Vandalism reports/Archives/2017-05
2600:387:A:19:0:0:0:67 et al.
- 2600:387:A:19:0:0:0:67 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2600:387:A:5:0:0:0:76 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 107.77.219.37 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Hallmarks of a longtime vandal / article-count gamer (creating year stubs to push wikis past article-count milestones). Note that Luxotool is not showing the edits of which I speak (which seems a bit worrying). In particular:
- bn:Special:Contributions/107.77.219.37
- bn:Special:Contributions/2600:387:A:5:0:0:0:76
- jv:Special:Contributions/2600:387:A:19:0:0:0:67
- xmf:Special:Contributions/2600:387:A:19:0:0:0:67
have not, as I type this, yet been deleted by any local admins (although admins have been notified); they are the same kind of contentless year-stubs that regularly get deleted.
For the record, similar contributions by the same user to the following wikis have already been deleted:
As noted above, all of these cases involved the creation of pages merely to push the wiki past a milestone tracked at en:Wikipedia:Milestone statistics. Because the user was kind enough to report these milestones themselves, this suggests that they might not have made similar contributions to any other wikis, but it would be nice if someone could check using some other tool.
Finally, the following contributions to an admin-less wiki:
are totally useless entries where the "definitions" are merely identical to the words being defined; these would need to be deleted by a steward. - dcljr (talk) 02:35, 1 May 2017 (UTC)
Vandalism in English Wikipedia
Dear sir, Your kind attention is drawn that a group of vandals and fake user i.e. User:Rehmat Aziz Chitrali created a rubbish article about me in English Wiki namely [1] to defame me before the LagCom and Wiki community and illegally used my name to defame me before the LangCom, Wiki Admins. Please see his rubbish and defaming article about me here [2] he is posing himself as Rehmat Aziz Chitrali, please check is IP and my IP, his contributions, and my contributions, his activity and my activity, his email and my email and his edit times, I am unable to locate his present residence and location. Can anybody help me to locate his whereabouts? please see his rubbish user talk page here [3] please check his IP address by Check User or Clerk as he is vandalizing Wikipedia, creating rubbish articles.
It is pertinent to mention here that my IP has been blocked, My User page i.e. User:Rachitrali has also been blocked, I am using my personal User ID i.e. User:Rachitrali, I have no concern with the User:Rehmat Aziz Chitrali this is fake ID to defame me before the LangCom. I request the Syosps, Admin other wikipedians who are using the CU, please check my activity, My contributions and My User:Rachitrali and compare with this fake User i.e. User:Rehmat Aziz Chitrali. I solemnly affirm and state that this fake ID is not related to me. I request the Admn and Syosps to give me the whereabouts the Fake ID users, vandals and sock puppets.
Your kind attention is also drawn that there are many vandals and sock puppets are working against me and using my personal name like this User:Rehmat Aziz Chitrali (Fake ID) by [4] a sock puppet blocked in enwiki he is also using the name of Prime minister of Pakitan i.e.[User:Mian Muhammad Nawaz Sharif] he is also using the fake ID of [User:Thomas.W2] [User:Daud khan 2], [User:Farhad Uddin] [User:Nisardrosh] [User:Chitralwiki] [User:Sikander Adam]and many dignitaries of Pakistan and Global community, a complete list of his accounts can be seen here [5]. He is one of the enemy of Khowar language wikipedia.
I want to clear here that my account in enwiki has already been blocked, my user page User:Rachitrali has also been blocked, my user talk page has also been blocked, i am unable to edit and create account. Please check this fake ID User:Rehmat Aziz Chitrali, this is totally fake. I request the sysops, admins, bureaucrats to check this fake ID by Check user as this fake ID is not related to me.concern with the other IDs, please convey my message in wiki as you know that I have been blocked.
I request {{Ping|StevenJ81} and @MF-Warburg: both of my respectable brothers to please remove the fake User ID namely User:Rehmat Aziz Chitrali who is defaming me before langCom, he is destroying my good name, please see his vandalism and sock puppetry here [6] Please assign this task to Check user or Steward to check the IP and give his comments, I checked that he is to Najaf ali bhayo.
As you know that I am helping Wiki by localizing contents from English to Khowar Language, Translation from English to Khowar language, Translating Modules into Khowar languages, cleaning up the articles. An In Shah Allah I'll contribute to this wiki project regrading localization of Pakistani languages and creation of wikis in the languages of Pakistan.
