Wikipedia talk:WikiProject Spam/2009 Archive Jan 2

fastfood.com.au and insurance link spam

 * Links


 * Accounts

--- Barek (talk • contribs) - 05:30, 30 January 2009 (UTC)

Spam links to Dan Schneider articles - continued
See Wikipedia_talk:WikiProject_Spam/2009_Archive_Jan_1 for prior discussion. --Ronz (talk) 18:38, 22 January 2009 (UTC)


 * To avoid misunderstanding (i.e., someone thinking this is a current case of spamming), I have removed the lists of articles and users. Please see the link above for the complete discussion and links to articles. In short, this spam issue was dealt with by using XLinkBot to keep new and anonymous editors from spamming links to Schneider's articles. However, this approach also allows experienced editors to use these links if they want to. As for the particular articles and edits brought up in the discussion, no consensus on these edits being spam was reached, and the decision was made to do a checkuser on those editors. Until this is done, it was impossible to separate the good faith edits from those made in an attempt to spam Wikipedia.


 * However, as I mentioned in the original discussion, if it makes people happy let us go ahead and remove all the "spam" edits people are complaining about. But with the Bot now in place, doing that also means if a new editor reinserts these links or other references to Schneider's articles, then the assumption has to be these are good faith edits and not spam. Do people agree with this approach?--SouthernNights (talk) 21:58, 22 January 2009 (UTC)


 * I've restored the list below in order to help the creation of the sockpuppet report and checkuser request. --Ronz (talk) 22:42, 22 January 2009 (UTC)


 * Apologies for misunderstanding what was going on. I totally support this request and am also fine with removing the links (having little desire to waste more time with this). All I oppose is any attempt to label any link or reference to Schneider as spam, since a number of editors like myself have made good faith edits using references and such to his reviews and essays.--SouthernNights (talk) 23:02, 22 January 2009 (UTC)

Listings

 * Listing the articles:
 * 1) Aguirre,_the_Wrath_of_God by Puppette
 * 2) Aparajito by Gumul
 * 3) Autumn Sonata by Mansforddell and 4.230.147.236
 * 4) Belle de jour by Jennybarker77 and 4.230.147.95
 * 5) Blowup by 4.231.131.170 and Lazarus86
 * 6) Bicycle Thieves by  Tubingstutt and 4.231.26.1
 * 7) Breathless (1960 film) by Veritasmaximal
 * 8) Chester Himes by 4.230.147.236
 * 9) The Conversation by Bawa007and Veritasmaximal
 * 10) Crime and Punishment by Halowest and NormalGoddess and Mctoomer
 * 11) Day_of_wrath by Krebzambia
 * 12) Deliverance by Theyarewack
 * 13) The_Double_Life_of_Veronique by Superemoan
 * 14) Dragon Hunters (film) by 75.146.56.246
 * 15) Early Summer ‎by Uprightgreen
 * 16) Ellen Gilchrist by 67.67.220.167 and SouthernLights
 * 17) Eternity and a Day by Vitobruno and Brunogz and Vandenflexor
 * 18) Fitzcarraldo by Orangenj and 67.67.196.87
 * 19) Floating Weeds by 67.67.220.167 and 4.230.147.155
 * 20) Freaks  ‎by Mullerjena and Ambergowster
 * 21) Frenzy by Version100
 * 22) Il grido by Jennybarker77 and Vandenflexor
 * 23) The Killing of a Chinese Bookie by Bawa007
 * 24) Klaus Kinski  ‎by 4.231.132.20
 * 25) Knife in the Water (film) by Archeshipley and Takashbillisk
 * 26) Lacombe_Lucien by Luigibob and Vandenflexor Review of Criterion DVD of Lacombe, Lucien
 * 27) Landscape in the Mist by Vitobruno and Mammamal
 * 28) Life of Pi by Pheon (twice)
 * 29) Lifeboat (film) by Palisadegator and Theovetes and Vandenflexor
 * 30) Little Dieter Needs to Fly by Orangenj and Luckistip
 * 31) Major Dundee by Hearinglosslip and Amphidund and Filialprojector
 * 32) Missing (film) by 68.93.132.113
 * 33) Mr. Arkadin by Archeshipley and Ambersoniata and 4.231.130.110
 * 34) My Best Fiend by 67.67.220.167 and 4.231.132.20
 * 35) Ordet by Theocredit
 * 36) Regeneration (1997 film) by Rojaslaw and Mckinnigill
 * 37) Robot Monster by Arturogutti and Mathemaxi
 * 38) The Rules of the Game by 68.93.132.203
 * 39) Satyricon_(film) by Rusinga
 * 40) Sansho the Bailiff by Tubingstutt and Shukichisanzawa and 209.30.129.225
 * 41) The Searchers (film) by Belamorreia and Stillstudying and 4.230.147.236
 * 42) Solaris (1972 film) by  99.179.98.2 and Lazarus86
 * 43) Straw Dogs by 67.67.196.87 and Radoslav10 and Bennyroyal and 67.234.188.136
 * 44) Taste of Cherry by Umdjden and Takashbillisk and Rebeccamack
 * 45) Three Colors: Blue by Panayibrit and Shelfgoddess and 4.231.131.16
 * 46) Three Colors: Red by 99.179.98.2 and Shelfgoddess and 4.231.131.16
 * 47) Three Colors: White by 99.179.98.2 and Shelfgoddess and 4.231.131.16
 * 48) Through a Glass Darkly (film) by Vitobruno and Mitziohara
 * 49) Ulysses' Gaze by Brunogz and Mathemaxi
 * 50) Umberto D. by Pattonesk and Verdipun and 4.231.133.199
 * 51) Uzak by Umdjden and 4.230.147.236
 * 52) Wages_of_Fear by Amazile
 * 53) War-Gods of the Deep by Bennyroyal and Nugluts and Mathemaxi
 * 54) Werner Herzog ‎by 4.231.132.20
 * 55) Winter Light ‎by Uprightgreen and Vitobruno and Crayonedcat and 4.230.147.105
 * 56) The Wrong Man by Palisadegator and Guffinmac
 * 57) 20 Million Miles to Earth by Aerogelo and Filialprojector
 * 58) 8_1/2 by Babuul00 and 68.93.132.113


