From 136ed1a0c25e7f603ca84a1bdf87f45d59cea0be Mon Sep 17 00:00:00 2001
From: Lyudmila Vaseva <vaseva@mi.fu-berlin.de>
Date: Sun, 6 Jan 2019 13:03:44 +0100
Subject: [PATCH] Add all quarries and data
---
quarries/quarry-32487 | 2 +
...wp-all-abuse-filters-actions-run318759.csv | 764 ++
...-log-entries-before-20100101-run318768.csv | 220 +
quarries/quarry-32492 | 7 +
...e-filter-log-entries-in-2010-run318774.csv | 163 +
quarries/quarry-32493 | 7 +
...e-filter-log-entries-in-2011-run318775.csv | 161 +
...e-filter-log-entries-in-2012-run318778.csv | 170 +
quarries/quarry-32495 | 7 +
...e-filter-log-entries-in-2013-run318779.csv | 178 +
quarries/quarry-32496 | 7 +
...e-filter-log-entries-in-2014-run318780.csv | 154 +
quarries/quarry-32497 | 7 +
...e-filter-log-entries-in-2015-run318782.csv | 200 +
quarries/quarry-32499 | 7 +
...e-filter-log-entries-in-2016-run318789.csv | 204 +
quarries/quarry-32500 | 7 +
...e-filter-log-entries-in-2017-run318797.csv | 231 +
quarries/quarry-32503 | 7 +
...e-filter-log-entries-in-2018-run318831.csv | 254 +
quarries/quarry-32518 | 3 +
...arry-32518-all-filters-sorted-num-hits.csv | 6620 +++++++++++++++++
22 files changed, 9380 insertions(+)
create mode 100644 quarries/quarry-32487
create mode 100644 quarries/quarry-32487-en-wp-all-abuse-filters-actions-run318759.csv
create mode 100644 quarries/quarry-32489-en-wp-all-log-entries-before-20100101-run318768.csv
create mode 100644 quarries/quarry-32492
create mode 100644 quarries/quarry-32492-en-wp_-all-abuse-filter-log-entries-in-2010-run318774.csv
create mode 100644 quarries/quarry-32493
create mode 100644 quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2011-run318775.csv
create mode 100644 quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2012-run318778.csv
create mode 100644 quarries/quarry-32495
create mode 100644 quarries/quarry-32495-en-wp_-all-abuse-filter-log-entries-in-2013-run318779.csv
create mode 100644 quarries/quarry-32496
create mode 100644 quarries/quarry-32496-en-wp_-all-abuse-filter-log-entries-in-2014-run318780.csv
create mode 100644 quarries/quarry-32497
create mode 100644 quarries/quarry-32497-en-wp_-all-abuse-filter-log-entries-in-2015-run318782.csv
create mode 100644 quarries/quarry-32499
create mode 100644 quarries/quarry-32499-en-wp_-all-abuse-filter-log-entries-in-2016-run318789.csv
create mode 100644 quarries/quarry-32500
create mode 100644 quarries/quarry-32500-en-wp_-all-abuse-filter-log-entries-in-2017-run318797.csv
create mode 100644 quarries/quarry-32503
create mode 100644 quarries/quarry-32503-en-wp_-all-abuse-filter-log-entries-in-2018-run318831.csv
create mode 100644 quarries/quarry-32518
create mode 100644 quarries/quarry-32518-all-filters-sorted-num-hits.csv
diff --git a/quarries/quarry-32487 b/quarries/quarry-32487
new file mode 100644
index 0000000..1d143a7
--- /dev/null
+++ b/quarries/quarry-32487
@@ -0,0 +1,2 @@
+use enwiki_p;
+select * from abuse_filter_action
diff --git a/quarries/quarry-32487-en-wp-all-abuse-filters-actions-run318759.csv b/quarries/quarry-32487-en-wp-all-abuse-filters-actions-run318759.csv
new file mode 100644
index 0000000..78c5f34
--- /dev/null
+++ b/quarries/quarry-32487-en-wp-all-abuse-filters-actions-run318759.csv
@@ -0,0 +1,764 @@
+afa_filter,afa_consequence,afa_parameters
+3,tag,blanking
+3,warn,abusefilter-warning-blanking
+5,tag,self-renaming and bad user talk moves
+5,warn,abusefilter-warning-selfrenaming-and-bad-usertalk-moves
+10,disallow,
+10,warn,abusefilter-warning-badmove
+11,tag,possible vandalism
+11,warn,abusefilter-warning
+12,disallow,
+13,disallow,
+13,warn,abusefilter-warning
+16,disallow,
+16,throttle,"16
+3,600
+user"
+17,tag,possible vandalism
+21,blockautopromote,
+22,disallow,
+29,tag,removal of speedy deletion templates
+30,tag,blanking
+30,warn,abusefilter-warning-removal
+31,disallow,
+33,tag,talk page blanking
+33,warn,abusefilter-warning-talkblanking
+34,disallow,abusefilter-disallowed
+36,disallow,
+36,warn,abusefilter-warning-advertising
+37,disallow,
+37,warn,abusefilter-warning
+38,disallow,
+38,warn,abusefilter-warning
+39,tag,possible libel or vandalism
+39,warn,abusefilter-warning
+42,disallow,
+46,disallow,abusefilter-disallowed
+47,disallow,
+50,tag,shouting
+50,warn,abusefilter-warning-shouting
+52,disallow,
+56,disallow,abusefilter-disallowed
+58,disallow,abusefilter-disallowed
+59,tag,image template removal
+61,tag,references removed
+63,disallow,
+67,throttle,"67
+2,216000
+range,page"
+68,disallow,abusefilter-warning-badmove
+68,throttle,"68
+2,900
+user"
+71,throttle,"71
+2,120
+user"
+73,disallow,
+73,throttle,"73
+3,6000
+user"
+73,warn,abusefilter-warning
+76,warn,abusefilter-warning-email
+77,warn,abusefilter-warning
+79,tag,reference list removal
+79,warn,abusefilter-warning-ref-group-blanking
+80,tag,possible link spam
+80,throttle,"80
+3,1200
+user,ip"
+80,warn,abusefilter-warning-link-spam
+82,disallow,
+83,disallow,
+94,disallow,
+94,warn,abusefilter-warning
+98,tag,very short new article
+102,disallow,abusefilter-disallowed
+103,warn,abusefilter-warning
+104,warn,abusefilter-warning-helpme
+109,disallow,
+109,warn,abusefilter-warning
+110,throttle,"110
+6,86400
+user"
+112,disallow,
+113,tag,unusual redirect
+113,warn,abusefilter-warning-redirect
+114,throttle,"114
+9,300
+page,user"
+115,blockautopromote,
+115,throttle,"115
+9,300
+user"
+116,disallow,
+117,tag,removal of Category:Living People
+123,disallow,
+123,warn,abusefilter-warning
+124,disallow,
+124,warn,abusefilter-warning
+130,disallow,
+130,warn,abusefilter-warning-advertising
+131,disallow,
+131,warn,abusefilter-warning-protectedimage
+132,tag,categories removed
+132,warn,abusefilter-warning-all-categories-removed
+135,tag,repeating characters
+135,warn,abusefilter-warning-repeated-characters
+139,disallow,abusefilter-warning-fixedposition
+140,disallow,
+142,disallow,
+143,disallow,
+143,warn,abusefilter-warning-advertising
+145,disallow,
+148,tag,autobiography
+149,tag,coi-spam
+149,warn,abusefilter-warning-links-containing-username
+153,disallow,
+156,disallow,
+157,disallow,
+158,disallow,
+159,disallow,
+159,throttle,"159
+1,900
+user"
+160,disallow,
+160,warn,abusefilter-warning
+162,disallow,
+162,warn,abusefilter-warning-advertising
+163,tag,unusual redirect
+163,warn,abusefilter-warning-badredirect
+164,tag,possible cut and paste move
+165,disallow,
+166,disallow,abusefilter-disallowed
+167,warn,abusefilter-warning-AFC
+168,warn,abusefilter-warning-unblock-response
+169,disallow,
+172,tag,Section blanking
+174,tag,removal of articles for deletion template
+174,warn,abusefilter-warning-removing-xfd-notice
+178,disallow,
+179,disallow,
+180,tag,large unwikified new article
+183,warn,abusefilter-warning-AFC2
+184,disallow,
+184,warn,abusefilter-warning
+186,disallow,
+189,tag,possible libel or vandalism
+190,disallow,
+197,warn,abusefilter-warning-duplicate-section
+203,disallow,
+204,disallow,
+209,disallow,
+213,disallow,
+215,disallow,
+215,throttle,"215
+1,300
+site"
+217,disallow,
+217,warn,abusefilter-warning
+220,tag,bad external
+220,warn,abusefilter-warning-external-images
+221,disallow,
+222,disallow,
+223,disallow,
+224,tag,removal of copyvio templates
+225,disallow,
+229,disallow,
+229,throttle,"229
+3,180
+user"
+229,warn,abusefilter-warning
+230,disallow,
+231,tag,nonsense characters
+231,warn,abusefilter-warning-nospaces
+232,disallow,
+233,disallow,
+234,disallow,
+239,disallow,
+242,disallow,
+242,throttle,"242
+2,180
+user"
+245,disallow,
+247,tag,adding email address
+247,warn,abusefilter-warning-email
+248,disallow,
+249,tag,Rapid reverts
+249,throttle,"249
+3,300
+user,ip"
+250,disallow,
+253,warn,abusefilter-warning-sign-notalk
+257,disallow,
+260,disallow,abusefilter-disallowed
+261,disallow,
+261,throttle,"261
+2,90
+user"
+264,disallow,
+267,blockautopromote,
+267,disallow,
+268,warn,abusefilter-warning
+269,disallow,
+269,warn,abusefilter-warning
+270,tag,Removal of interwiki link
+271,warn,abusefilter-warning-spambot-allowed
+273,disallow,
+279,tag,Possible vandalism
+279,throttle,"279
+3,300
+user,page"
+284,disallow,
+285,disallow,
+286,disallow,
+286,warn,abusefilter-warning
+287,disallow,
+288,disallow,
+289,warn,abusefilter-warning-interrogative
+293,disallow,
+294,disallow,
+295,disallow,
+296,disallow,
+298,warn,abusefilter-warning
+299,disallow,
+305,disallow,
+305,throttle,"305
+4,240
+user"
+306,disallow,
+307,disallow,
+307,throttle,"307
+2,120
+user"
+307,warn,abusefilter-warning
+309,throttle,"309
+1,900
+user"
+310,disallow,
+311,disallow,
+311,tag,possible libel or vandalism
+313,warn,abusefilter-warning-skype
+314,warn,abusefilter-warning-slashsuffix
+316,throttle,"316
+1,180
+user,ip"
+317,disallow,
+317,warn,abusefilter-warning-advertising
+318,disallow,
+319,disallow,
+320,disallow,abusefilter-disallowed
+322,throttle,"322
+3,1800
+user"
+323,tag,reverting anti-vandal bot
+324,disallow,
+325,disallow,
+326,disallow,
+327,disallow,
+329,disallow,
+329,warn,abusefilter-warning-SPI
+330,warn,abusefilter-warning
+331,disallow,
+333,disallow,
+334,blockautopromote,
+334,disallow,
+335,disallow,
+336,disallow,
+337,disallow,
+337,warn,abusefilter-warning
+339,tag,possible libel or vandalism
+341,disallow,
+344,warn,abusefilter-warning-blanking
+345,tag,Extraneous formatting
+345,warn,abusefilter-warning-codespill
+346,tag,non-English content
+346,warn,abusefilter-warning-large-nonenglish-addition
+347,disallow,abusefilter-disallowed
+347,throttle,"347
+3,300
+user,page"
+347,warn,abusefilter-warning-repeated
+349,disallow,
+351,tag,End of page text
+351,warn,abusefilter-warning-appended-text
+352,disallow,
+353,disallow,
+354,tag,Possible self promotion in userspace
+355,disallow,
+359,disallow,
+360,disallow,
+361,disallow,
+363,disallow,
+364,tag,possible libel or vandalism
+365,disallow,abusefilter-disallowed
+368,warn,abusefilter-warning-minoredit
+370,disallow,
+370,throttle,"370
+2,180
+user"
+372,disallow,
+374,disallow,
+375,disallow,
+378,disallow,
+380,disallow,abusefilter-disallowed
+381,disallow,
+382,disallow,
+384,disallow,
+385,disallow,
+385,throttle,"385
+5,120
+user"
+386,throttle,"386
+2,600
+ip"
+387,disallow,
+389,disallow,
+389,throttle,"389
+2,240
+user"
+390,disallow,
+391,tag,changing height or weight
+392,disallow,
+395,disallow,
+397,disallow,abusefilter-disallowed
+398,throttle,"398
+4,3600
+user"
+399,disallow,
+400,disallow,
+400,throttle,"400
+2,600
+user"
+401,disallow,
+404,disallow,
+406,throttle,"406
+2,300
+user"
+407,disallow,
+411,disallow,
+411,warn,abusefilter-warning-editnotice
+414,disallow,
+415,disallow,
+417,disallow,
+418,disallow,
+419,disallow,
+420,disallow,abusefilter-disallowed
+420,throttle,"420
+1,3600
+ip"
+422,disallow,
+430,disallow,
+431,disallow,
+432,tag,possible vandalism
+432,warn,abusefilter-warning-lowercase-letters
+435,warn,abusefilter-warning-protection-template
+437,warn,abusefilter-warning
+438,warn,abusefilter-warning-AFC-wrong-title
+439,disallow,
+441,disallow,
+442,disallow,
+442,throttle,"442
+2,1200
+user"
+444,disallow,
+445,disallow,
+445,throttle,"445
+1,180
+user"
+446,disallow,
+447,disallow,
+448,disallow,
+451,disallow,
+453,disallow,
+453,warn,abusefilter-warning-temporary-newuser-template-edit-block
+455,disallow,
+456,disallow,
+456,throttle,"456
+1,60
+user"
+457,disallow,
+457,throttle,"457
+2,60
+user"
+458,disallow,
+459,disallow,
+460,disallow,
+461,disallow,
+462,disallow,
+463,disallow,
+464,warn,abusefilter-warning
+465,disallow,
+466,tag,userspace spam
+466,warn,abusefilter-warning
+467,disallow,
+470,disallow,
+473,disallow,
+474,disallow,
+476,disallow,
+477,warn,abusefilter-warning-spambot-newaccount
+478,disallow,abusefilter-disallowed
+479,warn,abusefilter-warning-example-image
+480,disallow,
+481,disallow,
+484,warn,abusefilter-warning-cluebot-disable
+485,warn,abusefilter-warning-malicious-a-tags
+486,disallow,
+488,disallow,
+490,disallow,
+491,tag,possible vandalism
+491,warn,abusefilter-warning
+494,disallow,
+495,disallow,
+496,disallow,
+497,disallow,
+500,disallow,
+502,disallow,
+503,disallow,
+506,disallow,
+507,disallow,
+508,disallow,
+509,disallow,
+513,disallow,
+514,warn,abusefilter-warning-repeated-characters
+515,disallow,
+515,warn,abusefilter-warning
+516,disallow,
+517,disallow,
+517,throttle,"517
+4,600
+user"
+518,disallow,
+520,disallow,
+521,disallow,
+522,disallow,
+523,disallow,
+525,disallow,
+526,warn,abusefilter-brasilhot100
+527,throttle,"527
+2,86400
+ip"
+528,disallow,
+529,disallow,
+529,warn,abusefilter-chartnews
+530,disallow,
+531,tag,Removal of all interwiki links
+532,tag,Addition of interwiki link
+533,disallow,
+534,disallow,
+535,disallow,
+537,disallow,
+538,disallow,
+539,disallow,
+540,disallow,
+544,disallow,
+546,disallow,
+547,disallow,
+548,disallow,
+549,disallow,
+550,tag,nowiki added
+551,disallow,
+552,disallow,
+554,disallow,abusefilter-top100
+556,disallow,
+557,disallow,
+558,disallow,
+560,warn,abusefilter-warning
+561,disallow,
+562,disallow,
+564,disallow,
+565,warn,abusefilter-warning
+566,disallow,
+567,disallow,
+570,disallow,
+571,disallow,
+572,disallow,
+574,disallow,
+576,disallow,
+578,disallow,
+580,disallow,
+585,disallow,
+587,disallow,
+587,warn,abusefilter-youtube-warning
+594,disallow,
+595,disallow,abusefilter-disallowed
+595,warn,abusefilter-warning
+596,disallow,
+597,disallow,
+598,disallow,
+598,warn,abusefilter-warning-temporary-newuser-template-edit-block
+600,tag,image added to template
+601,disallow,
+602,tag,discretionary sanctions alert
+602,warn,abusefilter-warning-DS
+603,warn,abusefilter-warning
+606,warn,abusefilter-ANIbugnotice
+608,disallow,
+609,disallow,
+610,disallow,
+611,disallow,
+612,disallow,
+613,tag,signature added
+613,warn,abusefilter-warning-sign-in-article
+614,disallow,abusefilter-disallowed
+615,disallow,
+616,disallow,
+616,warn,talk-page restricted
+617,disallow,
+618,disallow,
+621,disallow,
+622,disallow,
+623,disallow,
+627,tag,Possible self promotion in user or draftspace
+628,disallow,
+630,tag,de-userfying
+631,tag,extraneous markup
+632,tag,new blank article
+633,tag,canned edit summary
+634,disallow,
+634,warn,abusefilter-MariaJaydHicky
+635,warn,abusefilter-warning-otrs
+636,warn,abusefilter-unexplained-removal
+638,disallow,
+639,disallow,abusefilter-disallowed
+640,disallow,
+640,warn,abusefilter-vevo
+641,disallow,
+642,disallow,abusefilter-warning-otrs
+643,throttle,"643
+3,1800
+user"
+644,disallow,
+645,disallow,
+648,disallow,abusefilter-disallowed
+651,disallow,
+651,warn,abusefilter-warning-NoIPedits
+652,disallow,
+652,warn,abusefilter-warning-NoIPedits
+653,disallow,
+655,tag,large plot addition
+656,disallow,
+657,tag,External Link added to disambiguation page
+657,warn,abusefilter-warning-EL-in-disambiguation
+658,disallow,
+659,throttle,"659
+3,300
+user"
+661,disallow,
+661,warn,unsourced-award-warning
+662,disallow,
+663,disallow,
+664,warn,abusefilter-warning-test-edit
+665,disallow,
+666,disallow,
+668,disallow,
+674,disallow,
+675,disallow,
+676,disallow,
+680,disallow,abusefilter-warning-emoji
+681,throttle,"681
+1,64
+user
+ip"
+682,disallow,abusefilter-disallowed
+684,disallow,
+689,tag,possible vandalism
+689,warn,abusefilter-warning
+690,disallow,
+693,disallow,
+694,disallow,abusefilter-warning-scribunto-contentmodel
+698,disallow,
+698,warn,abusefilter-warning-30-500-restriction
+702,warn,abusefilter-warning-clipboard-hijacking
+706,disallow,
+707,disallow,
+709,disallow,
+710,disallow,
+713,disallow,
+714,disallow,
+715,disallow,
+715,warn,abusefilter-warning-ip-edit-confirmed
+717,disallow,
+718,disallow,
+719,disallow,
+721,disallow,
+725,disallow,
+726,disallow,
+728,tag,huggle
+732,disallow,
+734,disallow,
+735,tag,possible vandalism
+737,disallow,
+738,disallow,abusefilter-disallowed
+739,disallow,
+742,disallow,abusefilter-disallowed
+742,throttle,"742
+2,120
+user,ip"
+743,disallow,
+746,disallow,
+751,disallow,
+753,tag,wikilinks removed
+756,disallow,abusefilter-disallowed
+757,disallow,
+759,disallow,
+760,disallow,
+762,disallow,
+762,tag,possible link spam
+764,disallow,
+765,tag,contenttranslation-needcheck
+766,tag,possible vandalism
+766,warn,abusefilter-warning
+767,disallow,abusefilter-disallowed
+768,disallow,
+769,disallow,
+776,disallow,
+779,disallow,
+781,disallow,
+782,disallow,abusefilter-warning-cx
+783,warn,abusefilter-warning-persondata
+784,disallow,
+787,disallow,
+788,disallow,
+792,disallow,abusefilter-disallowed
+793,disallow,abusefilter-disallowed
+795,disallow,
+796,disallow,abusefilter-warning-throttled
+796,throttle,"796
+1,7200
+site"
+797,disallow,
+799,disallow,abusefilter-disallowed
+799,throttle,"799
+1,1200
+page"
+800,disallow,
+803,disallow,abusefilter-warning-userpage
+806,throttle,"806
+5,120
+user"
+808,disallow,
+809,disallow,abusefilter-disallowed
+811,disallow,
+812,disallow,
+813,disallow,
+815,disallow,
+816,disallow,
+817,disallow,
+818,disallow,
+819,throttle,"819
+4,330
+ip"
+820,disallow,
+821,disallow,
+822,disallow,
+824,disallow,
+826,disallow,
+826,throttle,"826
+3,600
+user"
+827,disallow,
+828,disallow,
+830,disallow,abusefilter-disallowed
+832,disallow,
+835,disallow,abusefilter-disallowed
+836,disallow,
+838,warn,abusefilter-warning-test-edit
+842,disallow,
+843,disallow,
+844,disallow,
+845,disallow,
+845,warn,abusefilter-warning-NoIPedits
+846,tag,Possible disruption
+847,disallow,abusefilter-disallowed
+850,warn,abusefilter-warning-project-move
+852,disallow,
+853,disallow,
+854,disallow,
+855,disallow,abusefilter-disallowed
+857,disallow,
+859,disallow,abusefilter-disallowed
+860,disallow,abusefilter-disallowed
+864,disallow,
+868,disallow,
+869,warn,abusefilter-warning-dailymail
+870,disallow,
+871,disallow,
+872,disallow,
+873,disallow,
+874,disallow,abusefilter-disallowed
+875,warn,abusefilter-warning-spambot-allowed
+876,throttle,"876
+8,300
+ip"
+876,warn,abusefilter-warning-spambot-allowed
+878,tag,removal of COI template
+879,warn,abusefilter-warning-malformed
+880,disallow,
+881,disallow,
+884,disallow,
+885,disallow,abusefilter-disallowed
+886,disallow,abusefilter-disallowed
+886,throttle,"886
+1,86400
+ip
+user"
+887,disallow,abusefilter-disallowed-repetitious-username
+887,warn,abusefilter-disallowed-repetitious-username
+888,disallow,abusefilter-disallowed
+889,disallow,abusefilter-disallowed
+890,disallow,abusefilter-disallowed-repetitious-username
+890,warn,Abusefilter-disallowed-random-typing-username
+891,tag,Citing predatory open access journal
+891,warn,abusefilter-warning-predatory
+892,disallow,abusefilter-warning-proxy-link
+894,warn,abusefilter-warning-selfpublished
+896,disallow,abusefilter-disallowed
+897,disallow,
+901,warn,abusefilter-warning-drumpf
+903,disallow,abusefilter-disallowed
+906,disallow,
+909,disallow,abusefilter-disallowed
+911,disallow,
+912,tag,possible vandalism
+912,warn,abusefilter-warning
+914,disallow,
+916,disallow,
+917,disallow,abusefilter-disallowed
+919,disallow,
+920,throttle,"920
+2,600
+user,ip"
+921,tag,possible vandalism
+922,disallow,abusefilter-disallowed
+924,disallow,
+926,disallow,abusefilter-disallowed
+928,warn,abusefilter-warning-transcludinguser
+930,disallow,abusefilter-warning-noindexuser
+931,disallow,abusefilter-disallowed
+931,throttle,"931
+2,60
+user"
+933,disallow,
+934,disallow,abusefilter-disallowed
+936,disallow,
+938,disallow,abusefilter-disallowed
+940,disallow,abusefilter-warning-throttled
+940,throttle,"940
+2,300
+page"
+941,disallow,abusefilter-disallowed
+943,disallow,abusefilter-disallowed
+944,disallow,abusefilter-disallowed
+945,disallow,abusefilter-disallowed
+945,throttle,"945
+2,600
+site"
+946,throttle,"946
+5,210
+ip"
+946,warn,abusefilter-warning-throttled
+947,throttle,"947
+6,240
+ip"
+947,warn,abusefilter-warning-spambot-allowed
+954,disallow,abusefilter-disallowed
diff --git a/quarries/quarry-32489-en-wp-all-log-entries-before-20100101-run318768.csv b/quarries/quarry-32489-en-wp-all-log-entries-before-20100101-run318768.csv
new file mode 100644
index 0000000..10de2af
--- /dev/null
+++ b/quarries/quarry-32489-en-wp-all-log-entries-before-20100101-run318768.csv
@@ -0,0 +1,220 @@
+afl_filter,count(*)
+135,175455
+30,160302
+61,147377
+18,133640
+3,95916
+172,89710
+50,88827
+98,80434
+65,74098
+132,68607
+46,47280
+225,45462
+180,37713
+79,36645
+189,35683
+149,32336
+9,28972
+129,27780
+29,27130
+148,24914
+231,21507
+220,19946
+39,18456
+80,18189
+12,18159
+155,17517
+106,14513
+96,14399
+11,14368
+28,12264
+33,11882
+188,11034
+76,11033
+218,9802
+59,7415
+113,7157
+117,6765
+205,6428
+97,5973
+247,5964
+152,5148
+77,4807
+34,4640
+238,3857
+249,3690
+164,3488
+105,3379
+260,3322
+58,3080
+270,3029
+176,2820
+53,2595
+51,2572
+81,2550
+239,2189
+174,2094
+236,2093
+35,2093
+23,2075
+163,2073
+139,2009
+183,1899
+52,1738
+24,1538
+224,1414
+194,1309
+31,1268
+119,1243
+253,1015
+134,991
+7,972
+1,922
+159,913
+233,739
+151,721
+99,686
+146,655
+5,584
+26,548
+195,532
+102,522
+273,513
+68,507
+179,504
+269,490
+215,485
+43,480
+221,469
+167,450
+66,406
+133,404
+82,399
+212,372
+170,352
+268,349
+171,333
+17,309
+261,295
+114,293
+192,276
+177,254
+123,247
+72,233
+103,229
+115,225
+200,224
+258,223
+10,222
+19,221
+210,193
+13,188
+161,169
+213,165
+235,157
+63,150
+104,149
+168,148
+240,147
+125,138
+190,134
+44,121
+144,120
+234,117
+266,104
+166,102
+242,102
+175,98
+78,98
+229,90
+71,86
+140,84
+228,82
+165,79
+131,76
+14,63
+226,61
+4,60
+47,59
+201,56
+193,53
+263,50
+204,47
+178,46
+16,44
+191,43
+48,43
+211,39
+116,37
+154,33
+241,32
+54,32
+264,31
+107,30
+237,28
+25,28
+93,27
+45,26
+209,25
+199,25
+157,24
+94,23
+112,21
+95,21
+141,21
+6,19
+60,19
+101,19
+255,18
+250,17
+259,17
+137,17
+185,17
+55,17
+186,17
+15,15
+37,14
+232,14
+217,14
+219,12
+158,11
+36,10
+248,9
+74,9
+203,9
+153,8
+22,8
+208,7
+108,7
+8,7
+245,7
+257,7
+275,6
+70,6
+214,6
+207,6
+38,6
+57,6
+49,5
+69,5
+109,5
+20,5
+2,4
+127,4
+173,4
+40,4
+244,3
+184,3
+251,3
+243,3
+73,2
+118,2
+162,2
+142,1
+120,1
+196,1
+121,1
+198,1
+145,1
+230,1
diff --git a/quarries/quarry-32492 b/quarries/quarry-32492
new file mode 100644
index 0000000..f6d783c
--- /dev/null
+++ b/quarries/quarry-32492
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20091231235959
+and afl_timestamp <= 20101231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32492-en-wp_-all-abuse-filter-log-entries-in-2010-run318774.csv b/quarries/quarry-32492-en-wp_-all-abuse-filter-log-entries-in-2010-run318774.csv
new file mode 100644
index 0000000..e737369
--- /dev/null
+++ b/quarries/quarry-32492-en-wp_-all-abuse-filter-log-entries-in-2010-run318774.csv
@@ -0,0 +1,163 @@
+afl_filter,count(*)
+61,245179
+135,242018
+172,148053
+30,119226
+225,109912
+3,105376
+50,101542
+132,78633
+189,74528
+98,54805
+231,54677
+325,51326
+46,50212
+220,46409
+279,38854
+149,38166
+79,36245
+148,32624
+29,30840
+351,30174
+129,29702
+180,29662
+260,28995
+39,23784
+270,22967
+188,21898
+344,20583
+247,20257
+12,19381
+11,18394
+80,16903
+320,14867
+368,13156
+366,12257
+33,11089
+285,10863
+96,10754
+339,10480
+342,10460
+205,9091
+34,8647
+117,7991
+9,7825
+316,7349
+113,6192
+313,5406
+164,5333
+364,5171
+77,4939
+354,3998
+59,3823
+183,3708
+58,3545
+365,3457
+224,3402
+322,2917
+174,2619
+81,2554
+163,2441
+289,2372
+268,2134
+294,1901
+249,1882
+280,1525
+233,1450
+273,1433
+323,1344
+51,1231
+31,1038
+179,920
+345,860
+139,852
+358,813
+17,757
+159,672
+167,671
+261,661
+346,564
+369,545
+314,505
+264,495
+1,480
+68,444
+151,425
+47,423
+341,382
+5,356
+52,345
+311,338
+295,334
+242,283
+257,282
+123,264
+331,249
+367,246
+102,193
+287,170
+16,170
+278,147
+377,136
+82,133
+281,115
+250,105
+288,105
+306,98
+234,91
+305,77
+269,76
+166,68
+312,62
+330,55
+10,54
+293,53
+271,51
+309,42
+340,36
+360,36
+213,30
+378,28
+307,26
+328,25
+370,24
+236,23
+361,22
+326,22
+375,22
+372,22
+363,21
+298,20
+72,15
+359,14
+319,14
+203,13
+317,12
+333,12
+352,12
+332,11
+343,10
+290,10
+291,9
+353,9
+315,9
+284,8
+371,8
+324,7
+327,7
+54,7
+347,6
+201,5
+338,5
+286,4
+232,4
+215,4
+318,4
+348,4
+301,3
+379,2
+362,2
+302,2
+350,1
+334,1
+310,1
diff --git a/quarries/quarry-32493 b/quarries/quarry-32493
new file mode 100644
index 0000000..015a543
--- /dev/null
+++ b/quarries/quarry-32493
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20101231235959
+and afl_timestamp <= 20111231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2011-run318775.csv b/quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2011-run318775.csv
new file mode 100644
index 0000000..723b8a4
--- /dev/null
+++ b/quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2011-run318775.csv
@@ -0,0 +1,161 @@
+afl_filter,count(*)
+61,218493
+135,185304
+172,119532
+402,109347
+30,89151
+3,75761
+384,71911
+225,68318
+50,67425
+432,66480
+351,63196
+189,58636
+132,51414
+231,43862
+344,42906
+220,39980
+46,39259
+279,38832
+98,38672
+368,29791
+149,27224
+364,26586
+148,25447
+79,25428
+180,23627
+325,22616
+320,22323
+380,19965
+39,18429
+29,18107
+260,16949
+339,16480
+423,15842
+11,15194
+247,14900
+270,13997
+391,13969
+12,13246
+188,12255
+365,12050
+354,11242
+394,10996
+409,10879
+34,10255
+285,10187
+80,9775
+96,7482
+129,7387
+410,6285
+33,5623
+323,5217
+316,5163
+117,4441
+164,4317
+167,4029
+346,3598
+59,3378
+9,2861
+397,2621
+31,2615
+58,2287
+420,2181
+403,1877
+17,1875
+77,1782
+163,1767
+224,1653
+345,1483
+294,1451
+408,1441
+113,1173
+435,1101
+51,1049
+1,889
+313,853
+249,847
+257,810
+183,787
+81,784
+388,783
+433,685
+289,679
+386,582
+445,551
+68,530
+261,512
+268,481
+393,469
+47,442
+264,433
+139,428
+16,408
+405,403
+159,398
+5,377
+442,329
+415,270
+242,258
+341,252
+389,251
+383,230
+438,209
+424,189
+179,177
+322,174
+436,157
+151,148
+426,146
+52,144
+174,122
+373,110
+385,96
+123,88
+213,72
+441,69
+414,57
+419,57
+146,55
+430,54
+434,50
+166,47
+439,41
+425,41
+377,39
+273,34
+358,32
+412,30
+407,29
+437,29
+314,27
+411,25
+390,25
+295,22
+417,20
+400,19
+395,18
+328,17
+381,15
+448,15
+440,13
+102,8
+271,7
+428,6
+447,6
+421,6
+401,6
+444,6
+287,5
+201,5
+392,5
+429,4
+387,3
+443,3
+418,3
+378,3
+278,2
+413,2
+431,2
+18,2
+399,1
diff --git a/quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2012-run318778.csv b/quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2012-run318778.csv
new file mode 100644
index 0000000..15517d0
--- /dev/null
+++ b/quarries/quarry-32493-en-wp_-all-abuse-filter-log-entries-in-2012-run318778.csv
@@ -0,0 +1,170 @@
+afl_filter,count(*)
+135,173830
+384,144202
+432,126156
+172,105082
+30,93718
+3,90724
+380,67814
+351,59226
+279,58853
+225,58352
+344,52038
+189,51691
+50,50633
+132,48330
+231,47868
+402,45778
+46,43823
+61,40465
+364,34036
+220,31240
+260,30649
+98,28042
+491,26320
+148,24631
+188,24468
+79,23557
+320,21751
+423,20800
+391,17666
+458,16713
+180,16643
+12,15402
+39,14783
+270,14065
+11,13451
+34,13366
+247,13347
+149,13301
+167,13127
+285,13104
+339,12971
+460,12885
+29,12799
+365,11952
+271,10808
+354,10035
+80,7697
+33,6186
+346,4661
+316,4632
+323,4269
+31,4115
+117,3844
+58,3826
+463,3614
+497,3554
+499,3422
+164,3355
+435,3277
+494,3180
+1,3009
+483,2728
+495,2575
+397,2568
+496,2516
+420,2328
+502,2196
+472,2133
+466,1706
+9,1696
+479,1578
+163,1566
+59,1465
+473,1446
+475,1390
+345,1242
+474,1222
+294,1091
+113,1002
+477,854
+485,797
+81,792
+422,782
+224,759
+264,739
+249,721
+464,640
+489,530
+261,526
+17,515
+96,479
+436,393
+5,383
+52,374
+438,312
+505,311
+470,294
+341,289
+461,283
+47,282
+102,276
+405,257
+257,250
+454,242
+56,229
+16,221
+51,221
+242,208
+68,193
+139,154
+159,152
+183,151
+492,131
+469,128
+441,125
+493,120
+453,119
+174,115
+455,113
+478,103
+430,91
+439,91
+509,91
+403,86
+450,80
+465,61
+513,60
+516,53
+445,45
+508,42
+426,42
+471,41
+116,40
+434,39
+490,37
+425,36
+467,36
+501,36
+506,34
+510,28
+390,22
+488,22
+328,19
+480,18
+482,18
+456,18
+440,17
+503,15
+443,15
+373,15
+448,15
+213,12
+462,12
+500,11
+451,11
+447,10
+468,9
+201,8
+476,5
+486,4
+418,3
+512,3
+414,3
+484,2
+487,2
+459,2
+358,1
+514,1
+444,1
diff --git a/quarries/quarry-32495 b/quarries/quarry-32495
new file mode 100644
index 0000000..42d6183
--- /dev/null
+++ b/quarries/quarry-32495
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20121231235959
+and afl_timestamp <= 20131231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32495-en-wp_-all-abuse-filter-log-entries-in-2013-run318779.csv b/quarries/quarry-32495-en-wp_-all-abuse-filter-log-entries-in-2013-run318779.csv
new file mode 100644
index 0000000..b2b5349
--- /dev/null
+++ b/quarries/quarry-32495-en-wp_-all-abuse-filter-log-entries-in-2013-run318779.csv
@@ -0,0 +1,178 @@
+afl_filter,count(*)
+135,133309
+384,129807
+432,94017
+172,92871
+30,85722
+279,76738
+3,70067
+380,58668
+491,55454
+225,48390
+132,44771
+231,43640
+46,43157
+189,42894
+550,41966
+344,39744
+50,31938
+364,30881
+260,30625
+458,26359
+148,26230
+220,25130
+98,23596
+527,21971
+79,19385
+320,18161
+188,16801
+391,16236
+271,15486
+39,15235
+520,14958
+499,14789
+180,13864
+423,13346
+247,13229
+285,13151
+12,12984
+29,12961
+149,12730
+532,11857
+354,11413
+365,11021
+167,10626
+11,10486
+339,10087
+531,8861
+351,8451
+34,8009
+521,7250
+80,6678
+460,6644
+346,6222
+33,5249
+58,5034
+524,4502
+473,4391
+316,4381
+345,3995
+483,3816
+573,3719
+117,3468
+31,3424
+164,3171
+323,2891
+466,2858
+593,2736
+397,2402
+270,2294
+420,1997
+577,1565
+163,1442
+464,1301
+463,1242
+113,1135
+479,1108
+502,1084
+59,1077
+529,813
+543,754
+16,694
+81,667
+563,666
+590,639
+559,629
+139,601
+102,590
+587,581
+519,548
+294,505
+249,491
+261,470
+541,429
+554,389
+545,386
+68,349
+526,346
+5,344
+264,330
+575,311
+242,294
+523,261
+224,253
+560,185
+257,156
+542,147
+494,145
+496,142
+579,140
+534,131
+564,123
+495,122
+405,116
+493,109
+17,107
+497,106
+507,100
+583,87
+595,83
+174,81
+557,80
+525,77
+576,77
+465,74
+585,72
+506,70
+584,65
+567,64
+581,64
+513,62
+469,62
+566,57
+594,46
+570,46
+505,45
+470,39
+159,36
+1,35
+546,35
+516,35
+553,32
+201,32
+426,27
+596,27
+480,24
+501,24
+547,24
+599,23
+434,23
+597,23
+510,22
+538,19
+544,15
+549,14
+539,14
+580,12
+556,11
+467,11
+422,10
+598,9
+533,9
+530,8
+436,7
+600,6
+571,5
+486,5
+540,5
+52,5
+578,4
+536,3
+574,3
+166,2
+341,2
+589,2
+514,2
+512,2
+552,2
+561,1
diff --git a/quarries/quarry-32496 b/quarries/quarry-32496
new file mode 100644
index 0000000..530f15f
--- /dev/null
+++ b/quarries/quarry-32496
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20131231235959
+and afl_timestamp <= 20141231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32496-en-wp_-all-abuse-filter-log-entries-in-2014-run318780.csv b/quarries/quarry-32496-en-wp_-all-abuse-filter-log-entries-in-2014-run318780.csv
new file mode 100644
index 0000000..e6c54ad
--- /dev/null
+++ b/quarries/quarry-32496-en-wp_-all-abuse-filter-log-entries-in-2014-run318780.csv
@@ -0,0 +1,154 @@
+afl_filter,count(*)
+384,111570
+135,111173
+279,97204
+172,82042
+432,75839
+30,62495
+3,60656
+636,52639
+231,39693
+380,39624
+491,38540
+225,37954
+527,37792
+46,37654
+189,36641
+364,35870
+132,31697
+260,29713
+50,29671
+148,29615
+98,26527
+220,25761
+344,25724
+499,19570
+391,17709
+354,16435
+320,16246
+29,15120
+39,14632
+180,14623
+149,13555
+631,13362
+34,13301
+423,13216
+79,12873
+613,12713
+554,12629
+285,11550
+247,11537
+12,10574
+623,10377
+271,10249
+550,9529
+11,9174
+365,9114
+650,7748
+31,7726
+339,7369
+58,7318
+346,7267
+559,6285
+316,5344
+80,4884
+633,4558
+33,4415
+614,4362
+458,3826
+164,3709
+520,3638
+323,3568
+167,3480
+117,3280
+483,2813
+345,2774
+126,2646
+466,2442
+351,2238
+397,2223
+590,2043
+224,1957
+627,1909
+420,1775
+602,1400
+620,1308
+619,1179
+261,1164
+113,1051
+460,976
+249,968
+521,899
+630,874
+59,699
+464,696
+600,647
+637,644
+5,631
+102,610
+601,606
+473,532
+358,510
+81,440
+534,357
+174,348
+578,341
+579,333
+68,296
+632,276
+264,274
+622,235
+608,232
+16,221
+242,198
+478,188
+617,175
+526,156
+139,143
+624,119
+463,109
+604,107
+625,89
+640,82
+294,79
+529,74
+648,68
+465,66
+621,62
+634,62
+596,60
+635,57
+523,45
+311,44
+519,40
+629,38
+597,32
+593,28
+609,25
+639,22
+638,21
+641,21
+615,20
+651,20
+618,20
+545,19
+616,13
+603,10
+642,10
+611,8
+479,6
+612,6
+575,6
+610,5
+514,4
+646,4
+587,4
+595,3
+1,2
+213,2
+628,2
+598,2
+606,2
+645,2
+649,1
+577,1
diff --git a/quarries/quarry-32497 b/quarries/quarry-32497
new file mode 100644
index 0000000..ed672a9
--- /dev/null
+++ b/quarries/quarry-32497
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20141231235959
+and afl_timestamp <= 20151231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32497-en-wp_-all-abuse-filter-log-entries-in-2015-run318782.csv b/quarries/quarry-32497-en-wp_-all-abuse-filter-log-entries-in-2015-run318782.csv
new file mode 100644
index 0000000..2b5f35b
--- /dev/null
+++ b/quarries/quarry-32497-en-wp_-all-abuse-filter-log-entries-in-2015-run318782.csv
@@ -0,0 +1,200 @@
+afl_filter,count(*)
+650,226460
+61,196986
+636,191320
+527,189911
+633,162319
+384,141534
+279,110137
+135,99057
+686,95356
+172,82874
+432,58753
+30,58074
+364,57375
+380,55306
+3,52999
+189,43688
+260,39216
+631,39162
+148,37748
+220,37530
+614,36941
+231,35093
+225,34626
+491,33808
+550,31702
+98,31443
+46,30845
+50,29098
+132,28930
+728,25869
+29,25766
+712,25721
+391,23978
+680,21733
+80,20144
+499,19550
+149,18811
+180,16755
+320,16102
+613,15614
+79,15193
+2,13919
+34,13765
+623,13653
+271,13536
+39,13333
+354,12513
+247,11911
+342,11208
+697,9803
+365,9680
+285,9223
+11,9167
+12,8941
+346,8897
+339,7770
+466,7315
+664,6330
+58,6168
+657,6103
+316,6042
+31,5340
+627,4923
+33,4518
+126,4217
+174,4188
+716,4000
+655,3883
+164,3798
+323,3717
+711,3658
+670,3514
+117,3376
+224,3092
+630,2852
+478,2580
+397,2569
+602,2515
+351,2388
+732,2195
+559,1956
+420,1565
+632,1395
+423,1387
+702,1380
+249,1136
+675,1107
+113,1082
+261,1046
+102,906
+1,804
+667,788
+708,765
+652,716
+81,704
+5,619
+464,616
+59,612
+733,550
+345,530
+661,495
+651,472
+425,414
+167,306
+699,304
+688,303
+242,289
+735,286
+600,271
+624,258
+139,250
+637,229
+709,219
+264,215
+684,215
+681,206
+579,193
+620,190
+731,189
+68,178
+710,174
+698,174
+642,173
+689,170
+590,168
+666,156
+554,154
+619,147
+16,143
+653,136
+640,131
+639,129
+185,129
+738,111
+665,109
+663,107
+739,101
+674,94
+718,91
+706,89
+742,84
+703,82
+725,82
+294,81
+648,74
+52,69
+617,67
+737,62
+668,61
+734,61
+660,61
+740,60
+526,58
+459,51
+690,47
+730,44
+696,44
+719,42
+736,39
+673,35
+722,33
+678,32
+701,32
+597,29
+634,28
+529,26
+596,26
+743,23
+656,22
+726,20
+645,17
+723,14
+713,13
+683,12
+654,12
+694,12
+534,11
+679,8
+721,8
+729,8
+695,7
+658,5
+720,4
+693,4
+707,3
+727,3
+744,3
+691,3
+358,2
+422,2
+714,2
+687,2
+669,2
+715,2
+682,2
+676,1
+677,1
+638,1
+685,1
diff --git a/quarries/quarry-32499 b/quarries/quarry-32499
new file mode 100644
index 0000000..2e4eccf
--- /dev/null
+++ b/quarries/quarry-32499
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20151231235959
+and afl_timestamp <= 20161231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32499-en-wp_-all-abuse-filter-log-entries-in-2016-run318789.csv b/quarries/quarry-32499-en-wp_-all-abuse-filter-log-entries-in-2016-run318789.csv
new file mode 100644
index 0000000..26ce646
--- /dev/null
+++ b/quarries/quarry-32499-en-wp_-all-abuse-filter-log-entries-in-2016-run318789.csv
@@ -0,0 +1,204 @@
+afl_filter,count(*)
+527,437099
+61,274945
+650,229083
+633,218696
+636,179948
+384,179871
+279,106699
+135,95131
+172,79843
+30,68968
+364,64706
+380,61757
+712,60358
+686,58843
+432,52203
+3,51068
+550,45393
+189,45233
+260,40510
+220,40379
+752,39174
+271,38449
+631,33807
+231,33124
+225,32189
+98,31237
+50,30644
+491,30496
+680,30348
+80,28652
+614,27673
+132,27387
+46,26926
+391,26171
+148,25746
+29,25473
+499,20228
+149,19615
+466,17677
+320,16511
+354,15224
+79,15215
+180,14243
+126,13658
+247,13153
+39,12599
+753,11993
+716,10948
+365,10575
+34,8910
+12,8826
+346,8624
+11,8377
+339,7702
+784,7128
+664,6695
+711,6520
+806,6193
+657,6154
+627,5859
+285,5823
+316,4810
+174,4623
+655,4599
+31,4399
+323,4107
+33,3983
+117,3865
+164,3719
+733,3685
+782,3160
+735,2886
+602,2788
+630,2607
+425,2592
+351,2275
+773,2218
+478,2165
+58,2152
+397,2113
+249,2083
+803,2057
+702,1817
+102,1695
+643,1638
+420,1635
+632,1578
+261,1333
+740,1325
+224,1239
+756,1122
+113,1053
+721,912
+559,906
+783,894
+684,691
+768,653
+579,610
+786,555
+804,543
+652,516
+59,510
+637,509
+765,485
+755,439
+464,413
+815,408
+5,403
+766,376
+762,374
+398,362
+642,358
+742,330
+345,321
+819,297
+68,291
+759,280
+1,262
+751,261
+667,261
+242,259
+731,247
+789,236
+777,222
+264,220
+744,219
+139,216
+799,174
+808,174
+790,160
+770,155
+757,155
+745,154
+167,150
+624,143
+342,142
+793,139
+785,139
+738,131
+2,130
+554,129
+676,121
+722,115
+813,114
+743,107
+698,103
+723,101
+16,100
+787,99
+818,97
+718,95
+796,92
+788,81
+800,78
+779,77
+651,70
+674,62
+639,61
+734,60
+699,59
+690,58
+294,54
+750,51
+778,48
+816,47
+811,44
+797,42
+710,41
+739,36
+709,35
+760,34
+781,32
+737,31
+775,30
+746,30
+798,25
+694,24
+706,24
+812,20
+747,20
+763,19
+809,18
+459,17
+597,17
+666,16
+769,13
+792,12
+780,11
+758,11
+817,10
+776,10
+810,9
+764,9
+52,8
+727,8
+802,6
+748,5
+801,5
+596,4
+749,3
+814,2
+805,1
+795,1
diff --git a/quarries/quarry-32500 b/quarries/quarry-32500
new file mode 100644
index 0000000..30058b8
--- /dev/null
+++ b/quarries/quarry-32500
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20161231235959
+and afl_timestamp <= 20171231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32500-en-wp_-all-abuse-filter-log-entries-in-2017-run318797.csv b/quarries/quarry-32500-en-wp_-all-abuse-filter-log-entries-in-2017-run318797.csv
new file mode 100644
index 0000000..becc41e
--- /dev/null
+++ b/quarries/quarry-32500-en-wp_-all-abuse-filter-log-entries-in-2017-run318797.csv
@@ -0,0 +1,231 @@
+afl_filter,count(*)
+61,250394
+633,218146
+384,200748
+527,192441
+636,156409
+650,151604
+135,80056
+172,70837
+712,59537
+833,58133
+686,57031
+364,55879
+30,52525
+3,51657
+380,49274
+432,44627
+279,44384
+189,39549
+550,36698
+260,34590
+231,31247
+752,29293
+806,28250
+50,27766
+225,26472
+631,26040
+680,25852
+491,24548
+391,23950
+126,22872
+803,22872
+220,22442
+132,21613
+46,20159
+98,18203
+846,15903
+354,15862
+867,14708
+249,14239
+614,13250
+499,13154
+29,13136
+753,13056
+148,12674
+79,11580
+39,10609
+320,10501
+149,10316
+716,9707
+819,9623
+247,9323
+365,9098
+825,8577
+12,8008
+180,7383
+34,7179
+339,6634
+875,6559
+782,6436
+346,6210
+11,5858
+837,5781
+664,5014
+627,4811
+657,4747
+733,4614
+711,4389
+33,4076
+655,3862
+789,3488
+174,3375
+117,3372
+602,3338
+323,3248
+316,3149
+271,3099
+80,2957
+735,2906
+630,2837
+31,2834
+466,2576
+860,2377
+164,2311
+102,2207
+351,1845
+878,1839
+397,1799
+784,1734
+890,1606
+420,1596
+425,1561
+478,1533
+643,1421
+777,1410
+58,1361
+869,1345
+702,1248
+840,1231
+783,1137
+850,1091
+813,1078
+826,1045
+721,980
+874,979
+632,970
+834,961
+766,952
+559,838
+579,797
+768,720
+859,700
+113,631
+872,585
+755,542
+261,539
+637,526
+739,521
+829,487
+815,468
+756,453
+345,450
+887,422
+59,419
+877,419
+5,416
+879,400
+847,388
+773,384
+862,349
+799,348
+812,325
+835,324
+464,320
+861,319
+828,294
+398,292
+762,271
+139,249
+770,246
+856,245
+793,236
+854,223
+809,216
+242,205
+667,199
+864,193
+852,170
+554,166
+788,160
+787,159
+684,156
+866,153
+68,149
+880,149
+759,143
+811,142
+294,141
+765,135
+848,126
+224,115
+855,113
+642,108
+624,107
+264,100
+769,97
+652,94
+1,93
+751,87
+738,87
+844,84
+892,83
+838,77
+843,77
+651,76
+167,75
+597,73
+876,70
+742,65
+894,64
+798,62
+888,59
+881,58
+889,52
+757,51
+891,50
+547,46
+639,45
+871,41
+797,41
+885,40
+865,40
+830,39
+740,34
+821,32
+873,27
+868,27
+863,27
+2,23
+845,22
+839,21
+808,19
+851,19
+832,17
+287,15
+827,13
+849,13
+884,12
+820,12
+824,10
+722,10
+792,9
+857,7
+694,6
+734,6
+737,5
+842,5
+16,4
+710,4
+870,3
+882,3
+853,3
+743,3
+858,2
+841,2
+802,2
+690,2
+790,2
+831,1
+718,1
+822,1
diff --git a/quarries/quarry-32503 b/quarries/quarry-32503
new file mode 100644
index 0000000..a258924
--- /dev/null
+++ b/quarries/quarry-32503
@@ -0,0 +1,7 @@
+use enwiki_p;
+select afl_filter, count(*)
+from abuse_filter_log
+where afl_timestamp > 20171231235959
+and afl_timestamp <= 20181231235959
+group by afl_filter
+order by count(*) desc;
diff --git a/quarries/quarry-32503-en-wp_-all-abuse-filter-log-entries-in-2018-run318831.csv b/quarries/quarry-32503-en-wp_-all-abuse-filter-log-entries-in-2018-run318831.csv
new file mode 100644
index 0000000..3b340eb
--- /dev/null
+++ b/quarries/quarry-32503-en-wp_-all-abuse-filter-log-entries-in-2018-run318831.csv
@@ -0,0 +1,254 @@
+afl_filter,count(*)
+527,358210
+61,234867
+633,201400
+384,177543
+833,161030
+636,144674
+650,79381
+135,75348
+686,70550
+172,64266
+712,62989
+364,57227
+30,50132
+3,46005
+279,42761
+380,41476
+432,40214
+189,36810
+867,36731
+550,36542
+1,33763
+260,31889
+231,29364
+752,25006
+391,23554
+50,23207
+803,21512
+126,21412
+491,21003
+225,20991
+631,19434
+354,18873
+132,18648
+46,17483
+680,16982
+320,16429
+499,15581
+249,15285
+220,14175
+806,12126
+753,11777
+79,9697
+716,9398
+149,8623
+39,8571
+365,8468
+846,8270
+614,8225
+890,8222
+51,7938
+247,7425
+912,7404
+773,7300
+12,7166
+627,7144
+782,7052
+339,6716
+98,6387
+837,6336
+878,6333
+905,6267
+711,5984
+34,5722
+602,5647
+11,5139
+102,4862
+733,4855
+29,4634
+657,4611
+895,4577
+894,4522
+664,4458
+869,4417
+887,4121
+643,3980
+630,3827
+874,3709
+655,3646
+33,3636
+346,3581
+323,3466
+466,3434
+117,3365
+80,3172
+825,3172
+735,2901
+316,2845
+148,2635
+904,2338
+898,2306
+819,2287
+31,2199
+345,2157
+850,1992
+935,1940
+861,1932
+397,1774
+796,1741
+174,1648
+926,1554
+425,1541
+777,1498
+180,1414
+942,1414
+921,1396
+351,1359
+840,1293
+478,1280
+891,1227
+559,1167
+892,1161
+164,1128
+930,1108
+860,1063
+875,1026
+579,994
+68,940
+934,915
+721,857
+702,839
+899,815
+420,784
+793,723
+915,719
+826,703
+813,679
+877,665
+789,651
+918,647
+783,643
+632,615
+667,580
+879,543
+59,533
+941,532
+766,525
+5,438
+856,435
+242,435
+925,434
+880,423
+113,406
+784,403
+864,402
+768,402
+58,390
+812,375
+931,371
+919,366
+948,331
+913,311
+909,299
+464,298
+937,277
+916,257
+809,250
+871,242
+828,232
+944,230
+902,230
+139,228
+901,226
+920,225
+886,217
+889,208
+928,196
+52,193
+917,192
+872,163
+739,159
+859,157
+906,154
+398,148
+865,140
+885,137
+271,137
+946,136
+637,128
+788,127
+847,123
+947,122
+738,122
+767,118
+684,113
+787,112
+936,108
+835,104
+862,93
+852,91
+554,90
+799,87
+264,82
+798,74
+876,74
+770,73
+881,73
+762,71
+922,70
+294,68
+642,63
+815,60
+910,60
+167,56
+914,54
+648,53
+624,53
+737,47
+651,47
+868,43
+740,42
+718,40
+838,40
+676,38
+945,37
+694,32
+2,28
+911,28
+933,27
+896,27
+756,26
+797,25
+757,22
+843,21
+923,21
+866,20
+888,18
+951,17
+900,16
+953,16
+855,16
+883,16
+597,15
+639,15
+897,14
+949,14
+940,13
+929,12
+751,11
+224,11
+792,9
+908,8
+932,8
+742,8
+903,6
+927,5
+952,5
+924,4
+943,4
+938,4
+811,3
+870,3
+858,3
+854,2
diff --git a/quarries/quarry-32518 b/quarries/quarry-32518
new file mode 100644
index 0000000..8b11ddb
--- /dev/null
+++ b/quarries/quarry-32518
@@ -0,0 +1,3 @@
+use enwiki_p;
+select * from abuse_filter
+order by af_hit_count desc;
diff --git a/quarries/quarry-32518-all-filters-sorted-num-hits.csv b/quarries/quarry-32518-all-filters-sorted-num-hits.csv
new file mode 100644
index 0000000..e6dc468
--- /dev/null
+++ b/quarries/quarry-32518-all-filters-sorted-num-hits.csv
@@ -0,0 +1,6620 @@
+af_id,af_pattern,af_user,af_user_text,af_timestamp,af_enabled,af_comments,af_public_comments,af_hidden,af_hit_count,af_throttled,af_deleted,af_actions,af_global,af_group
+61,"!(""confirmed"" in user_groups) & (
+ /* this edit_delta ignores large blankings treated by another filter */
+ edit_delta >= -3000 & (
+ article_namespace == 0 & (
+ /* No added lines usually means a blanking which is dealt with by other filters */
+ length(added_lines) != 0 & (
+ !(""#redirect"" in lcase(added_lines)) & (
+ /* More opening ref tags are removed than added */
+ ( rcount(""(<ref\b)"",removed_lines)
+ > rcount(""(<ref\b)"",added_lines))
+ | /* OR */
+ /* More closing ref tags are removed than added */
+ ( rcount(""(<ref\b[^>]*\>)"",removed_lines)
+ > rcount(""(<ref\b[^>]*\>)"",added_lines)
+ )&(/* Exclude removal of references to Wikipedia */
+ (count(""http://en.wikipedia.org"",removed_lines)
+ <= count(""http://en.wikipedia.org"",added_lines))
+ )&( /* If removed empty ref, probs OK */
+ (count(""<ref></ref>"",removed_lines)
+ <= count(""<ref></ref>"",added_lines))
+ )&( /* ignore conversion between <ref> and </ref> */
+ rcount(""</?ref>"",removed_lines)
+ > rcount(""</?ref>"",added_lines)
+ )&( /* if they removed a probable comment with ref
+ tag then its probs OK */
+ rcount(""<!--.*</?ref>.*-->"",removed_lines)
+ <= rcount(""<!--.*</?ref>.*-->"",added_lines)
+ )
+ )
+ )
+ )
+ )
+)",365454,Zzuuzz,20170514124327,1,"""<ref|</ref"" split for clarity
+
+Appears to get more and better hits on referenced info now too. Apparently, previous version wasn't working properly. --Mgm
+
+Switched on. - It Is Me Here
+Tagging instead of disallowing, there are plenty of good reasons to remove references. -- Mgm
+Oh, is this for all references? Wasn't there one regarding removing a {{Reflist}} template? - It Is Me Here
+ That one (filter 79) was a test, and it doesn't appear to be working properly. It hasn't caught anything for at least 24 hours. - Mgm
+removed private flag, unnecessary -- Zzuuzz
+Updated format that should also catch named references and avoid the old reference grouping tag. --Mgm
+Filter 79 now working properly, removing line that specifies reflist. Working on better regex to avoid <references/> being hit with this one --Mgm
+
+Changing to edit_delta <= -1000 from >= -1000; seems like this was the intent. >= and <= comparisons are based on actual value, not absolute value. Correct me if this was the intent. Also, we are getting some false positives on this, see http://en.wikipedia.org/w/index.php?title=Interstate_5_in_Washington&diff=279452062&oldid=278504317 - Hersfold
+
+>= is correct. It is supposed to exclude large removals from being evaluated since they're covered by blanking filters. It was an error in the regex. Instead of allowing for <ref name=""whatever"">, the regex allowed choosing between <ref> and <ref name>, the last of which obviously didn't work. -- Mgm
+
+added note in filter to avoid confusion --Mgm
+
+Altered regex to treat refs as whole blocks, to avoid situation where a duplicate ref is changed to a named ref (<ref>Blah</ref> --> <ref name=foo/>). Now won't catch users removing one end of a ref though. Might have ec'd with cmt above, but can't tell in this wierd system :D --HM
+
+
+Okay... I THINK this is finally a correct regex that:
+
+ 1) grabs <ref> ... </ref> as entire blocks
+ 2) grabs <ref name=""foo""/>
+ 3) ignores <references/>
+ 4) allows newline breaks between <ref> and </ref> tags.
