Forum:Mass Vandalisms

From Uncyclomedia, the UnMeta-wiki
Jump to: navigation, search
Forum: Home > Mass Vandalisms

Is it too drastic to set UnCommons as read-only for the next 12 hours? It seems that the motherfucker woke up. Cthulhu.fhtagn 01:00, 18 March 2011 (UTC)

  • They attack always in the same pattern: hit-and-run, wait two hours, then come back. Cthulhu.fhtagn 02:48, 18 March 2011 (UTC)
It seems that Cthulhu is the only sysop that is watching UnCommons, but this is not true. What happens is that Tyler Durden and I are never online when the vandal attacks, which is precisely morning, very early. DARK FALLEN ANGEL Lord of DarknessHAIL SATAN 13:31, 18 March 2011 (UTC) (PS: Desculpem-me pelo péssimo inglês...)
I never said I was the only watcher, but I claim to be the best :-) Cthulhu.fhtagn 14:30, 18 March 2011 (UTC)
That's because you're always online at the time the vandal attacks. I and Tyler Durden always lose the chance to block the vandals. DARK FALLEN ANGEL Lord of DarknessHAIL SATAN 17:44, 18 March 2011 (UTC)
  • This time you beat me - congratulations. Let's see who will get'em when they come back at 23:00 UTC. Cthulhu.fhtagn 22:03, 18 March 2011 (UTC)

Adding spam filter extensions would be optimal - solves the problem quite well, as they follow some very specific patterns, but lacking that, as none of us appear to be carlb... well, I've resorted to rangeblocks on Illogicopedia; might be something to consider elsewhere as well, might not. It does seem to help, but it just seems wrong, however temporary it may be... seriously, though, good luck, guys, and keep up the good efforts, wherever your edits may take you. Athyria 00:23, 19 March 2011 (UTC)

Contents

[edit] One innocent comentary

I'm stupid? Do not know why but I think I'm stupid. Why is God damn page I created, and I am no longer a sysop here? Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 01:13, 19 March 2011 (UTC)

  • No, but you think other people are smarter than they are. The Ban Patrol was a nice idea, but I became lost and buried under spam. Cthulhu.fhtagn 12:12, 19 March 2011 (UTC)
  • PhysicsDude suggested (in my discussion page) using CAPTCHA to prevent the creation of new accounts and IP edits. If some of those vandalisms are done robotically, or by virus-infected zombie computers, this would hinder those attacks. Cthulhu.fhtagn 12:12, 19 March 2011 (UTC)

[edit] Time travel

Another weird thing: it seems that the motherfuckers vandalize in a future date. I have just erased some vandalisms dated from the future. This is typical of virus/spam e-mail, that use a future date so that it appears as the most recent message in the mail folder. I think we are against serious enemies, not just one motherfucker idiot that's doing it for fun. Probably there's some police action that could be taken against them. Cthulhu.fhtagn 14:15, 19 March 2011 (UTC)

  • Addendum: I just can't get how they can hack the server time to vandalize this way. Maybe they placed a virus inside the server? That's a scary possibility. Cthulhu.fhtagn 14:16, 19 March 2011 (UTC)

[edit] We cannot tolerate the proliferation of this spam any longer. It is useless to fight the articles and images. We must kill the people producing them

Maybe some (slightly less drastic than the subject, but yet) drastic measures must be taken to combat this vandalism. Most of them come from IPs that being with 173. Should be block all IPs 173.*.*.*, at least for the next 24 hours? Cthulhu.fhtagn 21:06, 19 March 2011 (UTC)

