Wikivoyage:Vandalism in progress

From Wikivoyage
(Redirected from Vip)
Jump to navigation Jump to search

Please read Project:How to handle unwanted edits to understand what is vandalism to Wikivoyage.

Anyone can help handle unwanted edits on Wikivoyage. A couple of bad edits can be reverted quickly and easily by the first person to see them. See How to revert a page to see how to do this yourself.

However, administrators have some tools that enable them to quickly revert edits by a particular user, and also to temporarily block repeat offenders. Use this page when you need assistance from an administrator, for example when vandalism is occurring at a rapid rate or over an extended period of time. Or even if you have been managing a vandalism attack but are now going offline.

Please list the IP address or user name (use the format [[Special:Contributions/Username|Username]] or [[Special:Contributions/IP Address|IP Address]] as the header), pages touched and damage done. Sign your name using ~~~~ after your report. Put the person's IP or username in the edit summary.

See also Project:User ban nominations.

Current alerts[edit]

User:178.48.224.108, User:185.14.149.209, User:178.48.229.120[edit]

See revision history of the Szentendre article. This is not a high-volume vandal, but I note the vandalism here, which so far consists of repeatedly deleting thumbnails without explanation. These IPs are currently blocked for 24 hours, but as this seems to be a dynamic-IP user, expect a move to another IP. We should suspend the user for increasingly long periods without notice to its user talk pages, so as not to give it whatever weird satisfaction such attention might draw. Ikan Kekek (talk) 16:38, 20 December 2015 (UTC)

See also User contributions for -Sombrero19. Currently up to 1 week's suspension, along with User:178.48.229.120. Ikan Kekek (talk) 09:37, 26 December 2015 (UTC)
I suspect this one too User:95.215.52.150 --Traveler100 (talk) 14:45, 26 December 2015 (UTC)
Another east European IP address changing destinations User:212.87.238.34. Although not knowing if this is a real correction or not have left the edit, not sure if should undo change --Traveler100 (talk) 16:30, 27 December 2015 (UTC)
Yes. The hallmark of this vandal seems to be removing links to Budapest, in addition to removing images from Hungarian articles. Somebody probably had an awful experience in Hungary... ϒpsilon (talk) 16:40, 27 December 2015 (UTC)
78.92.10.167 ϒpsilon (talk) 14:57, 13 January 2016 (UTC)

Massive spam account creation attempt[edit]

I just took a look at the abuse filter that catches the annoying Telstra vandal, and I was shock to see that since yesterday more than 500 attempts to create (presumably spam) accounts were made.

I don't think this has anything to do with the Telstra user, but just lucky that the filter blocked this automated account creation process as coming from one of their IP's.

This looks like a serious attack. What can we do to prevent this happening from an IP range that is not blocked? --Andrewssi2 (talk) 10:11, 23 January 2016 (UTC)

They are still going strong, attempting 4 account creations every minute. --Andrewssi2 (talk) 11:25, 23 January 2016 (UTC)
Sorry, looks like I made a mistake in the ip range detection, and a quick fix has stopped this. Please ignore for now. --Andrewssi2 (talk) 11:51, 23 January 2016 (UTC)

Someone is deleting stuff from Mexico city articles[edit]

Please have a look at this Hobbitschuster (talk) 03:25, 10 February 2016 (UTC)

Indeed. I'm especially concerned about this edit, which reminds me very much of Internet Brands' M.O. immediately post-fork. I'd love for someone to help suss out what needs to be done here; whether this user seems like an ordinary vandal or something more. -- AndreCarrotflower (talk) 03:45, 10 February 2016 (UTC)
I only see this on one page with the User:Lucianaviott, have posted a warning. Are there similar edits with other user IDs or IPs? --Traveler100 (talk) 06:24, 10 February 2016 (UTC)

User:Turbo8000 is unilaterally changing the spelling of Nazca and Cuzco again[edit]

According to this diff, he's back again and his M.O. seems to not have changed much. Quite frankly I fear that words won't help, but it is worth a try... Hobbitschuster (talk) 17:04, 4 March 2016 (UTC)

And I'll still do it. NaSca and CuSco is the one correct spelling which the government uses. Turbo8000 17:17, 4 March 2016 (UTC)
I've rolled back all edits to Peru, because frankly, I don't think it's our job to sort through the edits of users who are clearly unwilling to work within our practices of discussion and consensus. I'm in favour of a 2 week ban; this is simply the same game, and there's no point in assuming good faith here. Any other opinions? JuliasTravels (talk) 18:58, 4 March 2016 (UTC)
I always assume good faith. I can do something: if you ban me for 2 weeks, you'll loose me as an editor here FOREVER. It's unfair to put a bad image for a country, and I don't agree with many many of your personal policies. Let me correct all the articles as I know, gringos ignorantes. Turbo8000 19:02, 4 March 2016 (UTC)
Not really, go for it, I say. Ibaman (talk) 19:00, 4 March 2016 (UTC)
There is support for Turbo8000's position, though it's not as clear-cut as he thinks. (w:talk:Cusco, es:w:Discusión:Cuzco, w:talk:Nazca, es:w:Discusión:Nasca). Apart from his assertions of official Peruvian spellings (irrelevant in an English travel guide, unless we want to change Warsaw to Warszawa, etc.) nobody here has addressed the substance of the arguments. Turbo8000, you have made good contributions to en-Wikivoyage, and I would hate to see you leave, but consensus-building through reasoned, civil discussion is the Wikimedia way. Peter Chastain (talk) 20:07, 4 March 2016 (UTC)
Please see Wikivoyage:User ban nominations#2016-03-04 incident. -- AndreCarrotflower (talk) 20:09, 4 March 2016 (UTC)

Edits to the country article template[edit]