+ 5) grabs only consecutive <ref>, </ref> pairs (as opposed to jumping from the first <ref> to the last </ref>).
+
+-DF
+
+Restored original version, added exclusions for naming references and removing closing tags of named references. --Mgm
+
+Added comments for clarity --Mgm
+
+Too many false positives, setting to log only. --Conti
+
+From Coppertwig:
+A more exact count might be obtained by defining a ref-opening as either ""<ref>"" or ""<ref name"" and a ref-closing as either ""</ref>"" or ""ref name ... />"". (With the named reference, the same tag will sometimes count as both an opening and a closing.) The code might look something like this (assuming rcount expects regular expressions):
+
+/* count of removed ref-openings exceeds count of added ref-openings, or count of removed ref-closings exceeds count of added ref-closings; named refs with slashes count as both openings and closings. */ & (rcount(""(<ref>|<ref\sname)"",removed_lines) > rcount(""(<ref>|<ref\sname)"",added_lines) | rcount(""(</ref>|<ref\sname[^>/]*/>)"",removed_lines) > rcount(""(</ref>|<ref\sname[^>/]*/>)"",added_lines)
+
+Adjusted delta to -3000 due to a sock removing references that has been missed due to the total removed content. Ref [[User:Ryulong/Sandbox#Ref_removing_vandal]] - Shirik 24 Jan
+
+I replaced \sname with \s(name|group). - Ruslik
+
+Something 'wrong' here .. it catches also '<ref></ref>' (i.e., empty tags, as included in the article creation wizard). They should be excluded.
+
+Disable. Most of the hits are false positives. -Sole Soul
+
+Mark as deleted. - KoH
+
+Simplify (can deal with HTML comments and Wikipedia links if this seems otherwise useful) RF 2015-05-03
+Added <ref></ref> since it's easy and cheap. RF 2015-06-04
+Added item to ignore if only conversion between <ref> and </ref> - now should probably be re-factored. RF 20150915
+Added code to pragmatically exclude most single line comment deletions. RF 20160201
+
+readd tag ""references removed"" since reenabled - Cen 22-10-2016",New user removing references,0,1611956,0,0,tag,0,default
+135,"!""confirmed"" in user_groups &
+(
+ article_namespace = 0 &
+ (
+ (
+ rmwhitespace(added_lines) rlike ""([^_:.*'|=}{0 -]{1,9})\1{7}"" |
+ added_lines rlike ""[bcdfghjklmnpqrstvwxz]{9,}""
+ ) &
+ (
+ ! rmwhitespace(removed_lines) rlike ""([^_:.*'|=}{-]{1,9})\1{6}"" &
+ ! removed_lines rlike ""[bcdfghjklmnpqrstvwxz]{8,}"" &
+ ! added_lines rlike ""https?:\/\/\S*([^_:*'|=}{-]{1,9})\1{7}|https?:\/\/\S*[bcdfghjklmnpqrstvwxz]{7,}|(^|\n)[|!]"" &
+ ! added_lines irlike ""number|spell|math|string|<br\b"" &
+ ! article_text irlike ""number""
+ )
+ )
+)",16980,Dragons flight,20150225210144,1,"Catch copy/paste vandalism like hahahahahahahahahahahahaha. --Wknight94
+
+This doesn't need to be private. -BJ
+
+This has far too many false positives to be set to disallow... Not to mention that it seems to block people from using ""..."" and ""'''''"" (for bold/italic), amongst other things. --Conti
+
+It can at least warn. ""'''''''"" problem is fixed now. Added curly brace exception too. Need example of ""..."" since at least 7 occurrences are needed to trigger. --Wknight94
+
+Changed title to something more neutral. --Conti
+
+Too many false positives - mostly in reference URLs. Unless someone has a clever way to fix, this is causing more harm than good IMHO.
+
+Agreed, please do not enable this filter without substantial changes, and substantial log only testing. -Prodego
+
+removing the quote, it was triggered by '''xxxx''' in certain cases -- Luk
+The filter should ignore urls. - Ruslik
+
+Ignoring all edits with URLs in them isn't a good idea. I've made it a bit more complex, actually checking if a link contains repeating chars. If any added link contains added chars, it stops. Theoretically we could do all sorts of counting to make sure there isn't a link with repeating chars AND other repeating chars, but I think that would just eat away at needless conditions, considering it is likely very rare. -Prodego
+
+Turning out not to be too useful and the filter is overwrought now. Disabling. -Wknight94
+Merged testing edit summary from 292 - Shirik 12 Feb 2010
+Optimized summary block - Shirik 12 Feb 2010
+ignoring if repeated chars was already there, per request -- Jun 18, Soap
+
+Merge filter 366 into this. – Oct 28, EdoDodo
+Filter tripped the rate limit. I reset it; I didn't see any FPs. -- Shirik 7 Nov 2010
+Reset rate limit. - KoH 10 Mar 2011
+
+Simplify. -Sole Soul
+
+Ignore zero - FPs. --Reaper 2012-05-25
+
+Format. -DF",Repeating characters,0,1371361,0,0,"warn,tag",0,default
+527,,4168824,"This, that and the other",20161204020134,1,,T34234: log/throttle possible sleeper account creations,1,1241576,0,0,throttle,0,default
+384,"edit_delta < 250 &
+!(""confirmed"" in user_groups) &
+page_namespace == 0 & (
+ dick_name := ""\bDick('s\s[A-Za-z][a-z]|\s[A-Z][a-z.])|\b([A-Z]([a-z]+|\.)?|[DM]r\.)\sDick\b|\b(first|last)\s*=\s*Dick\b|{{\s*[Ss]ortname\s*\|\s*Dick\s*\|"";
+
+ !(summary irlike ""und(id|o)|\brv[vt]?\b|revert"") & (
+ bad_word := ""\bass\s?holes?\b|bitch(?!\""? magazine)|\bcock(s?|sucker)\b|\bdick(?:sucker|head)?s?\b|cuck(|s|er|ing)\b|\bcunts?\b|\bdildo|douche|f(u|v)ck|nigg(er|ah*)|p(a|e|ae)do(f|ph)il|fag(g[aio]t)?\b|penis(?!tone)|\bcrap|\bslut\b|whore|\b(horse|dog)?shits?\b|\bblah|\bpuss(?!ycat|y Riot)a?y|\bidiot\b|(?<!\bit )(?<!\bthat )\bwas here\b|\blol\b|(([asdfghjkl;])(?!\1)\s*){30}|\!{10,}|(?:<big>){3,}"";
+
+ added_lines irlike bad_word &
+ !(added_lines rlike dick_name) &
+ !(removed_lines irlike (bad_word + ""|\w\*{1,4}\w"")) &
+ !(
+ page_title rlike bad_word &
+ old_wikitext irlike ""\{\{disamb""
+ )
+ ) | (
+ ccnorm(summary) irlike bad_word &
+ !(summary rlike (""\/\*.*\*\/|"" + dick_name)) &
+ !(old_wikitext rlike bad_word)
+ )
+)",14882394,MusikAnimal,20181018171832,1,"Creating as requested by Sole Soul, log only for now. - Someguy1221
+
+Hasn't been tested sufficiently for false positives. Change to warn and tag. - KoH
+
+Adding ""wuss rock"". --Reaper
+Put \b around cunt, remove suck (we already have a filter for that). - KoH
+
+Change back to disallow. Run for over 9 days, 1683 hits, no false positives. - Someguy1221
+
+Use same quote exemption as filter 9. - KoH
+
+As a test, remove the edit_delta > 0"" condition. Meanwhile, the filter is tag only. -Sole Soul
+Change to disallow. -Sole Soul
+
+Optimize. -Sole Soul
+Add some bad words, remove others with no hits. Will monitor log for any FPs. -Sole Soul
+Removal of the word ""balls"" and renaming the filter. -Sole Soul
+
+No need to be private. Sole Soul
+
+Fix to avoid false positive of ""Teledildonics"". Od Mishehu
+
+rm ""hello"" - causing FPs in music-related pages. Also not a bad word. --Reaper 2012-05-05
+
+Use single string. - KoH
+
+Wrap both sides of ""was here"". - KoH
+
+Remove mild or ambiguous terms. There is a reason why we have filter 11 for ""suck."" - KoH
+
+Hiding due to potential for abuse.
+
+Format and reduce condition usage. -DF
+
+Delimit ""slut"" to allow ""Slutsky"", at least for now. RF 2015-06-19
+
+Why is there the line
+! removed_lines irlike ""\w\*\*?\w"" ?
+
+Optimize - we can reduce false positives in future. RF 20150817
+Remove false positives due to dismbig pages with bad words in their name. Note this test is only carried out if it would otherwise be considered vandalism, and so is rare. RF 20150819
+
+Include the spelling ""paedophile"" in the words to be caught. --Od Mishehu
+Remove ""awesome"" for now. RF 2015-10-29
+! added_lines rlike ""\bDick\b\s[A-Z][a-z]"" & ...
+Should exclude FPS for poele called Dick Foo. RF 20151101
+
+Merging in one rule from 285 so it can be disabled. Filter does not need to be private as a general-purpose vandalism filter, methinks. Also increasing edit delta and removing max length of added_lines, those wouldn't seem to help false positives that much. Finally, removing the now-unneeded short-circuiting that was fixed in MediaWiki 1.28. I'm keeping a close eye on the logs ~MA 2016.09.11
+
+Removing ""hi"", causing false positives and is already covered by Special:AbuseFilter/664 ~MA 2017.01.01
+
+Adding cuck. Tested at filter 839, looks good. --Someguy1221
+
+Allow people called Foo Dick as well as Dick Foo. -Cyp 2017-10-09
+
+Add summary tests as well.-CYBERPOWER
+
+Adding an exception for edit summaries containing a bad word, for if the article already contained a bad word, and the summary looks to be autogenerated from a section edit. Without it, this triggers false positives when new users and IPs edit sections whose title contains a bad word. Happens with some music-related pages. --Someguy1221
+
+Excluding ""It was here"" from the ""____ was here"" test. --Someguy1221
+
+Cleanup, whitelist {{sortname|Dick|Tracy}}, etc. ~MA",Addition of bad words or other vandalism,0,1159239,0,0,disallow,0,default
+172,"!""confirmed"" in user_groups &
+(
+ length(added_lines) < 1 &
+ (
+ article_namespace == 0 &
+ (
+ (
+ rmwhitespace(removed_lines) rlike ""==\w+=="" &
+ (
+ rmwhitespace(old_wikitext) contains rmwhitespace(removed_lines + ""=="") &
+ ! rmwhitespace(new_wikitext) contains rmwhitespace(removed_lines + ""=="")
+ )
+ ) |
+ (
+ rmwhitespace(old_wikitext) contains rmwhitespace(""=="" + removed_lines + ""=="") &
+ ! rmwhitespace(new_wikitext) contains rmwhitespace(removed_lines + ""=="")
+ )
+ )
+ )
+)",365454,Zzuuzz,20170514124339,1,"This seems to work to see section blanking, testing as log only to see if it gives false positives and for speed.
+
+OK, added basic check if the removed_text does contain ""=="", this line could maybe be made better by using a regex on it to check if it is ""== sectiontitle =="" ..??
+
+Reenabled, it still may give some false positives. --Beetstra
+
+Speedup, specificity --Beetstra
+bit upgrade? --Beetstra
+
+Small case tag, for consistency with other tags. -x
+
+null edit, small case change didn't get through - Cen
+
+trying to deactivate and reactivate - Cen
+
+tagged edits are not reassigned after rename, see bugzilla 18908 - Cen
+
+(added_lines == """") does not work, (length(added_lines) < 1) does .. curiously.
+
+Updating filter --Beetstra
+False positives on removing empty sections can we test for that? Crudely even
+old_wikitext contains [^=](==+) *\n\1[^=]
+(i.e. it had at least one empty section) might do the job.
+Rich Farmbrough.
+
+Encountered another form of blanking, attempted to add to filter --Beetstra
+
+Format. -DF",Section blanking,0,935925,0,0,tag,0,default
+30,"edit_delta < -5000 &
+new_size >= 50 &
+page_namespace == 0 &
+!(""confirmed"" in user_groups) &
+length(summary) < 60 &
+!(user_name in page_recent_contributors) &
+!(""#redirect"" in lcase(added_lines)) &
+!(summary irlike ""\bcop(y|ied)|und(id|o)|\brv[vt]?\b|revert|vandal|remov|clean|delet|\brmv?\b|\brepea?t"") &
+rcount(""\n[|!<]"",removed_lines) / (rcount(""\n"",removed_lines) + 1) < 0.9 &
+length(rmwhitespace(added_lines)) < 3000",14882394,MusikAnimal,20181018234235,1,"fixing the part about recent contributor.. <nixeagle>
+
+No, that was the intended logic, to test whether the user is The Only contributor. Putting that back. Deleting from a page you created should be fine, but blanking from an established page just because you edited it previously generally would not be. - Dragons_flight
+
+Restoring Prodego's edit. - DF
+Thanks for the talk page note DF / Don't trip if it is a full blank, overlaps with filter 3 -Prodego
+
+Changed from ""new editor"" to ""non-autoconfirmed editor"" for clarity. -xeno
+
+optimizing - Hersfold
+
+I increased the threshold to -2000 to decrease the number of hits - Ruslik0
+
+Fixing the recent contributors thing; this is a string of up to ten users, so != doesn't work. - hersfold
+
+exception for 69.226.103.13 - Cen
+
+NO! Do not exempt particular IPs, its a waste of checks. If they want exemption, they can create an account. Its free -Prodego
+
+Increased threshold to 5000. - Ruslik
+Closed gap between filter 3 and filter 30 - previously could reduce articles to exactly 50 without triggering. RF
+
+Added action check, so it'll stop pinging on AFT comments. - rsterbin
+
+Clean layout and reduce condition count. -DF",Large deletion from article by new editors,0,840871,0,0,"warn,tag",0,default
+633,"user_editcount < 50 &
+user_mobile == 1 &
+summary rlike ""^(?:/\* .* \*/\s?)?(?:Fixed typo|Fixed grammar|Added links|Added content|[Ff]ixed)$""",19818307,Crow,20181218191236,1,"Created by request of User:AddWittyNameHere, tested at 358 in this form between 4:36 and 19:50 on Sepotember 1st. --Od Mishehu
+
+Removing tagging pending discussion at [[User talk:Od Mishehu#A barnstar for you!]] ~ MusikAnimal 2014.09.03
+
+See Bugzilla report at: https://bugzilla.wikimedia.org/show_bug.cgi?id=70349
+
+Disabling based on that these edit summaries are simply buttons users are hitting in the mobile app. Bug report yielded WONT FIX resolution. If we want to create a filter it should test for all canned edit summaries and tag them as such
+
+Re-enabling to indicate usage of a canned edit summary, log only at the moment ~MA 2014.12.12
+
+Tag ~MA 2014.12.14
+
+Added the single word ""fixed"" -C 18Dec18",Possible canned edit summary,0,808716,0,0,tag,0,default
+636,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+edit_delta < -400 &
+new_size > 200 & (
+ length(summary) == 0 |
+ summary rlike ""^/\*.*?\*/\s*$""
+) &
+removed_lines irlike ""<ref.*?>"" &
+!(added_lines irlike ""<ref.*?>"")",14882394,MusikAnimal,20181231024947,1,"Log only ~MusikAnimal 2014.09.25
+
+
+Boldly adding a warning. The rationale behind this is as follows:
+~ Filter works, triggered only when a large amount (400+ bytes) of sourced content is removed
+~ This does not prevent save nor deter the removal of the content, it simply politely asks the user to use an edit summary
+~ Under standard practice patrollers would revert unexplained removal of sourced content anyway
+~ Most hits appear to be blatant vandalism
+
+Following this logic, this filter should serve well. For the good editors, it teaches to use an edit summary when removing content. The patrollers would revert and ask them to do the same, instead the filter is doing that job. For the bad editors, the fact that they have to hit save twice alone will help prevent vandalism.
+
+If someone has an issue with this filter or feels there should not be a warning, feel free to remove warning, but please let me know, and consider starting a thread at [[Wikipedia talk:Edit filter]] explaining why you think this is a bad idea. Please also keep the filter enabled. Thank you!
+
+~MusikAnimal 2014.10.01",Unexplained removal of sourced content,0,726764,0,0,warn,0,default
+3,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+new_size < 50 &
+old_size > 300 &
+!(user_name in page_recent_contributors) &
+!(lcase(added_lines) rlike ""#redirect|{{((db-(attack|g10))|wi)}}"")",14882394,MusikAnimal,20181018194624,1,"Should there be a note in the warning about what to do if you're a BLP subject attempting to blank your own article?
+
+Also, yay, first comment! - east
+
+These notes are not private, by the way.
+
+The false positives page has not been created yet, so the warning page is incomplete. I deactivated the action 'warn'.
+
+Re-enabled after creating it -- Andrew
+
+We really need a better way to talk. Do tildes work here? ~~~ (east)
+Guess not :'(
+
+Ignore if editor is the only editor of the page (faked by checking last 10 editors)
+
+Redefine blanking as any size under 50, where the page started at >500 (min delta of 450)
+
+Logic fixes, some of the conditions were redundant - Hersfold
+
+Note that filter applies only to new users. (eg non autoconfirmed but new user is shorter)
+
+Optimizing - Hersfold
+
+Add redirect avoidance, necessary if this is going to allow pages to not be fully blank. - DF
+
+changed ""user_name in article_recent_contributors"" to ""!(user_name in article_recent_contributors)"" - Hersfold
+
+Adding & !(user_name == 69.226.103.13) to temporarily exempt that IP address from this filter, see my talk page for details. - Hersfold
+Scratch that, removing per Prodego's comments on filter 30. If it got removed there, I shouldn't be adding it here. - Hersfold
+I added an exception for {{db-attack}} template. - Ruslik
+I added an exception for {{db-g10}} template. - Od Mishehu
+Optimization of the code. - Ruslik
+Moved new size check before namespace check - rationale very few edits result in size < 50, most are to namespace 0. Moved old size before namespace check - rationale _given_ new size< 50 very few edits will have oldsize > 500 (especially by new users), however most will be to mainspace. Previous to change average run time 6.52ms, 27 conditions. RF
+OK condition stats seem meaningless varying from 8 to 500 I'll review in 10,000 edits time.
+Run 5.97 conditions 14, but I don't trust them. RF.
+
+Now monitoring namespace 100 (portal) Shirik 12 Feb 2010
+
+Optimize --Tim
+
+Adding Wiktionary template to prevent false positives. -v^_^v
+
+Optimize using regex. - KoH
+Portals are simply not worth the runtime. - KoH
+
+Temporarily adding the reference desks due to a persistent IP-hopping vandal. Will disable when it's over.--JD
+
+Was ultimately not needed. Removed.--JD
+
+Ugh, is that vandal watching this filter? --JD
+
+The vandal seems to have again stopped blanking. If (s)he resumes, re-add the condition. --JD
+
+Vandal is back. Will leave on longer. --JD
+
+Removing now. Sorry for the comment/log spam here. --JD
+
+Decrease old_size restriction to > 300 to pick up what few edits Filter 344 catched that this one did not. ~ MusikAnimal 2014.09.25
+
+Reorder to reduce conditions. -DF",New user blanking articles,0,700522,0,0,"warn,tag",0,default
+650,"article_articleid == 0 &
+(
+ article_namespace == 0 &
+ (
+ !new_wikitext rlike ""(?i)(\[\[category:|^# ?redirect ?\[\[)"" &
+ !""isambiguation"" in new_html
+ )
+)",7529026,Samtar,20160721182156,1,"optimised --zzuuzz
+disabling to bring down the condition limit -z
+re-enabled -z",Creation of a new article without any categories,0,695601,0,0,,0,default
+279,"!""confirmed"" in user_groups & (
+ !user_name in page_recent_contributors & (
+ action = ""edit"" & (
+ ! ""/TWA"" in page_title /* The Wikipedia Adventure */
+ )
+ )
+)",502540,Xaosflux,20190104180929,1,"Converting this. Many vandalism attempts that get around the filters are from the user repeatedly testing the filters. I'm testing this to see if we could throttle and disallow such attempts.
+
+Finalized rate limit.
+
+Expanded to all namespaces due to personal attacks that could be caught. -- Shirik 23 Feb 2010
+Exempted the ""createaccount"" action
+
+-Disable, testing something
+-Reenabled.
+Disable temporarily - Shirik
+Exempted [[User talk:Dr Aaij]] per WP:FALSEPOS report until I figure out how to resolve it. -- Shirik 8 Mar 2010
+:It's probably because the filter is throttling by page ... which means any non-autoconfirmed user (whether it be an IP or an account) is going to add to the filter's counter, even though theyre all different people. It's a pain, but it helps stall mass vandlaism attempts from /b/. -- Soap
+Optimize. Tim1357 5/5/10
+rm 25722923, it's over now and unlikely to appear again -- Soap
+
+Turn into tag only (see http://en.wikipedia.org/w/index.php?title=Wikipedia:Edit_filter/False_positives/Reports&diff=450787156&oldid=450749177#Various). Note: most of the vandalism prevented by this filter is already prevented by other filters. -Sole Soul
+
+Keep this from pinging on feedback -rsterbin
+
+Setting back to disallow due to low falsepos rate. Tweaked to prevent false positives of the type mentioned by sole soul.
+
+excluding the wikipedia adventure (/TWA) - Cen
+Added comment about above. RF
+Optimise. RF 20150816
+
+Does not need to be private ~MA
+
+20190104-Updated deprecated parameters ~Xa",Repeated attempts to vandalize,0,616212,0,0,"throttle,tag",0,default
+432,"!(""confirmed"" in user_groups) & (
+ article_namespace == 0 & (
+ edit_delta < 300 & (
+ added_lines rlike ""^[a-z]{4}"" & (
+ !(removed_lines rlike ""(^|\n)\s?[a-z]"") & (
+ !(added_lines rlike ""^http|^with|^where|^however|^which|^also|\=|\:|\|"") & (
+ !(article_text rlike ""\b[lL]ist\b"") & (
+ !(""<source lang="" in new_wikitext) & (
+ !(new_wikitext rlike ""India|Pakistan|Bangladesh"")
+ )
+ )
+ )
+ )
+ )
+ )
+ )
+)",14882394,MusikAnimal,20160614010135,1,"Test whether starting a new line with small letters is unique to vandalism. Will keep it without throttle initially. Log only. -Sole Soul
+
+Exceeded my expectations. High catch rate with nearly no FPs. Turn to warn and tag for now. -Sole Soul
+
+It's called lowercase. Also, require at least two in a row to prevent stuff like iPod, eBay, etc. In any case, my opinion is that it should never be set to disallow because there will always be plenty of FPs no matter how hard we try. - KoH
+
+Add ""|"" to exceptions, a common character in infoboxes. -Sole Soul
+:Could you improve the warning message? Or request its creation, because this is very confusing for newbies who don't know what they did wrong. -Petrb
+
+A lot of good faith edits cached by this filter are on topics related to south Asian countries. Although most of these edits are not consistent with WP:MOS, it is not the purpose of this filter to enforce WP:MOS neither is it to warn good faith editors. -Sole Soul
+
+Format to reduce typical condition count. -DF",Starting new line with lowercase letters,0,558578,0,0,"warn,tag",0,default
+225,"!(""confirmed"" in user_groups) &
+(article_namespace == 0 | article_namespace == 3) & (
+ match := ""ABUSER|\bA+SS+[- ]?H+O+L+E+\b|BITCH|\b(C+O+C+|K+A+W+)K+S*\b|LOO+S+E+R|SOOO|CONVICTED|[KC]UNT|DILDO|D+O+U+C+H+E|EFF+ (Y+O+U|U)|F+U+(KK|C+K|K+C)|GARBAGE|HAGGER|HITLER|JEWS|MENTALLY|M(WA|U)HAHA|N+I+GG+(E+R|A+H*)|N[A4]ZI|PA?EDO(F|PH)ILE|FAGG|PEA?N[UI1][S5]|S+L+U+T|POOO+P?|W+H+O+R+E|PERVERT|RACIST|S+H+[1I]+T+\b|SUCK|VAGINA|VIAGRA|WANK(|A|ER|ING)|(W|WANKA)KNIGHT"";
+ (
+ summary rlike match &
+ !summary rlike (""\[\[Special:Contributions.*("" + match + "".*)"")
+ ) | (
+ added_lines rlike match &
+ !removed_lines rlike match &
+ !article_text rlike match
+ )
+)",14882394,MusikAnimal,20180807154519,1,"Creating per RFPP. - KoH
+Not working ... - KoH
+Re-enabling, disallow off. - KoH
+Too many false positives from added_lines in removed_lines. - KoH
+
+Could it be changed to prevent the creation of ""Aaron Blakk""? - \ /
+
+First, why did you undo my last edit here? Second, why would you want to prevent the creation of user names that HELP us detect him? The user names themselves are not offensive, the edits are. - Wknight94
+
+It was my first edit to the AF, must've inadvertantly done it - sorry. I see your point in re to that, it was only if we were blocking one we may as well block another. - \ /
+
+Okay, no problem on the inadvertent undo. Right, I don't think we should be preventing any user name creation. Like my earlier edit used to say, user name prevention is only when THE USER NAME ITSELF is offensive. In this case, they're not. That eliminated the first part of this filter. The second part is catching general vandalism that should be handled in one of the general vandalism filters, and was catching more non-GT than GT. That makes this filter mostly pointless so I had disabled entirely. - Wknight94
+
+You know, I've actually found this filter to be quite useful, even if much of it is non-GT. There is almost no good reason to add obscenities in all caps. Currently we don't have a filter that checks for this and disallows the action. - KoH
+
+If it doesn't catch false positives, leave it running. For supportability, it should probably be merged into 52 though. (I changed the name here to reflect actual usage). - Wknight94
+
+No, it's different. This checks not only for edit summaries, but also added content. (A more descriptive title would be ""Adding obscenities in all caps,"" but that would be too obvious. If a vandal saw that in the log, they would know to put the obscenity in lowercase letters.) - KoH
+SUCKS, rearrange. - KoH
+Actually, not common enough to matter, so just alphabetize. - KoH
+Expand. - KoH
+Restrict to main namespace per FP on Jimbo's talk. - KoH
+Some more. - KoH
+Viagra, your mom. - KoH
+Define variable match for increased readability. - KoH
+
+please urgently fix so that it doesn't match PEACOCK (false positives) - Cen
+
+Added \b before COCK. - Ruslik
+
+Added ass with \b's. - KoH
+
+FP's on GAY. - KoH
+
+Renamed. - KoH
+
+No need to be private -Prodego
+
+Modified ""RACIS"" to ""RACIS(T|M)"" per false positive
++1 --NW
++1, and change to better title. --NW
++1 --NW 11/25
++2 --NW 11/26
++2 --NW 11/27
+
+Extending to user talk, will revert if there are false positives. =TS
++2 --NW 11/28
++1 --NW 12/7
++2 --NW 12/9
++2 --NW 12/13
+Add \b to FAG for temporary fix (SFAGO) so that a user can create and/or edit an article. Would it be better to instead add & !(added_lines rlike ""SFAGO"") ? -- Soap
+removed \b to again be able to catch variants -- Soap
+Add FUKERS (but not FUK due to potential false positives) -- Shirik 1 Feb 2010
+Word boundery added to beginning of FAG -- Shirik 5 Mar 2010
+condom -- Soap
+autoconfirmed -> confirmed & autoconfirmed -- Shirik 21 Mar 2010
+
+false positives -P
+
+don't disable entirely because of a few fp's, warn for now - KoH
+
+Adding EFF YOU - Someguy1221
+
+Added some. made so things like 'PEEENNNISS' would stillmatch - TIm
+
+Changing to disallow: I reviewed some 100 edits flagged by this, and could find no False P's. --Tim
+
+Added looser, and Poooop, Tim
+
+Added AWESOME and SOOO, both things that I think shouldn't even be in the article space. --Tim
+remove FAG due to false positives which appear now and then (it's an acronym) ... previously this filter was warn-only, but now it's disallow -- Soap
+
+Just had a falsepositive where an IP reverted a user whose name was one of the proscribed strings (""WANKA"") and was disallowed because it appeared in the edit summary. I think targeting the edit summary may be a tad overkill. -v-_-v
+rm AWESOME -- Soap
+adding FAGG (for faggot) back in. Can't match FAG because it is the name of a company. -- Soap
+
+Removing ""your mom"" section; disallowed by another filter. - Someguy1221
+adding \>ASS, in order to allow editing of [[Liberty Bell]] (it will be present in removed_lines whenever \bA+SS+ is present in added_lines and thus nullifies itself). Probably temporary. -- Soap
+is douche commonly spelled without the u? I made it required. -- Soap
+false positive on FUK ( an airport in China) -- Soap
+ASS apparently is an acronym, has caused problems before, will remove for now
+rm GAY, will try for a while -- Soap
+Scunthorpe problem. - KoH
+This will match a page titled ""SCUNTHROPE"" not ""Scunthrope"". -Sole Soul
+Added ""NAZI"" and ""JEWS"". --Reaper 2012-02-29
+
+False positive where user is reverting vandal with inappropriate username. - KoH
+
+Remove SOCK(PUPPET), it is a WP: shortcut. - KoH
+Optimize for conditions, improve regex a little. RF 2010724
+
+Allow the word SHIITE; additionally, this filter should be hidden. - Od Mishehu
+
+Public per [[Special:Permalink/784131724#Privacy of general vandalism filters]] and the guideline ~MA",Vandalism in all caps,0,482872,0,0,disallow,0,default
+50,"!(""confirmed"" in user_groups) &
+page_namespace = 0 &
+length(rmwhitespace(added_lines)) > 12 & (
+ shouting := ""^[A-Z0-9\s\pP]*?[A-Z]{5}[A-Z0-9\s\pP]*$"";
+
+ added_lines rlike shouting &
+ !(removed_lines rlike shouting) &
+ !(added_lines rlike ""#REDIRECT|__(NOEDIT|NEW)SECTION__|__(NO|FORCE)?TOC__|^\*|{{[A-Z0-9\s\pP]*?[A-Z]{5}[A-Z0-9\s\pP]}}"")
+)",14882394,MusikAnimal,20181018234925,1,"Contribution consists only of all-caps, numbers, and punctuation.
+
+> Removed some false positives and limited user contribs --Admiral Norton
+
+More efficient position to check editcount -DF
+
+Change editcount to check for autoconfirm, no sense making arbitrary limits.
+
+rearranging for efficiency - Hersfold
+
+modifying regex to try for a bit more efficient setup. Old regex is:
+^[A-Z0-9\s\pP]*[A-Z]{5}[A-Z0-9\s\pP]*$ - Nixeagle
+
+Would this be better with (added_lines rlike ""^#\s*REDIRECT\s*\[\["") ? - hersfold
+
+exempted all caps templates - xaosflux
+
+add tag ""shouting"" - Cen
+
+Formatting and condition count reduction. -DF
+Use a variable to avoid compiling the regex twice. RF",Shouting,0,480960,0,0,"warn,tag",0,default
+189,"article_namespace == 0 &
+(
+ ! ""confirmed"" in user_groups &
+ (
+ old_wikitext rlike ""(c|C)ategory\:(l|L)iving people"" &
+ (
+ line1:= ""(pa?edo(ph|f)il|little\sboys|molest|predat(e|o)r|\brap(e|ing|ist)|penis|\bcunt|\btwat|bitch\b|slut\b|prostitut|whore|\bf[-._ ]?u[-._ ]?c[-._ ]?k|pimp\b|faggot|brothel|\bgays|(is|are)\sgay|\(gay\)|\bwank(a|er|ed|ing|s)?\b|bellend|dickhead|terrorist|\bcocks?\b)"";
+
+ line2:=""(drugs|abuse|ha(ve|ving|s|d)\ssex|sex\swith|\bporn)"";
+ line3:=""(fired\b|sacked|expelled|corrupt|fraud)"";
+
+ (
+ added_lines irlike line1 & ! removed_lines irlike line1
+ ) |
+ (
+ added_lines irlike line2 & ! removed_lines irlike line2
+ ) |
+ (
+ added_lines irlike line3 & ! removed_lines irlike line3
+ )
+ )
+ )
+)",365454,Zzuuzz,20160629222729,1,"imported for the most part from filter 39, but change area from schools/colleges/.. to BLPs, identified for now by directly containing Category:Living people, but it's not complete at all.
+This kind of filters SHOULD NOT BE SET TO WARN OR DISALLOW, they will have false positives. KEEP IT TO LOG OR TAG ONLY - Cen
+I'll reactivate it when I can watch - Cen
+
+Works fine, add this to the tag ""possible libel or vandalism"" - Cen
+
+Removing a few more common words - Cen
+
+update to reduce some false positives by checking removed_lines for less severe strings - Cen
+
+test for perf - Cen
+
+keep ref count check out, add a \b - Cen
+
+reenabled by request - prodego
+Living people should now be more complete, only Infobox comic creator now transcludes it. (Lifetime has been subst'ed and it has been removed form BLP unsourced)
+
+Added check of removed lines to prevent false positives. Simplified code by introducing variables. - Ruslik
+'Slutskaya' is a name ... Ruslik's add-on usually works, but not always. Adding \b -- Soap
+
+*Added terrorist, please don't hesitate to revert/modify if I cocked up. --HJ
+
+Catching masked ""fuck"". --Reaper
+
+Replace the expensive ""lcase(old_wikitext)"" with ""old_wikitext rlike"". -Sole Soul
+
+Clean layout and reduce condition count. -DF",BLP vandalism or libel,0,466012,0,0,tag,0,default
+132,"!""confirmed"" in user_groups &
+(
+ article_namespace == 0 &
+ (
+ edit_delta > -2000 &
+ (
+ removed_lines irlike ""\[\[\w?category"" &
+ ! new_wikitext irlike ""\[\[\w?category|#\w?redirect|stub\w?}}|{{\w?uncat|{{\w?db-attack|{{\w?db-g10|{{\w?disamb|{{\w?dab|{{\w?wi""
+ )
+ )
+)",365454,Zzuuzz,20170514124337,1,"Per request at [[WP:RAF]], the removal of all categories in an article often implies vandalism.
+
+Fix redirect catcher and exclude large deletions targeted elsewhere. -DF
+
+Setting to warn. Not a single false-positive in the last 100 hits. --Conti
+
+Using message MediaWiki:Abusefilter-all-categories-removed - Cenarium
+
+add tag ""categories removed"" - Cen
+
+I added ""stub}}"" to the exceptions. - Ruslik
+
+I added the ""{{uncat"" - usually if a new user adds this, (s)he is familiar enough to know what (s)he's doing.
+
+I added lcase to old_wikitext. - Ruslik
+I changed old_wikitext to removed_lines. This is less resource consuming - Ruslik
+
+Added the {{db-g10}} template and its commonly used redirect {{db-attack}} to the list of safe strings - in case of severe attacks, the content of the page (including the categories) will be replaced by this template. Od Mishehu
+
+Added disambiguation templates to exceptions. - Ruslik
+
+Optimization. - Ruslik
+
+Added the wiktionary softredirect template as it tripped a falsepositive on this and two other filters. If I screwed it up, fix it and trout me before I go. -v^_^v
+
+Added exclusion for really big edits. -- Tim 8/25
+ Scratch that, the filter still applies to big edits. -- Tim
+
+Format. -DF",Removal of all categories,0,420273,0,0,"warn,tag",0,default
+380,,258000,King of Hearts,20181103012136,1,,Multiple obscenities,1,394328,0,0,disallow,0,default
+231,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+added_lines rlike ""[a-zA-Z0-9]{50,}"" &
+!(removed_lines rlike ""[a-zA-Z0-9]{50,}"") &
+!(added_lines rlike ""https?://[^ ]*?[a-zA-Z0-9]{50,}"") &
+!(added_lines rlike ""word|thumb|file|image|sequence"")",365454,Zzuuzz,20181203165338,1,"A long string of letters and/or numbers may be indicative of vandalism. - KoH
+
+FP: Adding links. - KoH
+
+Made the string length allowed before tagging longer, as it's catching URLs.. -Versageek
+
+Hope this check for http is better... - KoH
+
+Also check https. - KoH
+
+Virtually everything triggering this hits another filter, and this uses a lot of conditions, disabled, consider merging in to 135. -Prodego
+-ok -P
+Turn to disallow. -Sole Soul
+
+I can think of legitimate uses for 50+ character strings. From experience, in a warn-tag filter, a warning already blocks out over 75% of the vandalism. - KoH
+
+False positives are associated with the word ""word"". -Sole Soul
+
+Optimize for conditions. RF 20150724
+
+Adding the word ""image"" per false positive. Od Mishehu 20171227",Long string of characters containing no spaces,0,380302,0,0,"warn,tag",0,default
+364,,365454,Zzuuzz,20170514124359,1,,Changing the name in a BLP infobox,1,368604,0,0,tag,0,default
+46,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+edit_delta < 300 &
+ccnorm(added_lines) rlike ""\bP+([\.\,\/\?\>\<\!\@\#\$\%\^\&\*\(\)\_\+\-\=\{\}\|\[\]\\\:\;\']?)O\1?O+\1?P+\1?(E*\1?S+\1?|E+\1?R+\1?S*\1?|E*\1?D+\1?|I\1?N+\1?G+\1?)?\b"" &
+!(old_wikitext irlike ""\bP+OO+P*(E+R+S*|E*D+|E*S+|I+N+G+)?\b"")",14882394,MusikAnimal,20181023193500,1,"*Simple regex should catch poop vandalism, don't know if + is acceptable over {1,} in this particular system. Testing only for now. ""Poo"" is not matched as tests produced too many false positives. If I've made a really stupid mistake somewhere, don't hesitate to fix it. If there are false positives, don't hesitate to escape it: … & !(rmspecials(ccnorm(added_lines)) rlike ""false positive regex"") —Nihiltres
+*Added case that this shouldn't be caught if there's poop in the article title, or if the action's done by a sysop —Nihiltres
+*Changed from sysop to autoconfirmed - Prodego
+*Changed from checking title for the regex to checking the old wikitext for the word poop. -Prodego
+*Filter seems very accurate, enabling warnings. -Nixeagle
+*Please don't set this one on disallow, warnings are fine. -Prodego
+*A couple of minor fixes/simplifications and rationalized the notes here. —Nihiltres
+*fixed so we don't trigger on a false positive by http://en.wikipedia.org/wiki/Special:AbuseFilter/examine?wpSearchUser=24.212.44.161&wpSearchPeriodStart=&wpSearchPeriodEnd=&submit=1&title=Special%3AAbuseFilter%2Fexamine . Also re-order with the quicker checks to the left. Disabling warning while we test. -Xaosflux
+*Reverting you xaos, I did some testing and changes to hopefully optimize it and fix a false positive. -Nixeagle
+*Setting to deny. -Hersfold
+*DISABLING - Taking almost three seconds to run - Hersfold
+*Taking out ""action = edit"", shouldn't be necessary since we're checking for autoconfirm right after it - Hersfold
+*Rationalized the comments here and noted who said what, also note that if you're going to use \b in the regex make sure that it matches variants like ""pooppp"" or ""pppoop"", I recently had to add a + back after the first P. —Nihiltres
+*Removed the rmwhitespace() bit and modified the regex to compensate since the \b and the rmwhitespace() together produced many false negatives. If you start getting false positives, fix it or revert it, but I'm pretty sure this should behave decently —Nihiltres
+*Added a case with some false positives I found using Special:Prefixindex, just to be sure —Nihiltres
+*Added ""poo power"" to exceptions. - Ruslik
+*Simplified filter. - Ruslik
+*Added ""shampoo"" to exceptions. - Ruslik
+*Added ""Come Poop with Me"" to exceptions"". - Ruslik
+*Removed ""shampoo"" from exceptions because the regex doesn't catch it and it'll only cause false negatives, added instead the offending URLs from the false positive found. —Nihiltres
+*Added ""youtube poop"", because it is producing false positives at a higher rate than just about anything else as of 11-29-09. - Soap
+*Changed trailing P to (P|!) experimentally to catch ""Poo!"" cases as well; changed check for old poop to use removed_lines instead of old_wikitext for efficiency… feel free to revert either change if problematic. The ""youtube poop"" and ""party pooper"" additions are good. —Nihiltres
+*Changed (P|!) to [P!] since that's probably better form. —Nihiltres
+*Changed instances of \s? to \s* for better catching of variants… there may have been a reason I didn't include that before, but I don't remember it now. —Nihiltres
+Added ""Poopdeck"" to exceptions. - Ruslik
+added ""poopatine"" -- Soap
+and ""poopcity"" -- Soap
+Removed straight poop URL per discussion on WT:EF -- Shirik 12 Feb 2010
+Added ""The Rez Sisters"" to allow a quote reported at WP:FALSEPOS -- Shirik 21 Feb 2010
+Added ""Poopin up on ya"" per false positive -- Shirik 22 Feb 2010
+Add ""pookkum"" ... I had wanted a more intelligent solution, but it seems there isnt one that would not lead to this filter allowing ""poo poo"" through -- Soap
+""ucanpooptoo"" -- Soap
+
+Overly intensive, clean it up before reenabling (move exceptions to regex) -P
+
+Trying a different approach. Matches if poop is not used anywhere in the old_wikitext. Of course, for speed, that step goes last. Also added a line to strip big edits (more then 300 characters added). Log only for a few days. Hidden from public view. Tim 4/28
+
+Nothing has broken so far. Moved regex to constant. Added regex to match things like p.o.o.p.. Still watching closely. - Tim 4/28
+
+Remove intensive last line. Tim
+
+Tagg as ""possible vandalism"" until we turn on ""Disallow"". -Tim 4/28
+
+Fix false positive for ""poor"". Tim
+
+Warn. Tim 4/28
+Disabling. We're near 5% condition limit hits and this is a candidate for the culprit. -- Shirik
+I optomized a few things, lets see if this works. Will disable if needed. -- Tim 4/29
+
+Optimized -- Shirik 29 Apr 2010
+
+Should not be private. -P
+
+This filter appears to be catching on the string ""oo"" with an ""l"" on either side of it, which is causing false positives with words like ""pooling"" and ""bloodflow"" (see the F+'s page). Since I can't make heads or tails of the filter (since I barely know enough about the code), I'll leave that for another filter editor to deal with, but the present state isn't acceptable. -v-_-v
+:Made a fix that I believe will solve the problem. Just as 'popping' doesnt match, now 'pooling' wont either --Soap
+:Nope, fix isn't working, Soap. Another ""pooling"" FP today. -v-_-v
+::Maybe I should have removed the plus sign from the first part instead. Should be OK now but I'll keep watching. -- Soap
+for now, changing * after second 'P' to + to stop blocking isolated ""poo"". More useful suggestions welcome. -- Soap
+Warn + disallow, as with other vandalism templates. - KoH
+Bracket per DF and simplify regex. Suggest we user ""rmspecials"" function to simplify. RF 2015-02-18
+Used irlike in last expression to simplify.
+(Maybe we should use /p{P} and/or /p{S}. Or loose that complexity, since most poop vandalism is simple.)
+Updated for new ccnorm. RF 20160812
+
+https://phabricator.wikimedia.org/T29987 fully deployed and confirmed working, removing old code ~MA 2016.08.18
+
+Simplifying old_wikitext comparison (irlike is case insensitive and we shouldn't have l33tsp34k in existing wikitext) --Kaldari 2016-11-14","""Poop"" vandalism",0,356945,0,0,disallow,0,default
+98,"article_articleid == 0 &
+(
+ new_size < 150 &
+ (
+ article_namespace == 0 &
+ (
+ !""extendedconfirmed"" in user_rights &
+ (
+ !added_lines irlike ""{{(?:surname|given name|delrev|softredirect|db-unpatrolled)}}|#redirect"" &
+ !'disambig' in lcase(new_html)
+ )
+ )
+ )
+)",141948,Amorymeltzer,20180802160245,1,"Users creating very short articles
+
+A size of 200 was more or less chosen at random, it make sense to adjust it higher or lower to better fit user behavior.
+
+Apparently one can create correct disambigs in less than 200 characters...
+Added {{softredirect}}. - Ruslik
+
+Added {{db-unpatrolled}}, see bugzilla #18114 - Stifle
+
+Stubs aren't necessarily bad. I think the warning (""make your article longer"") needs to be changed, we don't want to discourage good edits. -Prodego
+
+Disabled for sysops. - KoH
+
+I limited this filter to non-autoconfirmed users and decreased the size limit to 150. - Ruslik
+
+add tag ""very short new article"" - Cen
+
+I rearranged conditions. - Ruslik
+As did I, hopefully this will improve runtime. - Hersfold
+Nope, that made it markedly worse. - Hersfold
+Try this instead... - Hersfold
+
+There is nothing wrong with a short article, lets not patronize. People can work in steps. Disable - P
+
+Agree - remove warning bur re-enable because tagging them is useful - Cen
+
+Optimizing. -TS
+Optimized -- Shirik 21 Feb 2010
+
+optimised 2015 --zzuuzz
+
+User user_rights instead of user_groups to turn off for sysops after recent ACPERM-inspired bump-up to extendedconfirmed from confirmed (see [[Special:Permalink/822578953#Filter 98 and ACTRIAL]]) -- Amory",Creating very short new article,0,339401,0,0,tag,0,default
+220,"article_namespace == 0 &
+(
+ ! ""confirmed"" in user_groups &
+ (
+ added_lines irlike ""(<img|<a href|([^\[]|\[\[(File:|Image:)?)https?://[\S]*?\.(jpe?g|png|gif|bmp))"" &
+ (
+ ! removed_lines irlike ""(<img|<a href|([^\[]|\[\[(File:|Image:)?)https?://[\S]*?\.(jpe?g|png|gif|bmp))"" &
+ (
+ rcount( ""external ?(media|image|audio|video)|<ref>|{{cite"", lcase(added_lines) ) <=
+ rcount( ""external ?(media|image|audio|video)|<ref>|{{cite"", lcase(removed_lines) )
+ )
+ )
+ )
+)",365454,Zzuuzz,20170514124344,1,"Warns new users about adding external images (which don't work), HTML images, or HTML links.
