![]() | This page is an archive of past discussions. Do not edit the contents of this page. If you wish to start a new discussion or revive an old one, please do so on the current talk page. |
— Newslinger talk 12:29, 3 February 2021 (UTC)
— Newslinger talk 12:43, 3 February 2021 (UTC)
— Newslinger talk 12:49, 3 February 2021 (UTC)
— Newslinger talk 12:53, 3 February 2021 (UTC)
— Newslinger talk 12:57, 3 February 2021 (UTC)
— Newslinger talk 08:21, 5 February 2021 (UTC)
- MrOllie ( talk) 13:11, 3 February 2021 (UTC)
— Newslinger talk 03:35, 31 January 2021 (UTC)
Refreshing COIBot report for evaluation in WP:RSN § RfC - ourcampaigns.com. — Newslinger talk 06:00, 6 February 2021 (UTC)
Domains
Users:
All these users have created very similar sandbox in their userspace trying to make it look like an informative article, but obviously spammy with multiple links to the domains listed. AVSmalnad77 talk 14:59, 5 February 2021 (UTC)
— Newslinger talk 09:18, 8 February 2021 (UTC)
Just a notice that some archiving will be necessary for new entries to display properly. — Paleo Neonate – 08:29, 7 February 2021 (UTC)
Spamming Poker and Casino with this domain. This domain was reported here last month. — Bruce1ee talk 06:29, 4 February 2021 (UTC)
Variations of the link being spammed around articles by a user. Pahunkat ( talk) 10:33, 9 February 2021 (UTC)
— Newslinger talk 06:53, 10 February 2021 (UTC)
User hijacking articles and now spamming the link in their userspace. Thanks, Pahunkat ( talk) 09:16, 10 February 2021 (UTC)
Spam link was on List of satellite map images with missing or unclear data for more than a decade. — Newslinger talk 14:51, 10 February 2021 (UTC)
The accounts are the same user (see Wikipedia:Sockpuppet investigations/Bismatrimony and its archive) and have been blocked as such (or soon will be). If the URL was blacklisted it might stop the socking, with any luck. -- bonadea contributions talk 08:14, 11 February 2021 (UTC)
Another link spammed was:
Please check if this report's alright - I haven't filed one before. Thanks, Pahunkat ( talk) 19:08, 8 February 2021 (UTC)
Adding for the record. — Newslinger talk 08:37, 12 February 2021 (UTC)
Piermoire also created Mira Beauty, which has been tagged for AfD. Thanks, Pahunkat ( talk) 19:12, 8 February 2021 (UTC)
Adding for the record. — Newslinger talk 08:40, 12 February 2021 (UTC)
— Newslinger talk 09:23, 12 February 2021 (UTC)
— Bruce1ee talk 09:33, 12 February 2021 (UTC)
Users
Newslinger - these links were spammed by users found in Wikipedia:Sockpuppet investigations/Ahooodfes. Outline of finance still has a few external links. Thanks for filing that SPI :-) Pahunkat ( talk) 15:47, 11 February 2021 (UTC)
— Newslinger talk 08:53, 12 February 2021 (UTC)
Looks like a drive-by spammer, only one known account. Pahunkat ( talk) 11:07, 13 February 2021 (UTC)
The user has got away with linkspamming from the 9th - sandbox may also need to be nuked. Thanks, Pahunkat ( talk) 11:16, 13 February 2021 (UTC)
Per Njd-de's report at WP:AIV. — Newslinger talk 16:44, 13 February 2021 (UTC)
Found one more account through a link search. Adding another link summary template to give this another try. — Newslinger talk 19:38, 13 February 2021 (UTC)
— Newslinger talk 09:34, 12 February 2021 (UTC)
Domain used in spamming web/application development articles. — Bruce1ee talk 12:41, 15 February 2021 (UTC)
And other links of the same style
There has been a sort of spam-campaign going for US-related cities, where the domain will consist of town[placename].com. The spammer decided to open an ANI thread to complain about a warning they were left for spamming external links at Wikipedia:Administrators' noticeboard/Incidents#Complaint from Microthought2021, which led to a boomerang and a block. The links possibly need blacklisting - they are clearly owned by the same person, which rely on advertising to make profit and collect a few news sources to pass off as their own work. See the IP's contribs. COIBot only processed one link when I tried to poke it however. Pahunkat ( talk) 12:12, 15 February 2021 (UTC)