Have a look at these edits - I thought, I'd raise it here, please move it to another place if that is more appropriate. What should we do? Edited to add: I have rolled back the edits in question for now. I fear the user may be under some kind of misapprehension due to talk page messages and have written on his talk page. What else should be done at this point? Hobbitschuster (talk) 23:52, 5 March 2016 (UTC)

In my opinion, nothing. Thanks for taking the correct action. Ikan Kekek (talk) 00:50, 6 March 2016 (UTC)

Edit warring by dynamic IP user in Hajar Mountains article[edit]

Please see Revision History. I am blocking every IP that continues to edit war for 3 months for block evasion after an initial block of 2 hours, then 1 day. There are so many IPs that it's a waste of time to post to each new one's user talk page, and no user talk page or edit messages are read, anyway. I'd suggest a filter is urgently needed for this authoritarian user who insists on his/her own way and refuses to engage in any discussion about his/her edits. The point isn't the relative triviality of the edits themselves, but that this user is irritating people and engaging in intolerable edit warring. Ikan Kekek (talk) 15:19, 11 March 2016 (UTC)

Realizing that blocking dynamic IP addresses over and over again is a total waste of time, I've protected the article, allowing only autoconfirmed users to edit it for a day. I think the protection should be extended, as this authoritarian user will undoubtedly revert again tomorrow. Please comment. Ikan Kekek (talk) 15:30, 11 March 2016 (UTC)
And now, look at the user creation log. A whole bunch of names that obviously have to be blocked... Ikan Kekek (talk) 15:47, 11 March 2016 (UTC)
  • Maybe the protection would better be extended? I support this measure, in case the need is confirmed. Ibaman (talk) 16:48, 11 March 2016 (UTC)
I think so, but the better solution would be to create an effective filter and lift the protection. If the filter won't be ready by tomorrow, though, we should probably protect the article for a few days or a week. Ikan Kekek (talk) 20:47, 11 March 2016 (UTC)
Under the circumstances, I think we'd better extend the protection for at least another day, to give time for a filter to be created. We need to filter out these dynamic IPs, which should also take care of the troll new usernames containing my screen name. Ikan Kekek (talk) 03:16, 12 March 2016 (UTC)
I also reverted the IP user's edit in Central Coastal Oman applied protection for 2 days. Ikan Kekek (talk) 05:28, 12 March 2016 (UTC)
These are awfully draconian measures for a relatively minor issue of wording choice. Powers (talk) 23:31, 14 March 2016 (UTC)
It's not about wording choice, and I'm pretty shocked that you're reacting this way. It's about a single person attempting to dictate the precise language s/he wants, through edit warring, block evasion, and finally, making up a series of abusive usernames. This IP user's actions, as you can see in the talk threads I linked, were upsetting one of the better content-creators on this site. Ikan Kekek (talk) 23:45, 14 March 2016 (UTC)
I see I didn't link the talk pages: Talk:Central Coastal Oman, Talk:Hajar Mountains#Syntax. Ikan Kekek (talk) 23:47, 14 March 2016 (UTC)
I agree that edit warring is bad, but sometimes our actions contribute. In cases like these, where the editor's change is not plainly unacceptable, I prefer to switch to a slow revert mode before breaking out the block function and the protection tools. Powers (talk) 01:21, 17 March 2016 (UTC)
Did you see how many times this editor had warred before further action was taken? Would you have wasted weeks reverting? Days? This IP user was obviously willing to edit war forever. Ikan Kekek (talk) 01:57, 17 March 2016 (UTC)
No, that's precisely my point. The reason he/she was able to do it so often is because his/her edits were so quickly reverted. A more patient reversion process would have been less antagonistic and increased the chances of the user losing interest before an edit war developed. Powers (talk) 01:23, 18 March 2016 (UTC)
You're suggesting that the reverts should have stood for a day or so each time? I really don't think that would have worked, nor that people should be able to successfully edit war, instead of achieving a consensus behind edits that are controversial, no matter how relatively unimportant they may be. It's the principle of collaboration, not dictating things unilaterally, that's central to Wikis. Ikan Kekek (talk) 03:26, 18 March 2016 (UTC)
It's not the importance, it's the harmfulness. These were not blatantly harmful edits, merely ones that you disagreed with (legitimately). From a neutral perspective, the natural response to having one's edits repeatedly reverted is to repeatedly revert them back. That's an edit war, yes, but it takes two to have an edit war. It's more productive, in situations where the edit is not plainly harmful, to take a step back and let the user's edit stand for a bit rather than antagonizing the user by repeatedly and immediately reverting what seems like a legitimate change to that user. Powers (talk) 21:15, 19 March 2016 (UTC)

(unindent)Let me recap here. In these two edits, User:159.122.86.41 removed a gloss of the word wadi and the phrase "although technically". These are minor edits at best, which I agree did not improve the article, but neither were they actively harmful. User:StellarD then re-added the "although technically" wording with an explanation. A different IP user, User:209.172.52.136 then changed "technically" to "correctly" -- a perfectly valid edit. This was immediately met by User:Ikan Kekek reverting the change, accusing the IP user of "edit warring", sarcastically referring to "overcorrecting", and suggesting that the user "argue with OED on the talk page". Unless I'm missing a fine point in the chronology here, or if you had prior dealings with one or both IP addresses, this is a stunningly hostile reaction to what seem to me be to be perfectly normal edits. Note that this all occurs before the edit warring actually begins. I really hope you can help me understand what I'm missing here. Powers (talk) 21:24, 19 March 2016 (UTC)