+
+Log mode only. - KoH
+
+removed_lines, of course. - KoH
+
+jpeg. - KoH
+
+False positive: Adding external link to image. - KoH
+
+Faster regex. - KoH
+
+No false positives, setting to warn. - KoH
+
+Added tag so people can go back and clean up the mess. - KoH
+
+False positive: <ref> tags. Making > an exception to http; <img> and <a href> would still get caught. - KoH
+
+Exempt {{external media}} per EF/R. - KoH
+
+Checking for <ref> in added_lines. - KoH
+
+Use rcount. - KoH
+
+Check for {{cite. - KoH
+
+Correct name: images --> images/links. - KoH
+
+Kill warning, it can be fixed later -P
+
+adding s? to http 05/27/13 --Soap
+
+Catch File:http and Image:http - Jackmcbarn
+
+Layout cleanup and condition count reduce. -DF",Adding external images/links,0,303179,0,0,"warn,tag",0,default
+260,"user_editcount < 22 &
+edit_delta < 3000 &
+!(user_name in page_title) &
+!(""[Ss]andbox"" in page_title) & (
+ regexstring:= ""\b(MAS+IVE|ENORMUS|HUMO+NGO?US|HUGE|TINY|SUCK(ED|ING|S)?|MY|MAH|HIS) ((KAW|CO)[CK]+|DICK|PRICK|BAL+S|[A@][S$Z][S$Z]+)\b|WIKIPEDIA (BLOW|SUCK)|(DICK|COCK) IN( THE)? (ASS+|BU[TM]+|MOUTH)|\b(ASS+|BU(TT+|M+))[- ]?(R(APE|AEP)|(PH|F)UCK)|ASS+[ \-]HAT\b|OH ?SHI-|AUSFAILIA|HAHAHAHA|HUE HUE HUE|HUEHUEHUE|▄▄█▀▀|I LIKE (PIE|CHEESE)|\bMY SEMEN|BUTTPEE|YAMAL AO2|NJOTRANS|GENERISK|ION (DETOXIFY|CLEANSE)|DETOX FOOT SPA|NATIO(N|NAL) DEBT RELIEF|YOUR ANONYMOUS VPN|LSGLASSES\.COM|MEEBO BAR WAS LAUNCHED|FUCKING KILL|SHAVED MY BALLS|CAT EYES 2OO7|CORY JUDE|CLEM WASHINGTON|THE BROTHER ZEN|SHREK IS LOVE|STUPID BITCH|U MAD BRO|YOLOSWAG|NIGGA\W|NIGGER|CENSORS THE TRUTH|NIGGAH|PORNSTAR|GNAA\b|EA8O7778EAG|9GSOO7EGS8|I[- ]?8(OO[- ]?(98G[- ]?AS2O|87O[- ]?7AI2)|77[- ]?929[- ]?EE7E)|DIFF=82(SI88EG8|GII9SGO)\b|OLDID=82(SSE78OE|GII9A82)\b|USER:BONADEA_AND_USER:FAVONIAN_ARE_SOCKS|RICHARD MADENFORT|RICK MARTY|REGGIE BRADLEY|FALCIFICATION fake document exposed FADRICATED|78ESOAIEOI|[FV]UERD|DREU[FV]|\bROYER\d|CRUI?Z[IE]?[DR]|DISUSEKID}|HPHELPNUMBER|PE[MN]JS|CRUI[SZ]IR|TRANSMANIA|TASLIMSON|\bLIGMA\b"";
+
+ ccnorm(added_lines) rlike regexstring &
+ !(ccnorm(removed_lines) rlike regexstring) &
+ !(lcase(new_wikitext) rlike ""category:.*(bands|musical groups|albums|songs)"") &
+ !(count('""', added_lines) > count('""', removed_lines)) &
+ page_id != 26204397 & /** [[WP:EF/FP]] **/
+ !(lcase(page_title) rlike ""slur|agatha christie"")
+)",19818307,Crow,20181130204255,1,"Splitting off from Filter 58, to distinguish vandals that should be blocked on site from those that should be warned. - Someguy1221
+
+*Add variants. --NW 11/9
+
++1, current attacks. --NW 11/12
++1 -- NW 11/12
++2 -- NW 11/15
++1 -- NW 11/16
+Fix -- NW 11/16
++1, tested. --NW 11/17
++1, tested. --NW 11/18
++1 more, tested. --NW 11/18
++2, tested. --NW 11/21
++1, tested. --Nw 11/23
+-1, false-positive on an unblock request. Sorry. Reinstate if really needed. -v-_-v
++1, tested. --NW 11/27
+
+Tweaking, +1, tested. --NW 12/2
++1 --NW 12/4
++1 --NW 12/4
++1 --NW 12/5
+*Updating --NW 12/8
+*Updating --NW 12/14
+*Updating and pruning. --NW 12/21
++1 --NW 12/22
++2, -2 --NW 12/23
++1 --NW 12/24
++1 --NW 12/28
+Add one from #52. --NW 2/23
++1, page-blackout vandalism --NW 2/23
+Removed. That's handled by 139, and could be used legitimately in other places. -- Shirik 2/23
++1 --NW 2/27
++1, -2 --NW 3/12
+removed 'Bundy' -- Soap
++2 -2 old --NW 3/21
+-1, now covered elsewhere. --NW 3/21
++1 --NW 3/23
+*Update - NW 3/29
+rm ""Scatman"", many legitimate uses -- Shirik 1 Apr 2010
+Added a check that the phrase are not contained in the removed lines. - Ruslik
+
+Moved a couple from filter 58. Someguy1221
++1 --NW 4/21
+
++6 from filter 320. - Someguy1221
+Reverted changes by Tim1357 due to high rate of false positives. Looking into what happened. -- Shirik 26 Apr 2010
+Fixed what I did yesterday. Should work now, but I will make it log-only for a bit just in case. --Tim1357
+Turned on ""prevent from making action"" option --Tim
+Added OH SHI To regexes. - Tim
+Fix false positive -Tim
++1, requested to deal with long-term tennis article vandal. --NW 4/27
+:Move regex to constant, so it is not copied twice in the code, log only to make sure it works. -- Tim 4/27
+Change back to disallwo. Tim
++1 --NW 4/28
+Im considering adding ""I like pie"" to the list, any objections? -- Tim 4/28
++ I like pie. Tim
+add a space ... can we use \b in here or not? -- Soap
+are the S's on purpose?
+No, they aren't. Changed to 5's and added regex for ""Dont trust this/wikipedia"" --Tim 4/28
+^ Also, changed the space to \b. -- Tim 4/28
+Moved that big list to the regex. Log only till I know nothing will blow up. --Tim 4/29
+Back to disallow -- Tim 4/29
+Added ""I like cheese"" --Tim 5/9
+
+Move ""your mom"" entries back to filter 320 to give it its own false-positive checks. - Someguy1221
+
+Adding one from filter 58. - Someguy1221
++ 1NC1 51KE, from filter 340 --zzuuzz
+adding \b after C0CK, since 'tiny cockpit' was setting it off. Likely a one time problem, can disable later. -- Soap
+*Moving some to 58. --NW 8/13
++1, ""SUCK @$$"" -- Shirik 10 Sep 2010
+*hm things causing false pos, this neads to be cleared out -P
+
+Exclude ""sandbox"" in title and exlude the username in title (see http://en.wikipedia.org/wiki/Special:AbuseLog/5326638). -Sole Soul
+
+Add 1 more recent one from Yourname which looks like something others may try. -Od Mishehu
+
+Update with ""my dick"". --Reaper 2012-02-21
+
+Moved one here from #58. --NW 4/9
+And another. --NW 4/13
+
+Removed 9GAG for a bizarre false positive (catching the number 9646, contained in a legit URL). Undo if this is a real problem. - Someguy1221
+
+Removing LTA pieces. This filter should catch common vandal phrases, and most likely the abusers have moved on to other choice terms. Move them to filter 58 if they are being used by LTAs. --Reaper 2012-05-09
+
+Updating. --Reaper 2012-08-21
+
+Make an exception for FPs reporting page. -Sole Soul
+
+Exempt edits which add quotation marks. We'll be letting some edits through, but I think worth the tradeoff for reducing FP rate. - KoH
+
+Exempt all music-related pages, which often have profanity as part of the title of songs and albums. - KoH
+
+Move ""5TUP1D B1TCH"" from 58. - KoH
+
+Add ""Shrek is love"", repeated vandalism (Internet meme?) --NW
+
+""Niggah"" and ""nigger"", which through a test filer 6 (0.022%) of 267 hits were marginally *possible* false positives, the rest blatant vandalism ~MA
+
+Clean layout and reduce condition count. -DF
+Exempt ""Talk:List of ethnic slurs"" and other slurs pages -RF 20150604
+Exempt pages with ""Agatha Christiee"" in the title, per ""Ten Little Niggers"" false positives. RF 20150802
+
++""pornstar"", moving from #58. --NW 9/21/15
+
+Update regex for https://phabricator.wikimedia.org/T29987 and removed some old clauses that are unlikely to have hits anymore ~MA 2016.08.18
+
+Public per [[Special:Permalink/784131724#Privacy of general vandalism filters]] and the guideline ~MA
+
++GNAA due to recent template abuse -Crow 21/7/17
+
+ccnorm(""34807778346"") = ""EA8O7778EAG""
+ccnorm(""9650073658"") = ""9GSOO7EGS8""
+ccnorm(""1800 986 4520"") | ccnorm(""1800-870-7412"") | ccnorm(""1-877-929-3373"") = ""I[- ]?8(OO[- ]?(98G[- ]?AS2O|87O[- ]?7AI2)|77[- ]?929[- ]?EE7E)""
+
+ccnorm(""diff=825188368"") = ""DIFF=82SI88EG8"" – not sure if this is the right filter for this, feel free to move elsewhere and/or delete -Cyp 2017-02-14
+ccnorm(""oldid=825537803"") = ""OLDID=82SSE78OE""
+
++Richard Madenfort, Rick Marty, Reggie Bradley per req at EFR. -C 28Feb
+
+“FALCIFICATION fake document exposed FADRICATED†taken from random part of [[Special:Diff/829037762]].
+
+Added ""78ESOAIEOI"", the norm(7835041301), phone number spammer. -C
+Add Fuerdi vandal. -C
+
+Cleanup ~MA
+
+30Nov18: +Transmania and Taslimson per a slew of vandalism, no valid occurrences of the term as of this date -C",Common vandal phrases,0,286852,0,0,disallow,0,default
+686,"user_age == 0 &
+article_namespace == 0 &
+old_wikitext rlike ""Category:Living people"" &
+edit_delta > 200 &
+rcount (""<ref\b"", added_lines) <= rcount (""<ref\b"", removed_lines)",365454,Zzuuzz,20170925141542,1,"Increased edit_delta to avoid trivial changes --Samwalton9, 14 July 2015
+reformatted / changed to rcount. 25/Sep/17 --zz",IP adding possibly unreferenced material to BLP,0,282934,0,0,,0,default
+148,"article_articleid == 0 & (
+ user_editcount < 25 & (
+ article_namespace == 0 & (
+ rmspecials(lcase(user_name)) in rmspecials(lcase(article_text))| (
+ rmspecials(lcase(article_text)) in rmspecials(lcase(user_name))
+ )
+ )
+ )
+)",15991542,Samwalton9,20160222132707,1,"make string comparison case insensitive —EncMstr
+
+Is there a reason to hide this? The title of the filter makes its purpose and function pretty obvious, after all. --Conti
+
+remove whitespace from both user name and article name - will catch User:JohnSmith creating an article ""John Smith."" - Evil saltine
+Optimized -- Shirik 21 Feb 2010
+
+Rm spurious & character. - Ruslik
+Include when the user name is part of the title or the title is part of the user name. -Sole Soul
+
+Noting that Special:AbuseFilter/188 (a similar filter for autobiographies) has been deleted; and this is the only one left (10 Nov 2013)
+
+optimize parentheses per DF. RF 2015-02-22
+
+20160213 - disabled - possible technical issue - see edit filter noticeboard - xaosflux
+
+Re-enabling with no warning, better that this gets tagged for patrollers than disabled completely. --Samwalton9, 22 Feb 2016",Users creating autobiographies,0,242321,0,0,tag,0,default
+491,"article_namespace == 0 & (
+ !""confirmed"" in user_groups & (
+ edit_delta < 100 & (
+ added_lines rlike ""\w\s?!+$|\w\s?:-?[)(D]$"" & (
+ !removed_lines rlike ""!+.{0,30}$|:-?[)(D]$"" & (
+ !added_lines rlike ""(^|\n)\s?[*|;].*!$""
+ & length (rmwhitespace(added_lines)) < 500
+ )
+ )
+ )
+ )
+)",365454,Zzuuzz,20170514124404,1,"Edits ending with !. Tag only for now. -Sole Soul
+
+Disallow. -Sole Soul
+
+Expanded and renamed to include common emoticons. -Sole Soul
+
+Optimized for conditions. RF 20150724",Edits ending with emoticons or !,0,230416,0,0,"warn,tag",0,default
+833,"article_namespace == 0 &
+edit_delta >= 200 &
+!(""extendedconfirmed"" in user_rights) &
+count(""<ref"", added_lines) <= count(""<ref"", removed_lines) &
+count(""{{"", added_lines) <= count(""{{"", removed_lines) &
+count(""File:"", added_lines) <= count(""File:"", removed_lines) &
+count(""="", added_lines) <= count(""="", removed_lines) &
+count(""<!--"", added_lines) <= count(""<!--"", removed_lines) &
+rcount(""https?://"", added_lines) <= rcount(""https?://"", removed_lines) &
+count(""-"", added_lines) <= count(""-"", removed_lines) &
+count(""["", added_lines) <= count(""["", removed_lines)",21166720,Biblioworm,20171226170048,1,"This filter will hopefully help patrollers reduce the number of unreferenced additions. --Biblio
+
+Added refinements to exclude template/file additions. --Biblio
+
+Disabling at least until we can come up with a new tag name, and work on reducing false positives. This filter is also not specific to a sock or LTA, so I think it should be public ~MA 2017.02.09
+
+Re-enabled. Shortened tag, and added features to exclude additions to infoboxes and general reference sections. --Biblio
+
+In its current form, this filter can never match any hits. Disabled until rewritten/tested. --zz
+
+Removed faulty code. Reenabled with logging only. --Biblio",Newer user possibly adding unreferenced or improperly referenced material,0,221466,0,0,,0,default
+712,"!""confirmed"" in user_groups & (
+ lcase(removed_lines) irlike ""\{\{birth[ _]date"" & (
+ edit_delta <12 & (
+ edit_delta > -100 &
+ rmwhitespace(lcase(added_lines)) != rmwhitespace(lcase(removed_lines))
+ )
+ )
+)",365454,Zzuuzz,20170514124418,1,"This can be improved. RF 20150722
+Ignore significant deletions of material too.
+Note 1: doesn't check namespace, relatively few !auto edits occur outside mainspace. But maybe we should. RF 0725
+Note 2: this version is deliberately broad, for the majority of infoboxes, we can be far more restrictive about the layout. That will however increase the number of false negatives in non-infobox contexts.",Possibly changing date of birth in infobox,0,209612,0,0,,0,default
+79,"!""confirmed"" in user_groups &
+(
+ article_namespace == 0 &
+ (
+ length(added_lines) != 0 &
+ (
+ edit_delta >= -1000 &
+ ! ""#redirect"" in lcase(added_lines) &
+ (
+ line1:=""(\{\{(r|R)eflist|\{\{(r|R)efs|<references\s?/>|</references\s?>)"";
+
+ /* Checks if there more references grouping tags are being removed than added*/
+ rcount(line1, removed_lines) > rcount(line1, added_lines) &
+
+ /* Excludes instances where you start with duplicates in the article */
+ rcount(line1, old_wikitext ) <= 1 &
+ rcount(""<ref(\s|>)"",new_wikitext) != 0
+ )
+ )
+ )
+)",365454,Zzuuzz,20170514124330,1,"This filter (split from the more general filter 61, which now recognizes removal of <ref> and </ref>) recognizes all edits by new users that are not complete blankings or redirections which remove {{reflist}} or <references/> tags from an article.
+
+If it's triggered without also setting off filter 61, 30 or 3, it will first warn the user it is not productive, then proceed to tag the edit for further review on their next attempt to save.
+
+Articles need at least one references section, but the number and format of that section is not overly important removing false positives associated with changing references style. - DF
+
+Latest trigger was caused by a duplicate reflist being removed. Exclusion now included. --Mgm
+I added optional whitespace in <references\s?/>. - Ruslik
+
+Greater than 2 to greater than 1 when checking if you start with duplicates (obviously) -Prodego
+I added a check if any references are still present in the article. - Ruslik
+
+Update filter to include new format of references. - Ruslik
+
+Simplified the code. - Ruslik
+
+Self rv -TS
+
+Reset filter, it hit the 5% limit somehow. -- Shirik 14 May 2010
+
+FP fix --Reaper 2012-05-20
+
+Format. -DF",New user removing reference grouping tags,0,205958,0,0,"warn,tag",0,default
+550,"article_namespace == 0 &
+lcase(added_lines) contains ""nowiki"" &
+rcount(""nowiki"", lcase(added_lines)) > rcount(""nowiki"", lcase(removed_lines)) &
+!(""bot"" in user_groups)",14882394,MusikAnimal,20180412174000,1,"Just looking for additions of the text now that the AFC locations have been protected. Log only at this time.
+
+Seems to have finally given up. Disabling
+
+Repurposing to monitor VisualEditor problems
+
+Somewhat less histrionic
+
+This actually captures edits made by users using the Wikitext editor too; clarifying
+
+Who is going to go through 1000 edits per day to fix the issues? Disabled. --Reaper 2013-07-18
+
+Reenabling (as tag only) - the tag will show up on people's watchlists and indicate that they may want to check the edit. -P
+
+31/7/2013 Salix alba If we exclude action==edit and action==submit the we will not catch wikitext edits
+31/7/2013 didn't work
+
+Disabling warning - Legoktm 19/8/2013
+
+Exempting bots, lots of false positives from The Anomebot2, see recent log - Mr.Z-man 12/10/2013
+
+Disabled. Filter is unhelpful. --Reaper 2014-01-02
+
+Enabling for a short time. Need to test if visual editor is still adding nowiki's. Salix alba 8 June 2014
+
+Attempt to reduce condition count by first checking if ""nowiki"" is in added_lines ~MA",nowiki tags inserted into an article,0,202352,0,0,tag,0,default
+149,"user_editcount < 40 &
+article_namespace == 0 &
+user_age > 0 & (
+ normalUserName := rmspecials(lcase(user_name));
+ normalArticleText := rmspecials(lcase(article_text));
+
+ normalUserName in lcase(rmspecials(added_lines)) &
+ normalUserName in lcase(rmspecials(added_links)) &
+ !(normalUserName in normalArticleText) &
+ !(normalArticleText in normalUserName)
+)",14882394,MusikAnimal,20171208034036,1,"+warning - nakon
++tag - nakon
+
+optimize ordering. -DF
+
++exempt IP editors - nakon
+really exempt IP editors - nakon
+I created a special warning message for this filter. - Ruslik
+
+Exclud when the username matches the article title, partly covered by filter 188. The rationale: a user who is a fan of something could choose it as his/her username, which causes FPs. -Sole Soul
+
+Format. -DF
+
+Attempt to improve performance, this filter is slowing down editing for some users. Link (requires logstash access): https://logstash.wikimedia.org/app/kibana#/doc/logstash-*/logstash-2017.11.22/mediawiki?id=AV_ksjkkgaOKEclNGXGT ~MA
+
+Check if the username is in added_lines first, which will cancel out most edits before running the more expensive added_links ~MA",User adds link containing username,0,194824,0,0,"warn,tag",0,default
+29,"user_editcount < 50 &
+removed_lines irlike ""{{db-[a-z0-9]{2,15}(\||}})|{{db\||{{db}}|{{speedy deletion-"" &
+!(added_lines irlike ""{{db-[a-z0-9]{2,15}(\||}})|{{db\||{{db}}|{{speedy deletion-"") &
+!(removed_lines irlike ""{{db-(self|blanked|auth|g7|user|owner|u1)(\||}})|<nowiki>{{(db|speedy deletion)|{{speedy deletion-auth"")",14882394,MusikAnimal,20181018234133,1,"changed to use autoconfirmed to avoid arbitrary limits, fixed logic (needed parenthesis) - Prodego
+Ignore if hangon is added
+
+Setting to disallow, accuracy looks spot on. - Hersfold
+Removing disallow based on discussion elsewhere - Hersfold
+
+remove warn, let's avoid scaring off new users for something so trivial. It's just to provide a list for review. Check the blue links. See discussions at WT:ABFIL - Cenarium
+
+speedy only, move afd template to filter 174 - Cen
+
+add tag ""removal of speedy deletion template"" - Cen
+
+Raising the bar to 50 edits. See [[WT:EF#Priority of filters when multiple EF would be activated by a single edit]]. - KoH
+
+Screwed up. - KoH
+
+Exempting G7. - KoH
+
+Exempting removal of a <nowiki>-ed deletion template
+
+Merged regexes. - Ruslik
+
+Exempting U1. --Od Mishehu
+
+Extending to catch {{db| formatted tags. =EdoDodo
+
+Rewriting because {{hangon}} is gone and to catch removal of speedy templates via {{db-xx}RANDOM_CHARACTER}. --Reaper
+
+Slight modification to allow parameterizing of speedy templates, per db-move false positive.
+
+Adding page curation templates
+Used irlike, allowed for parameters in g7/u1, consolidated nowiki exceptions
+
+Formatting. -DF",New user removing speedy deletion templates,0,186026,0,0,tag,0,default
+344,"article_namespace == 0 &
+!""confirmed"" in user_groups &
+new_size <12 &
+old_size > 300 &
+!user_name in article_recent_contributors",14882394,MusikAnimal,20160614031628,0,"To block completley blanking edits. Log only. Tim1357
+Set to disallow. Tim1357.
+
+Better title. - KoH
+
+Unchecked disallow; this could have caused confusion as the warning message tells the user they could click ""Save page"" again. Also, pages are sometimes courtesy-blanked for BLP concerns. --Ixfd64
+
+Disabling in favour of the nearly identical Filter 3. Filter 3 also allows G10 blanking (attack pages), and tags after a subsequent save. ~ MusikAnimal 2014.09.25",Prevent full page blanking,0,180995,0,1,warn,0,default
+180,"article_articleid == 0 &
+user_editcount < 50 &
+article_namespace == 0 &
+new_size > 1000 &
+!contains_any(added_lines, ""[["", ""{{"", ""{|"", ""=="", ""<ref"", ""''"")",14882394,MusikAnimal,20171025200431,1,"Large new articles with no wiki markup are often, but not always, a sign of copyvios.
+
+Add tag ""large unwikified new article"" - it's a good newpages filter (in the sense, many of the detected pages end up deleted), so added at [[C:SD]] - Cen
+
+deactivate - bug, see WT:ABFIL - Cen
+
+:Werdna says it is fixed now. -DF
+
+making sure it's a creation - Cen
+
+I expanded the list of sings of a wikified article. - Ruslik
+
+Optimize -TS
+
+Remove ""old_size == 0"", line 3 does the same thing. -Sole Soul",Large unwikified new article,0,175939,0,0,tag,0,default
+351,"! 'confirmed' in user_groups & (
+ old_size > 0 & (
+ (article_namespace == 0 | article_namespace == 14) & (
+ added_lines irlike '\n\[\[category:[^\]\n]+\]\][^\s]' & (
+ !added_lines irlike '\n\[\[category:[^\]\n]+\]\]\s*<!--' & (
+ !removed_lines irlike '\n\[\[category:[^\]\n]+\]\][^\s]'
+ )))
+ )
+)",365454,Zzuuzz,20170514124357,1,"Adding per request at [[Wikipedia:Edit filter/Requested]], let's see how good this is. Od Mishehu
+Attribution note: This was written by [[User:Alex Smotrov]], based on the Russian filter #74. --Od Mishehu
+
+Copied from https://pt.wikipedia.org/wiki/Especial:Filtro_de_abusos/history/69/item/1672 per comment at [[WT:EF]] - MS 2013-09-18
+
+excluding article creations - cen 11/18/14
+
+Note: reduced condition count. But this will hit the first ""irlike"" for almost every new-user edit in mainspace. RF 2015-07-19",Text added after categories and interwiki,0,171171,0,0,"warn,tag",0,default
+391,"!""confirmed"" in user_groups &
+(
+ article_namespace == 0 &
+ (
+ ! article_text in added_lines &
+ (
+ old_wikitext irlike ""Category\:Living people"" &
+ (
+ added_lines irlike ""\| ?[a-z_]+ *="" &
+ (
+ (
+ removed_lines rlike ""\| ?(height_?)?ft *="" &
+ added_lines rlike ""\| ?(height_?)?ft *=""
+ ) |
+ (
+ removed_lines rlike ""\| ?(height_?)?in *=.*"" &
+ added_lines rlike ""\| ?(height_?)?in *=.*""
+ ) |
+ (
+ removed_lines rlike ""\| ?(weight_?)?lbs? *="" &
+ added_lines rlike ""\| ?(weight_?)?lbs? *=""
+ ) |
+ (
+ removed_lines rlike ""\| ?height *="" &
+ added_lines rlike ""\| ?height *=""
+ ) |
+ (
+ removed_lines rlike ""\| ?weight *="" &
+ added_lines rlike ""\| ?weight *=""
+ )
+ )
+ )
+ )
+ )
+)",365454,Zzuuzz,20170514124402,1,"Tracking changes of height/weight in an infobox by anons. This is a common form of vandalism for sportsperson articles. --Maxim
+:Removing private option per request. Nothing seems to be present that would required filter being private. --Maxim
+
+Formatting / simplify / condition cut. -DF",Changing height/weight in an infobox,0,163579,0,0,tag,0,default
+402,"(article_articleid == 0) &
+(article_namespace == 0) &
+(new_size >= 150) &
+!lcase(added_lines) rlike ""{{(?:surname|shipindex|given name|delrev|softredirect|db-unpatrolled)}}|#redirect|<ref|http:|https:"" &
+!('disambig' in lcase(new_html)) &
+!('disambiguation' in article_text)",258000,King of Hearts,20130404080808,0,"use added_links instead of ""http:""/""https:"" pattern matching - JVDB
+removed useless condition per Prodego on IRC -JVDB
+move new_html to last condition as a temporary measure per Prodego on IRC -JVDB
+removed added_links per Prodego on IRC -JVDB
+add disambiguation page title check per false positive report -28bytes
+Add ""shipindex"" per FP report. --Reaper
+
+Disabling, no real use. --Reaper 2012-05-06
+
+Mark as deleted. - KoH",New article without references,0,155133,0,1,,0,default
+320,"user_editcount < 22 &
+page_namespace rlike ""^(0|3)$"" &
+edit_delta < 200 & (
+ your_mom := ""\b(UR|Y(E|A|O|OU)(H|R|\'RE)) *M((O|U|A)M+(Y|A)?|[UO](V+|TH)(A|ER))S?\b"";
+
+ ccnorm(added_lines) rlike your_mom &
+ !ccnorm(removed_lines) rlike your_mom &
+
+ !contains_any(lcase(added_lines), ""basement"",""borden"",""how i met your mother"", ""ozzy osbourne"", ""your mother would be proud"", ""[[does "", ""honor your father"", ""is your mother"", ""should know"") &
+ !(""Mother insult"" in page_title) &
+ !(rcount(""\"""", added_lines) > rcount(""\"""", removed_lines)) &
+ !(rcount(""''"", added_lines) > rcount(""''"", removed_lines))
+)",14882394,MusikAnimal,20181023193636,1,"Your mom. Checking for false pos. If this works, it will be added to filter 260. - Someguy1221
+
+Disabling and deleting. Merged to 260. - Someguy1221
+
+Re-enabling to filter out ""Your mom""-specific false positives. - Someguy1221
+Temporary fix (easier than explaining the whole story to the editor) -- June 17 Soap
+Alt. Spelling - Tim 6/25
+exempt large edits, as does 46 -- Soap
+0 & 3 namespaces only for now (false pos on an AfD) -- Soap
+Changed last condition to act on the wikitext before the edit. Also cleaned up a bit. -- Tim
+Changed name because it was lacking before. -- Tim
+Please dont hurt me. (restore soaps version and reenable) -- Tim
+No matter how we configure the regex, ""your mom"" always has false positives, e.g. when used in a quote. Set to warn, then tag. Also, no need to be private. - KoH
+Actually, there is a need to be private - we don't want vandals to see the precise definition of a ""your mom"" string, which would enable them to come up with new ways to bypass it. --Od Mishehu, September 2 2010
+
+Back to disallow. Most people are just saving past the filter, and no false positives have been reported in months. - Someguy1221
+
+Adding double quotes or double single quotes may be indicative of a false positive. (""Your Mom"" appearing in a title.) Also, give them a warning first (less BITEy); does not reduce the potency of this filter in any way. - KoH
+
+Re-order. -Sole Soul
+
+British people spell it with a ""u."" Also add \b to the end to prevent FPs. - KoH
+
+Doesn't need to be private. --Reaper 2013-07-18
+
+ ""\b(UR|Y(E|A|0|0U)(H|R|\'RE)) +M((0|U|A)M+(Y|A|)?|[U0](V+|TH)(A|ER))S?\b"" will catch Mutha and Muvva, Mama, Mumma, and a whole bunch of other stuff. I'll test it out in a few days if there are no adverse comments. RF 16 Nov 2014
+
+Tiny tweaks and condition optimization. And renamed variable. RF 20150802
+
+Update regex for https://phabricator.wikimedia.org/T29987 and removed some old clauses that are unlikely to have hits anymore ~MA 2016.08.18
+
+large number of hits and FP reports, temporary disabling --zzuuzz 19 Oct 2016
+
+Repaired. -DF","""Your mom"" Vandalism",0,152994,0,0,disallow,0,default
+39,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+page_title irlike ""(school|college|academy$|university)"" & (
+ stringy:= ""(pa?edo(ph|f)il|fired\b|sacked|expelled|drugs|\blove[drs\b]|little\sboys? |molest|\babuse|predat(e|o)r|\brap(e|ing|ist)|ha(ve|ving|s|d)\ssex|sex\swith|\bporn|pe+a*n+(i+u*s|1+5)|\b[kc]unt|\btwat|bitch|sl(ut|ag)|prostitut|st(u|oo+)pid|awesome|coo+lest kid|whore|\bfu(ck|kc)|pimp|fag+(ot)?\b|brothel|\bgays|(is|are)\sgay|\(gay\)|\bwank|(dick|cock)[ \-]?(head|face)|\bcocks?\b)|a(rse|ss)hole"";
+
+ added_lines irlike stringy & !removed_lines irlike stringy &
+ count(""<ref"", lcase(added_lines)) <= count(""<ref"", lcase(removed_lines))
+)",365454,Zzuuzz,20181020203444,1,"Problematic content in school articles - one of our biggest sources of complaints, and usually indicative of wider problems (unwatched articles, unattended vandalism, etc). Potentially libelous content may want to be flagged for review and warn about references, while vandalism may result in warnings and/or a block.
+Just logging for now.
+
+Added university - KnightLago
+
+remove \bsex, catching some false positives -Prodego
+
+added count()'s in it to try to distinguish referenced additions from unreferenced additions.
+
+Reversed references logic: now it will flag as long as there is '''not''' a new reference added, as opposed to '''only''' when a new reference is added. Also restricted to NS0 (the article namespace). Marking hidden, as vandals don't need to know which words we're filtering on --ABCD
+
+unlikely to be done except by new users, this addition should also significantly help performance time - Hersfold
+
+made filter public again - these edits are generally made by really unsophisticated editors who barely know how to edit a page. --zzuuzz
+
+this filter needs adjusting - several false positives. - Rjd0060
+
+adjusted. --zzuuzz
+
+added tag ""possible libel or vandalism"" - Cen
+
+Added ""fuck"" and ""whore"". - Ruslik
+
+Added looser, awesome, coolest kid, peanus, and made some work with repeating characters (ppeeeennnniiiiss) --Tim
+Fix false positive - Tim
+
+Make so that only words that don't exist in old version are matched, made abuse \babuse because of FP ""syllabuses"" -- Tim
+
+removed the old_content check; missing too much existing vandalism and BLP problems. --zzuuzz
+
+Doesn't hurt to warn. - KoH
+
+Change to confirmed in user groups to include the confirmed user right. - Callanecc 25 Sep 14
+
+Format. -DF
+Small tweaks. RF 2015-02-18
+
+tweak to igonre cases where the problematic words were already present, per false positive. Od Mishehu
+
+Add `a(rse|ss)hole` per request and after testing --TNT 25/5/2017
+
+changed title check to academy$ - should better target schools and not film awards. --zz",School libel and vandalism,0,150568,0,0,"warn,tag",0,default
+18,"(article_namespace == 0) &
+!(""autoconfirmed"" in user_groups) &
+(contains_any(added_lines,
+""'''Bold text'''"",
+""''Italic text''"",
+""[[Link title]]"",
+""[http://www.example.com link title]"",
+""== Headline text =="",
+""== Heading text =="",
+""[[File:Example.jpg]]"",
+""[[Media:Example.ogg]]"",
+""<math>Insert formula here</math>"",
+""<nowiki>Insert non-formatted text here</nowiki>"",
+""#REDIRECT [[Target page name]]"",
+""<s>Strike-through text</s>"",
+""<sup>Superscript text</sup>"",
+""<sub>Subscript text</sub>"",
+""<small>Small Text</small>"",
+""<big>Big text</big>"",
+""<!-- Comment -->"",
+""Image:Example.jpg|Caption"",
+""<ref>Insert footnote text here</ref>"",
+""Ǣ ǣ ǖ ǘ ǚ ǜ Ă"",
+""| row 1, cell 1""
+))",301395,NawlinWiki,20120202004352,0,"The conditions in this filter are taken from the default text generated by clicking icons in the edit bar. In each example, a user would need to replace the default text with their own to make a useful contribution.
+
+Generally inserting text like ""'''Bold text''' [[File:Example.jpg]]"" indicates a newbie in need of assistance.
+
+Tweaking to affect only non-sandbox pages - Hersfold
+Adding warning at [[Mediawiki:Abusefilter-testeditwarn]] - Hersfold
+Remove Sandbox in former page content check, shouldn't be needed. ns 0 only, and only edits. - Prodego
+
+No false alarms, so changing to disallow. - Hersfold, 5:39 March 18 2009 UTC
+
+Disallow removed. Too many edits matches, and some false positives. New users make sometimes good additions along with adding test edits, it shouldn't be disallowed. It should disallow only when the edit is an addition of the test and nothing else. Cenarium
+
+Setting to new users only, this is hitting the safeguard limit and running pretty slow. - Hersfold
+
+Adding one, per request at [[WP:RAF]]. --Conti
+
+add tag ""test edits"" - Cen
+
+added ""! header 1"" to catch empty tables. - Ruslik
+
+changed ""! header 1"" to ""| row 1, cell 1"" as better indicator - KoH
+
+Marked as deleted. Ruslik
+
+Adding ""Heading text"" and ""Big text"" -28bytes",Test type edits from clicking on edit bar,0,133641,0,1,,0,default
+631,"!""confirmed"" in user_groups &
+article_namespace === 0 & (
+
+ toolbar := ""'''Bold text'''|''Italic text''|(File:|<gallery>\n)Example\.jpg|<ref></ref>|== Heading text ==|http://www.example.com link title|\[\[Link title\]\]|Insert footnote text here"";
+
+ added_lines rlike toolbar &
+ !removed_lines rlike toolbar
+)",365454,Zzuuzz,20170514124409,1,"Filter to detect most commonly seen extraneous markup inserted via the Toolbar from new users, presumably the result of misclicking. Log only ~ MusikAnimal 2014.08.31
+
+Tag only. Remove empty ref tags from regex, they have no visual effect, and more often accompanied with otherwise very constructive edits (as opposed to the other extraneous markup) ~ MusikAnimal 2014.09.01
+
+Add back in <ref></ref> and heading text, only tagging ~ MusikAnimal 2014.09.11
+
+Add other toolbar markup: I have been removing this from articles for years, and I'm sure everyone else has too. RF 20150806",Extraneous toolbar markup,0,132044,0,0,tag,0,default
+12,"user_editcount < 30 & (
+ (
+ (
+ new_size < 300 & (
+ old_size > 300
+ )
+ ) |
+ edit_delta < -5000
+ ) &
+ (
+ ! added_lines irlike ""^#Redirect\s*\[\["" & (
+ ! ""Sockpuppet investigations"" in article_text & (
+ ! user_name in article_text & (
+ ! ""Sandbox"" in article_text & (
+ bad_words := ""\b(?:(?:P+H+|F)+U+C+K+[\w\d]*?|AN+U+S|CR+A+P|SH+I+T|[KC]+U+N+T|NI+GG+(E+R|A)|(ASS+|BU+(T+|M+))[ \-]*(H+O+L+E|S+E+X|R+A+P+E)|(CO|KA+W+)[CK]|LOO+[SZ]+E+R|BI+T+C+H|PE+N+I+S|WA+N+K+E+R|SP+U+R+T|MA+S+T+U+R+B+A+T+I+O+N|HA+GG+E+R|HERMAPHRO|JESKE COURLANO|(?:PH+|F)A+G+O+T|KINGPINIE|ORLY)\b"";
+
+ ccnorm(added_lines) rlike bad_words & (
+ ! ccnorm(removed_lines) rlike bad_words
+ )
+ )
+ )
+ )
+ )
+ )
+)",14882394,MusikAnimal,20170606215509,1,"*Just familiarizing myself with the syntax for now; if it's horribly, horribly wrong don't hesitate to nuke it. —Nihiltres
+*""new_wikitext"" now replaced with more epic ""added_lines"" :) —Nihiltres
+*Enabled warning - Tiptoety
+*Optimised -- Andrew
+*AntiAbuseBot hit something with only ""nigger"" in it earlier, adding that too. - Hersfold
+*Made sure it has to be mass-removal --Andrew
+*I've been adding some more variations —Nihiltres
+*Enable ""prevent user from doing the action"" This filter is good. -Prodego
+*too many false positives, four of the first fifteen hits were good edits; dropping to just logging for now - east
+*Fixed, disallow has been set, applying to mainspace only (after hitting a sig of a user with poop in their name) -Prodego
+*Adding not-sysop line, hopefully that will help optimize some, this filter is hitting the safeguard level. - hersfold
+*Added one. Does it matter whether you use single/double quotes? - It Is Me Here
+*Removed addition by It Is Me Here: since we're using ccnorm() on added_lines, ""SHIT"" is already covered by ""5H1T"", and ""SHIT"" will never turn up. Filters need to be kept short for performance reasons. As far as I know, single/double quotes don't matter. —Nihiltres
+*Added HAGGER (duh) -- NawlinWiki
+*Changed to use contains_any :) --Andrew
+*Add ""Wikipedia is Communism"" (boy, there's an oldie) -- NW
+*Added ' WANKER' (note the initial space); if it turns out any false positives, feel free to nuke it. Would it make this filter more efficient to order the most common words earlier in the contains_any()? A study of which words turn up would be interesting. —Nihiltres
+**It would only make it a tiny bit more efficient, assuming that bad words edits are rare. RF.
+*Excluding articles turned into redirects, which causes false positives. --Conti
+*Refined the redirect check; we don't want ""I REDIRECT THIS PAGE TO YOUR ANUS"" to be an easy workaround for the filter. —Nihiltres
+*Added variant ""A55 H01E"" of ""A55H01E"". Remove if problematic. —Nihiltres
+*Obama ""Epic fail"" vandal. --NW 4/13
+*Added variant ""F U C K""; saw it in an article history and confirmed that it was being used to bypass the filter ( http://en.wikipedia.org/wiki/Special:AbuseLog?title=Special%3AAbuseLog&wpSearchUser=125.237.148.153&wpSearchFilter=12 ). I wonder how computationally expensive contains_any() is; it might be useful to use a regex system if it isn't significantly cheaper. If we get too many variants I'd be tempted to change ccnorm to norm, though that's more likely to produce false positives. —Nihiltres
+
+*Removing restriction of article pages only and adding a phrase for Joker vandalism; this type of vandalism is not appropriate on user talk pages either. Tested at length. --NW 5/20
+**More Joker garbage, tested. --NW 5/20
+***More from tonight, tested. --NW 5/21
+****+ 1 more, also tested. --NW 5/21
+* More, tested. --NW 5/22
+*Shouldn't the additions of the last few days be moved to a separate filter? None of them are actual obscenities. --Conti
+*Makes sense, unless two filters eat up more time than one. Or we could just change the name of this one to ""replacing a page with vandalism"". --NW
+**I think we can live with the 5 additional ms. I'd rather not rename this filter, tho. Adding ""☺"" to pages is not vandalism, it's the MO of a specific vandal, and therefore should deserve its own filter. --Conti
+*** Done -- the non-obscenities are now in filter 13. --NW
+*Fixed the ""shit"" filter (oops) and added a variant. —Nihiltres
+*Re-add one not covered elsewhere anymore. --NW
+**Modify to deal with 4chan vandalism. --NW 11/24
+***Revert self, that's not gonna work. --NW 11/24
+
+Add ""Hermaphrodite"" per recent attacks -TS 1/3
+allow users to blank their own talkpages -- Soap 1-21
+exception for bots due to FP; more intelligent solution would be nice. also added space before crap to let ""skyscraper"" through (can we not use \b with ccnorm? that would be more ideal) -- Soap 1-23
+Simplified. - Ruslik
+
+I made a sudden change, tested on test wiki first, to correct the false positives. This required a complete redesign, but I took many of the ideas from the old filter. This should reduce false positives. Log only currently to see how it does. - Shirik 27 Jan 2010
++1, blame SGF -- Shirik 5 Mar 2010
++2 from ongoing attacks -- Shirik 7 Mar 2010
+Added exception for SPI due to recent false positives until I can find a better way of doing it. -- Shirik 29 Mar 2010
+Rm namespace for SPI exemption, since article_text does not have namespace in it. -Tim Song 31 Mar 2010
+Added replacement with ""ORLY"" due to an ongoing attack - Shirik 20 Apr 2010
+My first edit filter change. Added + signs after each letter, to match thins like ""FFFUUUCCCKKK"". Also added matches for butt hole and bum hole. Changed to log only per request of shirik. Tim1357 April 26
+Turned disallow back on, added LOOSER Tim1357 April 26
+Optimize (Move ""Sockpupet investigation"" exclusion to before the regex.--Tim
+Rm false positive ""cook"" (oops) -- Tim 5/5
+Add a rule that it is only if the page is reduced in size, even though I know that it was made this way on purpose. See Redrose64's \filter logs -- Soap
+Add line to exclude users with more than 2,000 edits. -- Tim 4/28
+Reorder to optimize and add some. -- Tim 6/26
+I'm pretty sure a vandal won't survive more than 100 edits. - KoH
+Exlude ""Sandbox"" in page title, there is already a bot to clean that page. -Sole Soul
+Use irlike and simplify redirect regex. RF 2014-02-17
+
+Clean layout and reduce condition count. -DF
+Simplify regex. RF 2015-07-03
+Enhanced redirect regex, renamed bad_words, reduced condition count. Possible that more optimisation could be done using statistics. (E.g. are SPI edits very much rarer than bad_words edits?) RF 20150806
+Updated for both old and new version of ccnorm. RF 20160812
+
+https://phabricator.wikimedia.org/T29987 fully deployed and confirmed working, removing old code ~MA 2016.08.18
+
+A couple regex fixes --Kaldari 2016-08-19
+Tweak. RF 20160911
+
+Public per [[Special:Permalink/784131724#Privacy of general vandalism filters]] ~MA",Replacing a page with obscenities,0,122756,0,0,disallow,0,default
+247,,14882394,MusikAnimal,20180412174428,1,,Adding emails in articles,1,121192,0,0,"warn,tag",0,default
+80,"! ""confirmed"" in user_groups &
+page_namespace == 0 &
+old_size > 0 &
+rcount(""https?:\/\/"", added_lines) > rcount(""https?:\/\/"", removed_lines) &
+count(""<ref"", added_lines) <= count(""<ref"", removed_lines) &
+! user_name in page_recent_contributors",502540,Xaosflux,20190104180905,1,"Repeated addition of external links to articles by new users. Often an indication of spam. Not sure about the right limit/timeframe. Testing >3 per 20 mins.
+
+Adding refs is generally a good use of external links.
+
+Fix a bug temporarily -Prodego
+
+Format. -DF
+
+Updated to allow ""confirmed"" to bypass as well - Xaos
+
+article_recent_contributors is quite slow. Moving to the end -- better to have too many conditions in this case, I think; also some cleanup of syntax ~MA
+
+Check for https and not just http, see [[Special:Permalink/832937586#Edit filter problems]] ~MA
+
+20190104-Updated deprecated parameters ~Xa",Link spamming,0,119104,0,0,"throttle,warn,tag",0,default
+354,,1749459,MER-C,20181125142759,1,,Promotional text added by user to own user(-talk) page,1,115814,0,0,tag,0,default
+11,"!(""confirmed"" in user_groups) &
+page_namespace == 0 & (
+ you_suck :=""\b((yo)?u( ?all)?|(s?h|w)e|they|it?|y'?al+) suc?k"";
+
+ added_lines irlike you_suck &
+ !(removed_lines irlike you_suck)
+)",14882394,MusikAnimal,20181018194241,1,"Optimizing - Hersfold
+
+add tag ""possible vandalism"" - Cen
+
+Add condition that the ""suck"" string be new on th page. - Od Mishehu
+
+Removing ""them""; not many vandals have bad grammar. (If you add it back, at least do the(m|y).) - KoH
+
+Added \b, ""The Suck ____"" is getting caught, which are usually good edits. - KoH
+
+No \b at the end, why is it necessary to check for sucks? - KoH
+
+Optimization of the code. - Ruslik
+
+Made to work with ""you suk"" and ""yal"" and ""you all""-- Tim 4/27
+
+Considering making it a deny, as Clubot's rules are exactly those in the filter, and it reverts them. Will review a large portion of those flagged. --Tim
+
+Made so that it prevents action. Will keep a close eye on the log. -Tim
+
+Made case insensitive. Tim
+
+Setting to tag only due to false positives. -- Shirik 30 Apr 2010
+
+Add warn, which is enough to deter 60% of vandals = fewer junk edits in article history - KoH
+
+No need for privacy. --Reaper 2012-08-21
+
+Clean layout and reduce condition count. -DF
+
+Y'all not yall' I believe. RF 2015-02-22
+Rename variable, tweak. RF 20150802",You/He/She/It sucks,0,109657,0,0,"warn,tag",0,default
+499,,82835,Rich Farmbrough,20150819133615,1,,Possible spambot or promotional username,1,106559,0,0,,0,default
+680,"!(""confirmed"" in user_groups) &
+page_namespace == 0 & (
+ emoji := ""[🌀-ðŸ™ðŸš€-🛳☀-☄☇-☿♃-♬♰-✒✙-✯✱-âž¿]"";
+
+ rcount(emoji, added_lines) > 0 &
+ rcount(emoji, added_lines) >
+ rcount(emoji, removed_lines) &
+ !(page_id rlike ""^(513844|24133)$"") & /** [[Emoji]] and [[Principia Mathematica]] **/
+ !(added_lines irlike ""unicode|nihongo"") &
+ !(lcase(new_wikitext) contains ""category:unicode blocks"") &
+ !(user_name == '65.94.42.168')
+)",14882394,MusikAnimal,20181023195329,1,"Tests for new editors adding one of the five main classes of emoji symbols listed in [[emoji]] to an article. Log only to start. -DF
+
+The regex expression is ranges:
+
+U+1F300..U+1F64F
+U+1F680..U+1F6F3
+U+2600..U+263F
+U+2643..U+266C
+U+2670..U+2704
+U+2707..U+2712
+U+2719..U+2729
+U+2731..U+27BF
+
+-DF [partially updated RF]
+
+Removed ★ and ☆ which seem to be getting a number of legitimate uses associated with stylized music titles in Asian languages (e.g. Japanese) but don't seem to be used much for vandalism. -DF
+
+Removed ✓✔✕✖✗✘ which get used in some tables, added an exception for content explicitly wrapped as unicode / nihongo, which vandals generally don't do. -DF
+
+Removed â™â™®â™¯ which are on the toolbar and occasionally used for music articles. -DF
+
+Change to disallow. -DF
+rm ♀,â™,♂ per false pos. RF 20150803
+added an exemption for Principia Mathematica which uses ✸. 20150805
+
+""unicode"" doesn't have to be a template, any time the word ""unicode"" appears is likely to be FP. - KoH 20170113
+ Removed white shadowed starb (unicode 2730) RF 20171020
+Exclude GF IP editor. RF 20180724",Adding emoji unicode characters,0,95242,0,0,disallow,0,default
+34,,14882394,MusikAnimal,20181018234459,1,,New or unregistered user blanking someone else's user or user talk page,1,93880,0,0,disallow,0,default
+752,,365454,Zzuuzz,20170514124428,1,,Possible spamming of references,1,93854,0,0,,0,default
+271,,365454,Zzuuzz,20181104190824,0,,Possible spambot,1,91822,0,1,warn,0,default
+614,,19502780,Galobtter,20190101052937,1,,Yolo swag and other vandalism trends,1,90578,0,0,disallow,0,default
+188,"(article_namespace == 0) &
+""user"" in user_groups &
+(user_editcount < 25) &
+(old_size == '0') &
+(rmspecials(lcase(user_name)) in rmspecials(lcase(article_text))|rmspecials(lcase(article_text)) in rmspecials(lcase(user_name)))",5711305,Cenarium,20150212173350,0,"in addition to filter 148, let's see what we get - Cen
+
+I think it's worthy to be tagged like in filter 148, but that one also warns, so just adding the tag here with ""autobiography"", and will add ""or COI"" to the description. - Cen
+
+After test at filter 214, add case when title is contained in username - Cen
+
+using rmwhitespace - Cen
+
+Reorder, use more rmwhitespace. - KoH
+
+Re-order for efficiency. -Sole Soul
+
+Deleting this filter as it is identical to 148, with the exception of (""user"" in user_groups) which is redundant as IPs can't create pages.",Creating articles with a title containing or contained in username,0,86463,0,1,,0,default
+339,"article_namespace == 0 & (
+ !""confirmed"" in user_groups & (
+ sexuality := ""\b(gay|h[o0]m[Oo0]sexual|lesbian|transexual|bi-*sexual|transgender)\b"";
+ added_lines irlike sexuality & (
+ '[[Category:Living people]]' in old_wikitext &
+ !old_wikitext irlike sexuality
+ )
+ )
+)",365454,Zzuuzz,20170514124352,1,"This is a test for the imfamous ""gay"" filter. Lets see if it works. I will turn it off if it uses excessive resources. --Tim
+Ack. I turned it off. I didn't mean it, I didn't mean it! - Tim
+Muzemike told me it's probably ok to let it run, to see if the condition limit is really that high. -- Tim
+Try to optimize. - Tim1357 6/26
+Rename, make private. -- Tim 6/27
+Adding lesbian as well--hope I didn't break anything :P --Fetchcomms, 7/13
+Shortening it up a bit. --Fetchcomms, 7/13
+Revert to previos version with lesbian. lcase shoud be avoided. -- Tim
+Added ""bisexual"", ""transsexual"", and ""transgender"" as these can be easily abused terms. Also updated filter description to reflect these changes. --Fetchcomms, 9/20
+made public, no need to hide. --zzuuzz
+fix 'trans(s)exual' and 'bi(-)sexual' -- Soap
+The regex used to check the added_lines should be the same to check the old_wikitext. -- Tim1357 1/13/2011
+Added, and removed LGBT - Wifione - 2/11/2012
+1. Optimized for conditions.
+2. Added variable to keep regexes in sync and reduce time.
+3. Used irlike to allow ""gay"" instead of [Gg][Aa][Yy] etc. for readability and maintainability
+RF 20150725","Claims of homosexuality, bisexuality, or transexuality in a BLP",0,86338,0,0,tag,0,default
+365,"page_namespace == 0 &
+!(""confirmed"" in user_groups) &
+old_size > 20000 & (
+ ""#redirect"" in lcase(added_lines) |
+ edit_delta < -15000 |
+ edit_delta > 15000
+) &
+old_wikitext rlike ""\{\{([Ff]eatured|[Gg]ood)\s?article\}\}""",14882394,MusikAnimal,20181023193820,1,"log only at first to see what this picks up - arbitrary delta limits.
+eww, disallow already. Hopefully leaving enough scope for bold edits to GAs. --zzuuzz
+
+Optimize for efficiency. -Sole Soul
+
+No need to be private. Most vandalism to featured articles is just drive-by vandalism, there isn't really systematic targeting of featured articles for vandalism. - KoH
+
+Optimized for conditions. RF 20150724",Unusual changes to featured or good content,0,85470,0,0,disallow,0,default
+65,"!(""Wikipedia talk:Images for upload"" in article_prefixedtext)&
+!(""Wikipedia talk:Articles for creation/"" in article_prefixedtext)&
+!(""autoconfirmed"" in user_groups) &
+!(""sandbox"" in lcase(article_text)) &
+!(""<source"" in new_wikitext) &
+!( (""User"" in article_namespace) & (article_text rlike (""^\Q""+user_name+""\E(/.*)*$"")) ) &
+(added_lines rlike ""\s{8}"") &
+!(added_lines rlike ""\s{7,}\n|\s{8}[#=\-]"") &
+!(removed_lines rlike ""\s{8}"")",1130897,Ruslik0,20100106173457,0,"Excessive amounts of whitespace is associated with ascii art and some other forms of vandalism. Can't think if there are likely legitimate uses, but going to leave this at flag only for a while to see.
+
+Decreasing false positives.
+
+Exclude lines terminated by runs of spaces. Though generally poor form, they aren't really a problem.
+
+add tag ""excessive whitespace"" - Cen
+Merged two regexes. - Ruslik
+
+add subpages of WT:IFU as exceptions, see log - Cen
+
+exclude user editing own userspace - Evil saltine
+
+remove warn, per request, will reevaluate the whole thing later -P
+
+I added exception for articles for creation. - Ruslik
+
+These aren't being acted on + the filter is overwrought now = disabling. -Wknight94
+
+Marked as deleted. - Ruslik",Excessive whitespace,0,74098,0,1,,0,default
+325,"article_namespace==0 &
+action == 'edit' &
+user_editcount < 40 &
+edit_delta<2000 &
+""!!!!!"" in added_lines &
+!""!!!!!"" in removed_lines",258000,King of Hearts,20120808231331,0,"Recreating what was at edit filter 1. The rational is that any edit matching these criteria is reverted anyway by ClueBot, so why not stop these edits here. Setting to disallow. --Tim1357 4/30
+add exemption for really big edits, as these have been a small source of F. Positives. -- Tim
+
+Disabling for now until condition limit drops -- Feezo
+
+Marked as deleted - KoH",!!!!! in the article-space,0,73942,0,1,disallow,0,default
+285,"!""confirmed"" in user_groups & (
+ (
+ added_lines irlike ""(?:(?:(?:penis|fuc?k|shit|whore|bitch|cock|dick|cocksucker|cunt|crap|slut|suck|loll?ol?)[ \r\n]*){3}|(([asdfghjkl;])(?!\1)\s*){30})"" & article_articleid != ""16283969""
+ )
+ | ""fuck you"" in summary
+)",14882394,MusikAnimal,20160911181242,0,"Catches repetitive blocks of common vandalism phrases and spam. More words could easily be added in the future.
