User:Magister Mathematicae/daylog/0711-1

From Meta, a Wikimedia project coordination wiki

13 Nov 2007

I'll continue logging what I see during the day, even if I won't clean it.

Vandalbot: 69.143.236.33

Yesterday a new vandalbot showed up. I had only seen the wolof one (since I was warned on my talk), but he continued:

It's hit

  • interlingue wikipedia: contribs plus 13 deleted pages
  • wolof wikipedia: contribs plus 14 deleted pages

I checked on luxo tool and found more (I don't bother to count the deleted ones):

He's also editing under usernames:

Checkuser reveals that it's the same IP as above.

What most people don't understand when they yell there was no emergency, you shouldn't have blocked! is that there's no emergency precisely because blocking before this happens (that is, blocking as soon as the spam/vandalbots are detected)

Garbage

Miscelaneous garbage that needs to be taken out:


Decissions

I've decided not to cleanup any wiki for at least a week, and not block any IP. It seems that for some wikis and their sysops, "being sysop" is more a power status than a service one (against the "no big deal" philosophy), and therefore they act territorial.

Given that it's difficult for people to look at the big picture and instead focus on minutiae, that I don't want to literally insult people with my help, and that I don't want to be talked aggresively for offering my work, I'm taking a break of these duties for (at least) a week.

My apologies to all the wikis for insulting you. It wasn't really my intention

drini [es:] [commons:] 15:03, 13 November 2007 (UTC)


13 Nov 2007

I knew if I'd wait, Xrunner spammer would continue. Here:

Xrunner spam: 85.140.22.252

12 Nov 2007

Day has been slow, not much interesting has happened (only a couple of garbage random pages).

Well, it's almost midnight here and Xrunner spammer showed up finally: if he contines tomorrow I'll block him everywhere.

Xrunner spam: 85.140.22.252


There was also another new kind of spam which I call "24% of Americans believe that...". This new spammer uses multiple ips:

61.78.56.133


190.156.253.212

  • la.wikisource "24% of.." spam on Disputatio:Historiarum Francorum libri X/w/w/index.php

98.194.9.93

11 Nov 2007

As expected, after I stopped 85.140.222.224 , he got a new IP to continue:

Xrunner spam: 85.140.23.121

New IP for the Xrunner spammer

Ok, that IP is flagged as exploitable open proxy, so I better start blocking it now (it's not allowed to abuse open proxies to spam).


10 nov 2007

78.107.213.65

  • 78.107.213.65 index.php spam (where can I find quality films..)
Today that IP has spammed on the following wikis:
  • bi.wikibooks.org, ln.wikibooks.org, ss.wiktionary.org
    en.wikipedia.org, fr.wikipedia.org, ss.wiktionary.org
    sw.wikibooks.org, pl.wikipedia.org, meta.wikimedia.org
    it.wikiversity.org, it.wikipedia.org
now I'm blocking it now in all wikis.

78.107.200.197

  • nl.wikiquote.org index.php spam (where can I find quality films..)
  • Russian IP, no open proxy history (yet) --Herby talk thyme 18:11, 11 November 2007 (UTC)

Xrunner spam: 85.140.222.224

New IP from the Xrunner spammer also russian:

Note: 2nd day of spamming (it's now 11th and he's continuing, so I'll stop it now) drini [es:] [commons:] 10:18, 11 November 2007 (UTC)

  • Russian IP, no open proxy history (yet)
Herby, he's flagged as open proxy, the modus operandi is always the same. He looks for an open proxy in order to hide his real ip: [3]
Thanks - good catch, I'm blocking where I can too --Herby talk thyme 18:11, 11 November 2007 (UTC)

9 nov 2007

  • 85.140.223.178 xrunner spam: [cy.wikiquote] [rw.wiktionary.org]
[4] It's been doing xrunner spam for more than a week, so I'm blocking it everywhere now
  • 87.118.102.155
[igwiki] [bowiki] [cdowiki] [iewikt] [quwikibooks] [ptwikinews] [lnwiktionary] [enwikiversity] [zh-min-nanwikisource] [rmwiki]
'hi bye', subject1 index.php
[5]
I think it warrants now crosswiki block a few days
  • 87.118.108.81 'innocent' index.php [ceb.wikipedia]
Open proxy per en wp - Herby talk thyme
  • 65.28.228.216 index.php porn spam [tawiktionary]
[6] - looks like an recent Open proxy (no proof) Herby talk thyme
Retrieved from "https://meta.wikimedia.org/w/index.php?title=User:Magister_Mathematicae/daylog/0711-1&oldid=2089968"