Jump to content

Wikipedia:Requests for investigation

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Baldhur (talk | contribs) at 18:59, 14 February 2003 (66.59.229.178). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

The purpose of this page is to provide instant notice of vandalism taking place. You can use the format under the Current Alerts heading: IP address, pages touched, damage done. If you don't want to call attention to your report, be sure to check the box marked "this is a minor edit" (so it won't show up in most users' recent changes).

For a list of currently blocked IPs and the reason why they were blocked, visit: Special:Ipblocklist.

If you would like to look up information about the vandal's IP please visit http://network-tools.com/ and enter in the IP.

However, please do not label isolated instances of text deletions, replacements or odd additions as VANDALISM unless they are overtly lewd or offensive. More often than not, this is just a visitor to the site experimenting with how to use it -- labeling them as a VANDAL is a sure way of ensuring they will not become contributors. Only add alerts to this page of true VANDALISM such as a systematic attack on several articles. Above all, please be polite at first and give the person the benefit of the doubt until they prove they deserve otherwise.

If you disagree with someone's edits, please see the following pages:

Current alerts

Note: Please add new alerts at the top of this list.

  • A vandal is removing a lot of text at Meta Wikipedia - help needed, preferably from someone with sysop powers on meta. Enchanter 23:44 Feb 13, 2003 (UTC)
    • The IP is now banned on meta; affected pages are already cleaned up. Just added Eloquence and Enchanter as sysops on meta. --Brion 00:00 Feb 14, 2003 (UTC)
Banned per your request. Vicki Rosenzweig 21:16 Feb 12, 2003 (UTC)

I think the MIT vandal may be back. User:Sumar made subtle changes to Eton College and Yanomami in the style of the MIT vandal. Mintguy

  • User:Popas11 is wreaking havoc over a wide number of pages, including my talk page. Appears to be a script.


OK this is really serious. Let us ban the user IMMEDIATELY. olivier 11:51 Feb 8, 2003 (UTC)
You give me his IP number and I'll be more than happy to do it. Otherwise the only other tool I have is a semi-automated revert tool. So just let this guys vandalism pile up and I'll periodically revert them all. --mav 11:54 Feb 8, 2003 (UTC)
It would require a revision to the Wiki software, but why not include an option so that anyone can look up the IP address of any Wikipedia username? Or would that be considered too risky for the users in general? -- Modemac

Yes, vandalism in progress and you should all know that the one who was responsible for this outburst of rage is Maveric aka mav who abused his rights and sided in edit war abot women, instead of helping to mediate. With such ads, you will always have plenty of vandalism here. I will not stop until he appologizes for his behaviour - the more you fight me, the more spiteful I will be.

