Spam Patrol
From Katrina Help Info
| Table of contents |
Trends
Recent reports
- 05-14-2008 - 0 days no spam
- 05-14-2008 - removed 2 spam posts - keywords: .\au .\eu .\gr .\it .\kr thu*mbs
- 05-13-2008 - removed 1 spam post
- 04-28-2008 - removed 2 spam posts - soliciting sports equipment
- 04-26-2008 - removed 3 spam posts
- 04-17-2008 - removed 1 spam post - keywords: \.ca|\.ar|thu*mbs|
- 04-08-2008 - removed 1 spam post
- 04-07-2008 - spam filter updated: \.\br|\.\nl|\.\nu|\.\tk|\.\uk|\.\vn|\.\za|
- 04-05-2008 - removed 1 spam post
Previous reports
- 03-28-2008 - spam filter updated: \.\ch|\.\mx|\.\il|\.\ro|\.\ru|
- 03-28-2008 - removed 1 spam post - keywords: see below
- 03-26-2008 - removed 1 spam post - keywords: after-grad beingfamous bergvagabund creativecopper eaffu emia epnetwork fieropride flyfishingweekends friedmacher geonex labpatpue lanetconsulting lpakenya luach-nadlan majalati martingujan mir-media mymoney-magazine or-online rankosaur ron-siso seminariodeqro svccgilroy timbre vreausastiu waagen xivesoftware zurichmarathon
- 03-24-2008 - removed 1 spam post - keywords: see below
- 03-23-2008 - removed 1 spam post - keywords: see below
- 03-21-2008 - removed 1 spam post - keywords: beautycap cmminformation commcloset communicationroad datingeverday ecommercetrain finanicialstory flatflat frascati grocerycarriage havasupages hobbiesforfun informationinquiry josephburnett michael-schumacher mmdatahub mycomputingnews mywebrelease nsaskr ourpressreleases photographyforfun techiehut toomexico us50-secolo virtualgames vorck
- 02-25-2008 - removed 2 spam posts
- 02-23-2008 - removed 4 spam posts
- 02-21-2008 - removed 2 spam posts
- 02-20-2008 - removed 4 spam posts
- 02-13-2008 - removed 2 spam posts
- 02-12-2008 - removed 2 spam posts
- 02-10-2008 - removed 3 spam posts
- 02-08-2008 - removed 2 spam posts
- 02-06-2008 - removed 2 spam posts
- 02-04-2008 - removed 2 spam posts
- 02-01-2008 - removed 2 spam posts
- 01-25-2008 - removed 2 spam posts
- 01-19-2008 - removed 2 spam posts
- 01-17-2008 - removed 1 spam post
- 01-16-2008 - removed 2 spam posts
- 01-02-2008 - removed 2 spam posts
- 12-31-2007 - removed 2 spam posts
- 12-30-2007 - removed 2 spam posts
- 12-28-2007 - removed 1 spam post
- 12-27-2007 - removed 2 spam posts
- 12-27-2007 - added 5 spam filter keywords
echo*chamberproject encyc*lopediadramatica indo*pedia jaye*fem wow*wiki
- 12-26-2007 - removed 5 spam posts
- 12-25-2007 - deleted 14 spam posts
- 12-24-2007 - removed one spam post
- keywords:
19 snorke.info 14 indu*lger.info 14 bats*wing.info 11 wraw*ler.info 11 burb*lers.info 10 unfe*eble.info 08 miss*erve.info
- filtered wo*rds were not blocked because post size was too large (10K with no paragraphs) to process as a single Regex string - Does any one have a fix?