The reports seem to be coming, but for those that are here:
The IPv6 range is blocked, the IP is stale (note, earliest edit from
May '18 and never warned). Most/all links reside on related servers (Server IP 192.185.79.###), there are tools out there to find out which sites are on all these IPs. I am afraid we cannot blacklist town(\w+)\.com\b
, it will likely throw false positives. --
Dirk Beetstra
T
C
13:08, 15 February 2021 (UTC)
@ Pahunkat: - Wikipedia talk:WikiProject Spam/LinkReports/townatlanta.com contains a db dump from the collected linkadditions for 'town*.com' (inverted domains, sorry, db search trick). For sure, blocking 'town*.com' will not work (there are way too many), but maybe there are some you missed? -- Dirk Beetstra T C 14:53, 15 February 2021 (UTC)
Thanks for looking into that Beetstra - I agree that blocking town*.com will cause too much collateral damage. I’ll look into the other domains later on (right now my hands are full), identifying them should be easy given they all use the same landing page design - but blocking domains as they are spammed seems like the best option I can think of so far. Thanks, Pahunkat ( talk) 15:45, 15 February 2021 (UTC)
Already blacklisted:
New:
Some more domains that I found from the list (I only checked 100 or so promising domains, all townof*.com ones seemed legitimate), same design of webpage. Pahunkat ( talk) 20:57, 16 February 2021 (UTC)
Searching up certain strings on each site finds the following as well - I still need to verify these:
Pahunkat ( talk) 21:57, 16 February 2021 (UTC)
All the same format, just waiting for the COIBot report to see if these have been spammed before Pahunkat ( talk) 14:32, 17 February 2021 (UTC)
— Bruce1ee talk 17:42, 15 February 2021 (UTC)
— Newslinger talk 09:00, 19 February 2021 (UTC)
— Newslinger talk 09:01, 19 February 2021 (UTC)
— Newslinger talk 12:18, 19 February 2021 (UTC)
— Newslinger talk 04:25, 20 February 2021 (UTC)
Gross ☆ Bri ( talk) 17:23, 18 February 2021 (UTC)
— Bruce1ee talk 06:31, 20 February 2021 (UTC)
— Bruce1ee talk 06:45, 20 February 2021 (UTC)
— Newslinger talk 12:19, 19 February 2021 (UTC)
— Newslinger talk 21:58, 18 February 2021 (UTC)
— Bruce1ee talk 12:34, 20 February 2021 (UTC)
— Bruce1ee talk 12:59, 20 February 2021 (UTC)
experiencenissanleaf.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot- Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com
On February 12, Atikutso603 was blocked for persistently adding links to experiencenissanleaf.com in different articles. It's obvious link spam. Now a "new" editor, Hasankamrul2050, has suddenly appeared and begun adding links to the same website in similar articles. Of course, he or she also needs to be blocked but I think the behavior of this editor(s) and the quality of the website as sufficient to land this site on our blacklist. ElKevbo ( talk) 06:31, 21 February 2021 (UTC)
(Meta note: no idea if this report is necessary, out of abundance of caution and for the sake of documentation I'm reporting it. I'll be reading the rest of the WikiProject's documentation shortly, but please let me know if this report was unnecessary.) Links were spammed across several articles, as well as a bit on eswiki by the IP. Perryprog ( talk) 17:20, 23 February 2021 (UTC)
— Bruce1ee talk 10:17, 24 February 2021 (UTC)
Posting this to generate the blacklistable COIBot report. GeneralNotability ( talk) 16:03, 24 February 2021 (UTC)
Cannaspam; refspam of the tediously usual sort ☆ Bri ( talk) 19:21, 22 February 2021 (UTC)
— Bruce1ee talk 11:45, 23 February 2021 (UTC)
user:Adelesmith repeatedly deleted this section. Maybe it is time to blacklist? -- Dirk Beetstra T C 12:04, 23 February 2021 (UTC)
— Bruce1ee talk 16:54, 20 February 2021 (UTC)
— Newslinger talk 00:26, 26 February 2021 (UTC)
This one had been quiet for a while, but is showing renewed signs of spam activity. - MrOllie ( talk) 18:16, 25 February 2021 (UTC)
— Newslinger talk 20:53, 25 February 2021 (UTC)
— Newslinger talk 20:53, 25 February 2021 (UTC)
