MediaWiki talk:Spam Blacklist

 '''[ Report a spammer here ]


 * The spam blacklist extension is now working on all Wikia. You can request new URLs be added to the filter by listing them here. Please state the IP (or username) used to spam and the wiki it happened on.

See also Help:Spam.

When to Add to the Blacklist?
Should we add URLs after one instance of a spam attack, or wait for more? Also, I'm not sure how much of the URL is best? Advice please? As a specific example, should I add the two URLs just posted (and already removed) to the Central Wikicity's home page? I don't want to slow the loading of every saved page, but I'd rather not have to clean-up the same URLs again. --CocoaZen 17:50, 2 Jun 2005 (UTC)


 * It depends what they are and whether they are definitely spam. Something like this is an obvious spam attack, but someone adding one innapropriate URL to a page is often not. If you're unsure, you can also add it temporarily. It might be worth checking Google for other wikis with the spam URL. If +wiki Google: SpamURL.com +wiki has hits, then it should be blacklisted. If an edit adds dozens of different URLs, adding just one of those to the blacklist will normally prevent future attacks since the edits are being made by bots who won't know to just remove the blacklisted URL from their edit. Angela (talk) 00:00, 8 Jun 2005 (UTC)

Checking contribs across wikis
I now have a somewhat buggy script that will check edits across multiple wikis. It doesn't work perfectly, but can be used for finding cases of the same user spamming multiple Wikicities, so please report the username or IP of spammers here as well as links to the diffs where they spammed. Angela (talk) 02:49, 21 Jul 2005 (UTC)

Any chance of an alphanumeric list?
Maybe a one-off extraction as a first port of call? Maybe no value?? (Some of us are a bit ignorant about these things) Robin Patterson 01:40, 1 Sep 2005 (UTC)
 * Please clarify. An alphanumeric list of what?  Are you suggesting that the blacklist be ordered?
 * That might be a good idea.
 * If that is what you meant, I'd like to understand the potential benefit.  We only add sites when they become problems.  After they've been put on the list, they shouldn't be able to be a problem.  Is that what you mean?  What value do you think it would have?  I wouldn't have any problem with it, but don't really want to go to the work of organizing what we have without a reason.
 * Another potential problem with alphabetizing is that it depends on how much of the url is used. Sometimes we have to make a choice about whether to post xyz.objectionable-site.tla or the more generic objectionable-site.tla that would also cover abc.objectionable-site.com.  As you can see, each choice would appear in a different place in an alphabetized list.
 * Again, it's not that I'm disagreeing with your suggestion, it's just that I don't understand it. Maybe someone else will have a better response.  --CocoaZen 02:09, 1 Sep 2005 (UTC)


 * I don't mind, but I often update the page from the version on Meta, so I don't promise to keep it alphanumeric, but someone else can if they find it useful. Angela (talk) 15:25, 2 Sep 2005 (UTC)

Hydrocodone sites - block all?
There are multiple hydrocodone sites which have been spammed. Would it make sense to blacklist all sites with "hydrocodone."? Normally it would be overkill, and it seems to me that assuming good will works well for most cases, but after multiple violations, I'm proposing this stronger measure. If someone comes up with a non-advertising, legitimate site, we could remove this blanket block. --CocoaZen 03:37, 6 Oct 2005 (UTC)


 * Yes, blocking all those is fine. Just don't block cialis. I considered doing so before until I realised it"s the middle of the word "socialism" which has legitamate links, especially on the socialism wiki. :) Angela


 * Wow, that explains some odd looking stuff I've seen elsewhere - just depends if someting can be identified as a delimited word, though the perishers usually mis-spell stuff like that to get though spam filters Ace of Risk

Alaska (again)
Spam from ip and ip   which was first commented with "Problem?" and then on the second edit "Reported vandalism." I didn't know how to use the rollback feature so after a few tries I simply re-edited the last good version and saved it. The vandalism happened on Talk:Alaska, same as the other times. --Doug 03:17, 23 Nov 2005 (UTC)


 * If you're logged in, you should see a "rollback" link when you look at the user's contributions, or at a diff page. Angela (talk) 14:16, 3 Dec 2005 (UTC)

overzealous spam filter
Reverting the latest vandalism here was troublesome, because of the above link being blacklisted. I tried to enclose it in tags so it doesn't register on the spam filter but had to end up breaking the link. This may need to be looked into at some point. nae'blis (talk) 19:28, 14 Dec 2005 (UTC)