- --jwalling 00:06, 25 Dec 2007 (CET)
- 12-14-2007 - removed 7 spam posts from same spammer
- Keyword: serv*emp
- 12-07-2007 - deleted one spam post
- keywords:
55 troop270.com 50 turgjengen.org 50 socks-manufacturers.com 45 wirelessilliana.com 45 cosmetic-packaging-manufacturers.com 40 usedboatdealer.com 40 swiic.com 40 partnerwithsap.com --- 35 woodcrafts-online.com 35 meretusa.com 35 marylandcomputerguy.net 35 c21redwood.com 35 bostoncentury.com 30 eqia.com 30 christianspeaker.net 30 borrington.org 25 snowclubs.com 25 schonborn.com 25 schmittziesart.de 25 npgsupport.com 25 led-autolight.com 25 jaxrotaract.org 25 hardenassociates.com 25 boatnbabes.com 25 arrastaocountry.com.br --- 20 sbcoachescollege.com 20 rubber-plastics-manufacturers.com 20 reverejournal.com 20 reportchildpo*rn.com (large post exceeded filter limit) 20 pfadfinder-s8.org 20 mayafoods.com 20 maslov.com 20 interserverhost.com 20 fisheadcartoons.com 20 f-ccc-zion.com 20 cripo-ua.com --- 15 testmeter.co.uk 15 telephone-booth.com 15 sxabearing-manufacturers.com 15 staticchain.com 15 marzeporgohar.org 15 jericogt.com 15 glodev.com 15 dottaauction.com 15 cosmickaos.com 15 bigskyregion.org 15 bassboatmagazine.com 15 athomewithmark.com --- 10 wecareforkids.org 10 sacapuntos.com 10 rgvtechs.com 10 naturalspascanada.com 10 mqantiques.com 10 getstoked-openair.de 10 freewarecorner.com 10 dreadneck.com 05 mavis-crafts.com 05 imdcsudan.org 05 flyingaggies.org
- 11-13-2007 - rolled back one spam post
- Keywords:
kin*bote.info 20 nick*pot.info 21 war*work.info 21 ---- bhistie.info 18 daphnid.info 19 lunulite.info 13 sheitel.info 10 sunkie.info 12 tinnily.info 19 unmarine.info 15
- 11-12-2007 - removed 2 spam posts
- Keywords:
ankelia-nature.com 6 asie-voyages.com 5 biblored.org 6 blue*springsbmx.com 8 gov.ph 2 hdac.org 3 hoosierfishing.com 5 indiana*outfitters.com 10 lewakins.com 2 lumayagrealty.com 6 norcab.com.au 5 royce*motor.com 8 smallbizbohol.com 4 talentmodeles.com 4 xuccco.org 4 youthfitnesssolutions.com 3
- 11-08-2007 - rolled back 3 one word spam posts
- 10-29-2007 - rolled back one spam post
- keywords:
Old: batswing*info 12 burblers*info 11 indulger*info 14 misserve*info 14 unfeeble*info 13 wrawler*info 17 New: be-header.info 13 derided.info 9 enbus-she.info 9 enridged.info 7 mosaical.info 7 serfages.info 8 stroam.info 14 unveiler.info 11
- 10-26-2007 - removed four spam posts
- Keywords:
batswing*info 13 burblers*info 15 driven4.info 14 indulger*info 13 misserve*info 17 roof-top.info 22 snorke.info 22 unfeeble*info 10 wel*lso.info 20 wrawler*info 16 you*tells.info 24 ---- asusehuk 38 dark-ginger 49 idi*lis.\ro 200 joshua-alan 45 stellarsparty 37 trollgris 31 ---- berhym.info 25 boyro.info 31 embrac.info 22 ercast.info 21 nytromobile.info 12 ronyon.info 23 rotic.info 17 scypus.info 15 spr*ag.info 31 unbak.info 19 ---- driven4.info 19 roof-top.info 17 snorke.info 15 wel*lso.info 27 yout*ells.info 24
- 10-25-2007 - deleted one spam post
- keywords:
alient*info behav*info demogen*info enlard*info etotest*info skains*info wedged*info
- 10-24-2007 - rolled back 2 spam posts
- keywords:
alient*info behav*info berhym.info boyro.info demogen*info embrac.info enlard*info ercast.info etotest*info nytromobile.info ronyon.info rotic.info scypus.info skains*info spr*ag.info unbak.info wedged*info
- 10-18-2007 - rolled back spam on Help Needed
- 10-12-2007 - repeat of last spam post
- 10-09-2007 - Removed one spam post of 190K. The spam came without end of lines which prevented the spam filter from working. The first 2 keywords (sans asterisk) should have been blocked.
