User language
en-N This user has a native understanding of English.
fr-1 Cet utilisateur dispose de connaissances de base en français.
Users by language

To do tasksEdit

Align the codes on the admin/crat/cu/... and sisters user templates to have a base, and a build

user meta tool to identify User:CommonsDelinker pages and removeEdit

Time to get rid of the legacy garbage user pages, and allow meta user page to shine through.

Cf. kywiktionaryEdit

Has this report lead to any further conclusions? It seems this IP user resumed activity after expiry of your 1 month block. --Vogone (talk) 16:01, 24 March 2019 (UTC)

@Vogone: Thanks for the contact, I had forgotten to get back there following the block expiry. There was no contact, which is unfortunate. I have been and tidied up, and blocked for an extended period. I also note 189.6.16.72, and think that it may be related, though will watch more closely.

I also see a little activity at tgwikt from one of the IPs which is probably related.  — billinghurst sDrewth 20:49, 24 March 2019 (UTC)

I see you blocked 2804:14C:6585:429A:E9B4:A405:E5FF:F8C0 on that wiki, but have not deleted (all of?) their recent contributions — specifically the ones from March 10th, which I'm pretty sure are the exact entries that caused the wiki to pass 30K again on that date (I announced it with no "reservations" because I forgot I had just questioned similar activity in that same wiki just the month before [as linked to by Vogone above]). Any particular reason you left those pages alone? - dcljr (talk) 02:17, 25 March 2019 (UTC)
Same goes for the following users on the same wiki:
These 5 IPs have been blocked as part of your March 24th block of "2804:14c:6590:8cec::/64" but their contributions from early January of this year have been left on the wiki. Have I just "jumped the gun" on this, and you're still in the process of deleting stuff over there? Or are you not sure they're actually the same person? - dcljr (talk) 02:33, 25 March 2019 (UTC)
Mass delete failed due to db error, and I didn't have the time to do singly. The older are not in RC, so cannot be mass deleted.  — billinghurst sDrewth 04:39, 25 March 2019 (UTC)
OK. So, should I request this at SRM? (You would have deleted those pages if you could have, right?) - dcljr (talk) 06:04, 25 March 2019 (UTC)
They are deletions that are going to need to be bot'ified or handled individually, which takes a little time and patience. These are shared tasks, so either at SRM, or a link to list at SRM are always an option.  — billinghurst sDrewth 09:38, 25 March 2019 (UTC)

Range watchesEdit

Special:AbuseFilter/181Edit

Hi,

Could you please replace "utili1sateur" with "utilisateur" in Special:AbuseFilter/181? The typo was introduced in Special:AbuseFilter/history/181/diff/prev/2814 and prevents all new users from writing on the page (the id gets obsolete every month because the page is archived by renaming).

Thanks,

Orlodrim (talk) 22:57, 5 February 2020 (UTC)

@Orlodrim:   Done Ugh, not certain how I picked up that typo. I have also updated the filter for the page archiving. Noting that I am still awaiting the update to the abuse filters of the ability to filter based on wiki, which will be the best way to exclude frWP for Lomita's pages. Maybe soon.  — billinghurst sDrewth 01:07, 6 February 2020 (UTC)

Wikidata weekly summary #402Edit

Re: SRGEdit

Hello, thanks for the message on my talk page. Yes, I know that I should educate myself and I will do it in the future. Best regards, Zoranzoki21 (talk) 01:54, 13 February 2020 (UTC).

filter this crap?Edit

Is there any way to automatically find this crap (I presume this is global)? This has been going on for .. years? --Dirk Beetstra T C (en: U, T) 09:31, 13 February 2020 (UTC)

@Beetstra: toollabs:global-search/ so livetvstrem.com search.  — billinghurst sDrewth 11:11, 13 February 2020 (UTC)
I was more thinking of an abusefilter. We've been seeing a lot of this crap where the beginning of the article or a section is spammed with a link. Many of them are blacklisted on en. --Dirk Beetstra T C (en: U, T) 11:18, 13 February 2020 (UTC)
No idea. I would have thought that if it is problematic that enWP would have been first to find it, and to fix it. I would think that it is a more mature spamming / editing rather than a naive attempt by spambots. It is presumably a WP thing long, it isn't something that I see at the sister wikis like WSes, Commons, Meta or WD. Once they publish the abusefilter update that allows filters to pick WPs, then it might be something to consider.  — billinghurst sDrewth 11:32, 13 February 2020 (UTC)

