Wikipedia

Wikipedia:Requests for investigation

This is an old revision of this page, as edited by Zoe (talk | contribs) at 01:55, 15 December 2002. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

The purpose of this page is to provide instant notice of vandalism taking place. You can use the format under the Current Alerts heading: IP address, pages touched, damage done. If you don't want to call attention to your report, be sure to check the box marked "this is a minor edit" (so it won't show up in most users' recent changes).

For a list of currently blocked IPs and the reason why they were blocked, visit: Special:Ipblocklist.

If you would like to look up information about the vandal's IP please visit http://network-tools.com/ and enter in the IP.

However, please do not label isolated instances of text deletions, replacements or odd additions as VANDALISM unless they are overtly lewd or offensive. More often than not, this is just a visitor to the site experimenting with how to use it -- labeling them as a VANDAL is a sure way of ensuring they will not become contributors. Only add alerts to this page of true VANDALISM such as a systematic attack on several articles. Above all, please be polite at first and give the person the benefit of the doubt until they prove they deserve otherwise.

If you disagree with someone's edits, your complaint might get more mileage at Wikipedia:Edit wars in progress.

More tips at Wikipedia:Dealing with vandalism

Current alerts

  • An address beginning with 205.188.209 has vandalized the Hilary Duff article and continues to make unwelcome additions to an empty article titled Haylie Duff -- Zoe 00:37 Dec 15, 2002 (UTC)
  • he seemed to have added some information to Hilary Duff. Maybe he's a newbie?
  • Even after that, he still was adding crude comments ot articles about young female singers. -- Zoe

142.22.16.54 - vandalized multiple articles. 8.99.163.198 and 68.13.202.70 appear to be the same person; vandaliszed two articles.

I'll watch these IPs for a while and autorevert any edits they make. If you see an edit by them in Recenet Changes and I'm still around, just let me take care of it and don't worry about it. --mav 21:28 Dec 13, 2002 (UTC)
  • 80.116.222.134 is creating or modifying several articles in which the existence of God is being represented as a given. It's as if he or she is writing a religious encyclopedia without any NPOV. -- Zoe 22:48 Dec 11, 2002 (UTC)

64.172.143.62 has already vandalised Current Events and Bug Reports. Dhum Dhum 19:43 Dec 9, 2002 (UTC)

64.175.251.61 is vandalising all of the future year pages with a bogus anniversary. -- Zoe 03:08 Dec 8, 2002 (UTC)

  • 213.138.109.254 is vandalising page after page. Please block IP immediately.
I'm monitoring the situation. I'll continue to revert the vandals edits and they we propably get tired and go away. --mav 22:44 Dec 5, 2002 (UTC)
You have a soft heart. Why not just ban the IP? --Dante Alighieri 22:46 Dec 5, 2002 (UTC)
No reason to start an arms race. --mav
  • lots more nonsense from this one, time to stop them??
    • blocked by Ed Poor 23:46 Dec 3, 2002 (UTC)
please stop this idiot, they are getting more prolific
  • Somebody's been putting garbage pages with random character string names into the meta, Esperanto, and German wikis via the IPs 140.134.6.2 and 217.34.194.49. (Both IPs presently blocked on those three wikis.) They may be open proxies, so if somebody could keep an eye out for this loser on other wikis or with different IPs, that'd be nice.
    • Not an open proxy by my test. Not listed on any open proxy list known to Osirusoft. -phma
    • Could somebody please finish reverting the latest at meta and keep an eye on the French wiki? I have to go to class and can't stick around... --Brion 21:43 Dec 2, 2002 (UTC)

done on meta. Could somebody check from time to time the french wiki, I am sleepy...and there nobody left... user anthere

  • 66.21.84.150 seems to have a little bit of a pb with Greece. Keep changing the capital : Istambul.

