Jump to content

Wikiproject:Antispam/Archives/2023/Bulk text reference addition spam

From Meta, a Wikimedia project coordination wiki



Highly prolific cross-wiki spam sock farm, perhaps from Russia. This farm almost always uses what appear to be automatically generated usernames about 8 characters long. Their MO is to add about 4kB of text and several legitimate appearing references to disguise at least one spam reference. The content is unreliable given the scale of abuse and is often supported by content marketing blogs.

Examples of spam edits are linked from https://spamcheck.toolforge.org/by-domain?q=cleverrabbits.com .

Edits on en.wp can be different.



Nanașu47, Dellmatron et. al



There's a lot more. MER-C 16:41, 3 June 2023 (UTC)[reply]


Second batch. MER-C 10:25, 11 June 2023 (UTC)[reply]

Thanks @MER-C! I assume it's better to wait with global blacklisting until en:Wikipedia:Sockpuppet investigations/Dellmatron is done and the full extent of SEO sockpuppets is visible? By the way there are more SEO links related to Frandish (CA · xwiki · sc · COIBot report), Onicahad (CA · xwiki · sc · COIBot report), Gailesh (CA · xwiki · sc · COIBot report) and Inspame (CA · xwiki · sc · COIBot report):

Johannnes89 (talk) 19:54, 12 June 2023 (UTC)[reply]

Batch 4


Yeah, there's more. I need to break this up to be manageable. MER-C 18:56, 14 June 2023 (UTC)[reply]

Batch 5


Already blacklisted


I wrote a program to fetch the domains added by these accounts. The list was 1300 long and had a lot of noise in it. I'm sick of wading through this spam, so I'll call this done. MER-C 18:49, 27 June 2023 (UTC)[reply]

Noting that Creetey spammed both AvaTrade (see section above) and yavitrina.ru. MER-C 16:23, 1 July 2023 (UTC)[reply]
Accounts to this point locked. MER-C 18:26, 24 July 2023 (UTC)[reply]

Batch 6


MER-C 18:26, 24 July 2023 (UTC)[reply]