Misplaced Pages

talk:WikiProject Spam - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.

This is an old revision of this page, as edited by Hu12 (talk | contribs) at 13:50, 7 January 2008 (→Blacklist logging). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Revision as of 13:50, 7 January 2008 by Hu12 (talk | contribs) (→Blacklist logging)(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)
As a courtesy, please consider informing other editors if their actions are being discussed.
Shortcut
  • ]


Archive

Archives

List of archives (with sections)

Vandalism and social engineering of Misplaced Pages Knol article

67.173.204.223 Talk:Knol 71.226.158.141 Talk:Knol Igor Berger (talk) 02:12, 31 December 2007 (UTC)

Both ips registered to Comcast. Can't tell whether it's Google or not. MER-C 03:32, 31 December 2007 (UTC)
Continious atempt to social engineer Talk:Knol by undermining authority of User:Igorberger as a Misplaced Pages:WikiProject_Spam patrolman on User_talk:Igorberger#71.226.158.14 Igor Berger (talk) 00:21, 1 January 2008 (UTC)

Mistake?

Apparently timesofindia.indiatimes.com links (used on a large number of articles) has been reported as spam (see Misplaced Pages:WikiProject Spam/LinkReports/timesofindia.indiatimes.com). As far as I know, The Times of India is major Indian daily, and India Times hosts space for a number of Indian dailies including The Times of India, The Economic Times, Navbharat Times and Maharashtra Times. It is apparently managed by the The Times Group, owner of the dailies mentioned and a major newspaper group in India. The only reason I can see is the existence *.cms suffixes in the links. But, I don't think we are here to question an external sites use of technology, as reliability and notability of the source is quite evident. Is there any way this mistake can be addressed? Aditya 05:02, 1 January 2008 (UTC)

The same goes for airlinequality.com links (see Misplaced Pages:WikiProject Spam/LinkReports/airlinequality.com). This site is managed by Skytrax, an airline consultation agency with fair reputations, and is the most verifiable source on Skytrax ratings used on quite a few aviation articles. Okay, one bright idea - can some of the links be bounced of appropriate Wikiprojects? Like, like for instance, checking the two links mentioned here with Misplaced Pages:WikiProject India and Misplaced Pages:WikiProject Aviation respectively. Aditya 05:21, 1 January 2008 (UTC)
The linkreports are created by a bot. The existance of a report doesn't mean that any spamming or COI has taken place. The reports are reviewed by humans (as time permits). In the case of the indiatimes.com site, there was a bad regular expression in the bot's database that caused a match - the regular expression has since been removed. It is possible that other reports may be generated based on other criteria in the future. There is a rather long paragraph at the top of the reports that explains a bit more about the bot. In the case of the airlinequality.com site, it was being monitored because a spam-dal (spammer-vandal) kept replacing that link with another site.. (both of those domains are still being monitored). --Versageek 06:43, 1 January 2008 (UTC)
Thanks. Tell the bot, I have forgiven it. :P Aditya 17:44, 1 January 2008 (UTC)

spam.travelphotobase.com

travelphotobase.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Misplaced Pages: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com

Spammers

First case of the new year. MER-C 12:52, 1 January 2008 (UTC)

Still spamming. Blacklisting requested. MER-C 02:35, 2 January 2008 (UTC)
This has been blacklisted and I removed links from half a dozen pages where they were prior to the spamming (these links were broken anyway, they went to an index page rather than individual pages as intended). --Versageek 03:45, 2 January 2008 (UTC)

http://spam.ghanasoccernet.com

Spam pages
Sites spammed

ghanasoccernet.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Misplaced Pages: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com

Spammers

MER-C 13:03, 1 January 2008 (UTC)

smilelikeumeanit.com

Accounts

Levilarsen (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
74.136.5.106 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
65.174.23.11 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
--Hu12 (talk) 23:41, 1 January 2008 (UTC)

http://spam.attocknews.com http://spam.attockpolice.gov.pk http://spam.geocities.com/scn_pk

Spam pages
Sites spammed
Spammers

MER-C 12:03, 2 January 2008 (UTC)

Help with Naveen Jain-related spam?

