Meta

Vandalism reports/Archives/Archive 5

< Vandalism reports‎ | Archives
Warning This is an archive. Please post new vandalism alerts on vandalism reports under the respective section. Thank you.

Current cross-wiki vandalismEdit

User:67.174.105.51Edit

repeated acts of vandalism on Richard Carl Fuisz, a living person bio

  Done billinghurst sDrewth 13:18, 17 January 2012 (UTC)

User:46.255.83.10Edit

46.255.83.10 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker Latest reincarnation of the Italian "municipalities merging" IP 2.224.12.20 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker, 94.88.178.219 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker and 195.62.170.97 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker. Some few contribs are okay, most of it is completely nonsense. NNW 10:56, 16 January 2012 (UTC)

  Done--Vituzzu 11:56, 16 January 2012 (UTC)

User:87.220.243.174 and User:87.222.1.186Edit

Reincarnations of Al12179 below; both keep spamming the same images cross-wiki. global edits 1, global edits 2. --Cú Faoil 08:28, 8 January 2012 (UTC)

User:Al12179Edit

Al12179 (talk · contribs) just got blocked on de.wikipedia for crosswiki image spamming. See his global contributions, which seem to affect a considerable number of projects. --Cú Faoil 23:12, 2 January 2012 (UTC)

Done. PeterSymonds (talk) 23:23, 2 January 2012 (UTC)

201.24.42.5Edit

Active cross-wiki spam. -- 84.73.76.136 13:57, 24 December 2011 (UTC)

  Done —Marco Aurelio (Nihil Prius Fide) 14:02, 24 December 2011 (UTC)

GüllenmätschEdit

Edgar again --Guandalug 13:48, 15 December 2011 (UTC)

Done. --Mercy 13:49, 15 December 2011 (UTC)
Thanx. Annoying little *censored*.... --Guandalug 13:50, 15 December 2011 (UTC)

Muss man suchen! 2Edit

Edgar von Webern (evw) --Inkowik (talk) 13:00, 3 December 2011 (UTC)

  Done —DerHexer (Talk) 13:02, 3 December 2011 (UTC)

EuergneuruppinerEdit

Please stop this user. --46.15.103.139 10:24, 27 November 2011 (UTC)

  Done, globally locked by Quentinv57, together with Eendrarlishällöä. Thanks for the report. Trijnstel 17:33, 27 November 2011 (UTC)

AeuerhullEdit

Again Edgar von Webern. --Inkowik (talk) 17:26, 22 November 2011 (UTC)

Done. Jafeluv 17:39, 22 November 2011 (UTC)

MwanzonhfbvEdit

Again Edgar von Webern. --Inkowik (talk) 18:13, 15 November 2011 (UTC)

  Done. -- Mentifisto 18:19, 15 November 2011 (UTC)

TumstaffEdit

Again Edgar von Webern. --Inkowik (talk) 18:09, 15 November 2011 (UTC)

  Done. -- Mentifisto 18:19, 15 November 2011 (UTC)

AserbeidschanEdit

Crosswiki abuse of Edgar von Webern. --Inkowik (talk) 13:53, 12 November 2011 (UTC)

  Done —DerHexer (Talk) 13:57, 12 November 2011 (UTC)

StockprotzsauEdit

Crosswiki abuse of Edgar von Webern. --Inkowik (talk) 15:06, 8 November 2011 (UTC)

  Done globally locked by Matanya. Trijnstel 18:44, 8 November 2011 (UTC)

Crosswiki spammer: User:JanwallsEdit

Please lock account and consider adding spamlinks to bl. thanks, --birdy geimfyglið (:> )=| 12:59, 7 November 2011 (UTC)

  Done--Vituzzu 13:04, 7 November 2011 (UTC)
Can you help me doing a list of the links to put in the blacklist? --Vituzzu 13:14, 7 November 2011 (UTC)
I added nine domains he was spamming, though there might be more I didn't catch... Courcelles 01:29, 10 November 2011 (UTC)
I've blacklisted three more domains. All are now on the list. Trijnstel 11:46, 10 November 2011 (UTC)

86.145.231.48Edit

86.145.231.48 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker vandalizes several pages on Meta --Iste (☎) 10:29, 31 October 2011 (UTC)

  Done. Blocked for 6 hours by Quentinv57 on Meta. Trijnstel 10:35, 31 October 2011 (UTC)

188.55.90.229Edit

188.55.90.229 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker "Man on a mission" who obviously wants to edit the article about Israel in all languange versions. --Iste (☎) 19:45, 30 October 2011 (UTC)

Spam accounts on pih.wiki (and others)Edit

Following accounts are recently adding spam content on userspace. The text is in Polish and starts with a link to what is being promoted. The wikis where it is being added are mainly pih.wiki, Meta, Outreach, en.wikiversity and en.wiki.

