Misplaced Pages

:Vandalism: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
Browse history interactively← Previous editContent deleted Content addedVisualWikitext
Revision as of 21:34, 24 August 2006 view sourceNae'blis (talk | contribs)10,494 edits →Types of vandalism: clarify re-addition, as both vandalism and non-vandalism warnings are discouraged but not outright forbidden← Previous edit Latest revision as of 19:21, 16 December 2024 view source RemoveRedSky (talk | contribs)Extended confirmed users, Rollbackers1,399 editsmNo edit summary 
Line 1: Line 1:
{{short description|Policy on deliberate editing to obstruct or defeat Misplaced Pages's purpose}}
<!--
{{pp-vandalism|small=yes}}
WARNING:If you are attempting to vandalize this page, then please stop. Vandalism on Misplaced Pages is usually reverted in a matter of minutes, if not seconds. You may be blocked from editing for repeated vandalism.
{{pp-move-indef}}
{{redirect|WP:VANDAL|policies on vandalism-only accounts|Misplaced Pages:Vandalism-only account|the essay on the word "vandal"|Misplaced Pages:Avoid the word "vandal"|reporting instances of vandalism|Misplaced Pages:Administrator intervention against vandalism|and|Misplaced Pages:Requests for page protection|the encyclopedic article on vandalism on Misplaced Pages|Vandalism on Misplaced Pages}}
{{Distinguish|Misplaced Pages:Disruptive editing}}
{{Policy|WP:VAND|WP:VD|WP:VANDAL}}
{{nutshell|Intentionally making abusive edits to Misplaced Pages will result in ]s and/or ].}}
{{/VANDRightPlace}}
{{Misplaced Pages vandalism}}
{{conduct policy list}}


On Misplaced Pages, '''vandalism''' has a very specific meaning: editing (or other behavior) {{em|{{strong|deliberately}} intended to ] the ]}}, which is to create a 💕, in a variety of languages, presenting the sum of all human knowledge.
Advice: To perform tests, please go to either ] or ].
-->
{{policy2|]<br>]<br>]<br>]}}
{{WikipediaVandalism}}
{{editabuselinks}}
{{dablink|This page is about vandalism to Misplaced Pages. For vandalism outside Misplaced Pages, see ].}}


The malicious ] of encyclopedic content, or the changing of such content beyond all recognition, without any regard to our core content policies of ] (which does not mean ]), ] and ], is a {{em|deliberate}} attempt to damage Misplaced Pages. There are, of course, more juvenile forms of vandalism, such as adding irrelevant ] to a page, illegitimately ], and inserting obvious nonsense into a page. Abusive creation or usage of user accounts and IP addresses may also constitute vandalism.
] is any addition, deletion, or change to content, made in a deliberate attempt to compromise the integrity of the encyclopedia.


{{strong|Vandalism is prohibited.}} While editors are encouraged to ] and ] vandals, warnings are by no means a prerequisite for blocking a vandal (although administrators usually block only when multiple warnings have been issued).
The most common type of vandalism is the replacement of existing text with obscenities, page blanking, or the insertion of ]. Fortunately, this kind of vandalism is usually easy to spot.


{{strong|Even if misguided, willfully against ], or ], any ] effort to improve the encyclopedia is {{em|not}} vandalism.}} For example, ] over how exactly to present encyclopedic content is not vandalism. Careful consideration may be required to differentiate between edits that are beneficial, edits that are detrimental but well-intentioned, and edits that are vandalism. If it is clear that an editor is intending to improve Misplaced Pages, their edits are not vandalism, {{em|even if}} they violate some core policy of Misplaced Pages. Mislabeling good faith edits "vandalism" can be harmful, as it makes users less likely to respond to corrective advice or to engage collaboratively during a disagreement. For that reason, avoid using the term "vandalism" unless it is clear the user means to harm Misplaced Pages; this is even true when warning a user with a ]. Choose the template that most closely matches the behavior you are trying to correct.
Any ] effort to improve the encyclopedia, even if misguided or ill-considered, is not vandalism. Apparent bad-faith edits that do not make their bad-faith nature inarguably explicit are not considered vandalism at Misplaced Pages. For example, adding a personal opinion once is not vandalism — it's just not helpful, and should be removed or restated.


==Types of vandalism==
Committing vandalism is a violation of Misplaced Pages policy; it needs to be ], and then ] with — if you cannot deal with it yourself, you can seek ].
{{policy shortcut|WP:VANDTYPES}}
Vandalism on Misplaced Pages usually falls into one or more of these categories:


{{anchor|Abuse of tags}}
A by ] found that most vandalism on the English Misplaced Pages is ] within five minutes (see ); however, vandals persist as a problem for all users, and it is a good idea when editing an article to check its recent history to see if recent vandalism has gone unnoticed. In addition, the popularity and readership of Misplaced Pages has skyrocketed since the 2002 study, and there are no recent data corroborating the "five minute" expectation.
===Abuse of tags===
Bad faith placing of non-content tags such as {{tl|afd}}, {{tl|db}}, {{tl|sprotected}}, or other tags on pages that do not meet such criteria. This includes baseless removal of {{tl|policy}} and related tags.


===Account creation, malicious===
Not all vandalism is obvious, nor are all massive or controversial changes vandalism; careful attention needs to be given to whether the new data or information is right or whether it is vandalism.
Creating accounts with usernames that contain deliberately offensive or disruptive terms is considered vandalism, whether the account is used or not. For Misplaced Pages's policy on what is considered inappropriate for a username, see ]. See also ].


{{anchor|Avoidance vandalism}}{{anchor|Avoidant vandalism}}
{{Associations/Wikipedia Bad Things}}
===Avoidant vandalism===
Removing {{tl|afd}}, {{tl|copyvio}} and other related tags in order to conceal deletion candidates or avert deletion of such content. However, this is often mistakenly done by new users who are unfamiliar with AfD procedures and such users should be given the benefit of the doubt and pointed to the proper page to discuss the issue.


===Blanking, illegitimate===
==Dealing with vandalism==
{{for|legitimate cases of blanking articles|Misplaced Pages:Redirect#Redirects that replace previous articles}}
{{policy shortcut|WP:NOBLANK}}
{{anchor|Blanking}}] without any reason, or replacing such content with nonsense. Content removal is {{em|not}} considered to be vandalism when the reason for the removal of the content is readily apparent by examination of the content itself, or where a non-frivolous explanation for the removal of apparently legitimate content is provided, linked to, or referenced in an edit summary.


Edits that blank all or part of a biography of a living person ], but instead an effort by the subject of the article to remove inaccurate or biased material. Even when such edits are inappropriate, they should be treated as content disputes, not vandalism. In particular, vandalism warning messages ''should not be left'' on the ] of the editor. Blanking that could be legitimate includes blanking all or part of a ]. Misplaced Pages is especially concerned about providing accurate and unbiased information on the living; blanking may be an effort to remove inaccurate or biased material. Due to the possibility of unexplained good faith content removal, {{tl|uw-test1}} or {{tl|uw-delete1}}, as appropriate, should be used as initial warnings for content removals without more descriptive edit summaries.


===Repeated uploading of copyrighted material===
If you see ] (as defined below), ] it and leave a warning message on the vandal's ''']''' using the system below. Check the page history after reverting to make sure you have removed all the vandalism; there may be multiple vandal edits, sometimes from several different IPs. If it is obvious that all versions of the page are pure vandalism, nominate the page for ''']'''. Also, check the vandal's other contributions — you will often find more malicious edits.
Uploading or using material on Misplaced Pages in ways which violate ] after having been warned is vandalism. Because users may be unaware that the information is copyrighted, or of Misplaced Pages policies on how such material may and may not be used, such action becomes vandalism {{em|only}} if it continues after the copyrighted nature of the material and relevant policy restricting its use have been communicated to the user.


===Warning templates=== ===Edit summary vandalism===
Making offensive edit summaries in an attempt to leave a mark that cannot be easily expunged from the record (edit summaries cannot simply be "reverted" and require ] if they have to be removed from a page's history). Often combined with malicious account creation.
Note that ] need not be used sequentially. If the edit is ], consider using {{tl|blatantvandal}} or starting with {{tl|test2}}. For continuing severe vandalism, {{tl|test3}} may be skipped and a {{tl|test4}} given straight after a test2. If, however, you are ], always start with {{tl|test}}. For extreme or extensive cases of vandalism committed by users with who have received no prior warnings, {{tl|test4im}} may be used. The <nowiki>~~~~</nowiki> in the templates below cause the time and your signature to be added to the warning.


===Format vandalism===
;<nowiki>{{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> (use if an edit appears to have possibly not been an intentional act of vandalism): <!-- begin:template:test-->{{test}}<!-- end:Template:Test -->
Changing the formatting of a page unreasonably and maliciously. But many times, editors might just make an unintended mistake or are testing how the wikicode works. Sometimes it might be a bug in the Misplaced Pages software. Some changes to the format are not vandalism, but rather either good faith edits of editors who don't know the guidelines or simply a different opinion on how the format should look, in which case it is just a disputed edit.
;<nowiki>{{subst:</nowiki>]<nowiki>}} or {{subst:</nowiki>]<nowiki>}} or {{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> (use if an edit is clearly vandalism):
{{blatantvandal}}<!-- Template:Blatantvandal (First warning for blatant vandalism) -->
;<nowiki>{{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> : {{test2}}<!-- Template:Test2 (second level warning) -->
;<nowiki>{{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> (a variant suitable for vandalism that consists of blanking text) : {{test2a}}<!-- Template:Test2a (Second level warning) -->
;<nowiki>{{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> : {{test3}}<!-- Template:Test3 (Third level warning) -->
;<nowiki>{{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> : {{test4}}<!-- Template:Test4 (Fourth level warning) --><br><br><br>
;<nowiki>{{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> (used as a first warning for extreme cases of vandalism) : {{test4im}}<!-- Template:Test4im (First warning for serious cases of vandalism) --> <br><br>


===]===
Alternatively, you can use:
Deliberate attempts to circumvent enforcement of Misplaced Pages policies, guidelines, and procedures by causing bad faith edits to go unnoticed. Includes marking bad faith edits as minor to get less scrutiny, making a minor edit following a bad faith edit so it won't appear on all watchlists, recreating previously deleted bad faith creations under a new title, use of the {{tl|construction}} tag to prevent deletion of a page that would otherwise be a clear candidate for deletion, or use of ].