My services as Test Admn has already been revoked from Test Admn to Temporary Test Admin and temporary translator I am not administrator here . If any sock puppet like Najaf ali bhayi suggesting for removal my temporary test admin ship please check his activity and credibility, he is using fake accounts like User:Mian Muhammad Nawaz Sharif and many other dignitaries of Pakistan to defame them[7].Mr. MF-Warburg why this IP (202.69.15.92 is not using his real name? Because he is the sock puppet as confirmed here [8] sir since the inception of Khowar Wikipedia Incubator project he is trying to vandalise khowar wikipedia and as a test admin many time I have blocked this [9] please see his other vandalism here [10], he deleted this khowar wiki here [11], this [12]again deleted this [13] deleted Khowar wikipedia and insterted Arina wikipedia [14], please see his global account details here [15] please check this [16] this [17]. Regards.--Rehmat Aziz Chitrali 07:28, 9 May 2017 (UTC)
The vandal is back, My ID is User:Rachitrali. somebody is using my name to defame me. after deletion of his fake ID namely [User:Rehmat Aziz Chitrali] he is now created another fake ID to defame me namely User:Rehmat_Aziz_Chitrali_Gold_Medalist in enwiki, I have no relation this fake ID please delete this permanently block his IP for indefinite period as he is vandalizing in enwiki by creating Fake ID to defame the others. His recent fake ID is here[18] he is using my name, why you are not blocking this sock puppet permanently? --RAChitrali 09:24, 9 May 2017 (UTC)
- The vandal again posted an unblock request on my behalf by using my name with his fake ID please revert his unblock request here [19], he is using my name, i have no concern with this unblock request-RAChitrali 09:46, 9 May 2017 (UTC)
Vandalism on rueWiki
- IP 46.211.115.5
- 46.211.115.5 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Recreated the page rue:Гомосексуал with obscenities, that was once deleted (2017年05月12日 by User:Holder) Please, pay attention, that from IP prefix 46.211 there are persistent massive vandal attacks since 5th of May. Wouldn't it be possible to block this prefix for unregistered users?--Igor Kercsa (talk) 16:32, 13 May 2017 (UTC)
- Hi, the range is too large to consider a block, instead of this I've deleted the page and protected the title for some time to avoid recreation. Syum90 (talk) 17:06, 13 May 2017 (UTC)
Continued from 46.211.155.199
- 46.211.155.199 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Next morning the same vandals created rue:Гомосексуали (it is plural from the previous)--Igor Kercsa (talk) 16:05, 14 May 2017 (UTC)
- This page waits with the similar spam and other 11 pages for deletion in rue:Category:Сторінкы до швидкого змазаня
--Igor Kercsa (talk) 17:15, 16 May 2017 (UTC)
Many IP addresses on jbo and fo Wiktionaries
All pages created on 18 May 2017 (UTC) on the Lojban Wiktionary (which just pushed the wiki past 1,000 articles) need to be deleted, as they appear to be 275 copies of the page wikt:jbo:sum (named "sum1" through "sum275"). The relevant IP addresses (in reverse order by edit date) include:
- 64.71.171.44 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.82 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.84 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.49 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.46 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.62 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
Also, hundreds of highly questionable entries (for supposed variants of English, Danish, and other languages) on the Faroese Wiktionary (which also pushed that wiki past 1,000 articles today) have been created in the last week by many IPs, including two in the list above:
- 2602:30A:2C48:EB1F:3976:3456:4B32:313 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.63 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.62 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye (also in above list)
- 64.71.171.43 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.68 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.71 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.55 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.69 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.78 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.32 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.59 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 198.22.122.15 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.54 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.85 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.53 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 64.71.171.84 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye (also in above list)
- 2602:30A:2C48:EB1F:1DD3:8078:7384:2E96 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
The Faroese entries are perhaps good-faith attempts to expand that wiki; I list them here with the other, more obvious (Lojban) case of vandalism because they share some IP addresses and the characteristics of pushing the wiki to a milestone with many edits clearly by the same user using a rotating list of IP addresses. Also, note that I haven't checked to see what other wikis these IPs have recently edited (obviously, interested parties can do that with the provided links). - dcljr (talk) 08:50, 19 May 2017 (UTC)
- The Lojban entries have been deleted. At least some of the Faroese enries have also been deleted. Thanks.
- Now, a bunch of entries similar to the Lojban ones have been created on the (adminless) Greenlandic Wiktionary by:
- - dcljr (talk) 17:23, 21 May 2017 (UTC)
- The Greenlandic Wiktionary contributions have been deleted. - dcljr (talk) 01:32, 26 May 2017 (UTC)
Infobox5
- Infobox5 [stalktoy] – [cross-wiki edits]
Cross-Wiki-Spam often in wrong language es, de [20] --Codc (talk) 08:18, 25 May 2017 (UTC)
MasonDecker217
These IP edits at the Korean Wikiquote occurred 2 minutes after MasonDecker217 first visited that wiki (23 May 2017 00:31 UTC), and then that milestone and other recent ones (including those discussed in the section immediately above this one) was announced at Wikimedia News by that user.