+
+
+Starting with two for now for trial. Log only. - Shirik 19 Jan 2010
++1, this seems tobe working well - Shirik 19 Jan 2010
+
+Removed restriction to article namespace. This shouldn't be valid anywhere. - Shirik 27 Jan 2010
+Added support for face-mashing. - Shirik
+
+Optimized - Shirik 8 Feb 2010
+Enabled matching ""fuk"" repetitions
+Adjusted for false positives - Shirik 22 Apr 2010
+
+No need to hide - KoH
+
+Exempt sandbox. - KoH
+
+Add more words. -Sole Soul
+
+Autoconfirmed --> confirmed for the confirmed userright, added a word. - Callanecc, 25 Sep 14
+
+Moving edit summary restriction here from Special:AbuseFilter/648, disallowing this is pretty safe, wasn't sure where to put but it shouldn't be specific to filter 648 ~MA 2015.04.07
+
+Longer string (autoconfirmed) matches faster. Parentheses for clarity and conditions. RF 2015-07-12
+Back to confirmed, though these are almost non-existent. RF 2015-07-12
+
+""irlike"" gives better performance than ""lcase() rlike"". -DF
+
+Disabling. Merged one rule into 384, now everything this filter captures should be handled by 380, 384, 614 and others ~MA 2016.09.11",Common Vandalism,0,73902,0,0,disallow,0,default
+126,"!(""confirmed"" in user_groups) & (
+ user_age < 600 & (
+ (
+ added_lines contains ""youtube.com"" &
+ !(removed_lines contains ""youtube.com"")
+ )
+ |
+ (
+ added_lines contains ""youtu.be"" &
+ !(removed_lines contains ""youtu.be"")
+ )
+ )
+)",7529026,Samtar,20160713155301,1,"Attempt to design a filter for continuous abuse on a handful of BBC articles
+
+Continuous insertion of youtube movies, undoing XLinkBot reverts, etc. etc. Some links:
+* http://www.youtube.com/watch?v=CmDKMm1ohhA (now blacklisted)
+* http://www.youtube.com/watch?v=Dh3G55qW9-o
+* http://www.youtube.com/watch?v=kWls27cHc-A
+
+Setting to warn and disallow, I hope he does not switch to another video provider .. but that is quickly enough seen.
+
+-Disabled/Deleted, performance -Prodego
+-? -> re-enabled --Beetstra
+-> disable for performance, let youtube/blacklist do this
+
+rmv tags from disabled filter - Cen
+
+mark as deleted, disabled for more than a month, no more discussion/testing - Cen
+
+Modifying and reinstating, see [[User:David Beals]] and socks --NW 7/25/2014
+optimize RF 2014-02-17
+rv self, claims to be using an average of 640 conditions in 0,35 ms. Looks like a bug in condition counting, but nonetheless.../
+Re-optimize and add test for ""youtu.be"" RF 2015-07-11
+Why is this not checking IPs? RF
+
+Removing warning/disabled - doesn't seem to be catching the intended target. --Samwalton9, 19 September 2015
+
+Checking against IPs --Samtar 13/7/16",Youtube links,0,65137,0,0,,0,default
+129,"(user_editcount < 10) &
+(article_articleid == 0) &
+(article_namespace == 0) &
+contains_any(lcase(new_wikitext),
+ ""{{infobox television"",
+ ""{{infobox film"",
+ ""{{future television"",
+ ""{{future film}}"",
+ ""film"",
+ ""movie"",
+ ""animated"",
+ ""stop-motion"",
+ ""disney"",
+ ""winx club"")",5711305,Cenarium,20150212173327,0,"Per request. Would be nice if we could narrow this one down more.
+
+Correct groups check and condense target text. -DF
+
+Lower edit count to get less false positives. PT
+
+condensed further, reordered for readability --Beetstra
+does seem that we check duplicates here (e.g. '{{infobox film' and 'film' --~~~~
+
+adding ""winx club"". -xeno
+
+Since most hits are FPs, I'm renaming it to ""Possible tireless sock ..."" - KoH
+
+Optimizing -TS
+Optimized - Shirik 16 Mar 2010
+
+Dropped edit count from 50 to 10 - Feezo 4 Apr 2011
+
+Deactivated - Feezo 7 Apr 2011",Possible tireless sock creating film pages of non-existing films,0,64869,0,1,,0,default
+423,"""new WikiLove message"" in summary",14882394,MusikAnimal,20160614032412,0,"Purpose of this filter: Track usage of the WikiLove tool, both by new and experienced users, to watch for use and abuse. We'll have better tracking tools soon, but right now this is a simple solution to watch what's going on. To reduce impact on patrollers, it merely flags the edits. Please discuss with [[User:Eloquence]] if you have comments or questions. Since this filter is in active use by a number of people, please do not disable without discussion.
+-- Erik Moeller, WMF, 2011-07-01
+
+Disabled per [[User_talk:Eloquence#Edit_filter]]. --Samwalton9, 7 Feb 2015",WikiLove,0,64591,0,1,,0,default
+33,"user_editcount < 12 &
+new_size < 100 &
+page_namespace % 2 == 1 &
+old_size > 150 &
+!(user_name in page_prefixedtitle) &
+page_namespace != 3 &
+!(added_lines irlike ""^#\s*redirect\s*\[\["")",14882394,MusikAnimal,20181018234422,1,"Filter to prevent blanking of talk pages by non-registered users, except to their own user talk page
+
+Adding user space, and a check to prevent it from triggering when the page is already small. - Hersfold
+
+Expanding to new users as well as IPs -- NW 11/19/11
+Tweaking, user talk covered by filter 34. - Hersfold
+Another tweak - logic fail. It was picking up any non-user talk space because I forgot () and had a | instead of a & - Hersfold
+
+Optimizing - Hersfold
+
+Switched to warning. - Ruslik
+
+add tag ""talk page blanking"" - Cen
+Simplified logic. - Ruslik
+Added an exception for redirecting. - Ruslik
+I increased old size to 150. - Ruslik
+Removed parentheses. - Ruslik
+
+add exception for 69.226.103.13 - Cen
+
+NO! Do not exempt particular IPs, its a waste of checks. If they want exemption, create an account. Its free -Prodego
+
+Exempting articles created by anybot. - Ruslik
+
+Optimizing. - KoH
+
+Clean layout and reduce condition count. -DF
+
+Removed Anybot, that was 2009. RF 2015-07-04",Talk page blanking by unregistered/new user,0,60707,0,0,"warn,tag",0,default
+270,"!(""autoconfirmed"" in user_groups) & article_namespace = 0 & !(-edit_delta > old_size / 4) &
+
+(removed_lines rlike ""\[\[(nostalgia|ten|test|aa|ab|ace|af|ak|als|am|an|ang|ar|arc|arz|as|ast|av|ay|az|ba|bar|bat-smg|bcl|be|be-x-old|bg|bh|bi|bjn|bm|bn|bo|bpy|br|bs|bug|bxr|ca|cbk-zam|cdo|ce|ceb|ch|cho|chr|chy|ckb|co|cr|crh|cs|csb|cu|cv|cy|da|de|diq|dsb|dv|dz|ee|el|eml|eo|es|et|eu|ext|fa|ff|fi|fiu-vro|fj|fo|fr|frp|frr|fur|fy|ga|gag|gan|gd|gl|glk|gn|got|gu|gv|ha|hak|haw|he|hi|hif|ho|hr|hsb|ht|hu|hy|hz|ia|id|ie|ig|ii|ik|ilo|io|is|it|iu|ja|jbo|jv|ka|kaa|kab|kbd|kg|ki|kj|kk|kl|km|kn|ko|koi|kr|krc|ks|ksh|ku|kv|kw|ky|la|lad|lb|lbe|lez|lg|li|lij|lmo|ln|lo|lt|ltg|lv|map-bms|mdf|mg|mh|mhr|mi|min|mk|ml|mn|mo|mr|mrj|ms|mt|mus|mwl|my|myv|mzn|na|nah|nap|nds|nds-nl|ne|new|ng|nl|nn|no|nov|nrm|nso|nv|ny|oc|om|or|os|pa|pag|pam|pap|pcd|pdc|pfl|pi|pih|pl|pms|pnb|pnt|ps|pt|qu|rm|rmy|rn|ro|roa-rup|roa-tara|ru|rue|rw|sa|sah|sc|scn|sco|sd|se|sg|sh|si|simple|sk|sl|sm|sn|so|sq|sr|srn|ss|st|stq|su|sv|sw|szl|ta|te|tet|tg|th|ti|tk|tl|tn|to|tpi|tr|ts|tt|tum|tw|ty|udm|ug|uk|ur|ve|vec|vep|vi|vls|vo|wa|war|wo|wuu|xal|xh|xmf|yi|yo|za|zea|zh|zh-classical|zh-min-nan|zh-yue|zu):"") &
+!(added_lines rlike ""\[\[(nostalgia|ten|test|aa|ab|ace|af|ak|als|am|an|ang|ar|arc|arz|as|ast|av|ay|az|ba|bar|bat-smg|bcl|be|be-x-old|bg|bh|bi|bjn|bm|bn|bo|bpy|br|bs|bug|bxr|ca|cbk-zam|cdo|ce|ceb|ch|cho|chr|chy|ckb|co|cr|crh|cs|csb|cu|cv|cy|da|de|diq|dsb|dv|dz|ee|el|eml|eo|es|et|eu|ext|fa|ff|fi|fiu-vro|fj|fo|fr|frp|frr|fur|fy|ga|gag|gan|gd|gl|glk|gn|got|gu|gv|ha|hak|haw|he|hi|hif|ho|hr|hsb|ht|hu|hy|hz|ia|id|ie|ig|ii|ik|ilo|io|is|it|iu|ja|jbo|jv|ka|kaa|kab|kbd|kg|ki|kj|kk|kl|km|kn|ko|koi|kr|krc|ks|ksh|ku|kv|kw|ky|la|lad|lb|lbe|lez|lg|li|lij|lmo|ln|lo|lt|ltg|lv|map-bms|mdf|mg|mh|mhr|mi|min|mk|ml|mn|mo|mr|mrj|ms|mt|mus|mwl|my|myv|mzn|na|nah|nap|nds|nds-nl|ne|new|ng|nl|nn|no|nov|nrm|nso|nv|ny|oc|om|or|os|pa|pag|pam|pap|pcd|pdc|pfl|pi|pih|pl|pms|pnb|pnt|ps|pt|qu|rm|rmy|rn|ro|roa-rup|roa-tara|ru|rue|rw|sa|sah|sc|scn|sco|sd|se|sg|sh|si|simple|sk|sl|sm|sn|so|sq|sr|srn|ss|st|stq|su|sv|sw|szl|ta|te|tet|tg|th|ti|tk|tl|tn|to|tpi|tr|ts|tt|tum|tw|ty|udm|ug|uk|ur|ve|vec|vep|vi|vls|vo|wa|war|wo|wuu|xal|xh|xmf|yi|yo|za|zea|zh|zh-classical|zh-min-nan|zh-yue|zu):"")",365454,Zzuuzz,20170509185805,0,"Addresses cross-wiki vandalism coming from German Wikipedia.
+
+*Tweak, add warning - this catches a lot more vandalism than I was expecting!
+
+**Tweak, the abuse appears to be coming from new accounts. Other vandalism is covered in other filters -TS
+
+Modify so it won't catch blanking. Does this need to be private? -P
+:Nope, no need for this to be private, it's quite clear what it does. --Conti
+
+It does not make sense to warn. - Ruslik
+
+Now finds removal of any interwiki lang link - Addshore
+Disabled (Hits too much to be usefull - see #531 for removal of ALL interwiki links from a page)- Addshore
+
+marked as deleted. zzuuzz 9 May 2017",Interwiki link removal,0,56352,0,1,tag,0,default
+867,"!contains_any(user_rights, ""bot"", ""extendedconfirmed"") &
+page_namespace == 0 & (
+ page_id == 0 | (
+ ""#redirect"" in lcase(removed_lines) &
+ !(""#redirect"" in lcase(added_lines))
+ )
+) &
+new_size > 3000",14882394,MusikAnimal,20181018194458,1,"See [[Wikipedia:Edit_filter/Requested#Large_creations_in_single_edit_by_inexperienced_users]], perma link: [[Special:Permalink/793725383]] ~MA
+
+-updated to exempt bots, bug in AF not matching this included permission ~Xaos 20180426",Large creations by inexperienced user,0,51805,0,0,,0,default
+346,"article_namespace == 0 & (
+ !""confirmed"" in user_groups & (
+ (old_size == 0|edit_delta > 500|length (rmwhitespace(added_lines)) > 800) & (
+ (rcount (""[a-zA-Z0-9\-]"", added_lines) / (length (rmwhitespace(added_lines)) + 1)) < 0.2 & (
+ !(lcase(added_lines) rlike ""lyric|poem|lang"")
+ )
+ )
+ )
+)",365454,Zzuuzz,20170514124354,1,"Testing for efficiency, accuracy, and need. - Someguy1221
+Regexes are more efficent than using lcase. --Tim
+Include numbers. - KoH
+
+Expanding to new articles and large additions that are 90-100% non-english, rather than just 100%. Props to Sole Soul. - Someguy1221
+
+Change to 80-100%. Will observe for FPs. -Sole Soul
+
+FPs associated with certain words. -Sole Soul
+
+FPs on post blanking edits
+
+Optimize prarentheses. Maybe we should be using article_articleid == 0. RF 2015-02-22",Large non-English contributions,0,49652,0,0,"warn,tag",0,default
+458,"!(""autoconfirmed"" in user_groups) &
+(new_size > 0 & new_size < 10)",3855926,Legoktm,20140303202151,0,"Prevents all-caps comments in AFTv5.
+
+Disabling. Why is it necessary to disallow shouting? It may be impolite but it's not all in bad faith. Plus there's the potential for FPs such as all-caps abbreviations. - KoH
+
+Reenable with disallow off. - KoH
+
+Enabled this filter with only an auto-flag action, to test that feature on production. All this does is indicate to editors that there could be an issue with this post, as is often the case with people who type their entire comments in all-caps. - Fabrice Florin
+
+Changed the setting of this feedback filter to be included in the 'Feedback' filter group, which was recently implemented by Werdna (Andrew Garrett) to separate edit filter actions from feedback filter actions,so that feedback filters don't impact condition limits for edit filters. - Fabrice Florin - May 17, 2012
+
+Dropped the action check, as the group setting makes it unnecessary. -Rsterbin
+
+Dropped the warning filter, which is not appropriate for feedback filters (until Werdna revises the tool). Only kept auto-flag for now, because it is unfair to reject someone's post just because they are shouting. Auto-flag should suffice to warn editors of possible abuse. -- Fabrice Florin, June 6, 2012.
+
+Disabling - too many false positives. Oliver Keyes, July 21, 2012
+
+New filter. Moved from filter 460. -Sole Soul
+
+Hit the >5% of actions by itself, and all edits were garbage or vandalism. -- Oliver Keyes (WMF)
+
+Upped to 10 chars to try and reduce the number of hits. Short-term, experimental fix :). -- Oliver Keyes (WMF)
+
+The above action quickly disabled the filter. After my call with Oliver, I realized that upping the number of chars would INCREASE the number of hits even more, so I am now lowering the number of chars down to 3, to see if that solves the issue. Short-term, experimental fix :). -- Fabrice Florin (WMF)
+
+Re-enabling this filter, now that we have deployed a fix to prevent from being disabled after only a few posts. Hopefully it will work better now. I am setting it up for posts that are shorter than 5 characters, as initially intended by Sole Soul. Fingers crossed. -- Fabrice Florin
+
+This filter was automatically disabled with a setting of 5 characters or less, so I am lowering that threshold to disallow posts that have 4 characters or less, to see if it works. -- Fabrice
+
+This filter was automatically disabled with a setting of 4 characters or less, so I am lowering that threshold to disallow posts that have 3 characters or less, to see if it works. -- Fabrice
+
+This filter was automatically disabled with a setting of 3 characters or less, so I am lowering that threshold to disallow posts that have 2 characters or less, to see if it works. -- Fabrice Florin
+
+To enable filtering for very short posts of 10 characters or less, we have now made a change to the Abuse filter extension to increase the threshold that disables filters if they exceed 5% of total actions, raising it to 10% (but only for filters that are in the feedback group, leaving other filters untouched). To test that this change is working as intended, I will start by disallowing posts with 10 characters or less. If that works and the filter is not disabled, then it means that our change did the job. If the filter is disabled at 10 characters, then I will go down to 9 characters or less, then 8 characters or less, until we reach a stable state. Fingers crossed .... -- Fabrice Florin Oct. 26, 2012
+
+This filter was automatically disabled at 10 characters over the weekend, even though we increased the limit to 10% of feedback actions ('matching more than 10.00% of actions'), so I am trying it out again with 9 characters -- Fabrice Florin - Oct. 29, 2012
+
+Auto-disabled at 9 characters as well, testing 8. -mlitn
+
+Auto-disabled a couple hours later at 8 characters, so I am trying it out again with 7 characters -- Fabrice Florin - Oct. 29, 2012
+
+Auto-disabled at 7 characters as well, testing 6. -mlitn
+
+Auto-disabled at 6 characters as well, testing 5. -- Fabrice Florin - Nov. 13, 2012
+
+Auto-disabled at 5 characters as well, testing 4. -- Fabrice Florin - Nov. 19, 2012
+
+Re-enabling now that threshold has been upped for feedback group. --mlitn - Feb. 12, 2013
+
+Size 0 (no feedback at all) is valid --mlitn - May 14, 2013
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Feedback: Extremely short post,0,46898,1,1,disallow,0,default
+806,,14882394,MusikAnimal,20181012022640,1,,New account suspicious activity,1,46840,0,0,throttle,0,default
+803,"page_namespace == 2 &
+!('/' in page_title) &
+page_title != user_name & (
+ template := ""{{unlocked userpage}}"";
+
+ (
+ !(""confirmed"" in user_groups) &
+ !(template in old_wikitext) &
+ page_id != 31555737 /** manually exclude User:Sandbox **/
+ ) | (
+ (
+ (
+ removed_lines contains template &
+ !(template in added_lines)
+ ) | (
+ added_lines contains template &
+ !(template in removed_lines)
+ )
+ ) &
+ !(""sysop"" in user_groups)
+ )
+)",14882394,MusikAnimal,20181023223916,1,"Testing for https://phabricator.wikimedia.org/T149445
+
+Enabling with disallow per [[Wikipedia:Requests for comment/Protect user pages by default]] (see also the talk page) ~ MA 2016.11.30
+
+Add exception for User:Jimbo_Wales, high-profile page advertised as being open ~MA 2016.11.30
+
+Skip for User:Sandbox as well ~Xaos 20161203
+
+Noting the implementation to allow users to selectively disable protection for their userpage, which we may add at some point:
+*****
+article_namespace == 2 &
+!('/' in article_text) &
+article_text != user_name & (
+ template := ""{{unlocked userpage}}"";
+
+ (
+ !(""confirmed"" in user_groups) &
+ !(template in old_wikitext)
+ ) | (
+ (
+ (
+ removed_lines contains template &
+ !(template in added_lines)
+ ) | (
+ added_lines contains template &
+ !(template in removed_lines)
+ )
+ ) & !(""sysop"" in user_groups)
+ )
+)
+*****
+~MA",Prevent new users from editing other's user pages,0,46756,0,0,disallow,0,default
+117,"!(""confirmed"" in user_groups) & (
+ article_namespace == 0 & (
+ edit_delta > -400 & (
+ new_size > 50 & (
+ stringy := ""\[\[category:\s*living[ _]people|\{\{lifetime"";
+ lcase(removed_lines) rlike stringy & (
+ !(lcase(added_lines) rlike stringy
+ & !(""#redirect"" in lcase(added_lines))
+ )
+ )
+ )
+ )
+ )
+)",14882394,MusikAnimal,20160614004645,1,"remove redirection (irrelevant) and blanking (should be handled elsewhere). -DF
+
+add edit delta to skip mass deletions - cenarium
+
+Adjust to handle use of {lifetime} and piped categories. -DF
+
+Add tag: removal of Category:Living People. --Drilnoth
+
+Re-order. -Sole Soul",removal of Category:Living people,0,43822,0,0,tag,0,default
+316,,16980,Dragons flight,20150218175744,1,,Subtle changes to articles,1,43756,0,0,throttle,0,default
+368,"minor_edit &
+(edit_delta < -500 | edit_delta > 500) &
+user_editcount < 500 &
+!((article_namespace == 2 | article_namespace == 3) & user_name in article_text) &
+!(article_namespace % 2 == 1) &
+!(""bot"" in lcase(user_name)) &
+!(""bot"" in user_groups) &
+!(""Wikipedia:Sandbox"" in article_prefixedtext) &
+!contains_any(summary, ""reverted"", ""undid"", ""|TW]]"", ""rvv"")",5711305,Cenarium,20150212173530,0,"This will trigger on edits that are marked as minor that have a size change of greater than 500 bytes (either removing or adding 200 or more characters). Obviously, this won't catch all non-minor edits, as a small size change can still be pretty darn major, but this should catch those who mark every single edit as minor.
+
+Ideally, once tested, this will give users a warning along the lines of ""are you sure you want to mark this edit as minor?"" explaining what minor edits are and how to turn off that stupid setting in preferences. - Hersfold, 18:16 Oct. 20 2010
+
+Changing to not trigger on bot edits; most bots mark their edits as minor, and most of the early hits are indeed bots. - Hersfold, 18:30 Oct. 20 2010
+
+Changed size of edit to 500 after finding that many triggered edits could have been minor, and were just adding references or the like. This also goes more in line with Recent Changes, which bolds edits that have a net change of 500 bytes or more. - Hersfold, 18:37 Oct. 20 2010
+
+Disabling until I can figure out why this is eating up 68 (!) conditions. - Hersfold 22:14 Oct. 25 2010
+
+Following some reassurance from Soap (thanks), I'm going to turn this back on with an added condition; if the user has more than 500 edits, it won't trigger for them. There are a large number of experienced users setting this off, and I'd like to assume that they know what they're doing. - Hersfold 22:25 Oct. 25 2010
+
+Now will also not trigger within a user's own userspace. - Hersfold 22:32 Oct. 25 2010
+
+As Gurch pointed out, I apparently fail at logic. NOW it won't trigger in someone's userspace. - Hersfold 15:39 Oct. 26 2010
+
+Removing talk namespaces as well. Aside from that, many if not all of the recent triggers appear to be accurate, so I'm going to turn on warning and tagging. The warning invites reports of false positives, so hopefully that should help with any further problems. - Hersfold 15:42 Oct. 27 2010
+
+Reordering conditions as requested on my talk page - hopefully will make this more efficient. - Hersfold 22:07 Oct. 27 2010
+
+Adding check to avoid issues with sandboxes. --Reaper
+
+Ignore reverts of vandalism. --Reaper
+:removed, is this really necessary? It seems to be causing a lot of annoyance. -- Soap
+
+Marked as deleted - KoH",Making large changes when marking the edit as minor,0,42952,0,1,warn,0,default
+249,"!""confirmed"" in user_groups &
+summary irlike ""undid|undo|revert|\brv\b""",14882394,MusikAnimal,20180328195529,1,"Filter to track large-scale reverts by new users.
+-Rate increase - P
+
+Add ""rv"" to list of summaries. Od Mishehu
+
+Added spaces around ""rv"" - too many false positives due to section names - ""seRVice"", ""reseRVe"", ""oveRView"", etc. - Mr.Z-man
+exempt all ST47's pages and subpages -- Soap
+"" rv "" (with spaces) won't catch it if it appears at the front. Regex is much more customizable. - KoH
+
+Format. -DF
+
+Use ""confirmed"" instead of ""autoconfirmed"" ~MA
+
+Removing the mysterious clause exempting ST47's userspace. Cursory glance at their user/user talk pages didn't reveal anything justifying this, so I'm assuming it isn't needed anymore (it was added in 2010). Also adding clause to not tag if the user is reverting themselves ~MA
+
+Removing clause checking self-username, sometimes the user is reverting intermediate edits back to their version. This filter only tags, so no biggie if the user is legitimately reverting a lot of their own edits ~MA",New user conducting large scale reverts,0,41712,0,0,"throttle,tag",0,default
+9,"!(""confirmed"" in user_groups) &
+page_namespace == 0 & (
+ bad_words :=""\n[^\x22^\r^\n]*\b(?<!it|man)(is|are|\'re|u\s*r\b)\s+(a|an|)\s*(fuck(ing|)|(u|ü)ber|ultra|very|)[ -]*(\b(ass|arse)(hole|)\b|bastard|co[ck](sucker|s)?\b|[ck]unt|douche|fag|ghey|lo[zs]er|kike|(mother)?f+[uc]+k+(e+r+|f+a+c+e+|t+a+r+d+|a+)|n+i+gg+(e+r+|a+)|p+a?e+d+o+((f|p+h+)i+l+e+)?|prick\b|s+h+i+t+|s+l+u+t+|tosser|twat|wanker|whore\b|b+i+t+c+h+|cabr(ó|o)n|culo|idiot|moron|pendejo|penis\b|put(a|o)\b)"";
+
+ lcase(added_lines) rlike bad_words) &
+ !(lcase(removed_lines) rlike bad_words
+)",14882394,MusikAnimal,20181018194855,0,"Checking the regex against the old_wikitext seems to worked, false positives are more rare and fixable now.
+
+There is no reason to disable the whole filter for false positives, remove the offending word or add a word boundary check (\b).
+
+Reenabling disallow. - BJ
+
+Add ""faggot"", used by Fang for personal attacks on Versus22. --NW
+
+""fag"" matches ""faggot"" because it has no \b. -BJ
+
+Added a few simple words - VoA
+
+Merging. -BJ
+Splitting filter for new users leaving this one for IPs. -BJ
+Remove ""bitch"", it'll still warn in filter 97. -BJ
+Making a few words warn only. -BJ
+
+Merged with filter 97. Ruslik
+Changed name of the filter. - Ruslik
+Fixed error. - Ruslik
+Removed some unnecessary regexes
+
+remove retarded, some false positives - Cenarium
+
+FP: Exempting cases where the attack appears in quotes. - KoH
+
+Changing to one regex based on code KoH provided. - Evil saltine
+
+Added \b after whore (to exclude whorehouse). ~~~~
+
+Simplified code. - Ruslik
+
+Added \b after d(i|l)ck and put(a|o). - Ruslik
+Added negative lookbehind for ""man"" due to false positive ""a man's penis"" -- Shirik 20 Feb 2010
+
+-1 ""Dick"" seems like it's going to cause too many false positives. -- Shirik 23 Feb 2010
+rm ""gay"", there must be another filter that could track this ... will work on it -- Soap
+Added a few, added ""+""'s so that things like ""BBIIIIITTTCCCH"" are matched. -Tim1357
+rm butt, bum, seem to be matching ""X's butt"" etc -- Soap
+remove 's, re-add if you've got time to handle the false positives -- Soap
+
+Simplified and turned public. Temporarily in tag mode to check for FPs. -Sole Soul
+
+Disabled. Few hits that are mostly trigger other filters. -Sole Soul
+
+unregistering tag ""possible vandalism"" - Cen
+tweaked in case we ever need it. RF",Personal attacks by unregistered or new user,0,41354,0,0,,0,default
+1,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+added_lines contains ""<big><big><big><big>""",14882394,MusikAnimal,20181017165127,0,"test added_links behavior
+Turned off to save conditions -- addshore 18/7/13
+Testing self
+31/7/13 - Salix alba. Add a test warning message and tag with ""test edits""
+
+Testing something
+Cluebot NG errors/.
+
+testing revert of tagging, looks like it can't be done on testwiki - Cen
+
+Non-autoconfirmed creating articles RF
+IP making possibly unsourced addition to BLP. RF 2105-05-02 - done
+Test simpler version of 126 RF
+Test (probably) faster version of 614 (we have no metrics) RF
+Test simpler version of 79. RF
+Test optimized version of 642. RF
+New user tagging as ga/fa RF
+Checking if booleans cast to numerics so we can do, for example, 2 of 3 conditions. - yes it works. RF
+Demo of edit warring possibilities RF
+test for Cogniq spam RF
+Test for IBAN RF
+Test for ""contains"" RF
+Test simpler version of 602. RF
+
+New users creating userpages in others' userspaces. - Earwig 2015-10-30
+Split off to #733. - Earwig 2015-11-02
+
+Disable. No hits in over a month, and no edits in several months. I assume the current ""test"" is over? -DF
+
+New test for titles containing 10 or more consecutive digits. MER-C (2016-10-19)
+
+Disable, should be enough for test? If not, reenable. - Cen 16/11/06
+
+""Love Lion"" sillyness at Trafalgar Sq. Checking for FPs - Crow 7/30/17
+-Disabled, target page is protected -C
+
+Testing if there's other Korean spambots than 119.206.249.167 and 45.122.138.58. -Cyp 2017-12-28
+
+Public logging of adding alt text per request of Whatamidoing-WMF at EFR. -C 31Mar18
+- Deactivated per request 17APR18 -C
+
+Reset: Checking for edits over 50 for non autoconfirmed users per req at EF/R. Disable if this becomes a limit killer or performance hog. -C 28May18",General test filter,0,40258,0,0,,0,default
+466,,14882394,MusikAnimal,20161229063919,1,,Userspace & talk page spamming,1,38064,0,0,"warn,tag",0,default
+753,"article_namespace == 0 &
+(
+ ! ""confirmed"" in user_groups &
+ (
+ edit_delta == -( rcount(""\[\["", removed_lines) + rcount(""\]\]"", removed_lines) ) &
+ (
+ rcount(""\[\["", removed_lines) > rcount(""\[\["", added_lines)
+ )
+ )
+)",16980,Dragons flight,20160407115749,1,"Filter to create tag for when a new user or IP removes wikilinks from an article, to flag potential edits by IP hopping redlink removal vandal. - Coffee
+
+optimize, use edit_delta to cut down consequential removal wikilinks when blanking content. Could probably better restrict to *just* delinking with something like:
+
+ edit_delta == -(rcount(""\[\["", lcase(removed_lines)) +
+ rcount(""\]\]"", lcase(removed_lines)))
+
+~MA 2016.02.16
+
+I appreciate that very much MA... hadn't thought of that potential outcome. - Coffee 2016.02.16
+
+No problem. I think we should just target delinking alone. We won't get hits when they make other accompanying changes but there's so many unrelated hits it almost makes it not worthwhile. After all, we're tagging these edits, so we should try to be as accurate as possible ~MA
+
+Remove pointless ""lcase"" calls, and format. -DF",wikilinks removed by a new user or IP,0,36983,0,0,tag,0,default
+58,,365454,Zzuuzz,20190106084020,1,,Long-term pattern abuse,1,35223,0,0,disallow,0,default
+31,,82835,Rich Farmbrough,20171016132909,1,,ASCII art,1,34966,0,0,disallow,0,default
+164,"article_articleid == 0 & (
+ article_namespace == 0 & (
+ user_editcount < 250 & (
+ new_size > 500 & (
+ ""[edit]"" in new_wikitext |
+ lcase(new_wikitext) rlike
+ ""\{\{(unreferenced|advert|coi|notability|pp|cleanup|afdm|refimprove|article issues).*\}\}""
+ )
+ )
+ )
+)",82835,Rich Farmbrough,20150218122411,1,"Per RAF. Detects probable cut and paste moves where a large new page is created with either [edit] text in it (indicative of copying the HTML rather than the source) or with message boxes already on it.
+
+Narrowing search pattern to tags that would rarely be placed by the article's creator except in a copy-paste. ~ Someguy1221
+
+:Made this case insensitive. -DF
+
+Added tag: possible cut and paste move. --Drilnoth
+Limited this filter to user with editcount less than 2000. - Ruslik
+
+Autoconfirmed only, presumably everyone with the move tag will make actual moves -Prodego
+
+Optimizing - KoH
+
+Add a few tags from filter 237 in order to merge the two filters. Change order of tests for (presumably) faster operation. Change from not auto-confirmed only to less than 250 edits, as inexperienced editors often do copy & paste moves despite having the technical ability to use the move button. Change tag to read ""... or recreation"" since that is another explanation for where the tags came from. -ThaddeusB
+
+please don't change the name of a tag already applied to edits, as it creates a new one, instead change the description - Cen
+
+Optimize (nest per Dragon's Flight, see if it changes from 0.66 ms and 2 conditions). RF 2015-02-18",Possible cut and paste moves,0,34351,0,0,tag,0,default
+716,"article_namespace == 0 & (
+ !""confirmed"" in user_groups & (
+ edit_delta < 100 & (
+ fa_ga := ""\{\{[\s_]*([Ff]eatured|[Gg]ood)[\s_]*article[\s_]*(\||\}\})"";
+ (
+ added_lines rlike fa_ga ^
+ removed_lines rlike fa_ga
+ )
+ )
+ )
+)",461626,Od Mishehu,20151205214255,1,"If this is set to disallow it might help avoid FPs with 365. RF 20150802
+A surprising 5 hits in 3 days. Set to disallow.
+
+Back to log-only, too many false positives. Also adding edit_delta to help capture what this is presumably supposed to catch ~MA
+
+Catch removal of tags too. RF 20150829
+
+Use the XOR operator (^). --OM",New user tagging or de-tagging article as FA/GA,0,34135,0,0,,0,default
+96,"article_recent_contributors == """"
+& user_editcount < 50
+& article_namespace == 0
+& !(new_size < 150)
+& !(contains_any(rmspecials(lcase(added_lines)),rmspecials(lcase(article_text)),""{{subst:pagename}}"",""#redirect"", ""pagename""))",5711305,Cenarium,20150212173317,0,"This filter recognizes newly created articles that do not mention the article subject.
+It does not yet apply to multiword titles. If the filter finds any, it will skip those.
+I've written this using exclusions, so those cases can be expanded.
+
+-Broken, getting all new pages -Prodego
+Update, triggering because the pages use {{subst:PAGENAME}} either exclude that or use rendered wikitext. -Prodego
+
+Excluded template filter reenabled. --Mgm
+
+Switched to contains_any (faster) and put PAGENAME -> pagename, since it is being compared to lcase(added_lines) -Prodego
+
+Included another possible exception. - Mgm
+
+add tag ""new article with no mention of title"" - Cen
+Switched to contains_any. - Ruslik
+
+Set editcount, make sure that the user is relatively new. - KoH
+rm useless parenthesis. -- Tim
+
+Add ""rmwhitespace"" condition. Also, exclude very short articles (already covered by filter 98). -Sole Soul
+""rmspecials"" instead of ""rmwhitespace"". -Sole Soul
+
+Mark as deleted. - KoH",Newly created articles that don't mention their subject,0,33114,0,1,,0,default
+167,"article_namespace == 5 & (
+ article_articleid == 0 & (
+ article_prefixedtext rlike "":Articles for creation.*"" & (
+ !(""bot"" in user_groups) & (
+ !new_wikitext rlike ""{{subst:AFC submission/(draftnew|submit|submit\|type\=(?:dab|template))}}|{{subst:submit}}|{{WPAFC""
+ )
+ )
+ )
+)",82835,Rich Farmbrough,20150724165931,1,"Filter should catch submissions to Articles for creation that do not contain the submissions template, which normally require brute forcing through thousands of submissions to locate.
+-Disable. Again, this is blocking good faith edits for a minor issue, which isn't something we should be doing. -Prodego
+
+- Re-enabled. Will discuss with Prodego. - Someguy1221
+
+Merged regexes. - Ruslik
+Added template support and optimized -- Shirik 16 Mar 2010
+
+Account for draftnew (2nd option in WP:WIZGO). --slakr 05Oct2011
+
+Ignore flagged bots - Legoktm 24 June 2013
+
+Only apply to WT:AFC pages, not WT:WPAFC pages - Legoktm 17 Sept 2013
+
+Optimize for condition count. RF 20150724",Botched submissions to Articles for creation,0,32972,0,0,warn,0,default
+323,"!( ""confirmed"" in user_groups ) & (
+ article_namespace == 0 & (
+ summary rlike ""Undid revision \d+ by \[\[Special\:Contributions/(ClueBot NG|XLinkBot)""
+ )
+)",14882394,MusikAnimal,20160614005551,1,"Create Filter. Log only. Tim1357 April 26.
+-Restrict to autoconfirmed -X!
+-Set to tag. -X!
+-Move auto-confirmed bit to before the regex. Tim1357
+-This was private when I made it, I had planed to un-private it but I forgot. -- Tim1357
+
+Added an aother anti-vandalism bot I found on a page history. -Od Mishehu
+Add ClueBot NG. -- Tim1357
+Added XLinkBot. --Beetstra
+Remove inactive bots. -Sole Soul
+
+Added 28bot. -- Ixfd64
+
+Removed 28bot for now, it doesn't seem to be active at the moment. -- Ixfd64",Undoing anti-vandalism bot,0,31881,0,0,tag,0,default
+613,"!""autoconfirmed"" in user_groups & (
+ article_namespace === 0 & (
+ ""~~~"" in added_lines & (
+ !old_wikitext rlike ""~~~""
+ )
+ )
+)",14882394,MusikAnimal,20160614035203,0,"Testing phase, will add a warning
+
+too many false positives... disable and delete for good :( ~ MusikAnimal 2014-07-02
+
+re-enabling with modifications thanks to @Nirmos - MusikAnimal 2014-07-07
+
+Warn then tag. Note unconfirmed users will receive this warning when substituting some templates in the article space. I deem exceptions for template usage to be too expensive on the condition limit, given it will likely be rare case for unconfirmed users anyway. I will actively monitor the hit list for accuracy - MusikAnimal 2014-07-07
+
+Optimize for conditions;
+I think the exceptions would be fine given that its already a rare case when we are down to ""~~~"" added. RF 20150714
+
+No longer needed! As per https://phabricator.wikimedia.org/T7645 ~MA",Signing in article,0,28327,0,1,"warn,tag",0,default
+728,"user_editcount > 500 & (
+ contains_any(user_rights, ""rollback"") & (
+ summary rlike ""^.*\(\[\[WP:HG\|HG\]\]\).*$""
+ )
+)",5711305,Cenarium,20151006132227,0,"This is a filter that marks all edits made by huggle, so that they can be easily filtered out or ignored by other tools.
+
+trying to use manual tag added directly by Huggle -> deleting so that tag is no longer registered by AbuseFilter and can be defined manually - Cen
+tag has been manually created, reenable until HG 1.3.17 is released - Cen
+
+restrict to rollbackers with > 500 edits for performance ~MA
+
+.17 is out and most clients should have updated -> switch to manual tagging for perf - Cen",Huggle,0,25869,0,1,tag,0,default
+627,"(user_editcount < 20)
+&((article_namespace / 2 = 59) | ((article_namespace / 2 = 1) &(contains_any(lcase(new_wikitext) ,""{{user sandbox}}"",""{{user draft}}""))) )
+& (stringy := (
+
+ /* First person */
+ ""(\bour (business|cater|channel|clients?|commitment|company|customers?|employees?|experience|factor(y|ies)|firm|focus|goal|mission|portfolio|products?|professionals?|services?|site|solutions|specialty|staff|team|vision|website))|"" +
+ ""(we ((are (committed|proud|speciali[sz]ed))|((can )?offer)|pride ourselves|provide|sell|serve|service))|"" +
+ ""((about|call|email|visit) us\b)|"" +
+ ""((follow|like) us on)|"" +
+
+ /* Calls to action - see [[Call to action (marketing)]] */
+ ""(download free)|(free download)|"" +
+ ""(free trial)|(order today)|"" +
+
+ /* Generic PR bullshit */
+ ""((of|for) (businesses|clients|consumers|customers))|"" +
+ ""(leading (brand|developer|manufacturer|provider))|"" +
+ ""(enterprise (solutions|systems))|"" +
+ ""(innovative (designs|solutions))"" +
+ ""(friendly staff)|(new markets)|(it solutions)|(web services)|(mission statement)|"" +
+ ""(prestigious business)|(targeted at)|(one-stop)|(affordable high-quality)|(integrated systems)|"" +
+ ""(employs over)|(full integration)|(customer satisfaction)|(cutting costs)|"" +
+
+ /* Frequently spammed */
+ ""blockchain|cryptocurrency|(erc-20)|(initial coin offering)|"" + /* See [[WP:GS/Crypto]] */
+
+ /* INDEXing pages */
+ ""__index__|\{\{\s*index\s*(?:\}\}|\|)"");
+
+ (lcase(added_lines) rlike stringy & !lcase(removed_lines) rlike stringy)
+)",1749459,MER-C,20181125143134,1,"Split from Edit Filter 354
+
+Additions to 354:
+* Also testing draft namespace for overly promotional material
+* Testing userspace articles which are marked as a draft
+* here back-including the edits to another users talkpage with promotional texts, may give some false-positives but will increase speed
+* Fix error
+* swap two terms, might increase the speed
+
+Checking to make sure that the text was actually added, not remaining text from previous edits. Od Mishehu
+making public, per discussion. RF 20150806
+
+Flag INDEXing of draft and/or sandbox material. -- MER-C (20180324)
+Split for readability and added a few search terms. -- MER-C (20181125)",Promotional text added by user to draft in own user(-talk) page or in draft namespace,0,24764,0,0,tag,0,default
+846,"user_age == 0 & (
+ ip_in_range(user_name, ""2607:fb90:0:0:0:0:0:0/32"") |
+ ip_in_range(user_name, ""172.58.0.0/16"")
+)",25420061,BU Rob13,20170406020700,1,"This temporary filter will log a *lot* of edits, most of which totally innocent and not requiring action. There has been a lot of disruption on a number of namespaces from this range, and an easier way of logging it has been requested by a number of admins and counter-vandalism patrollers. The performance implications of this filter should be minimal --TheresNoTime 22/03/2017
+
+This range edits infrequently enough (about 1,000 edits over 4 days) that a tag in the history, to ensure other editors know the prevalence of abuse from this range, seems like a net positive for administration without a major impact to the server load. We'll see how this goes... --Coffee 26/03/2017
+
++hops --Coffee 02/04/2017
++hop --Coffee 04/04/2017
+
+At this point you're consuming at least 4 conditions when accounts edit, so adding `user_age == 0` to reduce to 1 condition for those users ~MA 2017-04-04
+
+Remove two blocked ranges ~ Rob 4/5",LTA tracking,0,24283,0,0,tag,0,default
+623,,14882394,MusikAnimal,20160614035424,0,,Signing in articles II,1,24030,0,1,disallow,0,default
+664,"regexstr := ""hi\W|hello\W|test(?:ing)?\W|:\-?\)\W|lol\W"";
+
+!""confirmed"" in user_groups &
+(
+ page_namespace == 0 &
+ (
+ edit_delta > 1 &
+ edit_delta < 6 &
+ (
+ (
+ added_lines irlike regexstr &
+ !(old_wikitext irlike regexstr)
+ )
+ )
+ )
+)",502540,Xaosflux,20181111001413,1,"Log only for now, will tweak to be more restrictive based on observations. ~MA
+
+Add warning ~MA 2015.02.26",Test edits,0,22539,0,0,warn,0,default
+342,"article_namespace == 0 & (
+ old_size < 200 & (
+ new_size > 0 & (
+ !(user_rights irlike ""autopatrol"") & (
+ removed_lines irlike ""#redirect"" & (
+ !added_lines irlike ""#redirect""
+ )
+ )
+ )
+ )
+)",14882394,MusikAnimal,20160614031603,0,"Per request at [[Wikipedia:Edit filter/Requested]] --Od Mishehu
+Umm, this needed some optimization. Move namespace condition to first, its the easiest to preform. Moved new_wikitext condition to second, and changed it to added_lines, and moved old wikitext bit to last. Removed all lcase from the filter, replaced with regex. Works the same, but should be more efficnet than 3.6ms -- Tim
+Exclude long pages and autoreviewwers -- Tim
+Fixify. -- Tim
+Admins don't get an exception? Editcount is a better way IMO. - KoH
+
+Too intensive -P
+
+Deleted. - KoH
+
+Improved syntax and re-enabled per requirement: [[Wikipedia:Village_pump_(proposals)/Archive_117#Proposed_technical_change:_show_pages_expanded_from_redirects_on_Special:NewPages_and_Special:NewPagesFeed]] -- Samwalton9, 7 March 2015
+
+new_size > 0 to stop flagging of blanked articles. --Samwalton9, 7 March 2015
+
+Format. -DF
+
+Disabled. Sampling the edits flagged by this filter reveals that almost all (all but one in my sample of 20) were constructive. --Reaper 2015-06-25
+
+Re-enabling again, for logging purposes only. Once this proves useful I've got a proposal to go with it. Please don't disable just yet... ~MA 2016.01.17
+
+Not needed... page curation already picks up these ~MA 2016.01.19",Redirect becoming article,0,21810,0,1,,0,default
+657,"user_editcount < 500 & (
+ article_namespace == 0 & (
+ templates:=""{{(airport|call sign|chinese title|hospital|letter|letter-numbercomb|mathematical|road|school|species latin name|wikipedia|)\s*disambig"";
+ old_wikitext irlike templates & (
+ added_links & (
+ !old_wikitext irlike
+ ""{{disambig((uation)? needed|-acronym|project)"" & (
+ !added_lines irlike ""{{disambiguation(-| )cleanup""
+ )
+ )
+ )
+ )
+)",15991542,Samwalton9,20150923100538,1,"Monitors whether an external link has been added to a disambiguation page. Would prefer to check for the page being in the Disambiguation category but can't see any function for doing so, so instead checked for any disambiguation template listed at [[Template:Disambiguation]]. Log only for now. -- Samwalton9, 22 January 2015
+
+Improved syntax; first 9 hits were false flags. --Samwalton9, 22 January 2015
+
+Limited to editcount < 500 to reduce run time; I don't see editors with higher edit counts doing this. -- Samwalton9 23 January 2015
+
+Changed to main namespace only & added warning and tag. -- Samwalton9, 27 January 2015
+
+Optimize for conditions RF 2015-0-19
+Tighten the regexes. Move declaration to its scope. RF 20150803",Adding an external link to a disambiguation page,0,21684,0,0,"warn,tag",0,default
+113,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+lcase(added_lines) rlike ""#\s?redirect"" &
+!contains_any(lcase(added_lines),""{{subst:rfd"",""{{db-r2}}"",""{{db-r3}}"",""Target page name"") &
+!(lcase(new_wikitext) rlike ""(^#|\n[#*]+)\s?redirect"")",502540,Xaosflux,20181111001344,1,"Requires #redirect to appear at the start of an article, unless it is part of a list (i.e. the other use for #).
+
+add tag ""unusual redirect"" - Cen
+
+warn. - Jarry1250
+disallow (no need for tag). - Jarry1250
+
+Added exceptions for {{rfd}} and {{db-r?}}. Some tweaks. - Ruslik
+
+Back to warn, no reason to deny it, we can't deny all incorrect syntax, so no reason to try to catch this one case -P
+
+replacing tag - Cen
+
+Update the rfd exception. --Od Mishehu, 21/2/17
+
+!confirmed first in hopes to reduce condition count (seems to cancel out more edits, in general) ~MA",Misplaced #redirect in articles,0,20885,0,0,"warn,tag",0,default
+711,"!""confirmed"" in user_groups &
+(
+ removed_lines irlike ""{{dead link"" &
+ (
+ !added_lines irlike ""{{dead link"" &
+ (
+ added_links
+ )
+ )
+)",502540,Xaosflux,20171009011036,1,"See [[WP:DEADLINKSPAM]] - Popular SEO tactic where dead links are replaced with spam links. --Samwalton9, 21 July 2015
+
+Avoid when user adds an archive URL --Samwalton9, 31 July 2015
+Changed
+ !added_lines contains ""web.archive.org""
+to
+ !added_links contains ""web.archive.org""
+better evidence of an add, and should be faster too. RF 20150906
+
+Removed archive.org; spammers using it to avoid the filter. Additionally making private, I suspect they know about this given their avoidance of it. --Samwalton9, 2 May '16
+
+-20171009, unhid following WP:EFN discussion - Xaosflux",Dead link replacement,0,20699,0,0,,0,default
+460,"!(""autoconfirmed"" in user_groups) &
+(lcase(new_wikitext) rlike ""\bass(holes?)?\b|bitch|\bboob|\bcocks?\b|\bcrap(py)?\b|\bcunts?\b|\bdick(head)?s?\b|\bdildo|douche|fag(g|\b)|\bfapp?(ing|ed|s)\b|fu+c+k|\bfuk you|(is|are) gay\b|\bha{2,}\b|\bhomo(sexual)?s?\b|l(ol){2,}|nigg(er|ah?)|\bpa?edo((ph|f)ile?)?s?\b|penis|\bpoo+p*y*\b|\bp([o0]r|r0)n\b|\bpussy|\brape([sd]|ist)?\b|\bsexy\b|\bshit|\bslut(s|ty)?\b|\bsucks?\b|\btit(tie)?s\b|\bwank|whore|\b(yo)?ur (m[ou]m|mother)"")",3855926,Legoktm,20140303202225,0,"Adapted for AFTv5 from ""Common Vandalism""; running with logging only for testing purposes. -- rsterbin
+
+Changed the setting of this feedback filter to be included in the 'Feedback' filter group, which was recently implemented by Werdna (Andrew Garrett) to separate edit filter actions from feedback filter actions, so that feedback filters don't impact condition limits for edit filters. - Fabrice Florin - May 17, 2012
+
+Dropped the action clause within the filter, as the group makes it unnecessary --rsterbin
+
+Set to disallow, rather than auto-flag, because none of these obscenities seem appropriate to have in an article feedback comment. -- Fabrice Florin - 23 July, 2012
+
+Merging from 461, 472, 473, 474, and 475. --Reaper 2012-08-17
+
+Move the ""new_size < 5"" condition -one of the most matched conditions- to a separate filter (458). The aim is to make this filter match < 5% of actions. -Sole Soul
+
+Split this filter into 5 smaller ones (494, 495, 496, 497). This large combined common vandalism filter (rightfully) flagged over 5% of all feedback, which triggered it to be automatically turned off as a safety measure. Splitting it up in smaller parts will make it less likely that one of them hits the 5% threshold (and if it does, at least the others remain functional) -mlitn
+
+Re-enabling this filter, now that we have deployed a fix to prevent from being disabled after only a few posts. Hopefully it will work better now. -- Fabrice Florin
+
+Merged 494, 495, 496 & 497 in here: percentage of matches is low enough to group them. Made filter name more descriptive (if matched, filter name will be displayed to show what's wrong with the feedback) --mlitn
+
+Removing ""i love"", seems to hit multiple legit entries. --mlitn
+
+Re-enabling, again, again --mlitn
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Feedback: Foul words,0,20505,0,1,disallow,0,default
+59,"page_namespace == 6 &
+!(""confirmed"" in user_groups) &
+rcount(""\{\{.*\}\}"", removed_lines) > rcount (""\{\{.*\}\}"", added_lines) &
+!(user_name in page_recent_contributors)",14882394,MusikAnimal,20181018235413,1,"Usually the removal or editing of templates on an image page by new users is disruptive to either copyright tags or deletion tags.
+
+Optimizing - Hersfold
+
+Fixing recent contributors thing. Also, Coppertwig suggested this regex, would it work better? ""\{\{[^}]*\}\}"" - Hersfold
+
+add tag ""image template removal"" - Cen
+
+adding exception (an IP is triggering it all the time) -- Luk
+
+adding another exception, a user, until autoconfirmed - Cen
+
+no exemptions - either fix the filter, disable it, or make them live with it. Don't waste checks on specific users -Prodego
+
+Optimize. -Sole Soul",New user removing templates on image description,0,19938,0,0,tag,0,default
+174,"!""confirmed"" in user_groups & (
+ (article_namespace === 0 | article_namespace === 2) & (
+ xfdRegex := ""{{AfDM|{{mfd|{{Article for deletion"";
+ removed_lines irlike xfdRegex & (
+ !(added_lines irlike xfdRegex)
+ )
+ )
+)",365454,Zzuuzz,20170514124342,1,"split from filter 29 - Cen
+
+add tag ""removal of articles for deletion template"" - Cen
+
+update for ""Article for deletion"" template and MfD, adding userspace ~MusikAnimal 2014.12.02
+
+added warning ~MA 2014.12.07
+
+Optimized for conditions. RF 20150725",New user removing XfD template,0,19223,0,0,"warn,tag",0,default
+520,"!(""autoconfirmed"" in user_groups) &
+(new_size > 0) &
+(!(new_wikitext rlike "" "") |
+(!(new_wikitext rlike ""[\[\](){}⟨⟩:,ØŒã€â€’–—―…!\.«»â€\?‘’“â€'\"";/â„]"") & (rcount(""\s+"", new_wikitext) >= 100)))",3855926,Legoktm,20140303202339,0,"Added length requirement; punctuation check will not kick in if the post is shorter than 10 words --mlitn
+
+Disabled until https://gerrit.wikimedia.org/r/#/c/32208/ is merged & deployed; this filter will hit quite a few positives and the reason may not be too obvious; only re-enable after aforementioned patch is deployed so people can see a message why the post is rejected --mlitn
+
+Enabled --mlitn
+
+Filter was disabled for matching over 20% of posts; re-enabled and only check for punctuation in feedback longer than 100 characters (it used to be 10, then 50) --mlitn
+
+Size 0 (no feedback at all) is valid --mlitn - May 14, 2013
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Feedback: No punctuation or spaces,0,18596,1,1,disallow,0,default
+397,,365454,Zzuuzz,20181108195959,1,,Userpage vandalism,1,18114,0,0,disallow,0,default
+155,"(article_namespace == 0) &
+(lcase(added_lines) rlike ""https?://[a-z0-9./]*youtube\.[a-z]{2,}/(watch|\?v=)"") &
+!(lcase(removed_lines) rlike ""https?://[a-z0-9./]*youtube\.[a-z]{2,}/(watch|\?v=)"")",451766,Prodego,20090928230926,0,"Hey, it's my first abusefilter! Not enabling yet because I am quite, quite awful with regexen and don't want to break the wiki. Youtube links are in the form .*youtube.tld/watch.* or .*youtube.tld/?v=.* but I think the .* isn't needed in this. -- Stifle
+
+:I don't see a reason to keep this hidden, people are going to find out one way or another anyhow. And if we hide this it will make things even worse. --Conti
+
+:I've made the filter public, there's simply nothing to hide here. --Conti
+::Removed my previous comment. --Stifle
+
+Consolidate the searches into a single query, force it to look for http references only, avoid matching against pre-existing links. -DF
+
+Probably not going to the destroy the world. Enabling as a log. -DF
+
+Why is this using article_namespace == 1? Surely there's reasons why such links would be legitimately discussed (like discussing whether or not its a copyvio). - Mr.Z-man
+:Mainly because the link is a copyvio either way. But change it if you feel like it. --Stifle
+
+Removed !sysop line, since they are note exempt from our copyright policies. :) --Conti
+
+Removed namespace 1, per Mr.Z-man and pretty much none of the Talk namespace uses are actionable or problematic. --Stifle
+
+Reduced to just Youtube per discussion at RAF. -DF
+
+Disable, appears to be inactive (log only filter). If you are using this filter, please let me know, and I'll reenable it -Prodego",Adding links to youtube,0,17517,0,1,,0,default
+782,"page_namespace == 0 &
+old_size == 0 &
+summary contains 'Created by translating the page ""[[:' &
+!(""extendedconfirmed"" in user_rights)",14882394,MusikAnimal,20181023223745,1,"Created for testing 20160726-Xaosflux
+
+Removed the ""new page"" condition - 20160727-Xaosflux
+
+2016-07-27T20:34:06 - Filter was enabled in blocking mode by Ymblanter (~xaosflux)
+
+Change system message --Samtar 27/7/16 20:40
+
+Filter optimizations (database query to end) 20160728T0253 -- Xaosflux
+
+Repalced 5000 with extenedconfirmed - [[WP:AN/CXT]] 20160731 - Xaosflux",Content Translation Edits,0,16702,0,0,disallow,0,default
+655,"!(""confirmed"" in user_groups) & (
+ article_namespace == 0 & (
+ old_size > 100 & (
+ (
+ edit_delta > 400 & (
+ stringy := ""===*\s*(synopsis|plot(?: summary| synopsis)?|summary)\s*===*"";
+
+ added_lines irlike stringy & (
+ !(old_wikitext irlike stringy)
+ )
+ )
+ ) | (
+ edit_delta > 800 & (
+ summary irlike ""^/\* (?:synopsis|plot(?: summary| synopsis)?|summary) \*/""
+ )
+ )
+ )
+ )
+)",14882394,MusikAnimal,20160520185734,1,"First draft for this edit filter. Not enabled for now. -- Samwalton9, 19 January 2015
+
+""autoconfirmed""->""confirmed"" to not flag manually confirmed users. Activating log only for a while to see how useful this filter would be. -- Samwalton9, 19 January 2015
+
+Tidied up redundant regex. -- Samwalton9, 20 January 2015
+
+Change trigger size to > 400. MER-C 23 January 2015
+
+Now flags if user adds a plot/summary title in their edit. --Samwalton9, 23 January 2015
+
+Disabled for now, not useful in its current form. --Samwalton9, 28 January 2015
+
+trying a more restrictive version, log only ~MA 7 April 2015
+--fixed buggyness causing lots of unrelated false positives, should (hopefully) be good now ~MA
+
+reliable, now tagging edits ~MA 2016.05.20",Large plot section addition,0,16051,0,0,tag,0,default
+602,"article_namespace == 3 &
+""confirmed"" in user_groups &
+!(""bot"" in user_groups) &
+/** do not warn for subpages **/
+!(""/"" in article_text) &
+/** cancels out most edits **/
+contains_any(lcase(added_lines), ""-- derived from template:ds/alert --"", ""subst:"") &
+/** now check for {{Z33}} in added_lines_pst, which is the more expensive operation **/
+""{{Z33}}"" in added_lines_pst &
+!(""-- Derived from Template:Ds/alert --"" in removed_lines)",488996,Timotheus Canens,20180331105543,1,"NOTE: Please raise problems at 'Template talk:DS' or 'Wikipedia:Edit filter noticeboard'.
+
+====
+
+SPECIAL NOTE ON EDITS MADE AT AROUND 23:29 ON 22 MARCH 2014: Due to a typo in the filter conditions, this filter today tagged several innocent edits. This was a mistake. Apologies for any confusion caused. -- User:AGK
+
+Cleanp layout and reduce likely condition count. -DF
+
+Remove function to ignore if there is the text in old_wikitext. Callanecc 12 Sep 16
+
+Change edit_diff_pst to added_lines_pst to avoid issue where the edit after the alert is picked up by the filter. Also removed size limit to cover more situations (such as when additional information is included in the same edit and for long sigs). Plus detect ""confirmed"" rather than ""autoconfirmed"" for manually confirmed users. Callanecc 19 Sep 16
+
+Reverting Musik's change, the filter isn't working. Callanecc 28 Nov 17
+
+Trying this again. This time I tested it to be working. ~MA
+
+Suppress for subpages. -TC",Arbitration discretionary sanctions alerts,0,15758,0,0,"warn,tag",0,default
+205,,258000,King of Hearts,20110310110641,0,,Scibaby #1,1,15519,0,1,,0,default
+106,"(article_namespace == 0) &
+!(user_name in article_recent_contributors) &
+(length(added_lines) * length(removed_lines) > 0 & !(removed_lines in added_lines)) &
+(edit_delta > -500 & edit_delta < 500) &
+(rcount(""\[\[([0-9]{1,2} (January|February|March|April|May|June|July|August|September|October|November|December)|(January|February|March|April|May|June|July|August|September|October|November|December) [0-9]{1,2}|[0-9]{4}|[0-9]{4}-[0-9]{2}-[0-9]{2})\]\]"",added_lines) != rcount(""\[\[([0-9]{1,2} (January|February|March|April|May|June|July|August|September|October|November|December)|(January|February|March|April|May|June|July|August|September|October|November|December) [0-9]{1,2}|[0-9]{4}|[0-9]{4}-[0-9]{2}-[0-9]{2})\]\]"",removed_lines))",258000,King of Hearts,20090830005331,0,"Logs changes in the number of linked dates on page by someone who is not a routine editor of that page. In relation to ArbCom injunction on such links.
+
+Add a throttle since the injunction is targeted to bulk action.
+Slightly shortened the code. - Ruslik
+
+Deactivate, it matches many edits, is this still needed ? - Cen
+
+Marked as deleted. - KoH",Date linking / delinking,0,14513,0,1,,0,default
+2,,14882394,MusikAnimal,20181008172604,0,,Test filter: for testing private filters,1,14104,0,0,,0,default
+51,,3174456,Oshwah,20181230024907,1,,LTA Username / LTA IP hopping disruption (Oshwah),1,14060,0,0,,0,default
+224,"(user_editcount < 50) &
+(rcount(""{{(Copyviocore|csb-pageincludes)"",added_lines) < rcount(""{{(Copyviocore|csb-pageincludes)"", removed_lines))",365454,Zzuuzz,20170910203050,1,"Creating per Moonriddengirl's request at WT:EF. - KoH
+Optimizing by adding parenthesis around second & third conditions to take advantage of short-circuit logic. -- Avi 8/12/2009 (1.8ms was avg run time prior)
+
+Also include removals of CSB. - KoH
+
+Faster regex. - KoH
+
+Tagging. - KoH
+
+1) Removing namespace to conform with 29. 2) Raising the bar to 50 edits. See [[WT:EF#Priority of filters when multiple EF would be activated by a single edit]]. - KoH
+
+Messed up. - KoH
+
+Extending to catch removal of {{:Project:Contributor copyright investigations/Darius Dhlomo/Notice}}. -EdoDodo
+-resolved, removed. --zz",Copyvio tag removal,0,13895,0,0,tag,0,default
+420,"user_age == 0 &
+edit_delta <= -3000 &
+page_namespace == 1 &
+!(user_name in removed_lines)",14882394,MusikAnimal,20181211033934,1,"*Testing, IPs should not be blanking talk pages
+*Setting size to 100 to include vandalism
+*Changing to edit delta and 100 --> 1000
+*Try making the num -ve + fix
+*Works, now adding actions
+*Change to allow throttle @ 1 per hour for vandalism assistance.
+--DQ
+
+allow IP users to remove their own comments --zzuuzz
+
+Change to more descriptive title. - KoH
+
+Optimize for conditions RF 20150725",Large removal of talk page content by IP,0,13874,0,0,"throttle,disallow",0,default
+345,"!""bot"" in user_groups & (
+ formatting := ""(Proxy-Connection: keep-alive|notranslate|myEventWatcherDiv|QuickiWiki Look Up|application/x-datavault|end_of_the_skype_highlighting|inlineAdmedialink|_clearly_component|ktg6us78hf8vdu7|xunlei_com_thunder_helper_plugin)"";
+ added_lines rlike formatting & (
+ !removed_lines rlike formatting
+ )
+)",14882394,MusikAnimal,20160614031816,1,"A weird error that happens ocasionally. Lets see how much this consumes. -- Tim
+Exclude bots, to make it possible for bots to archive. --X!
+Adding QuickiWiki -- Soap
+Merge in 313. - KoH
+The Skype bug is often referred to in discussions as ""begin_of_the_skype_highlighting."" Since it appears in pairs for the real bug, using ""end_of_the_skype_highlighting"" will hopefully reduce FP. - KoH
+Merged in 440: intextual.com markup -- Gogo Dodo
+Merged from 485. - KoH
+Added myEventWatcherDiv another in the same class of divs. Salix alba
+Simplify syntax - Salix alba 22 June 2013
+Add application/x-datavault - Salix alba 13 Aug 2013
+Bugzilla Bug 52327
+Added ""notranslate"" to trap added by google translate <span class=""notranslate"" onmouseover=""_tipon(this)"" onmouseout=""_tipoff()""> 25 Sept 2013 Salix alba
+Removed the removed line clause, not sure what purpose it serves. 25 Sept 2013 Salix alba
+Re added the removed lines, as it triggers when you make an edit to a corrupted page. Salix alba 3 Nov 2013
+
+Cleanup, make readable and optimize. --Reaper 2014-01-02
+Added xunlei_com_thunder_helper_plugin per https://bugzilla.wikimedia.org/show_bug.cgi?id=63121
+
+Improve conditions. Rename regex. RF 20150806",Extraneous formatting from browser extension,0,13832,0,0,"warn,tag",0,default
+733,"article_namespace == 2 & (
+ article_articleid == 0 & (
+ int(user_editcount) < 100 & (
+ basepagename := (article_text contains ""/"" ?
+ substr(article_text, 0, strpos(article_text, ""/"")) :
+ article_text);
+ basepagename != user_name
+ )
+ )
+)",7418060,The Earwig,20151102053740,1,Previously tested on Filter 1. Sometimes catches socking and other weirdness. - Earwig 2015-11-02,New user creating a page in someone else's userspace,0,13770,0,0,,0,default
+554,"page_namespace == 0 & (
+ top_100 := ""top100\w*\.blog|charly1300|mickeycharts|atrl.net\/forums|Hot100brasil\.com"";
+
+ added_lines irlike top_100 &
+ !(removed_lines irlike top_100)
+)",14882394,MusikAnimal,20181023194722,1,"log only to start
+
+adding chartsecuador.jimdo.com
+
+adding mickeycharts
+
+adding francemusiccharts
+
+*Waaay* too expensive. Disabled. --Reaper 2014-01-02
+
+Optimized, reenabled, monitoring changes in test mode -- Kww 2014-01-29
+
+""Warning: This filter was automatically disabled as a safety measure. It reached the limit of matching more than 5.00% of actions."" and many users (self included) noting database timeouts when saving articles. Disabling as unacceptable performance hit for now. -- DMacks 2014-01-29
+
+Repaired disastrous screwup. Reenabling for a few minutes. -Kww
+
+Restored actions. --Kww
+
+Excluded edits where regex matches removed lines per standard cliché. Added named variable to simplify. RF 20150806
+
+Use irlike rather than lcase. -DF
+
++Hot100brasil.com per [[Special:Permalink/783969945#.22hot100brasil.22.2F.22Billboard Brasil.22]] ~MA",top100 blog charts,0,13394,0,0,disallow,0,default
+630,,82835,Rich Farmbrough,20150725140936,1,,New users de-userfying pages,1,13025,0,0,tag,0,default
+28,"!(""autoconfirmed"" in user_groups) & !(""Anybot"" in article_recent_contributors) &
+(
+line1:=""^#\s*redirect\s*\[\["";
+lcase(new_wikitext) rlike line1) &
+((old_size > 500 & new_size < 100 &
+!(lcase(old_wikitext) rlike line1)) |
+(new_size < 150 & old_size < 150 & (edit_delta > 5 | edit_delta < -5) &
+(lcase(old_wikitext) rlike line1)))",1130897,Ruslik0,20100106173322,0,"use autofirmed, logic fixes -Prodego
+Filter keeps failing, disabling temporarily - Hersfold
+Ok, now it should only hit actual redirects.... - Hersfold
+And BEHOLD the power of regex. Thank you, Prodego, nixeagle, for helping with my regex illiteracy. - Hersfold
+Fixing so it only hits new redirects - Hersfold
+Blah, fixing again - Hersfold
+
+Disabling for now we are having performence issues
+Try turning the two around... apparently we evaluate right to left!
+
+***********************************************************
+DISABLED FOR PERFORMANCE REASONS
+
+Logic is LTR after all - trying to reword to improve run time, let's see what happens. I'll keep an eye on it. - Hersfold
+
+Merged with filter 35 - Ruslik
+
+Changed old_size to 200. - Ruslik
+Added a warning. - Ruslik
+Added ""old_size != new_size"" to prevent further incidents. - Ruslik
+Well, I increased old_size to 500. - Ruslik
+I added a condition that the size of redirect should change by at least 6 bytes. - Ruslik
+I also excluded edits that added a category to a redirect. - Ruslik
+Excluded ""{{R from"". - Ruslik
+Disabled warning. - Ruslik
+Enabled tagging instead. - Ruslik
+Exempting anybot created content. - Ruslik
+
+Simplified the code. - Ruslik
+
+Terrible run time + not catching much useful + filter is overwrought now = disabling. -Wknight94
+
+Marked as deleted. - Ruslik",New user redirecting an existing substantial page or changing a redirect,0,12264,0,1,,0,default
+366,"!(""confirmed"" in user_groups) &
+(article_namespace == 0) &
+(added_lines rlike ""[bcdfghjklmnpqrstvwxz]{7,}"") &
+!(removed_lines rlike ""[bcdfghjklmnpqrstvwxz]{7,}"") &
+!(added_lines rlike ""https?://[^ ]*?[bcdfghjklmnpqrstvwxz]{7,}"")",258000,King of Hearts,20110310111443,0,"Adding as log only, per request at [[WP:Edit filter/Requested]]. - EdoDodo
+
+Disabling, has been merged into filter 135. - EdoDodo
+
+Deleted. - KoH",Addition of seemingly random characters,0,12257,0,1,,0,default
+819,,502540,Xaosflux,20190104180937,0,,Derp vandal,1,12207,0,0,throttle,0,default
+837,"user_editcount < 50 &
+(
+ dabs:=""{{(disambig(uation)?|dab)((}})|\|)"";
+ lcase(removed_lines) rlike dabs &
+ !lcase(added_lines) rlike dabs
+)",461626,Od Mishehu,20170208212523,1,,Removal of disambiguation templates by new users,0,12174,0,0,,0,default
+102,,365454,Zzuuzz,20181128153750,1,,Abusive account names,1,11903,0,0,disallow,0,default
+532,"(article_namespace == 0) &
+(added_lines rlike ""\[\[(nostalgia|ten|test|aa|ab|ace|af|ak|als|am|an|ang|ar|arc|arz|as|ast|av|ay|az|ba|bar|bat-smg|bcl|be|be-x-old|bg|bh|bi|bjn|bm|bn|bo|bpy|br|bs|bug|bxr|ca|cbk-zam|cdo|ce|ceb|ch|cho|chr|chy|ckb|co|cr|crh|cs|csb|cu|cv|cy|da|de|diq|dsb|dv|dz|ee|el|eml|eo|es|et|eu|ext|fa|ff|fi|fiu-vro|fj|fo|fr|frp|frr|fur|fy|ga|gag|gan|gd|gl|glk|gn|got|gu|gv|ha|hak|haw|he|hi|hif|ho|hr|hsb|ht|hu|hy|hz|ia|id|ie|ig|ii|ik|ilo|io|is|it|iu|ja|jbo|jv|ka|kaa|kab|kbd|kg|ki|kj|kk|kl|km|kn|ko|koi|kr|krc|ks|ksh|ku|kv|kw|ky|la|lad|lb|lbe|lez|lg|li|lij|lmo|ln|lo|lt|ltg|lv|map-bms|mdf|mg|mh|mhr|mi|min|mk|ml|mn|mo|mr|mrj|ms|mt|mus|mwl|my|myv|mzn|na|nah|nap|nds|nds-nl|ne|new|ng|nl|nn|no|nov|nrm|nso|nv|ny|oc|om|or|os|pa|pag|pam|pap|pcd|pdc|pfl|pi|pih|pl|pms|pnb|pnt|ps|pt|qu|rm|rmy|rn|ro|roa-rup|roa-tara|ru|rue|rw|sa|sah|sc|scn|sco|sd|se|sg|sh|si|simple|sk|sl|sm|sn|so|sq|sr|srn|ss|st|stq|su|sv|sw|szl|ta|te|tet|tg|th|ti|tk|tl|tn|to|tpi|tr|ts|tt|tum|tw|ty|udm|ug|uk|ur|ve|vec|vep|vi|vls|vo|wa|war|wo|wuu|xal|xh|xmf|yi|yo|za|zea|zh|zh-classical|zh-min-nan|zh-yue|zu):"") &
+(count(removed_lines) == 0) &
+!(user_name == ""Cydebot"")",14882394,MusikAnimal,20160614033920,0,"Detects reverts of interwiki link removal -Addshore
+AF doesnt detect rollback so we will just look for addition -Addshore
+Exempt Cydebot - Legoktm
+Only detect mainspace - Addshore
+Optimize, check namespace first - Legoktm
+Add tag - Addshore
+
+Nobody is going to review 11,000 hits. Disabled. --Reaper 2013-03-03",Interwiki Addition,0,11857,0,1,tag,0,default
+559,,365454,Zzuuzz,20170514124407,1,,archive.is additions,1,11787,0,0,,0,default
+825,,14882394,MusikAnimal,20180424212713,0,,Descent category added,1,11749,0,0,,0,default
+77,,82835,Rich Farmbrough,20160818205501,0,,Various ASCII Vandals,1,11528,0,1,warn,0,default
+76,"(
+ (article_namespace == 0 & !(""sysop"" in user_groups)) |
+ !(""autoconfirmed"" in user_groups)
+) &
+(""@"" in (added_lines + "" "" + summary)) &
+((added_lines + "" "" + summary) rlike ""(?<![^\s:])[^\s\]\[\{\}\\\|/^`<>@:]+@\w+(?!\.htm)(?:\.\w+){0,2}\.[A-Za-z]{2}"") &
+!(
+ (removed_lines rlike ""(?<![^\s:])[^\s\]\[\{\}\\\|/^`<>@:]+@\w+(?!\.htm)(?:\.\w+){0,2}\.[A-Za-z]{2}"") |
+ ((added_lines + "" "" + summary) rlike ""@(?:[A-Za-z]+\.)?(wiki([mp]edia|books|species|source|versity|news)|wiktionary)"")
+)",5711305,Cenarium,20150212173255,0,"Catches email address added to page or edit summary.
+
+-Replaced with faster regex. ~4ms vs 40-60ms. OverlordQ
+
+Added escape for acceptable email address. --MacGyverMagic
+: I think we can safely regard any @wikimedia as probably okay. -DF
+
+:I disabled warn, the rule seems remarkably correct, but it will start catching some stuff which is not an email address, but still looks like it (http://a.b.c/something@blah.hmt is a valid URL, absolutely not an email address, e.g. another example can be some computer-address data). Furthermore, there is legit data that looks like an email address and there are legit places to add email addresses (userspace being one of them). Also, the brackets '(' and ')' don't do anything but catch the data contained in it. A better regex is '(?<![^\s:])[^\s\]\[\{\}\\\|^\/`<>@:]+@\w+(?!\.htm)(?:\.\w+){1,3}' .. but even that one that is NOT failsave (though I have until now only seen (!) one mistaken revert by XLinkBot on that rule). As a side note, this rule misses massive numbers of additions (there were 6 additions in the last hour in main, user, template and category space).
+
+Modifying based on talk page discussion. Increasing the capture area to !sysop to see what this hits. Log only.
+
+Added | ""bot"" in user_groups to exclude bot edits. - Ruslik0
+Added XLinkBot to exclude this bot (it reports what it reverts ..) - Beetstra
+
+Reducing the number of spaces checked. Performance. -DF
+
+As a result of the last changes the filter has become absolutely useless and should be disabled. - Ruslik
+
+Tagging with Tag:email address. These edits aren't usually wanted. --Drilnoth
+
+Very slow filter of questionable intent, adding email addresses isn't always bad. Disabling for now -Prodego
+
+Hence XLinkBot rule reenabled. Prodego, adding an email address to mainspace is hardly ever OK ..
+
+Marked as deleted. - KoH",Adding email address,0,11033,0,1,warn,0,default
+394,"(article_articleid == 0) & (article_namespace == 0) &
+(new_size < 70) & !(""autoconfirmed"" in user_groups)
+& !(""#redirect"" in lcase(new_wikitext))",258000,King of Hearts,20120808231420,0,"Copy of filter 98 with a much lower threshold (50 chars to start with) per request by John Vandenberg. Idea is to just tag on 98 but warn or prevent on this one. -28bytes
+
+Temporarily dropping all the exceptions to see how frequent they are. -28bytes
+
+Restored the redirect condition-Jayvdb
+
+Marked as deleted - KoH",Extremely short article creation,0,10996,0,1,,0,default
+409,"(article_namespace == 0) &
+(lcase(old_wikitext) rlike ""\[\[category:\s*living[ _]people|\{\{lifetime"") &
+lcase(added_lines) rlike ""dailymail.co.uk|daily mail""",258000,King of Hearts,20120808231558,0,"still under investigation by John Vandenberg, who is at the moment just identifying the range of uses of a single news source. see WT:BLP and user_talk:Jimbo Wales
+Anyone can take this over, but please dont add additional news sources unless you've worked out how to remove most false positives.
+
+No response to my queries on John's page, disabling. --Reaper
+
+Marked as deleted - KoH",news sources on BLPs,0,10880,0,1,,0,default
+773,,14882394,MusikAnimal,20181220031744,0,,TNT's test filter,1,9990,0,0,,0,default
+890,"action == 'createaccount' &
+!('override-antispoof' in user_rights) &
+(
+ lcase(accountname) rlike ""[bcdfghjklmnpqrstvwxz]{9}""
+)",76,The Anome,20181207113011,1,"Exploratory filter; looks for new accounts containing strings with NINE consecutive consonants. Just intended for logging at the moment, to see how common these names are, and to what extent it is a good detector of bad usernames.
+
+So far, it's looking pretty good, even at 8 characters. Upgrading threshold to 9 to make it even more selective.-- The Anome, 12 May 2018
+
+More investigation: now looks at only first edits for these accounts. -- The Anome, 18 May 2018
+
+Performance improvements -- checking user_editcount will cancel out more actions in this case, so it should come first; similarly reordering other conditions to cancel out more actions; user_editcount < 2 will also be true for blank or false values, so removing !user_editcount to save a condition, and using contains_any for checking multiple actions to save a condition ~MA
+
+Removed all the filtering on event type and edit count. This is fascinating: the lack of output from the previous suggests that people are creating these random-typing accounts, but never using them... -- The Anome, 19 May 2018
+
+Adding a dependency on wikitext, to see if that lets this filter see edits.
+
+Adding test to exclude highly repetitive usernames which would already have been caught by the repetition filter -- The Anome, 13 June 2018
+
+Added a few running-finger-down-the-keyboard patterns. -- The Anome, 25 October 2018
+Fixed implementation error which had the reverse effect of that intended above -- The Anome, 31 October 2018
+
+Added alphabetical-progression patterns. -- The Anome, 2 November 2018
+
+Backed off alphabet/keyboard progression patterns, following feedback. -- The Anome, 3 November 2018
+
+Removed filter that prevented overlap with repetition filter: won't actually increase blocking, just more reporting will be evident here. -- The Anome, 7 December 2018",Random typing in username,0,9932,0,0,"warn,disallow",0,default
+697,"article_namespace = 0 &
+(
+ user_editcount < 10 &
+ (
+ !(summary irlike ""undid revision"") &
+ (
+ edit_delta > 10000 &
+ (
+ !edit_diff contains ""wikitable""
+ )
+ )
+ )
+)",15991542,Samwalton9,20151230224636,0,"Testing if this is useful to monitor; may suggest a paid article, most I've seen are created in one go in an account's first edits. --Samwalton9, 13 June 2015
+
+This is useful, but I don't think anyone's tracking it so disabling for now. --Samwalton9, 30 Dec 2015",User making large contribution with first edits,0,9807,0,0,,0,default
+218,"(article_namespace == 0)
+& (added_lines rlike ""[,;: \|]\d{1,2}/\d{1,2}/\d{2,4}\b[^/]"")
+& !(removed_lines rlike ""[,;: \|]\d{1,2}/\d{1,2}/\d{2,4}\b[^/]"")",5711305,Cenarium,20150212173428,0,"Testing phase.
+Removed the
+!(""autoconfirmed"" in USER_GROUPS) &
+
+don't add tags for highly targeted filters or filters affecting autoconfirmed users please - Cen
+
+Disable for performance reasons. Feel free to re-enable if in use. - KoH
+
+Yes I am following this to clear up a lot of errors. Run-time should be very short. I would like to reintroduce tagging. 2009-09-02 RF
+Tagging on again 2009-10-15 RF
+
+None of these are actually being acted on and the filter is overwrought now. Disabling. -Wknight94
+
+Marked as deleted. - Ruslik",User adding xx/xx/xxxx probably a date,0,9802,0,1,,0,default
+483,,14882394,MusikAnimal,20160614033218,0,,Users creating own talk,1,9357,0,1,,0,default
+163,"!('autoconfirmed' in user_groups) &
+(new_size < 500) &
+(""#redirect"" in lcase(new_wikitext)) &
+(
+ (('class=""new""' in new_html) &
+ (count('<a', new_html) == 1))
+ |
+ ((strpos(lcase(added_lines), article_prefixedtext) - strpos(lcase(added_lines), ""#redirect"")) == 12)
+)",365454,Zzuuzz,20181104190423,0,"Per RAF.
+
+add tag ""unusual redirect"" - Cen
+
+Adding warn. - KoH
+
+Adding check for recursive redirect. --Reaper 2013-11-16
+
+Moderately expensive for little benefit. Disabled. --Reaper 2014-01-02",Redirect to non-existent page,0,9289,0,1,"warn,tag",0,default
+784,"!(""confirmed"" in user_groups) &
+(article_namespace == 0 | article_namespace == 10) & (
+ nope := ""h[au]r[au]mba?e\b"";
+
+ /** Allow [[Killing of Harambe]], etc. **/
+ !(article_text irlike nope) &
+
+ added_lines irlike nope &
+ !(removed_lines irlike nope)
+)",14882394,MusikAnimal,20170419165539,1,"Requested filter to catch and tag Harambe vandalism (Wikipedia:Edit_filter/Requested#Harambe_vandalism). Tested in /1 with no FPs. Marked to tag 'possible vandalism' and log --Samtar 02/08/16 08:37
+
+edit_delta to reduce condition count ~MA 2016.08.02
+
+Marking private for updates with view to possible disallow
+increase edit_delta to 300, missing some hits
+remove |#dicksoutforharambe
+remove tag, disallowing - checked for FPs, will monitor
+also check templatespace (10) per recent edits
+--Samtar 31/8/16
+
+Increasing edit_delta based on recent disruption ~MA 2016.08.02
+
+Odd false positive in log to [[User talk:Oshwah]] (wrong NS) by myself (user_groups?) - see EF Noticeboard --Samtar 02/09/2016
+
+fixed namespace check, temporarily suspending disallow to check. --zzuuzz
+
+disallowing post check --Samtar 2/9/16
+
++alternate spelling harambae --zz
+
+Upped edit_delta based on recent disruption --Samtar 16/9/16
+
+Allowing ""Harambee"" (2 e's at the end) by adding a ""\b"" at the end. --Od Mishehu",Harambe vandalism,0,9265,0,0,disallow,0,default
+735,"!""confirmed"" in user_groups &
+(
+ article_namespace == 0 &
+ (
+ added_lines irlike ""\|\s*owner\s*="" &
+ (
+ old_wikitext irlike ""((infobox )(nba team|mlb|american football team|basketball club|football club))|(nhl team)""
+ )
+ )
+)",365454,Zzuuzz,20170514124421,1,"Testing per request https://en.wikipedia.org/wiki/Wikipedia:Edit_filter/Requested#Changing_owner_field_in_infoboxes --Samwalton9, 24 Nov 2015
+
+Tagging as possible vandalism, edits not always inherently bad and FP rate a bit too high for me to be comfortable with disallow. --Samwalton9, 20 Dec 2015",Vandalising sport infobox,0,9005,0,0,tag,0,default
+531,"!(""bot"" in user_groups) &
+(removed_lines rlike ""\[\[(nostalgia|ten|test|aa|ab|ace|af|ak|als|am|an|ang|ar|arc|arz|as|ast|av|ay|az|ba|bar|bat-smg|bcl|be|be-x-old|bg|bh|bi|bjn|bm|bn|bo|bpy|br|bs|bug|bxr|ca|cbk-zam|cdo|ce|ceb|ch|cho|chr|chy|ckb|co|cr|crh|cs|csb|cu|cv|cy|da|de|diq|dsb|dv|dz|ee|el|eml|eo|es|et|eu|ext|fa|ff|fi|fiu-vro|fj|fo|fr|frp|frr|fur|fy|ga|gag|gan|gd|gl|glk|gn|got|gu|gv|ha|hak|haw|he|hi|hif|ho|hr|hsb|ht|hu|hy|hz|ia|id|ie|ig|ii|ik|ilo|io|is|it|iu|ja|jbo|jv|ka|kaa|kab|kbd|kg|ki|kj|kk|kl|km|kn|ko|koi|kr|krc|ks|ksh|ku|kv|kw|ky|la|lad|lb|lbe|lez|lg|li|lij|lmo|ln|lo|lt|ltg|lv|map-bms|mdf|mg|mh|mhr|mi|min|mk|ml|mn|mo|mr|mrj|ms|mt|mus|mwl|my|myv|mzn|na|nah|nap|nds|nds-nl|ne|new|ng|nl|nn|no|nov|nrm|nso|nv|ny|oc|om|or|os|pa|pag|pam|pap|pcd|pdc|pfl|pi|pih|pl|pms|pnb|pnt|ps|pt|qu|rm|rmy|rn|ro|roa-rup|roa-tara|ru|rue|rw|sa|sah|sc|scn|sco|sd|se|sg|sh|si|simple|sk|sl|sm|sn|so|sq|sr|srn|ss|st|stq|su|sv|sw|szl|ta|te|tet|tg|th|ti|tk|tl|tn|to|tpi|tr|ts|tt|tum|tw|ty|udm|ug|uk|ur|ve|vec|vep|vi|vls|vo|wa|war|wo|wuu|xal|xh|xmf|yi|yo|za|zea|zh|zh-classical|zh-min-nan|zh-yue|zu):"") &
+(count(added_lines) == 0) &
+(new_size != 0) &
+!(summary rlike ""(Advisor\.js)"") &
+!(new_wikitext rlike ""\[\[(nostalgia|ten|test|aa|ab|ace|af|ak|als|am|an|ang|ar|arc|arz|as|ast|av|ay|az|ba|bar|bat-smg|bcl|be|be-x-old|bg|bh|bi|bjn|bm|bn|bo|bpy|br|bs|bug|bxr|ca|cbk-zam|cdo|ce|ceb|ch|cho|chr|chy|ckb|co|cr|crh|cs|csb|cu|cv|cy|da|de|diq|dsb|dv|dz|ee|el|eml|eo|es|et|eu|ext|fa|ff|fi|fiu-vro|fj|fo|fr|frp|frr|fur|fy|ga|gag|gan|gd|gl|glk|gn|got|gu|gv|ha|hak|haw|he|hi|hif|ho|hr|hsb|ht|hu|hy|hz|ia|id|ie|ig|ii|ik|ilo|io|is|it|iu|ja|jbo|jv|ka|kaa|kab|kbd|kg|ki|kj|kk|kl|km|kn|ko|koi|kr|krc|ks|ksh|ku|kv|kw|ky|la|lad|lb|lbe|lez|lg|li|lij|lmo|ln|lo|lt|ltg|lv|map-bms|mdf|mg|mh|mhr|mi|min|mk|ml|mn|mo|mr|mrj|ms|mt|mus|mwl|my|myv|mzn|na|nah|nap|nds|nds-nl|ne|new|ng|nl|nn|no|nov|nrm|nso|nv|ny|oc|om|or|os|pa|pag|pam|pap|pcd|pdc|pfl|pi|pih|pl|pms|pnb|pnt|ps|pt|qu|rm|rmy|rn|ro|roa-rup|roa-tara|ru|rue|rw|sa|sah|sc|scn|sco|sd|se|sg|sh|si|simple|sk|sl|sm|sn|so|sq|sr|srn|ss|st|stq|su|sv|sw|szl|ta|te|tet|tg|th|ti|tk|tl|tn|to|tpi|tr|ts|tt|tum|tw|ty|udm|ug|uk|ur|ve|vec|vep|vi|vls|vo|wa|war|wo|wuu|xal|xh|xmf|yi|yo|za|zea|zh|zh-classical|zh-min-nan|zh-yue|zu):"")",14882394,MusikAnimal,20160614033912,0,"Match all interwiki removals - Addshore
+Do not match when links are added while also removed (i.e. altered) - Addshore
+Ignore recognised scripts and Bots- Addshore
+Ignore pages with aditions and blanked pages - Addshore
+Only match when ALL iw links have been removed from a page - Addshore
+
+Disabled. Nobody is going to review 9000 hits. --Reaper 2013-03-03",Interwiki Removal,0,8856,0,1,tag,0,default
+81,"article_namespace == 0
+& !(""sysop"" in user_groups)
+& new_wikitext rlike ""[Cc][Hh][Aa][Rr][Tt]"" &
+!(""BADCHARTS"" in added_lines) & lcase(added_lines) rlike ""united world chart|media traffic|ost top 20|hit40uk|latin areschart|odyssey albums|bulgarian?[^\w]*single|bra[sz]il(ian)?[^\w]*(hot[^\w]*100|single|album)|hot[^\w]*100[^\w]*bra[zs]il|lithuanian?[^\w]*(single|airplay)|myx[^\w]*(hit[^\w]*chart|daily[^\w]*top[^\w]*10|countdown)|(global|chile(an)?|argentinan?|lithuanian?)[^\w]*top[^\w]*40|poland[^\w]*(national[^\w]*)?top[^\w]*50|euro[^\w]*200\b|world[^\w]*(dance|trance|latin|jazz|soundtracks)|latvian?[^\w]*(singles|airplay)|(chile(an)?|columbian?)[^\w]*singles?[^\w]*chart|(mexic(o|an))[^\w]*(top[^\w]*)?100\b|australian?[^\w]*country[^\w]*tracks?""",3210516,Kww,20150625141029,0,"Requested filter for [[WP:BADCHARTS]], testing for load.
+
+I've completed a review of this and concluded that it generates too many false positives to justify using a warning; however, I will keep the log active so the music community can sort it by hand. -DF
+
+Sorry, disabling this one for now, it checks a large number of pages. If the pages are large, it may time out wiki.
+
+:Narrowing focus for fewer unnecessary checks. Re-enabling. I find it very unlikely that this would time out even against very large pages (which requires many seconds of runtime), but I'll listen if you can show me an example. -DF
+
+Missing a ) in regex, causing errors. Dont know why it saved in the first place.
+
+Disable, doesn't appear to be being used, and we are hitting the condition limit on 6% of edits, and this filter has a lot of checks. (undone by request) -Prodego
+
+NOTE: FILTER LOG BEING MONITORED (to keep me from identifying this as something to disable) -P
+
+*Reordering, checking for better performance. --NW
+**Never mind, worse that way. --NW
+
+Poor performance + false positives (many catches are bots) + filter is overwrought now = disabling. -Wknight94
+Re-enabling by request. -Wknight94
+*Hugely expensive filter, disabling due to condition limit. --NW 4/21
+
+Condensed all the conditions (except the early ones) into one long one. This should significantly help with processing. Re-enabling after optimization per request, log only. -- Shirik 24 Apr 2010
+
+Added check for bad words not in removed lines. Since the hits for the added condition are small this should be cheap and remove a lot of false positives. Rich Farmbrough, 21 September 2010
+Fixed own error. RF.
+
+Updated changes per Rich Farmbrough's suggestions on the Edit Filter talk page [http://en.wikipedia.org/w/index.php?title=Wikipedia_talk:Edit_filter&action=historysubmit&diff=388241629&oldid=388227774]
+
+Changed all + to *, put sys-op test first (could include bot too for more speed)
+
+Condition limit 7%, there are more important filters later on. Disabling temporarily. - KoH
+
+- Manually monitored, so false positives aren't particularly critical. Removed check designed to suppress them",Badcharts,0,8491,0,1,,0,default
+878,"user_editcount < 500 &
+article_namespace rlike ""^(0|118)$"" &
+(
+ templates := ""(?i)\{\{(Undisclosed paid|UDP\b|UPE\b|COI\b|Advert\b)"";
+ rcount(templates, added_lines) < rcount(templates, removed_lines)
+)",14882394,MusikAnimal,20180416160027,1,"Requested at WP:EFR
+
+Attempt to reduce condition count ~MA",New user removing COI template,0,8290,0,0,tag,0,default
+521,"!(""autoconfirmed"" in user_groups) &
+(new_wikitext rlike ""[A-Z]+"") & !(new_wikitext rlike ""[a-z]+"")",3855926,Legoktm,20140303202349,0,"Re-enabling, again --mlitn
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Feedback: All caps,0,8149,0,1,disallow,0,default
+478,,365454,Zzuuzz,20181213063717,1,,Talk page abuse,1,7862,0,0,disallow,0,default
+875,,502540,Xaosflux,20190104181008,0,,Derp II,1,7585,0,0,warn,0,default
+912,"!(""confirmed"" in user_groups) &
+page_namespace == 0 & (
+ string_text := ""fortnite"";
+
+ string_text in lcase(added_lines) &
+ !(string_text in lcase(removed_lines + page_title))
+)",19502780,Galobtter,20181230045936,1,"Create filter to log edits that add ""fortnite"" to pages, but where the page title does not contain that word within it. --Oshwah 4/10/2018
+
+Avoid edit_diff, and large variables like new and old_wikitext. added_lines and removed_lines are much cheaper. Also, irlike is case insensitive, but here we don't need regex anyway, so let's use ""in"", etc., along with lcase. Finally, try to cancel out more edits by restricting to certain user groups and namespaces. Here I assume we're not worried about more experienced users vandalizing in this way, and disruption seems to be limited to the mainspace ~MA
+
+Almost always vandalism; putting into warn that should hopefully stop some of it ~MA
+
+No reason for it to be private; tag edits that go through as ""possible vandalism"". -Galobtter
+
+Adding ""pewdiepie"" per [[Special:PermaLink/875689726#""PewDiePie vs T-series"" vandalism]] and temporary set to log-only -Galobtter
+Revert that - Galobtter","Possible ""fortnite"" vandalism",0,7505,0,0,"warn,tag",0,default
+643,,855858,Beetstra,20181127140355,1,,Persistent sockpuppetry,1,7109,0,0,throttle,0,default
+261,,14882394,MusikAnimal,20170928195215,0,,Page creation throttle for new users,1,6548,0,0,"throttle,disallow",0,default
+183,"(article_namespace = 0) &
+user_editcount < 100 &
+(added_lines rlike ""{{subst:AFC submission/(submit|submit\|type\=dab)}}"") &
+!(old_wikitext rlike ""{{subst:AFC submission/(submit|submit\|type\=dab)}}"")",5711305,Cenarium,20150212182934,0,"Catches articles for creation submissions in the wrong namespace. These are often speedily deleted, or append inappropriate text to existing pages. Currently in log only mode to test the average run time. - Someguy1221
+
+:I can't see this being particularly useful, is this really that much of a problem? -Prodego
+
+::It's five to ten pages a day that get deleted most of the time. I don't know what you consider useful. - Someguy1221
+
+As there have been no false postives, but still several users ignoring the warning, I have set the ""disallow"" option.
+
+Disabling. This is the source of the majority of the false positives we get, and really isn't accomplishing much except discouraging new users. -Wknight94
+:Enabled as tagging only. - Ruslik
+::Why do you call them false positives? This filter seemed to be working very well for us. MSGJ
+:::Disable. Including the template is a minor issue, and this is blocking good articles from being created. -Prodego
+
+Re-enabling as warn-only. All edits caught by this filter are necessarily mistakes, and the editors should be informed. - Someguy1221
+
+Added edit count condition and replaced new_wikitext with added_lines (same results here with less cost). -Sole Soul
+
+Disabling. People should just move the submissions to the correct location for AFC submissions. With the template, it isn't like they'll be getting missed. Also, this is expensive for some reason. --Reaper 2012-08-17",AFC submissions in wrong namespace,0,6545,0,0,warn,0,default
+473,"!(""autoconfirmed"" in user_groups)
+&(rmwhitespace(new_wikitext) rlike ""([^_:.*'|=}{0 -]{1,9})\1{7}""|
+new_wikitext rlike ""[bcdfghjklmnpqrstvwxz]{9,}"")
+& !(new_wikitext rlike ""https?:\/\/\S*([^_:*'|=}{-]{1,9})\1{7}|https?:\/\/\S*[bcdfghjklmnpqrstvwxz]{7,}|(^|\n)[|!]"")
+& !(lcase(new_wikitext) rlike ""number|spell|math|string|<br\b"")",3855926,Legoktm,20140303202257,0,"Stripped-down version of filter #135, appropriate for AFTv5 comments. Logging only for now. --rsterbin
+
+Set auto-flag. --rsterbin
+
+adding . to allowed repeated text
+
+Merged to 460. --Reaper 2012-08-20
+
+This filter is no longer part of 460; re-enabling. --mlitn
+
+Updated to match improvements in filter #135 --mlitn
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Feedback: Repeating characters,0,6369,0,1,disallow,0,default
+410,"(article_namespace == 0) &
+(lcase(old_wikitext) rlike ""\[\[category:\s*living[ _]people|\{\{lifetime"") &
+""blog"" in lcase(added_lines) &
+!(""blog"" in lcase(removed_lines))",258000,King of Hearts,20120808231603,0,"Temporarily disabled, using 513 conditions, needs to be made more efficient.
+:Reverting myself until I can talk it over, as both this and 409 seem to be using conditions heavily.
+
+No response to my inquiries on John's page, disabling. --Reaper
+
+Marked as deleted - KoH",blog added to BLPs,0,6285,0,1,,0,default
+905,"""bot"" in user_groups & (
+ lcase(summary) contains '[[user:') & (
+ user_name != ""SineBot"")",14882394,MusikAnimal,20180415235317,0,"Investigation for [[phab:T32750]] / [[phab:T188960]]
+
+Exempt SineBot due to [[MediaWiki:Echo-blacklist]]
+
+groups not rights, was flagging sysops with markBOTedits
+
+-disabled 20180307, large enough sample gathered - Xaosflux
+
+Deleting (just removes it from the default list at Special:AbuseFilter). Guessing we won't need it again ~MA",bots that may ping users,0,6267,0,1,,0,default
+313,"!(""bot"" in user_groups) & (""begin_of_the_skype_highlighting"" in added_lines) & !(contains_any (article_articleid, ""26813105"", ""26204397""))",5711305,Cenarium,20150212173457,0,"per ef/r -nakon
+adding warning -nakon
+sometimes people will make good-edits to paragraphs with this in them, I suggest adding a removed_lines counter-check because sometimes edits will get through this filter if the condition check maxes out, which would make the paragraph uneditable. -- Soap
+Meh, it should be easy for them to remove the text. --Stifle
+
+
+-acting oddly -P
+--Reenable /w confirmed check
+excluding bots so that page archives wont have problems -- Soap
+-Warn and disallow, this is too big a problem to allow. -P
+Turn off disallow; these types of edits are no different from the ""test type edits"" of #18. They could be a potential contributor of substantial content who are unable or too intimidated to turn off the Skype feature. Disallow is intended to prevent vandalism and LTA. Introduce tagging. - KoH
+Merged into 345. - KoH
+
+Marked as deleted - KoH",Skype Toolbar Formatting,0,6259,0,1,warn,0,default
+425,,258000,King of Hearts,20170111031407,1,,Magic/astrology spambots,1,6209,0,0,,0,default
+796,,365454,Zzuuzz,20190103105102,1,,Possible Ref Desk disruption,1,6029,0,0,"throttle,disallow",0,default
+97,"/* Filter 97 - Generated: 2009-03-30 09:39:11 UTC */
+!(""autoconfirmed"" in USER_GROUPS)
+& (edit_delta > 5000)
+& (lcase(added_lines) rlike ""\b(?<!it)(is|\'s|are|\'re|u\s*r\b)\s+(a|an|)\s*(fuck(ing|)|(u|ü)ber|ultra|very|)[ -]*((ass|arse)(hole|)\b|bastard|cock(sucker|s|)\b|cunt|d(1|i)ck|douche|fag|ghey|loser|kike|(mother|)fuck(er|face)|nigg(er|a)|pa?edo(phile|)|prick|(re|fuck)tard|shit|slut|tosser|twat|wanker|whore|bitch|cabr(ó|o)n|culo|dick|gay|hoe?\b|idiot|moron|pendejo|penis\b|puta|puto)"")
+& !(lcase(old_wikitext) rlike ""\b(?<!it)(is|\'s|are|\'re|u\s*r\b)\s+(a|an|)\s*(fuck(ing|)|(u|ü)ber|ultra|very|)[ -]*((ass|arse)(hole|)\b|bastard|cock(sucker|s|)\b|cunt|d(1|i)ck|douche|fag|ghey|loser|kike|(mother|)fuck(er|face)|nigg(er|a)|pa?edo(phile|)|prick|(re|fuck)tard|shit|slut|tosser|twat|wanker|whore|bitch|cabr(ó|o)n|culo|dick|gay|hoe?\b|idiot|moron|pendejo|penis\b|puta|puto)"")",1130897,Ruslik0,20090807112403,0,"Copy of filter 9 for new users that warns and tags. (testing on non-zero namespaces, add the namespace check back if this goes horribly wrong) -BJ
+
+Disable tagging for now, some magic needs to be worked out between filter 9 and 97 before it gets reenabled. -BJ
+
+Added (edit_delta > 5000) to exclude very large additions, which are most likely reversions of talk page blankings. --Conti
+
+Disabled (merged with 9). Ruslik
+Marked as deleted. - Ruslik",Personal attacks by new user,0,5973,0,1,,0,default
+869,"article_namespace == 0 &
+added_lines irlike ""\bdailymail\.co\.uk"" &
+!(""bot"" in user_groups) &
+!(removed_lines irlike ""\bdailymail\b.co\b.uk"") &
+!(summary irlike ""^(Revert|rv|Undid)"")",14882394,MusikAnimal,20180828225237,1,"New filter, discussion at https://en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard&oldid=794430458#Daily_Mail_redux
+
+Ritchie, you realize user age is measured in seconds, right? ~ Rob
+
+Yes, it's a straight copy of Filter 126 for YouTube - why it checks for user age under 10 minutes, I don't know. That's one reason I didn't turn it on and invited other admins to comment, in case there was something obvious I missed. - Ritchie333
+
+Not much point checking under 10 minutes - removed. --zz
+
+No need to hide the filter - it's not like WP:BEANS is relevant. Per AN discussion, trap for all users but not bots - Ritchie333
+
+Excluded rollbacks and reverts (eg. of page blanking) which aren't the intended targets and will only be annoying to people who aren't actually adding anything. Enabled trial run. --zz. 10 Aug 2017
+
+Turning filter on - I'm getting fed up of reverting gossip cited to The Sun on BLPs - (will get consensus first at noticeboard) Ritchie333 21 Sep 2017
+
+""The Sun"" and ""Dailystar"" moved to 899. See [[Special:Permalink/820423099#Enabling warnings or tags for Filter 869?]] ~MA
+
+new_wikitext is the big variable, moving it further down the chain in hopes this will speed things up ~MA
+
+Check all of mainspace (not just BLPs) per [[Special:Permalink/841151393#Set filter 869 to warn]] ~MA","Adding ""Daily Mail"" to articles",0,5855,0,0,warn,0,default
+294,,14882394,MusikAnimal,20150818185048,1,,Personal attacks,1,5395,0,0,disallow,0,default
+702,"titlereadmore:=""[^\?\&]title\s*=\s*[^\|\}\]]*?read more"";
+
+added_lines irlike titlereadmore &
+!(removed_lines irlike titlereadmore) &
+!(""bot"" in user_groups)",14882394,MusikAnimal,20171210235420,1,"Looks for clipboard hijacking issues. These are usually caused when someone copy-pastes a cited page's title, and the page uses code that modifies the copied test to include promotional link-back material. They frequently cause citation errors, and either way the added text is undesirable.
+
+* Initial testing to collect examples and false positives. -Nihiltres
+* Added test for text already present, and put regex in a variable. -Nihiltres
+* Using new_wikitext and old_wikitext to avoid some issues; added_lines doesn't seem to cut it. -Nihiltres
+* Added closing bracket to excluded class to avoid catching title= in URLs, and tentatively enabled. -Nihiltres
+* Added opening check for characters not ""?"" or ""&"" to avoid URL strings. -Nihiltres
+
+-Exempt bots 20170401 -Xaosflux
+
+Use added_lines/removed_lines instead of new_wikitext/old_wikitext to improve performance. Here usage of these variables effectively do the same thing (detecting text added that wasn't already there), so we'll use the smaller one. Also putting the bot check as the last condition since it is the least likely condition to evaluate to false ~MA",Warning against clipboard hijacking,0,5302,0,0,warn,0,default
+152,"(article_namespace == 0) &
+(user_editcount < 100) &
+(lcase(added_links) rlike ""ref(id|er|erer|errer)?="")",451766,Prodego,20090928230917,0,"WP:RAF. Create a log of external links with referal id tags in them.
+
+Disable, appears to be inactive (log only filter). If you are using this filter, please let me know, and I'll reenable it -Prodego",External links with referal tags,0,5148,0,1,,0,default
+139,,14882394,MusikAnimal,20181023224247,1,,Fixed position vandalism,1,5135,0,0,disallow,0,default
+463,,3855926,Legoktm,20140303202236,0,,Feedback: Adding email addresses,1,4965,0,1,disallow,0,default
+632,"new_size == 0 &
+(
+ edit_delta == 0 &
+ (
+ article_namespace == 0 &
+ action == 'edit'
+ )
+)",82835,Rich Farmbrough,20150714131905,1,"Filter to tag new blank articles, they are regularly popping up at CSD this will hopefully catch any we're missing. I haven't put a rate limit on this but we can if it becomes a problem in the future. -Callanecc 2014-09-01
+
+disabling to bring down the condition limit --zzuuzz
+restored, optimised --z
+Restoring tag - not much use otherwise. Not sure this is a useful filter. RF 20150714",Creating blank pages,0,4839,0,0,tag,0,default
+874,,3174456,Oshwah,20181219190423,1,,Long term abuse username / impersonation creations,1,4745,0,0,disallow,0,default
+894,"page_namespace rlike ""^(0|118)$"" & (
+ contains_any(added_lines,
+ ""AuthorHouse "",
+ ""Author House "",
+ ""Trafford Publishing"",
+ ""iUniverse"",
+ ""ublisher=Lulu.com"",
+ ""ublisher = Lulu.com"",
+ ""Xlibris""
+ ) &
+ !contains_any(removed_lines,
+ ""AuthorHouse "",
+ ""Author House "",
+ ""Trafford Publishing"",
+ ""iUniverse"",
+ ""ublisher=Lulu.com"",
+ ""ublisher = Lulu.com"",
+ ""Xlibris""
+ )
+) &
+!(""bot"" in user_groups) &
+!(""AFCH"" in summary)",14882394,MusikAnimal,20180913023553,1,"Moving here from 861. -Crow 12/23/17
+
+Changed the warning message from abusefilter-warning to abusefilter-warning-selfpublished -JJE 2 January 2018
+Exclude Bots via usergroup check - C 7Jan18
+
+!(""bot"" in user_groups) is most likely to evaluate to true, so putting it as the last condition in hopes to reduce overall condition count ~MA",Possible Self-Published Sources,0,4625,0,0,warn,0,default
+887,"action == 'createaccount' &
+!('override-antispoof' in user_rights) &
+(
+ lcase(accountname) rlike ""(...).*\1.*\1.*\1.*\1"" |
+ lcase(accountname) rlike ""(....).*\1.*\1.*\1"" |
+ lcase(accountname) rlike ""(..)\1\1\1\1"" |
+ lcase(accountname) rlike ""(...)\1\1\1"" |
+ lcase(accountname) rlike ""(....)\1\1""
+)",76,The Anome,20181105103817,1,"Checking for excessive internal repetition of _any_ three-character string for now, to catch usernames like those checked for in filter 886. This is a common feature of some types of long-term username abuse.