If I may, it seems like Ikan's accusation of edit warring hinged on the assumption that User:159.122.86.41 and User:209.172.52.136 were the same user using different IP addresses. Given the fact that both of those edits were to the same word in the same article, occurred less than a day apart, and came with similarly snippy edit summaries - and especially given how the situation developed afterward - it's hard if not impossible to argue against the accuracy of that assumption. That being the case, the IP user was indeed edit warring. -- AndreCarrotflower (talk) 21:40, 19 March 2016 (UTC)
Thank you for explaining. And Powers, you're actually defending edit warring as a "natural response"? This is a Wiki. The natural response should be to discuss the desired edit and come to a consensus before redoing that edit, not to restore it over and over and then create a bunch of abusive screen names after the article is protected. Ikan Kekek (talk) 23:03, 19 March 2016 (UTC)
And by the way, yes, I do strongly believe I've dealt with this IP user before, as I've dealt with a dynamic IP user that uses identical edit summaries, edit wars, seldom posts to talk pages and then always refuses to sign their posts, and is always changing anything vaguely reminiscent of American English to a quasi-British English with typos, while also eliminating nice points of style. I usually grudgingly tolerate their edits, but whenever I push back, this user tends to immediately revert my edits. Ikan Kekek (talk) 23:38, 19 March 2016 (UTC)
As I was tagged here, I would like to add a couple of point to the discussion. I believe the anonymous editor on Hajar Mountains and Central Coastal Oman likely earlier edited Dhofar; please see Talk:Dhofar#October_to_May. It may also be this same individual who has been changing times in other Oman articles from 12-hour to 24-hour, albeit in a random fashion so that for example Muscat is now a mess with both formats in use. And now s/he is rewriting Omani history. –StellarD (talk) 10:06, 20 March 2016 (UTC)
My point is that there was no edit warring until after Ikan already accused the user of such. Unless, as I said, I've erred in my chronology somewhere, in which case I'd gladly accept correction. I would much prefer to be wrong about this. Powers (talk) 18:57, 22 March 2016 (UTC)
It's already been explained to you why you're wrong. Please reread this thread. I feel like you have a strong tendency to support problem users instead of fellow admins and constructive users, even to the extent of favoring them and making contortions like this in order to claim that a dynamic IP user wasn't edit warring until s/he happened to use the same IP a couple of times to edit war. There, I made it explicit. And I don't appreciate feeling undercut on that basis. Ikan Kekek (talk) 21:08, 22 March 2016 (UTC)
I'm trying to identify why you felt these users were a problem, but you're not cooperating. I laid out the timeline above; where did I go wrong? Powers (talk) 18:35, 25 March 2016 (UTC)
Sorry to jump in, but I think this thread is suggesting accusations of bad faith that are not helpful. Can we agree that: 1) this particular edit was a minor issue, and on its own not enough to justify an escalation, but 2) if Ikan or another trusted user says that there is a history that justifies escalation we should take them at their word unless there is specific reason for concern? We don't want to bite the newbies, but we also shouldn't be making life more difficult for respected users for exercising their best judgement when they say they've identified a problem. Assuming those two points are agreeable, can we let this thread rest and move on? -- Ryan • (talk) • 19:56, 25 March 2016 (UTC)
I'm afraid I don't agree with #2. There's no need to simply take anyone at their word when we have full edit histories available that can clearly document a pattern of abuse. At the moment, though, I'm not seeing it, and I've asked for help understanding what I'm missing. I am very concerned because since losing several contributors a couple of years ago we now seem to have taken the opposite stance, of complete intolerance for anything resembling contentious behavior. We have lost the patience that was once this community's hallmark. If Ikan had good reason to accuse the IPs of edit warring, I think he should be able to explain what that reason was. If there was no good reason, then we need to address how a baseless accusation can escalate a situation and lead to a block such as the one imposed here. Powers (talk) 18:24, 27 March 2016 (UTC)
I say good riddance to the "patience" you describe. Perhaps that type of naïveté was a luxury we could afford when we were a smaller community with a proportionately lower rate of vandalism. But things are different now that we've grown, and Peter and Jan's departure was in that sense an awakening to reality. The fact is that most people who come on to a wiki like ours and behave uncivilly are perfectly cognizant of what they are doing, and we admins are tasked with responding accordingly. The idea that incivility is a product of inexperience as an editor, and that we can train up vandals and trolls to be constructive contributors if only we are patient with them and keep appealing to their good sides, has proven itself time and again to be a lot of naïve piffle. Frankly, I think it's rather insulting to the majority of new editors who come to the site and contribute constructively, to categorize the good-faith newbie mistakes they might make in the beginning as even potentially equivalent to vandalism or trolling. Vandals and trolls, in the vast majority of cases, arrive at Wikivoyage with very different intentions than they do. -- AndreCarrotflower (talk) 18:57, 27 March 2016 (UTC)
Powers, the nature of the edit warring has been explained to you; you just aren't willing to understand the nature of a dynamic IP, it would seem. I don't feel like wasting time in further discussion about this because I can't explain it any better than it's already been explained. Ikan Kekek (talk) 05:39, 28 March 2016 (UTC)
No, I understand the dynamic IP. You identified the two IP addresses as the same person. I understand that. What I am asking for is to see where the edit war was at the time you made the edit comment that mentioned "edit warring". I do not see it.
As for naive piffle, the very issue we're discussing is how to distinguish vandals and trolls from good-faith newbies. It is dangerous and detrimental to jump to the conclusion of the former. It has nothing to do with reforming bad-faith editors and everything to do with avoiding false positives.
Powers (talk) 00:52, 29 March 2016 (UTC)

It's obvious that our tolerance levels have shifted, and I agree with AndreCarrotflower. I've seen the amount of contributors and time wasted over a handful of non-contributors who tie us in knots. Also, I've seen the work that Ikan Kekek has done patrolling this site over many years, with patience, advice and good nature - that he's earned the respect of the community to have a few calls made on instinct (I don't know if this was one of those cases or not). I agree Powers and [[Ryan respectively, that we need a discussion of how we now make our guidelines hit people who aren't here to make a travel guide quickly, but balance that against the false positives. And that we need to let this instance go, and work on clear policy going forward on the appropriate pages. --Inas (talk) 02:03, 29 March 2016 (UTC)