Links
Articles
Editors
I'm trying to pry apart the coi issues (discussion started in Misplaced Pages:Conflict_of_interest/Noticeboard#Naveen_Jain) from the spam issues for the same set of articles and editors. There's also edit-warring going on that includes some spammed links. Can someone help with identifying the links/articles/editors, as well as with giving further warnings as necessary and with the cleanup? --Ronz (talk) 18:26, 2 January 2008 (UTC)
There's only minor spamming from 12.104.234.193, and this ip has actually been edit-warring over the spam added by some of the others. --Ronz (talk) 16:51, 3 January 2008 (UTC)
Expert3007 is definitely spamming, but it's difficult to categorize his edits as he often edit-wars over content that includes spammed links. I'm not sure which links to classify as spam from him, as opposed to just part of the content that he's (often repeatedly) reverted. --Ronz (talk) 19:39, 4 January 2008 (UTC)

seology.co.il spam on Misplaced Pages

Domains spammed on en.wikipedia and/or il.wikipedia
  • Google Adsense ID: 5401783979308770
  • Large notable medical organization
  • Link also added by a regular editor
  • Large cellphone notable operator


Related SEO domains


Other related domains (SEO clients)

Some of these are domains of large, notable organizations:


Accounts


Article


Meta blacklisting recommendation

When I get the time, I will clean up links and propose these for blacklisting on meta:

  • bookkeeping-course.com
  • canaseed.com
  • fancydiamonds.net
  • kwizcom.com
  • seo1site.com
  • seology.co.il
  • wao.co.il
  • worldwide-tax.com

--A. B. 20:53, 2 January 2008 (UTC)

Perhaps meta the whole lot?--Hu12 (talk) 21:44, 2 January 2008 (UTC)
I don't think so, although we are well within out rights. The spamming has persisted in spite of multiple warnings and it's been cross-wiki. With this history, we normally would blacklist all the domains, including the related domains.
Nevertheless, I recommend holding off for now. The SEO doesn't own these other domains and most haven't been spammed. Even among the domains that have been spammed there are large organizations for which our editors going to want to have articles and links. I think we blacklist just that short list for now and hope this guy gets the message to stop spamming. Given the adoption of Wikimedia's meta blacklist by thousands of other, unrelated MediaWiki sites and even some search engines' linkspam investigators, this SEO has brought down a lot of pain on the domains we are blacklisting. I can't believe he's done this to himself and his business.
I've invited the SEO to join our discussion. Ultimately, the outcome is in his hands, just as it's always been. If he keeps spamming, we're not going to have any choice but to blacklist the other stuff. --A. B. 00:41, 3 January 2008 (UTC)

spam.comedybox.tv

comedybox.tv: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Misplaced Pages: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com

Spammers

Returning spammer, blacklisting requested. MER-C 12:23, 3 January 2008 (UTC)

reglo.co.uk

Accounts

194.151.195.130 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
86.159.116.152 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
89.168.29.2 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
82.108.12.101 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
89.168.19.90 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
87.224.32.3 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
89.168.17.2 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
--Hu12 (talk) 12:52, 3 January 2008 (UTC)

Anybody watching the front page?

I've reverted this series of edits. I'm not sure what is going on here, but it seems like changes to the front page should be based on consensus of the project. See also: Misplaced Pages talk:WikiProject Spam/2007 Archive Dec 1#PHSDL recommendations to WikiPedia Spam Project. (Section originally titled "Comments moved from front page".) Katr67 (talk) 20:22, 3 January 2008 (UTC)

Reverting before we come to consensus is destructive to the cause of WikiPedia and the problem that we all face of social engineering malware. Igor Berger (talk) 01:55, 4 January 2008 (UTC)
I am trying to be proactive and not reactive in fighting Spam. This is not a historical article that we can take time and come up with a consensus before implimenting a change. Igor Berger (talk) 01:59, 4 January 2008 (UTC)
that is not approperate for WPSPAM. β 02:01, 4 January 2008 (UTC)
So you are saying there is no social enginerring malware on wikipedia? Reverting, please do not revert! Igor Berger (talk) 02:06, 4 January 2008 (UTC)
so write a userspace essay. β 02:25, 4 January 2008 (UTC)

{{helpme}} Igor Berger (talk) 02:48, 4 January 2008 (UTC)

