MediaWiki talk:Spam Blacklist

Report a spammer here


 * The spam blacklist extension is now working on all Wikicities. You can request new URLs be added to the filter by listing them here. Please state the IP (or username) used to spam and the wiki it happened on.

See also Help:Spam.

81.214.101.220 spam
FYI, 81.214.101.220 spammed the Calgary: wiki as well as the pc: wiki. -- JamesTeterenko 23:58, 24 May 2005 (UTC)
 * Looking at a few random wikis, I also found it at Stargate:. Is there an easy way to check the changes at all wikicities?  -- JamesTeterenko 00:07, 25 May 2005 (UTC)


 * There's a combined recent changes at Bloglines, but it doesn't pick everything up and limits how many changes are actually shown. Angela (talk) 03:21, 25 May 2005 (UTC)


 * I used that, and that is how I picked up the ones that I did fix. Since you have to click on every Wikicity to see the result, I only looked at some of them.  -- JamesTeterenko 04:40, 25 May 2005 (UTC)


 * If you click on Wikicities's Feeds at the top of the left hand frame, you don't need to click on each one separately since it will expand and show you some results from each one. It takes a while to load though. Angela (talk) 05:17, 25 May 2005 (UTC)


 * That is good to know. I'll use that next time.  -- JamesTeterenko 15:10, 25 May 2005 (UTC)

When to Add to the Blacklist?
Should we add URLs after one instance of a spam attack, or wait for more? Also, I'm not sure how much of the URL is best? Advice please? As a specific example, should I add the two URLs just posted (and already removed) to the Central Wikicity's home page? I don't want to slow the loading of every saved page, but I'd rather not have to clean-up the same URLs again. --CocoaZen 17:50, 2 Jun 2005 (UTC)


 * It depends what they are and whether they are definitely spam. Something like this is an obvious spam attack, but someone adding one innapropriate URL to a page is often not. If you're unsure, you can also add it temporarily. It might be worth checking Google for other wikis with the spam URL. If +wiki Google: SpamURL.com +wiki has hits, then it should be blacklisted. If an edit adds dozens of different URLs, adding just one of those to the blacklist will normally prevent future attacks since the edits are being made by bots who won't know to just remove the blacklisted URL from their edit. Angela (talk) 00:00, 8 Jun 2005 (UTC)

Checking contribs across wikis
I now have a somewhat buggy script that will check edits across multiple wikis. It doesn't work perfectly, but can be used for finding cases of the same user spamming multiple Wikicities, so please report the username or IP of spammers here as well as links to the diffs where they spammed. Angela (talk) 02:49, 21 Jul 2005 (UTC)

Protection
Perhaps the Spam Blacklist should be protected? 17:41, 17 Aug 2005 (UTC)


 * It is protected now. Angela (talk) 17:18, 22 Aug 2005 (UTC)

Any chance of an alphanumeric list?
Maybe a one-off extraction as a first port of call? Maybe no value?? (Some of us are a bit ignorant about these things) Robin Patterson 01:40, 1 Sep 2005 (UTC)
 * Please clarify. An alphanumeric list of what?  Are you suggesting that the blacklist be ordered?
 * That might be a good idea.
 * If that is what you meant, I'd like to understand the potential benefit.  We only add sites when they become problems.  After they've been put on the list, they shouldn't be able to be a problem.  Is that what you mean?  What value do you think it would have?  I wouldn't have any problem with it, but don't really want to go to the work of organizing what we have without a reason.
 * Another potential problem with alphabetizing is that it depends on how much of the url is used. Sometimes we have to make a choice about whether to post xyz.objectionable-site.tla or the more generic objectionable-site.tla that would also cover abc.objectionable-site.com.  As you can see, each choice would appear in a different place in an alphabetized list.
 * Again, it's not that I'm disagreeing with your suggestion, it's just that I don't understand it. Maybe someone else will have a better response.  --CocoaZen 02:09, 1 Sep 2005 (UTC)


 * I don't mind, but I often update the page from the version on Meta, so I don't promise to keep it alphanumeric, but someone else can if they find it useful. Angela (talk) 15:25, 2 Sep 2005 (UTC)

link spam at Quiz wiki page
The Quiz wiki page was spammed by 24.186.242.248 --JWSchmidt 13:43, 1 Oct 2005 (UTC)


 * He also hit lotr, tsukuba, sage, and history. I'll clear those up now. Angela (talk) 21:33, 3 Oct 2005 (UTC)

Chem is back
In Cities: and Genealogy: Robin Patterson 19:20, 3 Oct 2005 (UTC) By 69.50.165.186 - AGAIN! - looks like that address needs a ban, or a final warning at least Ace of Risk 20:10, 3 Oct 2005 (UTC)


 * 69.50.165.186 again... ouch. He should have been blocked on the server side already, but the block somehow got removed when the server rebooted. He's created 330 more "chem" pages. Insane. Jason's going to try to delete them automatically this time. Angela (talk) 21:33, 3 Oct 2005 (UTC)

Spam from Angela's talk page
Garrett 09:31, 4 Oct 2005 (UTC)
 * same spam again later 24.84.150.28 --JWSchmidt 12:46, 4 Oct 2005 (UTC)
 * URL blocked. Angela (talk) 23:43, 10 Oct 2005 (UTC)

hydrocodone sites - block all?
There are multiple hydrocodone sites which have been spammed. Would it make sense to blacklist all sites with "hydrocodone."? Normally it would be overkill, and it seems to me that assuming good will works well for most cases, but after multiple violations, I'm proposing this stronger measure. If someone comes up with a non-advertising, legitimate site, we could remove this blanket block. --CocoaZen 03:37, 6 Oct 2005 (UTC)


 * Yes, blocking all those is fine. Just don't block cialis. I considered doing so before until I realised it"s the middle of the word "socialism" which has legitamate links, especially on the socialism wiki. :) Angela


 * Wow, that explains some odd looking stuff I've seen elsewhere - just depends if someting can be identified as a delimited word, though the perishers usually mis-spell stuff like that to get though spam filters Ace of Risk

81.25.37.80 and 85.102.145.103
Link spam by 81.25.37.80 at Novelas. --JWSchmidt 03:33, 10 Oct 2005 (UTC)

85.102.145.103 spammed links to zap3x.com on Real Life Soap Wiki. Dedalus 20:37, 10 Oct 2005 (UTC)


 * I blocked the URLs used by both of those. I'll check their other edits too. Angela (talk) 23:43, 10 Oct 2005 (UTC)

spam at Real Life Soap wikicity
Link spam by 65.223.34.118 at RLS wikicity. --JWSchmidt 15:20, 13 Oct 2005 (UTC)


 * Blocked. Angela (talk) 18:33, 16 Oct 2005 (UTC)

Repeat spam at Uncyclopedia:Help:Fair Use by 82.131.13.12
-> and two weeks later ->  Splarka 09:55, 19 Oct 2005 (UTC)
 * Adding one of the more common fragments... hope it helps. --CocoaZen 19:36, 19 Oct 2005 (UTC)

borjone and myg0t
Just check out this guy's list of contributions... =/ http://dystopia.wikicities.com/index.php?title=Special:Contributions&target=209.120.230.238

using IP 200.61.161.93 insurance.borjone.com spammed: http://peace.wikicities.com/index.php?title=Shamanism&curid=38&diff=7448&oldid=7447&rcid=8544 17:13, 21 Oct 2005 (UTC)


 * Thanks for reporting them. myg0t.com and borjone.com are now blocked. I'll check the other edits from these two IPs now. Angela (talk) 21:54, 22 Oct 2005 (UTC)

porn link spam at RLS
Real Life Soap wikicity; porn link spam by 195.16.125.192


 * I've blocked those 4 subdomains. If atspace.com continues to show nothing but spammy domains, it might be worth blocking them totally. Angela (talk) 06:44, 23 Oct 2005 (UTC)

svt.wikicities.com
i don't know the name of this stupid guy, but he has put thousands porno websites on the first pages of svt.wikicities.com (french wiki on biology). I already erase his stuff, i hope this kind of people can be blacklisted, even if we don't know his name
 * IP addresses can be banned (not blacklisted). Any administrator for your Wikicity can do that.  Pieces of inappropriate URLs can be blacklisted.  This makes it so that no one can save a page with those URLs.  I think Angela may have already added ones from this attack, but I'll check and add some, if she hasn't.  Thank you for reporting the problem.  --CocoaZen 23:11, 23 Oct 2005 (UTC)

85.210.182.227
http://ogame.wikicities.com/index.php?title=Main_Page&oldid=32 http://ogame.wikicities.com/index.php?title=Main_Page&oldid=33 http://ogame.wikicities.com/index.php?title=Main_Page&oldid=35
 * Please read the previous entry. These posts were rude, and luckily were fixed.  But, they aren't URLs or keywords that can be blacklisted.  IP blocking is different, and your admins have already blocked this IP for 999 days.  I don't think anymore action needs to be taked, but thank you for reporting the problem.  --CocoaZen 02:53, 24 Oct 2005 (UTC)

195.131.87.38 - Creatures Wiki
http://creatures.wikicities.com/index.php?title=Help%3AContents&diff=0&oldid=14979 I think this was just a straight 'get my page higher on google' exercise - Can you please add as many of these are distinctly non-legit to the blacklist? - Malkin 21:24, 25 Oct 2005 (UTC)


 * blogsite dot com and .org are now blacklisted. Angela (talk) 03:56, 31 Oct 2005 (UTC)

Thanks Angela! :D Now for another one... (ah, the achingly glamourous life of a mod, ey? ;) ) http://creatures.wikicities.com/index.php?title=Talk%3ACreatures_Wiki_Homepage&diff=0&oldid=15179 Two instances of the same spam coming from different IPs, on pages that have been spammed before, not too long apart. Please blacklist? - Malkin 21:07, 4 Nov 2005 (UTC)


 * Will do. Thanks for the report, but why would anyone spam about green tea? Odd. Angela (talk) 23:21, 4 Nov 2005 (UTC)

Bizarre, I know.... Another, please: http://creatures.wikicities.com/index.php?title=User_talk%3AOfficer_1BDI&diff=0&oldid=15217 - Malkin 10:01, 7 Nov 2005 (UTC)

And another... http://creatures.wikicities.com/index.php?title=Creatures_Wiki%3ASandbox&diff=0&oldid=15242 User:Youyouyu did the deed. info-dali.com. - Malkin 07:50, 9 Nov 2005 (UTC)


 * fiberia was already blocked. I'll add info-dali now. Angela (talk) 22:55, 9 Nov 2005 (UTC)

Thanks Angela. Is it, like, spam season or something? http://creatures.wikicities.com/index.php?title=C1_Chemical_List&diff=0&oldid=15249 casino.888.web.com - I looked and didn't see it on the blacklist. - Malkin 22:07, 10 Nov 2005 (UTC)

213.114.231.46 - Alaska wiki
http://alaska.wikicities.com/index.php?title=Talk:Alaska&diff=0&oldid=528 This one was just a single link to a pharmaceutical. Removed. Blocked.--Doug 06:04, 8 Nov 2005 (UTC)


 * This was fiberia again, which should be blocked already. Angela (talk) 22:55, 9 Nov 2005 (UTC)
 * Weird. It's not getting blocked because of the underscore in the url.. 00:55, 11 Nov 2005 (UTC)

Yet more Gameinfo rubbish
Yes, more fun...  This "invisible" exploit they've found is getting really annoying as they only show up when viewing diffs, but I guess you can't really ban that attribute... Garrett 22:15, 13 Nov 2005 (UTC)
 * nyork.dyndsl.com/phentermine/
 * nyork.dyndsl.com/butalbital/
 * eagle.myftpsite.net/tramadol/
 * eagle.myftpsite.net/cialis/
 * direc.dynu.net
 * host.fdns.net/tramadol/
 * This isn't done to be annoying, but apparently to minimize harm done to the wiki; Alexandru Popescu, one of the guys that does this, said to me in an email to reason why his spam was "ethical": "2nd is that my spam comes in a tiny div and is always appended ." I guess it's better in some aspects.
 * But I really find it hard to believe that spammers are too stupid to notice everything here has rel=nofollow. 00:52, 14 Nov 2005 (UTC)