatch.freepress-freespeech.com

Please block this one too
Grye 01:09, 27 March 2007 (UTC)[]
Yes check.svg Done redirect site. Eagle 101 04:09, 27 March 2007 (UTC)[]
thanks much Grye 04:13, 27 March 2007 (UTC)[]

anxietydetective.org and 3 others

23 different articles spammed on en.wikipedia[222], [223], [224] + more on the French, German, Swedish and Portuguese Wikipedias by at least 3 different accounts. Domains:

  • moviemirth.com
  • geocities.com/anxietydetective
  • anxietydetective.org
  • producerdb.com

Thank you, --A. B. (talk) 03:04, 27 March 2007 (UTC)[]

Yes check.svg Done - clear cut Eagle 101 04:06, 27 March 2007 (UTC)[]
Thanks! --A. B. (talk) 04:45, 27 March 2007 (UTC)[]

Insureme.com and VsiSoftware.com Spam on Wikipedia - Round 9

Insureme.com and affiliated sites were blacklisted February 2007:

Here's the latest insureme.com site that's turned up:[225][226][227]

  • affordable-car-insurance.biz
  • instant-auto-insurance-quote.net

--A. B. (talk) 14:12, 24 March 2007 (UTC)[]

Yes check.svg Done - this affiliate spamming has to stop. Eagle 101 22:35, 24 March 2007 (UTC)[]
As a side note, I've got an experimental heuristics-based bot looking for these sites, which should hopefully catch any more additions. Shadow1 22:38, 24 March 2007 (UTC)[]
Thanks for blacklisting, Eagle 101, and thanks for your work on your heuristical robot! --A. B. (talk) 04:44, 27 March 2007 (UTC)[]

A.B. Why do you have to put a link to robomarketplace.com? This is only helping that website out. Please remove this link and place the internal link for wikipedia.org so we can reference the great work eagles did.

Err, I did not make the robot, that is Shadow1. Eagle 101 23:50, 27 March 2007 (UTC)[]
Ooops --and thanks Shadow1! --A. B. (talk)

"International Myopia Prevention Association"

  • myopia.org
  • nearsightedness.org
  • pinholeglasses.org
  • preventmyopia.org

Uses multiple accounts to spam these links across 4 different articles despite numerous warnings.[228][229][[230][231][232][233]

Note that there's at least one more account that added link to another article -- I just haven't found it yet.

On a POV campaign with the en:Consumers Union and several vision-related articles. --A. B. (talk) 18:10, 27 March 2007 (UTC)[]

See also the lengthy discussion at en:Talk:Consumers Union -- it's not as if this guy hasn't had the rules repeatedly explained to him over and above his user page warnings. --A. B. (talk) 19:44, 27 March 2007 (UTC)[]
Yes check.svg Done I'm going to go ahead and do this, there are 0 instances of this link, except for those on the english wiki. (I checked the top 15 wikipedias). Eagle 101 22:33, 27 March 2007 (UTC)[]
Thanks! --A. B. (talk) 01:28, 28 March 2007 (UTC)[]

thebestof.co.uk spam

These links were spammed across many British articles last year. In January 2007, we got heartfelt pledges not to add these links anymore without getting permission from other editors on article talk pages:

I guess he forgot; see these subsequent edits:

Short of protecting a bunch of pages and/or blocklisting large IP ranges, I don't see much alternative to blacklisting. --A. B. (talk) 20:38, 27 March 2007 (UTC)[]

Yes check.svg Done Eagle 101 22:36, 27 March 2007 (UTC)[]
Thanks, --A. B. (talk) 01:29, 28 March 2007 (UTC)[]

musiciandictionary.com / celebritydictionary.com

Two IPs belonging to 20th Century Fox (216.205.224.64 and 216.205.244.5) were posting this stuff on practically every big WP-edition in january and were blocked on some projects after not stopping when kindly asked to. Since I just saw that one of them just started again, I think it's time to stop them (the links aren't any good anyway, just a wiki where people can post stuff we'd consider vandalism).

Examples:

--62.224.91.5 23:41, 27 March 2007 (UTC)[]

Yes check.svg Done - cross wiki spam, these cases can get real annoying, real quick. Eagle 101 02:58, 28 March 2007 (UTC)[]

67.43.4.31

67.43.4.31 redirects to www.theshadowsun.net which is banned.