The only info that is known, is that every IP is coming from Nobis Technology Group LLC, when there is another organisation named Ubiquity Server Solutions Chicago and one named Hambilios. Does UnMeta has Recaptcha? So, at signing in, solving a simple sum, and while editing, with placing external links, also something like that. But, the most weird thing of this, is that this Nobis Technology Group LLC does not have an email adress, but only is to be contacted by letter, which is, i think, suspect. Roye7777777 ~ Talk 21:50, 19 March 2011 (UTC)
So it's probably the guys who sell captcha that are doing the attacks? Or am I too much paranoid? Cthulhu.fhtagn 21:53, 19 March 2011 (UTC)
It's probably the third possibility. Roye7777777 ~ Talk 22:21, 19 March 2011 (UTC)
Nah. This theory seems very reasonable to me: I think that company was h4x€d by one of their "clients", a very cunning client with evil thoughts when borrowing some server space. The hacker accessed the company and installed his so-called "backdoors", so without the knowing of that company the hacker can do his work and send spam through those gateways. The company blindly says there is no problem, or perhaps they have noticed the internal problems, but just ignore it.
I think I will go to find some information on MediaWiki. Let's hear what the nerds say | CartoonistHenning 22:23, 19 March 2011 (UTC)
So presumably the problem is one h4x&d that directly attacked the telephone company. This may be understandable since the variation of IP's is a few tracks. Thus one can achieve rangeblock 173.XXX the track but will not take up other. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 23:18, 19 March 2011 (UTC)
  • Also, it looks like the attacks are done robotically, by randomly generated names (FirstnameSecondnameN). Maybe the motherfucker that wrote the virus doesn't even know what the virus is doing, he might even have written it to mass-vandalize and blackmail wikipedia or wikia. Cthulhu.fhtagn 02:42, 20 March 2011 (UTC)
  • (User rights log); 11:34.. CartoonistHenning (Talk|contribs) changed group membership for User:Rhubella Marie from rollback to rollback, administrator and Check user (fighting the spam)
I wonder depending on your last point is, a bot can edit using these IP ranges is quite possible that not because the vandal's work consists of:
  1. First, create your page from spam
  2. Then create the account, knowing it can not load an image over IP.

Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 15:09, 20 March 2011 (UTC)

  • Some extreme measures I've just taken on UnCommons:
  • Block 173.234.0.0/16 for one day
  • Block the upload of three files that begin with "Short Term Loans". It seems like the random generator of the robot repeated twice the numbers 1062, 3837 and 4950, so, by blocking these files, it will not upload spam-images. Or so I hope.
I will ban for a month I think enough. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 15:13, 23 March 2011 (UTC)
Since Cartoonist blocked one 173.* spammer for infinite, I think we can do the same for the other 173.* IPs in UnCommons, right? Cthulhu.fhtagn 22:07, 23 March 2011 (UTC)
You have my blessing to do this goodness that IP. in UnCommons. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 23:28, 23 March 2011 (UTC) 0:)
The block on 173.208.0.0/16 and 173.234.0.0/16 in UnCommons stopped the spam. Here, 173.208.0.0/16 is still open to them. Maybe after these two IP ranges are blocked, it won't be necessary to keep the three temporary tyrants helpers. Cthulhu.fhtagn 19:27, 24 March 2011 (UTC)

Então o que me diz disto aqui. Acabei de fazer um check nesse sujeito recém banido:

  • VirgilKay6 (Conversa | contribucións | bloquear) (Comprobar) (17:03, 24 de marzo de 2011 -- 17:03, 24 de marzo de 2011) [2] (Bloqueado)
  1. 64.120.87.28

Esse não usa 173.#.#.# Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 13:19, 25 March 2011 (UTC)

  • Eu vi. Já mandei também os 64.120.#.# para a puta que pariu. Caralho, tô vendo a hora que vou fazer uma merda bem grande, e bloquear alguém que não devia. Cthulhu.fhtagn 22:35, 25 March 2011 (UTC)
Do not worry that our task is to eliminate the thugs. Who has an account here before rangeblock not suffer restrictions. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg

Another thing I would like to propose a check to every spammer who vandalize here to find out the IP's to any bans on the corresponding IP range. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 14:14, 27 March 2011 (UTC)

The robotic vandalism/spam attacks on UnCommons seem to have terminated. Here, the 64.120.#.# is open. Maybe that's the last door for the attacks, closing it will finish them forever until they infect another IP. Cthulhu.fhtagn 14:49, 30 March 2011 (UTC)
They found a new IP to spam; Rhubella, can you check-user the most recent UnCommons spammer, so that we may block a new range? Cthulhu.fhtagn 13:32, 31 March 2011 (UTC)
  • Another IP that I've just blocked in UnCommons (and Malucopedia, too): 69.147.0.0/16. Cthulhu.fhtagn 12:01, 2 April 2011 (UTC)
  • A new IP was used to spam UnCommons. Can anyone checkuser it, so that we may block a new range? Cthulhu.fhtagn 13:23, 11 April 2011 (UTC)

