This page is for making notes about spam patterns, so we can figure out how block them.
August 2011
Some spam I deleted today:
<span class="plainlinks">[http://www.cleanfresnocarpets.com<span style="color:black;font-weight:normal; text-decoration:none!important;background:none!important; text-decoration:none;">fresno carpet cleaning</span>]
<div style="font-size:100%; text-align: center;"> [http://cataclysmforum.ru/red/?k=prevacid&said=18_08_2011<u style="color:blue; font-size:32px;">CLICK HERE TO ORDER PREVACID ONLINE!</u>] <ul style="color:green; font-size:24px;"> <li>Safe And Secure</li> <li>Worldwide Shipping</li> </ul> [http://cataclysmforum.ru/red/?k=prevacid&said=18_08_2011<u style="color:blue; font-size:32px;">CLICK HERE TO ORDER PREVACID ONLINE!</u>] <ul style="color:green; font-size:24px;"> <li>We Beat Any Price!</li> <li>No Prescription Needed!</li> </ul> [http://cataclysmforum.ru/red/?k=prevacid&said=18_08_2011<u style="color:blue; font-size:32px;">CLICK HERE TO ORDER PREVACID ONLINE!</u>] </div> <br> <br>
and
<div style="font-size:100%; text-align: center;"> [http://cataclysmforum.ru/red/?k=zinc&said=18_08_2011<u style="color:blue; font-size:32px;">CLICK HERE TO ORDER ZINC ONLINE!</u>] <ul style="color:green; font-size:24px;"> <li>Safe And Secure</li> <li>Worldwide Shipping</li> </ul> [http://cataclysmforum.ru/red/?k=zinc&said=18_08_2011<u style="color:blue; font-size:32px;">CLICK HERE TO ORDER ZINC ONLINE!</u>] <ul style="color:green; font-size:24px;"> <li>We Beat Any Price!</li> <li>No Prescription Needed!</li> </ul> [http://cataclysmforum.ru/red/?k=zinc&said=18_08_2011<u style="color:blue; font-size:32px;">CLICK HERE TO ORDER ZINC ONLINE!</u>] </div> <br> <br>
For those last two, there was also a lot of text with an enormous number of <br> tags. That could be a spam signal, but would give false positives on its own - as someone genuine, pasting in some appropriate content but in poorly converted HTML markup. I think AbuseFilter lets us assign points to a suspicious pattern, so if it fits that pattern and another one, then it can be blocked. (It can also be flagged by AbuseFilter, at least.) --Chriswaterguy 02:06, 18 August 2011 (PDT)