- 162.196.142.177 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- MasonDecker217 [stalktoy] – [cross-wiki edits]
I believe this is a known longtime cross-wiki vandal (IP "162.196.142.177" listed under "24 Oct 2016"), so the contributions can be deleted on sight? If so, please delete the ones linked to in this comment and in the previous section. - dcljr (talk) 02:12, 23 May 2017 (UTC)
- And now MasonDecker217 has pushed the Hawaiian Wikipedia past 2,000 (again). Are these legit Hawaiian articles? I don't know... (BTW, the Korean Wikiquote pages have been deleted by a local admin.) Can I get someone to reply on this page regarding whether this is actually a longtime vandal? - dcljr (talk) 01:29, 26 May 2017 (UTC)
- HELLO?? - dcljr (talk) 07:11, 29 May 2017 (UTC)
- Thanks for noting this. I locked the account and will go through the contributions to delete them. --MF-W 14:28, 29 May 2017 (UTC)
- HELLO?? - dcljr (talk) 07:11, 29 May 2017 (UTC)
- And now MasonDecker217 has pushed the Hawaiian Wikipedia past 2,000 (again). Are these legit Hawaiian articles? I don't know... (BTW, the Korean Wikiquote pages have been deleted by a local admin.) Can I get someone to reply on this page regarding whether this is actually a longtime vandal? - dcljr (talk) 01:29, 26 May 2017 (UTC)
Almost certainly the same user, at 11 more IP addresses (reverse chronological order, per NewPages):
- 2602:30A:2C48:EB1F:E97A:94D7:164A:E7A7 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 107.77.217.140 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:458F:D7CF:9404:A42D xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:A9CF:A573:B96F:2A8 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2600:387:A:3:0:0:0:82 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:240F:6D7C:B01E:AEEA xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:94E8:3061:9C6A:A7D2 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:EB:6E0:15D5:E98 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:D4DE:21A4:6320:747 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:FD19:2C53:F961:2A xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
- 2602:30A:2C48:EB1F:D138:9A05:48E2:AD4C xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye
...this time pushing the Samoan Wikipedia past 1K, with a mixture of "number stubs" (I wasn't aware that the Roman numeral "X" could stand for literally hundreds of different numbers!) and stubs for American food companies (just like the contributions to, I think, the Hawaiian Wikipedia, mentioned immediately above). - dcljr (talk) 02:20, 2 June 2017 (UTC)
- @MF-Warburg: Could you please handle this request (since no one else seems to be monitoring this page)? In the future I will post this kind of stuff somewhere else (SRM, I assume). Someone (preferably an active steward) needs to finally deprecate this page (per these two discussions), and update the instructions on pages like SR and SRM (etc.) to reflect the change. - dcljr (talk) 21:20, 4 June 2017 (UTC)
- Done. --MF-W 17:58, 6 June 2017 (UTC)
- (Meaning some of the smwiki deletions have been done. :) Thanks. I assume you just haven't gotten to all of the deletions you're going to do? Because there are about 80 pages left... - dcljr (talk) 06:56, 7 June 2017 (UTC)
- Uuugh so many pages. The rest is now deleted as well, except no. 100-109 which were edited by a local user. --MF-W 09:56, 7 June 2017 (UTC)
- (Meaning some of the smwiki deletions have been done. :) Thanks. I assume you just haven't gotten to all of the deletions you're going to do? Because there are about 80 pages left... - dcljr (talk) 06:56, 7 June 2017 (UTC)
- Done. --MF-W 17:58, 6 June 2017 (UTC)
Евгенгег
- Евгенгег (talk · contribs · page moves · block user · block log) created a bunch of disruptive translations, which can be seen even without knowledge of Russian. Generally there are a lot of people on Meta and on Translatewiki which use autosuggest from Translate extension to abuse it, it is I guess the case with this one. stjn (WMF) [Saint Johann] 16:18, 9 May 2017 (UTC)
- Deleted. Matiia (talk) 17:32, 9 May 2017 (UTC)
27.145.125.193
- 27.145.125.193 xwiki-contribs • xwiki-date (alt) • ST • IP info • WHOIS • robtex • gblock • glist • abuselog • bullseye 2602:306:3357:BA0:ACA8:DF09:FCEC:3219 19:44, 11 May 2017 (UTC)