Vandalism reports

From Meta, a Wikimedia project coordination wiki
Jump to: navigation, search
Vandalism reports
Before reporting, please take note of the following premises:
Most Wikimedia wikis are able to deal with vandalism on their own. This page is intended only for certain reports
Reporting requirements
  • The username(s) or IP address(es) of the offenders.
  • A description of their vandalism (spamming, adding junk, removing legitimate text, etc), preferably with diffs to examples.
  • The Wikimedia wikis affected.
  • Suggestions for monitoring strategies, blocks etc.

When reporting please use informative headings like:

=== username(s), IP address ===
*{{luxotool|IP address}} <!-- for IP addresses -->
*{{sultool|Username}} <!-- for usernames -->
Description, evidence, diffs, etc. --~~~~
Note on spam
  • If the spamming is cross-wiki, malware sites, repeated or severe, please report it to the spam blacklist.
Related pages
Notice
If the username is clearly offensive, libellous or contains private information do NOT post it here. Email the private OTRS queue for stewards: stewards-at-wikimedia.org - Thank you.
Archives & subpages
Vandalism reports Vandalism reports/Archive 1 Vandalism reports/Archive 2
Vandalism reports/Archive 3 Vandalism reports/Archive 4 Vandalism reports/Archive 5
Vandalism reports/Archive 6 Vandalism reports/Archive 7 Vandalism reports/Beleiutz
Vandalism reports/Beleiutz/Accounts Vandalism reports/Beleiutz/Articles Vandalism reports/BogaertB
Vandalism reports/Unknown
Cross-wiki requests
Meta-Wiki requests

Current cross-wiki vandalism[edit]

Please place new reports at the top of this section. Thank you.

206.176.123.195[edit]

vandalising the on the wikimania 2015 wiki, such as the main page there. [1] Aude (talk) 19:40, 26 February 2015 (UTC)

This is resolved now. Aude (talk) 19:44, 26 February 2015 (UTC)

Javad Ramezani[edit]

User:Billinghurst kindly added Javad Ramezani to the global blacklist yesterday, but the Iranian user (constantly changing IP) is back again today, no doubt in circumventing the listing by adding new articles in non-Latin alphabet based Wikipedias. Apart from the already-present Japanese entry, the most recent addition is w:mr:जे रमज़ानचा. I've merged the newest item on Wikidata to the older item, d:Q18729000 to keep a track of the abuse history (more here), and upon Billinghurst's request, I'm reporting this here to ask what can be done next. Jared Preston (talk) 10:37, 5 February 2015 (UTC)

There is one article which wasn't catched by the global blacklist: so:Javad ramezani --Pasleim (talk) 23:30, 11 February 2015 (UTC)

Many IP addresses for same user[edit]

The IP editor who is the subject of the section immediately below has officially gone ape-shit, creating hundreds of junk articles under many different IP addresses (1 IP4 and I think 19 IP6 addresses) at the following wikis:

Follow the links (to respective Special:NewPages) for the relevant IP addresses. There's too many of them bother posting them here. Looks like the IP6 addresses all start with "2602:30A:C04E:1400" and the IP4 address is 38.97.5.251 cross-wiki-contribsIP inforobtexgblockglist. - dcljr (talk) 03:21, 5 February 2015 (UTC)

2602:30a:c04e:1400:d17d:e473:d6f2:a11d[edit]

Creation of several stubs in English on non-English wikis for the sole purpose of pushing them past article-count milestones, which the user then "helpfully" reported at Wikimedia News (now reverted). All the user's contribs at non-English Wikipedias still have to be deleted. (luxotool has been unreliable for me this evening, so here's the individual contribs pages: ch, dz, ik, tum) - dcljr (talk) 04:15, 30 January 2015 (UTC)

Or should I have reported this at Steward requests/Miscellaneous? I can never remember... - dcljr (talk) 04:19, 30 January 2015 (UTC)
Upon furthur reflection, I suppose under the AGF principle this really should have been reported at Steward requests/Miscellaneous. But I'm keeping this here in case someone can tell that this is a longtime vandal acting more subtly under a different guise. (Please delete the pages once you've investigated — unless it's not necessary to wait, of course.) - dcljr (talk) 05:11, 30 January 2015 (UTC)
Note: Same douche-baggery from 2602:30A:C04E:1400:F0A8:9C28:2ABE:C89F cross-wiki-contribsIP inforobtexgblockglist — but this user has already been blocked. - dcljr (talk) 01:44, 31 January 2015 (UTC)
This is still Decker, isn't it? I blocked the IPs and deleted the pages. --MF-W 09:52, 31 January 2015 (UTC)
You'd know better than I. It didn't seem quite as clear-cut to me this time, since the pages were, apart from being in English on non-English wikis, basically well-formed pages that might (conceivably) have just been from an over-eager, misguided newbie. Still, I have no problem with someone else reacting "with maximum prejudice" *wink*, especially after the 2nd IP6 showed up. Thanks for investigating and deleting. - dcljr (talk) 00:57, 1 February 2015 (UTC)
Oops, wait... these pages have not been deleted yet: ch, dz, ik, tum. - dcljr (talk) 01:05, 1 February 2015 (UTC)
Now done. - dcljr (talk) 01:43, 4 February 2015 (UTC)

