Wikipedia:Requests for investigation
The purpose of this page is to provide instant notice of vandalism taking place. You can use the format under the Current Alerts heading: IP address, pages touched, damage done. If you don't want to call attention to your report, be sure to check the box marked "this is a minor edit" (so it won't show up in most users' recent changes).
For a list of currently blocked IPs and the reason why they were blocked, visit: Special:Ipblocklist.
If you would like to look up information about the vandal's IP please visit http://network-tools.com/ and enter in the IP.
- However, please do not label isolated instances of text deletions, replacements or odd additions as VANDALISM unless they are overtly lewd or offensive. More often than not, this is just a visitor to the site experimenting with how to use it -- labeling them as a VANDAL is a sure way of ensuring they will not become contributors. Only add alerts to this page of true VANDALISM such as a systematic attack on several articles. Above all, please be polite at first and give the person the benefit of the doubt until they prove they deserve otherwise.
If you disagree with someone's edits, please see the following pages:
- Wikipedia:Edit wars in progress to report a dispute over content
- Wikipedia:Annoying users for annoying, sub-vandalism alerts
- Wikipedia:Dealing with vandalism More tips on Vandalism issues
Current alerts
Note: Please add new alerts at the top of this list.
- 66.59.229.178 is inserting nonsense into several articles. -- Cordyph 18:59 Feb 14, 2003 (UTC)
- A vandal is removing a lot of text at Meta Wikipedia - help needed, preferably from someone with sysop powers on meta. Enchanter 23:44 Feb 13, 2003 (UTC)
- The IP is now banned on meta; affected pages are already cleaned up. Just added Eloquence and Enchanter as sysops on meta. --Brion 00:00 Feb 14, 2003 (UTC)
- 199.245.156.9 has been putting juvenile rudeness in various articles, mostly linked from List of famous African-Americans. The jerk was doing the same thing a couple of days ago. -- Infrogmation 21:07 Feb 12, 2003 (UTC)
- Banned per your request. Vicki Rosenzweig 21:16 Feb 12, 2003 (UTC)
- 68.6.113.79 is repeatedly vandalising Karl Marx and related entries. Tannin 08:03 Feb 12, 2003 (UTC)
- 164.116.32.19 vandalized History of Guam and a couple of other pages. -- Egil 19:49 Feb 11, 2003 (UTC)
I think the MIT vandal may be back. User:Sumar made subtle changes to Eton College and Yanomami in the style of the MIT vandal. Mintguy
- User:47.211.0.13 vandalized Galway.
- User:Popas11 is wreaking havoc over a wide number of pages, including my talk page. Appears to be a script.
- User:Bolero is deleting portions of articles, especially those in recent changes. Is also attacking users trying to effect repairs. User name mutates once blocked to another new name. 202.27.176.157 11:49 Feb 8, 2003 (UTC)
- Mutated to User:Murijja, then User:Boldone, then User:NEWONE, then User:Oklah
- Previous Mutations appear to be User:Rtu, User:WillyJss, User:Miocp,User:Mioc, User:Markoas, User:RedOpal, User:JokkoO, User:DereckA, User:Murila, User:Police13, User:Momrw, User:Wbfd, User:Justice and possibly others.
- OK this is really serious. Let us ban the user IMMEDIATELY. olivier 11:51 Feb 8, 2003 (UTC)
- You give me his IP number and I'll be more than happy to do it. Otherwise the only other tool I have is a semi-automated revert tool. So just let this guys vandalism pile up and I'll periodically revert them all. --mav 11:54 Feb 8, 2003 (UTC)
- It would require a revision to the Wiki software, but why not include an option so that anyone can look up the IP address of any Wikipedia username? Or would that be considered too risky for the users in general? -- Modemac
Yes, vandalism in progress and you should all know that the one who was responsible for this outburst of rage is Maveric aka mav who abused his rights and sided in edit war abot women, instead of helping to mediate. With such ads, you will always have plenty of vandalism here. I will not stop until he appologizes for his behaviour - the more you fight me, the more spiteful I will be.