===Hidden vandalism===
;<nowiki>{{subst:</nowiki>]<nowiki>|PageName}} ~~~~</nowiki>
Any form of vandalism that makes use of embedded text, which is not visible to the final rendering of the article but visible during editing. This includes link vandalism, or placing malicious, offensive, or otherwise disruptive or irrelevant messages or spam in hidden comments for editors to see.
;<nowiki>{{subst:</nowiki>]<nowiki>|PageName}} ~~~~</nowiki>
;<nowiki>{{subst:</nowiki>]<nowiki>|PageName}} ~~~~</nowiki>
;<nowiki>{{subst:</nowiki>]<nowiki>|PageName}} ~~~~</nowiki>
;<nowiki>{{subst:</nowiki>]<nowiki>|PageName}} ~~~~</nowiki>
;<nowiki>{{subst:</nowiki>]<nowiki>|PageName}} ~~~~</nowiki>
;<nowiki>{{subst:</nowiki>]<nowiki>|PageName}} ~~~~</nowiki>


===]===
to explicitly state which articles were vandalized (suffix -n stands for named) and to add your signature. For example:
;<nowiki>{{subst:test-n|France}} ~~~~</nowiki> : {{test-n|France}}<!-- Test-n (first level warning) -->


<span id="VDHOAXES"></span>Deliberately adding falsities to articles, particularly to ], with hoax information is considered vandalism.
Additional warning templates are listed ]
The "]" causes the template text to be pasted into the talk page as if you had typed it out, instead of leaving <nowiki>{{subst:test}}</nowiki> visible when editing the page. This makes the messages more personal to the user, and thus, more friendly. Also, if someone vandalizes the template, then the vandalism will not affect every page that uses the text from the template.
'''If the vandal strikes again, list them at ]'''. The blocking admin leaves this on the vandal's talk page:


===Image vandalism===
;<nowiki>{{subst:</nowiki>]<nowiki>}} ~~~~</nowiki> : {{test5}}<!-- Template:Test5 -->
Uploading shock images, inappropriately placing explicit images on pages, or simply using any image in a way that is disruptive. Please note though that ] and that explicit images may be uploaded and/or placed on pages for legitimate reasons (that is, if they have encyclopedic value).


===Link vandalism===
You may also write your own message to the user. Remember to sign and timestamp your warnings by leaving four tildes (like this: <nowiki>~~~~</nowiki>).
Adding or changing internal or external links on a page to disruptive, irrelevant, or inappropriate targets while disguising them with mislabeling.


===Trace IP Address=== ===Page creation, illegitimate===
Creating new pages with the sole intent of malicious behavior. It also includes ] (articles written to disparage the subject), ] and other intentionally inaccurate pages. There are many other types of pages that merit deletion, even ], but which are not vandalism. ] sometimes create test pages containing ] or even autobiographies, and doing so is not vandalism; such pages can also be moved to become their sandbox or userpage. Pages on non-notable topics are not vandalism. ], and ], are not vandalism, but frequently happen and often lead to editors being blocked. It's important that people creating inappropriate pages be given appropriate communication; even if they aren't willing to edit within our rules, they are more likely to go away quietly if they understand why their page has been deleted.
Also, consider '''tracing the IP address'''. Find owners by using:
* (North America)
* (Europe, the Middle East and Central Asia)
* (Asia Pacific)
* (Latin American and Caribbean)
* (Africa)


===Page lengthening, illegitimate===
(If an address is not in one, it will probably be in another registry.) Then add <nowiki>{{vandalip|Name of owner}}</nowiki> to the talk pages of users who vandalize.
Adding very large (measured by the number of ]s) amounts of bad faith content to a page so as to make the page's load time abnormally long or even make the page impossible to load on some computers without the browser or machine crashing. Adding large amounts of good faith content is not vandalism, though prior to doing so, one should consider if splitting a long page may be appropriate (see ]).


===Page-move vandalism===
If an IP address continues to vandalise and is registered to a school or other kind of responsive ISP, consider listing it on ]. Follow the instructions there and read ] to see if it applies. If it does, list it.
{{Policy shortcut|WP:MOVEVANDAL|WP:PAGEMOVEVANDAL|WP:MOVEVAND}}
Changing the names of pages to disruptive, irrelevant, or otherwise inappropriate names. Only ] users can move pages. Because of this, vandals of this variety will often create "sleeper" accounts to gain autoconfirmed status.


== Types of vandalism == ===Redirect vandalism===
] or changing the target of redirect pages to other pages that are vandalism, nonsense, promotional, non-existent pages, or attack pages. This also applies when a redirect or its title is created only to disparage its subject. Pages that redirect to non-existent or deleted pages are also applied with ].
These are the most common forms of vandalism on Misplaced Pages:


===Reverting to vandalism===
;Blanking: Removing all or significant parts of articles (sometimes replacing the removed content with profanities) is a common vandal edit.
Reverting edits to the latest revisions that are nonsense, promotional, personal attacks, and/or harassment (except for when done by mistake).
;]: Adding inappropriate external links for advertisement and/or self-promotion. Note that this applies only to placing links on numerous and/or unrelated pages. Adding self-promotional links to a few related articles may be inappropriate, but is not vandalism.
;VandalBot: A ] that attempts to vandalize or spam ''massive'' numbers of articles (hundreds or thousands), blanking, or adding commercial links. Another type of VandalBot appears to log on repeatedly with multiple random names to vandalize an article.
;Childish vandalism: or . (The ] is an example of this type.)
;Silly vandalism: Users will sometimes create ] or replace existing articles with plausible-sounding nonsense, or add to existing articles (this includes ]). A better place for content that is intentionally of a joking or nonsensical nature is the or ] (Bad Jokes and Other Deleted Nonsense).
;Sneaky vandalism: Vandalism which is harder to spot. Adding misinformation, changing dates or making other sensible-appearing substitutions and typos.
;Attention-seeking vandalism: Adding insults, using offensive usernames, replacing articles with jokes etc. (see also ])
;User page vandalism: Replacing ]s with insults, profanity, or nonsense. A policy was proposed to prevent anonymous users from modifying user pages (see ]), but it has been rejected by the community (see also ]).
;Image vandalism: Uploading provocative images, inserting political messages, making malicious animated GIFs, ''etc.'' Repeatedly uploading images with no source and/or license information after notification that such information is required may also constitute vandalism.
;Abuse of tags: Bad-faith placing of {{tl|afd}} or speedy-deletion tags on articles that do not meet such criteria, or deceptively placing protected-page tags on articles.
;Template vandalism: Any vandalism to templates. Examples include blanking the template, adding an image to the template which is unrelated to its use, et cetera. Edits which cause a template to display improperly are not vandalism if the mistake was unintentional.
;Page move vandalism: Moving pages to offensive or nonsense names. The most infamous example was ]. However, Misplaced Pages now only allows users with 25 edits or above to make page moves, and the reason must be stated.
;Redirect vandalism: Redirecting articles or talk pages to offensive articles or images. One example is the autofellatio redirect vandal. Some vandals will try to redirect pages to nonsense titles they create this way. This variation is usually performed by vandals whose accounts are too new to move pages. It is also often done on pages that are protected from moves.
;Link vandalism: Rewriting links within an article so that they appear the same, but point to something completely different or ridiculous (e.g. ]).
;Avoidant vandalism: Removing <nowiki>{{afd}}</nowiki>, {{tl|copyvio}} and other related tags in order to conceal deletion candidates or avert deletion of such articles. Note that this is often mistakenly done by new users who are unfamiliar with *fD procedures and such users should be given the benefit of the doubt and pointed to the proper page to discuss the issue.
;Random character vandalism: Replacing topical information with random characters, or just adding random characters to a page. "aslkdjnsdagkljhasdlkh," for example. Be careful: only in extended cases is this vandalism; it could also potentially be a new user test.
;Changing people's comments: Editing signed comments by another user to substantially change their meaning (e.g. turning someone's vote around), except when ] (which is somewhat controversial in and of itself). Signifying that a comment is unsigned is an exception. e.g. ''(unsigned comment from user)''
<div id="tags">
;Improper use of dispute tags: ] tags are an important way for people to show that there are problems with the article. Do not remove them unless you are sure that all stated reasons for the dispute are settled. As a general rule, do not remove other people's dispute tags twice during a 24 hour period. Do not place dispute tags improperly, as in when there is no dispute, and the reason for placing the dispute tag is because a suggested edit has failed to meet consensus. Instead, follow ] and accept that some edits will not meet consensus. Please note that placing or removal of dispute tags does ''not'' count as simple vandalism, and therefore the reverting of such edits is not exempt from the ].
;Talk page vandalism: Deleting the comments of other users from article Talk pages, aside from removal of ], or deleting entire sections of talk pages, is generally considered vandalism. ] is often considered legitimate, and it is considered acceptable to archive an overly long Talk page to a separate file and then remove the text from the main Talk page. '''The above does not apply to the user's own Talk page, where users generally are permitted to remove and archive comments at their discretion.''' However, the removal from talk pages of '''legitimate''' warnings given within a recent time frame is discouraged. If users remove legitimate warnings from their talk pages, the warnings may be restored and/or additional warnings about removing warnings added. Users who remove such messages disruptively may be blocked and have their talk pages protected. Furthermore, removing legitimate comments without responding may be considered ] or become an issue for arbitration, especially where the intention of the removal is to conceal information (e.g. previous warnings) or mislead other editors.
;Official policy vandalism: Deleting or altering part of a Misplaced Pages official policy with which the vandal disagrees, without any attempt to seek consensus or recognize an existing consensus. '''Improving or clarifying policy wording in line with the clear existing consensus is not vandalism.'''
;Copyrighted material vandalism: '''Knowingly''' using copyrighted material on Misplaced Pages in ways which violate ] is vandalism. Because users may be unaware that the information is copyrighted, or of Misplaced Pages policies on how such material may and may not be used, such action ''only'' becomes vandalism if it continues after the copyrighted nature of the material and relevant policy restricting its use have been communicated to the user.
;Account creation vandalism: Creating accounts with deliberately offensive terms in the username is considered vandalism, whether the account is used or not. This also includes making accounts with nomenclature similar to usernames of known vandals; ] is the most infamous example, however more commonly seen today is a vandal who creates accounts similar to the sentence "I'm the motherfucking juggernaut bitch".