Links


” Teles (T @ L C S) 08:26, 27 October 2011 (UTC)

GdsjgpdhipgbdEdit

Cross wiki spiders web vandal. --Engie 23:16, 13 October 2011 (UTC)

  Done Matanya 23:22, 13 October 2011 (UTC)

189.79.215.43Edit

189.79.215.43 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker Unexplained page blanking in a couple of projects, short time before appeared from another IP of the same range. --Microcell 18:21, 11 October 2011 (UTC)

  Done, globally blocked for 1 day by Vituzzu. Trijnstel 18:24, 11 October 2011 (UTC)

95.68.127.163 and VUGDEdit

95.68.127.163 xwiki-contribs • xwiki-date • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • ipchecker has (and other different IPs in the same range, easiest to find them is from the history for lv.wikis sandbox, has been vandalizing on several wikis. I assume that VUGD [stalktoy] – [cross-wiki edits] is using the same IP since most of the edits on lv.wiki (and some on en.wiki) have been made from information that the IP puts together. I can't vouch for the quality of the edits on lv.wiki since I don't understand much of the text. Neither the IP not VUGD have answered my questions about their behaviour on lv.wiki. GameOn 16:21, 28 June 2011 (UTC)

Add IP-addresses related to this user. -- Tegel (Talk) 16:13, 2 August 2011 (UTC)
One more account added (both - VUGD and Ja1 - are already locked, see here). Trijnstel 16:57, 2 August 2011 (UTC)
One IP adress added. See also the global blockrequest here. Trijnstel 14:28, 19 September 2011 (UTC)
Some new IP-addresses. -- Tegel (Talk) 17:20, 23 September 2011 (UTC)

217.209.82.165 (2)Edit

  Done. PeterSymonds (talk) 19:49, 2 October 2011 (UTC)

TugtugtugtuckerEdit

  Done by DerHexer. Trijnstel 19:15, 1 October 2011 (UTC)

Mono55tallaEdit

  Done. Jafeluv 18:12, 30 September 2011 (UTC)

NohlnagelfranzEdit

  Done. Jafeluv 18:12, 30 September 2011 (UTC)

212.154.175.2Edit

  Done, globally blocked for 1 year by PeterSymonds. Trijnstel 21:14, 28 September 2011 (UTC)

71.249.226.126Edit

  Done, globally blocked for 1 day by Matanya. Trijnstel 17:48, 27 September 2011 (UTC)

217.209.82.165Edit

  Done, globally blocked for 1 day by PeterSymonds. Trijnstel 18:23, 26 September 2011 (UTC)

User KeiichitakanoEdit

Keiichitakano [stalktoy] – [cross-wiki edits] repeatedly inserted the respective word for „corward“ into the respective articles about en:NHK (samples: [1], [2]), another instance of obvious vandalism [3], found no helpful edits after sampling 10 edits. --Dealerofsalvation 06:02, 20 September 2011 (UTC)

All reverted and the user warned. If they keep it up, they're headed for a lock as a vandal-only account. Jafeluv 07:44, 20 September 2011 (UTC)

User:Mare96Edit

  • Mare96 (talk • contribs • block • xwiki-contribs • xwiki-date • CA • ST • lwcheckuser) Hi, I hope I'm right here. The SUL user Mare96 continues changing population data without giving sources or at least any comment all across the wikipedias. At present, he has been blocked on four wikipedias locally, but he seems to continue wherever his account is still functional. Greets --JøMa 10:34, 18 August 2011 (UTC)
  Done Globally locked on 28 August by Dungodung. Trijnstel 19:25, 28 August 2011 (UTC)

188.55.9.180Edit

The IP user makes similar disruptive edits (posting different images related to Palestine without any captions) in articles about Israel. The global contributions view option seems to be out of operation now, but at least he was noticed in the Ukrainian and Polish Wikipedia. Please track down all of his edits and block this IP globally. --Microcell 19:17, 6 August 2011 (UTC)

Some examples: 1, 2, just in case you have the same problems with crosswiki checks. --Microcell 19:44, 6 August 2011 (UTC)
I can´t see any warnings on the both talk pages. All images are also Israel related, but putting them in to article without any description is questionable. --WizardOfOz talk 19:55, 6 August 2011 (UTC)
Given that guy's pattern, his only goal is pushing pro-Palestinian view wherever possible in a way which is accessible to him. I see no reasons to post a warning which is much more likely to be noticed by another editor from this IP than the spammer, nor do I come up with any other way to prevent unconstructive edits. I'm totally neutral with regard to the Israeli-Arabic conflict, but his bad faith stands out. --Microcell 20:03, 6 August 2011 (UTC)
Well, looks like he's finished because my wiki-by-wiki search finds nothing new from the IP. I think the block is needed no longer, but if someone manages to fix the toolserver or in another way find all of his Wikipedia edits the problem will be resolved. --Microcell 20:11, 6 August 2011 (UTC)