Your VANDAL. Bolero

Your edits to begin with were vandalism. Wikipedia is not a place to text anarchy. --mav
  • User:Annetit's additions to Woman seem to fall into the category of vandalism, rather than a serious dispute over content, and Annetit does not answer queries about them. The article in question will need more monitoring than I alone can give it. --- Someone else 07:48 Feb 8, 2003 (UTC)
    • Annetit is now out of control, vandalizing page after page since Woman was locked. -- Zoe 08:52 Feb 8, 2003 (UTC)
    • Yes - will somebody PLEASE stop this person? Thanks.
    • I agree. Annetit's recent contributions seem to be pure vandalism. -- The Anome 09:00 Feb 8, 2003 (UTC)
    • Someone, presumably Annetit, has become a hydra-headed vandal, repeatedly creating new logins to do the same sort of vandalism. Attempts at constructive engagement seem to have failed. IP ban requested. The Anome 09:36 Feb 8, 2003 (UTC)
    • The IP of Annetit is user:18.21.0.98 - see history of user talk:18.21.0.98 and hir contributions.
  • 203.37.199.12 can't leave Loch Ness monster alone
Possibly mutating to 203.37.199.13 Ducker 23:15 Feb 12, 2003 (UTC)
  • 64.180.70.230 has vandalized maveric and camembert's user pages. -- Zoe 04:18 Feb 7, 2003 (UTC)
What a moron: doesn't he even know how to spell WHEE for 75Kb?
  • 68.45.38.248 appears to be adding a pantheon of made-up Star Wars characters: "Good Vader", "Bad Vader", "Jedi Divas" etc. These all fail the Google test.
  • Very disturbing edits are made by a contributor called User:Pacifica (calling herself "Diana Couto Secreatary of State") not registered, to the Pacifica article (another micronation). See also the discussion page. Is it possible to trace and issue a warning to this user? olivier 14:34 Jan 19, 2003 (UTC)
I have issued a warning on Talk:Pacifica. olivier 14:41 Jan 19, 2003 (UTC)
65.56.131.110 is vandalizing other pages too. Hard to keep up... -- Wapcaplet
I blocked the user. It's a dynamic IP adress he uses so he might come back. -- JeLuF 01:14 Jan 4, 2003 (UTC)
  • There is cracker using the login and password of other sysops on the French Wiki. Can anyone remove all sysop powers, since the vandal managed to use youssefsan,anthere and athimik's login (they are all sysops). So the damages could be very unpleasant. There nearly nobody on the French Wiki. Regards-- Youssefsan
    On account of this I've cleared all login sessions. I strongly recommend that anyone with an account on the French wikipedia change their password there (and here and elsewhere, if using the same password). I have reset the passwords of all the French sysops, who will need to manually change via 'mail password'. --Brion 21:43 Jan 1, 2003 (UTC)


Last time I checked wikipedia wasn't doing a very good job of even attempting to hide passwords Vera Cruz
WHat do you mean Vera Cruz -- Youssefsan
Our passwords are not encrypted and can be be viewed as regular text via a man in the middle crack. Brion has already mentioned that he was working on fixing this. --mav
Interception of unencrypted packets is possible, though not terribly likely unless your ISP and/or your government are trying to vandalize Wikipedia. More exploitable problems are cookie-sniffing (stored password or just the session cookie) and SQL access by a malicious sysop peeking at the user table (this last is now closed, with finer-grained permissions on the sql access). These wouldn't give a plaintext password, but the hash or session is about as good. --Brion 23:17 Jan 1, 2003 (UTC)
I would recommend using one-way encryption for maximum security. - User:Ixfd64
  • Not content with self-promotion, 172.135.234.60 has progressed to is vandalising user pages.
  • 24.245.54.233 is on a vandalism spree. Page deletions, replacing articles by inappropriate material -- IP ban requested.
  • Ongoing vandalism of Meta-philosophy by User:Saprtacus Dec 19th 2002 17:11 EST
    • User Saprtacus appears to have departed to the metapedia, for now. -- Anon. Dec 24th 2002
  • 172.154.187.208 is vandalising several articles about dictators. -- Cordyph
    • I would be in favor of banning this user, if possible. I have reverted his/her edits several times, and he/she keeps reposting propaganda. olivier 14:02 Dec 19, 2002 (UTC)
      • I have blocked this IP after frequent reversions of vandalisms. Enough is enough. user:sjc
  • 216.129.198.41 has been mucking around in the sex article and it is getting really irritating. 8:52 December 19 2002 Slrubenstein
    • See this for a possible lead to who 216.129.198.41 might be, or might be trying to claim to be. The Anome
  • 08:59 Dec 18, 2002 64.7.145.36 -- copied my words from User_talk:DanKeshet into the Holocaust article, fraudulently signing my name, thereby representing me as a Holocaust denier. The ISP owning the IP is Sentex.net, in Canada. I am working with the ISP to track the abuser down; please add any useful information to my talk page. This person is in serious trouble. --Len

Uh oh, 205.188.*.* is vandalizing things again....

User contributions For 206.53.250.200 Below are this user's last 50 changes in the last 14 days. Show last 50 | 100 | 250 | 500 changes in last 1 | 3 | 7 | 14 | 30 days.

  • 22:50 Dec 17, 2002 Dog (top)
  • 22:49 Dec 17, 2002 Internet protocol suite (top)
  • 22:48 Dec 17, 2002 Betamax (top)


  • 66.144.13.254 seems to be modifying pages by inserting comments about how rap music sucks and other inane drivel. Some pages are already restored... I will restore the rest. The IP is not on the ban list, so someone might want to ban it.


  • 172.149.209.38 is vandalizing saddam hussein and other pages. Just reverted Joseph Stalin page


Some dynamic IP 205.188.*.* is wiping and vandalizing pages. Help! He/she keeps vandalizing pages!!! Can someone keep an eye on that IP range? I'm going to have to go to sleep soon...

I'll be still around. Thanks for the help! --mav
I've unblocked over a dozen 205.188.xxx.xxx IPs addresses since these are all AOL proxies used by thousands of AOL users. Everybody keep an eye out. --mav
  • he seemed to have added some information to Hilary Duff. Maybe he's a newbie?
  • Even after that, he still was adding crude comments ot articles about young female singers. -- Zoe
  • And now he/she is deleting the vandalism warning from this page. -- Zoe
    • It looks like the same person (or at least somebody with similar patterns of behaviour) may be around with an address starting 64.12.96 - I'd block them, but it looks like a proxy, and they'd only come back with a different address. --Camembert 16:05 Dec 15, 2002 (UTC)
    • Now seems to be operating from 152.163.188.* --rbrwr 17:39 Dec 15, 2002 (UTC)

142.22.16.54 - vandalized multiple articles. 8.99.163.198 and 68.13.202.70 appear to be the same person; vandaliszed two articles.

I'll watch these IPs for a while and autorevert any edits they make. If you see an edit by them in Recenet Changes and I'm still around, just let me take care of it and don't worry about it. --mav 21:28 Dec 13, 2002 (UTC)
  • 80.116.222.134 is creating or modifying several articles in which the existence of God is being represented as a given. It's as if he or she is writing a religious encyclopedia without any NPOV. -- Zoe 22:48 Dec 11, 2002 (UTC)

64.172.143.62 has already vandalised Current Events and Bug Reports. Dhum Dhum 19:43 Dec 9, 2002 (UTC)

64.175.251.61 is vandalising all of the future year pages with a bogus anniversary. -- Zoe 03:08 Dec 8, 2002 (UTC)

  • 213.138.109.254 is vandalising page after page. Please block IP immediately.
I'm monitoring the situation. I'll continue to revert the vandals edits and they we propably get tired and go away. --mav 22:44 Dec 5, 2002 (UTC)
You have a soft heart. Why not just ban the IP? --Dante Alighieri 22:46 Dec 5, 2002 (UTC)
No reason to start an arms race. --mav
  • lots more nonsense from this one, time to stop them??
    • blocked by Ed Poor 23:46 Dec 3, 2002 (UTC)
please stop this idiot, they are getting more prolific
  • Somebody's been putting garbage pages with random character string names into the meta, Esperanto, and German wikis via the IPs 140.134.6.2 and 217.34.194.49. (Both IPs presently blocked on those three wikis.) They may be open proxies, so if somebody could keep an eye out for this loser on other wikis or with different IPs, that'd be nice.
    • Not an open proxy by my test. Not listed on any open proxy list known to Osirusoft. -phma
    • Could somebody please finish reverting the latest at meta and keep an eye on the French wiki? I have to go to class and can't stick around... --Brion 21:43 Dec 2, 2002 (UTC)

done on meta. Could somebody check from time to time the french wiki, I am sleepy...and there nobody left... user anthere

  • 66.21.84.150 seems to have a little bit of a pb with Greece. Keep changing the capital : Istambul.

194.117.133.196 and 194.117.133.198

See also: