Vandalism reports

From Meta, a Wikimedia project coordination wiki
Jump to: navigation, search
Vandalism reports
Before reporting, please take note of the following premises:
Most Wikimedia wikis are able to deal with vandalism on their own. This page is intended only for certain reports
Reporting requirements
  • The username(s) or IP address(es) of the offenders.
  • A description of their vandalism (spamming, adding junk, removing legitimate text, etc), preferably with diffs to examples.
  • The Wikimedia wikis affected.
  • Suggestions for monitoring strategies, blocks etc.

When reporting please use informative headings like:

=== username(s), IP address ===
*{{luxotool|IP address}} <!-- for IP addresses -->
*{{sultool|Username}} <!-- for usernames -->
Description, evidence, diffs, etc. --~~~~
Note on spam
  • If the spamming is cross-wiki, malware sites, repeated or severe, please report it to the spam blacklist.
Related pages
If the username is clearly offensive, libellous or contains private information do NOT post it here. Email the private OTRS queue for stewards: - Thank you.
Archives & subpages
Vandalism reports Vandalism reports/Archive 1 Vandalism reports/Archive 2
Vandalism reports/Archive 3 Vandalism reports/Archive 4 Vandalism reports/Archive 5
Vandalism reports/Archive 6 Vandalism reports/Archive 7 Vandalism reports/BogaertB
Vandalism reports/Unknown
Crosswiki requests
MetaWiki requests

Current cross-wiki vandalism[edit]

Please place new reports at the top of this section. Thank you.

promo pushing Brandon Richardson[edit]


IPv4 address:

IPv6 addresses, all from 2602:30a:2e55:c520::/64 range:

These accounts and IP addresses have been used (most of them solely) to promote the actor Brandon Richardson cross-wiki since March this year, flagging it as a featured article on pt:wiki ([1]), and referring to the non-existant English article as the source for translation (e.g. [2]). Some of the accounts have been blocked on one or two wikis already, because of being a "Brandon Richardson vandal" ([3]), for block evasion and/or referring to en:User:Danny.ESQ ([4], [5]; Danny.ESQ was blocked in 2012 for the same reasons), or generally using multiple accounts already ([6], [7] **, [8], [9], [10], [11], [12], [13], [14], [15], [16]). One of the accounts was blocked just yesterday (**) but I wasn't sure of any follow-up. With kind regards — Mar(c). 07:47, 31 July 2014 (UTC)

Since 2012 actually: w:Wikipedia:Sockpuppet investigations/Danny.ESQ/Archive. --Glaisher (talk) 08:15, 31 July 2014 (UTC)
Yes, I mentioned that link too. The accounts and IPs listed all edited/created the current articles (cross-wiki) and the wikidata entry d:Q15980114, but there's the obvious duck connection indeed. With kind regards — Mar(c). 09:42, 1 August 2014 (UTC)

Hendrix Adi Solo[edit]

This account has been creating inappropriate pages on several small wikis with little or no administrator activity and is one of several socks of the account Hendrix Adi Surya (no enwiki sockpuppet investigation exists because all of the socks have either been blocked on sight or reported directly to administrators). The pages created by this account are either in Malay or English, regardless of the project's language. Many of the pages do not have enough context to identify their subject, but the ones that do are either hoaxes or about made-up subjects. For example, the page Hendrix Adi Surya on the Zulu Wikipedia is about a 13 year old boy called Hendrix Adi Surya, who is apparently a TV presenter and an actor starring in several major movies. However, a Google search for "Hendrix Adi Surya" does not reveal any sources that confirm this. I flagged this page and 2 other pages on the Zulu Wikipedia for speedy deletion as hoaxes, but decided it would be quicker to report the account to a global sysop when I saw the extent of the cross-wiki page creation. --Passengerpigeon (talk) 01:05, 28 July 2014 (UTC)

Yes check.svg Done I will organise a clean up. We do have other data sources for this LTA, so reporting it and flagging it is worthwhile. I have also modified one of our global filters to see if we can better catch some of these edits at the time of creation. Thanks.  — billinghurst sDrewth 05:37, 28 July 2014 (UTC)
@Billinghurst: Where are these data sources that you are referring to? Passengerpigeon (talk) 06:16, 28 July 2014 (UTC)
There is no public data available; there is sometimes consequential data when checks are made, such that remnant data of known vandals is sometimes available. In this case, there is data available to checkusers.  — billinghurst sDrewth 11:12, 28 July 2014 (UTC)

Long-term, recurrent vandalism[edit]

None currently listed; See the archives