== What vandalism is not == ===Silly vandalism===
Adding ], ], or ] to pages; creating nonsensical and obviously unencyclopedic pages, etc. This is one of the most common forms of vandalism. However, the addition of random characters to pages is often characteristic of an editing test and, though impermissible, may not be malicious.
Although sometimes referred to as such, the following things are not vandalism and are therefore treated differently:


==={{anchor|Sneaky vandalism}}Subtle vandalism===
;New User Test: New users who discover the "Edit this page" button sometimes want to know if they can really edit any page, so they write something inside just to test it. This is not vandalism! On the contrary, these users should be warmly greeted, and given a reference to the Sandbox (e.g. using the ]) where they can keep making their tests. (Sometimes they will even revert their own changes; in that case, place the message {{tl|selftest}} on their talk page.)
{{Policy shortcut|WP:SNEAKY}}
;Learning Wiki Markup and Manual of Style: Some users require some time to learn the wiki-based markup, and will spend a little time experimenting with the different ways to make external links, internal links, and other special characters. Rather than condemning them as vandals, just explain to them what our standard style is on the issue in hand — perhaps pointing them towards our documentation at ], and the like.
Vandalism that is harder to spot, or that otherwise circumvents detection, including adding plausible misinformation to articles (such as minor alteration of facts or additions of plausible-sounding hoaxes), hiding vandalism (such as by making two bad edits and reverting only one), simultaneously using ] or IP addresses to vandalize, abuse of maintenance and deletion templates, or reverting legitimate edits with the intent of hindering the improvement of pages. Impersonating other users by signing an edit with a different username or IP address also constitutes sneaky vandalism, but take care not to confuse this with appropriately correcting an unsigned edit made by another user. Some vandals even follow their vandalism with an edit that states "Rv vandalism" or similar in the ] in order to give the appearance the vandalism was reverted.
;]: The neutral point of view is a difficult policy for many of us to understand, and even Misplaced Pages veterans occasionally accidentally introduce material which is non-ideal from an NPOV perspective. Indeed, we are all affected by our beliefs to a greater or lesser extent. Though inappropriate, this is not vandalism.
;]: Wikipedians often make sweeping changes to articles in order to improve them — most of us aim to be bold when updating articles. While having large chunks of text you've written deleted, moved to the talk page, or substantially rewritten can sometimes feel like vandalism, it should not be confused with vandalism.
;Mistakes: Sometimes, users will insert content into an article that is not necessarily accurate, in the belief that it is. By doing so in good faith, they are trying to contribute to the encyclopedia and improve it. If you believe that there is inaccurate information in an article, ensure that it is, and/or discuss its factuality with the user who has submitted it.
;]: While nonsense can be a form of vandalism, sometimes honest editors may not have expressed themselves correctly (there may be an error in the syntax, particularly for wikipedians who use English as a second language). This is a type of mistake. Sometimes connection errors unintentionally produce the appearance of nonsense. In either case, ].
;Bullying or Stubbornness: Some users cannot come to agreement with others who are willing to talk to them on an article's talk page, and repeatedly make changes opposed by everyone else. This is a matter of regret — you may wish to see our ] to get help. However, it is not vandalism.
;Harassing or Making Personal Attacks: We have a clear policy on Misplaced Pages of no personal attacks, and harassing other contributors is not allowed. Some forms of harassment are also clear cases of vandalism, such as home page vandalism, or a personal attack on another editor inserted into an article. However, harassment in general is not vandalism.


===]===
If a user treats situations which are not clear vandalism as vandalism, then he or she is actually ''damaging'' the encyclopedia by driving away potential editors.
Adding or continuing to add spam external links is vandalism if the activity continues after a warning. A spam external link is one added to a page mainly for the purpose of promoting a website, product or a user's interests rather than to improve the page editorially.

===Talk page vandalism===
{{Policy shortcut|WP:TPV}}
{{anchor|Tpv}}
Illegitimately removing or editing other users' comments, especially in closed discussions, or adding offensive comments. However, it is acceptable to blank comments constituting vandalism, ], or ] or a ]. It is also acceptable to identify an unsigned comment. Users are also ] to remove comments from their own user talk pages. A policy of prohibiting users from removing warnings from their own talk pages was ] on the grounds that it would create more issues than it would solve.

===Template vandalism===
Modifying the wiki language or text of a ] in a harmful or disruptive manner. This is especially serious, because it will negatively impact the appearance of multiple pages. Some templates appear on hundreds or thousands of pages, so they are ] to prevent vandalism.

===User and user talk page vandalism===
Unwelcome, illegitimate edits to another person's user page may be considered vandalism. User pages are regarded as within the control of their respective users and generally should not be edited without the permission of the user to whom they belong. See ]. This is why there is an ]. Related to this is ].

===]===
A ] that attempts to vandalize or add spam to a mass of pages.

==<span id="NOT"></span>What is <em>not</em> vandalism==
{{policy shortcut|WP:VANDNOT|WP:NOTVAND|WP:NOTV|WP:NOTVANDALISM|WP:NOTVAN}}
Although at times the following situations may be referred to colloquially as "vandalism", they are not usually considered vandalism within the context of Misplaced Pages. However, each case should be treated independently, taking into consideration whether or not the actions violate Misplaced Pages policies and guidelines. If an editor treats situations which are not clearly vandalism as such, it may harm the encyclopedia by alienating or driving away potential editors.

===]===
Bold edits, though they may precede consensus or be inconsistent with prior consensus, are not vandalism unless other aspects of the edits identify them as vandalism. The Misplaced Pages community encourages users to be bold and acknowledges ].

===]===
Uploading or using material on Misplaced Pages in violation of Misplaced Pages's copyright policies is prohibited, but is not vandalism unless the user does so maliciously or fails to heed warnings. It is at least as serious an issue as vandalism and persistent offenders will ultimately get blocked, but it is well worth spending time communicating clearly with those who violate copyright as they are far more likely to reform than vandals or spammers.

==={{anchor|disruptive editing}}] or stubbornness===
Some users cannot come to an agreement with others who are willing to talk to them about an editing issue, and repeatedly make changes against consensus. ] is not vandalism and should not be dealt with as such. ] may help. See also: ].

Starting a ] in bad faith is disruptive editing, but is not vandalism. However, misusing deletion template messages ''with no intention'' to start a deletion process is vandalism by ].

In short, all vandalism is disruptive editing, but not all disruptive editing is vandalism.

===] omission===
The ] is important in that it helps other editors understand the purpose of your edit. Though its use is not required, it is strongly recommended, even for minor edits, and is considered proper ]. Even a brief edit summary is better than none. However, not leaving edit summaries is not considered vandalism.

===Editing tests by experimenting users===
{{shortcut|WP:TESTEDIT}}
Users sometimes edit pages as an experiment. Such edits, while prohibited, are treated differently from vandalism. These users should be warned using the uw-test series of ], or by a talk page message including, if appropriate, a welcome and referral to the ], where they can continue to make test edits without being unintentionally disruptive. Registered users can also create their own sandboxes as a ]. If a user has made a test edit and then reverted it, consider placing the message {{tl|uw-selfrevert}}, on their talk page. Pages created as test edits outside of userspace may be deleted under ]. Editing tests are considered vandalism only when a user continues to make test edits despite receiving numerous warnings.

===] or ]===
Personal attacks and harassment are not allowed. While some harassment is also vandalism, such as user page vandalism, or inserting a personal attack into an article, harassment in itself is not vandalism and should be handled differently.

===Incorrect ] and ]===
Inexperienced users are often unfamiliar with Misplaced Pages's formatting and grammatical standards, such as how to create internal and/or external links or which words should be bolded or italicized, etc. Rather than label such users as vandals, just explain to them what the standard style would be for the issue at hand, perhaps pointing them towards the documentation at ], and the like.

===]===
Some users are not familiar with ] or policies and may start editing it as if it were a different medium—such as a forum or blog—in a way that it ] or borderline vandalism to experienced users. Although such edits can usually be reverted, it should not be treated as vandalism.

===]===
A user who, in good faith, adds content to an article that is factually inaccurate in the belief that it is accurate, is trying to contribute to and improve Misplaced Pages, not vandalize it. If you believe inaccurate information has been added to an article in good faith, remove it once you are certain it is inaccurate, and consider discussing its factuality with the user who has added it.

===]===
The neutral point of view policy is difficult for many of us to understand. Even Misplaced Pages veterans occasionally introduce material which is not ideal from an ] perspective. Indeed, we are all affected to a greater extent than we estimate by our beliefs. Though the material added may be inappropriate, it is not vandalism in itself.

===]===
While intentionally adding nonsense to a page is a form of vandalism, sometimes honest editors may not have expressed themselves correctly (e.g. there may be an error in the ], particularly for Wikipedians who use ]). Also, connection errors, browser extensions, or ] can unintentionally produce the appearance of nonsense or malicious edits. In either case, ].

===]===
Editors are encouraged to ]. However, making edits to ] pages, such as this one, does require some knowledge of the ] on the issues. If people misjudge consensus, it would not be considered vandalism; rather, it would be an opportunity to discuss the matter with them, and help them understand the consensus.

===Reversion or removal of unencyclopedic material===
Even ] material may not belong on Misplaced Pages, and removing such content when it is inconsistent with ] is not vandalism.

Contentious material about living persons that is unsourced or poorly sourced—whether the material is negative, positive, neutral, or just questionable—should be removed immediately and without waiting for discussion, per ].

Make sure that the removed content is consistent with Misplaced Pages's standards before restoring it or treating its removal as vandalism.