 * I think it's useful that the spam is blocked even on talk pages like this. It's easy enough to just type lucky.to without the preceeding http:// that makes it a link. --Angela (talk) 23:33, 15 Dec 2005 (UTC)

User: Fuckface
For his attacks on the Star Wars Fanon wiki on virtually everryone. I would like to have him banned. |User: MaulYoda 20:53, 30 May 2006 (UTC)


 * The Spam Blacklist is only for blocking spammed links, and won't do anything to stop a page move vandal. I've pokled some staff to have him blocked. Splarka 21:27, 30 May 2006 (UTC)


 * Those can now be reported at Cross wiki user blocks. Angela (talk)

cygnus-x1.net
Spamming Memory Alpha for a long time from various IPs. Jaz 19:59, 4 June 2006 (UTC)


 * Added. Angela (talk) 22:23, 4 June 2006 (UTC)


 * There seem to be a lot of false positives for this. Are you sure that site isn't wanted on Memory Alpha? Angela (talk) 02:49, 17 June 2006 (UTC)

Another request

 * perso.wanadoo.es, from IP address 89.0.34.10 on Wookieepedia. &mdash;Silly Dan (talk) 10:59, 10 June 2006 (UTC)
 * Added. Szoferka 11:01, 10 June 2006 (UTC)


 * I'm not sure about this one. I ran the spam cleanup script today and there were a lot of false positives. Genuine users seem to be linking to that site quite a lot. Are you sure it's worth blacklisting it? Angela (talk) 05:07, 17 June 2006 (UTC)

yandex.ru
Why is Yandex blacklisted? This is one of the most popular search engines for Russian-speaking users. Please delete this from list. Edward Chernenkoo a 11:20, 24 June 2006 (UTC)


 * It's been removed now, so feel free to revert the removal of it on your wiki. Angela (talk) 11:35, 24 June 2006 (UTC)

Another good site blocked
http:// web.archive.org/web/20040212142552/http:// www.anzwers.org/free/tech/movies.html

Spam filter creates too many problems as it is. There should be ways to whitelist certain URLs for wiki admins. And the damn page that is shown when a suspicious link is added doesn't even link to any relevant pages explaining what the blacklist is. Paranoid 07:34, 3 August 2006 (UTC)


 * The whitelist problem has been addressed on MediaWiki. We should have MediaWiki:Spam-whitelist messages in the next upgrade (see Wikipedia:MediaWiki:Spam-whitelist for example). --Splarka (talk) 08:05, 3 August 2006 (UTC)

bookhe.info
I've just realized that I've been seeing this here and there and not thinking about it. Mainly because I have only seen on a few user pages. User:Beahah69 on Education is one, User:Shipheak25 on Cascadia. In each case, a user id matching the user page has been used, but only the one line has been placed, and the page being linked to looks rather suspicious. If you're like me, you probably haven't been paying too much attention to userpages. Looks like someone has decided to take advantage of that.--Kirk 21:38, 8 August 2006 (UTC)

Since I last wrote, I must of come across another ten of these. Only two had been previously taken care. --Kirk 22:30, 8 August 2006 (UTC)


 * adds it* --Splarka (talk) 00:18, 9 August 2006 (UTC)


 * See my post about this on the mailing list. People should watch out for this sort of user page spam. Angela (talk) 10:39, 16 August 2006 (UTC)

list of users spam
http://genealogy.wikia.com/wiki/Special:Listusers List of users on the genealogy wiki contains a series of graffitti type "user names" beggining with a string of "!" symbols presumably intended to ensure that the names will be displayed at the top of the list.--Bill 19:48, 16 August 2006 (UTC)


 * This seems to be more pervasive than I initially thought. The same "!" is used to begin many usernames on the Wikipedia UserList as well.  In this case most are simply a string of "!" symbols, but some are clearly the same as those graffitti type names appearing on the Genealogy Wiki. Also, on the genealogy wiki, the total number of entries in this list of users well exceeds the number of articles posted.  I suspect someone is just flooding the list with fictious user names.


 * Special:Listusers is the same on every wikia, as Wikia has a shared user database. Just ignore them. --Splarka (talk) 01:45, 17 August 2006 (UTC)


 * Use Special:Activeusers instead since that only shows people who have edited your wiki. Angela (talk) 11:48, 27 August 2006 (UTC)

And here we go again with more Uncyc Spam!
EvilZak took care of a bunch more spam pages on Uncyc from multiple open proxies and from these URLs: 2abdurah\.org 2ebetvsehss\.org 2begemoss\.org 2cerila\.org 2demans\.org &mdash;Hinoa 19:05, 20 August 2006 (UTC)
 * Added. Thank you for your report. DCLXVI 19:13, 20 August 2006 (UTC)

Removed from the blacklist
There is a bug appearing at the moment, possibly because the list is too long. Adding more entries causes everyone to get errors on saving. I've removed the following 20 URLs to allow us to add active ones. They will need replacing when the bug is gone. If you are adding more URLs and get an error on saving the list, then please remove some from the list straight away and add them here to be replaced later. Thanks -- sannse (talk) 20:22, 20 August 2006 (UTC)

aaff\.net aagg\.net aajj\.net aauu\.net aazman\.com abcink\.com abiao\.name abnehmen\.freeweb-hosting\.com about-travels\.host\.sk accessories-car\.com aclas\.com acmetranslation\.com ad-ope\.com ad-ope\.com ad-www\.com adipex adipex.shengen\.ru adp6\.co\.uk adult-categories\.info adult\.dynu\.net adultchat

same for these ones: -amateur\.com -bidet\.com -cam-chat\.com -cam\.comp -cam\.us -cams\.com -cartoon\.com -casino-chips\.com -chat-live\.com -chat-room\.com -chat-room\.us -chat\.com -diaeten\.de\.vu -frauentag\.de\.sr -handys\.de -hentai\.net -hire\.co\.uk -horoskop -kaufen\.de -kochrezepte\.de\.vu -luxuries\.co\.uk -outlet\.de -partner\.de -partner\.nl -partner\.se -preisvergleich\.de -testen\.de\.ms -topliste\.com -watch-china\.org -webcams\.com

Angela (talk) 12:07, 27 August 2006 (UTC)

and these: 001003\.com 00856\.com 010b\.info 021boy\.com 0302\.net 0s48\.info 10000s\.com 100comm\.com 100free\.com 100jjy\.com 101hosters\.com 101languages\.net 11033\.com 120hiv.com 125mb\.com 15016\.com 158hk\.org 15ern\.com 167bt\.com 169xp.com 16bit\.at 17ip\.com 17train\.com 18019\.com 18servers\.com 18show\.cn 18show\.net 18show\.org 1annonce\.com 1car\.cn 1stOK\.com 1stOK\.com 1stOK\.com 211\.157\.35\.153 212cafe\.com 21cnbj\.com 21cnbj\.com 21cnmanager\.com 21jewelry\.com 21jewelry\.com 23mr\.com 25340\.rapidforum\.com 28k8\.com 2kdata\.com

On Wookieepedia:
IP address User:200.63.213.2 made spam links to www\.mp3sonido\.com and squirrelht\.tripod\.com: not sure if the latter can be added to the blacklist, though. &mdash;Silly Dan (talk) 12:04, 31 August 2006 (UTC)


 * I'll add those now. Angela (talk)

Also: www.\special-ringtones.\net, courtesy of User:219.138.199.178. &mdash;Silly Dan (talk) 01:52, 8 September 2006 (UTC)

Work at home/Usa jobs
Had one on Wiki 24 this morning. You can see the deleted page if you look quick enough. ^_~ Spammer advertised these two domains:
 * work-at-home.sauiu.info/
 * usa-jobs.pgfkk.info/

--StBacchus 14:08, 4 September 2006 (UTC)


 * I'll add those now. Thanks for reporting them. Angela (talk) 14:19, 4 September 2006 (UTC)

Possible spam
http://genealogy.wikia.com/wiki/Talk:Main_Page/

Looks like graffitti, no meaningful content for site. by an anonymous user 69.31.86.59


 * "Talk:Main_Page/" (with the incorrect / at the end) is a surprisingly common target for spammers. I guess someone coded their spam bot wrongly. I'll add the links from that page and delete it. Thanks for reporting it. Angela (talk) 17:43, 5 September 2006 (UTC)

82.207.46.253