Wikipedia talk:WikiProject Spam

	When reporting spam, please use the appropriate template(s):
	As a courtesy, please consider informing other editors if their actions are being discussed. {{Link summary}} - to report spam domains: {{Link summary|example.com}} -- do not use "subst:" with this template - Do not include the "http://www." portion of the URL inside this template {{IP summary}} - to report anonymous editors suspected of spamming: {{IP summary|127.0.0.1}} --- do not use "subst:" with this template {{User summary}} - to report registered users suspected of spamming: {{User summary|Username}} -- do not use "subst:" with this template Also, please include links ("diffs") to sample spam edits.
	Click here to start a new report

Indicators
Reports completed:
Done
No action
Stale
Defer discussion:
Defer to XLinkBot
Defer to Local blacklist
Defer to Global blacklist
Defer to Abuse filter
Information:
Additional information needed
Note:

Suspicious new articles

List of reports here. Remove transclusions when all finished to keep page readable.

---

80.192.214.54 / nosmokeboxing.com

• 80.192.214.54 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)
• nosmokeboxing.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com

User was warned for adding spammy external links (all to the same website) earlier this year, which I didn't see before giving them an additional level 1 warning today. Reverted their edits myself, but not sure if there are additional actions that should be taken since they've been warned for this previously and made a handful of these spammy edits since that warning. (Not too familiar with the process here.) Jokullmusic 03:07, 30 October 2024 (UTC)

@Jokullmusic IP blocked. I might run a CU to see if there are any interesting accounts there. If you see the link being added again, come back and I'll blacklist it. HJ Mitchell | Penny for your thoughts? 23:28, 30 October 2024 (UTC)

User:EnvisionMG

EnvisionMG (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam)

This user has one edit (see here) that attempted to insert a marketing link by obfuscating it behind a valid edit (namely, changing HTTP links to HTTPS). The name "EnvisonMG" refers to Envision Marketing Group, which can be seen in the footer of the page being maliciously linked. This user is clearly just interested in inserting marketing links for advertising purposes. Chesamo (talk) 11:41, 31 October 2024 (UTC)

@Chesamo user blocked. HJ Mitchell | Penny for your thoughts? 11:54, 31 October 2024 (UTC)

Spam from 103.137.1.84

103.137.1.84 (talk • contribs • deleted contribs • blacklist hits • AbuseLog • what links to user page • COIBot • Spamcheck • count • block log • x-wiki • Edit filter search • WHOIS • RDNS • tracert • robtex.com • StopForumSpam • Google • AboutUs • Project HoneyPot)

renixcare.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com

- https://en.wikipedia.org/w/index.php?title=Metronidazole&diff=prev&oldid=1255317384

- https://en.wikipedia.org/w/index.php?title=Dasatinib&diff=prev&oldid=1255318361

- https://en.wikipedia.org/w/index.php?title=Toltrazuril&diff=prev&oldid=1255317736

Spidermario (talk) 08:51, 4 November 2024 (UTC)

@Spidermario IP blocked, thank you. HJ Mitchell | Penny for your thoughts? 11:11, 4 November 2024 (UTC)

Handling of promo only role accounts in AIV

LondonChildrensBallet1994 (talk · contribs · deleted contribs · blacklist hits · AbuseLog · what links to user page · count · COIBot · Spamcheck · user page logs · x-wiki · status · Edit filter search · Google · StopForumSpam) I'll @Ritchie333: since their essay guide was linked from Wikipedia:Guide to administrator intervention against vandalism.

Only individuals may have an account and account may not be shared, however the use of accounts such as Myorganization566 owned and maintained by company is very common. These accounts are often become a sleeper and make edits in bursts and commonly become "sleepers" that go become dormant for months and years at a time. Throwaway accounts are also used often by public relations editors in order to compartmentalize clients.

These sleeper accounts showing a pattern (for example, created in 2015, edited annually, and last edited a few months ago) are sometimes discovered while investigating other PR activity. When reported, sometimes they'll spam block them, sometimes, they'll throw out the report saying stale, but how should it be going? All these normal warning procedures shouldn't apply to spam/PR edits. For example, report on user Special:Contributions/LondonChildrensBallet1994 was tossed as stale. Graywalls (talk) 15:08, 5 November 2024 (UTC)

@Graywalls I'm not sure what this thread is? Are you reporting spam? If you're looking for a philosophical discussion about how deal with spam accounts, this probably isn't the right place. HJ Mitchell | Penny for your thoughts? 15:13, 5 November 2024 (UTC)

I'm asking about how those sleeper PR accounts should be getting handled. Sometimes AIV gets it taken care of, sometimes not. So, really not sure where to take them. Graywalls (talk) 15:17, 5 November 2024 (UTC)

@Graywalls If they're not recently active enough for AIV, feel free to bring them here or directly to me. If there are several accounts that follow the same pattern it might be worth looking into. HJ Mitchell | Penny for your thoughts? 22:52, 5 November 2024 (UTC)

Spammer 'LacedMedia' overwriting articles

This user edited and replaced several articles with spam. https://en.wikipedia.org/wiki/Special:Contributions/LacedMedia I have fixed what I can but the Container City article is still vandalized. AlanKHG (talk) 18:51, 10 November 2024 (UTC)

@AlanKHG I've restored that article and blocked the user. Thanks for the report. HJ Mitchell | Penny for your thoughts? 19:04, 10 November 2024 (UTC)