Yes check.svg Done - thats not good, we blacklist the name domain, and now we have to worry about the proxies, and its IP. ——(admin) Eagle101 Need help? 21:56, 28 March 2007 (UTC)[]

Additions: Not done

iamtryingtobelieve.com

Mostly spammed at en:Parepin and associated talk pages, as part of a viral campaign that is spreading towards English Wikipedia. Zscout370 02:55, 15 February 2007 (UTC)[]

Please provide diffs showing this, thanks. Eagle 101 18:04, 15 February 2007 (UTC)[]
X mark.svg Not done Eagle 101 17:04, 6 March 2007 (UTC)[]

axweb0.org

Same were added to user talk pages:

And other url by same users:

  • www.topmeds10.tu1.ru diff by dereek.
Looks like all of these edits (see linked page, all originate from one IP) /axweb0.org. I'm creating a sub page as to not flood this page out with my 72 results. Try blocking the IP, it looks to be the only IP related in this, set autoblock to "on" to prevent more socking. I will do it, for now consider this X mark.svg Not done unless we start to have serious problems. Eagle 101 14:19, 13 February 2007 (UTC)[]
Just a note, this guy has now switched usernames, and must be on a new IP, as I desabled editing from all users on that last block. Eagle 101 17:22, 13 February 2007 (UTC)[]

New cases:

and shortly after, the spam-target changed:

Those are all on the same IP range, simply block 89.20.97.0/24 and the problem is gone :D Eagle 101 04:19, 15 February 2007 (UTC)[]

I've added the domain to Shadowbot's blacklist. Shadow1 22:12, 22 February 2007 (UTC)[]

Ok, then in that case, this is X mark.svg Not done Eagle 101 22:23, 22 February 2007 (UTC)[]

child-support-laws-state-by-state.com

Repeatedly spammed[236][237][238] this link across multiple articles on en.wikipedia using at least 3 different anonymous accounts. Warnings and blocks have had no effect other than to get him to shift IPs. See en:Wikipedia talk:WikiProject Spam#The Christmas child support spammer: child-support-laws-state-by-state.com for details. (Permanent link) --A. B. (talk) 18:28, 15 February 2007 (UTC)[]

Wow! that guy has at least 24 /16 ranges available to him... (76.166.0.0 - 76.190.255.255) I am going to suggest that we do a block on the 76.190.0.0/16 76.186.0.0/16 range for a few days and see if he has any more ranges open to him. If not then we can just use blocks to resolve this. If so, then we are going to have to consider blacklisting the domain. Eagle 101 18:33, 15 February 2007 (UTC)[]
Comcast is the biggest (or 2nd biggest) broadband provider in the United States. You'd be blocking 65,000+ IPs -- probably all Comcast in the Dallas/Ft. Worth metropolitan area and maybe more of Texas. I suggest you may want to raise this question on en:WP:ANI first. We don't want our user names on Slashdot or Fark this afternoon. --A. B. (talk) 19:04, 15 February 2007 (UTC)[]
See Slashdot:
Qatar: 866,000 people Dallas/Ft. Worth Metroplex: 5.8 million --A. B. (talk) 19:17, 15 February 2007 (UTC)[]
I've made sure it was a soft block, now lets just hope they don't go to socking ;). Eagle 101 21:04, 15 February 2007 (UTC)[]
X mark.svg Not done - looks like alternative means worked here. Eagle 101 20:10, 22 February 2007 (UTC)[]

www.adultfyi.com

a hardcore pornographic page, has been added on de:WP

Do you have diffs of it being spammed to a point beyond normal admin tools?
This request was most likely by de:Benutzer:Augiasstallputzer. This site was used as a source/reference for articles on de.wp, it was not being spammed. Seems he simply does not like the links or has other problems with them. Anyway, they should be discussed elsewhere. This is the wrong place. --Rosenzweig 20:39, 16 February 2007 (UTC)[]
Regardless it won't get blacklisted without evidence. Eagle 101 20:55, 16 February 2007 (UTC)[]
Eagle 101 is correct. Just because we don't like the content the site don't deserve a blacklist. If we want google to use our blacklist we must keep the highest standards. We fight and protect against spam. 72.24.79.46 (talk • contribs) 03:19, 17 February 2007 (UTC)... see also: en:talk • en:contribs
X mark.svg Not done - no evidence presented showing how or why this should be added. Eagle 101 20:10, 22 February 2007 (UTC)[]

bottleguy.com

Yet another shock site, most likely from GNAA.

Examples of vandalism with this site

Just block the IP, (or request it be blocked). Unless it is multiple IP (preferably ranges), there is no need to blacklist. Just treat it as normal vandalism. Eagle 101 17:06, 6 March 2007 (UTC)`[]
X mark.svg Not done, no evidence of spamming. Naconkantari 19:29, 12 March 2007 (UTC)[]

phonetrace.org

Yet another shock site, most likely from GNAA.