WikiPedia is under attack by social engineering malware and Misplaced Pages:Counter-Vandalism_Unit member User:Betacommand does not aknowledge it! Igor Berger (talk) 02:51, 4 January 2008 (UTC)
Please wait until there is consensus before adding this information again. However, as betacommand said, if you feel strongly about this issue, you can create an essay about it in your userspace.--Werdan7 03:24, 4 January 2008 (UTC)
After asking User:Betacommand on User talk:Betacommand not to Misplaced Pages:Bite his reply is Remove BS Igor Berger (talk) 05:30, 4 January 2008 (UTC)
yeah you template me with {{uw-bite}} for telling you the same thing several other editors have said, dont add that to WP:WPSPAM. I suggested that instead you write it up in a userspace essay. For trying to help I got a unfounded off-base {{uw-bite}} for giving you advice. β 05:36, 4 January 2008 (UTC)
You want to reduce Social engineering malware to a user essay?!? Have you paid attention to what I said, "Dave Marcus at McAfee on how destructive and dangeous social engineering is to Internet and society; hence, coining the term Social engineering malware," "We've come to understand that almost any high impact media event is going to be used as a social engineering tool for malware," said Dave Marcus, security research and communications manager at McAfee. "It's such a horrible event, but at the end of the day, it's a very good social engineering tactic."Malware Sites Exploit Bhutto Assassination. Igor Berger (talk) 05:55, 4 January 2008 (UTC)
Yes, write a userspace essay, as other users have said dont add it to WP:WPSPAM. β 05:58, 4 January 2008 (UTC)
I second Betacommand; this does not belong on the front page of a WikiProject. Try writing a draft first in User:Igorberger/Sandbox and see how it goes from there. Patience, and time, are virtues in these situations. Regards.--12 Noon  06:10, 4 January 2008 (UTC)
  • Don't template the regulars, it's considered offensive. Igor, I'm not sure where you're going with the whole Social engineering and Malware thing. Popular topics and media events have been used to draw unsuspecting users to bad sites, or to open/install bad software for many, many years, this is nothing new. Just because one security researcher decided to publish his opinion about it doesn't make it a crisis. While I appreciate your efforts, you really need to relax a bit. Misplaced Pages isn't a battlefield, it's not Us vs. Them. If you feel strongly about the issue, a userspace essay is best. -- Versageek 06:15, 4 January 2008 (UTC)
User:Versageek can you explain to me what ia a regular user and why should he or she be treated differently than other users? Do regular users have cenrtain set of privileges than non regular users? Should we not abide by the same policy? I mean I am not talking about anon IPs, sleepers, or sockpuppets! How about the nublets? Igor Berger (talk) 11:52, 4 January 2008 (UTC)
For Misplaced Pages purposes, a regular is someone who has been around a while & has a significant number decent quality edits. Most warning templates are written in a way that explains the relevant rule to new editors. Since regulars probably know these rules, applying a template isn't useful. This doesn't mean you don't warn them if a warning is called for, just do it by leaving a short personal message.. such as "Please avoid biting the nublets, as you did <insert relevant diff here>" , rather than using a template. --Versageek 21:44, 4 January 2008 (UTC)
I think a few of you here, have to practise what you preach, and I am not trying to be disrespectful in saying that. I know how difficult of a jab it is to fight Spam. Do you think User talk:Betacommand page is user friendly? "If you are here to register a complaint regarding my edits, before doing so please note:" Join that with the Hand signal Stop! Igor Berger (talk) 23:08, 4 January 2008 (UTC)

http://spam.deployo.com

Accounts

Gioware (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)
85.114.234.137 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
--Hu12 (talk) 22:05, 3 January 2008 (UTC)

Mercy Corps COI spam II

Found 254 edits within 207.189.98.40-47

Articles

Mercy Corps
Nancy Lindborg
Dan O'Neill (Humanitarian)
Landrum Bolling
Ellsworth Culver
Neal Keny-Guyer

Accounts

RogerBurks (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam) senior writer for Mercy Corps
207.189.98.44 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot) Registered to MERCYCORPS
67.189.62.168 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot) OREGON-11
24.22.82.76 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot) OREGON-10
220.247.212.171 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
24.21.206.200 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot) OREGON-7
AbHa (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)
156.56.3.27 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
Bottle.of.water. (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)
Geohumphrey (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)
This has been a long term problem. For well over a year half the sole purpose of these accounts were here editing (COI) for the sole purpose of promoting Mercy Corps--Hu12 23:32, 12 November 2007 (UTC)

Pulling from archive in light of continued activity.--Hu12 (talk) 00:50, 4 January 2008 (UTC)
Articles

The Film Connection

Accounts

Lhasko (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)
207.189.98.44 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot) Registered to MERCYCORPS
--Hu12 (talk) 01:00, 4 January 2008 (UTC)

http://spam.wzaponline.com

Accounts

Wzap (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
--Hu12 (talk) 01:58, 4 January 2008 (UTC)

solegy.com

Articles

Solegy

Accounts

Janventuranza (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
3gpp (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Callingcardman (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
RTP123 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Sbc1234 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Ngnman (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Techno123 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
--Hu12 (talk) 02:09, 4 January 2008 (UTC)

teavuihuang.com

Accounts

Tvhuang (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
58.185.218.51 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
58.185.107.194 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
58.185.218.98 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
--Hu12 (talk) 12:28, 4 January 2008 (UTC)

http://spam.asianmediawiki.com http://spam.lunapark6.com

Spammers

MER-C 13:25, 4 January 2008 (UTC)

http://spam.deepikapadukon.com http://spam.ranbir.in http://spam.gemmanude.com

Spammers

MER-C 13:32, 4 January 2008 (UTC)

http://spam.entheweb.co.uk

Previous incidents
Sites spammed

entheweb.co.uk: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Misplaced Pages: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com

Spammers

MER-C 13:35, 4 January 2008 (UTC)

Blacklist logging

{{WPSPAM|0#section_name}} (replacing '0' with the correct oldid shown here).
This should aid in requests originating from here and for use with the entry log on the MediaWiki talk:Spam-blacklist.--Hu12 (talk) 14:04, 4 January 2008 (UTC)

Hu12, I'm not quite following you here. What is "correct oldid"? Thanks, --A. B. 13:29, 7 January 2008 (UTC)

By clicking the history date and time (in red) will yield the oldid# version;

(cur) (last) 13:29, 7 January 2008 A. B. (Talk | contribs | block) (36,641 bytes) (→Blacklist logging - What is "correct oldid"?) (rollback | undo)

(cur) (last) 13:22, 7 January 2008 Hu12 (Talk | contribs | block) (36,448 bytes) (→Connexia S.r.l. Spam) (undo)
(cur) (last) 04:44, 7 January 2008 A. B. (Talk | contribs | block) (35,873 bytes) (→top-reviews.co.uk - blacklisted -- see ) (undo)

(cur) (last) 23:33, 6 January 2008 Igorberger (Talk | contribs | block) (35,542 bytes) (→Social engineering malware) (undo)

Url will read == http://en.wikipedia.org/search/?title=Wikipedia_talk:WikiProject_Spam&oldid=182725895


Insert 182725895# & section name:

{{WPSPAM|182725895#Blacklist_logging}}

results in:

See WikiProject Spam report

_--Hu12 (talk) 13:50, 7 January 2008 (UTC)

http://spam.Jofemar.com

Articles

Jofemar

Accounts

Victorjofemar (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
62.15.99.61 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
--Hu12 (talk) 14:27, 4 January 2008 (UTC)

FIELD PRECISION, LLC

Articles

Field precision llc
Field Precision

Accounts

Humphriesk (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
68.35.12.187 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
68.35.74.100 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
--Hu12 (talk) 14:47, 4 January 2008 (UTC)

One's a physics software company, the other a polling company -- I'm not sure I see a connection other than in name. --A. B. 13:37, 7 January 2008 (UTC)

activequant.org

Articles

ActiveQuant →Misplaced Pages:Articles for deletion/ActiveQuant
Activequant

Accounts

Ustaudinger (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Klaqopen (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
81.221.125.7 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
87.176.221.72 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
84.134.143.29 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
85.177.178.113 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
84.72.98.196 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
84.253.34.239 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
83.217.111.202 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
appears now to be bad faith nominating competitors or related for deletion--Hu12 (talk) 14:57, 4 January 2008 (UTC)

http://spam.macoem.com

Articles

Macoem business solutions corp
Mbsc
Macoem
Macoem business solutions
Macoem inc

Accounts

Che crockatt (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
--Hu12 (talk) 16:19, 4 January 2008 (UTC)

metals spamming

Accounts

FastMarkets (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
87.224.18.62 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.175.210.141 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
--Hu12 (talk) 17:12, 4 January 2008 (UTC)

RE / MAX spamming

All sites navigate to :*nmrealty.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Misplaced Pages: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com

68.35.100.67 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
204.77.16.6 (talk · contribs · deleted contribs · filter log · WHOIS · RBLs · http · block user · block log)
Albuquerquejoe (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
--Hu12 (talk) 18:07, 4 January 2008 (UTC)

http://spam.rasamalaysia.com

Spam pages
Sites spammed
Spammers

MER-C 07:58, 5 January 2008 (UTC)

top-reviews.co.uk

Almost identical to albumofthemonth.com back in September 2007 - multiple accounts adding links (like this) to top-reviews.co.uk, a commercial Amazon.com affiliate. The two sites are probably connected since some of the accounts they use are the same. The links were added on about 16 articles when I checked, though I've already reverted a few since then, while others editors may have reverted some more. Maybe this should be added to the blacklist. - kollision (talk) 08:23, 5 January 2008 (UTC)

Now blacklisted:
--A. B. 04:44, 7 January 2008 (UTC)

Social engineering malware

"George Smith" and "2 Krayze" spammer

A spammer or group of spammers has been introducing self-promotional information into articles on popular black musicians (similar to, but more insidious than, the officially-recognized-as-spam practice of writing entire articles on self-promotional topics). This spam usually includes descriptions of the supposed accomplishments of "2 Krayze," a young black musician affiliated with the Disney Channel, and his alleged father, "George Smith." "George Smith" claims to have managed Bobby Brown, Perri "Pebbles" Reid, Loose Ends (band)‎ and Bobby Brown. "2 Krayze" also claims to know all four of these people. None of the material added by this spammer/these spammers is ever cited. I'm a new user, so I'm not sure what to do about this. So far, I've reverted the spam edits, put the pages on my watchlist and left warnings on the following talk pages:

User talk:71.105.104.206‎

User talk:67.182.72.212

Please let me know how to deal with this spammer. (Note: A Google search for "2 krayze" reveals a concerted spam campaign on behalf of this artist on other websites, such as blogs on black culture.)

Update: In the past, this user has used the following accounts:
User talk:76.173.164.76
User talk:76.167.227.23 —Preceding unsigned comment added by Huntthetroll (talk • contribs) 21:46, 5 January 2008 (UTC)
This guy is really persistent. This self-promotion vandalism have gone as far back July 2007. I don't think this is a case for WikiProject Spam though. Try Misplaced Pages:Administrator intervention against vandalism or Misplaced Pages:Requests for page protection. kollision (talk) 00:11, 6 January 2008 (UTC)
Okay, thanks. I will. Huntthetroll (talk) 01:01, 6 January 2008 (UTC)

JP NetQuest, Inc. spam

Spammed domains
  • "Sponsored by Chicago Podiatric Surgeons"


Related domains
  • SEO client
  • SEO client?


Accounts
  • Traceroutes to te-3-1-ur02.mtprospect.il.chicago.comcast.net.


JP NetQuest, Inc.
P.O. Box 811
Mount Prospect, IL 60056


Reference

--A. B. 22:10, 5 January 2008 (UTC)

7 of these domains are now blacklisted --A. B. 22:21, 5 January 2008 (UTC)

Jalamgir2

I think Jalamgir2 (talk · contribs) is spamming, but am not familiar enough with the policies and guidelines to say for sure. Please have a look. MilesAgain (talk) 18:09, 6 January 2008 (UTC)

Another Adsense spammer

Adsense 6286797861694701

Accounts

Fullofinformation (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
--Hu12 (talk) 19:35, 6 January 2008 (UTC)

Spamming of http://spam.lynchhummer.com

Accounts

72.161.141.219 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
--Hu12 (talk) 19:42, 6 January 2008 (UTC)

Connexia S.r.l. Spam

  • kimolos-island.com
  • folegandros.com
  • islands-greece.com
  • milostravel.com
  • islands-greece.com
  • villa-kapari.com
  • connexia.com
  • isolegreche.com
Accounts

81.211.251.153 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
62.10.22.137 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
--Hu12 (talk) 22:14, 6 January 2008 (UTC)

Mass crosswiki activity, requested Meta BL--Hu12 (talk) 23:09, 6 January 2008 (UTC)

Microfinance Gateway

Articles

Microfinance Gateway

Accounts

MFGateway (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Syamaka (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Morillons (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
Alrick (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
24.215.169.132 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
218.45.193.1 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
69.129.170.149 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
213.135.243.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
--Hu12 (talk) 13:22, 7 January 2008 (UTC)