MediaWiki talk:Spam Blacklist

 '''[ Report a spammer here ]


 * The spam blacklist extension is now working on all Wikia. You can request new URLs be added to the filter by listing them here. Please state the IP (or username) used to spam and the wiki it happened on.

See also Help:Spam.

When to Add to the Blacklist?
Should we add URLs after one instance of a spam attack, or wait for more? Also, I'm not sure how much of the URL is best? Advice please? As a specific example, should I add the two URLs just posted (and already removed) to the Central Wikicity's home page? I don't want to slow the loading of every saved page, but I'd rather not have to clean-up the same URLs again. --CocoaZen 17:50, 2 Jun 2005 (UTC)


 * It depends what they are and whether they are definitely spam. Something like this is an obvious spam attack, but someone adding one innapropriate URL to a page is often not. If you're unsure, you can also add it temporarily. It might be worth checking Google for other wikis with the spam URL. If +wiki Google: SpamURL.com +wiki has hits, then it should be blacklisted. If an edit adds dozens of different URLs, adding just one of those to the blacklist will normally prevent future attacks since the edits are being made by bots who won't know to just remove the blacklisted URL from their edit. Angela (talk) 00:00, 8 Jun 2005 (UTC)

Checking contribs across wikis
I now have a somewhat buggy script that will check edits across multiple wikis. It doesn't work perfectly, but can be used for finding cases of the same user spamming multiple Wikicities, so please report the username or IP of spammers here as well as links to the diffs where they spammed. Angela (talk) 02:49, 21 Jul 2005 (UTC)

Any chance of an alphanumeric list?
Maybe a one-off extraction as a first port of call? Maybe no value?? (Some of us are a bit ignorant about these things) Robin Patterson 01:40, 1 Sep 2005 (UTC)
 * Please clarify. An alphanumeric list of what?  Are you suggesting that the blacklist be ordered?
 * That might be a good idea.
 * If that is what you meant, I'd like to understand the potential benefit.  We only add sites when they become problems.  After they've been put on the list, they shouldn't be able to be a problem.  Is that what you mean?  What value do you think it would have?  I wouldn't have any problem with it, but don't really want to go to the work of organizing what we have without a reason.
 * Another potential problem with alphabetizing is that it depends on how much of the url is used. Sometimes we have to make a choice about whether to post xyz.objectionable-site.tla or the more generic objectionable-site.tla that would also cover abc.objectionable-site.com.  As you can see, each choice would appear in a different place in an alphabetized list.
 * Again, it's not that I'm disagreeing with your suggestion, it's just that I don't understand it. Maybe someone else will have a better response.  --CocoaZen 02:09, 1 Sep 2005 (UTC)


 * I don't mind, but I often update the page from the version on Meta, so I don't promise to keep it alphanumeric, but someone else can if they find it useful. Angela (talk) 15:25, 2 Sep 2005 (UTC)

Hydrocodone sites - block all?
There are multiple hydrocodone sites which have been spammed. Would it make sense to blacklist all sites with "hydrocodone."? Normally it would be overkill, and it seems to me that assuming good will works well for most cases, but after multiple violations, I'm proposing this stronger measure. If someone comes up with a non-advertising, legitimate site, we could remove this blanket block. --CocoaZen 03:37, 6 Oct 2005 (UTC)


 * Yes, blocking all those is fine. Just don't block cialis. I considered doing so before until I realised it"s the middle of the word "socialism" which has legitamate links, especially on the socialism wiki. :) Angela


 * Wow, that explains some odd looking stuff I've seen elsewhere - just depends if someting can be identified as a delimited word, though the perishers usually mis-spell stuff like that to get though spam filters Ace of Risk

Alaska (again)
Spam from ip and ip   which was first commented with "Problem?" and then on the second edit "Reported vandalism." I didn't know how to use the rollback feature so after a few tries I simply re-edited the last good version and saved it. The vandalism happened on Talk:Alaska, same as the other times. --Doug 03:17, 23 Nov 2005 (UTC)


 * If you're logged in, you should see a "rollback" link when you look at the user's contributions, or at a diff page. Angela (talk) 14:16, 3 Dec 2005 (UTC)

overzealous spam filter
Reverting the latest vandalism here was troublesome, because of the above link being blacklisted. I tried to enclose it in tags so it doesn't register on the spam filter but had to end up breaking the link. This may need to be looked into at some point. nae'blis (talk) 19:28, 14 Dec 2005 (UTC)


 * I think it's useful that the spam is blocked even on talk pages like this. It's easy enough to just type lucky.to without the preceeding http:// that makes it a link. --Angela (talk) 23:33, 15 Dec 2005 (UTC)