Basically agree with Inas here and support the really good work Ikan has done here over the years. It is fine to have a discussion around how we deal with scenarios such as this, but I really don't see why this particular example has to be labored so much. Andrewssi2 (talk) 02:56, 29 March 2016 (UTC)
For clarification, here are all the edits in question, by various anonymous IPs as well as by myself and administrators. I fail to see why this is not an edit war.
#1 (scroll down to line 130 to see the change), #2, #3, #4, #5, #6, #7, #8, #9, #10, #11, #12, #13, #14, #15, #16, #17, #18, #19, #20. Yes, the difference in wording is minor, but attempts to come to an agreement in a civil, rational manner failed.
There was a similar pattern with Central Coastal Oman, and with Dhofar. The edit style and tone of the anonymous IP on the talk page are I think suspiciously similar to those by a rather unpleasant character who has edited here in the past.
I do not understand why anyone here would tolerate this behavior, or question Ikan Kekek's judgement in handling this. –StellarD (talk) 09:19, 29 March 2016 (UTC)
Thank you for taking the time to thoroughly document this. Ikan Kekek (talk) 09:34, 29 March 2016 (UTC)
I am sorry, StellarD, but I think this reinforces my point. Ikan called accused the user of edit warring in your link #6. Links #1-5, though, do not constitute an edit war (even if we assume the IPs are the same user) because edits #3 and #5 involved apparently good-faith attempts to adjust the wording to be acceptable, rather than simply re-instating the same wording as in #1. The edit war that ensued *after* Ikan's accusation was of course unacceptable, but it's not edit warring to attempt to alter prose to find consensus wording. Powers (talk) 14:51, 29 March 2016 (UTC)
Does anyone agree with Powers' interpretation of the events? Ikan Kekek (talk) 01:40, 30 March 2016 (UTC)
All due respect, I'm trying and failing to follow his logic, let alone agree with him. -- AndreCarrotflower (talk) 02:36, 30 March 2016 (UTC)
Could you explain where I've been unclear? The editor in question made three different edits to the article in question before being accused of edit warring. Making different edits is not edit warring. Powers (talk) 00:30, 31 March 2016 (UTC)

Our old friend User:Turbo8000[edit]

Hello, Wikivoyagers. Not sure if the community is aware of this, or if you even need to be, but it seems that (the now globally-locked) Turbo8000 has been identified by Dutch Wikipedia as one of hundreds of sockpuppets used by the same vandal to cause trouble across various Wikis since 2012. I don't suppose this changes anything really, the guy is still indefblocked here, just that it may help everyone to know how extremely persistent this individual is in their disruptive and malicious behaviour, and that it's fairly likely they will resurface on Wikivoyage under a different name at some point in the future. Apologies if this information is either in the wrong place or not useful / appropriate. Thanks, good evening --ThunderingTyphoons! (talk) 00:12, 21 March 2016 (UTC)

Thanks for the heads-up, TT. I'll be sure to keep an eye out, and I'm sure others will too. -- AndreCarrotflower (talk) 01:14, 21 March 2016 (UTC)
He has indeed been busy, and the reaction from each WV community has been the same. We were right to try and help him down the collaborative path, and even take every effort to do so. Wikis are not for everyone I guess. --Andrewssi2 (talk) 21:47, 22 March 2016 (UTC)
Based on what we knew (or rather didn't know) at the time, I agree completely. --ThunderingTyphoons! (talk) 23:34, 22 March 2016 (UTC)

Baghdad[edit]

Over the last couple of days different IPs have vandalized the Baghdad article. Should the article be protected? ϒpsilon (talk) 11:05, 10 April 2016 (UTC)

Various commercial spambots[edit]

See block log. But they keep creating more; see user creation log. In all likelihood, all the users created on Sept. 21 are spambots, and User:Toplistproductcom clearly is because User:Toplistpro was, and I'd like to block it preemptively. Any ideas on how to filter them out before they have to all be blocked manually, with their edits rolled back? Ikan Kekek (talk) 07:23, 21 September 2016 (UTC)

Looking at Recent changes, I think anything containing "Top list", "top 10" and what have you, ought to be blacklisted for some time. And sooner rather than later. ϒpsilon (talk) 08:35, 21 September 2016 (UTC)
This problem seems to have died down at the moment, I think, but let's keep on the lookout for it. Ikan Kekek (talk) 08:11, 22 September 2016 (UTC)

Dubai edits[edit]

Two accounts have today added listings in Dubai articles that look like normal touting, except for the fact that the listing "content" field is the typical "what a well-written blog" text that spambots generally add. It seems highly unlikely that any real world user would add that sort of content, but until it's clear what's going on then it's worthwhile keeping an eye on any edits to Dubai, or any other article where the listing content field appears to be spambot generated. See Special:Contributions/Radissonblu123 and Special:Contributions/Jadisinteriors for the accounts I've reverted so far. -- Ryan • (talk) • 19:14, 3 October 2016 (UTC)

3 obviously dynamic IPs (User:2a02:ab88:33c2:bf00:7de3:3637:1e4e:8925, User:2a02:ab88:33c2:bf00:1584:f170:acb7:5bcb, User:2a02:ab88:33c2:bf00:b035:2bdd:851f:3f73) and User:-Sombrero19- in the Debrecen article[edit]

See revision history for the edit warring over an unexplained deletion of a listing. Also see the thread at Wikivoyage talk:How to handle unwanted edits#Edit warring in the Debrecen article. I will block the one non-IP address, but we need a range block to deal with vandalistic edit warring by dynamic IPs. Please help. Ikan Kekek (talk) 08:15, 13 April 2017 (UTC)