Your VANDAL. Bolero
- Your edits to begin with were vandalism. Wikipedia is not a place to text anarchy. --mav
- User:Annetit's additions to Woman seem to fall into the category of vandalism, rather than a serious dispute over content, and Annetit does not answer queries about them. The article in question will need more monitoring than I alone can give it. --- Someone else 07:48 Feb 8, 2003 (UTC)
- Annetit is now out of control, vandalizing page after page since Woman was locked. -- Zoe 08:52 Feb 8, 2003 (UTC)
- Yes - will somebody PLEASE stop this person? Thanks.
- I agree. Annetit's recent contributions seem to be pure vandalism. -- The Anome 09:00 Feb 8, 2003 (UTC)
- Someone, presumably Annetit, has become a hydra-headed vandal, repeatedly creating new logins to do the same sort of vandalism. Attempts at constructive engagement seem to have failed. IP ban requested. The Anome 09:36 Feb 8, 2003 (UTC)
- The IP of Annetit is user:18.21.0.98 - see history of user talk:18.21.0.98 and hir contributions.
- 203.37.199.12 can't leave Loch Ness monster alone
- Possibly mutating to 203.37.199.13 Ducker 23:15 Feb 12, 2003 (UTC)
- 64.180.70.230 has vandalized maveric and camembert's user pages. -- Zoe 04:18 Feb 7, 2003 (UTC)
- 204.186.151.4 just wrote WEEEEEEEEEEEEE... for 75kb on Photinus
- What a moron: doesn't he even know how to spell WHEE for 75Kb?
- 203.37.199.12 vandalizing Loch Ness monster
- 212.88.58.38 is repeatedly vandalising Douglas Haig. Tannin 11:14 Feb 5, 2003 (UTC)
- 62.254.0.9 may be a schoolchild just playing around, but I think needs to be watched out for. He/she seems to have been around for a while without being picked up on. Deb 19:49 Feb 1, 2003 (UTC)
- User:Talh appears to be vandalising a series of pages. The Anome 18:31 Feb 1, 2003 (UTC)
- 198.169.5.96 may be using a script to create useless articles just containing the article title.
- I tried to point them to the sandbox for editing experiments, to no avail. (If they were using a script, that's no surprise.) I've banned the IP to stop the flood, and deleted most of the garbage pages. --Brion 18:48 Jan 30, 2003 (UTC)
- 66.74.2.10 is creating articles like Ulm and Robert Brown, and filling them with nonsense. - Tzaquiel 02:49 Jan 30, 2003 (UTC)
- 217.70.229.42 created article Arise Oh Compatriots Nigerias Call Obey and filled it with insults. olivier 09:31 Jan 29, 2003 (UTC)
- Between 02:14 Jan 29, 2003 and 02:15, user 165.121.237.163 replaced 4 articles with a URL.
- 67.121.190.207 continues to create nonsensical KROQ articles. -- Zoe 03:11 Jan 26, 2003 (UTC)
- 62.47.35.138 continues to vandalize Former Yugoslav Republic of Macedonia and Balkan peninsula - Zoe 23:49 Jan 25, 2003 (UTC)
- banned and warned (this is N733P010.adsl.highway.telekom.at , a dynamic IP address in Austria, should be unbanned after a few hours)Eloquence 23:55 Jan 25, 2003 (UTC)
- 217.41.37.98 wiped the Cheese article and replaced it with "cheese smells bad".
- 24.42.43.3 is making redirects, wiping whole articles in the process.
- 68.45.38.248 appears to be adding a pantheon of made-up Star Wars characters: "Good Vader", "Bad Vader", "Jedi Divas" etc. These all fail the Google test.