COIBot monitoring of server ipEdit

Hi there,

I saw you used COIBot many times, so I was wondering if you might know the answer to this. A series of accounts tried to spam several SEO ad farm-like urls on nl:wikt yesterday. We manually compiled a list of domains to search for any other spam attempts that may have gone unnoticed, but it is not unlikely that they will create more of such domains in the future. Most of these domains are hosted on 3 or 4 servers with nothing else on it, and I noticed that COIBot does do something with the hosting ip. Do you know if it is possible to add those to the monitoring list so it also reports any spam attempts with new domains hosted on those servers? Or does it not work that way? Where would we do that? Sumurai8 (talk) 00:05, 16 February 2020 (UTC)

Hi @Sumurai8: No, COIBot is not able to proactively monitor new domain names based on their creation, ie. that we constantly reverse DNS an IP address to get domains hosted. I have talked to Beetstra whether it is possible to monitor based on an underlying IP address appearing in a report (... long story ...), and at this time, the best we can do is look at the WhatLinksHere through the "track" in the IP part of a XWiki bot report, eg. in the following report User:COIBot/XWiki/oefentoets.nl see the IP section



91.208.60.138
(LinkSearch: meta s/meta | en s/en | es s/es | de s/de | fr s/fr | ru s/ru | zh s/zh | simple s/simple | c s/c | d s/d | Wikipedias: top 20 · 40 · major wikis · gs )
(Reports: Report <-track | XWiki | Local | en | find entry)       (DomainTools: whois | AboutUs | Malware? | Alexa)(Search: Google | en (G) | fr (G) | de (G) | meta (G) | backlinks |  links ←)

It would be great if we could reactively push an IP and say run all the crap that relates to this IP, but that is lots of grunt and collection.

To further assist, you can run some searches for contents of COIBot reports—I have search engine forms on my user page—so you something like "91.208.60.138" COIBot/Xwiki and "91.208.60.138" all COIBot

If you are in IRC with a cloak, do note that you can sit in #wikimedia-external-linksconnect and there are queries available, see Small Wiki Monitoring Team/IRC.

If you are casual spambot-fighter, please feel welcome to just put request on Poke's talk page in {{XWikiSummary}} and ping Herbythyme, myself, or your trained administrator/steward/... as we are normally going to be online during a day. If you are monitoring a lot of spam-type activity there is also scope to grant access to Poke.

If you just have a big list of crap that we are going to head straight to blacklisting, then just collectively add them to one request at Talk:Spam blacklist using {{LinkSummary}}. That becomes an easy task to process AND it will generate the COIBot reports.  — billinghurst sDrewth 02:05, 16 February 2020 (UTC)

@Sumurai8: what we currently can do is to ask COIBot to save a linkreport for the IP, like has been done for the server 91.208.60.138. That report then contains all the domains that have been added to Wikipedia (in this case 3), and all additions. COIBot does not detect whether other domains on the server exist (that would be work for a reverse DNS, which is linked from the linksummary template'). There is no reason why we couldn't run a report-request on a regular basis. I will add you to the list of users who are allowed to use the /Poke-functionality. --Dirk Beetstra T C (en: U, T) 05:21, 16 February 2020 (UTC)
Thank you both for your help :-) Sumurai8 (talk) 10:33, 16 February 2020 (UTC)

Wikidata weekly summary #403Edit

Pechkurov's spam linksEdit

There is a typo in one regex – it should be \blyricstranslate\.com/ru/pechkurov-aleksej instead of \blyricstranslate.\com/ru/pechkurov-aleksej (the dot should be escaped). --jdx Re: 06:17, 19 February 2020 (UTC)

  Done 👍  — billinghurst sDrewth 07:20, 19 February 2020 (UTC)