194.117.133.196 and 194.117.133.198

Most recent appearance

  • To the one who just edited my entry below: could you please make a new entry when you want to add a point, instead of modifying other people's entries? The situation is confusing enough. No need to add more confusion at this point. olivier 12:59 Nov 16, 2002 (UTC)
    • Attributions now straightened out. -- Toby 23:55 Nov 16, 2002 (UTC)
  • IP address of the vandal is probaly 194.117.133.196. -- Olivier
    • that is a web cache, which is used by blueyonder isp users. I am not a vandal but is using this webcahce, which has unfortunatley been abused. -- 194.117.133.196
Well it seems like it's a "NetApp F360 or 760 Filer" or something equivalent, and has a whole swag of ports open including http proxy ports. What's the bet the guy isn't even with that ISP. Anyway anyone a bit more official than me want to send a polite email to whoever runs cableinet.co.uk? -- v
The vandal might not even be using that web cache at all, he may be using another proxy and 194.117.133.196 was assumed because of the vandal history. Most internet users use transparent web caches, and a majority of edits of the wikipedia will come from them, IP based blocking dosent work, we need a more intelligent anti vandal system. Any way he seemed to of stopped now so maybe we should just restore the pages and increase security. EG all images must be approved before allowing to be inserted in to pages or only one page edit allowed in a certain time frame -- 194.117.133.196
For what it's worth, the comment above was inserted by a user at the offending IP (which is my default cache, too). If someone with official clout wants to make a complaint, mailto:[email protected] should be your first port of call. --rbrwr
For the edit history from this IP address (excluding registered and pseudo-registered users), see: 194.117.133.196. olivier 13:25 Nov 16, 2002 (UTC)
This ip has had many valid articles in the wikipedia, but with webcaches being as they are, it would probably be hard to track down the vandal, who might not of even used this ip, Also, there are two caches, 194.117.133.196 and 194.117.133.198, which the user goes through at random, so that complicates things more. -- Lux
It looks to me like the vast majority of the contributions from this IP has been vandalism. olivier 13:58 Nov 16, 2002 (UTC)
It looks that way to you because the vast majority of dits from that IP have been made while logged in and so don't show up on the user contributions. See http://www.wikipedia.org/w/wiki.phtml?title=Special:Contributions&target=Hotlorp for the contributions of a regular user that apparently also is assigned that IP. -- Toby 23:55 Nov 16, 2002 (UTC)
That's the reason why I had added in my above comment: "from this IP address (excluding registered and pseudo-registered users)". olivier 03:34 Nov 18, 2002 (UTC)
The time frame thing won't be liked by people who run bots... Pro'ly would mean that bots would have to be vetted. And it would be pretty hard to tell the difference between a proxy used by a lot of people, and a bot. The most common system I know of it something along the lines of not allowing another try for x number of seconds with the number of seconds increasing for each failed attempt. -- v
What's the IP address of the vandalbot, so that we can complain to his ISP? Modemac
  • The Goatse vandal, who should probably seek professional mental counseling, is also acting as Sciplus (not registered). olivier 12:17 Nov 16, 2002 (UTC)
  • The Goatse weirdo is also known as: Edd Poor and Oopopop (not registered). (A total of approximately 30 pages vandalized) olivier 12:09 Nov 16, 2002 (UTC)
  • !!!!Goatse vandal!!!! - has inserted the infamous pic on 14 pages thus far. Identified as Sdfg, athough not registered. Can someone ban the guy? olivier 11:55 Nov 16, 2002 (UTC)

Past appearances

  • 194.117.133.198 - goatse in Marble.
    • banned --Ed Poor 19:20 Nov 6, 2002 (UTC)
    • Tarquin reverted Marble. --Ed Poor 19:23 Nov 6, 2002 (UTC)
    • sounds like 194.117.133.196, the goatse fiend is back -- see below. -- Tarquin
    • another ISP proxy cache, at the same location as the one below. --rbrwr 19:29 Nov 6, 2002 (UTC)
  • 194.117.133.196 is a goatse fiend-vandalizing numerous census entries.Must think we won't notice them there or something. Somebody block him he has been doing this for awhile.
    • IP blocked. --KQ 19:02 Nov 3, 2002 (UTC)
    • same user also has been coming from 194.117.133.198 IP blocked --mav
      • This IP (194.117.133.196) used to be a useful contributor--check out the contributions on and before Oct 25 2002. Maybe on a public computer? --KQ 19:11 Nov 3, 2002 (UTC)
      • 194.117.133.198 appears to be the same - see Gore Vidal, for example. --Camembert 19:18 Nov 3, 2002 (UTC)
      • Perhaps it's just a strategy to get whitelisted so that he can do more damage later -- RobLa
      • Web cache for a cable ISP in the UK. (cache-haw.cableinet.co.uk, cache-haw2.cableinet.co.uk) --Brion 19:23 Nov 3, 2002 (UTC)
      • Same IP address was blocked on Oct 26 (see below). I've changed my proxy, so I'm not affected, but it may cause problems for otehr people. --rbrwr 20:00 Nov 3, 2002 (UTC)
      • This IP is now (Nov 6) back, creating junk entries. Not banned yet, but keep an eye out. --Scipius 18:32 Nov 6, 2002 (UTC)
      • Reply from the vandal said: Blocking via IP address dosent work, it just affects legitmate users and vandals just get another IP from somewhere else -- 194.117.133.198 -- but note that the actual IP this was posted from was 194.117.133.196.
      • OK, that's it: 194.117.133.196 is now deliberately generating junk articles and playing with us. (see the entry with title beginning WikiWikiWiki... IP ban requested.
          • ban me then, ill just go get another ip.
            • Consider it done. --KQ 19:14 Nov 6, 2002 (UTC)
I have reviewed all of the edits made by this IP. All but the most recent are perfectly valid and improved articles. This may be an IP of a library/school or other shared computer. We therefore may have to lift the ban soon. --mav
194.117.133.196 is a transparent proxy cache belonging to my ISP. I was being affected by the block, but I've managed to sidestep it. --rbrwr
194.117.133.196 cache-haw.cableinet.co.uk, this is a web cache for telewest blueyonder isp users, Im being affected by it as well. --User:Nosrail
  • 194.117.133.198 has vandalized about 50 articles. We need to block him NOW -- GABaker
  • This is cache-haw2.cableinet.co.uk. Someone using the IP made a legitimate edit to Gore Vidal. -phma

Expired alerts

Please move items down from "current alerts" after they are no longer an issue. Like, a day or two after a drive-by.

  • 207.253.250.242 wiped my talk page Lir 02:37 Nov 16, 2002 (UTC)
  • 217.127.248.37 vandalism my posts on jacobgreenbaum's talk page Lir 02:59 Nov 16, 2002 (UTC)
  • 202.104.189.20 wiped my user page Lir 02:59 Nov 16, 2002 (UTC)
  • Another 66.32 IP is vandalising Anti-Israel movements so that it will exist in a exemplary state of POV, at least from my POV...Lir 06:18 Nov 13, 2002 (UTC)
  • 194.247.47.81 linked The Force, Parapsychology and Taoism to each other, then created three garbage articles, which I deleted. IP blocked. It's a proxy. Someone who knows about these subjects, please check whether I was right to revert. -phma 2002-11-12
Blocked. user:sjc
HELP! This guy is going crazy! -- Zoe 03:28 Nov 11, 2002 (UTC)
Spam bot is now blocked. --mav
Looks like a drive-by - I see no other activity. Isolated incidents like this really don't need to be listed here. --mav
  • 66.32.23.207 whacked Columbus with Orwellian propaganda (and some Nazi book-burning too). Lir 09:58 Nov 10, 2002 (UTC) --This was deleted for unknown reasons--
  • 203.167.97.19 erased entire text of this page and its talk. Anyone who does this shall be blocked immediately no matter how many good edits have come from the IP. -phma 2002-11-10
  • 213.229.14.90 has been putting goatse.cx links in several articles and created geeks, a very offensive anti geek article. It is time someone banned this very very sad person.
Just an FYI: He reported himself here. Don't be surprised if he pops back up in 15 minutes with a new IP address. --Robert Lee
Well done! (anonymous frustrated user)
  • 213.225.2.165 wiped my user page thrice and user talk page twice and SJC's user page once and talk page onceLir 20:04 Nov 9, 2002 (UTC)
Do you want your user pages protected Lir? user:sjc
You probably shouldn't edit people's comments on your user page to change their meaning if you want any sympathy. The Cunctator
Why...are you the one wiping my page Cunctator?
Nope.
  • Maybe not exactly vandalism but abusive advertisement : 213.224.83.46 is adding references on one or two painters on at least two wikipedias...jumping through links...on the painting and list of painters pages....
    This is hardly newbie experiment : I am deleting his stuff on the french wiki over and over --user:anthere
  • 66.152.205.254 vandalised Chemistry and Talk:George W. Bush
  • 14:24 Nov 7, 2002, Sjc blocked 62.171.194.36 : Reason: Persistent homophobic vandalism in nonsense article Marcel Petiot, now deleted.
  • Could someone with the ability to do so please ban 206.10.53.15? This idiot child is vandalizing the entries for photic zone/aphotic zone with his violent and homophobic prose. Done. user:sjc
  • 64.211.89.160 -- profanity and deleting articles.
  • 195.194.196.253
    • I have just removed two obscene additions from the "Edinburgh" page, added by 195.194.196.253 to the section on the Edinburgh Festival: The "children's Trust for the Right to be Molested" festival, and the "If I had a penis what would I use it for Festival". Renata 16:38 Nov 6, 2002 (UTC)
  • 156.3.70.12 has defaced three pages with garbage, with no useful contributions. (Its a K12 school in Los Angeles County)


She's blocked -- please revert any of her trash you haven't already. -- isis 14:04 Oct 30, 2002 (UTC)
  • [66.74.243.3 vandalizing Japan & entries on Japanese companiesInfrogmation 07:56 Oct 28, 2002 (UTC)
    • IP blocked. It's in Road Runner netspace, so it might change. -phma
  • user:Hello.jpg uploaded the notorious goatse.cx image, which I deleted before it was 'used' in any articles. --KQ
  • 209.158.111.131 -- adding crap to History, Current Events, Black's Law Dictionary repeatedly -- Sam 13:58 Oct 30, 2002 (UTC)
    • blocked by Isis. My attempt to "talk" was too late (see Wikipedia:annoying users). --Ed Poor 14:10 Oct 30, 2002 (UTC)
    • I don't think this was a regular vandal, but a spambot automatically adding "advertisement" to input-boxes on the web. --arcade
    • "I like duckies" and "Swimming is the greatest sport EVER" are advertisements? -- Storm
    • Hmm, I was wrong. I just saw the links to that fruit-quiz thing the person linked to at the 'current events' page and another page. Thought it was a spambot. --arcade
  • 193.251.9.132 Is creating nonsense articles. Slap him with a clue stick.
    • He's now pasting in links to goatse.cx with misleading edit summaries ("reverting vandalism"), and deleting his name from this list - hilarious, I'm sure. Anybody fancy banning him? --Camembert
  • 146.184.0.71 adding bogus links to and deleting valid data from various articles. -- Someone else 23:06 Oct 22, 2002 (UTC)
  • 24.166.83.194: Two contributions, both deliberate vandalism of existing articles, misleading edit summaries used to attempt to cov
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_investigation&oldid=495896"