==How to spot vandalism== ==How to spot vandalism==
{{Policy shortcut|WP:HTSV|WP:SPOTVAN}}
The best way to detect vandalism is through ] or keeping an eye on your ]. Any vandalism found should be ]; remember to include any good edits that have happened since then!
Useful ways to detect vandalism include:
* ], using the ] link with filters to spot suspicious edits
* Keeping an eye on your ]
* The ] of an article can be checked for recent suspicious edits. Article size, as given in bytes, usually increases slightly with time, so a sudden large decrease may indicate a ]. Similarly, if an article's size change is inappropriately large for the stated edit summary (e.g. "Fixing typo" while removing 100 bytes), it is an indication of vandalism.
{{quote box|width=23em|Even in Rome itself, the City of the Popes, the vandalism of the ignorant wrought dreadful havoc.
|salign=right|source=Rev. ], ''History of the Catholic Church From the Renaissance to the {{nobr|French Revolution}}''}}
In all the three methods above, examples of suspicious edits are those performed by IP addresses, ], or obviously improvised usernames. A good way to start is to click on every edit in watchlists, histories etc. with the least suspicion of being vandalism. Increased experience will probably give a sense of which edit descriptions are worth to check further and which may likely be ignored. Some descriptions like "Fixed typo" may be vandalism as that is one of the default edit summaries. IP editors should not be approached with the assumption that they are vandals. Although many vandals do vandalize without registering an account, there are many IP editors who are ]. Always read the actual changes made and judge on that, rather than who made the changes or what was entered in the ].
* See the ] pages for ], ], ], ] and ] to detect test edits. (See also {{tl|toolbar experiments}}).
* The ] can also help users spot vandalism.
* Viewing the ] or this version if the regular abuse log is cluttered by spambots.
* Watching for edits ] by the abuse filter. However, many tagged edits are legitimate, so they should not be blindly reverted. That is, do not revert without at least reading the edit.
* Plausible, subtle changes not supported by sources or by text elsewhere in the article, particularly without an edit summary, may suggest vandalism. Changing numbers, sometimes by 1, is a common stealth tactic.


==How to respond to vandalism==
==Related pages==
{{anchor|Handling}}
*]
{{policy shortcut|WP:RVAN}}
*]
*]
*]
*]


Upon discovering vandalism, ] such edits, using the undo function or an ]. Once the vandalism is undone, ] the vandalizing editor. Notify ] at the ] of editors who continue to vandalize after multiple warnings, and administrators should intervene to preserve content and prevent further disruption by ] such editors. Users whose ] may be blocked indefinitely without warning.
]
]


If you see vandalism on a list of changes (such as your ]), then revert it immediately. You may use the "undo" button (and the automatic edit summary it generates), and mark the change as minor. It may be helpful to check the ] to determine whether other recent edits by the same or other editors also represent vandalism. Repair all vandalism you can identify.
== See also ==
*] - essay on the motivation of a vandal
* ] — for quick action in clear cases
* ] — for reporting abusive IP addresses to ISPs
* ] — for more complex abuse, or to request a watch on a user/page.
* ] — a grid of templates that may be used on user talk pages
* ]
* ]
* ]
* ]
* ]
* ] - essay on the relationship between this policy and the ] policy.


For a new article, if all versions of the article are pure vandalism, mark it for {{strong|]}} by tagging it with {{tlx|Db-g3}}.
==External links==
{{col-begin}}
{{col-2}}
===Attitudes and approaches to conflict===
*]
*]
*]
*]
*]
*]
*]
*]
*]
*
______
*]
*]
*]
*]
*]
______
*
*
*]
*
{{col-2}}
*]
*]
*]
*]
*]
*]
*]


To make vandalism reverts easier you can ask for the ] to be enabled for your registered Misplaced Pages account. This feature is only for reverting vandalism and other obvious disruption, and lets you revert several recent edits with a single click. See ].
===People and roles===
*]
*]
*]
*]
*]
*]


If you see that a user has added vandalism you may also check their {{strong|]}}. If most or all of these are obvious vandalism you may report the user immediately at the ], though even in this case you may consider issuing a ] first, unless there is an urgent need to ] the user. Otherwise, you can leave an appropriate warning on the user's {{strong|]}}. Remember that any editor may freely remove messages from their own talk page, so they might appear only in the talk history. If a user continues to cause disruption after being warned, report them also at the Administrator intervention against vandalism noticeboard. An ] will then decide whether to block the user.
===Behaviors and actions===
*]
*]
*]
*]
*]
*]
*]
{{col-end}}
]


For repeated vandalism by an ] it is helpful to trace the IP address (e.g. http://whois.domaintools.com/) and add {{tlx|whois|{{var|Name of owner}}}} to the user talk page of the address. If it appears to be a ], add {{tlx|SharedIP|{{var|Name of owner}}}} or {{tlx|Shared IP edu|{{var|Name of owner}}}}. The ''OrgName'' on the IP trace result should be used as the <code>{{var|Name of owner}}</code> parameter in the above three templates.
]

]
===Undetected vandalism===
]
Sometimes vandalism takes place on top of older, undetected vandalism. With undetected vandalism, editors may make edits without realizing the vandalism occurred. This can make it harder to detect and delete the vandalism, which is now hidden among other edits. Sometimes ] try to fix collateral damage and accidentally make things worse. Check the ] to make sure you're ] to a "clean" version of the page. Alternatively, if you can't tell where the best place is, take your best guess and leave a note on the article's ] so that someone more familiar with the page can address the issue—or you can manually remove the vandalism without reverting it.
]

]
===For beginners===
<!--]-->
{{See also|Misplaced Pages:Cleaning up vandalism}}
]
For relatively inexperienced Wikipedians, use these simple steps to quickly respond to what you consider vandalism. This is essentially an abridged version of the above page.
]

]
# {{strong|Assess}} whether the edit was made in ]. If in good faith, it is {{em|not}} vandalism as such, so question the accuracy of information on the talk page or add an ], such as a "{{tl|dubious}}" tag, to the disputed edit. If it is in bad faith, then it {{em|is}} vandalism and you may take the appropriate steps to remove it.
]
# {{strong|Revert}} the vandalism by viewing the page's history and selecting the most recent version of the page prior to the vandalism. Use an edit summary such as 'rv/v' or 'reverted vandalism' and click on 'Publish changes'.
]
# {{strong|Warn}} the vandal. Access the vandal's talk page and warn them. A simple note explaining the problem with their editing is sufficient. If desired, a ] exist to simplify the process of warning users, but {{strong|these templates are not required}}. These templates include
]
#* Level one: {{tls|uw-vandalism1}} This is a gentle caution regarding unconstructive edits; it encourages new editors to use a sandbox for test edits. This is the mildest warning.
]
#* Level two: {{tls|uw-vandalism2}} This warning is also fairly mild, though it explicitly uses the word 'vandalism' and links to this Misplaced Pages policy. It is the first to warn that further disruptive editing or vandalism may lead to a block, however it uses the wording "loss of editing privileges" rather than "block".
]
#* Level three: {{tls|uw-vandalism3}} This warning is sterner. It is the first to warn that further disruptive editing or vandalism may lead to a block while actually using the word "block".
]
#* Level four: {{tls|uw-vandalism4|}} This is the sharpest vandalism warning template, and indicates that any further disruptive editing may lead to a block without warning.
]
#* Level four-im: {{tls|uw-vandalism4im|}} This warning template should be used only in the worst conditions of vandalism. It indicates that this is the only warning the target will receive, and that further disruptive edits will result in a block without warning.
]
# {{strong|Watch}} for future vandalism from the vandal by checking the user's contributions. If bad faith edits continue, revert them and warn them again, letting the users know that they can be blocked. Note that it is {{em|not}} necessary to use all four warning templates in succession, nor is it necessary to incrementally step through warnings.
]
# {{strong|Report}} vandals that continue their behavior after being warned to ]. While not strictly required, administrators there are most likely to respond rapidly to requests which include at least two warnings, culminating in the level-four "last chance" template.
]

]
===Template and CSS vandalism===
]
If no vandalizing edits appear in the page's edit history, or the vandalism obscures the page tabs so you can't easily access the history or edit the page, it is probably ] or ] vandalism. These are often not difficult to fix, but can be confusing.
]

]
To access the page history or edit the page when the "View history" or "Edit" tabs are inaccessible, use ]. You can also access the history through a ] if you're using one, or from your ] if you are ]), or from your ] if you have edited the page. Or, enter the ] manually into the ] of your browser: it will take the form <code>https://<nowiki />en.wikipedia.org/{{var|Name_of_article}}?action=edit</code> or <code>https://<nowiki />en.wikipedia.org/{{var|Name_of_article}}?action=history</code>.
]

]
If vandalizing edits do not appear in the page history, the vandalism is likely in a ] template instead of the page itself. To find the template page, edit the article (using ] if necessary); toward the bottom of the edit page is a list of all templates transcluded into the page. Look for vandalism in the transcluded templates not ]. Alternatively, look for {{tlf|{{var|Template name}}}} or {{tlf|{{var|Template name}}|{{var|parameter{{nbsp}}...}}}} in the text, approximately where the vandalism appears, then go to the page Template:{{var|Template name}} and revert any vandalism. When you return to the original page, the vandalism should be gone, though you may need to ] the page.
]

]
===Image vandalism===
]
] are occasionally used for vandalism, such as by placing shock or explicit images where they should not be. When an image has been created exclusively for vandalism, it can be requested for speedy deletion: under criterion ] if hosted on Misplaced Pages or as ] if hosted on ] (a file repository for ] projects). When an image is used for vandalism due to its explicit nature but has legitimate encyclopedic uses (Misplaced Pages ]) or is hosted on Commons and has legitimate uses on other projects, it can be requested for being added to the ], which precludes its addition on any page except those specified.
]

]
==How not to respond to vandalism==
]
{{Policy shortcut|WP:NORESVAND}}
]
* Do not nominate a page for ] because it is being vandalized. If a page is persistently vandalized, consider requesting ] of the page at ].
* ]. Fanning the fire will only serve to make the situation worse. Similarly, ]. If someone is doing something they know is wrong, insulting them over it is likely to make them vandalize more, just to get that reaction. Furthermore, ], it is ], and ]. Instead, report them to the ] if they continue.
* ]. In particular, this word should not be used to refer to any contributor in good standing nor to any ]. This is because if the edits were made in good faith, they are ]. Assume good faith yourself; instead of calling the person who made the edits a "vandal", discuss your concerns with them. Comment on the content and substance of the edits, instead of making ].

==Warnings==
{{WarningsSmall|align=center}}
{{Policy shortcut|WP:WARNVAND}}
The purpose of warning a user who has vandalized is to inform the user that the user's conduct is abusive and prohibited, and seek the user's compliance. Not all that appears to be vandalism is in bad faith, and a warning can politely advise and correct users unaware of the nature of their actions. A warning may even dissuade a user acting in bad faith from continuing, particularly as the warnings escalate and the user is informed of the consequences of continuing.

Warning a user for vandalism is generally a prerequisite to administrator intervention. Because of this, users should be warned for each and every instance of vandalism.

===How to warn vandalizing users===
A list of user warning templates, with descriptions and instructions for their use, is at ]. In addition to a series of user warning templates for vandalism, there are series for specific types of vandalism. Use the most specific user warning template for the conduct. The existence of these templates is intended as a convenience, and {{strong|their use is not required}}. A specifically tailored note, written personally and directly addressing the problematic behavior is equally as acceptable as a form of warning, and in many cases, will often result in better engagement with the user in question.

] (such as that the user is simply unaware of the policies and guidelines) unless it is clear that the user is deliberately harming Misplaced Pages from the outset, for instance in cases of abusive, vulgar, or juvenile vandalism.

If you do choose to use warning templates, please choose templates that are appropriate to the type and level of problem in question. If edits are questionable, but not clearly vandalism, consider using lower-level templates (level 1 or 2) and wait for a few further contributions to see if the other editor responds or changes their behavior. If the behavior continues, or if it is clear the edits are in bad faith from the outset, the use of a higher-level template (level 3 or 4) may be appropriate. If, after receiving multiple warnings, the behavior persists past the point where good faith can be extended, or it becomes clear that the user has {{em|had}} the opportunity to notice they have been warned, and they {{em|still}} persist with the problematic behavior, consider reporting them to ].

===Administrator response to vandalism===

Response from administrators at the vandalism noticeboard varies depending on the type of vandalism and the specifics of the report. Keep in mind:
* Admins are unlikely to block a user who has not been warned at all, or who has been warned, but has stopped editing since being warned. It must be clear that the user has been told to stop vandalizing, and still persists despite such warnings, except for egregious cases.
* Reports of vandalism from registered accounts are handled differently than that from IP users, and reports from newly registered accounts are handled differently from accounts of experienced Misplaced Pages users.
** IP addresses may or may not be kept by the same person for long periods of time; a dynamic address which appears to have stopped vandalizing will probably not be blocked, while one that {{em|is}} actively vandalizing will likely receive a short (1–2 day) block. If there is evidence that an IP address is being used by the same person over a long period of time to repeatedly vandalize Misplaced Pages, or if it is clear the IP address is being used by multiple people to vandalize Misplaced Pages (such as a school-based IP, which can sometimes attract lots of juvenile vandalism over long periods of time from many different people) then an administrator may block the IP for a longer time period (several months to a year). IP addresses are almost never blocked indefinitely.
** Brand-new accounts who repeatedly vandalize despite multiple warnings are usually blocked indefinitely, especially when there is no history of quality editing on the account.
** Reports which involve experienced Misplaced Pages users rarely result in blocks for vandalism, as these reports are usually mislabeling other problematic behavior (such as misrepresenting sources, or removing text, or edit warring) as vandalism. The vandalism noticeboard is not designed to litigate disputes or to investigate complex behavior problems. Instead, other noticeboards such as ] or ] are more appropriate to deal with those issues.
* Check back in to the vandalism noticeboard to see how your report has been dealt with. If an administrator declines to block someone you report, they will always leave a note explaining why they did not respond as you requested. Often, this does not mean the person you reported is behaving properly, or should not be dealt with, but merely that the {{em|mechanisms}} of the vandalism noticeboard are not well suited for handling many types of reports. Consider taking the issue up at a more appropriate noticeboard, which has been tailored to the specific type of problem you are seeing. Other times, a report is declined for being stale (blocks to abandoned accounts, or to IP addresses which have been dormant for some time are rarely done), or to the admin being unable to easily identify the edits as vandalism.
* If the vandalism in question is "sneaky vandalism", is being committed by a person who was ], or requires in-depth and direct knowledge of a prior problem, consider taking the report to ] instead. There are hundreds of Misplaced Pages administrators, and many of them are unfamiliar with the intricacies of past cases. Unless it is the sort of vandalism that needs no explanation at all, it should be taken elsewhere and not ].

===Reminding responding users to correctly warn===
Because warnings for vandalism are generally a prerequisite to administrator intervention, it is important that users responding to vandalism warn vandalizing users. To inform responding users of this responsibility, use the user warning template {{tl|uw-warn}}.

Likewise, incorrect use of user warning templates, even if well-intended, should be identified to the mistaken user. The {{tl|uw-tempabuse}} series of user warning templates may be used, but a detailed talk page message is better.

==Tracing IP addresses==
{{Policy shortcut|WP:WHOIS|WP:TRACEIP}}
The owners of ]es can be found using:
* (North America)
* (Europe, the Middle East and Central Asia)
* (Asia Pacific)
* (Latin American and Caribbean)
* (Africa)
*
*
*
*
If an address is not in one registry, it will probably be in another.

===Identifying associated IP addresses===

<!-- Useful though possibly overly advanced options, trying to strike a balance between "useful" and "off into the weeds". -->

If you're trying to determine whether a {{em|set}} of IP addresses involved in vandalism is related, a command-line WHOIS query will generally list this information, or can be shown using the ] ] asn.routeviews.org reverse ] look-up to find the ] and ] for a set of IP addresses. This can be done using ].

A ] will typically return NetRange, CIDR, NetName, NetHandle, and OriginAS, all of which identify specific network spaces. Data and labeling vary considerably by WHOIS registrar.

The Routeviews data is far more uniformly structured and returns ASN and CIDR as a reverse-lookup TXT query result. It is more useful and faster than WHOIS when checking multiple IP addresses and can be scripted or automated.

CIDR identifies a set of related addresses ("network space") and ASN identifies an ]—that is, a single administrative entity with control over multiple (and often very many) addresses. Some (though not all) abuse from multiple sources does come from such unified spaces—possibly corresponding to a set of hosts within a single facility.

Abuse originating in a short period of time from different IP addresses within the same CIDR or ASN may indicate a dedicated non-distributed attack, as opposed to a ].

===Proxies, VPNs and Tor exit nodes===

It's possible that a user's source location is being masked by routing traffic through a ], ] or the ]. Such addresses typically serve many, not just one, person, and though they can be valid present challenges when used for abuse.

A proxy VPN is not necessarily detectable, but commercial services may be indicated by the hostname when resolving an IP address.

Users of the Tor anonymity network will show the IP address of a Tor "exit node". Lists of known Tor exit nodes are available from the Tor Project's .

==See also==
{{Misplaced Pages glossary}}
* ]
* ]
* ] – A bot specifically designed for fixing vandalism.
===Tools===
{{see also|Misplaced Pages:Cleaning up vandalism/Tools}}
* ]&nbsp;– Web-based counter-vandalism tool. (requires ] permission).
* ]&nbsp;– Cross-platform application for dealing with vandalism (requires ] permission).
* ]&nbsp;– JavaScript-based browser window for reverting vandalism. (requires ] permission).
* ] is a ] which allows you to revert vandalism on mobile.
* ]&nbsp;– Cross-platform and Java-based anti-vandalism application. Connects to a remote, non-Wikimedia server. (requires ] permission).
* ]&nbsp;– JavaScript gadget allowing reversion of vandalism from page ].
* ]&nbsp;– User-friendly Javascript-based diff browser and counter-vandalism tool (works with or without ] permissions).

===Guidelines===
* ]&nbsp;– intended to get administrator attention for obvious and persistent vandals and spammers
* ]&nbsp;– introduction to cleaning up vandalism
* ]&nbsp;– English Misplaced Pages policy
* ]&nbsp;– content guideline
* ]&nbsp;– articles that have undergone repeated vandalism - This page is inactive
* ]&nbsp;– Misplaced Pages communal patrol
* ]&nbsp;– for protection against long-term attacks
* ]&nbsp;– grid of templates for user talk page warnings and notices
* ]&nbsp;– advice for dealing with vandalism from registered accounts
* ]&nbsp;– internal project for creating a complete, standardised set of user warning templates
* ]&nbsp;– internal project for conducting research related to unconstructive edits on Misplaced Pages (currently semi-active)

===Essays===
* ]&nbsp;– essay on the differences between vandals and those who make adverse edits
* ]&nbsp;– essay on not feeding the trolls
* ]&nbsp;– essay on vandals and civility
* ]&nbsp;– essay on care, courtesy, and professionalism when performing recent changes and new pages patrols
* ]&nbsp;– essay on civility and difficult editors
* ]&nbsp;– essay on how to use warning templates carefully
* ]&nbsp;– essay on the difference between editing tests and vandalism
* ]&nbsp;– essay on assuming IP address editors are able and willing to make positive contributions
* ]&nbsp;– essay recommending not overusing page protection
* ]&nbsp;– essay on the common assumption that IP address editors are vandals
* ]&nbsp;– essay on the relationship between the Vandalism policy and the ] behavioral guideline
* ]&nbsp;– essay on "Why would anyone wish to vandalize a source of information that benefits people?"
* ]&nbsp;– essay on why vandalism will get you nowhere
* ]&nbsp;– essay on the distinction between vandals and trolls
* ]&nbsp;– one ]'s view

===]===
* ]
* ]
* ]
* ]&nbsp;– cross-wiki anti-vandalism

==Further reading==
* in wmcharts (inactive since 2019)
* {{Cite web|url=https://medium.com/pcmag-access/how-i-used-lies-about-a-cartoon-to-prove-history-is-meaningless-on-the-internet-6c88bcbc62d7|title=How I Used Lies About a Cartoon to Prove History is Meaningless on the Internet |date=15 June 2020}}

{{Misplaced Pages policies and guidelines}}

]
]
]

Latest revision as of 19:21, 16 December 2024

Policy on deliberate editing to obstruct or defeat Misplaced Pages's purpose

"WP:VANDAL" redirects here. For policies on vandalism-only accounts, see Misplaced Pages:Vandalism-only account. For the essay on the word "vandal", see Misplaced Pages:Avoid the word "vandal". For reporting instances of vandalism, see Misplaced Pages:Administrator intervention against vandalism and Misplaced Pages:Requests for page protection. For the encyclopedic article on vandalism on Misplaced Pages, see Vandalism on Misplaced Pages. Not to be confused with Misplaced Pages:Disruptive editing.
This page documents an English Misplaced Pages policy.It describes a widely accepted standard that editors should normally follow, though exceptions may apply. Changes made to it should reflect consensus.Shortcuts
This page in a nutshell: Intentionally making abusive edits to Misplaced Pages will result in blocks and/or bans.