- Very disturbing edits are made by a contributor called User:Pacifica (calling herself "Diana Couto Secreatary of State") not registered, to the Pacifica article (another micronation). See also the discussion page. Is it possible to trace and issue a warning to this user? olivier 14:34 Jan 19, 2003 (UTC)
- I have issued a warning on Talk:Pacifica. olivier 14:41 Jan 19, 2003 (UTC)
- 192.251.125.40/41 silly defacement of 4 articles
- Reverted testicle and asked him to rechannel "creativity". --Uncle Ed 22:23 Jan 17, 2003 (UTC)
- U.S. plan to invade Iraq and War on Terrorism have also had to be reverted from random edits by this IP -- Sam 22:42 Jan 17, 2003 (UTC)
- 212.219.39.163 "farts" and "baked beans" all over Ricin page.
- 63.199.231.74 has been making a series of defacement edits.
- 66.185.84.78 just vandalized The Lost Dogs with a bunch of racist stuff.
- 67.73.167.149 silliness over many articles, should be put to bed soon.
- Blocked - I hope he sleeps well. --Camembert 00:05 Jan 10, 2003 (UTC)
- Has now returned as User:67.73.167.149 is back!!! (contribs) --Camembert 01:38 Jan 10, 2003 (UTC)
- 63.203.69.7 is deleting and defacing articles. B 04:22 Jan 9, 2003 (UTC)
- 24.74.149.152 !!!-Sv
- Now blocked Enchanter 02:41 Jan 8, 2003 (UTC)
- 24.99.61.13 vandalising several articles quercus robur 23:23 Jan 7, 2003 (UTC)
- 166.90.84.223 - adding graffiti to many articles. --User:Ixfd64
- 67.28.27.19 defecatory silliness in several pages
- Got bored of reverting these; now banned. IP belongs to a Chicago-area dial-up account.
- 65.57.14.131 vandalism of 10+ articles so far, is using other IPs also. 205.188.208.69 is same style. Possibly 64.12.96.138 too.
- 24.42.43.3 is making some edits that range from vandalism (Flag of the United States) to POV (Israel, Holy Land, Iraq) and lots of sub-stub articles, but also some useful edits. Have a look at what he/she is doing. -- JeLuF 21:30 Jan 5, 2003 (UTC)
- 12.250.128.134, several pages. Hephaestos 03:18 Jan 4, 2003 (UTC)
- It looks like 65.56.131.110 is vandalizing the Gettysburg Address -- Wapcaplet
- 65.56.131.110 is vandalizing other pages too. Hard to keep up... -- Wapcaplet
- I blocked the user. It's a dynamic IP adress he uses so he might come back. -- JeLuF 01:14 Jan 4, 2003 (UTC)
- There is cracker using the login and password of other sysops on the French Wiki. Can anyone remove all sysop powers, since the vandal managed to use youssefsan,anthere and athimik's login (they are all sysops). So the damages could be very unpleasant. There nearly nobody on the French Wiki. Regards-- Youssefsan
- On account of this I've cleared all login sessions. I strongly recommend that anyone with an account on the French wikipedia change their password there (and here and elsewhere, if using the same password). I have reset the passwords of all the French sysops, who will need to manually change via 'mail password'. --Brion 21:43 Jan 1, 2003 (UTC)
- Last time I checked wikipedia wasn't doing a very good job of even attempting to hide passwords Vera Cruz
- WHat do you mean Vera Cruz -- Youssefsan
- Our passwords are not encrypted and can be be viewed as regular text via a man in the middle crack. Brion has already mentioned that he was working on fixing this. --mav
- Interception of unencrypted packets is possible, though not terribly likely unless your ISP and/or your government are trying to vandalize Wikipedia. More exploitable problems are cookie-sniffing (stored password or just the session cookie) and SQL access by a malicious sysop peeking at the user table (this last is now closed, with finer-grained permissions on the sql access). These wouldn't give a plaintext password, but the hash or session is about as good. --Brion 23:17 Jan 1, 2003 (UTC)
- I would recommend using one-way encryption for maximum security. - User:Ixfd64
- Our passwords are not encrypted and can be be viewed as regular text via a man in the middle crack. Brion has already mentioned that he was working on fixing this. --mav
- WHat do you mean Vera Cruz -- Youssefsan
- Not content with self-promotion, 172.135.234.60 has progressed to is vandalising user pages.
