You may submit new spam reports here or on our submission form. This page is to let the community know about the activity of known spammers or discuss cases where you aren't sure whether they are spam or not. Either way, in addition to the spammer's url please let us know what wiki, blog, or guestbook is being spammed with a link to a page (revision) with the spam if possible. We will only chongq spammers we can verify are spamming.
Place links in this <pre> section so they will not become active links (and help the spammers). You also won't like what happens if this wiki accidently identifies you as a spammer (clear cookies if you run into that problem).
Submitted by Uwe Hermann on Wed, 2006-03-15 04:04.
Today, I had the "pleasure" to experience a new form of wiki spam in the Unmaintained Free Software wiki. Or at least it was the first time I had seen it…
The registered wiki user "Drunkers" (yes, the spammer scripts not only spam anonymously, they also create real accounts lately!) spammed several pages in the wiki, adding tons of spam links, hidden with fancy CSS and other tricks. Nothing unusual so far.
Another registered user ("Mootlif3") reverted the spammer's changes with comments like "reverted (spam)", "unrelated links removed", "deleted spam links", and "damn spammers". Or so I thought.
The real "wtf" moment emerged when I checked what "Mootlif3" really had done. He didn't really revert the changes of the spammer. He only removed a few of the links from the page, leaving most of them still in there! So it would look like a nice (human) wiki user had helped out with cleaning spam, but in reality he only created a false sense of "security" for people who really want to clean the spam…
I have been wondering when spammers were going to get smart enough to do that. I have seen a few like this before but it certainly is rare. Hopefully this stays with just a few spammers. It does require a bit of extra work for their spamming scritps so maybe it won't get too bad. In this case (as with most current MediaWiki spam) blocking CSSHiddenSpam would work. – Joe - 2006-03-19 23:58 UTC
2004-10-28 RubyWiki - zuche021.51.net "上海租车"
The spammer wrapped the spam inside the following tag:
<code style="visibility:hidden;display:none">
This prevented the spam from being visible to normal browsers. It also
made it show up as an empty line in diffs.
That is pretty nasty, but most wikis don't allow much HTML code (if any).
That should be taken up with the RubyWiki maintainers. The wiki we use here
doesn't allow attributes to be specified for the few HTML tags it allows. For
example: <i>text</i> works, but <i style="visibility:hidden;display:none">text</i>
displays as plain text. By not allowing a space in the tag this trick could
be blocked. It could be a security problem if the RubyWiki also allows
javascript to be embeded. You could have the page redirect to any page. That
isn't likely from spammers since it doesn't do their PageRank any good, but
other vandals could do it. --[[Joe]]
2004-08-17 AudacityWiki - "online casino"
This is very strange: This wiki received multiple spams from our old
friends at CBL217-132-240-191.bb.netvision.net.il
[www.casino-online-on-line.com], but the spam simply replaced entire
pages with the plain text "online casino" (no links or other markup).
Strange, indeed. Is the spammer trying to hurt the people that fired him, now?
A wiki spam Joe-job?
Perhapse we should try and contact them. Though its more likely they
are just spamming again on purpose and hoped we wouldn't notice. I saw
the same thing at dach's wiki.
POPFile wiki - http://www.pureteenz.com/hentai/ "hentai" rrcs-nys-24-97-207-39.biz.rr.com
POPFile wiki - http://www.plazaerotica.com/manga/ "manga" britney.bizrate.com
This one seems to attack pages with recent changes, hit multiple pages in
the morning then again 10 hours later.
dach's wiki - http://www.cater-equip.co.uk (link only) acbfeeb1.ipt.aol.com
http://cater-equip.co.uk (link only) acbfeeb1.ipt.aol.com
http://www.bslh.net (link only)
http://bslh.net (link only)
http://www.catering-equipment-online.co.uk (link only)
http://catering-equipment-online.co.uk (link only)
POPFile wiki - 221.136.46.72
I finally got Chinese keywords chongqed. The solution to the encoding problem was embarassingly simple. Just make your browser or editor interpret the stuff as gb2312 instead of iso-8859-1 (or whatever) and you get lots of nice Chinese characters that you can turn into numeric entities that can go into the db. – Manni - 2004-11-05 18:25
PF again: vod-solutions.com "Your Ultimate video on demand solutions" 222.65.0.205
http://www.skynet.ie/~dach/cgi-bin/wiki.pl?action=browse&id=SandBox&revision=93Thats only 3 domains that need chongqing, its just a bunch of random subdomains. I blogged all the subdomains even though they are likely just random words, some of them are likely keywords for him. Any subdomain to his 3 other sites redirects to emmss dot com. I just tried asdfasdfasdf.emmss dot org and it still redirected so no use in chongqing all the specific subdomains. – Joe
This is a ton of spam collected from a bunch of different sites. So I created a temporary page till I do something with them: JoesTempSpamHolder.
VERY SORRY FOR THIS http://buy-cialis-online.8m.com http://buy-cialis.redi.tk http://order-cialis.imess.net http://generic-cialis.redi.tk http://cialis.redi.tk http://cialis-online.redi.tk http://buy-cialis-1.6x.to http://order-cialis.redi.tk http://buy-cialis-online.redi.tk http://cheap-cialis.redi.tk http://cialis-pharmacy.redi.tk http://purchase-cialis.redi.tk http://order-cialis-online.6x.to http://buy-generic-cialis.6x.to http://buy-tadalafil.6x.to http://discount-cialis.6x.to http://buy-cialis-online.8m.com/cheap-cialis.htm http://buy-cialis-online.8m.com/order-cialis.htm http://buy-cialis-online.8m.com/buy-generic-cialis.htm http://buy-cialis-online.8m.com/cialis-online.htm http://buy-cialis-online.8m.com/buy-cialis.htm http://buy-cialis.sinfree.net http://generic-cialis.hotusa.org http://cialis-online.undonet.com http://buy-cialis-online.enacre.net http://generic-levitra.fateback.com http://buy-levitra.redi.tk http://buy-levitra.noneto.com http://generic-levitra.redi.tk http://levitra.redi.tk http://levitra-online.redi.tk http://buy-levitra-online.s5.com http://order-levitra.redi.tk http://buy-levitra-online.redi.tk http://buy-levitra-online.s5.com/buy-levitra.htm http://cheap-levitra.redi.tk http://purchase-levitra.redi.tk http://order-levitra-online.6x.to http://buy-generic-levitra.6x.to http://discount-levitra.6x.to http://buy-levitra-1.6x.to http://levitra-online-1.6x.to http://buy-levitra-online.s5.com/cheap-levitra.htm http://buy-levitra-online.s5.com/order-levitra.htm http://buy-levitra-online.s5.com/buy-generic-levitra.htm http://buy-levitra-online.s5.com/levitra-online.htm http://levitra-online.imess.net http://order-levitra.sinfree.net http://buy-levitra-online.undonet.com http://buy-xanax-online.4t.com http://buy-alprazolam.6x.to http://buy-cheap-xanax-online.6x.to http://buy-xanax-online.6x.to http://order-cheap-xanax.6x.to http://buy-generic-xanax.6x.to http://order-xanax-online.6x.to http://2mg-xanax.6x.to http://buy-xanax.yoll.net http://cheap-xanax.imess.net http://generic-xanax.undonet.com http://order-xanax.fateback.com http://xanax-online.sinfree.net http://buy-xanax-online.noneto.com http://buy-xanax.redi.tk http://cheap-xanax.redi.tk http://xanax-online.redi.tk http://xanax.redi.tk http://alprazolam-online.redi.tk http://generic-alprazolam.redi.tk http://cheap-xanax-online.uni.cc http://generic-xanax.uni.cc http://order-xanax-online.uni.cc http://buy-xanax-buy.uni.cc http://xanax-2mg.uni.cc http://purchase-xanax.uni.cc http://discount-xanax.uni.cc http://cheap-alprazolam.uni.cc http://xanax-pharmacy.uni.cc http://xanax-bar.uni.cc http://online-xanax.uni.cc http://buy-xanax-online.4t.com/buy-generic-xanax.htm http://buy-xanax-online.4t.com/cheap-xanax.htm http://buy-xanax-online.4t.com/order-xanax.htm http://buy-xanax-online.4t.com/xanax-online.htm http://buy-xanax-online.4t.com/buy-xanax.htm http://buy-ambien.redi.tk http://cheap-ambien.redi.tk http://ambien-online.redi.tk http://generic-ambien.redi.tk http://order-ambien.redi.tk http://discount-ambien.redi.tk http://ambien-price.redi.tk http://ambien-sleeping-pills.redi.tk http://buy-zolpidem.redi.tk http://ambien.redi.tk http://purchase-ambien.redi.tk http://buy-ambien.enacre.net http://cheap-ambien.sinfree.net http://ambien-online.sinfree.net http://buy-ambien-1.imess.net http://order-ambien.bebto.com http://buy-ambien-online.deep-ice.com http://ambien.sinfree.net http://ambien-online-order.fateback.com http://prescription-ambien.hotusa.org http://purchase-ambien.yoll.net http://buy-ambien-online.6x.to http://ambien-pharmacy.6x.to http://buy-cheap-ambien.6x.to http://generic-ambien.6x.to http://online-ambien.6x.to http://ambien-10mg.6x.to http://zolpidem-tartrate.6x.to http://zolpidem-online.6x.to
Same site, different sorry spammer: 66.199.238.xxx and ah1-p4id-90.advancedhosters.com
Sorry for my message.If you want delete the message - please mail me baron3000(at)bk.ru [[http://silver-cigarette.boom.ru cheap cigarette ]] [[http://free-cigarette-i.boom.ru cheap cigarette ]] [[http://alprazolam-i.boom.ru alprazolam ]] [[http://alprazolam-z.boom.ru alprazolam ]] [[http://cheap-cigarette-now.hotmail.ru cheap cigarette ]] [[http://cheap-cigarette-free.newmail.ru cheap cigarette ]] [[http://gucci-watch.boom.ru gucci watch ]] [[http://watch-gucci.boom.ru gucci watch ]] [[http://telemarketing-i.boom.ru telemarkering list ]] [[http://telemarketing-1.boom.ru telemarketing list ]] [[http://hawaii-hotels.boom.ru hawaii hotels ]] [[http://hawaii-hotel.boom.ru hawaii hotels ]] [[http://free-steroids.boom.ru anabolic steroids ]] [[http://steroids-health.boom.ru anabolic steroids ]] [[http://i-ambien.boom.ru ambien ]] [[http://good-ambien.boom.ru ambien ]] [[http://k-fioricet.boom.ru fioricet ]] [[http://fioricet-now.boom.ru fioricet ]] [[http://renova-renova.boom.ru renova ]] [[http://nice-renova.boom.ru renova ]] [[http://zocor-zocor.boom.ru zocor ]] [[http://now-zocor.boom.ru zocor ]] [[http://max-cigarette.boom.ru cheap cigarette]] [[http://nice-cigarette.boom.ru cheap cigarette]] [[http://i-mortgage.newmail.ru mortgage calculator ]] [[http://mortgage-calculator.nightmail.ru mortgage calculator ]] [[http://cigarette-ups.boom.ru cheap cigarette ]] [[http://cheap-cigarette-site.6x.to cheap cigarette ]] [[http://anabolic-steroids-online.6x.to anabolic steroids ]] [[http://steroids.6x.to steroids ]] [[http://gucci-watch-online.6x.to gucci watch ]] [[http://celebrex-online.6x.to celebrex ]] [[http://buy-phentermine.boom.ru buy phentermine ]] [[http://hgh-spray.6x.to hgh spray ]] [[http://buy-cigarette-1.boom.ru cheap cigarette ]] [[http://cheapcigarette-1.boom.ru cheap cigarette ]] [[http://cheap-cigarette.boom.ru cheap cigarette ]] Thanks
A bunch of UK spam domains, of the ones I checked there was no website, wouldn't connect, or was a parked domain. They all seem to be owned by Launch Solutions Limited in GB. I didn't see a point of chongqing them, but I know someone who may be interested in them. So far I was unable to come up with a phone number though.
pantandsocks.co.uk cheapest-phone.co.uk hewittlandscapes.co.uk longcrossgroup.co.uk buzz-hotels.co.uk fuelcellmarketplace.co.uk tcom-control.co.uk bodet-clocks.co.uk execsoft-software.co.uk cragrats-catering.co.uk jgc-network.co.uk owaceilings.co.uk beaumont-bar.co.uk lasikclinic.co.uk global-phonecard.co.uk barrym.co.uk parkersexecutivecar.co.uk tcom-control.co.uk parkersexecutivecar.co.uk executive-chauffeur-hire.co.uk cragrats-education.co.uk cragrats-inspiring.co.uk sec-battery.co.uk cragrats-react.co.uk cragratstraining.co.uk cornishholidaysuk.com allwoodoxford.com uvinewine.co.uk telematicsone.com telematiksone.co.uk real-worldinternational.co.uk find-a-mortgage.co.uk lifeslittle-luxuries.co.uk hague-print.co.uk logical-planet.co.uk fabricant-accessories.co.uk fleet-drive.co.uk prepaid-telephonecards.co.uk budget-phonecards.co.uk cqychy.com jgzhutanfang.com
Some spammers have been attacking the forum of my favorite web browser. http://kmeleon.sourceforge.net/forum/read.php?f=2&i=3506&t=3506
We've been seeing this kind of stuff for a very long time. My guess is that these are just badly coded bots. My advice is: Unless you know how to fix the bugs in UseMod, don't use it. – Manni - 2006-05-05 07:14