122.110.184.167 and other IPsEdit

IPs from the same Australian ISP is blanking part or the entire page on different wikis. They mainly vandalise wiktionaries, especially de, vi, zh, zh-min-nan etc. Since the vandal is using dymanic IP, please monitor. --Bencmq 13:42, 25 July 2011 (UTC)

  Done，block 114.75.128.0/19, 122.110.160.0/19 --Shizhao 09:20, 26 July 2011 (UTC)
  Done. -- Mentifisto 05:48, 21 August 2011 (UTC)
  Done. -- Mentifisto 05:48, 21 August 2011 (UTC)

80.232.240.49Edit

Open proxies, frequent cross-wiki disruption. --Microcell 20:14, 20 July 2011 (UTC)

  Done--Shizhao 09:25, 26 July 2011 (UTC)

Long-term, recurrent vandalismEdit

Spammer using fake bot accountsEdit

  Resolved.

The spammer mentioned in Steward_requests/Global/2010-12#Global_lock_for_spam-accounts_plus_checkuser has returned, this time adding links to finddest.info and attractdest.info. Those two have been added to the blacklist, and the accounts have been locked. Unfortunately, blocking the ip address was not possible because the ip is dynamic. The following accounts were involved, plus 2 or 3 that had not been SUL'ed:

- Andre Engels 10:35, 8 July 2011 (UTC)

COIBot reportsEdit

-- Dferg ☎ talk 16:56, 8 July 2011 (UTC)

eswikiEdit

Are also sockpuppets of the spammer and have been globally locked by Magister Mathematicae. -- Dferg ☎ talk 14:48, 8 July 2011 (UTC)

nlwikiEdit

Víctor Alexis Cantillano OviedoEdit

  Resolved.

Continuing compulsive editor from Chile pushing cross wiki to get chilean persons on-wiki using machine translations, placing requests on user pages and embassy pages, manipulation with replacing them once removed using different sockpuppets, two accounts and various dynamic IP-address. Has a pre occupation with Chilean singer Nicole. Double voting on nl-wiki here. Blocked on nl-wiki are after checkuser results confirmed matters. Also blocked on es-wiki see notification on es-wiki. Also has pre occupation with the London Olympic games and articles of Nicole's records and others like:

  • Álvaro Scaramelli
  • Álvaro Véliz
  • Américo
  • Domingo Vega
  • Esperando nada
  • Luiz Jara
  • Nicole
  • Raquel Calderón
  • Pablo Ruiz
  • Tal vez me estoy enamorando
  • Buddy Richard
  • Ximena Abarca
  • Soledad Alvear

While some of this persons *perhaps* are notable (to be decided locally) the articles created cross wiki are definitely not and lack sources, relevance, proper language and much more.

Reported by: MoiraMoira 07:45, 12 July 2011 (UTC)

Added data by Mathonius 09:43, 14 July 2011 (UTC)
Accounts locked now, admins cross wiki are cleaning up the matters locally now when needed. MoiraMoira 07:14, 15 July 2011 (UTC)
3 more IP addresses added. MoiraMoira 07:15, 19 July 2011 (UTC)
4 more added MoiraMoira 05:49, 21 July 2011 (UTC)
It looks the like the case is solved with the last activity in July. Trijnstel 18:24, 11 September 2011 (UTC)

Jerry DandridgeEdit

  Resolved.

Persistent compulsive cross wiki vandalism, user from Fünfstetten in Germany, copyvio uploads on commons and en-wiki, trolling / fighting cross wiki (de, en, fr, nl mostly), extensive misuse of sockpuppets; reactivates sleepers as well as registers non-sul accounts elsewhere and uses user pages as storage there for the vandalism done. Impersonates famous actors or movie characters or existing accounts often in choice of user names as well as cat-related names. Report on de-wiki list of accounts on de-wiki. Blocked socks on commons. List of accounts on nl-wiki. All sul-accounts globally locked. Uses dynamically assigned ip-addresses from the following two German ranges:

Reported by: MoiraMoira 07:51, 18 July 2011 (UTC)

It looks like the case is solved with the last activity on 27 August. Trijnstel 18:24, 11 September 2011 (UTC)

Cross-wiki sockpuppeteer FayomaEdit

Fayoma (originally of fr-wiki) vandalises cross-wiki since January 2010 and many sockpuppets have been confirmed til now. Please keep an eye on him.

Thanks in advance. Trijnstel 11:36, 10 July 2011 (UTC)

Alberto Emilio Lopez ViñalsEdit

Compulsive child editor from Argentina who vandalises on small wiki versions making nonsense mini articles in wrong language mixes, harasses admins cross wiki and more.

