Silouhette of a scary person in a trench coat.

Big news! I had to block 110 IP addresses in one single day because of the unbearable spam on the wiki! Recently, a slew of Black Hat SEO spammers infested the site, unfortunately for them (and for me), there is the moderation extension and the Abuse Filter, I then check their IP and ban it.

With that said, I had the intention to make this post for a while, so I saved every permalink to each IP I tested on Robtex due to how unbearable it is becoming.

Just look at everything we have gotten in the past few days:

https://www.robtex.com/ip-lookup/45.72.23.183

https://www.robtex.com/ip-lookup/104.168.91.34

https://www.robtex.com/ip-lookup/138.128.50.87

https://www.robtex.com/ip-lookup/206.217.128.142

https://www.robtex.com/ip-lookup/198.23.238.4

https://www.robtex.com/ip-lookup/205.204.71.231

https://www.robtex.com/ip-lookup/223.29.253.144

https://whois.domaintools.com/191.96.150.82

https://www.robtex.com/ip-lookup/104.223.82.174

https://www.robtex.com/ip-lookup/104.227.162.97

https://www.robtex.com/ip-lookup/23.108.43.148

https://whois.domaintools.com/23.108.43.148

https://www.robtex.com/ip-lookup/192.227.249.37

https://www.robtex.com/ip-lookup/160.116.200.221

https://www.robtex.com/whois/107.181.178.87.html

https://www.robtex.com/whois/107.181.178.79.html

https://www.robtex.com/whois/139.180.226.87.html

https://www.robtex.com/ip-lookup/23.90.29.80

https://www.robtex.com/ip-lookup/173.213.87.167

https://www.robtex.com/whois/173.195.15.243.html

https://www.robtex.com/whois/216.151.191.86.html

https://whois.domaintools.com/103.247.151.41

https://www.robtex.com/whois/165.231.108.217.html

https://www.robtex.com/whois/170.130.31.182.html

https://www.robtex.com/whois/205.185.214.104.html

https://www.robtex.com/whois/23.250.22.93.html

https://www.robtex.com/whois/45.120.50.131.html

https://www.robtex.com/whois/171.22.123.87.html

https://www.robtex.com/whois/216.131.109.143.html

https://www.robtex.com/whois/216.131.88.207.html

And that is just the tip of the iceberg, it has been happening for two entire months now and it keeps getting worse. The two main proxies who hide these spammers behind their IPs are HostRoyale and Eonix.

I had decided to manually block all of Eonix’s IP addresses to curb the spammers since so many of theirs appear to be used for commercial ends, however, I am disappointed to see that Eonix does not care that they are servicing spammers.

It does not only affect Trollpedia, it affects Wikimedia, ShoutWiki and Miraheze too.

This begs the question, when do they start dealing with the Black Hat SEO spammers on their platforms? I am thinking of starting my own DNSBL and blacklisting all their IPs, so at least MediaWiki sites won’t have to deal with spam anymore if they choose to.

I am gonna put a link to both IP providers and hopefully after receiving enough messages about the plague that they are contributing to they will do something about it: https://eonix.net/ https://hostroyale.com/hosting/

Someone compiled a separate list of spam-only IP addresses on Miraheze and many of them come from different hosts, but one that came up regularly when I checked each IP was DigitalOcean.

https://pastebin.com/DSgx3uRk

Here, hoping that will do something: https://www.digitalocean.com/company/contact/#abuse

The bottom line

Fortunately, other than the 3 above, it seems that most online host providers are actually willing to not give a platform to spammers and scammers.

Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes:

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>