Examples of vandalism with this site

Just block the IP, (or request it be blocked). Unless it is multiple IP (preferably ranges), there is no need to blacklist. Just treat it as normal vandalism. Eagle 101 17:06, 6 March 2007 (UTC)[]
X mark.svg Not done, no evidence of spamming Naconkantari 19:29, 12 March 2007 (UTC)[]

www.achieve360points.com

Users hitting articles in an alphabetical fashion. An advertisement-laden site that has no use for the articles they add them to.—Ryūlóng (竜龍) 09:49, 4 March 2007 (UTC)[]

Lovely, any more users, or did they give up? Eagle 101 17:11, 6 March 2007 (UTC)[]
X mark.svg Not done, return if continues. Naconkantari 19:19, 12 March 2007 (UTC)[]

www.qmhandbuch.de

Commercial site for Quality Assurance Handbook (german) adding his link all few weeks to all kind of QM/QA realated articles. It was just remove today again from

Therefore, I would like request to blacklist this domain to save further work. Thanks in adance. AV 10:17, 9 March 2007 (UTC)[]

X mark.svg Not done please just try blocking the IP behind it. Looks like it is just one account and its related IP address. Thanks, and if there are further issues with this link feel free to post here. Eagle 101 04:44, 10 March 2007 (UTC)[]

XXX links

  • best-teens.bebto.com [239]

--Milda 06:28, 14 March 2007 (UTC)[]

    • X mark.svg Not done The blacklist won't stop that type of spam unfortunatly it only stops hyperlinks. Eagle 101 20:10, 14 March 2007 (UTC)[]

*.obsq.info

Constant spamming for the past few days. Check the history on this page. [240]

Is that the only place where that link is being abused? If so why don't you try a semi-protection or a protection. If it is not the only page, can you please demonstrate where it has been spammed elsewhere? Thanks Eagle 101 14:57, 26 February 2007 (UTC)[]
My wiki is the only place I know of. It might be spammed else where. They just hit me again after you wrote your comment. I have protected the page... but I bet they will move to my other pages soon enough. They are obviously using proxies as the IP is different but the web links are the same. Thanks anyway.... 65.67.98.193 21:34, 26 February 2007 (UTC)[]
Ok, come back and let someone know if they move on. Cheers! Eagle 101 21:45, 26 February 2007 (UTC)[]
X mark.svg Not done - looks like it is not needed.Eagle 101 23:50, 27 March 2007 (UTC)[]

spilsbycycles.co.uk

The small town of en:Spilsby has a bicycle shop, whose domain name is spilsbycycles.co.uk.

  1. Spamvertised on 11 May 2006.
  2. And again on 12 June.
  3. And again on 15 June.
  4. And again on 18 August.
  5. And again on 16 September.
  6. And again on 21 October.
  7. And again later on the same day.
  8. And again on 1 March 2007.
  9. And again on 14 March.
  10. And again on 17 March.

Only a single article (as far as I've noticed), but the spamming is persistent and also destructive (perhaps in a feeble effort to hide the fact that he's adding something, he often destroys other links). Done from a number of different IP numbers. This is very small potatoes by the nauseating standards of other spammers listed here, but on the other hand it's pretty simple: the domain name is that of an unremarkable retailer. -- Hoary 06:01, 18 March 2007 (UTC)[]

     sorry

hi, i just want to let you know that i am sorry for the edits i have made to the "spilsby" town page on wikipedia. i kept putting the link to that cycles shop on there, then when i checked back a few days later etc it had vanished. i only kept putting it back on because i thought i must have entered it wrongly. i did'nt know that there were messages for me about it, i have only just clicked on this 'discussions page' and did not know you could talk to other users.

from now on all of my edits will be for the greater good, i have turned over a new leaf, and don't want to upset anyone. i have added a picture i took of the bus stop being built in the town, and a few other links (non-commercial) about the town etc.

i am not up on all this technical stuff, and did'nt mean to make you mad.

many thanks http://en.wikipedia.org/wiki/User:C.thompson

PS...i have written to the person who kept removing the link to applogise, also added the above paragrahps to a discussion board on the spilsby article too

X mark.svg Not done - isolated incident. Eagle 101 20:18, 23 March 2007 (UTC)[]

irishabroad.com

Linkspamming at English Wikipedia:

[241] [242] [243] [244] [245]

among several others

HometownBuffet 14:53, 23 March 2007 (UTC)[]

I also saw some spamming of this domain but then I also saw many links added in good faith by regular editors. Some of the pages also appear to meet en:WP:RS. The whole linking pattern was so odd that it made me think this domain might undergoing a en:Joe job from someone that did not like them. I was going to investigate, starting with a query on the Irish WikiProject but have been unable to do so due to events off-Wikipedia. I think this domain requires very careful and thorough investigation before blacklisting, including, if necessary, a possible checkuser on some of the parties on both sides of the issue. I'm sorry I don't have the time to work on this. --A. B. (talk) 15:27, 23 March 2007 (UTC)[]
No-cross wiki spamming going on. revert-block-ignore for the time being would be my recomendation. J.smith 16:22, 23 March 2007 (UTC)[]
X mark.svg Not done for now, if we get more issues then we can deal with it. :) Eagle 101 21:33, 23 March 2007 (UTC)[]

chapmancentral.co.uk

The following web site http://www.chapmancentral.co.uk/ is completely about one non-notable person and has been added to Wikipedia by that person. It is entirely self promotion and has been added to Wikipedia despite self promotion via spamming being in breach of Wikipedia guidelines. --XX7 14:16, 24 March 2007 (UTC)[]