![]() | This page is an archive of past discussions. Do not edit the contents of this page. If you wish to start a new discussion or revive an old one, please do so on the current talk page. |
— Newslinger talk 12:29, 3 February 2021 (UTC)
— Newslinger talk 12:43, 3 February 2021 (UTC)
— Newslinger talk 12:49, 3 February 2021 (UTC)
— Newslinger talk 12:53, 3 February 2021 (UTC)
— Newslinger talk 12:57, 3 February 2021 (UTC)
— Newslinger talk 08:21, 5 February 2021 (UTC)
- MrOllie ( talk) 13:11, 3 February 2021 (UTC)
— Newslinger talk 03:35, 31 January 2021 (UTC)
Refreshing COIBot report for evaluation in WP:RSN § RfC - ourcampaigns.com. — Newslinger talk 06:00, 6 February 2021 (UTC)
Domains
Users:
All these users have created very similar sandbox in their userspace trying to make it look like an informative article, but obviously spammy with multiple links to the domains listed. AVSmalnad77 talk 14:59, 5 February 2021 (UTC)
— Newslinger talk 09:18, 8 February 2021 (UTC)
Just a notice that some archiving will be necessary for new entries to display properly. — Paleo Neonate – 08:29, 7 February 2021 (UTC)
Spamming Poker and Casino with this domain. This domain was reported here last month. — Bruce1ee talk 06:29, 4 February 2021 (UTC)
Variations of the link being spammed around articles by a user. Pahunkat ( talk) 10:33, 9 February 2021 (UTC)
— Newslinger talk 06:53, 10 February 2021 (UTC)
User hijacking articles and now spamming the link in their userspace. Thanks, Pahunkat ( talk) 09:16, 10 February 2021 (UTC)
Spam link was on List of satellite map images with missing or unclear data for more than a decade. — Newslinger talk 14:51, 10 February 2021 (UTC)
The accounts are the same user (see Wikipedia:Sockpuppet investigations/Bismatrimony and its archive) and have been blocked as such (or soon will be). If the URL was blacklisted it might stop the socking, with any luck. -- bonadea contributions talk 08:14, 11 February 2021 (UTC)
Another link spammed was:
Please check if this report's alright - I haven't filed one before. Thanks, Pahunkat ( talk) 19:08, 8 February 2021 (UTC)
Adding for the record. — Newslinger talk 08:37, 12 February 2021 (UTC)
Piermoire also created Mira Beauty, which has been tagged for AfD. Thanks, Pahunkat ( talk) 19:12, 8 February 2021 (UTC)
Adding for the record. — Newslinger talk 08:40, 12 February 2021 (UTC)
— Newslinger talk 09:23, 12 February 2021 (UTC)
— Bruce1ee talk 09:33, 12 February 2021 (UTC)
Users
Newslinger - these links were spammed by users found in Wikipedia:Sockpuppet investigations/Ahooodfes. Outline of finance still has a few external links. Thanks for filing that SPI :-) Pahunkat ( talk) 15:47, 11 February 2021 (UTC)
— Newslinger talk 08:53, 12 February 2021 (UTC)
Looks like a drive-by spammer, only one known account. Pahunkat ( talk) 11:07, 13 February 2021 (UTC)
The user has got away with linkspamming from the 9th - sandbox may also need to be nuked. Thanks, Pahunkat ( talk) 11:16, 13 February 2021 (UTC)
Per Njd-de's report at WP:AIV. — Newslinger talk 16:44, 13 February 2021 (UTC)
Found one more account through a link search. Adding another link summary template to give this another try. — Newslinger talk 19:38, 13 February 2021 (UTC)
— Newslinger talk 09:34, 12 February 2021 (UTC)
Domain used in spamming web/application development articles. — Bruce1ee talk 12:41, 15 February 2021 (UTC)
And other links of the same style
There has been a sort of spam-campaign going for US-related cities, where the domain will consist of town[placename].com. The spammer decided to open an ANI thread to complain about a warning they were left for spamming external links at Wikipedia:Administrators' noticeboard/Incidents#Complaint from Microthought2021, which led to a boomerang and a block. The links possibly need blacklisting - they are clearly owned by the same person, which rely on advertising to make profit and collect a few news sources to pass off as their own work. See the IP's contribs. COIBot only processed one link when I tried to poke it however. Pahunkat ( talk) 12:12, 15 February 2021 (UTC)