 * Some data (from top 10s):


 * noripcord.com


 * Users who added no other links than this link:




 * altfg.com


 * Users who added no other links than this link:




 * blogcritics.com


 * Users who added no other links than this link:


 * User:Dorksandlosers - seems unrelated.


 * Users who only added more than one of the above mentioned links:


 * noripcord.com and altfg.com

The two mentioned 69.-IPs are in the range of Bell Canada (69.156.0.0/14), the other two (68. and 12.) are in America (the latter in a hotel?). All links are also used by editors who seem to have a wide variety of links (though the mentioned accounts are high in the top 10 of users ..). LinkReports are on the way, which may show some more. --Dirk Beetstra T C 19:04, 12 January 2009 (UTC)


 * thesimon.com


 * obsessedwithfilm.com


 * hackwriters.com


 * monstersandcritics.com


 * unlikelystories.org


 * themoderatevoice.com


 * laurahird.com

Accounts
These are the accounts listed above that have not already been blocked, plus a few that appeared problematic that were found in the process of investigating those accounts.

I've stopped summarizing these editors' edit histories at #53. In no way is this a complete list of editors that have spammed these links, but should be enough to justify a checkuser. --Ronz (talk) 16:40, 29 January 2009 (UTC)


 * 1)  28 March 2008 - Schneider spammer
 * 2)  30 March 2007
 * 3)  3 March 2007 - hackwriters.com and Schneider spammer
 * 4)  12 January 2007 - altfg and newyorkreview.org Schneider links
 * 5)  1 May 2007 and 8 May 2007 - Schneider spammer
 * 6)  27 January 2007 and 15 March 2007 - Schneider spammer
 * 7)  13 August 2006
 * 8)  22 September 2006 - altfg.com and Schneider spammer
 * 9)  17 September 2006
 * 10)  28 August 2006 - altfg.com and Schneider spammer
 * 11)  14 September 2006
 * 12)  27 January 2007 - cosmoetica.com and Schneider spammer
 * 13)  29 November 2006 - newyorkreview Schneider link
 * 14)  23 November 2006 - added storysouth.com and cosmoetica.com Schneider links
 * 15)  28 November 2006 - cosmoetica.com
 * 16)  July 2008 - altfg, hackwriters, cosmoetica, blogcritics and Schneider spammer
 * 17)  August 2008 - Schneider spammer
 * 18)  19 November 2008 - hackwriters and Schneider spammer
 * 19)  14 December 2008 - removed two external links, added three more, two to Schneider's reviews
 * 20)  21 July 2008 - added obsessedwithfilm.com Schneider link in identical format as other spammers
 * 21)  November 2008 - altfg.com and Schneider spammer
 * 22)  December 2008 - very sophisticated editing from a new account - has added two links, one blogcritics.org Schneider link
 * 23)  31 December 2008 - fairly sophisticated editing from a new account - has added two links, one noripcord.com Schneider link
 * 24)  5 December 2008 - one edit total, adding thesimon.com Schneider link
 * 25)  31 July 2008 - very sophisticated editing from a new account -  spammer
 * 26)  October, November 2008 - fairly sophisticated editing from a new account - added a blogcritics.org Schneider link and restored Schneider spam
 * 27)  October, November 2008 - fairly sophisticated editing from a new account - added a themoderatevoice.com Schneider link
 * 28)  December 2008 - SPA - restored noripcord Schneider link
 * 29)  16 November 2008 - restored altfg.com Schneider link
 * 30)  15 November 2008 - altfg.com and Schneider spammer
 * 31)  October, November 2008 - spammed hackwriters.com, blogcritics.org, and laurahird.com Schneider links
 * 32)  November 2008 - altfg.com and Schneider spammer
 * 33)  31 July 2008 - blogcritics.org, unspokencinema.blogspot.com, and Schneider spammer - should have been blocked with the rest in September 08
 * 34)  19 November 2008 - reverted blogcritics and newyorkreview.org Schneider links
 * 35)  20 November 2008 - restored hackwriters Schneider link
 * 36)  August 2008 - blogcritics.org and Schneider spammer - should have been blocked with the rest in September 08
 * 37)  14 December 2008 - added blogcritics.org and obsessedwithfilm.com Schneider links
 * 38)  14 December 2008 - SPA - hackwriters.com Schneider link
 * 39)  5 November 2008 - SPA - altfg.com and Schneider spammer
 * 40)  8 November 2008 - added altfg, hackwriters, storysouth.com Schneider links
 * 41)  19 November 2008 - spammed altfg and unlikelystories Schneider links
 * 42)  November, December 2008 - fairly sophisticated editing from a new account - added a  noripcord.com Schneider link
 * 43)  1 November 2008 - SPA - added two laurahird Schneider review links a single article
 * 44)  31 July 2008 - SPA - altfg.com Schneider spammer - should have been blocked with the rest in Sept 08
 * 45)  appears have added writeup on Schneider review in good faith to Lacombe Lucien, given that he's done the same with many other reviewers
 * 46)  29 July 2008 - SPA - blogcritics.org Schneider spammer - should have been blocked with the rest in Sept 08
 * 47)  November, December 2008 - blogcritics.org Schneider spammer
 * 48)  27 July 2008 - hackwriters.com Schneider spammer - should have been blocked with the rest in Sept 08
 * 49)  July 2006 to February 2008 - cosmoetica, unlikelystories, altfg.com, laurahird, blogcritics, hackwriters Schneider links, plus geocities and yetanotherbookreview.com (anonymous author) links - should have been blocked with the rest in Sept 08
 * 50)  September 2006 to August 2008 - theyshootpictures.com, laurahird, cosmoetica, unspokencinema.blogspot.com, unlikelystories.org, monstersandcritics.com, cosmoetica, altfg, blogcritics.org, feeltheword.net, and themoderatevoice.com Schneider links, plus a geocities link - should have been blocked with the rest in Sept 08
 * 51)  December 2008 - reverted a thesimon.com Schneider link - attacked editor on article talk page for removing link
 * 52)  October, November 2008 - added brentley.com and yetanotherbookreview.com Schneider links
 * 53)  3 August 2008 - cosmoetica Schneider spammer - should have been blocked with the rest in Sept 08
 * 54)  October, November 2008
 * 55)  November 2008
 * 56)  9 November 2008
 * 57)  October to December 2008 - appears to be good faith edits
 * 58)  appears to be good faith edits
 * 59)  December 2008 - probably good faith editing - editing is similar to blocked editors other than Puppette has used talk pages for discussion.
 * 60)  22 August 2008 - altfg Schneider spammer
 * 61)  8 November 2008
 * 62)  November, December 2008 - SPA - reverted Schneider spam and added hackwriters Schneider link
 * 63)  December 2008, January 2009 - added noripcord link to Schneider essay previously removed as a cosmoetica link
 * 64)  July 2008 through January 2009 - altfg Schneider spam - looks more like a case of meatpuppetry that has gone on to do other editing
 * 65)  December 2008, Jan 2009 - SPA - seems to have considerable editing experience - added noripcord Schneider link
 * 66)  10 August 2008 - blogcritics and altfg Schneider spammer - should have been blocked with rest in Sept.
 * 67)  1 January 2009 - one edit total showing editing experience - added blogcritics and cosmoetica Schneider links
 * 68)  hackwriters, feeltheword.net, and Schneider spammer
 * 69)  16 November 2008 - two edits total, restoring altfg Schneider spam and blogcritics Schneider link
 * 70) Gorzak88
 * 71) Waltherpps
 * 1)  16 November 2008 - two edits total, restoring altfg Schneider spam and blogcritics Schneider link
 * 2) Gorzak88
 * 3) Waltherpps
 * 1) Gorzak88
 * 2) Waltherpps
 * 1) Gorzak88
 * 2) Waltherpps
 * 1) Gorzak88
 * 2) Waltherpps
 * 1) Waltherpps