You've complained in several places about JzG and now I see you want to blacklist his web site. It looks like there are about 700+ of these links in en.wikipedia but none in the article space. All the ones I spot-checked were embedded in his signature on pages such as talk pages when he signed posts in the past. It was OK to do this in the past but then in late 2005/early 2006 the community consensus on user signatures changed; JzG stopped some time before then. See en:Wikipedia:Signatures. --A. B. (talk) 19:15, 24 March 2007 (UTC)[]
I have very justifiably criticised JzG because he has used obvious fallacies, illogic and trivialities in order to try to interfere and disrupt proper, factual and reasoned blacklist evaluations in which he had no reason to be involved. He has appeared to be intent on claiming anything on the blacklist to be spam even when it obviously isn't. According to what you have just written he was probably Wikipedia's most prolific spammers, unnecessarily adding his self promoting web site over 700 times to Wikipedia when it clearly wasn't needed. That demonstrates ridiculous double standards. --XX7 20:21, 24 March 2007 (UTC)[]
No, it just demonstrates a common practice on article and user talk pages several years ago and used by many other editors. --A. B. (talk) 20:54, 24 March 2007 (UTC)[]
It doesn't demonstrate common practice anymore because it was considered completely wrong. There is no justification in somebody attempting to add a self promoting web site over 700 times. It is especially hypocritical when that same person falsely tries to claim that just about all other web sites are spam even when they clearly aren't. --XX7 21:27, 24 March 2007 (UTC)[]
X mark.svg Not done - no evidence of current ongoing spam that I can see from this. Eagle 101 22:37, 24 March 2007 (UTC)[]

therichprince.com

14 articles spammed by at least two different accounts on en.wikipedia[246][247] despite warnings. --A. B. (talk) 02:00, 25 March 2007 (UTC)[]

X mark.svg Not done (for now) Mmm good canidate for en:User:Shadowbot. Lets try that first, I will add it. Eagle 101 03:09, 25 March 2007 (UTC)[]
Thanks, --A. B. (talk) 04:45, 27 March 2007 (UTC)[]

subtitry.ru

and opensubtitles.org, subs.com.ru, titulky.com, subbiee.com, divxplanet.com, hot.ee/subland/, sub.divx.ee, subtitles.images.o2.cz, legendas.tv, andrepcg.lusopt.info

Links to copyright violating material (subtitles). Website fails WP:EL and WP:C guidelines/policies. Very same sites have been blacklisted.

Please provide evidence where these domains have been spammed. Naconkantari 04:25, 15 March 2007 (UTC)[]
OpenSubtitles.org - under each wikipedia language section on the word "subtitles". And even twice here: http://es.wikipedia.org/wiki/Subt%C3%ADtulo see last 2 links. Other sites simply link to copyright violating material, therefore fail WP:EL and WP:C, as I mentioned earlier. Where should they be reported to to get them banned like other subtitles sites which were banned for this very reason? Same site blacklisted and more related discussion (whitelist request) here: http://en.wikipedia.org/wiki/MediaWiki_talk:Spam-whitelist/Archives/2007/02#AnySubs.com_.28Status:_Declined.29
X mark.svg Not done Are we actually getting spammed with them? From those I can't tell how long they have been added. If there is not a widespread spamming issue, just revert and warn the editors adding the site. Feel free to comment below and show links demonstrating spam. Eagle 101 20:10, 23 March 2007 (UTC)[]
http://es.wikipedia.org/wiki/Subt%C3%ADtulo - check last two links in "Enlaces externos" section - same site referenced twice. If this is not spamming - you tell me what it is.

Linkspam on customs related Wikipedia articles

In the german Wikipedia I am looking for commercial link spam in customs related articles and delete it instantly, see [248]. Could anyone please add these comercial links into this blacklist: www.internetverzollung.de, aes.riege.de, www.zollbeamte.de, import-handys.info, www.ausfuhrxpress.de? Thanks! --217.85.252.201 13:10, 18 March 2007 (UTC) (WP de-user rollo_rueckwaerts)[]

X mark.svg Not done (for now) Have they been spammed, can you show that there is a pattern of abuse :) Feel free to post below here and show a pattern. Thanks. Eagle 101 20:25, 23 March 2007 (UTC)[]

heart-valve-surgery.com

The website has a wealth of information, but exists only to promote and sell a book. The link has been repeatedly added to pages within the English cardiac surgery realm from multiple IP addresses (never from registered users). The links have been removed multiple times, but re-added from IP addresses. Dlodge 14:44, 25 March 2007 (UTC)[]

X mark.svg Not done (but I added it to en:User:Shadowbot. Ok, for now I've added this to en:User:Shadowbot's blacklist. That should take care of this english wikipedia only problem. If shadowbot can't handle it, then I will blacklist it here. Eagle 101 20:39, 25 March 2007 (UTC)[]

vivid.com

Links to this pornography website being used as references by what appear to be paid possible open proxies in the Kim Kardashian article on English Wikipedia. All but one link deleted or replaced now, but when article is no longer sprotected, the spammers are expected to return, as they allege "fascism" in deletion of the links. Risker 01:52, 26 March 2007 (UTC)[]

X mark.svg Not done Let me know how this goes after the article is done being sprotected. Eagle 101 10:15, 26 March 2007 (UTC)[]

chechenpress.net

it is a site of terroristic propaganda--Jaro.p 12:03, 27 March 2007 (UTC)[]

X mark.svg Not done please feel free to present evidence of actual spamming. Eagle 101 13:50, 27 March 2007 (UTC)[]

http://www.chechenpress.net , http://www.watchdog.cz

Please add these sites to blacklist. These are terrorist related sites.--Vaya 13:49, 27 March 2007 (UTC)[]

X mark.svg Not done please feel free to present evidence of actual spamming. Eagle 101 13:55, 27 March 2007 (UTC)[]

TehLiqE

I'm not sure if it's possible to blacklist text, but

The sonikmatter wiki and many other wiki's have been vandalized recently with the text "Hacked By TehLiqE". See History 1 and History 2 for examples. I've tried banning the member and going to the extent of protecting the discussion pages is going a bit far (it would mean that proposed changes to the protected content page couldn't be readily done).

This vandal has hit many other wiki's as well. Check the number of individual Mediawiki Wiki's by checking out the google search google search for Hacked By TehLiquE +MediaWiki

This vandal added the single link http://img98.imageshack.us/img98/3551/adszjgpyp6.png in the second attack, and some nonsense words in the first attack.

The Puppeteer 04:08, 21 March 2007 (UTC)[]

X mark.svg Not done we can't blacklist text. Eagle 101 20:44, 23 March 2007 (UTC)[]
I thought that might be the case. Does anyone have any other suggestions for how I might control this locally? The Puppeteer 07:19, 26 March 2007 (UTC)[]
Just treat it as normal vandalism. Eagle 101 23:50, 27 March 2007 (UTC)[]

German Wikipedia

In the german Wikipedia we have two german lawfirms which write in many lawarticles their hompepagelinks:

and

Can you put them on the spam blacklist. ? 212.95.99.129 23:46, 27 March 2007 (UTC) http://de.wikipedia.org/w/index.php?title=Personenstandsgesetz&diff=29764887&oldid=29660370 http://de.wikipedia.org/w/index.php?title=Bundeserziehungsgeldgesetz&diff=prev&oldid=29764942 http://de.wikipedia.org/w/index.php?title=Sozialhilfe_%28Deutschland%29&diff=prev&oldid=29765024[]

(German Wikipedia-user: GLGerman)212.95.99.129 23:46, 27 March 2007 (UTC)[]

X mark.svg Not done - Do you have any evidence of these being spammed in? As far as I can tell these are specific to your wiki, you have 59 instances of this link on de wikipedia. If de deems them linkspam, and we have a continuing pattern of abuse, then I will blacklist. Eagle 101 03:03, 28 March 2007 (UTC)[]

Removals: Done

urlsnip.com

Used to insert a blacklisted viartis.net link into an article. I have the removal diff but I don't know when it was added or by whom.[249] --A. B. (talk) 15:47, 18 February 2007 (UTC)[]

Yes check.svg Done Already here, see above :-). Thank you. --.anaconda 18:07, 18 February 2007 (UTC)[]

lastmeasure.zoy.org

Another shock site, currently used in vandalism by Tooj117 sockpuppets at the English Wikipedia. Example. Lastmeasure is the "THIS PERSON IS LOOKING AT GAY PORN" website. No encyclopedic value.—Ryūlóng (竜龍) 03:15, 21 February 2007 (UTC)[]

Done.{admin} Pathoschild 04:02:52, 21 February 2007 (UTC)

cdjuridico.com

Website for selling CD/DVDs about law.

Articles:

I give up listing more diffs. You can see more on these articles:

Users (may me all the same user):

Mosca 17:01, 21 February 2007 (UTC)[]

Yes check.svg Done Quite clear pattern of abuse. Eagle 101 20:21, 21 February 2007 (UTC)[]

39 related domains

The following 39 domains were spammed across 68 articles on en:wikipedia.org from 80+ anonymous, dynamically assigned Malaysian IP addresses:

  • 40weekspregnancystages.com
  • about-credit-card.com
  • about-credit-report.com
  • aboutbodybuilding.net
  • acneskincareinfo.com
  • air-purifier-and-filter.com
  • all-soccer-info.com
  • asbestos-mesothelioma-cancer-info.com
  • atkindietplan.com
  • atkins-diet.cc
  • benefit-green-tea.com
  • breast-augmentation-and-enlargement.com
  • breast-augmentation-implants.com
  • cabbage-soup-diet-plan.com
  • carpetsearch.org
  • cell-phone-blog.net
  • credit-cards-n-debt.com
  • diabetes-diabetic-diet.com
  • dietpills-information.com
  • digital-camera-technology.com
  • dsl-broadband-isp.com
  • dsl-link.com
  • edi-guide.com
  • fitness-health-plan.com
  • grapefruit-diet.org
  • hdtv-lcd-plasma.com
  • lasik-surgery-info.com
  • lasiklasereyesurgeries.com
  • lowcarb.ca
  • satellite-service-providers.com
  • skincaresinformation.com
  • south-beach-diet-information.com
  • southbeachdietprogram.com
  • tech-guide.org
  • teleconferencing-technology.com
  • the-atkins-diet.info
  • the-atkins-diet.info double Eagle 101 21:14, 21 February 2007 (UTC) []
  • vpn-info.com
  • zonedietinformation.com

See: en:Wikipedia talk:WikiProject Spam#39 domains, 80 accounts, 68 articles (permanent link) for links to all 80 anonymous IP accounts' contribution histories. 99% of the edits come from these addresses were spam additions. That discussion also lists the articles spammed as well as Google Adsense account numbers where available. Links have been removed from all pages. --A. B. (talk) 21:09, 21 February 2007 (UTC)[]

Yes check.svg Done Eagle 101 21:14, 21 February 2007 (UTC)[]
Thanks! --A. B. (talk) 21:21, 21 February 2007 (UTC)[]

Adfunk spam on Wikipedia

The following 10 domains have been spammed across at least 47 articles on en:wikipedia by at least 6 accounts:

  • adfunk.blog-city.com
  • f1rezone.tblog.com
  • fiucer.blogsome.com
  • wtslink.com
  • mylink.tblog.com
  • tech2.blogsome.com
  • yellowpages1.blogspot.com
  • health1011.blogspot.com
  • ekhye.blogspot.com
  • internumber.blogspot.com

Adfunk has at least 11 affiliated sites and I recommend blacklisting them now as well:

  • evo.blogsome.com
  • engine.blogsome.com
  • adfunk.blogsome.com
  • ms1.blogsome.com
  • gnharrod.com
  • gangstarz.info
  • tech.shoutpost.com
  • mytaxi.blog-city.com
  • myl6.blogsome.com
  • prdeal.com
  • blog.myspace.com/adfunk
    • Note: blog.myspace.com domains are already blacklisted

Given all the controversy over myspace blogs, it's possible blog.myspace.com may come off the blacklist at some point. I recommend specifically blacklisting the blog.myspace.com/adfunk domain so that it stays on the blacklist if this happens.

For more information including links to contribution histories for each spam account, see:

Thanks, --A. B. (talk) 14:34, 22 February 2007 (UTC)[]

Links have been removed from all pages except en:User talk:Tech2blog. --A. B. (talk) 14:38, 22 February 2007 (UTC)[]
Note: some of the domains listed are actually sub-domains of large hosting services such as blogspot or blogsome. I recommend blacklisting only the subdomains as listed above. --A. B. (talk) 17:11, 22 February 2007 (UTC)[]
Yes check.svg Done I've blacklisted only the domains that were actually spammed. Eagle 101 17:39, 22 February 2007 (UTC)[]
Thanks -- and I'm sorry about forgetting to take the www's out. --A. B. (talk) 19:19, 22 February 2007 (UTC)[]

Another Maximus domain for blacklisting: xatpro.com

Other Maximus Business Solutions domains were blacklisted earlier this month; see:

In tracking down unrelated Adfunk spam on en.wikipedia, I found that an IP had added a link to a known Maximus domain last May at the same time as one to a domain I missed in my earlier request.[274][275]

  • xatpro.com

Currently, there are none of these links on any pages. Thanks, --A. B. (talk) 14:49, 22 February 2007 (UTC)[]

So, is there current spamming of this? I mean May is quite a while back... Eagle 101 17:35, 22 February 2007 (UTC)[]
This spammer has been so prolific that I can't say if that link's been added since May. It very well may have. I've waded through hundreds of article edits looking for Maximus spam. If you look at the WikiProject Spam discussion, there are probably more domains I missed and there are surely many IP accounts I've missed. The Maximus spammer has been active with 11 different IPs just in this month -- that I know of:
It's safe to assume that we will being playing Whac-a-mole with these guys for a long time. I recommend blacklisting that link, but it's certainly OK if it's not for now.
--A. B. (talk) 18:30, 22 February 2007 (UTC)[]
Yes check.svg Done - Ok, sorry for missing this one! It sorta got swept under the carpet, blacklisting due to multiple IP ranges. Eagle 101 03:21, 24 February 2007 (UTC)[]

Netbizsolutions.com spam on Wikipedia

At least 15 dynamically assigned, one-session use IPs spammed 6 domains across at least 38 articles on en.wikipedia. In all but one case, these IP addresses' contributions were 100% spam only.

Domains spammed (6):

  • affiliatedirectorysite.com
  • furniture-asian.com
  • netbizasia.com
  • netbizsolutions.com
  • sixco.ws (similar to tinyurl.com)
  • templatesnew.com

Affiliated domains -- I recommend blacklisting these now as well (5):

  • activehits4u.com
  • fluxservices.com
  • hostnetbiz.com
  • impotenceherbs4impotency.info
  • impotenceherbsextract.com

For more information and for links to all the accounts' contribution histories, see:

Currently, there are none of these links on any Wikipedia pages. --A. B. (talk) 16:57, 22 February 2007 (UTC)[]

Yes check.svg Done Quite clear spamming from multiple IP ranges. Eagle 101 17:29, 22 February 2007 (UTC)[]
To clarify, I'm only adding those that have actually been spammed. Eagle 101 17:31, 22 February 2007 (UTC)[]
Thanks! --A. B. (talk) 19:17, 22 February 2007 (UTC)[]

Lost .eu "game"

Links to "lost .eu" have been repeatedly removed from the dab page Wikipedia:Lost and snuck into a number of other pages with similar names. People from http://www.lost. eu are attempting to get sign-ups for some sort of social experiment contest, which is offering $5000 for the most sign-ups.

See, for background:

--Leflyman 01:37, 23 February 2007 (UTC)[]

notdone - Try dealing this with the normal means of stopping vandalism and spam. (ie, blocks, warnigns ect). If more IP addresses start popping up, drop a note here. Eagle 101 01:45, 23 February 2007 (UTC)[]
That's interesting -- I was tracking down unrelated laptopnik.com spam out of Malaysia and Singapore today and found that in addition to those links, someone using a Hewlett-Packard IP,128.88.255.35, tracerouting to Singapore had added lost.eu links. Leflyman's 72.138.68.246 spammer is a Rogers Cable customer in Canada. Neither IP is listed on any prominent open proxy/abusive IP lists[276][277], the first thing you think of when you see such geographically diverse spamming. That this is some sort of a contest would explain what we're seeing. Based on this, I think blacklisting is going to be our only sure fix short of blocking everyone but 127.0.0.1. --A. B. (talk) 02:21, 23 February 2007 (UTC)[]
Yes check.svg Done - if this is what we really think this is, lets go ahead and blacklist, we can take it off when the contest ends. Eagle 101 02:29, 23 February 2007 (UTC)[]
--Leflyman 03:34, 23 February 2007 (UTC)[]
Thanks for mentioning those, any idea on how long the "game" is going to last? Eagle 101 04:45, 23 February 2007 (UTC)[]

geocities.com/xpw5yearslater

Same content was previously hosted on another blacklisted site - www.declarationofindependents.net, and was repeatedly inserted into Tommy Dreamer by various IPs. 81.153.129.208 02:13, 23 February 2007 (UTC)[]

Yes check.svg Done - clear evidence above of multiple IP ranges. Eagle 101 02:38, 23 February 2007 (UTC)[]

modiarte.it

Yes check.svg Done - clear case of cross wiki spam. Eagle 101 03:39, 23 February 2007 (UTC)[]

mondeducirquelausanne87.blogspot.com

Yes check.svg Done - clear case of cross wiki spam. Eagle 101 03:43, 23 February 2007 (UTC)[]

charlie-parker.org

Yes check.svg Done - clear case of cross wiki spam. Eagle 101 03:54, 23 February 2007 (UTC)[]

kit-direito.com

This domain redirects to "cdjuridico.com" already blocked. Its the same user with another IP [290] For details see previous post #cdjuridico.comMosca 08:25, 23 February 2007 (UTC)[]

Yes check.svg Done redirect site to already blacklisted site. Eagle 101 17:19, 23 February 2007 (UTC)[]

tvsylt.com

Constant linkspam in many articles on de.wp by several IPs from the 80.130.*.* range, e. g. 80.130.112.205, 80.130.92.34, 80.130.115.117, 80.130.108.19. Please take it on the blacklist at least for two months or three. --Gardini 11:07, 23 February 2007 (UTC)[]

notdone - Could you try a block of 80.130.0.0/16 first? Try it for like 31 hours and see if he comes back or not. Eagle 101 17:17, 23 February 2007 (UTC)[]
Are you serious? (scnr) You advise us to block 64K IPs belonging to a big provider to try (!) to keep out one single spammer, wo is doing this for almost a week, for one single day? Sorry, but if Gardini or I would do this block, probably at least 10 other admins would undo it immediately. Needless to say that the blocked page is totally unsuited for linking it in an encyclopaedia. --FritzG 21:26, 23 February 2007 (UTC)[]
Problem is this list is not just for encyclopedias I believe that several hundred wikis use this. I am not aware of how large the host is. Some of them have little to no contributions. See some of the blocks done on en. I've found that very short blocks tends to stop them. Though if you guys are unable to deal with it using your normal admin tools, I will blacklist, its up to you folks. I'm just suggesting alternatives.Eagle 101 21:35, 23 February 2007 (UTC)[]
I don't think this link might be useful on any Wikimedia project, so it would be nice if you blacklisted, since the spammer continues with his wicked craft: 80.130.82.210. --Gardini 11:39, 27 February 2007 (UTC)[]
And again: 80.130.73.81. --Gardini 06:47, 1 March 2007 (UTC)[]
And it doesn't come to an end: 80.130.71.98. I'd also like you to remark this edit. Would you be so kind to blacklist this URL for one eternity or two? --Gardini 20:35, 5 March 2007 (UTC)[]
Yes check.svg Done - sorry I did not see the new developments. Thanks Gardini for telling me about it on my talk. Eagle 101 22:59, 5 March 2007 (UTC)[]

*.gratuliermir.de

Hi all,

crosswiki-spam by *.gratuliermir.de, where * stands for a geografical location, like:

gratuliermir.de is gaining content (fotos etc.) from jeder-tag.de (already blacklisted), see code from this example: wismar.gratuliermir.de. Thank you. --Gunnex 17:09, 24 February 2007 (UTC)[]

Are we sure there is an active attempt to spam this? Looks like different contributors to me. 4 different IP addresses for each wiki, unless those IP addresses are being used by the same person. Eagle 101 17:49, 24 February 2007 (UTC)[]

Hi Eagle, *.gratuliermir.de flooded - for example - almost all the language wikipedia´s related to the article Bamberg. In the meantime, i did some reverts... The spamer is reverting correction at language wikipedia´s with different ip´s. Following - for example - the spam-contributions by ip 84.139.246.17: bgwiki, cawiki, etwiki, eswiki, frwiki, idwiki, itwiki, lawiki, nowiki, plwiki, ptwiki, rowiki, and - interesting - eowiki: inserted link to jeder-tag.de before blacklisted. --Gunnex 19:14, 24 February 2007 (UTC)[]

Yes check.svg Done, clear case of cross wiki spam. Eagle 101 19:22, 24 February 2007 (UTC)[]

I think, that these photos are very beautiful. Why don't you like them? --84.242.65.251 22:54, 25 February 2007 (UTC) (User:Kirk from CsWiki)[]

You might think that, but the problem is not how "beautiful" the photos are, but rather the pattern of spamming that has been going on. Eagle 101 21:47, 26 February 2007 (UTC)[]

mannbeisstfilm.de

Persistent spamming on de:WP in several cases: [291] (already been cautioned) [292] [293] [294] (1 edit) [295] (1 edit) [296] (1 edit) There are more IPs with just 1 edit, but I can't be bothered to find/list them all. Thanks. --Michael 09:09, 26 February 2007 (UTC)[]

Yes check.svg Done (sorry I missed this earlier) Eagle 101 19:39, 27 February 2007 (UTC)[]

internet-history.tz4.com

Yes check.svg Done - cross wiki spam. Eagle 101 15:28, 26 February 2007 (UTC)[]

pavelnedved.110mb.com

Yes check.svg Done - cross wiki spam. Eagle 101 15:32, 26 February 2007 (UTC)[]

statisticsoftheworld.page.tl

Yes check.svg Done - cross wiki spam. Eagle 101 15:36, 26 February 2007 (UTC)[]

parkourstyle.com

Yes check.svg Done - cross wiki spam. Eagle 101 15:39, 26 February 2007 (UTC)[]

texaspoker.tk

Yes check.svg Done - cross wiki spam. Eagle 101 15:42, 26 February 2007 (UTC)[]

Some more, that I've just noticed. Eagle 101 16:08, 26 February 2007 (UTC)[]

ainfos.ca

Yes check.svg Done - cross wiki spam Eagle 101 15:50, 26 February 2007 (UTC)[]

dcestonian.com

Yes check.svg Done - cross wiki spam Eagle 101 15:56, 26 February 2007 (UTC)[