User: Fuckface
For his attacks on the Star Wars Fanon wiki on virtually everryone. I would like to have him banned. |User: MaulYoda 20:53, 30 May 2006 (UTC)


 * The Spam Blacklist is only for blocking spammed links, and won't do anything to stop a page move vandal. I've pokled some staff to have him blocked. Splarka 21:27, 30 May 2006 (UTC)


 * Those can now be reported at Cross wiki user blocks. Angela (talk)

cygnus-x1.net
Spamming Memory Alpha for a long time from various IPs. Jaz 19:59, 4 June 2006 (UTC)


 * Added. Angela (talk) 22:23, 4 June 2006 (UTC)


 * There seem to be a lot of false positives for this. Are you sure that site isn't wanted on Memory Alpha? Angela (talk) 02:49, 17 June 2006 (UTC)

Another request

 * perso.wanadoo.es, from IP address 89.0.34.10 on Wookieepedia. &mdash;Silly Dan (talk) 10:59, 10 June 2006 (UTC)
 * Added. Szoferka 11:01, 10 June 2006 (UTC)


 * I'm not sure about this one. I ran the spam cleanup script today and there were a lot of false positives. Genuine users seem to be linking to that site quite a lot. Are you sure it's worth blacklisting it? Angela (talk) 05:07, 17 June 2006 (UTC)

yandex.ru
Why is Yandex blacklisted? This is one of the most popular search engines for Russian-speaking users. Please delete this from list. Edward Chernenkoo a 11:20, 24 June 2006 (UTC)


 * It's been removed now, so feel free to revert the removal of it on your wiki. Angela (talk) 11:35, 24 June 2006 (UTC)

Another good site blocked
http:// web.archive.org/web/20040212142552/http:// www.anzwers.org/free/tech/movies.html

Spam filter creates too many problems as it is. There should be ways to whitelist certain URLs for wiki admins. And the damn page that is shown when a suspicious link is added doesn't even link to any relevant pages explaining what the blacklist is. Paranoid 07:34, 3 August 2006 (UTC)


 * The whitelist problem has been addressed on MediaWiki. We should have MediaWiki:Spam-whitelist messages in the next upgrade (see Wikipedia:MediaWiki:Spam-whitelist for example). --Splarka (talk) 08:05, 3 August 2006 (UTC)

bookhe.info
I've just realized that I've been seeing this here and there and not thinking about it. Mainly because I have only seen on a few user pages. User:Beahah69 on Education is one, User:Shipheak25 on Cascadia. In each case, a user id matching the user page has been used, but only the one line has been placed, and the page being linked to looks rather suspicious. If you're like me, you probably haven't been paying too much attention to userpages. Looks like someone has decided to take advantage of that.--Kirk 21:38, 8 August 2006 (UTC)

Since I last wrote, I must of come across another ten of these. Only two had been previously taken care. --Kirk 22:30, 8 August 2006 (UTC)


 * adds it* --Splarka (talk) 00:18, 9 August 2006 (UTC)


 * See my post about this on the mailing list. People should watch out for this sort of user page spam. Angela (talk) 10:39, 16 August 2006 (UTC)

list of users spam
http://genealogy.wikia.com/wiki/Special:Listusers List of users on the genealogy wiki contains a series of graffitti type "user names" beggining with a string of "!" symbols presumably intended to ensure that the names will be displayed at the top of the list.--Bill 19:48, 16 August 2006 (UTC)


 * This seems to be more pervasive than I initially thought. The same "!" is used to begin many usernames on the Wikipedia UserList as well.  In this case most are simply a string of "!" symbols, but some are clearly the same as those graffitti type names appearing on the Genealogy Wiki. Also, on the genealogy wiki, the total number of entries in this list of users well exceeds the number of articles posted.  I suspect someone is just flooding the list with fictious user names.


 * Special:Listusers is the same on every wikia, as Wikia has a shared user database. Just ignore them. --Splarka (talk) 01:45, 17 August 2006 (UTC)


 * Use Special:Activeusers instead since that only shows people who have edited your wiki. Angela (talk) 11:48, 27 August 2006 (UTC)

And here we go again with more Uncyc Spam!
EvilZak took care of a bunch more spam pages on Uncyc from multiple open proxies and from these URLs: 2abdurah\.org 2ebetvsehss\.org 2begemoss\.org 2cerila\.org 2demans\.org &mdash;Hinoa 19:05, 20 August 2006 (UTC)
 * Added. Thank you for your report. DCLXVI 19:13, 20 August 2006 (UTC)

Removed from the blacklist
There is a bug appearing at the moment, possibly because the list is too long. Adding more entries causes everyone to get errors on saving. I've removed the following 20 URLs to allow us to add active ones. They will need replacing when the bug is gone. If you are adding more URLs and get an error on saving the list, then please remove some from the list straight away and add them here to be replaced later. Thanks -- sannse (talk) 20:22, 20 August 2006 (UTC)


 * These have been re-added since the new extension allows the regex to be longer. Angela talk 00:57, 5 October 2006 (UTC)

On Wookieepedia:
IP address User:200.63.213.2 made spam links to www\.mp3sonido\.com and squirrelht\.tripod\.com: not sure if the latter can be added to the blacklist, though. &mdash;Silly Dan (talk) 12:04, 31 August 2006 (UTC)


 * I'll add those now. Angela (talk)

Also: www.\special-ringtones.\net, courtesy of User:219.138.199.178. &mdash;Silly Dan (talk) 01:52, 8 September 2006 (UTC)


 * Added. Angela (talk) 07:49, 8 September 2006 (UTC)

Work at home/Usa jobs
Had one on Wiki 24 this morning. You can see the deleted page if you look quick enough. ^_~ Spammer advertised these two domains:
 * work-at-home.sauiu.info/
 * usa-jobs.pgfkk.info/

--StBacchus 14:08, 4 September 2006 (UTC)


 * I'll add those now. Thanks for reporting them. Angela (talk) 14:19, 4 September 2006 (UTC)

Possible spam
http://genealogy.wikia.com/wiki/Talk:Main_Page/

Looks like graffitti, no meaningful content for site. by an anonymous user 69.31.86.59


 * "Talk:Main_Page/" (with the incorrect / at the end) is a surprisingly common target for spammers. I guess someone coded their spam bot wrongly. I'll add the links from that page and delete it. Thanks for reporting it. Angela (talk) 17:43, 5 September 2006 (UTC)


 * http://lotr.wikia.com/wiki/Talk:Main_Page/ is a similar spam page. Added by 83.149.236.106. Tjoneslo 03:39, 10 September 2006 (UTC)


 * Thanks. That's blacklisted already and I've deleted the page. Angela (talk)

non-spam URLs
no-ip\.info block too many non-spam URLs.--LungZeno(talk) 01:35, 12 September 2006 (UTC)


 * Ok, I'll unblock that. Please let me know if there are any spam sub-domains of no-ip.info which do need blocking. Angela (talk) 03:36, 12 September 2006 (UTC)

newcasino.pl and buyviagra.pl
Spam on gameinfo.wikia.com from 80.53.77.131

Page: Template:Furtherinfo

Target URLs: www.newcasino.pl and various pages at www.buyviagra.pl. -- Ray Chason 05:26, 16 September 2006 (UTC)

Vandal user: Millipedes crawl
see http://act.wikia.com/wiki/Special:Contributions/Millipedes_crawl

"Millipedes crawl" moved Warnings to MINISTRY OF LOL and uploaded MINISTRY OF LOL graphic to replace Ndars_logo.jpg

Both changes have been reversed and the user blocked.

--jwalling 20:01, 18 September 2006 (UTC)

Repossesed
Vandalism on the genealogy wiki http://genealogy.wikia.com/wiki/Main_Page, and user page for WMWillis. I will revert the pages, but suspect spammer will return.Bill 17:32, 29 September 2006 (UTC)


 * I've asked the tech team to help with this since they may be able to block all links with the http:// trick in them. Angela (talk) 03:36, 30 September 2006 (UTC)

Spam on Wookieepedia
Via w:c:Starwars:User:86.122.188.147, hidden spam links to lovelyass\.info. &mdash;Silly Dan (talk) 13:28, 30 September 2006 (UTC)

Encyclopædia Dramatica
The spam filter blocked this URL in the Hungarian Spamwiki (in humour section):  http://www.encyclopediadramatica.com/index.php/Spam  Why? --blogadmin 12:17, 4 October 2006 (UTC)
 * Encyclopedia Dramatica is blocked becouse of porno spam hotlinked from there. Szoferka 12:28, 4 October 2006 (UTC)


 * That was recently removed, so this shouldn't be a problem anymore. Are you still finding it is blocked? Angela (talk) 13:11, 4 October 2006 (UTC)


 * Not yet. Thank you. --blogadmin 14:53, 4 October 2006 (UTC)

Dragaera.wikia.com main page vandalized with linkspam
203.22.204.159 was the culprit.

No previous contributions to that wiki.
 * He also have been here. I got now problem with saving blacklist, Jason is looking into it. Szoferka 23:03, 4 October 2006 (UTC)

wikihumor ovh org
Apparently there had been a divisive split in the Polish Uncyclopedia community, with one group remaining on Nonsensopedia and the other leaving for wikihumor.ovh org? I'm unsure of the details of this one (as this is going on in Polish and I never learned any foreign languages) but I would like to know why one fork in this mess has been added to this spam blacklist. However bitter the situation has become, I'd suspect that a fork of an existing Uncyclopedia does not belong in the same category as yet another h3rb@lV1AGRA!!!!! spam site. Any reason why this wasn't discussed first, or why it isn't possible to leave the Polish politics out of the spam blacklist? --carlb 15:12, 5 October 2006 (UTC)
 * There's no two groups. There's big Nonsensopedia community and one 12 years old kid, whos parents buyed him a server space. Wikihumor is not even a spork: Nonsensopedia community is sure that is just piece of shit. Wikihumor is also not the Uncyclopedia, it's just wiki maded by overexcitable kid. We have ignored him some time ago, and we don't wanna to feed him, also don't wanna to watch him. I'm sure Wikihumor is not in the same category that Viagra spam, but Spam Blacklist if for many categories of variable accidents. Spam is not often discussed before blacklisting, so this time was similarly. Szoferka 18:58, 5 October 2006 (UTC)

Spam from Duke Humper
Duke Humper has committed massive vandalism on the "Case for a Vegan World" wiki in the last 12 hours, defacing 3 pages by, in each case, blanking all content and posting pornographical images:

31 October 2006 * (diff) (hist). . Non-Human animals consume much more food energy than they provide in food‎; 12:22. . Duke Humper (Talk | contribs) * (diff) (hist). . Veganism Benefits Human Health‎; 12:21. . Duke Humper (Talk | contribs) * (diff) (hist). . Animals can be raised in conditions which allow them to express natural behaviours and humanely killed‎; 12:21. . Duke Humper (Talk | contribs)

The Vegan wiki has had no editors for some time, so it particularly needs attention to control vandalism. Greenwoodtree 23:50, 31 October 2006 (UTC)
 * He needs to be blocked globally. Szoferka 00:45, 1 November 2006 (UTC)

spumy.info
Spammed the Final Fantasy wiki:


 * spumy.info

--Rat 11:55, 5 November 2006 (UTC)


 * Thanks. I've added it to the blacklist. Angela talk 12:09, 5 November 2006 (UTC)

Numeric Spam Back Again
We hope 15:30, 2 December 2006 (UTC) Was added to an old Talk page:

http://petdiabetes.wikia.com/index.php?title=Talk:Main_Page&diff=13024&oldid=12485

Revision as of 06:17, 2 December 2006 (edit) 81.177.14.26 (Talk | block) (→Potter/Diabetes) Next diff → Potter/Diabetes Yes, because once people find themselves here, they are in the same situation as on either FDMB or canine message board--either new to diabetes or experienceing some type of problem with it and are looking for answers. Once they enter the wiki, they can then have a look at where they want to go--getting them not to feel intimidated and to come in is important.

We hope 20:32, 25 Nov 2005 (UTC)

Kathy 9371089716037838357773

The numbers were added to my signature. Have rolled the page back but wanted to make others aware that the "numbers game" seems to be back in business at Wikia.

Kathy

Wikia Signed-In Spambots
We hope 01:27, 9 December 2006 (UTC)

59.107.67.223

194.150.253.181

211.234.93.146

213.42.21.77

213.42.2.11

Different IPs,--some from UK, China and Middle East--all signed in as registered users by IP# spamming the same Pet Diabetes Page in the same section.

Thanks!

Kathy

Spam/vandalism
On Wookieepedia, User:GHE's only contribution was a weblink to urlcut\.com/raul654, which turns out to be some sort of browser crashing GNAA troll site. May already be listed on the spamlist, since he used the http:// trick. &mdash;Silly Dan (talk) 13:28, 16 December 2006 (UTC)

Virus domain names
I think it'd be a good idea to block the virus/malware domain listed in F-Secure's malware domain list. It can be viewed by clicking that link or as text (TXT) file in this address: http://www.f-secure.com/export/sites/fs_global_site/security_center/Domain_Blacklist.txt

Nothing major, but I'd like to see those addresses blocked since Warezov virus is active one.

Uhh...I hope that made some sense. If not, blame it on the cold that I catched yesterday. --Peace. Out. Moff Phoenix (Mofference) (Don't feed the trolls) 13:35, 25 December 2006 (UTC)

Removed site from the blacklist
The biggest Polish Star Wars encyclopedia "Ossus" -www.ossus.pl has been added to the blacklist. The only reason was that one user changed Main Page of Empirepedii and added link to Ossus. Please delete this from list. DantE 10:05, 13 January 2007 (UTC)
 * I've replied by e-mail. Szoferka 14:50, 13 January 2007 (UTC)