These are accounts that were erroneously added to the list above though they had already been blocked:
 * Already blocked
 * 1)  January 2006 to April 2006 - yetanotherbookreview, cosmoetica, hackwriters, dublinquarterly.com, thesimon.com, retortmagazine.com, and midwestbookreview.com Schneider links - should have been blocked with the rest in Sept 08 already blocked in Sept '08

Previously blocked editors
Note: Some of these editors were blocked for sockpuppetry and edit-warring to remove the links, rather than adding the links.
 * From the Sep'08 AN report:

Domains

 * Currently listed with XLinkBot
 * 1) altfg.com - 14 January 2009
 * 2) blogcritics.org - 14 January 2009
 * 3) cosmoetica.com - 14 January 2009
 * 4) noripcord.com - 14 January 2009
 * Currently listed with XLinkBot
 * 1) altfg.com - 14 January 2009
 * 2) blogcritics.org - 14 January 2009
 * 3) cosmoetica.com - 14 January 2009
 * 4) noripcord.com - 14 January 2009
 * Currently listed with XLinkBot
 * 1) altfg.com - 14 January 2009
 * 2) blogcritics.org - 14 January 2009
 * 3) cosmoetica.com - 14 January 2009
 * 4) noripcord.com - 14 January 2009
 * Currently listed with XLinkBot
 * 1) altfg.com - 14 January 2009
 * 2) blogcritics.org - 14 January 2009
 * 3) cosmoetica.com - 14 January 2009
 * 4) noripcord.com - 14 January 2009
 * Currently listed with XLinkBot
 * 1) altfg.com - 14 January 2009
 * 2) blogcritics.org - 14 January 2009
 * 3) cosmoetica.com - 14 January 2009
 * 4) noripcord.com - 14 January 2009
 * 1) noripcord.com - 14 January 2009

Conclusions
The problems with the spamming of links to Schneider reviews is larger than originally thought. The links have been added not only to articles about movies and directors, but to articles about books and authors as well. The links are not just to a few movie review sites, but to a wide range of sites that offer reviews and analyses.

The problematic editing that's occurred since the Aug'08 ANI and Sep'08 AN has been done almost entirely by new accounts that make a few edits to a few articles - the same behavior common to the editors blocked in Sep'08. --Ronz (talk) 21:22, 28 January 2009 (UTC)

Next steps
I've asked for some help getting a sockpuppet/checkuser report going here.

I'm started looking through the domains above, and will be proposing that more be added to XLinkBot. --Ronz (talk) 22:48, 30 January 2009 (UTC)

haroldstreet.org.uk
Some people deserve a special notation here. Creativity to circumvent LinkWatcher-detection (I checked the working of the blacklists, they do detect this type of fun). There was already a rule for this on XLinkBot, but this creative way of adding a link resulted in the bot not reverting.

See: diff





I adapted the bots, they detect this now. I indeffed Phil Newby. --Dirk Beetstra T C 17:55, 30 January 2009 (UTC)

crackle.com

 * Article
 * Article

Crackle
 * Accounts

--Hu12 (talk) 21:07, 30 January 2009 (UTC)

centerforsecuritypolicy.org

 * Articles

Americas report http://spam.centerforsecuritypolicy.org
 * http://spam.americasreport.com
 * Accounts
 * Accounts
 * Accounts

--Hu12 (talk) 21:33, 30 January 2009 (UTC)

lovemytool.com

 * Links


 * Accounts

This URL has been added by this user since his first post in July 2008. This user also appears to have a conflict of interest in promoting the site, as the site shows under "About us" that one of the primary editors of the site is also named "Oldcommguy". --- Barek (talk • contribs) - 21:36, 30 January 2009 (UTC)

footnote.com

 * Links


 * Accounts

Not sure what to do with this one. On the one hand, the site seems to provide some good resources; but then, this is a single purpose account whose only postings for the last year-and-a-half on Wikipedia have been to add this link. --- Barek (talk • contribs) - 22:15, 30 January 2009 (UTC)

58.106.19.46 spams his site
—Preceding unsigned comment added by 69.208.12.24 (talk • contribs) 23:23, December 31, 2008

classic-rock-concerts.com

 * Accounts
 * Accounts

—Preceding unsigned comment added by Ccwaters (talk • contribs) 15:41, 14 January 2009

Burbank-Hotels.com
Accounts:
 * (up to as of posting)

—Preceding unsigned comment added by Mendaliv (talk • contribs) 06:07, 15 January 2009

newsborder.com

 * Links

--- Barek (talk • contribs) - 18:57, January 23, 2009 (UTC)
 * Accounts

traffic ticket spam



 * Accounts



Persistent addition of spam/promotional links to the Traffic ticket article. IP accounts and aged user accounts. Kuru talk  21:02, 31 January 2009 (UTC)


 * I think there are two different clusters here and some more domains worth blacklisting:


 * Cluster 1:
 * Accounts:
 * This IP appears to have been just reverting all of Ronz' edits, one of which just happened to be his deletion of an imintrouble.com link.
 * This IP appears to have been just reverting all of Ronz' edits, one of which just happened to be his deletion of an imintrouble.com link.
 * This IP appears to have been just reverting all of Ronz' edits, one of which just happened to be his deletion of an imintrouble.com link.
 * This IP appears to have been just reverting all of Ronz' edits, one of which just happened to be his deletion of an imintrouble.com link.
 * This IP appears to have been just reverting all of Ronz' edits, one of which just happened to be his deletion of an imintrouble.com link.
 * This IP appears to have been just reverting all of Ronz' edits, one of which just happened to be his deletion of an imintrouble.com link.


 * Spammed domains:
 * blacklisted earlier today
 * blacklisted earlier today
 * blacklisted earlier today
 * blacklisted earlier today


 * Related domains:


 * Cluster 2:
 * Accounts:


 * Spammed domains:
 * blacklisted earlier today.
 * blacklisted earlier today.
 * blacklisted earlier today.


 * Related domains:


 * It appears accounts from each group were deleting the other group's links so I think they may be competitors. On the other hand, 190.10.24.110 did add one link to mytrafficticketdefence.com but perhaps he was Joe jobing the competition. In any event, competitors or not, each cluster has done more than enough spamming and ignored more than enough warnings to justify blacklisting. -- A. B. (talk • contribs) 23:02, 31 January 2009 (UTC)