Ranges used
Measures taken
  • Acounts globally locked; targets especially ia and ie wiki with highly dynamic IP-addies who change every inlog session so blocking these short time or if needed the ranges (see below) can be done when needed:
  • This abusefilter was created on iawiki to disallow account creations and edits, but is currently disabled due to some more recent false positives.
  • All ranges were globally blocked on 4 August for a week until 11 August.
Other relevant links

Reported by: MoiraMoira 07:46, 12 July 2011 (UTC)

Added data by: Mathonius 08:06, 1 August 2011 (UTC)
It looks like the case is solved with the last activity on 22 August. Trijnstel 18:24, 11 September 2011 (UTC)
It's not solved; I only didn't notice the recent activity on eswiki. Trijnstel 20:17, 12 September 2011 (UTC)
He's back on ia. Almafeta 08:06, 17 September 2011 (UTC)
He is back as the previous blocks expired. I've blocked the ranges for another month. Any user feel free to review these blocks (unblock, change period, etc).” Teles (T @ L C S) 09:42, 18 September 2011 (UTC)
  • He is back again, mostly on ie.wp though also on ia.wp. Currently not using ranges. Ajraddatz (Talk) 18:47, 8 October 2011 (UTC)

OlympicFanEdit

OlympicFan creates sockpuppets to spam user pages in different wikis about a sports-related forum. Please report accounts below, and move them to the collapsed box once they have been globally locked. Jafeluv 23:21, 7 September 2011 (UTC)

    • 2.156.178.11 - currently blocked 2 weeks on en.wiki - The Bushranger 02:43, 20 November 2011 (UTC)
  • sl:User:RoadToLondon012 - currently active on sl.wiki and a couple of others, not (yet) blocked. — Yerpo Eh? 15:45, 31 December 2011 (UTC)
    •   Done, globally locked. Trijnstel 15:56, 31 December 2011 (UTC)

Hunter Mariner crosswiki vandalEdit

  Resolved.

Creates crosswiki large Hunter Mariner and Cape May Point General Store pages with only YouTube links in it, vandalizes the articles Delete key, Ceiling fan on enwiki and much more. At the moment he uses old vandalismaccounts he created and used some years ago. He also uses (apart from his static home IP adress) several open proxies. See en:Category:Wikipedia sockpuppets of David Beals for some of the sockpuppets and the (probably incomplete) list below. The site was blacklisted on enwikiversity, now globally, and the page is protected for creation on several wikis.

Reported by: Trijnstel 16:55, 11 September 2011 (UTC)

Additions by: Mathonius 18:47, 11 September 2011 (UTC)
Additions by: Trijnstel 19:37, 11 September 2011 (UTC)
Link has been blacklisted globally [4] as per the wikiversity blacklist. If this hinders any investigation or if another link is spammed feel free to undo the addition to the blacklist. EdBever 19:58, 11 September 2011 (UTC)
See en:Category:Wikipedia sockpuppets of Dune Harrow for more sockpuppets ("MoIoaIm" was used today on en.wikiversity and en.wikibooks). Mathonius 00:53, 12 September 2011 (UTC)
Link for new MIoaIm video on enwikiversity: wn.com/2011_Hunter_Mariner. Diversifying. Looking above, wow! What fueled this bee? From 2009? WP SPI refers to email with an unidentified "master account." I can't follow up on enwiki, due to a minor inconvenience there, but someone may wish to contact checkusers there. The CU seems to be vanished, but perhaps there was checkuser-l mention of this at the time. If I weren't a bit behind schedule on stuff, I'd ask for CU here. --Abd 02:36, 12 September 2011 (UTC) CU stuff struck because the master account was probably David Beals, see link to SPI report above. --Abd 02:56, 12 September 2011 (UTC)
I have locked all of the remaining accounts in the David Beals category. --Bsadowski1 02:42, 12 September 2011 (UTC)
David Beals. That looks like the original account. Thanks, Bsadowski1. It may lessen the burden a little. As long as this guy hits wikiversity, it's pretty easy to catch and block and blacklist, especially with the global patrollers, who are doing a great job. The MO stands out like a sore thumb. --Abd 02:56, 12 September 2011 (UTC)
The new link has been blacklisted globally ([5]). EdBever 20:29, 12 September 2011 (UTC)

Small Soldiers vandalEdit

Vandalises cross-wiki (on the English, Italian and Dutch Wikipedia so far) on the page "Small Soldiers" or "Small Soldiers (videogame)". Tries to avoid the protection set on those pages. Deletes his user talk pages.

Some IP addresses

Reported by: Trijnstel 13:36, 10 December 2011 (UTC)

--Vituzzu 14:06, 10 December 2011 (UTC)
Retrieved from "https://meta.wikimedia.org/w/index.php?title=Vandalism_reports/Archives/Archive_5&oldid=15500937"