Are you in the right place?
This page is for documenting and explaining the English Misplaced Pages policy on vandalism.


Vandalism
Dealing with vandalism
Resources and assistance
Further information
Conduct policies

On Misplaced Pages, vandalism has a very specific meaning: editing (or other behavior) deliberately intended to obstruct or defeat the project's purpose, which is to create a 💕, in a variety of languages, presenting the sum of all human knowledge.

The malicious removal of encyclopedic content, or the changing of such content beyond all recognition, without any regard to our core content policies of neutral point of view (which does not mean no point of view), verifiability and no original research, is a deliberate attempt to damage Misplaced Pages. There are, of course, more juvenile forms of vandalism, such as adding irrelevant obscenities or crude humor to a page, illegitimately blanking pages, and inserting obvious nonsense into a page. Abusive creation or usage of user accounts and IP addresses may also constitute vandalism.

Vandalism is prohibited. While editors are encouraged to warn and educate vandals, warnings are by no means a prerequisite for blocking a vandal (although administrators usually block only when multiple warnings have been issued).

Even if misguided, willfully against consensus, or disruptive, any good faith effort to improve the encyclopedia is not vandalism. For example, edit warring over how exactly to present encyclopedic content is not vandalism. Careful consideration may be required to differentiate between edits that are beneficial, edits that are detrimental but well-intentioned, and edits that are vandalism. If it is clear that an editor is intending to improve Misplaced Pages, their edits are not vandalism, even if they violate some core policy of Misplaced Pages. Mislabeling good faith edits "vandalism" can be harmful, as it makes users less likely to respond to corrective advice or to engage collaboratively during a disagreement. For that reason, avoid using the term "vandalism" unless it is clear the user means to harm Misplaced Pages; this is even true when warning a user with a user warning template. Choose the template that most closely matches the behavior you are trying to correct.

Types of vandalism

Shortcut

Vandalism on Misplaced Pages usually falls into one or more of these categories:

Abuse of tags

Bad faith placing of non-content tags such as {{afd}}, {{db}}, {{sprotected}}, or other tags on pages that do not meet such criteria. This includes baseless removal of {{policy}} and related tags.

Account creation, malicious

Creating accounts with usernames that contain deliberately offensive or disruptive terms is considered vandalism, whether the account is used or not. For Misplaced Pages's policy on what is considered inappropriate for a username, see Misplaced Pages:Username policy. See also Misplaced Pages:Sock puppetry.

Avoidant vandalism

Removing {{afd}}, {{copyvio}} and other related tags in order to conceal deletion candidates or avert deletion of such content. However, this is often mistakenly done by new users who are unfamiliar with AfD procedures and such users should be given the benefit of the doubt and pointed to the proper page to discuss the issue.

Blanking, illegitimate

For legitimate cases of blanking articles, see Misplaced Pages:Redirect § Redirects that replace previous articles. Shortcut

Removing encyclopedic content without any reason, or replacing such content with nonsense. Content removal is not considered to be vandalism when the reason for the removal of the content is readily apparent by examination of the content itself, or where a non-frivolous explanation for the removal of apparently legitimate content is provided, linked to, or referenced in an edit summary.

Blanking that could be legitimate includes blanking all or part of a biography of a living person. Misplaced Pages is especially concerned about providing accurate and unbiased information on the living; blanking may be an effort to remove inaccurate or biased material. Due to the possibility of unexplained good faith content removal, {{uw-test1}} or {{uw-delete1}}, as appropriate, should be used as initial warnings for content removals without more descriptive edit summaries.

Repeated uploading of copyrighted material

Uploading or using material on Misplaced Pages in ways which violate Misplaced Pages's copyright policies after having been warned is vandalism. Because users may be unaware that the information is copyrighted, or of Misplaced Pages policies on how such material may and may not be used, such action becomes vandalism only if it continues after the copyrighted nature of the material and relevant policy restricting its use have been communicated to the user.

Edit summary vandalism

Making offensive edit summaries in an attempt to leave a mark that cannot be easily expunged from the record (edit summaries cannot simply be "reverted" and require administrative action if they have to be removed from a page's history). Often combined with malicious account creation.

Format vandalism

Changing the formatting of a page unreasonably and maliciously. But many times, editors might just make an unintended mistake or are testing how the wikicode works. Sometimes it might be a bug in the Misplaced Pages software. Some changes to the format are not vandalism, but rather either good faith edits of editors who don't know the guidelines or simply a different opinion on how the format should look, in which case it is just a disputed edit.

Gaming the system

Deliberate attempts to circumvent enforcement of Misplaced Pages policies, guidelines, and procedures by causing bad faith edits to go unnoticed. Includes marking bad faith edits as minor to get less scrutiny, making a minor edit following a bad faith edit so it won't appear on all watchlists, recreating previously deleted bad faith creations under a new title, use of the {{construction}} tag to prevent deletion of a page that would otherwise be a clear candidate for deletion, or use of sock puppets.

Hidden vandalism

Any form of vandalism that makes use of embedded text, which is not visible to the final rendering of the article but visible during editing. This includes link vandalism, or placing malicious, offensive, or otherwise disruptive or irrelevant messages or spam in hidden comments for editors to see.

Hoaxing vandalism

Deliberately adding falsities to articles, particularly to biographies of living people, with hoax information is considered vandalism.

Image vandalism

Uploading shock images, inappropriately placing explicit images on pages, or simply using any image in a way that is disruptive. Please note though that Misplaced Pages is not censored and that explicit images may be uploaded and/or placed on pages for legitimate reasons (that is, if they have encyclopedic value).

Link vandalism

Adding or changing internal or external links on a page to disruptive, irrelevant, or inappropriate targets while disguising them with mislabeling.

Page creation, illegitimate

Creating new pages with the sole intent of malicious behavior. It also includes personal attack pages (articles written to disparage the subject), hoaxes and other intentionally inaccurate pages. There are many other types of pages that merit deletion, even speedy deletion, but which are not vandalism. New users sometimes create test pages containing nonsense or even autobiographies, and doing so is not vandalism; such pages can also be moved to become their sandbox or userpage. Pages on non-notable topics are not vandalism. Blatant advertising pages, and blatant POV pushes, are not vandalism, but frequently happen and often lead to editors being blocked. It's important that people creating inappropriate pages be given appropriate communication; even if they aren't willing to edit within our rules, they are more likely to go away quietly if they understand why their page has been deleted.

Page lengthening, illegitimate

Adding very large (measured by the number of bytes) amounts of bad faith content to a page so as to make the page's load time abnormally long or even make the page impossible to load on some computers without the browser or machine crashing. Adding large amounts of good faith content is not vandalism, though prior to doing so, one should consider if splitting a long page may be appropriate (see Misplaced Pages:Article size).

Page-move vandalism

Shortcuts

Changing the names of pages to disruptive, irrelevant, or otherwise inappropriate names. Only autoconfirmed or confirmed users can move pages. Because of this, vandals of this variety will often create "sleeper" accounts to gain autoconfirmed status.

Redirect vandalism

Redirecting or changing the target of redirect pages to other pages that are vandalism, nonsense, promotional, non-existent pages, or attack pages. This also applies when a redirect or its title is created only to disparage its subject. Pages that redirect to non-existent or deleted pages are also applied with G8.

Reverting to vandalism

Reverting edits to the latest revisions that are nonsense, promotional, personal attacks, and/or harassment (except for when done by mistake).

Silly vandalism

Adding profanity, graffiti, or patent nonsense to pages; creating nonsensical and obviously unencyclopedic pages, etc. This is one of the most common forms of vandalism. However, the addition of random characters to pages is often characteristic of an editing test and, though impermissible, may not be malicious.

Subtle vandalism

Shortcut

Vandalism that is harder to spot, or that otherwise circumvents detection, including adding plausible misinformation to articles (such as minor alteration of facts or additions of plausible-sounding hoaxes), hiding vandalism (such as by making two bad edits and reverting only one), simultaneously using multiple accounts or IP addresses to vandalize, abuse of maintenance and deletion templates, or reverting legitimate edits with the intent of hindering the improvement of pages. Impersonating other users by signing an edit with a different username or IP address also constitutes sneaky vandalism, but take care not to confuse this with appropriately correcting an unsigned edit made by another user. Some vandals even follow their vandalism with an edit that states "Rv vandalism" or similar in the edit summary in order to give the appearance the vandalism was reverted.

Spam external linking

Adding or continuing to add spam external links is vandalism if the activity continues after a warning. A spam external link is one added to a page mainly for the purpose of promoting a website, product or a user's interests rather than to improve the page editorially.

Talk page vandalism

Shortcut

Illegitimately removing or editing other users' comments, especially in closed discussions, or adding offensive comments. However, it is acceptable to blank comments constituting vandalism, internal spam, or harassment or a personal attack. It is also acceptable to identify an unsigned comment. Users are also permitted to remove comments from their own user talk pages. A policy of prohibiting users from removing warnings from their own talk pages was considered and rejected on the grounds that it would create more issues than it would solve.

Template vandalism

Modifying the wiki language or text of a template in a harmful or disruptive manner. This is especially serious, because it will negatively impact the appearance of multiple pages. Some templates appear on hundreds or thousands of pages, so they are permanently protected from editing to prevent vandalism.

User and user talk page vandalism

Unwelcome, illegitimate edits to another person's user page may be considered vandalism. User pages are regarded as within the control of their respective users and generally should not be edited without the permission of the user to whom they belong. See WP:UP#OWN. This is why there is an edit filter that prevents new and non-(auto)confirmed users from editing user pages other than their own. Related to this is Misplaced Pages:No personal attacks.

Vandalbots

A script or "robot" that attempts to vandalize or add spam to a mass of pages.

What is not vandalism

Shortcuts

Although at times the following situations may be referred to colloquially as "vandalism", they are not usually considered vandalism within the context of Misplaced Pages. However, each case should be treated independently, taking into consideration whether or not the actions violate Misplaced Pages policies and guidelines. If an editor treats situations which are not clearly vandalism as such, it may harm the encyclopedia by alienating or driving away potential editors.

Boldly editing

Bold edits, though they may precede consensus or be inconsistent with prior consensus, are not vandalism unless other aspects of the edits identify them as vandalism. The Misplaced Pages community encourages users to be bold and acknowledges the role of bold edits in reaching consensus.

Copyright policy violations

Uploading or using material on Misplaced Pages in violation of Misplaced Pages's copyright policies is prohibited, but is not vandalism unless the user does so maliciously or fails to heed warnings. It is at least as serious an issue as vandalism and persistent offenders will ultimately get blocked, but it is well worth spending time communicating clearly with those who violate copyright as they are far more likely to reform than vandals or spammers.

Disruptive editing or stubbornness

Some users cannot come to an agreement with others who are willing to talk to them about an editing issue, and repeatedly make changes against consensus. Edit warring is not vandalism and should not be dealt with as such. Dispute resolution may help. See also: Tendentious editing.

Starting a deletion process in bad faith is disruptive editing, but is not vandalism. However, misusing deletion template messages with no intention to start a deletion process is vandalism by abuse of tags.

In short, all vandalism is disruptive editing, but not all disruptive editing is vandalism.

Edit summary omission

The edit summary is important in that it helps other editors understand the purpose of your edit. Though its use is not required, it is strongly recommended, even for minor edits, and is considered proper Misplaced Pages etiquette. Even a brief edit summary is better than none. However, not leaving edit summaries is not considered vandalism.

Editing tests by experimenting users

Shortcut

Users sometimes edit pages as an experiment. Such edits, while prohibited, are treated differently from vandalism. These users should be warned using the uw-test series of user warning templates, or by a talk page message including, if appropriate, a welcome and referral to the Misplaced Pages sandbox, where they can continue to make test edits without being unintentionally disruptive. Registered users can also create their own sandboxes as a user subpage. If a user has made a test edit and then reverted it, consider placing the message {{uw-selfrevert}}, on their talk page. Pages created as test edits outside of userspace may be deleted under speedy deletion criterion G2. Editing tests are considered vandalism only when a user continues to make test edits despite receiving numerous warnings.

Harassment or personal attacks

Personal attacks and harassment are not allowed. While some harassment is also vandalism, such as user page vandalism, or inserting a personal attack into an article, harassment in itself is not vandalism and should be handled differently.

Incorrect wiki markup and style

Inexperienced users are often unfamiliar with Misplaced Pages's formatting and grammatical standards, such as how to create internal and/or external links or which words should be bolded or italicized, etc. Rather than label such users as vandals, just explain to them what the standard style would be for the issue at hand, perhaps pointing them towards the documentation at How to edit a page, and the like.

Lack of understanding of the purpose of Misplaced Pages

Some users are not familiar with Misplaced Pages's purpose or policies and may start editing it as if it were a different medium—such as a forum or blog—in a way that it appears as unproductive editing or borderline vandalism to experienced users. Although such edits can usually be reverted, it should not be treated as vandalism.

Misinformation, accidental

A user who, in good faith, adds content to an article that is factually inaccurate in the belief that it is accurate, is trying to contribute to and improve Misplaced Pages, not vandalize it. If you believe inaccurate information has been added to an article in good faith, remove it once you are certain it is inaccurate, and consider discussing its factuality with the user who has added it.

NPOV contraventions

The neutral point of view policy is difficult for many of us to understand. Even Misplaced Pages veterans occasionally introduce material which is not ideal from an NPOV perspective. Indeed, we are all affected to a greater extent than we estimate by our beliefs. Though the material added may be inappropriate, it is not vandalism in itself.

Nonsense, accidental

While intentionally adding nonsense to a page is a form of vandalism, sometimes honest editors may not have expressed themselves correctly (e.g. there may be an error in the syntax, particularly for Wikipedians who use English as a second language). Also, connection errors, browser extensions, or edit conflicts can unintentionally produce the appearance of nonsense or malicious edits. In either case, assume good faith.

Policy and guideline pages, good faith changes to

Editors are encouraged to be bold. However, making edits to Misplaced Pages policies and guidelines pages, such as this one, does require some knowledge of the consensus on the issues. If people misjudge consensus, it would not be considered vandalism; rather, it would be an opportunity to discuss the matter with them, and help them understand the consensus.

Reversion or removal of unencyclopedic material

Even factually correct material may not belong on Misplaced Pages, and removing such content when it is inconsistent with Misplaced Pages's content policies is not vandalism.

Contentious material about living persons that is unsourced or poorly sourced—whether the material is negative, positive, neutral, or just questionable—should be removed immediately and without waiting for discussion, per Misplaced Pages:Biographies of living persons.

Make sure that the removed content is consistent with Misplaced Pages's standards before restoring it or treating its removal as vandalism.

How to spot vandalism

Shortcuts

Useful ways to detect vandalism include:

  • Recent changes patrolling, using the recent changes link with filters to spot suspicious edits
  • Keeping an eye on your watchlist
  • The edit history of an article can be checked for recent suspicious edits. Article size, as given in bytes, usually increases slightly with time, so a sudden large decrease may indicate a section blanking. Similarly, if an article's size change is inappropriately large for the stated edit summary (e.g. "Fixing typo" while removing 100 bytes), it is an indication of vandalism.

Even in Rome itself, the City of the Popes, the vandalism of the ignorant wrought dreadful havoc.

Rev. James MacCaffrey, History of the Catholic Church From the Renaissance to the French Revolution

In all the three methods above, examples of suspicious edits are those performed by IP addresses, red linked, or obviously improvised usernames. A good way to start is to click on every edit in watchlists, histories etc. with the least suspicion of being vandalism. Increased experience will probably give a sense of which edit descriptions are worth to check further and which may likely be ignored. Some descriptions like "Fixed typo" may be vandalism as that is one of the default edit summaries. IP editors should not be approached with the assumption that they are vandals. Although many vandals do vandalize without registering an account, there are many IP editors who are great contributors to Misplaced Pages. Always read the actual changes made and judge on that, rather than who made the changes or what was entered in the edit summary.

  • See the what links here pages for Insert text, Link title, Headline text, Bold text and Example Image to detect test edits. (See also {{toolbar experiments}}).
  • The auto-summary feature can also help users spot vandalism.
  • Viewing the abuse log or this version if the regular abuse log is cluttered by spambots.
  • Watching for edits tagged by the abuse filter. However, many tagged edits are legitimate, so they should not be blindly reverted. That is, do not revert without at least reading the edit.
  • Plausible, subtle changes not supported by sources or by text elsewhere in the article, particularly without an edit summary, may suggest vandalism. Changing numbers, sometimes by 1, is a common stealth tactic.

How to respond to vandalism

Shortcut

Upon discovering vandalism, revert such edits, using the undo function or an anti-vandalism tool. Once the vandalism is undone, warn the vandalizing editor. Notify administrators at the vandalism noticeboard of editors who continue to vandalize after multiple warnings, and administrators should intervene to preserve content and prevent further disruption by blocking such editors. Users whose main or sole purpose is clearly vandalism may be blocked indefinitely without warning.

If you see vandalism on a list of changes (such as your watchlist), then revert it immediately. You may use the "undo" button (and the automatic edit summary it generates), and mark the change as minor. It may be helpful to check the page history to determine whether other recent edits by the same or other editors also represent vandalism. Repair all vandalism you can identify.

For a new article, if all versions of the article are pure vandalism, mark it for speedy deletion by tagging it with {{Db-g3}}.

To make vandalism reverts easier you can ask for the rollback feature to be enabled for your registered Misplaced Pages account. This feature is only for reverting vandalism and other obvious disruption, and lets you revert several recent edits with a single click. See Misplaced Pages:Requests for permissions.

If you see that a user has added vandalism you may also check their other contributions. If most or all of these are obvious vandalism you may report the user immediately at the Administrator intervention against vandalism noticeboard, though even in this case you may consider issuing a warning message first, unless there is an urgent need to block the user. Otherwise, you can leave an appropriate warning on the user's talk page. Remember that any editor may freely remove messages from their own talk page, so they might appear only in the talk history. If a user continues to cause disruption after being warned, report them also at the Administrator intervention against vandalism noticeboard. An administrator will then decide whether to block the user.

For repeated vandalism by an IP user it is helpful to trace the IP address (e.g. http://whois.domaintools.com/) and add {{whois|Name of owner}} to the user talk page of the address. If it appears to be a shared IP address, add {{SharedIP|Name of owner}} or {{Shared IP edu|Name of owner}}. The OrgName on the IP trace result should be used as the Name of owner parameter in the above three templates.

Undetected vandalism

Sometimes vandalism takes place on top of older, undetected vandalism. With undetected vandalism, editors may make edits without realizing the vandalism occurred. This can make it harder to detect and delete the vandalism, which is now hidden among other edits. Sometimes bots try to fix collateral damage and accidentally make things worse. Check the page history to make sure you're reverting to a "clean" version of the page. Alternatively, if you can't tell where the best place is, take your best guess and leave a note on the article's talk page so that someone more familiar with the page can address the issue—or you can manually remove the vandalism without reverting it.

For beginners

See also: Misplaced Pages:Cleaning up vandalism

For relatively inexperienced Wikipedians, use these simple steps to quickly respond to what you consider vandalism. This is essentially an abridged version of the above page.

  1. Assess whether the edit was made in good or bad faith. If in good faith, it is not vandalism as such, so question the accuracy of information on the talk page or add an inline cleanup tag, such as a "{{dubious}}" tag, to the disputed edit. If it is in bad faith, then it is vandalism and you may take the appropriate steps to remove it.
  2. Revert the vandalism by viewing the page's history and selecting the most recent version of the page prior to the vandalism. Use an edit summary such as 'rv/v' or 'reverted vandalism' and click on 'Publish changes'.
  3. Warn the vandal. Access the vandal's talk page and warn them. A simple note explaining the problem with their editing is sufficient. If desired, a series of warning templates exist to simplify the process of warning users, but these templates are not required. These templates include
    • Level one: {{subst:uw-vandalism1}} This is a gentle caution regarding unconstructive edits; it encourages new editors to use a sandbox for test edits. This is the mildest warning.
    • Level two: {{subst:uw-vandalism2}} This warning is also fairly mild, though it explicitly uses the word 'vandalism' and links to this Misplaced Pages policy. It is the first to warn that further disruptive editing or vandalism may lead to a block, however it uses the wording "loss of editing privileges" rather than "block".
    • Level three: {{subst:uw-vandalism3}} This warning is sterner. It is the first to warn that further disruptive editing or vandalism may lead to a block while actually using the word "block".
    • Level four: {{subst:uw-vandalism4}} This is the sharpest vandalism warning template, and indicates that any further disruptive editing may lead to a block without warning.
    • Level four-im: {{subst:uw-vandalism4im}} This warning template should be used only in the worst conditions of vandalism. It indicates that this is the only warning the target will receive, and that further disruptive edits will result in a block without warning.
  4. Watch for future vandalism from the vandal by checking the user's contributions. If bad faith edits continue, revert them and warn them again, letting the users know that they can be blocked. Note that it is not necessary to use all four warning templates in succession, nor is it necessary to incrementally step through warnings.
  5. Report vandals that continue their behavior after being warned to Misplaced Pages:Administrator intervention against vandalism. While not strictly required, administrators there are most likely to respond rapidly to requests which include at least two warnings, culminating in the level-four "last chance" template.

Template and CSS vandalism

If no vandalizing edits appear in the page's edit history, or the vandalism obscures the page tabs so you can't easily access the history or edit the page, it is probably template or Cascading Style Sheets vandalism. These are often not difficult to fix, but can be confusing.

To access the page history or edit the page when the "View history" or "Edit" tabs are inaccessible, use Misplaced Pages keyboard shortcuts. You can also access the history through a vandalism patrolling tool if you're using one, or from your watchlist if you are watching the page), or from your user contributions if you have edited the page. Or, enter the URL manually into the address bar of your browser: it will take the form https://en.wikipedia.org/Name_of_article?action=edit or https://en.wikipedia.org/Name_of_article?action=history.

If vandalizing edits do not appear in the page history, the vandalism is likely in a transcluded template instead of the page itself. To find the template page, edit the article (using Misplaced Pages keyboard shortcuts if necessary); toward the bottom of the edit page is a list of all templates transcluded into the page. Look for vandalism in the transcluded templates not protected. Alternatively, look for {{Template name}} or {{Template name|parameter ...}} in the text, approximately where the vandalism appears, then go to the page Template:Template name and revert any vandalism. When you return to the original page, the vandalism should be gone, though you may need to purge the page.

Image vandalism

Images are occasionally used for vandalism, such as by placing shock or explicit images where they should not be. When an image has been created exclusively for vandalism, it can be requested for speedy deletion: under criterion G3 if hosted on Misplaced Pages or as vandalism if hosted on Commons (a file repository for Wikimedia Foundation projects). When an image is used for vandalism due to its explicit nature but has legitimate encyclopedic uses (Misplaced Pages is not censored) or is hosted on Commons and has legitimate uses on other projects, it can be requested for being added to the bad image list, which precludes its addition on any page except those specified.

How not to respond to vandalism

Shortcut

Warnings

Warning templates
PageName is optional

See additional templates and examples of output

Shortcut

The purpose of warning a user who has vandalized is to inform the user that the user's conduct is abusive and prohibited, and seek the user's compliance. Not all that appears to be vandalism is in bad faith, and a warning can politely advise and correct users unaware of the nature of their actions. A warning may even dissuade a user acting in bad faith from continuing, particularly as the warnings escalate and the user is informed of the consequences of continuing.

Warning a user for vandalism is generally a prerequisite to administrator intervention. Because of this, users should be warned for each and every instance of vandalism.

How to warn vandalizing users

A list of user warning templates, with descriptions and instructions for their use, is at Misplaced Pages:Template messages/User talk namespace. In addition to a series of user warning templates for vandalism, there are series for specific types of vandalism. Use the most specific user warning template for the conduct. The existence of these templates is intended as a convenience, and their use is not required. A specifically tailored note, written personally and directly addressing the problematic behavior is equally as acceptable as a form of warning, and in many cases, will often result in better engagement with the user in question.

Assume good faith (such as that the user is simply unaware of the policies and guidelines) unless it is clear that the user is deliberately harming Misplaced Pages from the outset, for instance in cases of abusive, vulgar, or juvenile vandalism.

If you do choose to use warning templates, please choose templates that are appropriate to the type and level of problem in question. If edits are questionable, but not clearly vandalism, consider using lower-level templates (level 1 or 2) and wait for a few further contributions to see if the other editor responds or changes their behavior. If the behavior continues, or if it is clear the edits are in bad faith from the outset, the use of a higher-level template (level 3 or 4) may be appropriate. If, after receiving multiple warnings, the behavior persists past the point where good faith can be extended, or it becomes clear that the user has had the opportunity to notice they have been warned, and they still persist with the problematic behavior, consider reporting them to the Vandalism noticeboard.

Administrator response to vandalism

Response from administrators at the vandalism noticeboard varies depending on the type of vandalism and the specifics of the report. Keep in mind:

  • Admins are unlikely to block a user who has not been warned at all, or who has been warned, but has stopped editing since being warned. It must be clear that the user has been told to stop vandalizing, and still persists despite such warnings, except for egregious cases.
  • Reports of vandalism from registered accounts are handled differently than that from IP users, and reports from newly registered accounts are handled differently from accounts of experienced Misplaced Pages users.
    • IP addresses may or may not be kept by the same person for long periods of time; a dynamic address which appears to have stopped vandalizing will probably not be blocked, while one that is actively vandalizing will likely receive a short (1–2 day) block. If there is evidence that an IP address is being used by the same person over a long period of time to repeatedly vandalize Misplaced Pages, or if it is clear the IP address is being used by multiple people to vandalize Misplaced Pages (such as a school-based IP, which can sometimes attract lots of juvenile vandalism over long periods of time from many different people) then an administrator may block the IP for a longer time period (several months to a year). IP addresses are almost never blocked indefinitely.
    • Brand-new accounts who repeatedly vandalize despite multiple warnings are usually blocked indefinitely, especially when there is no history of quality editing on the account.
    • Reports which involve experienced Misplaced Pages users rarely result in blocks for vandalism, as these reports are usually mislabeling other problematic behavior (such as misrepresenting sources, or removing text, or edit warring) as vandalism. The vandalism noticeboard is not designed to litigate disputes or to investigate complex behavior problems. Instead, other noticeboards such as the edit warring noticeboard or the incidents noticeboard are more appropriate to deal with those issues.
  • Check back in to the vandalism noticeboard to see how your report has been dealt with. If an administrator declines to block someone you report, they will always leave a note explaining why they did not respond as you requested. Often, this does not mean the person you reported is behaving properly, or should not be dealt with, but merely that the mechanisms of the vandalism noticeboard are not well suited for handling many types of reports. Consider taking the issue up at a more appropriate noticeboard, which has been tailored to the specific type of problem you are seeing. Other times, a report is declined for being stale (blocks to abandoned accounts, or to IP addresses which have been dormant for some time are rarely done), or to the admin being unable to easily identify the edits as vandalism.
  • If the vandalism in question is "sneaky vandalism", is being committed by a person who was blocked under a prior account or IP address, or requires in-depth and direct knowledge of a prior problem, consider taking the report to the incidents noticeboard instead. There are hundreds of Misplaced Pages administrators, and many of them are unfamiliar with the intricacies of past cases. Unless it is the sort of vandalism that needs no explanation at all, it should be taken elsewhere and not WP:AIV.

Reminding responding users to correctly warn

Because warnings for vandalism are generally a prerequisite to administrator intervention, it is important that users responding to vandalism warn vandalizing users. To inform responding users of this responsibility, use the user warning template {{uw-warn}}.

Likewise, incorrect use of user warning templates, even if well-intended, should be identified to the mistaken user. The {{uw-tempabuse}} series of user warning templates may be used, but a detailed talk page message is better.

Tracing IP addresses

Shortcuts

The owners of IP addresses can be found using:

If an address is not in one registry, it will probably be in another.

Identifying associated IP addresses

If you're trying to determine whether a set of IP addresses involved in vandalism is related, a command-line WHOIS query will generally list this information, or can be shown using the Routeviews DNS name server asn.routeviews.org reverse IP look-up to find the CIDR and ASN for a set of IP addresses. This can be done using IP lookup tools.

A WHOIS query will typically return NetRange, CIDR, NetName, NetHandle, and OriginAS, all of which identify specific network spaces. Data and labeling vary considerably by WHOIS registrar.

The Routeviews data is far more uniformly structured and returns ASN and CIDR as a reverse-lookup TXT query result. It is more useful and faster than WHOIS when checking multiple IP addresses and can be scripted or automated.

CIDR identifies a set of related addresses ("network space") and ASN identifies an Autonomous System—that is, a single administrative entity with control over multiple (and often very many) addresses. Some (though not all) abuse from multiple sources does come from such unified spaces—possibly corresponding to a set of hosts within a single facility.

Abuse originating in a short period of time from different IP addresses within the same CIDR or ASN may indicate a dedicated non-distributed attack, as opposed to a distributed denial of service attack.

Proxies, VPNs and Tor exit nodes

It's possible that a user's source location is being masked by routing traffic through a Proxy server, VPN or the Tor network. Such addresses typically serve many, not just one, person, and though they can be valid present challenges when used for abuse.

A proxy VPN is not necessarily detectable, but commercial services may be indicated by the hostname when resolving an IP address.

Users of the Tor anonymity network will show the IP address of a Tor "exit node". Lists of known Tor exit nodes are available from the Tor Project's Tor Bulk Exit List exporting tool.

See also

This page is referenced in the Misplaced Pages Glossary.

Tools

See also: Misplaced Pages:Cleaning up vandalism/Tools
  • AntiVandal – Web-based counter-vandalism tool. (requires rollback permission).
  • Huggle – Cross-platform application for dealing with vandalism (requires rollback permission).
  • Igloo – JavaScript-based browser window for reverting vandalism. (requires rollback permission).
  • mobileUndo is a userscript which allows you to revert vandalism on mobile.
  • STiki – Cross-platform and Java-based anti-vandalism application. Connects to a remote, non-Wikimedia server. (requires rollback permission).
  • Twinkle – JavaScript gadget allowing reversion of vandalism from page diffs.
  • Ultraviolet – User-friendly Javascript-based diff browser and counter-vandalism tool (works with or without rollback permissions).

Guidelines

Essays

Meta

Further reading

Misplaced Pages key policies and guidelines (?)
Content (?)
P
G
Conduct (?)
P
G
Deletion (?)
P
Enforcement (?)
P
Editing (?)
P
G
Style
Classification
Project content (?)
G
WMF (?)
P
Categories: