Knockwood
01-06-2006, 08:13 PM
There are a few pages that seem to attract spam--so much so that their presence on the Recent Changes list is automatically suspicious. I'm wondering if anyone out there can tell us why... also, I'm putting up information on the spam we're seeing in general.
First, I've already mentioned how each project's Main_Page winds up a target. There are a few projects, however, that seem to attract more than their share:
-RPG_Lexica:Main_Page (grrrrr...)
-GURPS:Main_Page
-Irradiated_Fur:Main_Page
-M&M_Serial:Main_Page
-Not as much: the Main_Pages for Alia, ATHANATOS, Stardust & Aetherwinds, Horizon Virtual, and Encyclopedia Galactica.
Second, many of the 'standard' pages get hit (which bolsters my opinion that the spammers are using automated scripts):
-General Disclaimer
-Protected page (this one's normally empty on ours)
-Help talk: Contents
Third, there are some pages that keep showing up as spammer targets for reasons I can't tell:
-Blue Planet
-Category: Dogs in the Vineyard
-Talk: Urban Nomad
-A few times, we've had a Talk: (IP address) page filled with spam from another IP address.
The spam we've seen most often is a block starting with:
<div id="kbektt#####" style="overflow:auto;height:1px;">
followed by links to several sites concerning popular medications (******, Phentermine, ******...) This guy is really getting on my nerves.
Help talk: Contents keeps getting replaced by links to other meds sites; sometimes they start it with a bogus message ("Nice site, have a look at mine: http://I-sell-phentermine.pl").
Last month we had a few pages replaced with a page consisting of a paragraph introducing the topic of Internet Telephony followed by a bunch of links about it. Weren't even subtle about it, either.
The weird one is the newest variant... just a simple link to a Northwest Airlines site. It popped up on a few pages, without explanation.
Opinions, strategies, commiserations? :) --Kwd
PS: When Search is working, I do search for some of the major Spammer keywords, like ****** and Phentermine, and scratch any spam I find. If there is any spam I missed, let me know, and I'll scrap it.
First, I've already mentioned how each project's Main_Page winds up a target. There are a few projects, however, that seem to attract more than their share:
-RPG_Lexica:Main_Page (grrrrr...)
-GURPS:Main_Page
-Irradiated_Fur:Main_Page
-M&M_Serial:Main_Page
-Not as much: the Main_Pages for Alia, ATHANATOS, Stardust & Aetherwinds, Horizon Virtual, and Encyclopedia Galactica.
Second, many of the 'standard' pages get hit (which bolsters my opinion that the spammers are using automated scripts):
-General Disclaimer
-Protected page (this one's normally empty on ours)
-Help talk: Contents
Third, there are some pages that keep showing up as spammer targets for reasons I can't tell:
-Blue Planet
-Category: Dogs in the Vineyard
-Talk: Urban Nomad
-A few times, we've had a Talk: (IP address) page filled with spam from another IP address.
The spam we've seen most often is a block starting with:
<div id="kbektt#####" style="overflow:auto;height:1px;">
followed by links to several sites concerning popular medications (******, Phentermine, ******...) This guy is really getting on my nerves.
Help talk: Contents keeps getting replaced by links to other meds sites; sometimes they start it with a bogus message ("Nice site, have a look at mine: http://I-sell-phentermine.pl").
Last month we had a few pages replaced with a page consisting of a paragraph introducing the topic of Internet Telephony followed by a bunch of links about it. Weren't even subtle about it, either.
The weird one is the newest variant... just a simple link to a Northwest Airlines site. It popped up on a few pages, without explanation.
Opinions, strategies, commiserations? :) --Kwd
PS: When Search is working, I do search for some of the major Spammer keywords, like ****** and Phentermine, and scratch any spam I find. If there is any spam I missed, let me know, and I'll scrap it.