- 24.245.54.233 is on a vandalism spree. Page deletions, replacing articles by inappropriate material -- IP ban requested.
- Ongoing vandalism of Meta-philosophy by User:Saprtacus Dec 19th 2002 17:11 EST
- User Saprtacus appears to have departed to the metapedia, for now. -- Anon. Dec 24th 2002
- 172.154.187.208 is vandalising several articles about dictators. -- Cordyph
- 216.129.198.41 has been mucking around in the sex article and it is getting really irritating. 8:52 December 19 2002 Slrubenstein
- 08:59 Dec 18, 2002 64.7.145.36 -- copied my words from User_talk:DanKeshet into the Holocaust article, fraudulently signing my name, thereby representing me as a Holocaust denier. The ISP owning the IP is Sentex.net, in Canada. I am working with the ISP to track the abuser down; please add any useful information to my talk page. This person is in serious trouble. --Len
Uh oh, 205.188.*.* is vandalizing things again....
User contributions For 206.53.250.200 Below are this user's last 50 changes in the last 14 days. Show last 50 | 100 | 250 | 500 changes in last 1 | 3 | 7 | 14 | 30 days.
- 22:50 Dec 17, 2002 Dog (top)
- 22:49 Dec 17, 2002 Internet protocol suite (top)
- 22:48 Dec 17, 2002 Betamax (top)
- 66.144.13.254 seems to be modifying pages by inserting comments about how rap music sucks and other inane drivel. Some pages are already restored... I will restore the rest. The IP is not on the ban list, so someone might want to ban it.
- 68.104.212.4 has made two edits so far, to Homophobia and United States Bill of Rights. Both appear to be deliberate vandalism.
- IP 149.169.88.21 then edited this page to obscure the IP address of the original vandal. Why? Is this the same person?
- 172.149.209.38 is vandalizing saddam hussein and other pages. Just reverted Joseph Stalin page
Some dynamic IP 205.188.*.* is wiping and vandalizing pages. Help! He/she keeps vandalizing pages!!!
Can someone keep an eye on that IP range? I'm going to have to go to sleep soon...
- I'll be still around. Thanks for the help! --mav
- I've unblocked over a dozen 205.188.xxx.xxx IPs addresses since these are all AOL proxies used by thousands of AOL users. Everybody keep an eye out. --mav
- 152.163.189.173 - vandalized Britney Spears multiple times.
- An address beginning with 205.188.209 has vandalized the Hilary Duff article and continues to make unwelcome additions to an empty article titled Haylie Duff -- Zoe 00:37 Dec 15, 2002 (UTC)
- he seemed to have added some information to Hilary Duff. Maybe he's a newbie?
- Even after that, he still was adding crude comments ot articles about young female singers. -- Zoe
- And now he/she is deleting the vandalism warning from this page. -- Zoe
- It looks like the same person (or at least somebody with similar patterns of behaviour) may be around with an address starting 64.12.96 - I'd block them, but it looks like a proxy, and they'd only come back with a different address. --Camembert 16:05 Dec 15, 2002 (UTC)
- Now seems to be operating from 152.163.188.* --rbrwr 17:39 Dec 15, 2002 (UTC)
142.22.16.54 - vandalized multiple articles. 8.99.163.198 and 68.13.202.70 appear to be the same person; vandaliszed two articles.
- I'll watch these IPs for a while and autorevert any edits they make. If you see an edit by them in Recenet Changes and I'm still around, just let me take care of it and don't worry about it. --mav 21:28 Dec 13, 2002 (UTC)
- 80.116.222.134 is creating or modifying several articles in which the existence of God is being represented as a given. It's as if he or she is writing a religious encyclopedia without any NPOV. -- Zoe 22:48 Dec 11, 2002 (UTC)
64.172.143.62 has already vandalised Current Events and Bug Reports. Dhum Dhum 19:43 Dec 9, 2002 (UTC)
64.175.251.61 is vandalising all of the future year pages with a bogus anniversary. -- Zoe 03:08 Dec 8, 2002 (UTC)
- 213.138.109.254 is vandalising page after page. Please block IP immediately.
