Editing abuse filter

Filter parameters

Filter ID:	11
Description: (publicly viewable)
Conditions:	action == 'createaccount' & !('override-antispoof' in user_rights) & lcase(accountname) rlike "[bcdfghjklmnpqrstvwxz]{9}" & !( lcase(accountname) rlike "(...).\1.\1.\1.\1" \| lcase(accountname) rlike "(....).\1.\1.\1" \| lcase(accountname) rlike "(..)\1\1\1\1" \| lcase(accountname) rlike "(...)\1\1\1" \| lcase(accountname) rlike "(....)\1\1" ) action == 'createaccount' & !('override-antispoof' in user_rights) & lcase(accountname) rlike "[bcdfghjklmnpqrstvwxz]{9}" & !( lcase(accountname) rlike "(...).\1.\1.\1.\1" \| lcase(accountname) rlike "(....).\1.\1.\1" \| lcase(accountname) rlike "(..)\1\1\1\1" \| lcase(accountname) rlike "(...)\1\1\1" \| lcase(accountname) rlike "(....)\1\1" )
Notes:	Exploratory filter; looks for new accounts containing strings with NINE consecutive consonants. Just intended for logging at the moment, to see how common these names are, and to what extent it is a good detector of bad usernames. So far, it's looking pretty good, even at 8 characters. Upgrading threshold to 9 to make it even more selective.-- The Anome, 12 May 2018 More investigation: now looks at only first edits for these accounts. -- The Anome, 18 May 2018 Performance improvements -- checking user_editcount will cancel out more actions in this case, so it should come first; similarly reordering other conditions to cancel out more actions; user_editcount < 2 will also be true for blank or false values, so removing !user_editcount to save a condition, and using contains_any for checking multiple actions to save a condition ~MA Removed all the filtering on event type and edit count. This is fascinating: the lack of output from the previous suggests that people are creating these random-typing accounts, but never using them... -- The Anome, 19 May 2018 Adding a dependency on wikitext, to see if that lets this filter see edits. Adding test to exclude highly repetitive usernames which would already have been caught by the repetition filter -- The Anome, 13 June 2018
Flags:	Hide details of this filter from public view Enable this filter Mark as deleted
Filter last modified:	22:02, 7 July 2018 by Hsekiu (talk \| contribs)
History:	View this filter's history
Tools:	Export this filter to another wiki {"row":{"af_id":"11","af_pattern":"action == 'createaccount' \u0026\r\n!('override-antispoof' in user_rights) \u0026\r\nlcase(accountname) rlike \"[bcdfghjklmnpqrstvwxz]{9}\" \u0026\r\n!(\r\n lcase(accountname) rlike \"(...).\\1.\\1.\\1.\\1\" \|\r\n lcase(accountname) rlike \"(....).\\1.\\1.*\\1\" \|\r\n lcase(accountname) rlike \"(..)\\1\\1\\1\\1\" \|\r\n lcase(accountname) rlike \"(...)\\1\\1\\1\" \| \r\n lcase(accountname) rlike \"(....)\\1\\1\" \r\n)","af_user":"1","af_user_text":"Hsekiu","af_timestamp":"20180707220216","af_enabled":"1","af_comments":"Exploratory filter; looks for new accounts containing strings with NINE consecutive consonants. Just intended for logging at the moment, to see how common these names are, and to what extent it is a good detector of bad usernames.\r\n\r\nSo far, it's looking pretty good, even at 8 characters. Upgrading threshold to 9 to make it even more selective.-- The Anome, 12 May 2018\r\n\r\nMore investigation: now looks at only first edits for these accounts. -- The Anome, 18 May 2018\r\n\r\nPerformance improvements -- checking user_editcount will cancel out more actions in this case, so it should come first; similarly reordering other conditions to cancel out more actions; user_editcount \u003C 2 will also be true for blank or false values, so removing !user_editcount to save a condition, and using contains_any for checking multiple actions to save a condition ~MA\r\n\r\nRemoved all the filtering on event type and edit count. This is fascinating: the lack of output from the previous suggests that people are creating these random-typing accounts, but never using them... -- The Anome, 19 May 2018\r\n\r\nAdding a dependency on wikitext, to see if that lets this filter see edits.\r\n\r\nAdding test to exclude highly repetitive usernames which would already have been caught by the repetition filter -- The Anome, 13 June 2018","af_public_comments":"Random typing in username","af_hidden":"0","af_hit_count":"0","af_throttled":"0","af_deleted":"0","af_actions":"warn,disallow","af_global":"0","af_group":"default"},"actions":{"disallow":[],"warn":["Abusefilter-disallowed-random-typing-username"]}}

Actions to take when matched

Trigger actions only if the user trips a rate limit

Number of actions to allow:

Period of time (in seconds):

Group throttle by:

user

See the documentation on mediawiki.org.

Trigger these actions after giving the user a warning

System message to use for warning:

Page name of other message:

(without "MediaWiki:" prefix)

Prevent the user from performing the action in question

System message to use for disallowing:

Page name of other message:

(without "MediaWiki:" prefix)

Revoke the user's autoconfirmed status

Block the user and/or IP address from editing

Block the user and/or IP address from editing their own talk page

Block duration for anonymous users:

Block duration for registered users:

Tag the edit for further review

Tags to apply:

Editing abuse filter

Navigation menu

Personal tools

Namespaces

Variants

Views

More

Search

Navigation

Interaction

Tools