Since User:-Sombrero19- was previously blocked for 1 week for vandalism, I have blocked that account and the IP addresses for 2 weeks, but I fully expect another dynamic IP to continue the edit warring. Ikan Kekek (talk) 08:20, 13 April 2017 (UTC)
Because of the way IPv6 works, it is common for providers to issue a huge /64 - sized block to individual end users, which then use it to assign individual addresses to every machine on a LAN - maybe even using the lower 64 bits to hold the entire serial number of each PC's network card. Yes, a /64 is sixteen billion billion addresses; such is the absurdity of IPv6 and 128-bits of address. Most blocks therefore will be range blocks, so 2a02:ab88:33c2:bf00::0/64 is likely to be one end user's local area network and a valid range for a range block. K7L (talk) 02:21, 14 April 2017 (UTC)
Ultimately we are blocking that whole (Hungarian) ISP in question. About as targeted as it can get.. --Andrewssi2 (talk) 03:43, 14 April 2017 (UTC)
After another instance of the vandalism, I semi-protected the article for a month. Hopefully this clears things up. -- AndreCarrotflower (talk) 17:38, 15 April 2017 (UTC)
Strange, the filter should have caught that. Adjusted and hopefully catch next time. Andrewssi2 (talk) 22:48, 15 April 2017 (UTC)
The new vandalism was done by an ordinary IPv4 address, but with the same pattern of unexplained deletion. The more IP addresses the user reveals himself to have at his disposal, the more it becomes the simpler solution to protect the article rather than block the user, especially if the user is only targeting the one article. -- AndreCarrotflower (talk) 00:35, 16 April 2017 (UTC)

Another head of the Telstra?[edit]

have a look Hobbitschuster (talk) 19:09, 22 April 2017 (UTC)

Yes, it is. --ThunderingTyphoons! (talk) 19:22, 22 April 2017 (UTC)

IP 41[edit]

Some "funny" person apparently in Gaborone has been writing weird stuff in our policy articles for three days in a row now, see Special:Contributions/41.77.91.200, Special:Contributions/41.138.78.51 and Special:Contributions/41.223.143.173. ϒpsilon (talk) 16:46, 12 October 2017 (UTC)

Rosaann1[edit]

This user has twice written what appear to be genuine answers to questions posed at the tourist office, but which contain links to spam websites unrelated to the topic. I'm not entirely sure what to make of this user, but have reverted their contributions for safe measure. Would others mind taking a quick look at the edits to make sure they are what I suspect? Thanks, --ThunderingTyphoons! (talk) 10:42, 20 October 2017 (UTC)

Yes Done. We block spambots indefinitely, and while this account clearly represents a real live person rather than a bot, given the nature of the contribution history I see no reason to treat him or her differently. -- AndreCarrotflower (talk) 17:18, 20 October 2017 (UTC)

User:(WT-en) Budget tours speedy delete[edit]

Can I get a speedy delete for User:(WT-en) Budget tours please? This ten-year old userspace spam page was imported from Wikitravel; I can't tag it as the page is protected. MER-C (talk) 12:41, 22 October 2017 (UTC)

IP vandalism: 69.178.195.4[edit]

69.178.195.4 is replacing article text with offensive language. Please block as soon as possible. —Granger (talk · contribs) 01:14, 25 October 2017 (UTC)

@AndreCarrotflower: Thank you. Could you also revision-delete the edit at Lakes and Gardens please? —Granger (talk · contribs) 01:45, 25 October 2017 (UTC)
Yes Done -- AndreCarrotflower (talk) 01:49, 25 October 2017 (UTC)

Advertising spam[edit]

Whiteleaf30 – please block and delete the pages they've created. —Granger (talk · contribs) 14:21, 27 October 2017 (UTC)

User:Yuhbruh000 vandalism[edit]

Ongoing vandalism-only account. Suggest indef block. OhanaUnitedTalk page 17:39, 4 February 2018 (UTC)

Have blocked indef --Traveler100 (talk) 17:47, 4 February 2018 (UTC)
Back with user:173.76.255.83, have block a month as is IP address. --Traveler100 (talk) 18:22, 4 February 2018 (UTC)
Blocked 107.242.113.7 for similar vandalism, as well as 2605:6000:8D47:5800:FD73:E71:9357:77FB, an anonymous concern troll with no previous edits who popped up seconds later on the article's talk page to report the previous user's vandalism. Please be on the lookout for more sophisticated tactics than usual. -- AndreCarrotflower (talk) 19:06, 4 February 2018 (UTC)

User page "experimentation" by IP editor(s)[edit]

This is a bit pecular: an IP editor is editing user pages/talk pages with nonsense. My initial assumption is that they are experimenting and don't know any better. These are the edits in question: [1] by 106.192.58.166 and [2] by 106.192.66.250 . Since they are creating a new page, I don't have a handy revert button to remove these / not sure how to handle it. It's two different IPs doing this, but maybe it's the same person? I'm new to this, excuse my lack of expertise. DethDestroyerOfWords (talk) 16:24, 20 February 2018 (UTC)

The first edit was made to the IP's own talk page, so I wouldn't worry too much about that. The second was an act of vandalism of another user's page which I have deleted. Since this has as far as I can see only happened twice, and there's no evidence to suggest the same person was behind both edits, there's not really any harm done. But we can all look out for similar edits in the future, so thanks for bringing it to light. --ThunderingTyphoons! (talk) 17:11, 20 February 2018 (UTC)

Page deletion/redirect[edit]

Two new pages were created, one is filled with garbage for a place I don't think exists Broome,_WA. The other is a misspelling/alternate spelling of an article that already exists Ulanbaatar (should be Ulaanbaatar). The Broom, WA one is vandalism. I put a speedy deletion tag on both of them, but is that the proper protocol? DethDestroyerOfWords (talk) 22:23, 22 February 2018 (UTC)

w:Broome, Western Australia exists. Both pages could be redirected. Pashley (talk) 20:40, 2 March 2018 (UTC)
At the time, the page's content said Broome, Washington. I searched for that and couldn't find it, hence my mistake at thinking it didn't exist. DethDestroyerOfWords (talk) 21:45, 2 March 2018 (UTC)

User:AnusRectumAnusAnusRectum vandalism[edit]

Vandalism at the pub. —Granger (talk · contribs) 19:13, 2 March 2018 (UTC)

Blocked. Ikan Kekek (talk) 19:16, 2 March 2018 (UTC)

User:Bedbroker and User: 80.27.243.222[edit]

Blocked as adding large number of hotels with links to websites that are not the official websites of the respective hotels. --Traveler100 (talk) 19:07, 13 March 2018 (UTC)

User:Vāndalism Therapy[edit]

Cross-wiki vandal. Pi.1415926535 (talk) 21:14, 16 March 2018 (UTC)

Massive IP vandalism in the Khon Kaen article[edit]

Some disturbed individual has been running amok on the Khon Kaen for quite a while now, see Special:Contributions/128.227.146.146 and ‎Special:Contributions/128.227.14.241. ϒpsilon (talk) 18:36, 1 April 2018 (UTC)

Possible sock puppet[edit]

Not sure about the content of Crespina. Suspect Előszállás and Sherwood Content same author when look at users KittyHawk5885 Freeman1973 Larko3424 Lorrikot354, although content appears to be correct is not of much use. --Traveler100 (talk) 21:51, 7 April 2018 (UTC)

Looks like Telstra's back at it. -- AndreCarrotflower (talk) 23:48, 7 April 2018 (UTC)
If it is Telstra (any way of verifying that?), the modus operandi is slightly more sophisticated, as before they always seemed to use similar usernames, 'The Great Traveller', or something along those lines. --ThunderingTyphoons! (talk) 08:17, 8 April 2018 (UTC)
Maybe also Shipka: users Avidster11 , Tettar242
Brisbane IP
I posted messages to those 2 usernames' user talk pages. Ikan Kekek (talk) 09:04, 8 April 2018 (UTC)
Gladenbach user AmirsDraw040 --Traveler100 (talk) 16:20, 13 April 2018 (UTC)
I'm not so sure about that one. The user could have added more, but there is at least a proper template, including the bottom of the page stuff, and one see, eat and sleep listing with contact info; if that user or anyone else adds 'Get in', then you've got a usable article. --ThunderingTyphoons! (talk) 17:03, 13 April 2018 (UTC)

"Wheels" vandal[edit]

Over the last few weeks a vandal keeps coming on with different accounts, but they're all the same person because they always use the same wording. His edits keep getting reverted, of course, and he keeps getting blocked, but then he comes back with a different account. What can we do to stop this? Also, he'll always replace a piece of text with "North Korea is good" or "Taiwan should be in China" or "Putin is good", or something with "wheels" in it, so if you see these things, you'll know who the vandal is. I know he's been using the usernames "Taiwan belongs to the People's Republic of China (on WheeIs)", "Russia War Alliance", and probably "North Korea is best Korea on tyres". A little while ago, he even messed up my talk page.

Sorry, I did a faux pas on the last one by commenting in the edit summary. I won't do this in future. Selfie City (talk) 20:44, 8 June 2018 (UTC)

The same sort of vandalism has popped up every now and then over the last years, it may or may not be by the same user. "(Willy) on wheels" is a form of vandalism that has existed on Wikipedia for more than a decade. Here and here are news articles from 2007 (yes) about wikis getting vandalized mentioning this particular vandal(ism) and if you're bored you can google "willy on wheels vandal".
In short; some kind of filter could be useful. ϒpsilon (talk) 21:09, 8 June 2018 (UTC)
Yes, what we perhaps need to do is reject any username that signs up with the words "on wheels" in it and perhaps we should lock the articles North Korea, China, Taiwan, and the United States - things he's likely to edit and he has done so in the past. Selfie City (talk) 21:23, 8 June 2018 (UTC)
fuerdai could also be autoblocked, I suppose. Ikan Kekek (talk) 04:12, 9 June 2018 (UTC)
Also, what if there was a system on Wikivoyage that automatically reverted all of someone's edits if they were blocked? This would help when it comes to reverting edits. Selfie City (talk) 04:42, 9 June 2018 (UTC)
There is no such function, though there are some useful, though much less all-encompassing tools admins can use. Ikan Kekek (talk) 08:19, 9 June 2018 (UTC)

Possible sockpuppets[edit]

I didn't really notice this until after I sent a "Welcome to Wikivoyage" letter to one of the possible sockpuppets, but here they are: around 12:00 on June 9th, four users signed up, all with doubled letters in their name and numbers (usually two) at the end. This seems rather suspicious - check out the users Tennock580, JimTurrell48, JohnRyllock48, and Tyrrock58. Selfie City (talk) 14:11, 9 June 2018 (UTC)

That's the Telstra vandal, who we've been following for some time. See Wikivoyage:User ban nominations/Archive#Telstra vandal, Wikivoyage:User ban nominations/Archive#BrendanJohnWilliams2004, Wikivoyage:User ban nominations/Archive#Brendan John Williams, and probably other threads for a detailed chronology of his activities. -- AndreCarrotflower (talk) 14:41, 9 June 2018 (UTC)
There are spambots which bulk-create accounts with that pattern; any MediaWiki installation without a strong CAPTCHA tends to be infested with them. Without looking at the contributions, I'd be hard-pressed to say whether they match the Telstra pattern. K7L (talk) 23:29, 9 June 2018 (UTC)
What I don't understand, though, is why adding a few words (like this) is vandalism. Selfie City (talk) 14:37, 17 June 2018 (UTC)
Because it's a typical Telstra edit, copied without real understanding from some unacknowledged source. Ikan Kekek (talk) 23:07, 17 June 2018 (UTC)
I can see now how those kinds of actions, when continued over a period of time without actually communicating with anyone else on WV, is like vandalism. I'm watching for Telstra now. Selfie City (talk) 19:50, 23 June 2018 (UTC)

Telstra vandalism?[edit]

Yea or nay? The editing pattern is suspicious, as is the page - Raqqa, yes that Raqqa - they have created. If "yea", are they all Telstra? What about 'Libertarianmoderate', who has a proper user page and even engages in discussions? I'm not sure about this one, so would appreciate second and third opinions. --ThunderingTyphoons! (talk) 12:34, 17 June 2018 (UTC)

As you can see in the comment above, I don't really understand the Telstra vandal thing, but the Libertarianmoderate seems to be okaysee discussion below: except for that user's political reference, that is, which it's best to stay out of.Selfie City (talk) 14:40, 17 June 2018 (UTC)
Having received messages from Libertarianmoderate, I don't think s/he is a vandal, just a new user who's not very familiar with our site, but who seems willing and ready to work collaboratively.
I am still suspicious about the other users who edited Raqqa soon after Libertarianmoderate was done.
@SelfieCity: As far as I know, we have no prohibitions on sharing one's political views on Wikivoyage, as long as said views don't hinder the creation of good content. --ThunderingTyphoons! (talk) 17:30, 17 June 2018 (UTC)
Yeah, I thinking more of articles. Selfie City (talk) 23:04, 17 June 2018 (UTC)

WT "Satan" vandalism[edit]

User:Libertarianmoderate created a page called The Great Satan and redirected it to WT. I blanked the redirect text, but I can't delete the page and need an admin for this. Considering the discussion in the pub a little while ago, this is really serious. This guy needs to be blocked, really. Selfie City (talk) 20:39, 21 June 2018 (UTC)

Anything you can do, Ibaman? Selfie City (talk) 20:41, 21 June 2018 (UTC)
User:Ibaman I'm deeply concerned by your decision to unilaterally indefban this user. Why didn't you impose a short ban to prevent any further vandalism, then go to WV:User ban nominations and put this issue to the community? I understand he has vandalised the project, but he has also contributed positively, shown willing to understand our policies and work with others. Furthermore, he has written an apology on his user talk page for his actions. It is my view that an indefinite ban is a disproportionate response to what I understand is a single act of vandalism from a user who has showed promise. At the very least this should be discussed further at WV:User ban nominations. ThunderingTyphoons! (talk) 23:58, 21 June 2018 (UTC)
First, ThunderingTyphoons!, thanks for your response, but this is not a one-time thing he's done. He also created some issues on the extremely important and carefully-written page Wikivoyage:Wikivoyage and Wikitravel and has been doing many reorganizations and region article creations without asking the community first. So far, he's been more of a problem for the community than a help, and has before gotten angry at people, including you; also, he made the apology after he was blocked. I think it's sometimes better to block these people, although I think indefinite limit to the time block was quite strong.
Also, I believe the way Ibaman operates on bans is that he bans indefinitely and sees if the user will come back and apologize. I don't think this is a great solution and I think it might discourage more people than encourage them to contribute more wisely, but that's the way he does it. Selfie City (talk) 00:11, 22 June 2018 (UTC)
But whether that is the way Ibaman does it or not is not the point. We have policies that set out how to approach these issues in a methodical, consistent and fair way and "permabanning in a bid to force an apology" is not one of them!
This, which I was not aware of before, looks like a joke, albeit one in poor taste.
I am not aware of any anger towards me; in our few discussions, he has been polite. If there are instances of anger directed at others, then these should be brought to light at, and I'll repeat myself again, WV:User ban nominations. ThunderingTyphoons! (talk) 00:23, 22 June 2018 (UTC)
  • I'm sorry to have my hands full in the moment but as soon as I can I'll join the discussion. Ibaman (talk) 00:35, 22 June 2018 (UTC)
No problem. I need to go to bed anyhow :-) ThunderingTyphoons! (talk) 00:44, 22 June 2018 (UTC)
I must say "indefban and hope they apologize" doesn't seem like the right way to me. At least in this case the user does know what they are being punished for (any punishment should be dealt out with a clear reason given). I think we can afford to give this user enough rope to hang himself with. Hobbitschuster (talk) 01:33, 22 June 2018 (UTC)

I think that for someone who has shown intent to be a constructive contributor, an indefinite ban on a first offence is extreme, even for vandalism. Escalating blocks are more appropriate. For vandalism-only accounts, a permanent ban is a reasonable use of our limited resources, and I'm quite sure that I've never seen someone who starts off as a vandal be turned into a constructive contributor through patience and forgiveness. Ground Zero (talk) 03:56, 22 June 2018 (UTC)

Copied from User talk:Ibaman: On the face of it, if he's apologized, he shouldn't be permanently banned, but we need to watch him very closely, and if he ever does something like this again, he should face a long ban of at least a month, as this is a more serious offense than touting/edit warring on a single page. Ikan Kekek (talk) 04:25, 22 June 2018 (UTC)
Added here: Thank you, Ibaman, for dealing with this. We can shorten a block, but it was important for someone to act. Ikan Kekek (talk) 04:28, 22 June 2018 (UTC)
I agree: action was necessary, and thanks to Ibaman for taking care of this. I propose that we reduce this to a three-day block, and escalate if the problem recurs. Ground Zero (talk) 04:31, 22 June 2018 (UTC)
Even though I deleted some of Libertarianmoderate entries and suggest merging of others I am tempted to assume good intent here and unblock the user. However does my memory serve me right that we have had Chicago contributors in the past discussing anger issues? Also generally I think we need to think how to differentiate between vandalism and disruptive editing. --Traveler100 (talk) 06:05, 22 June 2018 (UTC)
A three-day block seems appropriate, with escalation to at least two weeks if there are any further problems. We also need to make it clear that having anger issues is no excuse for behaving inappropriately. We can and should forgive mistakes, but we must have no tolerance towards intentional abuse directed at other users.
For the sake of transparency, I will just add that I found out about this because the user emailed me last night, clearly upset and surprised. I know what he's done is serious, but I also think he knows that too, and is remorseful. I am hopeful that this will mean good conduct from now on. ThunderingTyphoons! (talk) 07:16, 22 June 2018 (UTC)

────────────────────────────────────────────────────────────────────────────────────────────────────Looks like we might have an attempt at block evasion here: according to the user creation log, a new account for User:LibMod was created at 17:30 UST, 23 June 2018, only a day and a half into what's supposed to be a three-day block for User:Libertarianmoderate. -- AndreCarrotflower (talk) 18:20, 23 June 2018 (UTC)

Could be a coincidence, but I have a bad feeling it's not. I wonder if this guy is a real vandal pretending to be someone else. Plus, the fact he personally emailed an administrator is odd and almost seems like a threat. Selfie City (talk) 19:13, 23 June 2018 (UTC)

Telstra[edit]

What do you think of this user? How would a new user know about formatting on their first edit, anyway? And username (numbers are warning sign) is suspicious. Selfie City (talk) 21:47, 21 June 2018 (UTC)

It's a warning sign, indeed. But the user hasn't done anything wrong, and if it is Telstra, that account will never be used again. Good spot, ThunderingTyphoons! (talk) 20:51, 22 June 2018 (UTC)
Editing articles from Illinois (like many edits of our new friend LM discussed above), Afghanistan (also LM) and Australia (at one point, incarnations of Telstra concentrated on Australian articles, where they come from). Just saying. ϒpsilon (talk) 19:18, 23 June 2018 (UTC)
Australia. Interesting. Selfie City (talk) 19:21, 23 June 2018 (UTC)
And Illinois and Afghanistan. Could this be the bridge between LM and Telstra? Or are we looking at this too closely? Selfie City (talk) 19:36, 23 June 2018 (UTC)
It doesn't seem like Telstra because LM responds to comments and says things, unlike Telstra. I don't want to condemn anyone, but it is suspicious. Selfie City (talk) 19:38, 23 June 2018 (UTC)

I've now been looking at some edit history. The article in Afghanistan that Jendick447 edited (Helmand Province) had also been edited by LM a couple hours earlier. Jendick447's edit to the Helmand Province article was changing the ispartof from Afghanistan to South Afghanistan. Just an hour or two before Jendick447 linked Helmand Province to South Afghanistan, LM made this edit, which mentioned Helmand Province. So it seems that LM mentioned Helmand Province in South Afghanistan, and only a couple hours later Jendick447 was mentioning South Afghanistan in the Helmand Province article. That's starting to convince me that these two might really be the same person. Has Telstra struck again? Selfie City (talk) 19:45, 23 June 2018 (UTC)

And more evidence. JenDick447 make some fairly substantial contributions to Lashkargah (and JenDick447's contributions by the way mentioned Helmand Province). Lashkargah was created by — guess who? LM. Selfie City (talk) 19:56, 23 June 2018 (UTC)
Also, WikiWrecker321 edited Raqqa and LM's userpage. Could LM and WikiWrecker be the same person pretending to be different people? This could be much bigger than we imagined. Selfie City (talk) 20:00, 23 June 2018 (UTC)
Could also be good old pcv who is back, haven't seen that one in a while. They also sometimes use numbers in their user names, and their last incarnation said stuff about reporting administrators to the authorities and believed one admin wanted them to commit suicide. ϒpsilon (talk) 20:03, 23 June 2018 (UTC)
Devoting attention to idle speculation about grand conspiracies, and wondering whether vandalistic accounts are connected or in cahoots with each other, only encourages more vandalism. Vandals want recognition. We can deny them that recognition, assume the accounts are unrelated, and act accordingly on problematic behavior and achieve the same result. -- AndreCarrotflower (talk) 20:09, 23 June 2018 (UTC)
Yes, but I think we can take action now—we've discovered that both LM and Jendick447 have both edited Helmand Province (Afghanistan) and Midlothian (Illinois). I'd say we should consider some action which would deal with LM. No more need to speculate now; I've looked through and the connections are obvious. And the connections are important—sockpuppeting is an offense, and these are clearly sockpuppets. Selfie City (talk) 20:15, 23 June 2018 (UTC)
So the Telstra just picked up on an ongoing edit issue, do not read to much into this. If Telstra make a good edit just ignore it. If vandalism simple undo. Do not go to deep into this unless you are willing to spend and possible waist a lot of time.--Traveler100 (talk) 20:25, 23 June 2018 (UTC)
Traveler100, AndreCarrotflower: your suggestions would be fine, except that LM, one of the sockpuppets, has been making a lot of contributions to the site, interacted with others, etc. Ibaman, as you know, was quickly reprimanded for indefintely blocking LM and LM's block was reduced. But if he's a sockpuppet and possibly a vandal, let's go for indefban. Selfie City (talk) 20:29, 23 June 2018 (UTC)
it is not the same person. Do not let these minor things get to you. An undo is only a click away. --Traveler100 (talk) 20:36, 23 June 2018 (UTC)

────────────────────────────────────────────────────────────────────────────────────────────────────Really? So 2/30,000 odds occurred? Both editing the same pages? Not the same person? I find that hard to believe. Selfie City (talk) 20:39, 23 June 2018 (UTC)

@SelfieCity: Please do not start assuming other new users are the same person. Do not jump to conclusions. Recommend you back off before you end up being collateral damage.. --Traveler100 (talk) 20:42, 23 June 2018 (UTC)
All right. Selfie City (talk) 20:44, 23 June 2018 (UTC)
I'm looking through it again, and I think you're right actually. Jendick447 were quite possibly just looking through recent changes and happened to make edits to pages related to LM. Selfie City (talk) 20:51, 23 June 2018 (UTC)
Sorry for assuming without thinking over enough. Selfie City (talk) 20:58, 23 June 2018 (UTC)
No problem, just do not want you wasting your time. --Traveler100 (talk) 21:05, 23 June 2018 (UTC)
Thanks. Selfie City (talk) 22:42, 23 June 2018 (UTC)