From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search

BOT generated XWiki report. The bot reports here when:

  • More than 66% of the cross-wiki placing and addition of this link has been performed by one editor, and the link has been added to 3 or more wikimedia sites.
  • The user is adding more than 2 domains to more than 2 wikis, but they all reside on the same server.
  • The links are exclusively added by IPs to more than 2 wikis.
  • Several IPs are adding the link to more than 2 wikis, but the IPs are in a close (/24) range.


User(s) earlier in report:

Last additions by user(s):

Monitoring rules[edit]
  • xxxxxxxxxxxxxxxx (XWiki, only IPs,,

Additions in database of this link.

  1. 2008-06-30 22:42:30 (UTC): User es: (talk - contribs; 7) to es:Distrito de Pucará (diff - undo - de Pucará&action=history hist - NOT TOP - Not in top edit).
    Added links:
    - www.xxxxxxxxxxxxxxxx (C, X)
  2. 2009-02-11 21:19:51 (---): User en: (talk - contribs; 10) to en:Inquisition (diff - undo - hist - NOT TOP - Not in top edit).
    Added links:
    - xxxxxxxxxxxxxxxx/books?vid=oclc01544457&id=gg61oahgoxkc&pg=pa1&dq=%22antoinette+marie+pratt%22 (C, X)
    - xxxxxxxxxxxxxxxx/books?vid=oclc04600051&id=-oi3zm9lkuoc&printsec=titlepage&dq=%22letters+on+the+spanish+inquisition++%22 (C, X)
  3. 2009-02-12 23:12:41 (UTC): User en: (talk - contribs; 7) to en:Josef Mengele (diff - undo - Mengele&action=history hist - NOT TOP - Not in top edit).
    Added links:
    - xxxxxxxxxxxxxxxxxxxx/serial_killers/history/mengele/research_5.html (C, X)
    - xxxxxxxxxxxxxxxxxxxx/serial_killers/history/mengele/4b.html (C, X)
    - xxxxxxxxxxxxxxxx/mengele.htm (C, X)
  4. 2009-02-17 01:03:43 (UTC): User en: (talk - contribs; 7) to en:Josef Mengele (diff - undo - Mengele&action=history hist - NOT TOP - Not in top edit).
    Added links:
    - xxxxxxxxxxxxxxxxxxxx/serial_killers/history/mengele/4b.html (C, X)
    - xxxxxxxxxxxxxxxx/mengele.htm (C, X)
    - xxxxxxxxxxxxxxxx/mengele.htm (C, X)
    - xxxxxxxxxxxxxxxxxxxx/serial_killers/history/mengele/research_5.html (C, X)
  • All 4 edits shown.

Log entry for the Spam blacklist:

\bxxxxxxxxxxxxxxxx\b                   # ADMINNAME # {{sbl-diff|#}}; see [[User:COIBot/XWiki/xxxxxxxxxxxxxxxx]]

Request Status - Closed

See COIBot report for more details. --COIBot 01:05, 17 February 2009 (UTC)

This is not a domain; why is it being reported here?  — Mike.lifeguard | @en.wb 01:06, 17 February 2009 (UTC)
Check the diff: "... url=http://XXXXXXXXXXXXXXXX/Mengele.htm ... ". It is indeed not a domain, but this seems to be used here as a placeholder. Actually not sure what to do, it is used in a reference, but this is not verifyable in any way .. --Dirk Beetstra T C (en: U, T) 10:56, 18 February 2009 (UTC)
It is not anymore in any top edit, I am closing this. --Dirk Beetstra T C (en: U, T) 10:57, 18 February 2009 (UTC)
I imagine the regex should be looking for URLs of the normal kind... ie ones with a domain and TLD at least. Am I wrong? (I suppose that may be difficult to do - I've obviously not looked at the problem as closely as you have.  — Mike.lifeguard | @en.wb 17:42, 18 February 2009 (UTC)
The regex is (?:https?|ftp|irc|gopher|telnet|nntp|worldwind):\/\/[^\s\]\[\{\}\\\|^`<>]+ .. I could complicate that one, but this works fine.
This is a) something we don't want, and b) is blacklistable, it is fine that it is reported here.
Now to the heart of it .. did you actually click http://XXXXXXXXXXXXXXXX/Mengele.htm ?? --Dirk Beetstra T C (en: U, T) 17:49, 18 February 2009 (UTC)
Additional hint, take of Mengele.htm: http://XXXXXXXXXXXXXXXX/ --Dirk Beetstra T C (en: U, T) 17:58, 18 February 2009 (UTC)
How is that possible?  — Mike.lifeguard | @en.wb 18:09, 18 February 2009 (UTC)

I already checked, not added in the last so long. And I would be happy to know how that is possible, the url does not resolve to an IP, but does redirect there? may I suggest to blacklist '^x{4,}$'? --Dirk Beetstra T C (en: U, T) 18:13, 18 February 2009 (UTC)
I asked someone, who said that the browser automatically adds ".com" after the X's. - Kaare 18:20, 18 February 2009 (UTC)
My Firefox browser added .no, not .com - it must be going after language preferences? My Opera browser added .com. MSIE didn't add anything. Both Opera and MSIE are older versions. --Jorunn 18:46, 18 February 2009 (UTC)
Yes, dependant on language preference or individual configuration, according to how the feature, if available, works in the browser. It can probably be disabled (it could in mine). - Kaare 18:55, 18 February 2009 (UTC)
Putting "xxxxxx\/" (that is 6 times 'x' as the last 6 characters before a '/') on the blacklist now. - Andre Engels 12:53, 10 March 2009 (UTC)