+
+Add `!('override-antispoof' in user_rights)` so this can be bypassed if and when needed (ACC concern?) --TNT 14th Nov 2017
+
+After yet more run-time, this seems to be doing well at catching LTA/potentially disruptive usernames, with no false positives so far. I think we can probably leave this to run indefinitely without any further problems. -- The Anome
+
+The LTA seems to have gone away for now, but this filter still seems to be doing a great job of catching potentially disruptive usernames with essentially no false-positives, so I'm keeping it enabled. -- The Anome, 26 November 2017
+
+Now does both four repetitions of three and three repetitions of four. -- The Anome, 1 March 2018
+
+Re discussion on [[Wikipedia talk:Edit filter]], now triggers on four repetitions of four, or five repetitions of three, OR five _successive_ repetitions of a character pair (10 characters of repetition), thus detecting, for example, ""aaaaaaaaaa"" or ""ababababab"". It also now uses [[MediaWiki:Abusefilter-disallowed-repetitious-username]] as warning message. -- The Anome, 3 April 2018
+
+Getting very slightly more aggressive by also adding four _successive_ repetitions of a character triple, (12 characters of repetition, eg. ""blablablabla"") and three _successive_ repetitions of four (12 characters of repetition, eg ""asdfasdfasdf"") This should catch more valid cases, but I believe should not catch any of the false positives discussed earlier. -- The Anome, 8 May 2018
+
+See also the experimental filter 890, which attempts to spot nonsensical usernames which are not caught by this filter. -- The Anome, 22 June 2018",Excessive repetition in usernames,0,4589,0,0,"warn,disallow",0,default
+895,,365454,Zzuuzz,20180927230229,0,,Possible spambot username,1,4577,0,0,,0,default
+5,"action == ""move"" &
+user_name == moved_from_title &
+!(""/"" in moved_to_title) & (
+ (moved_from_namespace == 2 & moved_to_namespace == 2) |
+ (moved_from_namespace == 3 & moved_to_namespace == 1)
+)",14882394,MusikAnimal,20181018194804,1,"Shamelessly stolen from test wiki, set to flag only at the moment. A warning needs to be written before blocking is enabled.
+
+Optimizing - Hersfold
+
+Merged with filter 6 - Ruslik0
+Actually to ""article talk space"". - Ruslik
+Switched to warning. - Ruslik
+Added a tag. - Ruslik
+Removed parentheses. - Ruslik
+Optimized code. - Ruslik
+
+Improve layout and reduce condition count. -DF
+
+remove uneeded ""sysop"" in user_groups check (highly unlikely to occur) and ""/"" in moved_from_text check since usernames can't contain ""/"". -Cen 2/15",User self-renaming or moving user talk pages into article talk space,0,4558,0,0,"warn,tag",0,default
+524,"(""bot"" in user_groups) &
+(summary rlike ""Robot: (Removing|Adding|Modifying) \[\["")",14882394,MusikAnimal,20160614033823,0,"Log only, requested by MBisanz in #wikipedia-bag. -Legoktm
+Disabled temporarily because of MrZ-bot -Legoktm
+Re-enabling, Wikidata is enabled. There are some legit bots still, so will not disallow. -Legoktm
+Restrict to mainspace for now -Addshore, optimized by Legoktm
+Trying again - Legoktm
+Disabling, condition limit too eratic. -Legoktm
+
+Re-enabled. --Reaper 2013-02-15
+Remove namespace restriction as pybots seem to be removing in all namespaces in error. -Addshore
+Disabled, all bad interwiki bots are long gone - addshore",Interwiki bot,0,4502,0,1,,0,default
+435,"!""confirmed"" in user_groups
+& added_lines rlike ""\{\{(p|P)(p|P)\-""
+& !(removed_lines rlike ""\{\{(p|P)(p|P)\-"")",10639536,Reaper Eternal,20120906154650,0,"Per request by jcgoble3. Many of those are good faith users who think that adding the template will protect the page. Log only. -Sole Soul
+
+Deleted. There's no real reason to block misguided newbie edits that have no real effect on the page. A bot removes them anyway. --Reaper 2012-09-06",Non-confirmed user adding protection template to a page,0,4380,0,1,warn,0,default
+789,,20800274,BethNaught,20180412180509,0,,BethNaught's test filter,1,4375,0,0,,0,default
+464,,14882394,MusikAnimal,20160614010306,1,,Possible open proxy,1,4290,0,0,warn,0,default
+68,,14882394,MusikAnimal,20181023224224,1,,Pagemove throttle for new users,1,3905,0,0,"throttle,disallow",0,default
+238,"(article_articleid == 0) &
+(
+(user_editcount < 50)
+& (new_size >= 150)
+& (article_namespace == 0)
+& !(lcase(article_text) regex ""(list|\w+\sin\s\w+|\(|\,)"")
+& !(lcase(new_wikitext) regex (""((on|(\Q""+
+str_replace(lcase(article_text), "" "", ""\E|\Q"")
++""\E|pagename)[[:alpha:]\.]*[^\.]*((\w\s?(<ref>[^<]*</ref>[^<]*)?\s?){0,5}(a|an|the))))|((#redirect|surname|\s*\{\{[^}]*((info|taxo)box|construction)))""))
+)",1130897,Ruslik0,20100217195031,0,"This filter looks for a sentence of the form (""[title] is a ..."") and variations thereof.
+It tries to exclude redirects, lists, disambiguation pages, and surnames.
+Many new articles without a topic sentence turn out to be vandalism or spam.
+Still making sure it works correctly and is needed.
+
+Add ""on"" to not filter articles depicting events ""On Jan 1. 2000, ...""
+
+this should be merged with filter 96 --zzuuzz
+
+Z, I don't think so. This filter has pretty intricate syntax; to merge it would make it even more incomprehensible. Also, no need to mark private. - KoH
+
+rearranged to avoid use of set_var since I couldn't get that function to work in testing, just a hunch to try and fix false positives - Evil saltine
+
+exclude new articles that consist of nothing but an infobox - this is rarely vandalism - Evil saltine
+
+Disambiguation = may refer to. - KoH
+Catch only users with less than 50 edits. - KoH
+{{underconstruction}}/{{construction}}. - KoH
+Any form of refer to is OK. - KoH
+
+Exclude article titles of the form ""a in b"", for example ""Passenger vehicles in the United States"". - ES
+Allow disambiguation with colon at end of line - ES
+
+Better new article check. - KoH
+Short circuit logic. - KoH
+Exclude articles with either open paren or comma in title (faster than stripping them) - ES
+Exclude articles already covered by filter 98 ""Very short new article"".
+
+add tag ""new article with no mention of title"", also used by 96 - Cen
+
+add ""[[:alpha:]\.]*"" to allow for domain name in title
+
+disabling this filter, it doesn't catch that much and consumes more than its share of conditions. - Evil saltine
+Marked as deleted. - Ruslik",New article without normal opening sentence,0,3857,0,1,,0,default
+573,"article_namespace == 0
+& ( count( ""\n\n\n"", new_wikitext ) > count( ""\n\n\n"", old_wikitext ) )",14882394,MusikAnimal,20160614034544,0,"Looks for multiple blank lines. Appears to happen more often with VisualEditor.
+
+Note: Can't use ""added_lines/removed_lines"" because separate sections get merged with newlines, leading to false positives.
+
+Disabled. 3700 hits in a day is pointless. --Reaper 2013-07-18",Multiple blank lines,0,3718,0,1,,0,default
+497,"!(""autoconfirmed"" in user_groups) &
+(lcase(new_wikitext) rlike ""\bsucks?\b|\btit(tie)?s\b|\bwank|whore|\b(yo)?ur (m[ou]m|mother)"")",8737015,Mlitn,20130108151106,0,"Spun of filter 460 into several smaller filters, this being one of them. -mlitn
+
+Re-enabling this filter, now that we have deployed a fix to prevent from being disabled after only a few posts. Hopefully it will work better now. -- Fabrice Florin
+
+Spun of part of this one to filter 502. -mlitn
+
+Merged back into 460. --mlitn",Feedback: Common Vandalism 5,0,3660,0,1,disallow,0,feedback
+17,,365454,Zzuuzz,20170509184817,0,,Prolific socker II,1,3563,0,1,tag,0,default
+670,"!(""confirmed"" in user_groups)
+& (removed_lines rlike ""(<ref>|</ref>)"")
+&!(added_lines rlike ""(<ref>|</ref>)"")",15991542,Samwalton9,20150407175738,0,"Per request. Log only for now. --Samwalton9, 14 March 2015
+
+Disabling, enough data for analysing filter's worth. --Samwalton9, 17 March 2015",New user removing references,0,3514,0,1,,0,default
+860,"!(""confirmed"" in user_groups) &
+(page_namespace == 0 | page_id == 1299860) & (
+ match_words := ""RYANROS|BRENDONURIE|RYDENISREAL|BRENDONANDRYAN|RYANANDBRENDAN|RYANWASKNELINGIN|WHENRYANHESIT"";
+
+ norm(added_lines) rlike match_words &
+ !(norm(removed_lines) irlike match_words) &
+ !(old_wikitext contains ""Panic! at the Disco"")
+)",14882394,MusikAnimal,20181112215348,1,"Persistent vandalism targeted against many different article by IP's and newly registered VOA's. Set to disallow 2017-06-18T14:15 following monitoring period. Warning-only has not sufficiently dissuaded vandals. -Xaosflux
+
+-Pattern updated for CamelCase - Xaos
+
+* Adding ""Brendon Urie"" to edit filter, as these both involve the same mass attack and are part of this type of vandalism. Considering adding ""Ryden"" as well, but I'm afraid that might generate false positives. I'll consider it. -Oshwah
+
+Performance tweaks / cleanup. Also remove warning since this is disallow (shouldn't tell them they can hit Save again) ~MA
+
+:Renabled warn, due to high volume we are identifying VOA accounts with this, if they stop after a single warning they are getting a pass-see EFN discussion - X
+::Changing back to disallow only, calmed down a little bit -X
+
+-Updated pattern for repeated letters 05JUL2017 - X
+
+There's some social media interest in this filter/vandalism, so given DatBot is now reporting it to AIV I've changed the name to something a tiny bit less obvious --TNT 6/7/17
+
+Add a string that's a hashtag for this, that's been added to Ryden and others. -Crow 8/2/17
+
+Temporarily also checking [[Talk:Cheez Whiz]] ~MA
+
+Doesn't need to be private ~MA
+
+Check for ""Panic!"" (Brendon Urie is a member) in old_wikitext per [[Special:Permalink/868264437#202.80.213.225]] ~MA",Ryan Ross vandalism,0,3451,0,0,disallow,0,default
+105,"(article_namespace == 0) &
+(contains_any(lcase(new_wikitext),""album"",""discography"")) &
+(
+ (lcase(added_lines) rlike ""next album\s*=[^\w\n]*(title )?(\btba|to be announced|([0-9]+th|1st|2nd|3rd) (studio )?album)"") |
+ (lcase(added_lines) rlike ""20[0-9]{2}[^\w\n]*(title )?(\btba|to be announced|([0-9]+th|1st|2nd|3rd) (studio )?album)"") |
+ (lcase(added_lines) rlike ""(title )?(\btba|to be announced|([0-9]+th|1st|2nd|3rd) (studio )?album)[^\w\n]*20[0-9]{2}"")
+)",1130897,Ruslik0,20090928191623,0,"(WP:RAF) Detect the addition of hypothetical future album releases that usually violate WP:CRYSTAL and/or WP:V
+
+Placing on warn. -- Stifle
+
+Removed sysop-line. No reason to exclude admins here. --Conti
+
+Also, is this filter necessary? It seems to warn everyone who adds information about a new album, which seems overly broad and [[WP:BITE]]y. --Conti
+
+Action to warn removed. That's a content issue, prone to false positives and way too biting. - Cen
+
+Disable, appears to be inactive (log only filter). If you are using this filter, please let me know, and I'll reenable it -Prodego
+
+Marked as deleted. - Ruslik",Hypothetical album releases,0,3379,0,1,,0,default
+494,"!(""autoconfirmed"" in user_groups) &
+(lcase(new_wikitext) rlike ""\bdick(head)?s?\b|\bdildo|douche|fag(g|\b)|\bfapp?(ing|ed|s)\b|fu+c+k|\bfuk you"")",8737015,Mlitn,20130108151035,0,"Spun of filter 460 into several smaller filters, this being one of them. -mlitn
+
+Re-enabling this filter, now that we have deployed a fix to prevent from being disabled after only a few posts. Hopefully it will work better now. -- Fabrice Florin
+
+Merged back into 460. --mlitn",Feedback: Common Vandalism 2,0,3325,0,1,disallow,0,feedback
+502,"!(""autoconfirmed"" in user_groups) &
+(lcase(new_wikitext) rlike ""(\s+|^)(?![\S]*(https?|ftp)://)[a-zA-Z0-9]{30,}"")",10639536,Reaper Eternal,20130424011002,0,"Spun of filter 497 into 2 smaller filters, this being one of them (and the original being the other). -mlitn
+
+The filter has tagged http://en.wikipedia.org/wiki/Special:AbuseFilter/examine/log/7627528 because the 30+ char string didn't start with ""http"" but with ""(http"" (notice the parentheses); updated the filter to ust check for http:// occurrences inside the 30+ char string and not expect it to be at the very beginning. -mlitn
+
+Made filter name more descriptive (if matched, filter name will be displayed to show what's wrong with the feedback) --mlitn
+
+Updated filter to:
+* start detecting extremely long words at start of contribution as well as after whitespace
+* only flag extremely long alphanumeric entries (it was long,pieces,of,text,like,this,where,there,is,no,whitespace,but,was,well-intended,and,useful)
+-- mlitn
+
+Deleted. AFTv5 is gone. --Reaper 2013-04-24",Feedback: Extremely long words,0,3280,0,1,disallow,0,feedback
+777,"user_age == 0 &
+article_namespace == 0 &
+edit_delta < 100 &
+added_lines irlike ""((end|start) date|last_aired).*?present"" &
+removed_lines irlike ""(?!.*?present)((end|start) date\|\d{4}\|\d+\|\d+}}|last_aired)""",14882394,MusikAnimal,20171210164915,1,"Filter request (Wikipedia:Edit_filter/Requested#Date-change_vandalism) to prevent/tag rapid date changes by non-confirmed users. Testing --Samtar 06/07/16
+
+Marking public due to nature of regex - it's unlikely to be bypassed and is already public --Samtar 15:30
+
+Disabling! This needs tweaking (93 hits in minutes) --Samtar
+
+Added suggested rate limit, enabling for 2 mins --Samtar 08/07/16 13:24
+
+No masses of FPs, will leave enabled for a couple of hours --Samtar 08/08/16 13:30
+
+False positives starting again, disabled --Samtar 13:35
+
+Try again with corrections and better performance, without rate limit for testing ~MA 2016.07.11
+
+Disabling for now. Not very useful, or rather mostly picking up good edits. I've got better ideas for a more general rapid infobox changes, will revisit soon ~MA 2016.07.25
+
+Repurposed for a vandal that replaces end dates with ""present"" ~MA",End date present vandal,0,3149,0,0,,0,default
+579,,7586,Cyp,20180923065811,1,,Possible sockpuppet account creations,1,3112,0,0,,0,default
+850,"action == ""move"" &
+user_editcount < 100 &
+moved_to_namespace rlike ""^(4|5)$"" &
+!moved_from_namespace rlike ""^(4|5)$""",14882394,MusikAnimal,20170420153045,1,"Per [[Special:Permalink/776226750#New users in wrong namespace]] ~MA
+
+Show warning ~MA 2017.04.20",New user moving page to project space,0,3112,0,0,warn,0,default
+322,,301395,NawlinWiki,20120203223448,0,,Null edits by new editors,1,3091,0,1,throttle,0,default
+289,"article_articleid == 0 & article_namespace == 0 &
+!(""autoconfirmed"" in user_groups) &
+article_text rlike ""(?:^How\s|(^What|^Which)\s+(?:is|are)|^Where|^Why|^When|\?$)""",5711305,Cenarium,20150212173453,0,"Filter for request at WP:EF/R to detect new pages that are in the form of a question or how-to guide. Currently log-only for verification and performance-checking. - Shirik 6 Feb 2010
+
+OK. Creating a friendly warning and setting to warn & tag. -- Shirik 10 Feb 2010
+Disabled temporarily simply for performance testing -- Shirik 21 Feb 2010
+Fix minor mistake, but leaving disabled -- Shirik 24 Feb 2010
+Re-enabled, performance concerns addressed -- Shirik 11 Mar 2010
+Added 'Which'. - Ruslik
+mainspace only -- Soap
+Prevent triggering on articles about indiividuals named ""Howard"" - FT2
+
+Disabling due to condition limit. - Feezo
+
+Marked as deleted - KoH",New user creating interrogative pages,0,3051,0,1,warn,0,default
+268,,5711305,Cenarium,20150212173449,0,,Red link vandalism,1,2964,0,1,warn,0,default
+264,,14882394,MusikAnimal,20170511025503,1,,Specific-page vandalism,1,2919,0,0,disallow,0,default
+52,,365454,Zzuuzz,20181006230705,1,,Edit summary vandalism II,1,2890,0,0,disallow,0,default
+590,"!(""bot"" in user_groups) &
+(""�"" in new_wikitext) &
+!(""�"" in old_wikitext)",15991542,Samwalton9,20170414185610,0,"Ignore bots -Legoktm Oct 12 2013
+
+Disabled for now. --Samwalton9, 7 Feb 2015",Unicode replacement characters,0,2850,0,0,,0,default
+176,"article_namespace == 0 &
+('[[user:' in lcase(added_lines) | '[[user talk:' in lcase(added_lines)) &
+!('{{prod' in lcase(added_lines))",451766,Prodego,20090928230931,0,"Per [[WP:CROSS]] and [[WP:SELF]], prevent article edits adding [[user:... or [[user talk:*..., unless {{prod}} is being added. This also guards against signatures in articles. —EncMstr
+
+todo:
+* Add exclusion for <!-- I have a comment, blah blah blah [[user:whatever]] -->
+* Do a better job of checking {{prod}} text contains ""[[user( talk}?:"" for exclusion
+* Consider accepting the curious case of [[Criticism of Wikipedia]] linking to users
+
+2009-08-19: disabling until I can spend some time completing this. —EncMstr",user space link added in article space,0,2820,0,1,,0,default
+721,,82835,Rich Farmbrough,20171002133237,1,,Armenian football vandal or similar,1,2770,0,0,disallow,0,default
+593,"!('confirmed' in user_groups) &
+('archive.org' in added_links) &
+!('archive.org' in removed_links)",10639536,Reaper Eternal,20140102185042,0,"Creating to stop the archive.is link insertions. --Reaper 2013-10-03
+
+Redundant to filter 559
+
+Repurposed to monitor anons inserting archive.org links, so that 559 blocks archive.is only, and 593 monitors archive.org
+
+typo
+
+Retitle, no need to be private. - KoH
+
+typo - Courcelles
+
+Disabled now. --Reaper 2014-01-02",Monitor addition of archive.org,0,2764,0,1,,0,default
+495,"!(""autoconfirmed"" in user_groups) &
+(lcase(new_wikitext) rlike ""(is|are) gay\b|\bha{2,}\b|\bhomo(sexual)?s?\b|\bi love\b|l(ol){2,}|nigg(er|ah?)|\bpa?edo((ph|f)ile?)?s?\b|penis"")",8737015,Mlitn,20130108151045,0,"Spun of filter 460 into several smaller filters, this being one of them. -mlitn
+
+Re-enabling this filter, now that we have deployed a fix to prevent from being disabled after only a few posts. Hopefully it will work better now. -- Fabrice Florin
+
+Merged back into 460. --mlitn",Feedback: Common Vandalism 3,0,2697,0,1,disallow,0,feedback
+479,"article_namespace == 0
+& !(""autoconfirmed"" in user_groups)
+& lcase(added_lines) rlike ""\[\[\s*(file:|image:)\s*example.(jpg|png|gif|svg|ogg)""",14882394,MusikAnimal,20160614033123,0,"Example images/sounds should never be placed in article space. It's a somewhat frequent mistake made by noobs, since the JPG image is the example inserted by default when a user clicks the ""embedded file"" or ""picture gallery"" buttons in the edit toolbar.
+
+Definitely should not disallow, we could keep out good edits just because they happen to contain an example image. Tag instead. - KoH
+
+This is more likely to scare newbies off then encourage them to fix the edits. They (or other editors) will likely remove the example image from the article upon seeing it. Disabled. --Reaper 2014-01-02
+
+Unregistering the tag ""test edits"", replace it if this gets reactivated. - Cen
+
+Deleting, superseded by [[Special:AbuseFilter/631]] ~MA 2016.06.13",Adding example.jpg to article space,0,2692,0,1,warn,0,default
+783,"article_namespace == 0 &
+!(removed_lines rlike ""{{[Pp]ersondata"") &
+added_lines rlike ""{{[Pp]ersondata""",14882394,MusikAnimal,20170418154458,1,"Trying to prevent old school users from readding {{persondata}} --MaxSem
+
+Restrict to mainspace to reduce condition count ~MA 2016.08.30
+
+rm disallow option - no consensus for disallowing these good faith edits. --Samwalton9, 28/12/16",Adding {{persondata}},0,2677,0,0,warn,0,default
+496,"!(""autoconfirmed"" in user_groups) &
+(lcase(new_wikitext) rlike ""\bpoo+p*y*\b|\bp([o0]r|r0)n\b|\bpussy|\brape([sd]|ist)?\b|\bsexy\b|\bshit|\bslut(s|ty)?\b"")",8737015,Mlitn,20130108151054,0,"Spun of filter 460 into several smaller filters, this being one of them. -mlitn
+
+Re-enabling this filter, now that we have deployed a fix to prevent from being disabled after only a few posts. Hopefully it will work better now. -- Fabrice Florin
+
+Merged back into 460. --mlitn",Feedback: Common Vandalism 4,0,2658,0,1,disallow,0,feedback
+403,,258000,King of Hearts,20130404080817,0,,Inappropriate use of userpage,1,2605,0,1,,0,default
+53,"article_namespace == 0 & user_editcount < 50 &
+(rcount('<\s*ref[^>]*>([^<]*)([©™®℗])(.*)<\s*\/\s*ref\s*>', lcase(added_lines)) < rcount('[©™®℗]', added_lines))",1130897,Ruslik0,20090423131929,0,"These should almost never be used in articles and are usually spam and/or copyvios
+
+ I doubt an established user would add these --Admiral Norton
+-There's a handful of articles that legitimately have these in the titles, if an established user does add them, they probably have a real reason, so a warning (if it was enabled) would likely be wrong in that case. Mr.Z-man
+
+trying to optimize, will disable for performance if this doesn't help - Hersfold
+
+Disabling, for some reason this is catching 1/3 of all new edits -- NW
+
+Reverted Hersfold's change and lowered edit count check back to 50 - Mr.Z-man
+
+Disabling again, no idea why this isn't working anymore
+
+Changing both *?'s to just *, seems redundant. Not enabling. - Hersfold
+Marked as deleted. - Ruslik",trademark/copyright symbols,0,2595,0,1,,0,default
+840,"contains_any(page_namespace, ""2"", ""3"") &
+contains_any(user_groups, ""extendedconfirmed"") &
+contains_any(lcase(added_lines), ""__index__"", ""{{index}}"") &
+!contains_any(lcase(removed_lines), ""__index__"", ""{{index}}"")",502540,Xaosflux,20181008213422,0,"Per [[Special:Permalink/766629914#User space indexing]] ~MA
+
+Added editcount >20 so as not to hit on edits now caught by EF930 -C
+
+20181008: Replaced by disallow filter 930 ~Xaos
+:Reneabled as tracking only for EC editors ~Xaos",Indexing user pages,0,2532,0,0,,0,default
+242,,365454,Zzuuzz,20150219194933,1,,Redirecting a substantial existing page - new user throttle,1,2531,0,0,"throttle,disallow",0,default
+898,,7586,Cyp,20180414083948,1,,Cyp test filter,1,2343,0,0,,0,default
+904,length(summary) > 500,14882394,MusikAnimal,20180406183614,0,"Per ongoing discussion at [[Special:Permalink/828548478#Discussion]]. This filter is meant only to track how longer edit summaries are used ~ MA
+
+Repurposed to view *really* long edit summaries, greater than 500 characters, the proposed new limit ~MA
+
+I think we have enough data. Disabling ~MA",Long edit summaries,0,2338,0,1,,0,default
+861,"user_age == 0 &
+added_lines irlike ""far.left"" &
+removed_lines irlike ""far.right""",19818307,Crow,20181224172959,1,"Watching for edits changing ""Far left"" to ""Far right"" per thread at EFR - C",Crow test filter,0,2256,0,0,,0,default
+732,,365454,Zzuuzz,20170402074526,0,,Chinese spam attack?,1,2195,0,1,disallow,0,default
+233,,301395,NawlinWiki,20101104003357,0,,Targeted user talk vandalism,1,2189,0,1,disallow,0,default
+239,"(
+ (!""autoconfirmed"" in user_groups) &
+ (article_namespace == 0)
+) &
+(
+ (
+ (rmwhitespace(added_lines) rlike ""([^_:*'|=}{-]{1,9})\1{100}"") &
+ !(added_lines rlike ""\[https?:\/\/\w*([^_:*'|=}{-]{1,9})\1{100}.*?\]"")
+ ) |
+ (
+ (added_lines rlike ""[a-zA-Z0-9]{1000,}"") &
+ !(added_lines rlike ""https?://[^ ]*?[a-zA-Z0-9]{1000,}"")
+ )
+)",451766,Prodego,20091127160915,0,"NOTE: This filter should be disabled whenever condition limit hits exceed 2%.
+
+Checking for huge strings of repeating characters (100+) or characters without spaces (1000+). The intent is to disallow these edits, if no false positives are found. - KoH
+
+Setting to disallow. - KoH
+
+>2% - also everything hitting this seems to trip other filters (or at least all 20 edits I checked). Disabled -Prodego",Huge repeating/nonsense characters,0,2189,0,1,disallow,0,default
+159,,365454,Zzuuzz,20170402073529,0,,Mascot Guy Sock Candidates,1,2171,0,1,"throttle,disallow",0,default
+472,"!""autoconfirmed"" in user_groups
+& new_wikitext rlike ""bitch|\bcocks?\b|\bdicks?\b|\bcunts?\b|\bdildo|douche|fuck|nigg(er|ah*)|pedophile|fag(g|\b)|penis|\bcrap(py)?\b|\bslut(s|ty)?\b|whore|\bsucks?\b|\bshit|\bhello\b|\bblah|\bpussy""",3855926,Legoktm,20140303202248,0,"Stripped-down version of filter #384, appropriate for AFTv5 comments. Logging only for now. --rsterbin
+
+Set auto-flag. --rsterbin
+
+Reverted the recent edits the filter, which for reasons I can't discern, caused it to block all anonymous contributions to article feedback. --Someguy1221
+
+Re-enable due to 5% limit. Also, no need for ""hi"" to be in there, and limited a few ambiguous entries. - KoH
+
+Merged to 460. --Reaper 2012-08-17
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Feedback: Addition of bad words,0,2133,1,1,,0,default
+236,,301395,NawlinWiki,20110316135512,0,,Wknight94 test filter,1,2116,0,1,,0,default
+35,"!(""autoconfirmed"" in user_groups) &
+new_size < 150 &
+old_size < 150 &
+(lcase(old_wikitext) rlike ""^#\s*redirect\s*\[\["") &
+(lcase(new_wikitext) rlike ""^#\s*redirect\s*\[\["")",1130897,Ruslik0,20090511155617,0,"Should hit new users trying to modify an existing redirect only.
+*disabling because of performence issues. (just throwing darts that the larger variables like old_wikitext and new_wikitext bog down large pages like AN)
+
+*****************************************************
+DISABLED FOR PERFORMANCE REASONS
+
+Adding some more checks so it won't even attempt to go through the wikitext of large pages. Enabling for now, I'll keep an eye on it. - Hersfold
+
+Merged to the filter 28 and disabled - Ruslik
+Marked as deleted. - Ruslik",New user changing a redirect,0,2093,0,1,,0,default
+23,,82835,Rich Farmbrough,20160812194609,0,,Some vandal phrases,1,2075,0,1,,0,default
+935,,7529026,There'sNoTime,20180923090952,1,,"""ntsamr""-pattern spambot filter",1,2056,0,0,,0,default
+637,,14882394,MusikAnimal,20190103014127,0,,MusikAnimal test filter,1,2040,0,0,,0,default
+16,,365454,Zzuuzz,20170509184759,0,,Prolific socker I,1,2005,0,1,"throttle,disallow",0,default
+273,,258000,King of Hearts,20120808231233,0,,Repeated obscenities,1,1980,0,1,disallow,0,default
+813,,14882394,MusikAnimal,20170605190253,1,,Bee movie script,1,1879,0,0,disallow,0,default
+766,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+!(page_title contains ""((("") &
+page_id != 50720028 & ( /* [[Triple parentheses]] */
+ trip_par :=""(\(|(){3}.*(\)|)){3}"";
+ added_lines irlike trip_par &
+ !(removed_lines irlike trip_par)
+)",14882394,MusikAnimal,20181209191741,1,"See [[https://en.wikipedia.org/wiki/New_Right#Alt-right]] for what this is about, it is almost always derogatory or outright vandalism. This has been tested on Special:AbuseFilter/1 for several days. Going to closely monitor and if this proves to be vandalism 99.something% of the time, I'll merge it into Special:AbuseFilter/614. For now just tagging as possible vandalism ~MA 2016.06.12
+
+Moving to warn/tag ~MA 2016.07.05
+
+Refactor regex to meet false negative (Strongjam) --Samtar 29/9/16",Alt-right labeling,0,1866,0,0,"warn,tag",0,default
+667,,764407,Kuru,20181007162410,1,,Wikipedia:Long-term abuse/Best known for IP,1,1843,0,0,,0,default
+768,,7586,Cyp,20171028174754,1,,AIV disruption,1,1781,0,0,disallow,0,default
+826,,14882394,MusikAnimal,20170206164424,1,,Image flag vandal,1,1748,0,0,"throttle,disallow",0,default
+179,,258000,King of Hearts,20120808231218,0,,Ongoing attacks,1,1617,0,1,disallow,0,default
+756,,502540,Xaosflux,20190104181541,0,,Banned user vandalism,1,1601,0,0,disallow,0,default
+926,,14882394,MusikAnimal,20190103224137,1,,Image vandalism II,1,1574,0,0,disallow,0,default
+942,"(""sysop"" in user_groups) &
+!(""bot"" in user_groups) &
+(action==""edit"") &
+(""sysop"" in page_restrictions_edit)",502540,Xaosflux,20181128042048,1,"20181123 - Testing ~Xaosflux
++ns:8 that has Namespace restrictions
+exclude bots ~X
+pull ns8 out, these are easy enough to find elsewhere",Log edits to protected pages,0,1573,0,0,,0,default
+577,"article_namespace != 3 &
+(added_lines rlike ""♙|☃|↵"") &
+!(removed_lines rlike ""♙|☃|↵"")",5711305,Cenarium,20150212173614,0,"Created in response to a request by MDennis (WMF). Will delete after a couple weeks. --Reaper 2013-07-24
+Added ↵ due to bug 52096 -- John Vandenberg
+
+Ignore ns3 -- Legoktm 2013-08-21
+
+Deleted. --Reaper 2014-01-02",VisualEditor bugs: Strange icons,0,1566,0,1,,0,default
+24,"!(""autoconfirmed"" in user_groups) &
+(lcase(added_lines) rlike ""\[\[(penis|vagina|clitor[ui]s|cunt|breasts?|faggots?|faggot \(slang\)|douche)\|"")",5711305,Cenarium,20150212173232,0,"This should prevent people from changing links, something which isn't always caught easily. People shouldn't have to do this sort of thing, since usually if you *want* to link to penis you just use [[penis]]. - Hersfold
+Adding group filter, new users only - Hersfold
+
+Trying to expand the list - Ruslik0
+
+Add tag ""link vandalism"" - Cen
+
+change to tag ""possible vandalism"" - Cen
+
+Optimizing. - KoH
+
+Marked as deleted. Ruslik",Sneaky link vandalism,0,1538,0,1,,0,default
+280,"(article_namespace == 0) & (edit_delta > -500) &
+(!(""autoconfirmed"" in user_groups)) &
+(
+ (removed_lines rlike ""(?:\n|^) *\[\[(?:[Ff]ile:|[Ii]mage:)[^\]]*\]\] *(?:\n|$)"")
+ | (removed_lines rlike ""\| *im(?:g|age) *= *[^\|}\n]{3,}\n"")
+)",8544547,Shirik,20100131230039,0,"Note about the regex: What it's looking for is a removed line that consists entirely of [[File:Foo.xxx]], [[Image:Foo.xxx]], |img=Foo.xxx, or |image=Foo.xxx (the last two are for Infobox images).
+
+Filter for detecting removed/changed images. Test against [[User:Shirik/UnitTests]]. Disabled for now. --Shirik 6 Jan 2010
+
+Attempted to address a possible false positive where other text is on the same line. --Shirik 6 Jan 2010
+
+Adjusted regex for corrections found during unit testing. -- Shirik 6 Jan 2010
+
+Added limitation to avoid detecting things found by blanking filters -- Shirik 6 Jan 2010
+
+Enabling at off-peak hours, log only. Watching performance. -- Shirik 7 Jan 2010
+
+Corrected a false positive from not asserting the beginning of a line for a file -- Shirik 7 Jan 2010
+Corrected a false positive where the |image= in an info box existed, but no image was present -- Shirik 7 Jan 2010
+Disabled for now. The regex works, 2ms, but consumed conditions is high. -- Shirik 7 Jan 2010
+Split the regex to assist the engine -- Shirik 7 Jan 2010
+
+Disabling for now. Too many hits to be useful. -- Shirik 10 Jan 2010
+Deleted. Per request, decided not to implement as above. - Shirik 31 Jan 2010",New user altering images,0,1525,0,1,,0,default
+257,,14882394,MusikAnimal,20170511024816,0,,Sonichu and other repeat vandalism,1,1505,0,1,disallow,0,default
+620,,14882394,MusikAnimal,20160614035352,0,,archive removal by disruptive editors,1,1498,0,1,,0,default
+740,,7586,Cyp,20171106152842,1,,Template hijacking,1,1461,0,0,,0,default
+408,,258000,King of Hearts,20120808231552,0,,really long talk post,1,1441,0,1,,0,default
+921,"!(""confirmed"" in user_groups) &
+article_namespace == 0 &
+edit_delta < 500 & /** Less substantial content contributions, hence more likely to be bad-faith **/
+added_lines irlike ""\bnazi(?:sm?)?\b"" &
+!(old_wikitext irlike ""\bnazi(?:sm?)?\b"")",14882394,MusikAnimal,20180703035104,1,"See [[Special:Permalink/845425050#Nazi filter]]. Creating dedicated filter after testing with filter 2. This can be public, not LTA-related. Log-only for the time being ~MA",Suspicious claims of nazism,0,1422,0,0,tag,0,default
+475,"!(""autoconfirmed"" in user_groups)
+& (
+line1:= ""(pa?edo(ph|f)il|little\sboys|molest|predat(e|o)r|\brap(e|ing|ist|er)|penis|\bcunt|\btwat|bitch\b|slut\b|prostitut|whore|\bf[-._ ]?u[-._ ]?c[-._ ]?k|pimp\b|faggot|brothel|\bgays|(is|are)\sgay|\(gay\)|\bwank|bellend|dickhead|terrorist|\bcocks?\b)"";
+line2:=""(drugs|abuse|ha(ve|ving|s|d)\ssex|sex\swith|\bporn)"";
+line3:=""(fired\b|sacked|expelled|corrupt|fraud)"";
+lad:=lcase(new_wikitext);
+ (lad rlike line1)
+ | (lad rlike line2)
+ | (lad rlike line3)
+)",301395,NawlinWiki,20131003210159,0,"First attempt at a stripped-down version of filter #189, appropriate for AFTv5 comments. A better version would check for category, but that information is not available to AFT. Logging only for now (later set to auto-flag). --rsterbin
+
+DO NOT USER THIS FILTER for Article Feedback in its current form, because it is intended for biographies of living persons, and looks for words like drugs, fired or fraud, which are perfectly acceptable in feedback posts. So I am removing all actions for now. If someone could edit it to only look for unacceptable obscenities, than we can add actions back again. Thanks! -- fabriceflorin
+
+Merged to 460. --Reaper 2012-08-17",Feedback: Vandalism or libel,0,1390,0,1,,0,feedback
+358,,461626,Od Mishehu,20151220123259,0,,Od Mishehu's test filter,1,1358,0,0,,0,default
+619,,15991542,Samwalton9,20150204222535,0,,Possible covert vandalism,1,1326,0,0,,0,default
+652,,14882394,MusikAnimal,20180412165059,0,,Jajadelera,1,1326,0,0,"warn,disallow",0,default
+194,"!(""sysop"" in user_groups) & (article_articleid == 0) &
+contains_any(lcase(new_wikitext),""jackson"",""michael jackson"",""pedophile"",""cardiac arrest"",""heart attack"",""thriller"",""beat it"")",1795359,Xeno,20090721035726,0,"Should stop creation of new pages about MJ. Will engage further actions as needed, right now log&tag only. - Hersfold
+Adding more terms - Hersfold
+Clarified tag. -Maxim
+
+Need lcase, unless you only want MJ's name when miscapitalized. -DF
+
+Clarified tag to prevent people to wonder why their legit articles are flagged. Removed too common term ""died"" (too many false positives). Maybe should be limited to new users? -SoWhy
+
+Please format your tags properly, see at [[Special:Tags]]. - Cena
+
+rmv tag, this filter is inherently broken and filters anything - Cena
+
+refine this filter before re-enabling. too many false positives. -xeno
+
+unhiding, marking as deleted. -xeno",Michael Jackson new page vandalism,0,1309,0,1,,0,default
+151,"!('autoconfirmed' in user_groups) &
+(article_namespace == 0) &
+(new_size < 200) &
+(lcase(new_wikitext) rlike ""^#redirect"") &
+(
+ ((""[["" + article_text + ""]]"") in new_wikitext) |
+ (lcase(new_wikitext) rlike ""^#redirect *\[\[user([ _]talk)?:"")
+)",5711305,Cenarium,20150212173345,0,"Suggested at RAF. Logging.
+
+Fix string priority. Make case specific.
+
+add tag ""unusual redirect"" - Cen
+
+except autoconfirmed users - Cen
+
+disable for now until condition limit drops - Feezo
+
+Marked as deleted - KoH",Inappropriate Redirects,0,1294,0,1,,0,default
+891,"article_namespace rlike ""^(0|2|118)$"" &
+(
+ (added_lines irlike ""doi[ ]*=[ ]*10.(1234|1999|2495|4018|4172|4236|5897|11648|15373|17265)"") |
+ (
+ (added_lines irlike ""biomedres\.info|cennser\.org|cpinet\.info"") &
+ (added_links irlike ""biomedres\.info|cennser\.org|cpinet\.info"")
+ )
+)",14882394,MusikAnimal,20180328194850,1,"Checks for DOI references to commonly used predatory open access publishers.
+
+10.1234: Not issued, used by some junk journals to appear legit
+10.1999: WASET
+10.2495: WIT Press
+10.4018: IGI Global
+10.4172: OMICS Group
+10.4236: Scientific Research Publishing
+10.5897: Academic Journals
+10.11648: Science Publishing Group
+10.15373: World Wide Journals
+10.17265: David Publishing
+
+Only check namespaces 0,1,2,3,118 --TNT 3/Dec/17
+
+Added some domains to check .. lets see what happens to parsetime
+
+Allowing use on talk pages, hope this okay... otherwise we need to somehow exclude talk page archives, and also bots, see [[Special:Permalink/832937586#Edit filter problems]] ~MA",Predatory open access journals,0,1289,0,0,"warn,tag",0,default
+892,"page_namespace == 0 &
+contains_any(added_lines, "".proxy."", "".gate.lib."", "".ezproxy-v."", "".ucsf.idm.oclc.org"") &
+contains_any(added_links, "".proxy."", "".gate.lib."", "".ezproxy-v."", "".ucsf.idm.oclc.org"")",14882394,MusikAnimal,20181023224029,1,"Start filtering this, per https://en.wikipedia.org/w/index.php?title=Wikipedia_talk:Spam_blacklist&oldid=813788883
+
+Simpler version, we are only logging atm.
++1 Beetstra 12/6/2017
+
+Using added_links, maybe cleaner.
+
+added_links is pretty expensive (for some reason), so if added_lines works for logging purposes then let's use it ~MA
+
+Problem is .. we are going to warn at some point. added_lines does not work, as it may be part of a changed line (or a moved line, both of which in the diff are interpreted as a deleted line and an added line). 3 out of 5 hits were now false positives .. I was considering to turn it to warn after I saw the first two (the proper positives).
+
+Check added_lines first to cancel out most edits before using the more expensive added_links ~MA
+
+Set to warn and prevent, see https://en.wikipedia.org/w/index.php?title=Wikipedia_talk:Spam_blacklist&oldid=819509337#Follow_up_-_blacklist_links_to_inside_nets_of_Universities (links may end up being blacklisted, making this filter obsolete).",RS linked through proxy,0,1245,0,0,disallow,0,default
+119,"(article_namespace == 0) &
+!(""sysop"" in user_groups) &
+(edit_delta > -100 & edit_delta < 100) &
+(length(added_lines) > 0 & length(removed_lines) > 0) &
+(contains_any(rmspecials(lcase(edit_diff)), ""fyrom"", ""macedonia"")) &
+(
+ (
+ rcount(""fyrom|formeryugoslav"",rmspecials(lcase(added_lines))) !=
+ rcount(""fyrom|formeryugoslav"",rmspecials(lcase(removed_lines)))
+ ) |
+ (
+ count(""[[republic of macedonia]]"", lcase(added_lines)) !=
+ count(""[[republic of macedonia]]"", lcase(removed_lines))
+ )
+)",1130897,Ruslik0,20090928191653,0,"Related to the [[Macedonia_naming_dispute]] and the endless edit warring on the topic on wiki.
+
+Logs small edits by non-sysops that add or remove ""FYROM"" and ""Former Yugoslav""
+
+Change targeting. Hope for better performance.
+
+No need to hide this. --Conti
+
+Note: False positives occur with interwiki bots adding links to ""fy:Rom...."" entries. --Fut.Perf.
+
+NOTE: This filter was discussed on [[Wikipedia:Requests for arbitration/Macedonia 2]]. Please see [[Wikipedia:Requests for arbitration/Macedonia 2#Tighten the abuse filter]] before making any further significant changes. --Zzyzx11
+
+This remedy is not actionable. The edit filter is not for content issues. - Cen
+
+Disable, appears to be inactive (log only filter). If you are using this filter, please let me know, and I'll reenable it -Prodego
+
+Marked as deleted. - Ruslik",Macedonia naming conflict,0,1243,0,1,,0,default
+474,"user_editcount < 30
+& (match:= ""\b(?:(?:P+H+|F)+U+C+K+[\w\d]*?|A+N+U+S+|C+R+A+P+|S+H+I+T+|[KC]+U+N+T+|N+I+GG+(E+R+|A+)|(A+SS+|B+U+(T+|M+))[ \-]*(H+O+L+E+|S+E+X+|R+(A+E+|E+A+)P+)|(C+O|K+A+W+)[CK]+|L+OO+[SZ]+E+R|B+I+T+C+H+|P+(3|E)+N+I+S+|W+A+N+K+E+R+|H+A+GG+E+R+|HERMAPHRO|J[Eé3]sK[Eé3] COURLAN[DO]|(?:P+H+|F+)A+G+(O+T+)|KINGPINI[E3]|ORLY)\b""; ccnorm(new_wikitext) rlike match)",82835,Rich Farmbrough,20160911183030,0,"Stripped-down version of filter #12, appropriate for AFTv5 comments. Logging only for now. --rsterbin
+
+Set auto-flag. --rsterbin
+
+Set to disallow, rather than auto-flag, because none of these obscenities seem appropriate to have in an article feedback comment. -- Fabrice Florin - 23 July, 2012
+
+Merging to 460. --Reaper 2012-08-17
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13
+Updated for new norm/ccnorm. RF 20160911",Feedback: Comment with only obscenities,0,1222,1,1,disallow,0,default
+47,,82835,Rich Farmbrough,20160813233958,0,,Prolific sockpuppeteers,1,1206,0,1,disallow,0,default
+684,,14882394,MusikAnimal,20181018171737,0,,temporary vandalism,1,1192,0,0,disallow,0,default
+930,"page_namespace rlike ""^(2|3)$"" &
+!contains_any(user_groups, ""sysop"", ""bot"", ""extendedconfirmed"") &
+contains_any(lcase(added_lines), ""__index__"", ""{{index"") &
+!contains_any(lcase(removed_lines), ""__index__"", ""{{index"")",14882394,MusikAnimal,20181023224118,1,"Variant on filter 840 which tags all edits attempting to Index userspace. This one disallows for edits<20. Prior to creation, 99% of recent hits to 840 were self-promotion, or autobiographies.
+
+A custom message should be created explaining why the edit is being disallowed. -Crow
+
+Log-only until custom message is added. For something that's not blatant vandalism or abuse, we should say why the edit was disallowed ~MA
+
+-Update to support new restriction from Special:PermaLink/862856598#Prevent_new_users_from_allowing_search_engine_indexing_of_user_pages
+~Xaos
+
+MediaWiki:Abusefilter-warning-noindexuser set as warning, will be final message with deny ~Xa
+
+Set to disallow per EFN discussion ~Xa
+
+remove }} - Xa",Prevent indexing userspaces by newer users,0,1165,0,0,disallow,0,default
+793,,764407,Kuru,20190105142358,1,,Common spam/scam phone numbers,1,1155,0,0,disallow,0,default
+675,"regexstr := ""(?:TH|D)(?:[E3](?:MZ?|Y)|[@A]T|[O0][$S][3E])\s*['’]?s?['`]?(?:\s?I[$S]|[@A]R[3E]\s?)?[\s_\+](?:TH|D)[3EA@][\s_\+](?:F[A@](?:CT[$S]?|X)|[$S]T[@A]T[$S])\b|TH[1I]NG[$S] B[3E][1I]NG TH[3E] F[@A]C(?:T[$S]|X)|[@A]ND Y[0O][UV] KN[0O]W [1I]T(?:’|')?S TRU[3E]|R[3E][@A]DY F[0O]R TH[1I][$S] N[3E]XT F[@A]CT|IT[’']S [@A] D[0O]+ZY|R[1I]GHT H[3E]R[3E] [0O]N W[1I]K[1I]P[3E]D[1I][@A]|H[3E]R[3E](?:’|'|i)[$S] (?:TH|D)[3E@A] K[1I]CK[3E]R|[@A]ND (?:TH|D)[3E]R[3E] [1I][$S] (?:TH|D)[3EA@] F[@A](?:CT[$S]|X)"";
+
+(
+ action == 'createaccount' &
+ accountname irlike "".*(?:th|d)(?:e|3)m'?(?:s|z)?\s*th(?:e|a)\s*fa(?:cts|ctz|x).*""
+) | (
+ user_editcount < 100
+ & article_namespace == 0
+ & edit_delta < 500
+ & added_lines irlike regexstr
+ & !(old_wikitext irlike regexstr)
+)",14882394,MusikAnimal,20160614040653,0,"Vandalism trend due to ClickHole article: http://www.clickhole.com/article/man-mission-man-adding-and-thems-facts-end-every-w-2182
+
+Please test changes on Debuggex: https://www.debuggex.com/r/VZXxrNpwYd-WGx2t/5
+
+Added \b after first piece of the regex to minimise false positives -- TTO
+
+moved to filter 614 ~~MA",Thems the facts vandalism,0,1107,0,1,disallow,0,default
+877,,365454,Zzuuzz,20180814223233,0,,test filter 4,1,1084,0,0,,0,default
+253,"article_namespace %2 == 0 &
+(article_namespace != 2 & article_namespace != 100 & article_namespace != 6 &
+((article_namespace != 4) &
+!""bot"" in user_groups &
+""~~~"" in added_lines &
+!new_wikitext rlike ""<!--.*~~~.*-->""&
+!new_wikitext rlike ""<nowiki>.*~~~.*</nowiki>""&
+!new_wikitext rlike ""~~~~~""&
+!contains_any(article_text ,""Did you know/Queue"",""Vandalism information"")))",451766,Prodego,20091127160929,0,"For now, completely excluding the Wikipedia: namespace from this filter. All other discussion pages are probably in the talk namespaces (odd numbers); however, there are legitimate reasons for a user to sign a page in the User: namespace.
+
+Added exception for file namespace. People need to add their own name as author. (From false positive report). -Wknight94
+
+Way too many conditions (""consumes 588 conditions"") Disable [note those numbers can be wrong, but usually only after a recent filter change] -Prodego",Signing a non-discussion page,0,1015,0,1,warn,0,default
+134,"(article_namespace == 10) &
+((added_lines contains ""{{db"") |
+(added_lines contains ""{{tfd"")) &
+((new_wikitext rlike ""^(\{\{db-|\{\{tfd)"") |
+(new_wikitext rlike ""[^<>]+(\{\{db-|\{\{tfd)"") |
+(new_wikitext rlike ""</noinclude>[^<>]*(\{\{db-|\{\{tfd)""))",1130897,Ruslik0,20090708123137,0,"Currently for logging only and to see if wmedia regex evaluator supports this. --Admiral Norton
+
+Are you sure you need to us the very intensive new_wikitext function? It doesn't seem to do anything. I would suggest removing that part. -Prodego
+
+If you have any better idea about how to check for <noinclude> tags, you're welcome to weigh in. BTW I've changed the priority to minimize the number of pages where the regex test is run. --Admiral Norton
+
+That should do the trick nicely. Good job. -Prodego
+
+I've disabled the warning for this filter for now, since it directly contradicts the guidelines at [[WP:TFD]]: ""If placed directly into the nominated template, use <noinclude>...</noinclude> around the TFD notice if it is likely to be disruptive to articles that transclude that template."" I always thought it was a feature, and not a bug, that the TFD message appears in articles that use the nominated templates. --Conti
+
+Of course it should appear in the articles. I inverted its logic. -- User:Docu
+Restore previous version. Needs more work. -- User:Docu
+Marked as deleted. - Ruslik",Template deletion notifications transcluded into articles,0,991,0,1,,0,default
+755,,502540,Xaosflux,20190104181502,0,,LTA trolling,1,981,0,0,,0,default
+7,,82835,Rich Farmbrough,20160812192554,0,,AnonTalk,1,972,0,1,,0,default
+834,,21166720,Biblioworm,20170204214625,0,,Possible attacks on other users,1,961,1,1,,0,default
+879,"!""confirmed"" in user_groups &
+page_namespace == 0 &
+""<"" in added_lines &
+!""<"" in added_lines &
+""<"" in removed_lines &
+!""<"" in removed_lines",365454,Zzuuzz,20181219090944,1,"Background:
+https://en.wikipedia.org/wiki/Wikipedia:Edit_filter/Requested/Archive_10#Warn_about_broken_proxies
+https://en.wikipedia.org/wiki/Wikipedia:Edit_filter_noticeboard/Archive_3#Move_Special:AbuseFilter.2F879_to_disallow.2C_or_tag.3F
+
+Requested filter, tested at 773 (and improved on by Crow). See also 464 --TNT 11/11/2017
+
+This should happen with one edit, so going off of added/removed_lines should do the job and is less expensive. It's possible a user only replaced one part of the page (on purpose), but this seems like an edge case and is likely to be disruptive anyway. Also check added_lines first, which in this case is most likely to evaluate to false. Finally, adding < and > for good measure ~MA",Possible malformed edit,0,943,0,0,warn,0,default
+815,,14882394,MusikAnimal,20170831173447,1,,TV vandal,1,936,0,0,disallow,0,default
+341,,14882394,MusikAnimal,20160614031549,0,,Persistent talk page abuse from IP ranges,1,925,0,1,disallow,0,default
+600,,10639536,Reaper Eternal,20150602162717,0,,Adding Image to Template,1,924,0,0,tag,0,default
+934,"!(""confirmed"" in user_groups) &
+page_namespace == 0 &
+page_age == 0",59944,Kaldari,20181107195116,0,"See https://phabricator.wikimedia.org/T204016 . Basically unconfirmed users can still create mainspace pages through the API. This filter is hit mostly by the content translation tool (already blocked by filter 782), but any other API edits are likely attempts to get around ACTPERM, hence disallowing. ~MA
+
+No longer needed ~MA",Unconfirmed users creating mainspace articles,0,915,0,1,disallow,0,default
+529,"article_namespace == 0 &
+added_lines irlike ""twitter\.com/(chartnews|australiacharts|mickeycharts)|facebook\.com/pages/Chart-News""",3210516,Kww,20150625141130,0,"Log only to start
+
+- Works in testing, not causing false positives. Going ahead and setting to block.
+
+- Disabling. Looks like this fad has dropped out of popularity.
+
+- adding another bogus twitter acccount (""australiacharts"")
+- Reenabling. Widespread, low-level problem.
+- adding MickeyCharts
+- unnecessary slash
+
+Optimize, remove link to summary. --Reaper 2014-01-02
+
+The same chartnews with a Twitter feed now has a Facebook page.",chartnews,0,913,0,1,"warn,disallow",0,default
+534,,14882394,MusikAnimal,20151231173918,0,,Preuss filter,1,912,0,0,disallow,0,default
+859,,365454,Zzuuzz,20181104194110,0,,LTA #859,1,856,0,1,disallow,0,default
+477,,14882394,MusikAnimal,20160614032941,0,,Chinese pattern spambots,1,854,0,1,warn,0,default
+899,"article_namespace == 0 &
+/** cancels out most edits, and in effect will reduce average condition count */
+contains_any(added_lines, ""thesun.co.uk"", ""dailystar.co.uk"") &
+!(summary irlike ""^(Revert|rv|Undid)"") &
+new_wikitext contains ""[[Category:Living people]]"" &
+!(""bot"" in user_groups) &
+(
+ (
+ added_lines contains ""thesun.co.uk"" &
+ !(removed_lines contains ""thesun.co.uk"")
+ )
+ |
+ (
+ added_lines contains ""dailystar.co.uk"" &
+ !(removed_lines contains ""dailystar.co.uk"")
+ )
+)",14882394,MusikAnimal,20180412201446,1,"Forked from 869, see [[Special:Permalink/820423099#Enabling warnings or tags for Filter 869?]] ~MA","Adding ""The Sun"" or ""Dailystar"" to BLPs",0,826,0,0,,0,default
+739,,15991542,Samwalton9,20170416123534,1,,User talk vandal,1,821,0,0,disallow,0,default
+398,,1749459,MER-C,20180426150503,0,,Test filter 398,1,802,0,0,throttle,0,default
+485,"!(""bot"" in user_groups) &(lcase(added_lines) rlike ""ktg6us78hf8vdu7"")",14882394,MusikAnimal,20160614033239,0,"Added per request by Hoo man, https://en.wikipedia.org/w/index.php?title=Wikipedia:Edit_filter/Requested&oldid=507911796#Catching_malicious_.3Ca.3E_tags_probably_inserted_by_a_browser_extension
+
+Add tag action. - Sole Soul
+
+Merged into 345. - KoH
+
+unregistering the tag so it doesn't appear as using a tag in the list - cen",Prevent malicious edits by browser extension,0,797,0,1,warn,0,default
+422,,10639536,Reaper Eternal,20150625143905,0,,Possible template vandalism,1,794,0,0,disallow,0,default
+388,,5711305,Cenarium,20150212173548,0,,Unusual redirect III,1,783,0,1,,0,default
+405,,14882394,MusikAnimal,20160614032241,0,,Verizon vandal,1,776,0,1,,0,default
+708,"user_editcount < 50 &
+(
+ (moved_from_namespace == 2|moved_from_namespace == 118) &
+ (
+ moved_to_namespace == 0
+ )
+)",15991542,Samwalton9,20151104174320,0,"Testing, related to an SPI case. --Samwalton9, 12 July 2015
+
+Disabling per https://en.wikipedia.org/w/index.php?title=User_talk%3ARisker&type=revision&diff=689039984&oldid=689000725 - let me know if you still need this. --Samwalton9, 4 Nov 2015",SPI page moves,0,765,0,0,,0,default
+543,,7777104,Kingpin13,20130402134200,0,,XKCD April Fools' Day 2013 vandalism,1,754,0,1,,0,default
+872,,19818307,Crow,20180711125807,0,,SK Sock,1,748,0,0,disallow,0,default
+941,,365454,Zzuuzz,20181114151253,0,,proxy abuse,1,747,0,0,disallow,0,default
+812,"!""confirmed"" in user_groups &
+edit_delta > 1000000",14882394,MusikAnimal,20161212220959,1,"See https://en.wikipedia.org/wiki/Special:Contributions/Centralized_Authority --Samwalton9, 3 Dec 2016
+
+Moving to general filter to detect large addition of content, and making public. Log-only for now ~MA 2016.12.07
+
+Disallow per mailing list ~MA 2016.12.12",Unreasonably large addition of content,0,726,0,0,disallow,0,default
+915,,502540,Xaosflux,20190104181216,1,,Personal testing filter for Cyberpower678,1,719,0,0,,0,default
+762,,3174456,Oshwah,20180126230139,1,,TV/Movie spammer,1,716,0,0,"disallow,tag",0,default
+642,"""otrs"" in lcase(added_lines) & (
+ OTRS_template_reg := '\{\{[\s_]*(OTRS[\s_-]*(confirmation|permission|received|talk|user|)|(article|confirmation|permission)[\s_-]*OTRS)[\s_]*(\}\}|\|)|\{\{(subst:)?Db-no permission-OTRS\}\}';
+ added_lines irlike OTRS_template_reg &
+ !(removed_lines irlike OTRS_template_reg)
+) & !(
+ contains_any(user_groups, ""bot"", ""sysop"") |
+ ""otrs-member"" in global_user_groups
+) &
+contains_any(action, 'edit', 'upload')",14882394,MusikAnimal,20181023194832,1,"Nov 22 - Created based on AbuseFilter/635; with the modification to look for the newly implemented global group
+> Currently logging only for testing - if everything is in order then we can disable filter 635 and use this one instead.
+> Tested against previous revisions and seems to be in order- Rjd0060
+
+Nov 24 - Added warning box which needs modification to reflect that it is a global group. Members will be automatically added/removed by a yet to be determined organized collaborative process between the stewards and OTRS administrators - Rjd0060
+
+Nov 30 - Removed namespace dependency ( & (article_namespace == 6 | article_namespace == 1) ) No reason for it. Missed an edit in the draft space. -Rjd0060
+
+This filter is easy to subvert so assume we are mainly looking at good faith, or naive bad faith edits.
+
+Templates affected are
+1. ArticleOTRS (up for deletion)
+2. ConfirmationOTRS
+3. OTRS permission (two redirects that aren't caught - or used - PermissionOTRS-ID and PermissionOTRSOnly)
+4. OTRS received (OTRS insufficient redirects here, but is unused)
+5. OTRS-talk (OTRS and Otrs redirect here, and have 111 transclusions between them currently caught by ""|)"" in the regex)
+6. OTRS-user
+
+Simplify, optimize, correct some wrong leaning slashes. RF 20150802
+
+Added local bots to excluded user groups, since this was causing an issue with an archiving bot. - Earwig 2015-11-26
+
+Add Db-no permission-OTRS to regex checked - batch tested and will watch logs --Samtar 25/9/16
+
+Since this has been in action for a while, i'm moving to add preventing the edit. - DQ 2017-01-17
+
+Added sysop exception. Xaos 20170817
+
+[/s_-] --> [\/s_-] (unescaped `/`) --TNT 5Oct2017
+[\/s_-] --> [\s_-] (any whitespace), makes a bit more sense! --TNT 5Oct2017
+
+Look for ""otrs"" in added_lines first to reduce condition count. Other various cleanup ~MA
+
+Regularly showing up on slow filter dashboard; I think global_user_groups might be the slow part, so moving that condition after the added_lines check. Also most actions are edits, so we can move that check to the end to reduce condition count ~MA
+
+OTRS-->otrs per phab:T202095 - 20180817 ~Xaos",OTRS template added by non-OTRS member (global),0,712,0,0,disallow,0,default
+146,,258000,King of Hearts,20120808231158,0,,Keith Bridgeman vandalism,1,710,0,1,,0,default
+856,"article_namespace == 0 &
+removed_lines irlike ""({{\s*Copyvio-revdel|{{\s*revdel).*}}"" &
+!""sysop"" in user_groups",14882394,MusikAnimal,20180412170902,1,"To track the removal of revdel related templates, as only admins can action these. Logging only, no disallow, tested on 773. Public --TNT 20/05/2017
+
+Putting namespace restriction first since it will cancel out more edits (sysops make up a small percentage) ~MA
+
+False positive fix suggested by Jiten --TNT 7/Dec/17
+
+!sysop is the least likely to evaluate to false, methinks, so moving to the bottom ~MA",Non-admin removing revdel templates,0,687,0,0,,0,default
+99,"((article_namespace ==2) |
+ (article_namespace ==3 &
+ count(""/"",article_text)!= 0
+ )
+) &
+count(user_name ,article_text) == 0 &
+(!(""bot"" in user_groups) & !(""sysop"" in user_groups))",1130897,Ruslik0,20090408125315,0,"Setting to not trip on admins either, I just set this off. Is this entirely necessary, though? Some users have guestbooks or sandboxes they invite edits on... - Hersfold
+
+I'd disable this; it's not really any help. -Stifle
+
+If the user invites edits it's usually recognizeable either by the page name or because it has some template or line that says, please edit this page or some permutation of it. That said, I'm not entirely sure it's helpful either. These are generally the sort of thing that can easily be recognized in recentchanges or the page history of the page in question. --Mgm
+
+-As noted by the hit rate, there are a lot of edits, and we will never be able to filter good from bad. Disabling this. -Prodego
+Marked as deleted - Ruslik",Edits to an other user's userspace,0,686,0,1,,0,default
+651,,82835,Rich Farmbrough,20150826005013,1,,AfricaTanz,1,685,0,0,"warn,disallow",0,default
+433,,258000,King of Hearts,20120808231801,0,,University of Oklahoma spelling vandal,1,684,1,1,,0,default
+624,,11250185,DoRD,20180424211305,0,,CheckUser Sock block,1,680,0,0,,0,default
+946,,365454,Zzuuzz,20190104123050,1,,LTA 946,1,657,0,0,"throttle,warn",0,default
+918,,14882394,MusikAnimal,20180912233708,1,,LTA 918,1,650,0,0,,0,default
+563,,14882394,MusikAnimal,20160614034434,0,,Graham W Phillips,1,643,0,1,,0,default
+765,"( article_namespace = 0 ) &
+contains_any( new_pst, 'cx-segment', 'cx-highlight', 'cx-linter', 'data-segmentid', 'data-cx-mt-provider' )",59944,Kaldari,20171025201214,0,"2017-10-25: Disabling. This is not hit very much, T136596 has been resolved, and the usage of new_pst is slowing down editing https://logstash.wikimedia.org/app/kibana#/doc/logstash-*/logstash-2017.10.25/mediawiki?id=AV9VDX7QePsvZ6Lqf_ZK&_g=h@44136fa
+
+2016-08-14: Added data-cx-mt-provider.
+
+2016-07-16: Added cx-linter.
+
+2016-06-19: Re-enabled, because https://phabricator.wikimedia.org/T136596 is supposed to be resolved.
+
+2016-06-01: Disabled because of unnecessary warnings shown while editing translations.",Unnecessary syntax in translated articles,0,620,0,0,tag,0,default
+799,,365454,Zzuuzz,20181216194154,1,,Ref Desk Nazi,1,610,0,0,"throttle,disallow",0,default
+601,,16980,Dragons flight,20150218071840,0,,Colton Cosmic,1,606,0,0,disallow,0,default
+864,,3174456,Oshwah,20180128000704,1,,Kargbo Spammer,1,601,0,0,disallow,0,default
+123,"(action == ""move"") &
+(moved_from_namespace == 2 | moved_from_namespace == 3) &
+(user_editcount < 50) &
+!(moved_from_text contains ""/"") &
+!(user_name in moved_from_text)",258000,King of Hearts,20120808231142,0,"Testing
+
+Apostrophe patrol! (filter title) --NW
+
+-Allow moving subpages into article space, to allow for sandboxes. -X!
+--That last one should have a ! in front of it, right? You were trying *not* to include subpages.-NW
+---Yes, of course. :) -X!
+
+*No false positives in several days, activating warn and disallow. --NW
+
+No need for this to be private. --Conti
+
+Disabling due to condition limit; also, the most recent hits are falses positives --Feezo
+
+Marked as deleted - KoH",New users moving other users' pages,0,599,0,1,"warn,disallow",0,default
+445,,258000,King of Hearts,20130404081019,0,,Disruptive user threatening self harm,1,596,0,1,"throttle,disallow",0,default
+519,,9698266,Elockid,20140407012139,0,,Possible sockpuppets,1,588,0,0,,0,default
+587,,10639536,Reaper Eternal,20140102185135,0,,Inappropriate external links,1,585,0,1,"warn,disallow",0,default
+386,,451766,Prodego,20110602033814,0,,Throttle IP talk page creation,1,582,0,1,throttle,0,default
+880,,664832,Ritchie333,20180626171659,1,,Vote (X) for Change,1,572,0,0,disallow,0,default
+269,,258000,King of Hearts,20110310111002,0,,TFA Vandalism,1,566,0,1,"warn,disallow",0,default
+526,"article_namespace == 0
+& user_age <1000
+& lcase(added_lines) rlike ""bra[sz]il(ian)?[^\w]*(hot[^\w]*100)|billboard bra[sz]il|hot100brasil|singlechart\|bra""",3210516,Kww,20150625141156,0,"Putting in as a log-only filter for now. Eventually, I'll probably wind up blocking all edits that match, as there is simply too much reference forgery occurring with hot100brasil positions being inserted as if they were from Billboard Brasil.
+
+
+added fresh range 21:17 UTC Jan 16 2013
+
+removed range specifics: just checking all anons
+
+overfiring. Disabling for now.
+
+changed ""new_wikitext"" to ""added_lines""
+
+expanded pattern
+
+expanding pattern again to catch singlechart insertions now that it's available 2-12-2013
+
+catching fresh accounts",hot100brasil insertions,0,560,0,1,warn,0,default
+436,,365454,Zzuuzz,20170402073639,0,,Sole Soul's test filter,1,557,0,1,,0,default
+786,,25420061,BU Rob13,20170120213451,0,,LTA_Check-B13,1,555,0,1,,0,default
+26,"article_namespace == 0
+& !('autoconfirmed' in user_groups)
+& edit_delta > 1700
+& !( '==' in added_lines ) & !( '[[' in added_lines ) & !( '{{' in added_lines ) & !( '|' in added_lines )",1130897,Ruslik0,20090404191112,0,"Large-ish additions with no internal links or templates may be copyvios or other unconstructive additions.
+Testing for a while to see what it hits, might be something to tag or warn
+Changed edit_delta check to 1000 from 500
+restricted to new users/anons
+Changed the description to be more accurate.
+Changed edit_delta check to 1500 to reduce sensitivity a little
+switched on custom warning message
+bumped up to 1700 and added sections to the search strings
+switching off warn; by the looks of the log, most people are ignoring it anyway, would be nice if tag was more useful
+
+Reorder for efficiency. - DF
+
+Disabling for now, running slow and debatable usefulness - Hersfold
+
+Marked as deleted - Ruslik",Large unwikified additions by new user,0,548,0,1,,0,default
+369,"!(""confirmed"" in user_groups)
+& (article_namespace == 4)
+& (article_text like ""Articles for deletion*"")",258000,King of Hearts,20110310111517,0,"Creating as log only to test. – EdoDodo
+Disabled for performance. --zzuuzz
+
+Deleted. - KoH",New user editing AFD discussions,0,545,0,1,,0,default
+804,"!(""confirmed"" in user_groups) &
+article_namespace == 0 &
+added_lines irlike ""\bDonald|\bTrump""",14882394,MusikAnimal,20161111202340,0,To monitor for Trump-related vandalism following the election. Will disable in a day or so ~MA 2016.11.09,Mentions of Trump by new users,0,543,0,1,,0,default
+314,"(article_articleid == 0) &
+(article_text rlike ""^[^\/].*\/$"") &
+!(""bot"" in user_groups)",258000,King of Hearts,20120808231323,0,"-Log only. -X!
+-28 hits, Adding warning message. -X!
+-Ignores bots. -X!
+Optimized -- Shirik 6 Apr 2010
+-Ignore title if it starts with a / -X! 27 Apr 2010
+
+Not a big problem, disable (condition lim) -P
+
+Marked as deleted - KoH",User creates article ending with a /,0,532,0,1,warn,0,default
+82,"!(""autoconfirmed"" in user_groups) &
+(article_namespace == 0) &
+((added_lines rlike ""<nowiki>(?:.(?<!</nowiki>))*http://(?:.(?<!</nowiki>))*</nowiki>"") |
+(added_lines rlike ""<nowiki>(?:.)*4sh...d(?:.)*</nowiki>"")) &
+!(removed_lines rlike ""<nowiki>(?:.(?<!</nowiki>))*(?:.(?<!</nowiki>))*</nowiki>"")",8544547,Shirik,20100502011556,0,"Using nowiki on URLs bypasses the blacklist and is apparently being exploited by vandals (WP:RAF)
+
+No need to hide this. --Conti
+
+Disable, appears to be inactive (log only filter). If you are using this filter, please let me know, and I'll reenable it -Prodego
+
+Marked as deleted. - Ruslik
+Restored per a request on IRC related to WP:SPI/Wallflowers98. 4shared and http are searched for separately because not every line is going to contain either of them. This person wanted it on disallow, but I put log only because Im not 100% sure this is going to work the way we want. Please fix and/or revert if you see an error. -- Soap
+Filter is working, logs indicate it is correct, so I'm enabling 'prevent'. Please leave me a talk msg if you disable this. -- Tedder (2009-12-29)
+Slightly more general regex for 4shared links in the nowiki tag. -- Tedder (2010-01-01)
+See 278, could probably get thrown into here as well. --Q
+
+""No need to hide this. --Conti"" again - Prodego
+
+Disabling per WT:EF --NuclearWarfare
+Deleted, superseded by 278 -- Shirik 1 May 2010",Nowiki on urls,0,532,0,1,disallow,0,default
+195,"(article_articleid != 0) &
+(article_text != ""Michael Jackson"") &
+(action == ""edit"") &
+!(""autoconfirmed"" in user_groups) &
+contains_any(added_lines ,""jackson"",""michael jackson"") &
+!(contains_any(removed_lines ,""jackson"",""michael jackson"")) &
+!(contains_any(summary ,""reverted to"",""undid edit""))",5711305,Cenarium,20150212173400,0,"Hopefully intended to limit MJ-related vandalism, currently log&tag only. - Hersfold
+Clarify tag per Maxim - Hersfold
+Disabled, false positives -Maxim
+Removing anything that could potentially make a false positive, let's keep this simple. - Hersfold
+Hopefully this will keep it from triggering on edits that already mention MJ, and edits that are reverting vandalism. Also setting to trigger for new users only. Reenabling. - Hersfold
+
+Please format your tags properly, see at [[Special:Tags]]. - Cena
+
+False hits, hopefully died down now. Disabled. -Prodego
+
+unhiding details, marking as deleted. -xeno",Michael Jackson edit vandalism,0,532,0,1,,0,default
+489,,14882394,MusikAnimal,20160614033305,0,,"Long term IP-hopping abuse, more",1,530,0,1,,0,default
+828,"user_age == 0 &
+article_namespace == 3 & (
+ rmwhitespace(lcase(added_lines)) contains ""#redirect[["" |
+ summary contains ""Redirected page to""
+)",461626,Od Mishehu,20171102075753,1,"Built to prevent IP disruption of talk pages, tested at 773, will leave log only for a moment whilst it is discussed --Samtar 19/1/17
+
+Added_lines will need regex --Samtar 19/1/17
+
+use lcase(added_lines) to avoid use of regex engine, use_age == 0 for slightly better performance than testing ""user"" in user_groups (string comparison versus integer) ~MA 20167.01.20
+
+enabling disallow. --z
+
+Fixed to avoid FPs with section names starting with the word ""redirect"". --MusikAnimal
+
+Slight modification to allow for the absence of a space after the word ""redirect"". --Od Mishehu",Redirecting talk page,0,527,0,0,disallow,0,default
+438,"(article_articleid == 0) & !(user_groups rlike ""bot"") & (article_text rlike ""new\sarticle\sname\shere"")",258000,King of Hearts,20130404080939,0,"useful when they forget to set the article name
+:only new
+
+Not really helpful. Disabling. --Reaper 2012-08-17
+
+Mark as deleted. - KoH",Warn if create an article: Enter your new article name here,0,521,0,1,warn,0,default
+847,,365454,Zzuuzz,20181104193816,1,,Sandbox troll (WP:LTA/SBT),1,512,0,0,disallow,0,default
+661,"(article_namespace == 0) & (article_text rlike ""List of awards and nominations received"")
+& ((added_lines rlike ""=="") & (added_lines rlike ""wikitable|awards table"") & !(added_lines rlike ""<ref""))",10639536,Reaper Eternal,20150625135307,0,"log only to start -- Kww
+simplified wikitable check -- Kww
+added check for common template -- Kww
+tried to rearrange to avoid this ridiculous condition usage.
+stepped down to ""warn"" due to false positive --Kww
+back to blocking: false positive obviously uncommon --Kww
+
+Mainspace only; there were some false positives in userspace -- TTO
+
+Filter deleted. Completely inappropriate use of edit filter. --Reaper 2015-06-25",unsourced section added to awards article,0,495,0,1,"warn,disallow",0,default
+215,,8544547,Shirik,20100502011708,0,,AnonTalk 2,1,489,0,1,"throttle,disallow",0,default
+809,,365454,Zzuuzz,20181111190314,1,,SPI disruption,1,487,0,0,disallow,0,default
+829,,25420061,BU Rob13,20171014180255,0,,Possible article hijacking,1,487,0,0,,0,default
+742,,502540,Xaosflux,20190105155622,0,,BT UserTalkPage stalker,1,487,0,0,"throttle,disallow",0,default
+43,"!(""autoconfirmed"" in user_groups)
+& (""Articles for deletion"" in article_text)
+& !(removed_lines in added_lines)
+&
+(
+ count(""keep"",lcase(added_lines)) <
+ count(""keep"",lcase(removed_lines)) |
+ count(""delete"",lcase(added_lines)) <
+ count(""delete"",lcase(removed_lines)) |
+ count(""redirect"",lcase(added_lines)) <
+ count(""redirect"",lcase(removed_lines)) |
+ count(""merge"",lcase(added_lines)) <
+ count(""merge"",lcase(removed_lines))
+)",1130897,Ruslik0,20090928191833,0,"This filter tests if an edit by a non-autoconfirmed user lowers the amount of the most common types of ""votes"" in an AFD which is usually associated with attempts to change the outcome of the debate.
+(With thanks to Prodego for keeping me on my toes)
+
+Possible improvements: Further changes might involve including other user classes, adding warnings or disallowing the changes depending on how this will run and what the most common trigger events are.
+
+optimizing - Hersfold
+
+Unfortunately this filter also applies when a user removes their own !vote. - Ruslik0
+
+That's why I'm keeping it on logging such edits for further review. Without a way to distinguish between their own and other people's votes, there's no way to add consequences, although perhaps we could have a warning template and recommend strikethroughs instead (for their own votes). - ~~~~
+
+Simply format and cleaner syntax. -DF
+
+Optimize slightly by removing prefix. - KoH
+
+Optimize: Most new users commenting on AfDs don't do this, so check if it's simply adding a line. - KoH
+
+Disable, appears to be inactive. If you are using this filter, please let me know, and I'll reenable it -Prodego
+
+Marked as deleted. - Ruslik",New user removing AfD comments,0,480,0,1,,0,default
+770,"user_age == 0 &
+article_namespace == 0 & (
+ cdv :=""((causing|leading to) death|complications from|she bore him|her expecting parents|resting_place=cremated)"";
+
+ added_lines irlike cdv &
+ !(removed_lines irlike cdv)
+)",14882394,MusikAnimal,20180424233552,0,"Private testing of requested filter (Wikipedia:Edit_filter/Requested#Cause_of_death_vandal), likely to be moved to a LTA filter if proven --Samtar
+
+Made public after consideration and advice from MA --Samtar 30/06/16
+
+Disabled for now, vandal apparently has taken a break ~MA",Causing death vandal,0,474,0,0,,0,default
+393,"article_namespace == 0
+& !""autoconfirmed"" in user_groups
+& !article_text in added_lines
+& old_wikitext rlike ""[Cc][Aa][Tt][Ee][Gg][Oo][Rr][Yy]\:[Ll][Ii][Vv][Ii][Nn][Gg] [Pp][Ee][Oo][Pp][Ll][Ee]""
+& old_wikitext rlike ""[Ii][Cc][Ee] [Hh][Oo][Cc][Kk][Ee][Yy]""
+& (summary contains ""Career statistics"" | summary contains ""Regular season and playoffs"" | summary contains ""Regular season"" | summary contains ""Playoffs"")",3516226,Maxim,20110422015403,0,"WP:HOCKEY has a guideline that strongly discourages mid-season updates to player statistics,for consistency. This filter picks up on changes if the edit is made directly to the stats section by non-autoconfirmed users. Presently set to only log edits, might add a tag if the filter is particularly effective. --Maxim
+:Added more possible edit summaries. --Maxim
+::Messed something up...
+:::This should work now. --Maxim
+::::False positives, disable -P (was already fixed, undo) -P
+:Disable/delete, filter not particularly useful. --Maxim",Ice hockey statistics,0,469,0,1,,0,default
+221,,451766,Prodego,20091127160908,0,,Japanese police vandal,1,469,0,1,disallow,0,default
+738,,76,The Anome,20181028130738,1,,Frequently blocked user,1,451,0,0,disallow,0,default
+862,"ip_in_range(user_name, ""197.38.0.0/15"") &
+article_namespace == 0 &
+added_lines irlike ""[Ø¡-ÙŠ]""",7529026,There'sNoTime,20180619145747,1,"Created in response to a range of IPs adding phrases such as """"1010-142001ديÙد عبدالمØسن2017'"" to articles. Syntax by Samwalton9 so blame him if it breaks. Public, and logging only for a moment --TNT 10/7/2017
+
+Disabling, No longer being used according to TNT ~MA
+
+Enabling, started again --TNT 19/06/2018",Arabic string spam,0,442,0,0,,0,default
+835,,14882394,MusikAnimal,20181101022927,1,,Temporary vandalism II,1,437,0,0,disallow,0,default
+731,,12539517,Ryan Kaldari (WMF),20160818175917,0,,Reference desk trolling,1,436,0,0,,0,default
+925,,14882394,MusikAnimal,20180910193926,0,,Image vandalism,1,434,0,0,,0,default
+541,,14882394,MusikAnimal,20160614034004,0,,Open proxies,1,429,0,1,,0,default
+759,,14882394,MusikAnimal,20180107124939,0,,Digitalravan‎,1,423,0,0,disallow,0,default
+66,"!(""autoconfirmed"" in user_groups) &
+!(article_namespace = 0 | article_namespace = 10) &
+!((article_namespace = 2 | article_namespace = 3) & article_text = user_name)&
+(ccnorm(rmwhitespace(added_lines)) rlike ""\bP+O{2,}P"" ) &
+!(""poop"" in old_wikitext)",82835,Rich Farmbrough,20160818205325,0,"This is a testing filter to complement filter 46 with experimental settings.
+
+This filter is to stay on logging only with the idea of letting this run for a week and seeing what we catch. Filter 46 only looks for the instance of poop vandalism in template and mainspace. This is looking for the instance of it on all other pages excepting userspace and user talk when the user doing the edit ""owns"" the user page. (eg users can add poop to their own userpage).
+
+Disable. Do we need a three month ""test""? Looking to reduce the condition limit. -DF
+Marked as deleted. - Ruslik
+Updated for new ccnorm. RF 20160818",poop vandalism (testing for false positives),0,406,0,1,,0,default
+545,,10639536,Reaper Eternal,20140102181040,0,,British Railways/Bus vandal,1,405,0,0,,0,default
+133,"(article_namespace=0) &
+(new_size < 50000) &
+(new_html contains ""<strong class=\""error\"">Cite error"")",5711305,Cenarium,20090525144424,0,"Tests if an edit causes an error from any of the references.
+
+To cut down on load, only check articles. - DF
+
+-Disabled, I can't edit [[Timeline of United States inventions and discoveries]] and I imagine this is the reason. Testing if I can after disabling this. -Prodego
+
+> Re-enabled; this can't be the reason; it isn't tagged with ""disallow"" and you don't seem be currently blocked by any abuse filter. --Admiral Norton
+
+--Yep, this was it. -Prodego
+
+---It takes too long to parse large pages in to HTML (new_html), and then the edit times out. Disabled again, and if you reenable a filter disabled because it blocked editing, you had better know what you are doing, AND test if the article is editable (by a non-autoconfirmed editor). Clearly you didn't, so... -Prodego
+
+-Proving the point to Werdna that this blocks editing. -DF
+
+--And off again. -DF
+
+Adding size limit so the filter only checks articles smaller than 50k. Not activating yet. --Conti
+
+Isn't it ironic that this filter has 404 hits? --Stifle
+
+yes, it is :)
+mark as deleted, disabled for more than a month, no more discussion/testing - Cen",Broken references,0,404,0,1,,0,default
+919,,14836860,Cyberpower678,20180929131657,1,,Sockpuppetry from EnglishEfternamn,1,393,0,0,disallow,0,default
+947,,365454,Zzuuzz,20181221074306,1,,LTA 947,1,393,0,0,"throttle,warn",0,default
+931,,14882394,MusikAnimal,20190103063839,1,,Image vandalism I,1,383,0,0,"throttle,disallow",0,default
+311,,14882394,MusikAnimal,20160614031414,0,,Lewis Hamilton racism,1,382,0,1,"disallow,tag",0,default
+788,"article_articleid == 352651 &
+user_age == 0 &
+edit_delta < -200 &
+removed_lines irlike ""{{\s*pagelinks""",14882394,MusikAnimal,20170309083707,1,"Used to combat IPs disruptively removing reports from RFPP, batch tested, logging for a sec then disallow to stop an ongoing flood of abuse --Samtar 15/8/16
+
+Add e/d to reduce, still logging (as, typically, the abuse stops) Better bracketing --Samtar 15/8/16
+
+check article id first as that will cancel out more edits than checking if they're an IP, more at [[mw:Extension:AbuseFilter/Conditions]] ~MA 2016.08.15
+
+This doesn't seem to be targeted at any socks so I think it's OK for it to be publicly viewable. Also removing the now unneeded short-circuiting ~MA 2016.08.29",IP removing report from RFPP,0,374,0,0,disallow,0,default
+212,"(article_namespace == 3) &
+!(""autoconfirmed"" in user_groups) &
+!(""/*"" in SUMMARY) &
+((removed_lines in added_lines) | (old_size = 0)) &
+!(contains_any(added_lines, ""=="", ""{{"")) &
+!(user_name in article_text) &
+(count(""+:"", edit_diff) = count(""-:"", edit_diff))",258000,King of Hearts,20090830005619,0,"Filter designed to give new users a heads-up about using ""new section"" rather than ""edit this page"" on a talk page for a new message. ""/*"" and ""*/"" are used to negate creating a new section or replying to an existing message. Log-only for now. - KoH
+
+Please do not disable without contacting me first; this is a new filter, so it's obviously going to have some problems. -- KoH
+
+:There is a gazillion different reasons to directly edit a talk page. How are we going to differ between those and a new user who wants to create a new section but doesn't? --Conti
+
+Indeed there are a gazillion ways, so I'm leaving it in log mode for a while to check for possible false positives. - KoH
+
+:All of the hits I checked so far have either been false positives or plain vandalism. I doubt it will be possible to modify the filter to catch only what it is intended to catch. --Conti
+
+Hmm, let's see. About half are actual hits. I would say most of them show some indication of newbie behavior. The biggest false positive I see is giving warnings, so I've negated that. The two others I see are: 1) Colons at the beginning, indicating a reply. 2) removed_lines containing anything, indicating that the user is changing something. Do you know how to write up these two? - KoH
+
+Actually the existence of any template means they've got a clue. Changed ""{{subst:"" to ""{{"". - KoH
+
+Only need to flag them once, so negated user_name in article_recent_contributors. - KoH
+
+Figured out how to do it. - KoH
+
+The existence of a colon means 1) they're replying to a post 2) they have a clue. - KoH
+
+Save some time, unnecessary to check article_recent_contributors. - KoH
+
+Please see http://en.wikipedia.org/wiki/Wikipedia_talk:Edit_filter#Special:AbuseFilter.2F212 -xeno
+
+Renamed - better description I think. - KoH
+
+All right, I'll disable it. - KoH
+
+Marked as deleted. - KoH",New user placing comments without a header on user talk page,0,372,0,1,,0,default
+787,,20800274,BethNaught,20160814184338,1,,Spicy boy,1,370,0,0,disallow,0,default
+699,,15991542,Samwalton9,20160218130439,0,,3 edit link spam,1,363,0,0,,0,default
+751,,12539517,Ryan Kaldari (WMF),20160818181044,1,,Non-notable actor vandal/hoaxer,1,359,0,0,disallow,0,default
+295,,258000,King of Hearts,20120808231256,0,,Targeted vandalism by specific vandal,1,356,0,1,disallow,0,default
+505,"action == ""edit"" & summary rlike ""\[Via Mobile\]$""",5711305,Cenarium,20150212173600,0,Replaced with MobileFrontend functionality,Tag mobile edits,0,356,0,1,,0,default
+170,,1130897,Ruslik0,20100217194949,0,,Thailand vandal,1,352,0,1,,0,default
+578,,365454,Zzuuzz,20170402073922,0,,Sockpuppet vandalism,1,345,0,1,disallow,0,default
+171,"""{{dated prod"" in lcase(added_lines) &
+!""<nowiki>{{dated prod"" in lcase(added_lines) &
+!""{{dated prod"" in lcase(removed_lines) &
+old_size != 0 &
+! (
+ ""revert"" in lcase(summary) |
+ ""rv"" in lcase(summary) |
+ ""undo"" in lcase(summary)
+ )",1130897,Ruslik0,20090708123401,0,"This filter is designed to prevent users from placing Template:Dated prod directly on a page - in stead, they should use {{subst:prod}}. Will probably set this to warn. I've excluded reasons which seem to imply reverts.
+
+Added a condition to not catch reverts of blanking the entire page.
+
+Disabling, most of the hits seem to be reverts -Prodego
+
+The hits don't seem to be reverts - they seem to be the result of B19324. Will enable once that bug is fixed. -Od Mishehu
+Marked as deleted. - Ruslik",Direct use of Template:Dated prod,0,333,0,1,,0,default
+470,,10639536,Reaper Eternal,20140102175918,0,,Formula One Racing vandal,1,333,0,1,disallow,0,default
+948,"action == 'createaccount' &
+!('override-antispoof' in user_rights) &
+(
+ lcase(accountname) rlike ""[0-9\""\'\?\!\$\^\@\*\&[\[\]\(\)\{\};:, \-\+\~\#\=\\\|]{10,}""
+)",76,The Anome,20181219204805,0,Detects long strings of digits/punctuation in usernames. Logging only for the time being.,Long strings of digits/punctuation in usernames,0,331,0,1,,0,default
+442,,258000,King of Hearts,20120808231813,0,,Michigan IP hopper,1,329,0,1,"throttle,disallow",0,default
+575,,14882394,MusikAnimal,20160614034602,0,,User moved sandbox from user space,1,317,0,1,,0,default
+913,,764407,Kuru,20180722030313,0,,Wikipedia:Long-term abuse/Best known for IP (Secondary),1,311,0,0,,0,default
+523,,14882394,MusikAnimal,20160614033813,0,,Page creation spammer,1,306,0,1,disallow,0,default
+688,,7997523,GB fan,20150910185705,0,,Beals,1,303,0,0,,0,default
+909,,19818307,Crow,20181218190852,1,,Cutler Vandal,1,299,0,0,disallow,0,default
+114,,451766,Prodego,20091127160900,0,,sleeper socks,1,293,0,1,throttle,0,default
+937,,14882394,MusikAnimal,20181017194051,1,,Qwertywander long-term abuse,1,291,0,0,,0,default
+871,,19818307,Crow,20180930182420,1,,Sock Filter,1,284,0,0,disallow,0,default
+461,"action == 'feedback' &
+!""confirmed"" in user_groups &
+(article_namespace == 0 | article_namespace == 3) &
+(match := ""\bA+SS+[- ]?H+O+L+E+\b|BITCH|\b(C+O+C+|K+A+W+)K+S*\b|LOO+S+E+R+|[KC]UNT|DILDO|D+O+U+C+H+E+|EFF+ (Y+O+U+|U+)|F+U+(KK+|C+K|K+C)|HAGGER|HITLER|MENTALLY SICK|M(WA|U)HAHA|N+I+GG+(E+R+|A+H*)|N[A4]ZI|FAGG|PEA?N[UI1][S5]|S+L+U+T+|POOO+P?|W+H+O+R+E+|PERVERT|S+H+[1I]+T+|SOCK[ \-]?PUPPET|SUCK|VAGINA|WANK(A|ER|ING)|(W|WANKA)KNIGHT"") &
+(new_wikitext rlike match)",301395,NawlinWiki,20130411173111,0,"Adapted for AFTv5 from ""Vandalism in all caps""; running with logging only for testing purposes. -- rsterbin
+
+Changed the setting of this feedback filter to be included in the 'Feedback' filter group, which was recently implemented by Werdna (Andrew Garrett) to separate edit filter actions from feedback filter actions, so that feedback filters don't impact condition limits for edit filters. - Fabrice Florin - May 17, 2012
+
+Set to disallow, rather than auto-flag, because none of these obscenities seem appropriate to have in an article feedback comment. -- Fabrice Florin - 23 July, 2012
+
+Merged to 460. --Reaper 2012-08-17",Feedback: Vandalism in all caps,0,283,0,1,disallow,0,feedback
+213,,14882394,MusikAnimal,20141203172039,0,,Saban troll,1,281,0,0,disallow,0,default
+698,"/* Page is one of the following (using regex to specify inclusion of accompanying talk page) */
+article_prefixedtext irlike ""^((?:Talk\:)?Gamergate controversy|(?:Talk\:)?Nair|Vanniyar|Lists? of Palestinian rocket attacks on Israel|Killings and massacres during the 1948 Palestine war|Yom Kippur War|As'ad AbuKhalil|Jat people|Bhumihar|Brianna Wu)$"" & (
+/* ...and the account either has fewer than 500 edits or is < 30 days old */
+ user_editcount < 500
+ | user_age < 2592000 /* in seconds = 30 * 24 * 60 * 60 */
+)",365454,Zzuuzz,20170402074230,0,"This is to enforce the AE action from here:
+
+https://en.wikipedia.org/wiki/Wikipedia:Arbitration/Requests/Enforcement/Archive173#TheRedPenOfDoom.2C_third_filing
+
+which was challenged and upheld here:
+
+https://en.wikipedia.org/wiki/Wikipedia:Administrators%27_noticeboard/Archive272#Removal.2FModification_of_restrictions_on_editing_on_Talk:Gamergate_controversy
+
+and here:
+
+https://en.wikipedia.org/wiki/Wikipedia:Arbitration/Requests/Enforcement/Archive174#Arbitration_enforcement_action_appeal_by_Handpolk
+
+Very slight simplification. Optimize for conditions. Note that testing the explicit
+(article_prefixedtext irlike ""Gamergate controversy"" | article_prefixedtext irlike ""Talk:Gamergate controversy"") would actually be less efficient since it would take two tests for almost every edit, the current (and previous) version take 1.
+RF 20150718
+
+500/30 editing restriction has been expanded to other articles than just Gamergate, so we are going to share the same filter. Eventually we'll have a more specialized approach to allow this restriction to be added to *any* page without having to update the filter. ArbCom decision: [[Special:Diff/687039488]]. More info at [[Special:PermaLink/687582685]] [[Special:PermaLink/687564037#Caste_AE]]. Log only for the moment ~MA
+
+Warn/disallow ~MA
+
+No longer needed with new extended confirmed user group ~MA 2016.04.07
+Marked as deleted. zzuuzz 2 Apr 2017",500 edits / 30 days editing restriction,0,277,0,1,"warn,disallow",0,default
+10,,258000,King of Hearts,20120808231116,0,,Unusual change in title length,1,276,0,1,"warn,disallow",0,default
+192,"article_namespace ==0 &
+(""stubs]]"" in added_lines | ""stubs|"" in added_lines) &
+!(""stubs]]"" in removed_lines | ""stubs|"" in removed_lines) &
+! (
+ ""revert"" in lcase(summary) |
+ ""rv"" in lcase(summary) |
+ ""undo"" in lcase(summary)
+ )
+&
+ (old_size != 0 | article_articleid == 0)",258000,King of Hearts,20090830005509,0,"Disable. It doesn't really matter if the category is used directly, does it? -Prodego
+
+Marked as deleted. - KoH",Direct use of stub categories in articles,0,276,0,1,,0,default
+639,,855858,Beetstra,20181129210721,1,,persistent block evasion,1,272,0,0,disallow,0,default
+415,,258000,King of Hearts,20120808231618,0,,New user possibly editing an image on a template,1,270,0,1,disallow,0,default
+944,,14882394,MusikAnimal,20190105165750,1,,Image vandalism III,1,267,0,0,disallow,0,default
+916,,19818307,Crow,20180727162648,1,,LTA #916,1,264,0,0,disallow,0,default
+852,,14882394,MusikAnimal,20180503164107,0,,Birth/death place vandal,1,261,0,0,disallow,0,default
+889,,502540,Xaosflux,20190104181037,1,,Persistent PA,1,260,0,0,disallow,0,default
+389,,301395,NawlinWiki,20120202004752,0,,Attacks on user talk pages,1,258,0,1,"throttle,disallow",0,default
+177,,1130897,Ruslik0,20100808082118,0,,User:Television Radio,1,254,0,1,,0,default
+709,,502540,Xaosflux,20161113234140,0,,LTA filter,1,254,0,0,disallow,0,default
+331,,301395,NawlinWiki,20120202004540,0,,Megafauna vandal,1,249,0,1,disallow,0,default
+72,,1130897,Ruslik0,20100808081441,0,,Unusual move throttle,1,248,0,1,,0,default
+367,"article_namespace == 0
+& !""autoconfirmed"" in user_groups
+& ((rcount(""(</?nowiki>[A-Z])"",added_lines) - rcount(""(</?nowiki>)[A-Z]"",removed_lines))) >=3",461626,Od Mishehu,20111116104702,0,"It's been suggested that this is common in filter-breaking vandalism. Testing. - Someguy1221
+:Useful for catching copyvios, perhaps, but I dont think this should ever go ""disallow"" because 90% of the hits are false positives, and even if they are not always good edits, quite many of them are. -- Soap
+::Simplify regex. --Od Mishehu
+:::mostly false pos -disable -Prodego
+
+Deleted. - KoH",New users adding multiple nowiki groups to articles,0,246,0,1,,0,default
+617,"user_age = 0 &
+(
+ (
+ ip_in_range(user_name,""85.76.0.0/14"")
+ | ip_in_range(user_name,""91.154.0.0/16"")
+ ) &
+ article_text rlike ""Aguilera|Mariah Carey|Cyndi Lauper|Tinashe|Rihanna|Azalea|XCX|Minaj|Talk That Talk|I Hate Boys|Show Me How You Burlesque|Come On Over Baby|I Turn to You|Genie in a Bottle|Dirrty|Sweet Talker|Pills n Potions|Robyn|Russian Roulette|Black Widow|Paloma Faith|Furtado|Parking Lot|Big Hoops|Spirit Indestructible|The New Classic Tour|Ashanti|Only U|Un-Break My Heart|He Wasn't Man Enough|I Don't Want To|Crazy Stupid Love|Cheryl Cole|3 Words|Fight for This Love|Messy Little Raindrops|Wynter Gordon|Lindsay Lohan|A Perfect Contradiction|Toni Braxton|Colbie Caillat|With the Music I Die|Hilary Duff|Nicole Scherzinger|The Veronicas|Sound of a Woman|Madonna|Janet Jackson|Big Fat Lie|Jessie J|Miley Cyrus| Unfaithful (song)|Stefani|Baby Don't Lie|The New Classic|Amor Gitano|Geri Halliwell|ABBA|The Winner Takes It All|Knowing Me, Knowing You|I Do, I Do, I Do, I Do, I Do|Mamma Mia (song)|Kiesza|Fergie|Luxurious|Ciara|Pinkprint|Right Thru Me|On the Metro| I'm Into You|Destiny's Child|Samantha Sang|Take Care (song)|Promise This|Broke with Expensive Taste|Love?|Hold You Down|Jennifer Lopez|Jumpin', Jumpin'|Spice Girls|Halliwell|My Heart Is Refusing Me|Fergalicious|Return the Favor|Keri Hilson|Bed of Lies|Super Bass""
+)",15991542,Samwalton9,20150628135438,0,"Should have been ""Mariah Carey"", not ""Mariah|Carey"". Big difference
+
+Despite all the sound and fury on the internet fan boards, threatened wave has not materialized. Turning editcount threshold down to 5. -KWW
+
+Apparently all sound, no fury: restoring filter back to being a block on Mathias Sandell. - KWW
+
+Added new Finnish IP range - Kww
+
+Rearranged for efficiency
+
+-- temporarily disabled until I figure out the sudden rash of false positives
+-- trailing pipe character confusing things. Deleted, re-enabled filter
+
+Format for performance. -DF
+
+Made public. I see no reason to hide this filter from public view given that it is deleted. --Samwalton9, 28 June 2015",Mathias Sandell,0,242,0,1,disallow,0,default
+454,,258000,King of Hearts,20130404081123,0,,One time account spam bot,1,242,0,1,,0,default
+622,,14882394,MusikAnimal,20160614035415,0,,Genre edit-warring,1,235,0,1,disallow,0,default
+608,,301395,NawlinWiki,20140827012916,0,,Banned user,1,232,0,0,disallow,0,default
+383,,365454,Zzuuzz,20110419184841,0,,proxy vandalbot,1,230,0,1,,0,default
+902,,14882394,MusikAnimal,20180318173847,0,,Article creation as newly confirmed editor,1,230,0,0,,0,default
+56,,14882394,MusikAnimal,20181018235046,0,,Inappropriate CSS code in article space,1,229,0,0,disallow,0,default
+103,"!(""autoconfirmed"" in user_groups) &
+(article_namespace = 0) &
+(added_lines rlike ""{{Q\|.+?\|Oscar Wilde}}|A{10,} A{10,} A{10,}"") &
+!(old_wikitext rlike ""{{Q\|.+?\|Oscar Wilde}}|A{10,} A{10,} A{10,}"")",451766,Prodego,20090928230911,0,"Filter request. There is a disagreement over which namespaces this should apply to, so I am going to log everything for a while to try and see where the problem is.
+
+This seems unnecessary... Prodego
+
+:I'm somewhat inclined to agree, but the requester has a whole essay on why Uncyclopedia is evil, so I'd like to have a little data before drawing a firm conclusion. -DF
+
+::Meh... I'll go comment there. Also, change to check articles only -Prodego
+
+Last 20 or so hits all seem to be vandalism, setting to warn - 05/28/09 - Mr.Z-man
+
+:Added tag. --Drilnoth
+
+Optimizing - KoH
+
+Wilde quote OR Uncy/Wilde search. - KoH
+
+13 ms is way too long, and in the log I don't see Uncyclopedia used in conjunction with Oscar Wilde. What I am seeing is external links to Uncyclopedia. Correcting as such. - KoH
+
+Crap, forgot old_wikitext. - KoH
+
+I think my version is not bad, actually. If this goes for a week (8/19) without problems, I'll set to disable. Admittedly, my version has a lot of room for false negatives, which is why I set it to private. - KoH
+
+This filter should never be set to disallow, as there are (many) legitimate cases where one would add a link to uncyclopedia, and especially 'Oscar Wilde'. Also, set public, no need to hide this. -P
+
+There is no reason to add a quote template that isn't even a quote template. - KoH
+
+Setting to disallow, while making it even more tolerant of false positives. There should be no false positives now. - KoH
+
+Multi-A's are common UN vand. - KoH
+
+DO NOT SET THIS FILTER TO DISALLOW. There is no policy against adding uncyclopedia links, and no consensus to ban them, there are legitimate uses for them. Go get consensus. -Prodego
+
+Limiting scope. - KoH
+
+What the heck, this is catching absolutely nothing. - KoH",Uncyclopedia,0,229,0,1,warn,0,default
+493,,14882394,MusikAnimal,20160614033439,0,,New Rochelle Sock,1,229,0,1,,0,default
+901,"!""confirmed"" in user_groups &
+page_namespace == 0 & (
+ drumpf := ""Drumpf"";
+ trump := ""Trump"";
+
+ drumpf in added_lines &
+ !drumpf in removed_lines &
+ trump in removed_lines
+)",365454,Zzuuzz,20181210211356,1,"Warn-only, but prevented by 614.",Possible Drumpf plugin,0,228,0,0,warn,0,default
+757,,19285809,Jackmcbarn,20160515151910,1,,Persistent IP-hopping troll,1,228,0,0,disallow,0,default
+718,,19818307,Crow,20180929200924,1,,Prolific socker III,1,227,0,0,disallow,0,default
+854,"URLs := ""(routesonline.com|utiket.com|airlineroute.net)"";
+ip_in_range(user_name, ""223.206.0.0/16"") &
+rcount(URLs, removed_lines) > rcount(URLs, added_lines)",14882394,MusikAnimal,20180507162052,0,"Per https://en.wikipedia.org/wiki/Wikipedia_talk:WikiProject_Airports#IP_removing_refs
+
+Disabling, no hits in 3+ months ~MA",Airport ref removal,0,225,0,0,disallow,0,default
+115,,451766,Prodego,20091127160912,0,,sleeper socks II,1,225,0,1,"throttle,blockautopromote",0,default
+920,,14882394,MusikAnimal,20181220031632,0,,Possible sockpuppetry from EnglishEfternamn,1,225,0,0,throttle,0,default
+200,"(article_namespace == 0) &
+(contains_any(lcase(removed_lines), ""{{dated prod"")) &
+!(contains_any(lcase(added_lines), ""{{afdm"", ""{{db-"", ""#redirect"", ""{{dated prod""))",5711305,Cenarium,20150212173422,0,"Note: Removal of PROD templates is obviously allowed. However, this filter makes it convenient for a bot to catch instances where PROD templates are removed so that the user who originally added the PROD tag can be notified.