46.151.53.1-5 ...[edit]

Cross-wiki spamming with copyviols. These are only the IP numbers I found reverting in n:it:Discussione:La Georgia ha decretato lo stato di guerra/Commenti, there are likely others. Targets talk pages and the object has a distinct pattern. -- Codicorumus  « msg 21:14, 29 January 2015 (UTC)

Almogmoyal[edit]

note[edit]

Global spamer , This user only Add Your weblink in Global wiki Project all days --Florence (talk) 17:58, 25 December 2014 (UTC)
also 109.64.188.171 [SULinfo] – [cross-wiki edits] --Florence (talk) 01:55, 27 December 2014 (UTC)
this user is now active in global project in whatsapp articles with hoaxes --Florence (talk) 22:52, 27 December 2014 (UTC)
this user blocked in 8 local project - not need maked global blocked?? --Florence (talk) 18:10, 30 December 2014 (UTC)
this user back with name Sushilmishra bot [SULinfo] – [cross-wiki edits] --Florence (talk) 00:47, 4 January 2015 (UTC)

Blacklisted iwhatsappstatus.com; and having the report at User:COIBot/XWiki/iwhatsappstatus.com regenerated. Please check it for any links (it won't be ready for an hour or two). It is my understanding that the accounts have been locked.

@فلورانس: It would helpful with reports if the domain being abused is clearly identified. We can run reports on domains with COIBot and generate data, including the names of the offending accounts. Being more explicit about the underlying problem than the name of the vandal can bring about a better result.  — billinghurst sDrewth 12:56, 4 January 2015 (UTC)

Thanks dear @Billinghurst: this user used 2 link site: User:COIBot/XWiki/for-pcs.com <this page created with COIBot or with user? --Florence (talk) 13:26, 4 January 2015 (UTC)
back with new user name :) Davidtamsot ( local | logs | global )

--Florence (talk) 17:31, 4 January 2015 (UTC)

Long-term, recurrent vandalism[edit]

96.228.244.95[edit]

Still active in various wikipedia versions. Also known as 63.92.225.57 cross-wiki-contribsIP inforobtexgblockglist, the same vandalism from both IPs. --mfb (talk) 09:36, 28 October 2014 (UTC)
..and with IP 66.194.104.5 cross-wiki-contribsIP inforobtexgblockglist. I have been reverting those edits for many days now.... --Hemuska (talk) 12:04, 29 October 2014 (UTC)
The section got archived but he is still active with his main IP, always the same type of vandalism. --mfb (talk) 09:47, 23 January 2015 (UTC)
I globally blocked it now for 6 months. --MF-W 15:35, 23 January 2015 (UTC)

MS Vandal[edit]

The following user name have been used as sock-puppet for vandal activities.

Would appreciate if the common IP can be blocked / mail to me to be blocked. Yosri (talk) 17:29, 11 January 2015 (UTC)

Beleiutz[edit]

See Vandalism reports/Beleiutz for current or recent claimed activity --Abd (talk) 14:45, 16 September 2014 (UTC)

Sarafarzad[edit]

hi dear - (this is a global vandalism user) (and blocked in any wiki) , he is have any vandalism edit in *.wiki and have any user id Wikipedia:Sockenpuppe = user:Piroz12 ,user:Sarafarzad , user:R tehrani , user:Bitafarhadi and used this accounts only for vandalism , in fa.wiki and en.wiki Rollback all edit and blocked , check usered in en.wiki. --Florence (talk) 00:49, 24 November 2014 (UTC)

@Elfix: . this user back with username Sardari b [SULinfo] – [cross-wiki edits] , thanks --Florence (talk) 12:56, 24 November 2014 (UTC)
Yes check.svg Done Elfix 13:14, 24 November 2014 (UTC)
Big Like and Thanks dear --Florence (talk) 13:24, 24 November 2014 (UTC)
hi @Elfix:, sorry he is back with name Tina ramzi [SULinfo] – [cross-wiki edits] with Global Contributions --Florence (talk) 19:56, 8 December 2014 (UTC)
Previously locked.  — billinghurst sDrewth 12:45, 4 January 2015 (UTC)