Tem uns ips criando conta e criando páginas de usuários com propagandas na DP também, mas não é em grande escala, por enquanto estão "devagar" Jonny 16:51, 13 April 2011 (UTC)

  • Esses vandalismos são feitos por robôs, é preciso bloquear o range dos IPs. Cthulhu.fhtagn 22:17, 13 April 2011 (UTC)

[edit] About user:Лёва Корова

I notice you're Лёва Корова Uncyclopedia banned in Russia for a time of 1 year for spam. However, it has caused numerous problems and other UnCommons uncys.

  1. In Desciclopédia, he came into contact with the sysop Tyler Durden asking my unbanned. During this period, due to the current validity of rules that talk about suspected burlamento block was checked and found to not be a sock of mine. However, he continued the nuisance and has been locked.
  2. In UnCommons is also accused of using accounts with names that sysops Uncyclopedia banned in Russian, Ukrainian and Belarusian UnCommons in vandalism and create pages on various administrative and Administrator's userpages.
  3. In Oncyclopedia, vandalized an important image. Ask the sysop Roye to inform Cartoonist about this user.
  4. In Desgalipedia, has been blocked for abusing multiple accounts, the same reason it was banned in UnCommons.

Ask opinions on what to do with this guy. And before I forget, for a user to be excluded he also created a wiki separatist mood at Wikia.

Graciously, Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 00:32, 14 April 2011 (UTC)

I advise: watch him. Ban him only if he violates a wiki's policy | CartoonistHenning 21:40, 14 April 2011 (UTC)

Violate itself, or both. The problem is that it has created multiple accounts and some are the names of directors in their respective uncys. Would you use it as the account {{USERNAME}} and vandalized in UnCommons. And another thing, one of his socks vandalized my userpage on info, he reversed. However, in Desgalipedia the two accounts share the same IP. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 23:41, 14 April 2011 (UTC)

Already said he does not want to edit but vandalize the UnMeta projects and purpose, he just vandalize the mirror version of paudurapedjia. :( Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 22:08, 17 April 2011 (UTC)

[edit] Other victims of vandalism

It seems that those m-f-ers target every wiki. I just found out another one:

Looks familiar? It's in the swfc wiki (swfc is the free software flash compiler). Cthulhu.fhtagn (talk) 14:55, 13 May 2011 (UTC)

  • BTW, I would like to request a check user on the new vandals at UnCommons, so that we may block new IP ranges. Cthulhu.fhtagn (talk) 15:42, 13 May 2011 (UTC)
I think you're overworked. This wiki is not our. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 06:36, 15 May 2011 (UTC)

[edit] New IPs used to spam

Two new IPs were used to spam UnCommons: 64.31.0.0/16 and 120.89.0.0/16. I've already blocked them in UnCommons and Malucopédia, but I would suggest that all other administrators should block them in all other projects. Cthulhu.fhtagn (talk) 15:50, 17 June 2011 (UTC)

Here I have banned them too. Roye7777777 ~ Talk 11:10, 18 June 2011 (UTC)
But now is my question - and I think I ask it rightly - isn't there some kind of ReCaptcha plugin or anthing like that, on those sites who are right now bombed with spam? Roye7777777 ~ Talk 11:18, 18 June 2011 (UTC)
This is a serious problem because many innocent users have to edit each time you edit Captcha. Rhubella beach.jpgRhubella Marie, the rat sockpreppie 2080 preppieditsRhubella.jpg 21:44, 18 June 2011 (UTC)
I guess solving a simple sum on Captcha is not a problem, is it? Captcha is only to be used when adding an external link, so users who are normally editing and using internal [[ ]] links, don't have to do this. This is a reliable solution, we use it too, and we rarely get spam except for some lifeless pieces of faeces. Roye7777777 ~ Talk 15:14, 20 June 2011 (UTC)
Personal tools
View and edit namespaces data

Variants
Actions
Navigation
Reports and requests
Community
Contact
Toolbox