- I'm monitoring the situation. I'll continue to revert the vandals edits and they we propably get tired and go away. --mav 22:44 Dec 5, 2002 (UTC)
- You have a soft heart. Why not just ban the IP? --Dante Alighieri 22:46 Dec 5, 2002 (UTC)
- No reason to start an arms race. --mav
- Longest word in the English language is being vandalized repeatedly by different IP addresses. Keep an eye out.
- Carl XVI Gustav of Sweden has been recently vandalized by two different IP addresses.
- 207.62.160.231 is repeatedly making malicious edits
- 194.203.36.17 is putting up nonsense articles. Example: Black bean "Black beans are black." Please block this jerk.
- Deleted both black bean and Avery Johnson. He's done only two so far, which isn't enough to get blocked. -phma
- 24.158.8.134 replaced many articles with stupid comments.
- lots more nonsense from this one, time to stop them??
- blocked by Ed Poor 23:46 Dec 3, 2002 (UTC)
- 205.152.138.34 vandalized multiple articles.
- I've been watching this IP for a while now and cleaning-up their mess. Thy'll probably get tired and leave. --mav 23:21 Dec 3, 2002 (UTC)
- 24.94.152.221 added profanity to Carl XVI Gustav of Sweden
- 204.184.29.2 creates nonsense articles on people
- please stop this idiot, they are getting more prolific
- 218.145.25.18 creates nonsense articles with profanity
- Somebody's been putting garbage pages with random character string names into the meta, Esperanto, and German wikis via the IPs 140.134.6.2 and 217.34.194.49. (Both IPs presently blocked on those three wikis.) They may be open proxies, so if somebody could keep an eye out for this loser on other wikis or with different IPs, that'd be nice.
- Not an open proxy by my test. Not listed on any open proxy list known to Osirusoft. -phma
- Could somebody please finish reverting the latest at meta and keep an eye on the French wiki? I have to go to class and can't stick around... --Brion 21:43 Dec 2, 2002 (UTC)
done on meta. Could somebody check from time to time the french wiki, I am sleepy...and there nobody left... user anthere
- 81.97.248.36 wrote graffiti on several pages.
- 67.34.131.228 replaced Revolutionary Girl Utena with profanity.
- 142.22.16.54 is vandalising biographic articles in great numbers
- Seems like a warning was just as good (see User_talk:142.22.16.54). --Ed Poor 19:01 Nov 26, 2002 (UTC)
- 24.46.8.74 was adding profanity.
- 63.227.161.101 and 206.54.66.128 vandalized Genetics.
- both blocked --Ed Poor 21:05 Nov 22, 2002 (UTC)
- it seems like that 206.54.66.128 also made a few useless contributions...
- 217.26.8.72 and 209.68.98.1 added "gay" comments to History of Kenya.
- User:-1, troll: uploaded goatse Image:Tux.jpg, also Image:Tux.html and made creative enhancements to both. 18:11 Nov 21, 2002
- This is the usual goatse.cx lover going through the proxy server 194.117.133.196
- 63.16.10.29 is repeatedly vandalizing Bird - Zoe 04:56 Nov 21, 2002 (UTC)
- Blocked after vandalizing three different articles. Address is in UUnet space and might change. -phma
- 63.229.80.161 is repeatedly vandalizing Timeline of medicine and medical technology
- Blocked. It's phnxdslgw9poolA161.phnx.uswest.net. -phma
- 62.103.252.79 is wiping pages Lir 09:02 Nov 20, 2002 (UTC)
- 204.118.173.180 repeated insertions of obscenities and effluvia into various articles. -- Someone else 00:54 Nov 20, 2002 (UTC)
- 66.21.84.150 seems to have a little bit of a pb with Greece. Keep changing the capital : Istambul.
194.117.133.196 and 194.117.133.198
See also: