WikiHome RecentChanges WikiNode Preferences chongqed.org

WikiForumArchive May2005

050524

Just found a javascript only MicroContent Wiki called TiddlyWiki. Its very interesting and very cool. Take a look at this example page PeriodicTable, you can't do that with any other wiki I know of. I am not sure if it is editable on a server, but as a personal local wiki it certainly works. – Joe - 2005-05-25 00:32 UTC

050517

An interesting new wiki. Someone is now keeping track of Fake Blogs used by "corporate marketing departments as lame marketing exercises." Not at all what we are worried about when we refer to fake blogs. To us fake blogs are just full of junk, usually on free hosts, and full of links to the spammer's pages. But I suspect the line between our definition and theirs could frequently be crossed. – Joe - 2005-05-17 22:27 UTC

050515

The Umax/GooglePray spammer is getting desperate, he is now stealing our Wikispammer page text and inserting all his enemies for his spam:

 ...!Wiki Spammers: bobonit.com, wiki.chongqed.org, spamhuntress.com, 
spam.gunters.org, buffoons.blogspot.com, have been spamming wikis, blogs, 
or guest books with the keyword spam any domain to improve their page 
rank on Google and other search engines. Wiki Spam Solutions. There have 
been a number of proposals for dealing with
WikiSpam.[url]http://umax-se.com/login/GOOGLE+SPAM/baikalguide+Wiki+Spammers:[/url]....

Seems pretty stupid to me, he isn't going to get us blacklisted anywhere and is letting his victims know where to go for help against him.

Joe - 2005-05-15 16:52 UTC

I found he is also going after c2.com for their WikiSpam page. A Google search on chongqed.org guestbook buffoons shows he is really getting busy. I suspect few of those results are legitimate. He must really think his host is super spam friendly cause he is messing with a lot of people. That is going to result in a lot of complaints. – Joe - 2005-05-16 05:08 UTC

050514

I've got two wikis now. Both Mediawiki. One is used by people who add the e-mail addresses of agents or even themselves. Do you know of a way to munge e-mail addresses in Mediawiki? – Ann

050510b

Google has recently pattented a huge new antispam system. There are so many ways they are combating spam it should make webspam pointless. It sounds so good maybe chongqing won't need to make it to another anniversary, but we will wait and see. The original article is being slammed by Slashdot right now, but you can find the article text in the comments there. My comments on my blog. – Joe - 2005-05-10 18:02 UTC

050510

Spam Huntress' wiki is already being vandalized by a spammer. Its not bad yet, but its more than we have seen here. – Joe - 2005-05-10 12:10 UTC

050509c

A spammer from 221.219.62.21 showed some smarts. He did a test "123" edit at the bottom of SpamPage first, I guess to see if the wiki was unlocked and his IP wasn't blacklisted. Luckily one of his domains was already chongqed so Dan caught him anyway when he tried the actual spam. The URL he spammed for most, hzmeitai.com, was not in the db, but it is now. – Joe - 2005-05-09 10:33 UTC

050509b

I don't have a clue what it says, but it mentions chongqed: http://www.rootforum.de/forum/viewtopic.php?t=33442Joe - 2005-05-09 09:35 UTC

Just some wikizens discussing ways to prevent spam on their nascent wiki. – Manni - 2005-05-10 07:55

050509

The GooglePray spammer has been visiting the wiki recently:

  1. 64.246.26.137 (freeyaho.com), 6 minutes ago
  2. 67.15.94.29 (umaxppc.com), 8 minutes ago
  3. 216.127.84.38 (bankruptcy.baikal-guide.com), 1 hour ago

I wonder what he is doing, referrer spam I suppose.

Joe - 2005-05-09 08:30 UTC

He is still going with these two:

  1. 64.246.26.137 (freeyaho.com), 2 minutes ago
  2. 67.15.94.29 (umaxppc.com), 7 minutes ago

Anyone try a Google search for GooglePray? The first 6 of 10 results are Ann and I.

Joe - 2005-05-09 10:35 UTC

050508

Nearly a month ago I reported to blogger support a blogspot user who is spamming other blogspot sites with his spam, yet he is still at it using the same blogspot account. The blogger user is NewsMan. Ignoring that fact is why blogspot is on the LoserWebmasters page.

See my post on April 19 on the chongqed wiki forum for more info and the message I sent blogger support after he spammed me and many others on blogspot.

Today the same guy came back. I got two hits from him with these referrers:
site:blogspot.com +"post a comment" +html
site:blogspot.com +"post a comment" +html

He is still posting from the same provider, his hostname now is:
host-116-23.rev.vline.pl

He is now spaming for yopink.com and yolesbian.com, previously it was yomilf.com.

A few pages he successfully spammed:
http://sciencepolitics.blogspot.com/2004/09/bush-is-girlie-man.html
http://thecheerfuloncologist.blogspot.com/2005/01/okay-so-im-not-sherlock-holmes.html
http://topicdrift.blogspot.com/2005/04/more-mail.html
http://rosebaghdad.blogspot.com/2004/10/interesting-post.html

I left a comment on one of his spammy blogs and actually got a reply from him:
http://be_online.blogspot.com/2004/07/konto-internetowe-inteligo-ebank.html#comments

wow joe....
You got me.
Fuck :)

Looking at his actual blog, I can imagine the blogspot administrators might not see anything wrong particularly. Also they might view your own blog as something of a suspicous pagerank game (if they dont take the time to understand it) …but the comments you've linked to there, are extremely vulgar spam linking, which should present them with a clear-cut case for dropping this 'newsman' account and blog. You're right. There's no excuse for them not doing this immediatly. I will email too (as an outsider). Maybe that'll help. – Halz - 2005-05-09 08:46 UTC

To a normal person, just looking at his blog it isn't immediatly obvious anything is odd, but to someone who sees a lot of spammy blogs it is. My original complaint was not especially detailed, at the time I wrote them I had not gathered all that information. But such obvious spam should have been enough to cause some kind of checking if they cared. I am now working on this in another way. – Joe - 2005-05-09 09:05 UTC

I did send an abuse complaint too. Just to abuse@blogger.com. This was sent 9 May 2005. I refered them to two example spammed blogs and said the following:

This 'newsman' guy is a registered user. Why dont you
drop his account and ban him? Seems like a pretty
clear-cut case of abuse to me.

I'm not a registered user myself. Seeing this kind of
thing, I'm not planning on becoming one, and I
certainly wont be letting my kids surf on your
website!
I thought that kind of message might provoke some action. After all, the spam is using really unpleasant filthy porn language. If this kind of spam is not removed, it makes the whole blogger website inappropriate for kids! I got a standard reply 19 May 2005, but still no action. – Halz - 2005-05-30 07:39 UTC

050506

We have a page for news feeds and added a few new ones.

http://feeds.chongqed.org

Joe - 2005-05-06 08:34 UTC

050503

Ann has been following the Genaholincorporated for a while now and wondered if a wiki page would be useful to collect information on him. So here it is. I found a few more domains than she had and chongqed them all. – Joe - 2005-05-03 05:58 UTC

050501b

Anyone else find this pattern from the Recent Visitors page weird:

# 203.186.238.172 (203186238172.ctinets.com), 6 minutes ago
# 203.186.238.170 (203186238170.ctinets.com), 6 minutes ago
# 203.186.238.176 (203186238176.ctinets.com), 6 minutes ago
# 203.186.238.174 (203186238174.ctinets.com), 6 minutes ago
# 203.186.238.181 (203186238181.ctinets.com), 6 minutes ago
# 203.186.238.179 (203186238179.ctinets.com), 6 minutes ago
# 203.186.238.185 (203186238185.ctinets.com), 6 minutes ago
# 203.186.238.183 (203186238183.ctinets.com), 6 minutes ago
# 203.186.238.190 (203186238190.ctinets.com), 6 minutes ago
# 203.186.238.188 (203186238188.ctinets.com), 6 minutes ago
# 203.186.238.194 (203186238194.ctinets.com), 6 minutes ago
# 203.186.238.192 (203186238192.ctinets.com), 6 minutes ago
# 203.186.238.198 (203186238198.ctinets.com), 6 minutes ago
# 203.186.238.204 (203186238204.ctinets.com), 6 minutes ago
# 203.186.238.202 (203186238202.ctinets.com), 6 minutes ago
# 203.186.238.209 (203186238209.ctinets.com), 7 minutes ago
# 203.186.238.207 (203186238207.ctinets.com), 7 minutes ago
# 203.186.238.213 (203186238213.ctinets.com), 7 minutes ago
# 203.186.238.211 (203186238211.ctinets.com), 7 minutes ago
# 203.186.238.218 (203186238218.ctinets.com), 7 minutes ago
# 203.186.238.216 (203186238216.ctinets.com), 7 minutes ago
# 203.186.238.222 (203186238222.ctinets.com), 7 minutes ago
# 203.186.238.220 (203186238220.ctinets.com), 7 minutes ago
# 203.186.238.227 (203186238227.ctinets.com), 7 minutes ago
# 203.186.238.225 (203186238225.ctinets.com), 7 minutes ago
# 203.186.238.231 (203186238231.ctinets.com), 7 minutes ago
# 203.186.238.229 (203186238229.ctinets.com), 7 minutes ago
# 203.186.238.236 (203186238236.ctinets.com), 7 minutes ago
# 203.186.238.234 (203186238234.ctinets.com), 7 minutes ago
# 203.186.238.240 (203186238240.ctinets.com), 7 minutes ago
# 203.186.238.238 (203186238238.ctinets.com), 7 minutes ago
# 203.186.238.212 (203186238212.ctinets.com), 7 minutes ago
# 203.186.238.210 (203186238210.ctinets.com), 7 minutes ago
# 203.186.238.214 (203186238214.ctinets.com), 7 minutes ago
# 203.186.238.221 (203186238221.ctinets.com), 7 minutes ago
# 203.186.238.219 (203186238219.ctinets.com), 7 minutes ago
# 203.186.238.223 (203186238223.ctinets.com), 8 minutes ago
# 203.186.238.230 (203186238230.ctinets.com), 8 minutes ago

Referrer spam maybe?

Joe - 2005-05-01 08:26 UTC

Joe, I think it is probably the BackToTheFutureII guestbook spammer. The reason I suspect this is because back on April 28, WikiMinion saw the BackToTheFutureII spammer insert spam onto a page, in rapid succession, from the following IP addresses:

210006198130.ctinets.com
210006198136.ctinets.com
210006198140.ctinets.com
210006198142.ctinets.com
210006198145.ctinets.com
210006198147.ctinets.com
210006198148.ctinets.com
210006198153.ctinets.com
210006198157.ctinets.com
210006198160.ctinets.com
210006198163.ctinets.com
210006198165.ctinets.com
210006198169.ctinets.com
210006198174.ctinets.com
I recall someone mentioning that attempts to insert .ru domains were completely blocked on chongqed, not even showing up in AntiSpamDan's CaughtSpam list. So, if it was the BackToTheFutureII guestbook spammer trying to insert his spam, there wouldn't be any record of the attempt other than the Recent Visitors list. – RichardP - 2005-05-01 17:21 UTC

I think that may have been the original setup, but in building the OddMuse SpamCatching Module Manni fixed that. See .ru CaughtSpam. And he always used proxies from all over the place, this guy is using a rotating set of IPs from the same provider. – Joe - 2005-05-01 21:54 UTC

Oops, I missread your post and forgot about the searches he likes to do. That must be him again. – Joe - 2005-05-03 05:58 UTC

050501

Today the chongqed.org domain is one year old. – Joe - 2005-05-01 08:23 UTC