- 10-09-2007 - a complete list of parsed and sorted terms and URLs:
- myseattle.com/mediawiki/spam-2007-10-09.txt
- 10-09-2007 Most frequent keywords:
Frequency 50*webs.com 1000 2.48 free*hostia.com 500 1.24 ---- alpe-fountains.com 130 0.32 artfontany.cz 95 0.24 jesper-holm.dk 140 0.35 jtcmed.com 125 0.31 suncom.uz 145 0.36 uzmilana.com 135 0.33 wz.cz 95 0.24 ---- aeronta.info 30 0.07 artfountains.eu 30 0.07 awliny.info 25 0.06 batenol.info 45 0.11 bigeyelive.com 65 0.16 bosapiv.info 65 0.16 cawmyki.info 20 0.05 cetryko.info 55 0.14 deralma.info 40 0.10 dyniter.info 25 0.06 eklans.info 35 0.09 explon.info 70 0.17 fesgarp.info 35 0.09 fiterha.info 75 0.19 marketingstat.com 40 0.10
- 09-24-2007 Removed 3 spam posts
- Keywords: 50*webs ciudad.com.ar domaindlx.com freespaces.com galeon.com graffiti.net libero.it sailormoon.com voila.fr xmail.net
- 09-24-2007 Removed 1 spam post
- 09-23-2007 Removed 1 spam post
- Keywords: ch*a-ba jai*ly nod*ify pen*dal qua*lo
- 09-10-2007 Removed 2 spam posts.
- 09-09-2007 Removed 10 spam posts.
- Keywords: angel*fire ibel*gique iespana\.es isu*isse
- 09-04-2007 Filter changed: .*\.cn\/ (Chinese domains indicate spam)
- 09-03-2007 Removed 1 spam post.
- 09-02-2007 Removed 3 spam posts.
- Keywords: hangzhau.cn net.cn nib*ko.info org.cn zo*dip.info
- Filter: \.cn\/|nib*ko|zo*dip
- 09-01-2007 Removed 1 spam post.
- Keyword: airsofthost\.com
- Filtered: airsofthost\.com wofanyi\.com toolmannet\.com
- 08-31-2007 Removed 2 spam posts.
- Keyword: wofanyi\.com
- 08-30-2007 Removed 2 spam posts.
- Keywords: airsofthost\.com
- 08-29-2007 Removed 1 spam post.
- Keyword: toolmannet\.com
- 08-25-2007 Removed 1 spam post.
- Keyword: 110mb\.com
- 08-22-2007 Removed 5 spam posts.
- 08-21-2007 Removed 9 spam posts.
- Keywords: rigour\.info 99uf\.com 9fu9\.com vhvf.com vhvm.com vhvy.com wodiyi.net
- 08-19-2007 Removed 14 spam posts.
- Keywords: ifrance\.com akmokanzen broadwaylili demurediablo deviantrus girlwho-is highbulp igaros jdawsona kalian lordsander lovereceier noxuhax oiyaoi singaporepets speedofsoun tat-ooin tizolaa toofarfrommaybe voltia yeeden
- 08-17-2007 Deleted many many spam posts.
- Keywords: amo*hseni ash*ythro blo*profeldi chaba\.info davte\.info helmed\.info kinu*nia nob*inters psis*emiya saibso\.org ustall\.org
- 08-13-2007 Deleted spam from 25 pages.
- filtered key words - 125mb\.com beshen*nayabelka boogie*james coar*mago freehostia\.com freeweb*town kopa*pguw lico*hwar lorc*axon mau*balle mc*wardlo prncess*prncipe sali*ne-joy starbrite*yellow t35\.com zoel*verd
- 08-13-2007 Deleted spam from 7 pages.
- 07-10-2007 Blocked User:HteNmj - rolled back and protected User:FrankHorowitz
- 07-08-2007 Blocked User:JirPfc - rolled back and protected User talk:Valroy
- 07-06-2007 Blocked User:SbhQej - Rolled back and protected User_talk:Nkb
- 07-05-2007 Blocked User:ZzdYqn - rolled back Help Needed
- 06-21-2007 Deleted User:Tyqc999 - filtering guan*zhilu
- 06-07-2007 Blocked Le0W3p and rolled back User_talk:Neal_keplinger
- 05-29-2007 Added 3 spam filters
- 05-29-2007 Deleted Chinese spam page and blocked spammer Din*mowei
- 05-21-2007 Added 24 filters for Chinese spam sites - verified working
- 05-20-2007 Deleted spammer Din*mmoqq and 5 new spam pages.
- 05-18-2007 Deleted spammer 浩南
- 05-17-2007 Deleted spammer Din*mo11 and 5 new spam pages.
- 04-26-2007 Rolled back Help Needed and blocked vandal.
- 04-13-2007 Rolled back and protected 1 vandalized page. Blocked vandal.
- 04-12-2007 Rolled back and protected 20 vandalized pages. Blocked vandals.
- 04-10-2007 Rolled back 5 pages and blocked vandals
- 04-10-2007 Rolled back User_talk:Neal_keplinger.
- 04-03-2007 Rolled back and protected spammed page
- 01-22-2007 filtering lot*tery. Blocked spammer Tester1
- 01-17-2007 removed spot spam from Jobs Offered. Blocked spammer RoodWIlder
[1] (http://groups.yahoo.com/group/admin-katrina/message/1217)
- 12-14-2005 a new spam filter was devised: SpammerBlockPattern
SpamFilter Project
SpammerBlockPattern Updates
Spammer modus operandi
- Spammers use affiliate marketing (http://en.wikipedia.org/wiki/Affiliate_marketing) to raise money.
- Spammers target wikis to boost affiliate ranking on search engines. (see Spamdexing (http://en.wikipedia.org/wiki/Spamdexing))
- Spammers leave finger prints:
- URLs they want indexed by search engines
- For sale words: drugs, gambling & sex (what else is there?)
- Markup unique to spammers, see next item.
- Spambots frequently make wiki link lists invisible by enclosing them with DIV elements that have the style height attribute equal 1px. Therefore, you will not see the spam unless you view it with history/compare or view it in edit mode.
- Some spambots make no attempt to hide links; use highly variable URLs; and use no key words to block, e.g. [http://blah98.yada24~info 44][http://blah99.yada25~info 45], etc. These spambots often trash the regular content by encoding <,>,& into HTML entities (http://en.wikipedia.org/wiki/HTML_entity).
- Wiki articles with direct links from the main page are high value targets for spammers, however, any editable wiki page is vulnerable. By setting your search preferences to include all namespaces, you can find the obscured spam locations using the search box.
- The same spammer may revisit a page with different Usernames in rapid sequence to add more spam, limiting the rollback feature and requiring the cleanup to use edit/deletes.
- Another spammer trick is to insert a URL somewhere in the body of an article using brackets only. e.g. [http://www.birth-control.freeservers-dot-com/] would appear as [2] (http://www.birth-control.freeservers-dot-com/)
- By removing spam from articles the spammers' needs are frustrated because the history pages which retain the spam have meta tags for robots which say noindex,nofollow and the spam is no longer indexed by search engines.
- Hopefully, by removing spam quickly, spammers will see this wiki as a waste of time and they will go elsewhere to do their dirty deeds.
- For more information about wiki spammers: [3] (http://en.wikipedia.org/wiki/Link_spam)[4] (http://chongqed.org/chongqed.html)[5] (http://chongqed.blogspot.com/2004/11/two-reasons-why-indexing-kept-pages-is.html)