The reports seem to be coming, but for those that are here:
The IPv6 range is blocked, the IP is stale (note, earliest edit from
May '18 and never warned). Most/all links reside on related servers (Server IP 192.185.79.###), there are tools out there to find out which sites are on all these IPs. I am afraid we cannot blacklist town(\w+)\.com\b
, it will likely throw false positives. --
Dirk Beetstra
T
C
13:08, 15 February 2021 (UTC)
@ Pahunkat: - Wikipedia talk:WikiProject Spam/LinkReports/townatlanta.com contains a db dump from the collected linkadditions for 'town*.com' (inverted domains, sorry, db search trick). For sure, blocking 'town*.com' will not work (there are way too many), but maybe there are some you missed? -- Dirk Beetstra T C 14:53, 15 February 2021 (UTC)
Thanks for looking into that Beetstra - I agree that blocking town*.com will cause too much collateral damage. I’ll look into the other domains later on (right now my hands are full), identifying them should be easy given they all use the same landing page design - but blocking domains as they are spammed seems like the best option I can think of so far. Thanks, Pahunkat ( talk) 15:45, 15 February 2021 (UTC)
Already blacklisted:
New:
Some more domains that I found from the list (I only checked 100 or so promising domains, all townof*.com ones seemed legitimate), same design of webpage. Pahunkat ( talk) 20:57, 16 February 2021 (UTC)
Searching up certain strings on each site finds the following as well - I still need to verify these:
Pahunkat ( talk) 21:57, 16 February 2021 (UTC)
All the same format, just waiting for the COIBot report to see if these have been spammed before Pahunkat ( talk) 14:32, 17 February 2021 (UTC)
— Bruce1ee talk 17:42, 15 February 2021 (UTC)
— Newslinger talk 09:00, 19 February 2021 (UTC)
— Newslinger talk 09:01, 19 February 2021 (UTC)
— Newslinger talk 12:18, 19 February 2021 (UTC)
— Newslinger talk 04:25, 20 February 2021 (UTC)
Gross ☆ Bri ( talk) 17:23, 18 February 2021 (UTC)
— Bruce1ee talk 06:31, 20 February 2021 (UTC)
— Bruce1ee talk 06:45, 20 February 2021 (UTC)
— Newslinger talk 12:19, 19 February 2021 (UTC)
— Newslinger talk 21:58, 18 February 2021 (UTC)
— Bruce1ee talk 12:34, 20 February 2021 (UTC)
— Bruce1ee talk 12:59, 20 February 2021 (UTC)
experiencenissanleaf.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot- Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com
On February 12, Atikutso603 was blocked for persistently adding links to experiencenissanleaf.com in different articles. It's obvious link spam. Now a "new" editor, Hasankamrul2050, has suddenly appeared and begun adding links to the same website in similar articles. Of course, he or she also needs to be blocked but I think the behavior of this editor(s) and the quality of the website as sufficient to land this site on our blacklist. ElKevbo ( talk) 06:31, 21 February 2021 (UTC)
(Meta note: no idea if this report is necessary, out of abundance of caution and for the sake of documentation I'm reporting it. I'll be reading the rest of the WikiProject's documentation shortly, but please let me know if this report was unnecessary.) Links were spammed across several articles, as well as a bit on eswiki by the IP. Perryprog ( talk) 17:20, 23 February 2021 (UTC)
— Bruce1ee talk 10:17, 24 February 2021 (UTC)
Posting this to generate the blacklistable COIBot report. GeneralNotability ( talk) 16:03, 24 February 2021 (UTC)
Cannaspam; refspam of the tediously usual sort ☆ Bri ( talk) 19:21, 22 February 2021 (UTC)
— Bruce1ee talk 11:45, 23 February 2021 (UTC)
user:Adelesmith repeatedly deleted this section. Maybe it is time to blacklist? -- Dirk Beetstra T C 12:04, 23 February 2021 (UTC)
— Bruce1ee talk 16:54, 20 February 2021 (UTC)
— Newslinger talk 00:26, 26 February 2021 (UTC)
This one had been quiet for a while, but is showing renewed signs of spam activity. - MrOllie ( talk) 18:16, 25 February 2021 (UTC)
— Newslinger talk 20:53, 25 February 2021 (UTC)
— Newslinger talk 20:53, 25 February 2021 (UTC)