+
+Create per SoWhy's request on RAF. -- KoH
+
+Tested successfully. -- KoH
+
+!redirect. -- KoH
+
+!{{dated prod - allowing the user to change the PROD template. -- KoH
+
+lcase. -- KoH
+
+disabled. the filter was not designed to be a part and parcel of a bots operation. see also [[Wikipedia talk:EF#Filter 200]] -xeno
+
+Marked as deleted. - KoH",Removal of PROD templates,0,224,0,1,,0,default
+258,,82835,Rich Farmbrough,20160820182124,0,,General Tojo II,1,223,0,1,,0,default
+744,"article_namespace == 10 &
+(
+ user_editcount < 100 &
+ (
+ text_string:= ""<templatedata>"";
+ removed_lines irlike text_string &
+ (
+ !added_lines irlike text_string
+ )
+ )
+)",14882394,MusikAnimal,20161229052127,0,"Testing this implementation, could probably be more clever. --Samwalton9, 28 Dec 2015
+
+Disabling per request [[Special:Permalink/757169817#Please turn off 744]] ~MA 2016.12.29",Removal of TemplateData,0,222,0,0,,0,default
+19,"user_editcount < 50 & article_namespace == 0 & action = ""edit"" &
+lcase(added_lines) rlike ""\bindependence\s+of\s+pakistan|pakistan(\'s|)\s+independence"" &
+lcase(removed_lines) rlike ""\b(partition|division)\s+of\s*(british|)\s+india""",1130897,Ruslik0,20100106172826,0,"create, should be log only - Cenarium
+skip links in hidden messages - Cenarium
+
+added brackets - of course we need them to detect links - Rjd0060
+
+fixing what I think is the intended logic. -DF
+
+added wikipedia_talk and user_talk - Ruslik0
+
+Trying to optimize - Hersfold
+Adding non-admin check - Hersfold
+
+disable for performance reasons, in favor of a database report, not critical - Cenarium
+
+Marked as deleted. - Ruslik
+
+Created a new filter - Ruslik
+
+This is a very time-consuming filter -- let's see if adding an edit count helps. --NW 9/8
+
+rm unneeded parenthesis: also note the run time is average time, it will still be just as slow for those with < 75 edits. -Prodego
+
+Changed the number of edits to 50. - Ruslik
+
+Optimization. - Ruslik
+
+Seems to be only getting false positives now, disable -Prodego
+
+Marked as deleted. - Ruslik","Replacement of ""partition of India"" with ""independence of Pakistan""",0,221,0,1,,0,default
+166,,365454,Zzuuzz,20181104190546,0,,Singapore vandal,1,219,0,1,disallow,0,default
+710,,15991542,Samwalton9,20170512133554,0,,Muhammad vandal,1,219,0,0,disallow,0,default
+886,,11656865,L235,20181115202503,0,,LTA socking,1,217,0,0,"throttle,disallow",0,default
+426,,14882394,MusikAnimal,20160614032543,0,,TV station sockpuppeteer,1,215,0,1,,0,default
+640,"article_namespace == 0
+& article_text rlike ""List of awards and nominations received|Black Widow""
+& added_lines rlike ""VEVO|Vevo|vevo|KKIwpu2I6Mg|== Certified Awards ==""",15991542,Samwalton9,20150628135317,0,"Monitor only mode for now
+
+On articles only. No need to suppress all discussion of VEVO on the articles' talk pages. -- TTO
+
+Made public. I see no reason to hide this filter from public view. --Samwalton9, 28 June 2015",VEVO,0,213,0,1,"warn,disallow",0,default
+234,,258000,King of Hearts,20110310110753,0,,Alexcas11 sockpuppets,1,208,0,1,disallow,0,default
+928,"page_namespace rlike ""^(1|3|4|5)$"" &
+!contains_any(user_groups, ""bot"") & (
+ nope := ""{{\s*user(?:[\s_]talk)?:[^\/]*?}}"";
+
+ added_lines irlike nope &
+ !(removed_lines irlike nope)
+)",14882394,MusikAnimal,20180909185830,1,"Looks for accidental transcluding of user pages to wikipedia space, which can severely disrupt a page
+
+
+Log only testing to check for FP's; 20180821 ~Xaos
+
+Short-circuiting was added in MediaWiki 1.27, so you shouldn't need the extra parens. We're checking added_lines which I think would only correlate to edits (unless I'm missing something?), so no need to check if the action is an edit. ~MA
+
+shortened title for log entries ~Xaos
+
+Check all namespaces where pings are most likely to happen. Let's give this a go just to see what we're dealing with while we're in log-only, and we'll decide what namespaces to target after we have enough data ~MA
+:Changed title as it is multi-ns now. ~Xa",Transclusion of userpages,0,207,0,0,warn,0,default
+681,,100426,Smalljim,20150531155632,0,,possible vandalism in NS4,1,206,0,0,throttle,0,default
+465,,7852030,Materialscientist,20140823212744,0,,"FIFA IP hopper from Lima, Peru",1,201,0,0,disallow,0,default
+648,,14882394,MusikAnimal,20181023224322,0,,Long-term abuse using Korean,1,195,0,0,disallow,0,default
+808,,365454,Zzuuzz,20170509191107,0,,Dead rat/Woomoo vandal,1,194,0,1,disallow,0,default
+441,,82835,Rich Farmbrough,20160905181512,0,,Sports forum spammer,1,194,0,1,disallow,0,default
+210,,451766,Prodego,20090928231101,0,,MGM/other studio,1,193,0,1,,0,default
+917,,14836860,Cyberpower678,20181210172142,1,,Prevent the addition of Daniel C. Boyer,1,192,0,0,disallow,0,default
+287,,14882394,MusikAnimal,20180412195649,0,,Sanders conspiracies,1,190,0,0,disallow,0,default
+885,,3174456,Oshwah,20181219130402,1,,LTA 885,1,190,0,0,disallow,0,default
+469,,8544547,Shirik,20130718155314,0,,Shirik's Test Filter,1,190,0,1,,0,default
+811,,14882394,MusikAnimal,20180514225222,0,,Aaron Christopher,1,189,0,0,disallow,0,default
+597,,14882394,MusikAnimal,20170912210315,1,,Europefan,1,189,0,0,disallow,0,default
+424,,76,The Anome,20110828130927,0,,Repeatedly blocked user -- testing-only rule for filter 425,1,189,0,1,,0,default
+13,,82835,Rich Farmbrough,20160812192945,0,,Knave vandalism,1,188,0,1,"warn,disallow",0,default
+560,"!(""confirmed"" in user_groups)
+& (article_namespace == 0)
+& (lcase(added_lines) rlike ""truly (is|are|was|were) the"")
+& !(lcase(removed_lines) rlike ""truly (is|are|was|were) the"")",5711305,Cenarium,20150212181334,0,"Addition of phrases like ""this truly was the ..."" - Materialscientist 2013-06-04
+
+Add standard removed_lines exemption. - KoH
+
+Quick extension (sorry, no time to cleanup the code and balance the coverage vs false positives - the troll uses some other combinations of ""truly"") - MS 2013-06-05
+
+Mainspace only due to FPs. - KoH
+
+Looks like there's always going to be a higher FP rate than would be acceptable for disallow, but I think as it stands warn+tag should be OK. - KoH
+
+Optimize using regex. No need for private, it's obvious what this is trying to catch and is not designed to catch one highly determined user (the main reason for making private). - KoH
+
+Now that activity has subsided somewhat, make more restrictive to reduce FPs. - KoH
+
+Whoever was promoting this vandalism seems to have stopped. Disabled. --Reaper 2014-01-02
+
+unregistering the tag so it doesn't appear as using a tag in the list - cen","The ""truly"" vandal",0,185,0,0,warn,0,default
+865,,14882394,MusikAnimal,20170718220342,1,,maghsoudi,1,182,0,0,,0,default
+377,"article_namespace == 0
+ & !""autoconfirmed"" in user_groups
+ & (old_size == 0|edit_delta > 500)
+ & (rcount (""[a-zA-Z0-9]"", added_lines) / (length (rmwhitespace(added_lines)) + 1)) < 0.1",3315180,Someguy1221,20110107070532,0,"Testing possible addition to filter 346. - Someguy1221
+
+- Testing complete. Filter merged to 346. - Someguy1221",Large not english contributions 2 (test only),0,175,0,1,,0,default
+866,,14882394,MusikAnimal,20180424212727,0,,Temporary article title watch,1,173,0,0,,0,default
+666,,15991542,Samwalton9,20160628072635,0,,Aas Mohammad,1,172,0,0,disallow,0,default
+689,"article_namespace == 0 & (
+ !""confirmed"" in user_rights & (
+ added_lines irlike ""chicken fuck|sex with chicken|fucking chicken|fucks chicken|chicken f\*\*ker""
+ )
+)",14882394,MusikAnimal,20160614040958,0,"Vandalism, see [[Wikipedia:Administrators'_noticeboard/Incidents#.22Chicken_fucker.22_vandalism]], likely only needed for a short time. --Samwalton9, 18 May 2015
+
+Some better regex from PhantomTech & some permutations of the vandalism. --Samwalton9, 18 May 2015
+
+""Fake chicken"" was an unlucky false flag, fixed. --Samwalton9
+
+requested, to fix a false positive, see diff# 663021994 -- Soap
+
+Removed huge regex, too many false positives for it to be useful. --Samwalton9, 19 May 2015
+
+Moved to filter 614
+FP rate is sufficiently low to add warn+tag. - KoH
+Recuce condition count. RF 2015-07-14",Chicken fucker vandalism,0,170,0,1,"warn,tag",0,default
+161,"(article_namespace == 0) &
+!(user_groups contains ""user"") &
+(edit_delta > 0) & (edit_delta < 80) &
+(count(""[["", added_lines) - count(""[["", removed_lines) > 7)",1130897,Ruslik0,20090617131429,0,"Based upon a request at the WP:AF/R page --Admiral Norton
+
+Restricted it to ""small"" edits. -DF
+
+Articles only. -DF
+
+Disabled, per RAF, too many false positives to be useful. -DF
+
+Marked as deleted. - Ruslik",Overlinking,0,169,0,1,,0,default
+790,,14882394,MusikAnimal,20170325041629,0,,Nationality inventions,1,162,0,0,,0,default
+798,"action == ""upload""
+& user_editcount < 20
+& (lcase(new_wikitext) rlike ""http(|s):\/\/(|[a-z-A-Z-0-9]{1,5}\.)(sp\.yimg|gettyimages|jimdo|google|gstatic|scribd|tumblr|blogspot|newswire|wordpress|technorati|blog|bravesites|weebly|mylivepage|huffingtonpost|newswire|pinterest|mblog|composearticle|sbwire|webstarts|blogsome|guestbloggernetwork|ebay|yelp|postbit|over-blog|businesswire|amazon|amazonaws|journalspace|weebly|prlog|blogmonster|sitew|bloggspace|wonderhowto|imgur|kaaslaam|beeplog|jux|tripadvisor|buzzfeed|evenweb|skyrock|webnode|rollr|webgarden|newgenevablog|hazblog|prweb|soup|storify|blogs\.ideal|tiltblog|ning|blogymate|pixnet|bongdanews|blogaja|blogcindario|squidoo|zendesk|blinkweb|pageeasy|mywapblog|gettingaheadblog|flavors|yolasite|eklablog|blogdetik|blogs\.sapo|beep|wix|paperideas|docspal|hpage|behance|purevolume|bloguedoido|bloggplatsen|bloguedemusica|bloguepessoal|blinkweb|jigsy|edublogs|canalblog|blox|bloog|sosblogs|moonfruit)\.[a-z]{2,4}"")
+& !(new_wikitext irlike ""(cropped|otrs *pending|flickrreview|licensereview|pd-old|pd-simple|pd-text)"")",3596390,Billinghurst,20161010230835,1,"[[Commons:Abuse filter/Automated copyvio detection]]
+------------
+Created. --Steinsplitter
+
+Imported from Commons to measure the issue here. Part of a request to blacklist ""images.google.(tld)/imgres?"" as it can be abused as a redirect.
+
+Extent of problem at [[Special:Search/insource:%22/imgres%3F%22]]
+
+-- billinghurst 20161010",Possible copyvio for image upload,0,162,0,0,,0,default
+676,,14882394,MusikAnimal,20180222215913,0,,Highway vandal,1,160,0,0,disallow,0,default
+722,"user_editcount < 25
+&
+ (
+ match2:=""please accept"";
+
+ summary irlike match2
+
+ )",7997523,GB fan,20170207181842,0,no need for this to be enabled any longer,Please Accept,0,158,0,0,,0,default
+235,"!(""autoconfirmed"" in user_groups) &
+(article_namespace == 0) &
+(lcase(added_lines) rlike ""\b((yo)?ur|yo'?) ?(mom(my)?|mama|mother|dad(dy)?|papa|father|bro(ther)?|sis(ter)?)('?s)?\b"") &
+!(lcase(old_wikitext) rlike ""\b((yo)?ur|yo'?) ?(mom(my)?|mama|mother|dad(dy)?|papa|father|bro(ther)?|sis(ter)?)('?s)?\b"")",451766,Prodego,20090928231159,0,"Addition of ""your mom"" jokes. - KoH
+Possessive form. - KoH (1.97)
+Adding two levels of parenthesis to take advantage of short-circuit evaluation to only activate the regex check when both initial checks are true. -- AA (1.99)
+Rv, it doesn't seem that short-circuit logic makes it any shorter. - KoH
+Yo-Yo Ma, LOL. - KoH
+Mommy, daddy. - KoH
+Enough samples to work off of. Disabling. - KoH",Your mom jokes,0,157,0,1,,0,default
+674,"!""confirmed"" in user_groups & (
+ article_namespace == 0 & (
+ added_lines irlike ""brian( touche| Toussaint| Tousaint| To us saint| T.| T| Tousche)* thompson""
+ & (
+ added_lines irlike ""\|\s*key_people\s*=|\|\s*owner\s*=""
+
+ )
+ )
+)",15991542,Samwalton9,20161015072323,0,"Long term vandal, log only for now. --Samwalton9, 29 March 2015
+
+11:22 to 13:00 31 March are false flags due to a bad syntax change. --Samwalton9, 31 March 2015
+
+Restricted to new users and IPs. RF 20150714
+Swop ""added_lines"" tests, more unusual first.",Long term infobox vandal,0,156,0,0,disallow,0,default
+906,,19818307,Crow,20180721164347,1,,Alan Jackson Vandal,1,154,0,0,disallow,0,default
+745,,502540,Xaosflux,20170228011409,0,,Talk page abuse,1,154,0,0,,0,default
+63,,451766,Prodego,20091127160855,0,,Abusive unblock denials,1,150,0,1,disallow,0,default
+278,,301395,NawlinWiki,20120202004634,0,,Possible copyright violations,1,149,0,1,,0,default
+104,"!(""sysop"" in user_groups) &
+(article_namespace == 0) &
+(contains_any(added_lines,""{{helpme}}"",""{{adminhelp}}""))",5711305,Cenarium,20150212173322,0,"Templates which should never be used in mainspace, there are probably more - Jac
+
+: Fixing regex. -DF
+
+:Merging from 127 to include any content (non-talk) namespace - Hersfold
+:Adding warning message - Hersfold
+
+Added tag. --Drilnoth
+
+Disabled per talk page discussion. Very expensive and by their nature the helpme tags will draw users' attention to their erroneous usage. -x
+
+Marked as deleted. - KoH",Helpme and Adminhelp,0,149,0,1,warn,0,default
+168,"!(contains_any(user_groups,""sysop"",""bot"")) &
+
+article_namespace == 3 &
+
+article_text != user_name &
+
+(rcount(""{{(U|u)nblock(-(auto|bot|ip|un))?( on hold)?\|"",old_wikitext)>0 &
+ rcount(""{{(U|u)nblock(-(auto|bot|ip|un))?( on hold)?\|"",new_wikitext)==0)",258000,King of Hearts,20090830005433,0,"Since, in general, only admins should respond to unblock requests, I have decided to create this filter. If the false positive rate is small enough, it should be warn (or maybe even disallow). Bots are excluded, in order to allow anti-vandalism bots to revert aparent vandalism which contains an unblock request.
+
+This should be merged to filter 63 --zzuuzz
+
+Actually, filter 63 is designed against abusive responses; this one is designed against potentially good faith responses. It may be the case that this will never be set to disallow, while 63 should definitely be. Od Mishehu
+
+Switched to contains_any. - Ruslik
+
+Unneeded, already seen by a bot. Disabled. -Prodego
+
+Marked as deleted. - KoH",Non-admins responding to unblock requests,0,148,0,1,warn,0,default
+542,,14882394,MusikAnimal,20160614034012,0,,Open proxies II,1,147,0,1,,0,default
+240,"(article_namespace == 0)
+& (added_lines rlike ""{{lifetime\|"")
+& ((old_wikitext rlike ""{{DEFAULTSORT:|\[\[Category:Year of (dea|bir)th missing|\[\[Category:Living people\]\]|\[\[Category:\d+ (dea|bir)ths\]\]"")
+| (new_wikitext rlike ""{{DEFAULTSORT:|\[\[Category:Year of (dea|bir)th missing|\[\[Category:Living people\]\]|\[\[Category:\d+ (dea|bir)ths\]\]""))",451766,Prodego,20091127160918,0,"Testing to see how extensive the problem is.
+Problem more or less gone.",Used lifetime over/with/as well as existing apparatus,0,147,0,1,,0,default
+185,"action == 'move' &
+( ! ""autopatrol"" in user_rights &
+ ( moved_from_namespace != moved_to_namespace
+ )
+)",365454,Zzuuzz,20181104190717,0,"Non-admin cross-namespace move, may be tagged - Cen
+
+:Non admins do this all the time. Disabled. Talk to me please. -Prodego
+Marked as deleted. - Ruslik
+
+Re enabling for testing mainly, to see what we would get if this was implemented as a core tag. The check is for autopatrol, instead of admin. - Cen 26/4/15",Cross-namespace move,0,146,0,1,,0,default
+430,,258000,King of Hearts,20130404080919,0,,Various socking spammers,1,145,0,1,disallow,0,default
+737,,14882394,MusikAnimal,20180314041327,0,,Christ the Logos,1,145,0,0,disallow,0,default
+876,,502540,Xaosflux,20190104181014,0,,Derp III,1,144,0,0,"throttle,warn",0,default
+785,,14882394,MusikAnimal,20160818213434,0,,Template doc vandalism,1,139,0,0,,0,default
+125,"!(contains_any(user_groups,""rollbacker"",""checkuser"",""oversight"",""sysop""))
+/*Ignoring insertion of common repetitive characters on their own*/
+& !(added_lines rlike ""([-\s\|:]{4,25})\1\1\1"")
+/* Check repetition of any phrase of 3-25 characters that is repeated 4 times and not previously excluded */
+& (added_lines rlike ""([\w\s!]{3,25})\1\1\1"")",1130897,Ruslik0,20090429124019,0,"This regex logs edits that enter the same 4-25 character phrase at least 4 times in a text.
+Keeping in log-only to check for false positives.
+Was based on http://en.wikipedia.org/w/index.php?title=Kinship&diff=280722645&oldid=279106143 and the related request by the same anon at WP:FALSEPOS.
+
+rlike is much nicer on the execution than rcount if the intention is to fine 1 or more. -DF
+
+Oops, I broke it. My bad. About 40 bad matches. -DF
+
+Faster to assume the pattern starts with non-whitespace than to go back and exclude all whitespace matches. -DF
+
+Ignoring checkusers oversighters or admins who are more likely to post multiple votes in arbitration cases. False positive based on log entry of edit by [[User:Roger Davies]]. --Mgm
+
+Added character that caused false positive for [[User:B. Fairbairn]] on their talk page. Maybe changing how often it can appear later on. --Mgm
+
+renaming --Mgm
+Revert to previous format to avoid false negatives caused by one space at the start of line. --Mgm
+Additional time did not increase the runtime of the filter. - Mgm
+
+Disabled false positives increasing somehow -- Mgm
+Fixed -- Mgm
+Disabling again. I'm seeing some odd hits and I don't have the time to keep monitoring. Please keep this disabled until I'm back. - Mgm
+
+Marked as deleted. - Ruslik",Insertion of repeated phrases,0,138,0,1,,0,default
+653,,15991542,Samwalton9,20150730223741,0,,Infobox vandal,1,136,0,0,disallow,0,default
+190,,251289,Tedder,20091218070146,0,,CrabCore (4chan) - [[Special:Contributions/70.122.90.204]],1,134,0,1,disallow,0,default
+743,,14882394,MusikAnimal,20180212172048,0,,Prolific socker IV,1,133,0,0,disallow,0,default
+439,,258000,King of Hearts,20130404080945,0,,Chaosname,1,132,0,1,disallow,0,default
+881,,7586,Cyp,20180420054127,1,,Excessive scatology,1,131,0,0,disallow,0,default
+492,,76,The Anome,20120924064810,0,,Check for possible persistent IP-hopping abuse,1,131,0,1,,0,default
+855,,365454,Zzuuzz,20181104193922,0,,LTA (Georgia),1,129,0,1,disallow,0,default
+734,,14882394,MusikAnimal,20171204231846,0,,McAusten,1,127,0,0,disallow,0,default
+848,"user_editcount < 50 & (
+ edit_delta > 400000 | (
+ article_namespace == 3 &
+ rcount(""\[\[(File|Image):"", added_lines) - rcount(""\[\[(File|Image):"", removed_lines) > 10
+ )
+)",14882394,MusikAnimal,20170505042534,0,converted to test variation of filter 812,Large contributions test filter,0,126,0,0,,0,default
+373,,1257855,Gogo Dodo,20120807052549,0,,Mario96,1,125,0,1,,0,default
+767,,19818307,Crow,20181219232350,1,,Prophecy spam,1,124,0,0,disallow,0,default
+564,,10639536,Reaper Eternal,20140102181617,0,,block evasion,1,123,0,1,disallow,0,default
+513,,82835,Rich Farmbrough,20160929181639,0,,Persistent talk page abuse from IP ranges II,1,122,0,1,disallow,0,default
+250,,258000,King of Hearts,20110310110912,0,,Combined pagemove/edit summary vandalism,1,122,0,1,disallow,0,default
+44,,1130897,Ruslik0,20090807112546,0,,MAM vandalism,1,121,0,1,,0,default
+144,"(user_editcount < 20) &
+!(article_namespace == 10) &
+!(""Sandbox"" in article_text) &
+!("".css"" in article_text) &
+!(user_name in article_text & (article_namespace == 2 | article_namespace == 3)) &
+""visibility:hidden"" in added_lines &
+!(""visibility:hidden"" in removed_lines)",1130897,Ruslik0,20100106173410,0,"Filter to (eventually) disallow attempts to hide the content of a page with HTML tags. Will trip for new and unregistered users. - Hersfold
+Disabling for .css pages and own userspace, see log for a long list of false positives relating to that. Also setting it to ignore if the visibility thing was already there. - Hersfold
+
+Looking good with those changes, will enable warning on next hit if it's valid. - Hersfold
+Adding line to stop tripping on sandboxes - Hersfold
+Disabling for templates as well, since there appears to be some valid use there. Did get another true positive, though. - Hersfold
+Fixing to stop tripping on user talk as well, that was dumb - Hersfold
+
+Simplify. Anons have edit count 0 always. -DF
+
+No need for this to be private - Prodego
+
+Only catches a few bad-faith edits per month. Disabling. -Wknight94
+
+Marked as deleted. - Ruslik",Hiding content of pages,0,120,0,1,,0,default
+838,"page_id == 5030553 &
+added_lines irlike ""==\s*Hello\s*World\s*==""",502540,Xaosflux,20181113040819,1,"page_id == 5030553 is Talk:Main Page
+
+Multiple sources seem to have published a link to the english wikipedia to write via the api sandbox. -- Xaosflux",Main page hello worlds,0,119,0,0,warn,0,default
+453,,258000,King of Hearts,20130404081115,0,,Temporary block on making specific kinds of template edits,1,119,0,1,"warn,disallow",0,default
+596,,14882394,MusikAnimal,20160812035607,0,,Elevator vandal,1,117,0,0,disallow,0,default
+281,,9804621,Triplestop,20100108215922,0,,Unwatched BLPs,1,115,0,1,,0,default
+723,,14882394,MusikAnimal,20160914172157,0,,MusikAnimal's test filter,1,115,0,0,,0,default
+706,,7529026,Samtar,20160925183649,0,,Dutch football vandalism,1,113,0,0,disallow,0,default
+455,,855858,Beetstra,20120602063353,0,,Bahrani,1,113,0,1,disallow,0,default
+434,,14882394,MusikAnimal,20160614032622,0,,Roman vandal,1,112,0,1,,0,default
+769,,20800274,BethNaught,20180403064325,0,,AfD nomination harassment,1,110,0,0,disallow,0,default
+665,,14882394,MusikAnimal,20150807184304,0,,revescom,1,109,0,0,disallow,0,default
+797,,14882394,MusikAnimal,20161009215924,1,,Synth LTA,1,108,0,0,disallow,0,default
+936,,14882394,MusikAnimal,20181014164944,1,,LTA 936,1,108,0,0,disallow,0,default
+604,"lcase(new_wikitext) rlike ""([^aeiou0-9]\B|;)j(;|\B[^aeiou0-9])"" & lcase(new_wikitext) rlike ""([^aeiourstlncw0-9]\B|;)k(;|\B[^aeiouynr'0-9])""",3855926,Legoktm,20140303202400,0,"Request of Jackmcbarn https://en.wikipedia.org/w/index.php?title=User_talk:Legoktm&oldid=prev&diff=592410807 -- Legoktm
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Keyboard mashing,0,107,0,1,,0,default
+663,"regexstr := ""\|\s*genre\s*=.*techno.*(?:\n|\|)"";
+
+article_namespace == 0 &
+(
+ ! ""user"" in user_groups &
+ (
+ rmwhitespace(added_lines) irlike regexstr &
+ (
+ !(rmwhitespace(old_wikitext) irlike regexstr) &
+ (
+ ip_in_range(user_name, ""141.237.0.0/16"")
+ | ip_in_range(user_name, ""79.166.0.0/16"")
+ | ip_in_range(user_name, ""5.54.0.0/16"")
+ | ip_in_range(user_name, ""5.55.0.0/16"")
+ | ip_in_range(user_name, ""46.176.0.0/16"")
+ | ip_in_range(user_name, ""46.177.0.0/16"")
+ )
+ )
+ )
+)",15991542,Samwalton9,20150726191722,0,"See [[Wikipedia:Long-term_abuse/Techno_genre_warrior_from_Greece]] for details. Log only for now. --Samwalton9, 14 February 2015
+
+Performance / condition count related layout changes. -DF
+
+!removed_lines irlike ""techno"" to only check additions -- Samwalton9, 15 March 2015
+
+Per [[WP:EF/R]] discussion, setting to disallow. --Samwalton9, 7 April 2015
+
+Disabling, seems to be over. --Samwalton9, 26 July 2015",Techno genre warrior,0,107,0,0,disallow,0,default
+690,"user_editcount < 50 & (
+ name:=""smooth(est)*(\s|_)*aashu|Aasheesh(\s|_)*Sain|ashish sen"";
+ user_name irlike name | (
+ added_lines irlike name
+ )
+)",15991542,Samwalton9,20170512133607,0,"See [[Wikipedia:Sockpuppet investigations/Smoothestaashu007]]. Log only for now. --Samwalton9, 25 May 2015
+Move variable declaration inside scope. RF 20150812
+
+Fix whitespace/underscore loophole found by the latest sock. BethNaught 2016-03-20 16:12",Smoothest Ashu,0,107,0,0,disallow,0,default
+201,,258000,King of Hearts,20130414054340,0,,KoH test filter,0,106,0,0,,0,default
+288,,82835,Rich Farmbrough,20160824183226,0,,IP reverting/wikistalking by banned user,1,105,0,1,disallow,0,default
+266,,82835,Rich Farmbrough,20160823115247,0,,Anti-fundraising trolling,1,104,0,1,,0,default
+506,,10639536,Reaper Eternal,20140102180029,0,,Broadway Hoaxer,1,104,0,1,disallow,0,default
+507,,82835,Rich Farmbrough,20160929181209,0,,Vandalism,1,100,0,1,disallow,0,default
+306,,258000,King of Hearts,20120808231304,0,,URL obfuscators,1,98,0,1,disallow,0,default
+843,"!(""confirmed"" in user_groups) &
+added_lines rlike ""#REDIRECT\s*\[\[Donald[\s_]Trump\]\]"" &
+!removed_lines rlike ""#REDIRECT\s*\[\[Donald[\s_]Trump\]\]""",14882394,MusikAnimal,20170628192710,1,"May I ask why this filter was put into existence?
+
+https://en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard/Incidents&oldid=768100852#Vandal_redirects_to_Donald_Trump
+
+Allowing edits to existing redirects. Od Mishehu
+
+-The public description and obvious patter precludes needed to be a private filter - X
+
+Disruption seems limited to unconfirmed users, and there were a few false positives with confirmed accounts. Also checks against added/removed lines should do the job which is much less expensive than checking the entire wikitext ~MA",Prevent new users from creating redirects to [[Donald Trump]],0,98,0,0,disallow,0,default
+78,"!(""user"" in user_groups) &
+(contains_any(added_lines,'Good post, admin.','Good site, admin.'))",1130897,Ruslik0,20090517153625,0,"deals with spambot like this http://en.wikipedia.org/w/index.php?title=Help_talk:Subpage&diff=prev&oldid=278668623
+
+enabling with 'warn', that should be enough to stop the bot
+--Chris G
+
+Marked private. --Maxim
+
+Private in unnecessary for this filter, removed (it's dead obvious what sets off this filter anyway) --Chris G
+
+Updated to look for 'Good site, admin.' as well, per http://en.wikipedia.org/w/index.php?title=Sign_(disambiguation)&diff=prev&oldid=279779414 --Chris G
+
+Disabling, no hits in over 3 weeks. I'd assume they either stopped or changed the pattern to something else. Re-enable if they come back. -DF
+
+Marked as deleted. - Ruslik",Cross-wiki malbot vandals,0,98,0,1,,0,default
+175,,1130897,Ruslik0,20091003121109,0,,pioneer courthouse sockfarm vandalism,1,98,0,1,,0,default
+818,,7852030,Materialscientist,20170116052714,0,,Old enemy,1,97,0,1,disallow,0,default
+385,,258000,King of Hearts,20120808231407,0,,Prevent new users from making mass pagemoves,1,96,0,1,"throttle,disallow",0,default
+450,,258000,King of Hearts,20130404081101,0,,Vandalizing date articles,1,96,0,1,,0,default
+509,,14882394,MusikAnimal,20160614033636,0,,Long-term pattern abuse III,1,91,0,1,disallow,0,default
+634,,14882394,MusikAnimal,20160614035827,0,,Long-term sock attack,1,90,0,1,"warn,disallow",0,default
+229,,451766,Prodego,20091127160918,0,,Hidden comments by new users,1,90,0,1,"throttle,warn,disallow",0,default
+625,"!""autoconfirmed"" in user_groups
+ & article_namespace == 0
+ & added_lines irlike ""(\W|^)y+o+l+o+(?! county)|(^|\W|mc)(?<!jack )s+w+a+g+""",14882394,MusikAnimal,20140928195427,0,"More strict version of Filter 614, log-only to see how many false positives we get ~ MusikAnimal 2014.08.05
+
+Fix - remove allowed spacing between letters in regex
+Negative lookbehind for Jack, the wrestler
+Negative lookahead for Yolo County ~ MusikAnimal 2014.08.06
+
+Disabling for now, I will try to tweak better at a later time. Far too many false positives as it stands now. ~ MusikAnimal 2014.08.07",Yolo Swag 2,0,89,0,1,,0,default
+516,,14882394,MusikAnimal,20160614033733,0,,Celebrity vandal,1,88,0,1,disallow,0,default
+583,,10639536,Reaper Eternal,20140102182326,0,,Serial sockpuppet article creations,1,87,0,1,,0,default
+595,,365454,Zzuuzz,20181104191245,0,,Animal welfare IP hopper,1,86,0,1,"warn,disallow",0,default
+71,,301395,NawlinWiki,20090320184133,0,,Unusually long pagemove edit summaries,1,84,0,1,throttle,0,default
+844,,14882394,MusikAnimal,20170716153910,0,,Test filter,1,84,0,0,disallow,0,default
+140,,451766,Prodego,20090928231118,0,,Long-term harassment case,1,84,0,1,disallow,0,default
+703,"(user_age == 0)
+& (article_namespace == 0)
+& (summary == article_text)",8834,Darkwind,20150713211356,0,"Intended to catch IP-hop vandal adding unsourced information to actor/film articles. --Darkwind 2015-07-02
+
+Not useful, too many false positives (although possibly useful as a ""please provide a more useful edit summary"" kind of warning?) Deleting. --Darkwind 2015-07-13",Edit summary only consists of article title,0,82,0,1,,0,default
+725,,15991542,Samwalton9,20151114190802,0,,Long term title vandal,1,82,0,0,disallow,0,default
+228,,82835,Rich Farmbrough,20160820181427,0,,AnonTalk 3,1,82,0,1,,0,default
+557,,82835,Rich Farmbrough,20161012203159,0,,Freewill vandal,1,80,0,1,disallow,0,default
+165,,429625,Amalthea,20090512070119,0,,Image vandalism,1,79,0,1,disallow,0,default
+800,,7529026,There'sNoTime,20170315083000,0,,ranpini,1,78,0,0,disallow,0,default
+779,,20800274,BethNaught,20160824134445,0,,Manga EL spam,1,77,0,0,disallow,0,default
+525,,10639536,Reaper Eternal,20140102180250,0,,Sock vandal User:Danrolo,1,77,0,1,disallow,0,default
+305,,301395,NawlinWiki,20100404194255,0,,Potential sleeper accounts,1,77,0,1,"throttle,disallow",0,default
+576,,14882394,MusikAnimal,20160614034611,0,,Dantherocker1,1,77,0,1,disallow,0,default
+116,,365454,Zzuuzz,20170402073422,0,,Persistent vandal creating redirects,1,77,0,1,disallow,0,default
+888,,141948,Amorymeltzer,20181208131357,0,,IP bot editing,1,77,0,0,disallow,0,default
+131,"(article_namespace == 0) &
+!(""sysop"" in user_groups) &
+(article_text == ""Muhammad"" |
+ article_text == ""Temple garment"" |
+ article_text == ""Endowment (Latter Day Saints)"" |
+ article_text == ""Rorschach test""
+) &
+(
+ (rcount(""([Ii]mage|File)[:=](Siyer-i[ _]Nebi[ _]151b\.jpg|Siyer-i[ _]Nebi[ _]298a\.jpg|Maome\.jpg|Mohammed[_ ]kaaba[_ ]1315\.jpg|Gagarin[_ ]PropovedMagometGRM\.jpg|Mormon[_ ]garments\.jpg|Garment\.jpg|Mormon[_ ]woman's[_ ]temple[_ ]clothing[_ ]circa[_ ]1870s\.jpeg|Rorschach[_ ]blot[_ ][01][0-9]\.jpg)"",removed_lines)) !=
+ (rcount(""([Ii]mage|File)[:=](Siyer-i[ _]Nebi[ _]151b\.jpg|Siyer-i[ _]Nebi[ _]298a\.jpg|Maome\.jpg|Mohammed[_ ]kaaba[_ ]1315\.jpg|Gagarin[_ ]PropovedMagometGRM\.jpg|Mormon[_ ]garments\.jpg|Garment\.jpg|Mormon[_ ]woman's[_ ]temple[_ ]clothing[_ ]circa[_ ]1870s\.jpeg|Rorschach[_ ]blot[_ ][01][0-9]\.jpg)"",added_lines))
+)",451766,Prodego,20091127160905,0,"RAF. Prevents addition or removal of certain controversial images from specific targeted articles.
+
+Modified to prevent people from adding content that would then be difficult to remove.
+
+I added images of Rorschach blots. - Ruslik
+Removed \[.- Ruslik
+Added [_ ]. - Ruslik
+Changes to prevent removal of overlay image. - Ruslik
+
+People tend to watch controversial images, so this shouldn't be needed. Rarely triggered too. Disabled. -Prodego",Removal of controversial images,0,76,0,1,"warn,disallow",0,default
+694,"(
+ moved_from_namespace == 828 &
+ !(moved_from_title rlike ""/doc$"")
+) ^ (
+ moved_to_namespace == 828 &
+ !(moved_to_title rlike ""/doc$"")
+)",14882394,MusikAnimal,20181023223653,1,"These types of moves don't do what users expect because of how content models work, and it breaks things in a way that requires admins to fix. Disallow and explain why. (At some point, I'd like to make MediaWiki itself do this rather than needing a filter for it.)",Moves to or from the Module namespace,0,74,0,0,disallow,0,default
+585,,10639536,Reaper Eternal,20140102182111,0,,New user removing own name from AIV,1,72,0,1,disallow,0,default
+868,,14882394,MusikAnimal,20180809162025,1,,Template vandalism,1,71,0,0,disallow,0,default
+547,,14882394,MusikAnimal,20170605190343,0,,Cat Creek,1,70,0,0,disallow,0,default
+922,,365454,Zzuuzz,20181104190106,0,,Abusive messages on RfA-related pages,1,70,0,0,disallow,0,default
+459,,7529026,Samtar,20160718155146,0,,Long-term block evasion,1,70,0,0,disallow,0,default
+584,,14882394,MusikAnimal,20160614034706,0,,Improper Template Usage by New User,1,65,0,1,,0,default
+567,,14882394,MusikAnimal,20160614034452,0,,Disruptive CSD nominations,1,64,0,1,disallow,0,default
+581,,14882394,MusikAnimal,20160614034647,0,,Dantherocker1 II,1,64,0,1,,0,default
+14,"article_articleid == 0 & article_namespace == 0 & !(""autoconfirmed"" in user_groups) &
+(
+(added_lines rlike ""(m[ou]th[ae]r?)?(f|ph)u(kc|c+k*|c*k+|x)(a|in[g']?|e[rd]|y|)?[sz]?(m(e|y)|(yo)?ur?|his|her|it|their|our|each other)?[- ]?(ass|all|ie|y|bitch|erino|head|hole|arse|face|queer|w?it|[o0]r?|off|tard|wad|(yo)?u|me|her|him|them)?(a|e+[rsd]|in[g']?)?(a| hell| and die|him|her|up)?[sz]?"" | added_lines rlike ""(f+|s+)\W*u+\W*[c\(]+\W*k+""))",1130897,Ruslik0,20090325102514,0,"Note that this is just to test detection of new pages by new users... I'll add common vandal words soonish as soon as we can tell it works. (article_articleid does not stay 0 after the edit... werdna knows and says he will do a is_new so we can batch test this sort of stuff in the future)
+
+Trying a few regex's from lupin's badword list.
+
+Maybe instead of regex matching, we should just tag the edit (using the tag feature) for manual review
+
+gazillions of false positives and clogging up the log, disabling - east
+Marked as deleted. - Ruslik",Test to detect new pages by new users,0,63,0,1,,0,default
+312,,5711305,Cenarium,20150212173501,0,,External link removal,1,62,0,1,,0,default
+621,,14882394,MusikAnimal,20160614035403,0,,Spambot Filter,1,62,0,1,disallow,0,default
+328,,258000,King of Hearts,20130404080744,0,,Prolific socker III,1,61,0,1,,0,default
+660,,15991542,Samwalton9,20150128141314,0,,Possibly JarlaxleArtemis (LTA),1,61,0,0,,0,default
+668,,14882394,MusikAnimal,20150429015714,0,,GP disruption,1,61,0,0,disallow,0,default
+226,,1130897,Ruslik0,20091003121354,0,,Johnali123 sockpuppets,1,61,0,1,,0,default
+4,,82835,Rich Farmbrough,20160812192142,0,,Copernicus vandal,1,60,0,1,,0,default
+910,"!(""confirmed"" in user_groups)
+&
+(article_namespace = 3)
+&
+(
+ contains_any(lcase(added_lines),
+ ""q=maureen+wroblewitz"",
+ ""ved=0ahukewiqolvy38laAhxgrobkhutfcysq_auidcgd"",
+ ""help expand the article [[maureen wroblewitz]]"",
+ ""help improve the article [[maureen wroblewitz]]"",
+ ""help expand article by [[maureen wroblewitz]]"",
+ ""help expanded article by [[maureen wroblewitz]]"",
+ ""help expand article [[maureen wroblewitz]]"",
+ ""== [[maureen wroblewitz]] =="",
+ ""flickr.com/photos/164349735@N07/41834402112"",
+ ""post [[maureen wroblewitz]]"",
+ ""i'm the one to download this photo"",
+ ""[[maureen wroblewitz]]. thanks you"")
+)",855858,Beetstra,20180714091120,0,"https://en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard/Incidents&oldid=834165578#Special:Contributions/171.248.246.158
+
+Hidden, seen past edits I expect this editor to know their way around, and that they might be able to evade any text we filter on. Set to throttle so that random users do not trip this filter. Stop editor on 3rd edit in 180 seconds for now, so that the editor is not going to slow-spam either. Test mode only for now.
+
+Sigh .. the editor was slow spamming. Increase to 1800. Painful. --Beetstra
+
+Now coming back every couple of hours. Half a day it is then? --Beetstra
+
+Nah, lets filter differently and complete.
+
+OK, no more discussing this person.
+
+No more hits, detect only, can probably soon be deleted.",Maureen Wroblewitz spammer,0,60,0,1,,0,default
+414,,82835,Rich Farmbrough,20160904150257,0,,M5 Vandalism,1,60,0,1,disallow,0,default
+501,,14882394,MusikAnimal,20160614033558,0,,Chinese blogpost spammer,1,60,0,1,,0,default
+566,,10639536,Reaper Eternal,20140102181650,0,,SPI Impersonation,1,57,0,1,disallow,0,default
+635,"(action == 'edit' | action == 'upload')
+& (article_namespace == 6 | article_namespace == 1)
+& !(""otrs-member"" in user_groups)
+&!(lcase(old_wikitext) rlike '\{\{[\s_]*(?i:OTRS[/s_]+Permission|Permission/-OTRS|Permission[/s_]+OTRS|PermissionOTRS|OTRSPermission|ArticleOTRS|ConfirmationOTRS|OTRS[/s_]+received|OTRS|OTRS[/s_]+talk|OTRS\-talk|OTRS\-user)(?i:\-ID)?[\s_]*(\}\}|\|)')
+& (lcase(new_wikitext) rlike '\{\{[\s_]*(?i:OTRS[/s_]+Permission|Permission/-OTRS|Permission[/s_]+OTRS|PermissionOTRS|OTRSPermission|ArticleOTRS|ConfirmationOTRS|OTRS[/s_]+received|OTRS|OTRS[/s_]+talk|OTRS\-talk|OTRS\-user)(?i:\-ID)?[\s_]*(\}\}|\|)')",502540,Xaosflux,20180817210724,0,"Ported edit filter from commons - Mike V Sept 24, 2014
+Logging only for now for testing purposes.
+
+*Testing article talk for text releases.
+
+To get all of the templates and redirects to the OTRs templates this page needs to log how does the following work:
+<quote>
+'\{\{[\s_]*(?i:OTRS[/s_]+Permission|Permission/-OTRS|Permission[/s_]+OTRS|PermissionOTRS|OTRSPermission|ArticleOTRS|ConfirmationOTRS|OTRS[/s_]+received|OTRS|OTRS[/s_]+talk|OTRS\-talk|OTRS\-user)(?i:\-ID)?[\s_]*(\}\}|\|)'
+<quote>
+Feel free to change it if needed. - Callanecc 24 Sep 2014
+::I've implemented it. Callanecc
+
+11/25/2014 - DISABLED - NO LONGER NEEDED PER Special:AbuseFilter/642
+
+renamed OTRS-->otrs just for consistency",OTRS template added by non-OTRS member,0,57,0,1,warn,0,default
+419,"!(""confirmed"" in user_groups) &
+(contains_any(article_articleid, ""1952670"", ""4626266"")) &
+(lcase(removed_lines) rlike (""vandal|"" + lcase(user_name))) &
+!(lcase(added_lines) rlike (""vandal|"" + lcase(user_name)))",258000,King of Hearts,20120808231716,0,"Following a short discussion on <http://en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard/Incidents&oldid=434279319#edit war at the vandalism board!> I am creating this abusefilter to stop vandals from removing themselves from AIV. (I also see this regularly.) --Reaper
+
+Check to ensure they are removing an AIV report as well. --Reaper
+
+Only true positives, setting to disallow. --Reaper
+
+Fix false positive: reports made by IPs. - KoH
+
+Optimize using article_articleid. - KoH
+
+Optimizing & fixing due to FPs. --Reaper
+Forgot that the reason was due to ""~~~~"" being expanded AFTER the edit filter sees the text. --Reaper
+
+Revert (with modification). Firstly, the sign is in the wrong direction. Secondly, there are legitimate reasons to remove one's own username from AIV (e.g. removing a report they filed themselves). Fixed the FP in my version. - KoH
+
+Apparently not good enough. Restrict to specific regex string of ""vandal|"" followed by username. -- KoH
+
+Oops, need to lcase the user_name. - KoH
+
+Parentheses should be it. - KoH
+
+Disabling, can't fix it. Previous version had false positive with users removing their own reports of other users. - KoH
+
+Marked as deleted - KoH",User removing himself from AIV,0,57,0,1,disallow,0,default
+330,,258000,King of Hearts,20110310111130,0,,Attacks on editors,1,55,0,1,warn,0,default
+914,,19818307,Crow,20180422210717,1,,Igor Janev Spammer,1,54,0,0,disallow,0,default
+293,,82835,Rich Farmbrough,20160824183539,0,,J.delanoy attacks,1,53,0,1,disallow,0,default
+193,,451766,Prodego,20090928230945,0,,Wknight94's test filter,1,53,0,1,,0,default
+750,"!""confirmed"" in user_groups &
+(
+ stringy:= ""(break-*a-*ball|showbox film error)"";
+ added_lines irlike stringy &
+ (
+ !removed_lines irlike stringy
+ )
+)",15991542,Samwalton9,20160823102448,0,"Per Wikipedia:Edit_filter/Requested#Caidin_Detection --Samwalton9, 10 January 2015",Long term film vandal,0,51,0,0,,0,default
+263,,1130897,Ruslik0,20100808082040,0,,Serafin - talk page abuse,1,50,0,1,,0,default
+510,,14882394,MusikAnimal,20160614033645,0,,JonesManorFarm,1,50,0,1,,0,default
+778,,7529026,Samtar,20160722100644,0,,Ceb sock,1,48,0,1,,0,default
+816,,25420061,BU Rob13,20170120213621,0,,ARBPIA vandal bot,1,47,0,1,disallow,0,default
+390,,14882394,MusikAnimal,20160614032112,0,,Dynamic IP vandalism,1,47,0,1,disallow,0,default
+204,,258000,King of Hearts,20091023011806,0,,Bangladeshi vandal,1,47,0,1,disallow,0,default
+467,,14882394,MusikAnimal,20160614032854,0,,Sakaisinai7,1,47,0,1,disallow,0,default
+594,,14882394,MusikAnimal,20160614034809,0,,Verizon mobile vandal,1,46,0,1,disallow,0,default
+940,,365454,Zzuuzz,20181109181811,0,,LTA 940,1,46,0,0,"throttle,disallow",0,default
+178,,258000,King of Hearts,20090812211459,0,,Crier attack vandalism,1,46,0,1,disallow,0,default
+570,,14882394,MusikAnimal,20160614034517,0,,Checkmarx,1,45,0,1,disallow,0,default
+696,,15991542,Samwalton9,20150714000934,0,,Informative link spam,1,44,0,0,,0,default
+730,,16980,Dragons flight,20160107192810,0,,Filter to spot sock,1,44,0,0,,0,default
+48,"!(""autoconfirmed"" in USER_GROUPS) & ((article_namespace == 0) | (article_namespace == 10) | (article_namespace == 14)) & (added_links rlike ""\byoutube\.com|\bblog(?:cu|fa|harbor|mybrain|post|savy|spot|townhall)?\.com\b|\bmyspace\.com"")",1130897,Ruslik0,20090325083005,0,"* Turned off, this rule seriously slows down the wiki. Needs to be checked
+
+Test rule for external links. Matches only in main, template and category namespace, matches:
+
+youtube.com
+a list of blogs
+myspace
+
+* Optimized a bit, but not enabling - ABCD
+Marked as deleted. - Ruslik0",Oft-inappropriate external links,0,43,0,1,,0,default
+191,,82835,Rich Farmbrough,20160820181202,0,,User:ECW500,1,43,0,1,,0,default
+309,,8544547,Shirik,20100920023439,0,,Unusual change of URLs,1,42,0,1,throttle,0,default
+719,"(
+ ip_in_range(user_name, ""109.92.96.0/19"") |
+ ip_in_range(user_name, ""178.220.0.0/16"")
+) &
+(
+ article_namespace == 0 &
+ (
+ edit_delta < 100 &
+ (
+ added_lines irlike ""<ref></ref>"" &
+ !(old_wikitext irlike ""<ref></ref>"")
+ )
+ )
+)",14882394,MusikAnimal,20150818174227,0,"Ongoing vandal from Belgrade, Serbia entering only ""<ref></ref>"" into articles until they are blocked. Should be temporary",Empty ref vandal,0,42,0,0,disallow,0,default
+480,,82835,Rich Farmbrough,20160911183305,0,,Swamilive,1,42,0,1,disallow,0,default
+508,,14882394,MusikAnimal,20160614033626,0,,Long-term pattern abuse II,1,42,0,1,disallow,0,default
+471,,301395,NawlinWiki,20131003210147,0,,Eurodance vandal,1,41,0,1,,0,default
+795,,365454,Zzuuzz,20170402074826,0,,Ref Desk Troll,1,40,0,1,disallow,0,default
+211,"( article_prefixedtext like ""Wikipedia:Help desk"" ) &
+rcount( ""\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4}\b"" , added_lines ) > rcount( ""\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,4}\b"" , removed_lines ) &
+( !""sysop"" in user_groups ) &
+( !""wikimedia.org"" in added_lines )",451766,Prodego,20090928231057,0,"Optimizing - The regex wastes a lot of run time, putting Help desk first. - KoH
+
+False positive: wikimedia emails. - KoH
+
+False positive: Must have more regex matches that before, otherwise it's not considered adding an email. - KoH
+
+Disable, appears to be inactive (log only filter). If you are using this filter, please let me know, and I'll reenable it -Prodego",Warn users about entering email addresses,0,40,0,1,,0,default
+54,,1130897,Ruslik0,20100808081238,0,,Virgin Killer vandalism,1,39,0,1,,0,default
+830,,502540,Xaosflux,20190104180947,0,,LTA_O_socking,1,39,0,0,disallow,0,default
+953,,502540,Xaosflux,20190104181712,0,,Galobtter test filter,1,39,0,0,,0,default
+736,"user_editcount < 50 &
+(
+ added_lines irlike ""##[^{|}<\n>[\];:*]{5,255}?##""
+)",15991542,Samwalton9,20151203092828,0,"Simple implementation to check for XSS Filter. Not sure this will work great, probably needs cleverer regex and a check on removed_lines. See https://en.wikipedia.org/wiki/Wikipedia:Edit_filter/Requested#XSS_Filter_detect --Samwalton9, 24 Nov 2015
+
+Not useful. --Samwalton9, 3 Dec 2015",XSS Filter,0,39,0,0,,0,default
+629,,14882394,MusikAnimal,20180403031050,0,,Possible Spamming,1,38,0,0,,0,default
+945,,365454,Zzuuzz,20181205003231,1,,proxy talk page abuse,1,37,0,0,"throttle,disallow",0,default
+490,,82835,Rich Farmbrough,20160911190243,0,,Beatles IP vandal,1,37,0,1,disallow,0,default
+340,,5711305,Cenarium,20150212173520,0,,"Misc Vandalism, Type N+1",1,36,0,1,,0,default
+360,,258000,King of Hearts,20110310111414,0,,Spam Blacklist Circumvention Attempts,1,36,0,1,disallow,0,default
+546,,14882394,MusikAnimal,20160614034041,0,,"Disruptive user from Hyogo, Japan",1,35,0,1,disallow,0,default
+673,"!""confirmed"" in user_groups & (
+ (article_namespace = 0|article_namespace = 2) & (
+ lcase(added_lines) contains ""ankur mazumder""
+ )
+)",15991542,Samwalton9,20160128121223,0,"Created per request. Prolific sockpuppeteer who repeatedly makes biographies about himself. Log only for now. --Samwalton9, 29 March 2015
+
+Replaced regex check with contains. --zzuuzz
+
+Narrowed to reduce colossal run time --Samwalton9, 5 April 2015
+Reduce conditions. RF 20150812
+
+Seems to have gone away. --Samwalton9, 28 Jan '16",Ankur Mazumder,0,35,0,0,,0,default
+896,,365454,Zzuuzz,20190104211438,1,,ANI trolling,1,34,0,0,disallow,0,default
+760,,14882394,MusikAnimal,20160628012842,0,,Sandbox vandal,1,34,0,0,disallow,0,default
+154,"(article_namespace == 0) &
+!(""sysop"" in user_groups) &
+contains_any(rmspecials(lcase(added_lines)), ""skopian"", ""skopjan"", ""fyromian"",
+ ""slavomacedonia"", ""pseudomacedonia"", ""vardarska"") &
+!contains_any(rmspecials(lcase(removed_lines)), ""skopian"", ""skopjan"", ""fyromian"",
+ ""slavomacedonia"", ""pseudomacedonia"", ""vardarska"")",1130897,Ruslik0,20090807113207,0,"Collection of terms used in the Macedonian naming conflict that are usually considered pejorative, and hence are unlikely to be appropriate in articles.
+
+Based on off-wiki request.
+
+I was asked for separate log, but if this continues to get almost zero hits, I am going to merge it into the other Macedonian filter. -DF
+
+Disabled, this really isn't something the abusefilter is for, seeing how much we are hitting the condition limit, lets keep to monitoring for abuse -Prodego
+Marked as deleted. - Ruslik",Macedonia naming conflict 2,0,33,0,1,,0,default
+781,,7529026,Samtar,20161103144540,0,,LTA collection 1,1,32,0,0,disallow,0,default
+553,,7852030,Materialscientist,20130611050053,0,,The FIFA Vandal from Peru,1,32,0,1,,0,default
+821,,502540,Xaosflux,20180725014748,0,,Supersonic jet,1,32,0,0,disallow,0,default
+678,"!""confirmed"" in user_groups &
+(
+ article_namespace == 0 &
+ (
+ summary irlike ""punctuative correction""
+ )
+)",15991542,Samwalton9,20151223104143,0,"Long term vandal who makes disruptive MOS changes, per request. --Samwalton9, 7 April 2015
+
+First 3 tags are FPs; I missed a couple of brackets. --Samwalton9
+
+Disabled. Block the sole IP triggering the filter if this continues to be an issue. --Reaper 2015-06-02
+
+Updating to include accounts, removed one condition that could give fps. --Samwalton9, 25 Sep 2015
+
+25-31st hits FPs. --Sam",MOS vandal,0,32,0,0,,0,default
+701,"!""confirmed"" in user_groups &
+(
+ article_namespace == 0 &
+ (
+ linkspam:=""\[\[(file|image|media):[^\]\{]*\|\s*link\s*=\s*(ht|f)tp"";
+ !removed_lines irlike linkspam &
+ (
+ added_lines irlike linkspam
+ )
+ )
+)",15991542,Samwalton9,20150829164145,0,"An attempt to detect stealth link spam, where an image is added with the link= parameter specified. --Samwalton9, 21 June 2015
+
+Fixed the regex to remove potential FPs. --Reaper 21-06-2015
+
+Move variable defn into its scope. RF 2015-07-18
+
+Not so useful, disabled, very occasional issue. --Samwalton9, 29 August 2015",Image link spam,0,32,0,0,,0,default
+241,,1130897,Ruslik0,20091003121014,0,,Truth Lover sock vandal,1,32,0,1,,0,default
+378,,301395,NawlinWiki,20120202004442,0,,Russian Science,1,31,0,1,disallow,0,default
+775,,7529026,Samtar,20160723173128,0,,MKUltra Vandal,1,30,0,1,,0,default
+792,,14882394,MusikAnimal,20181230215124,0,,Harassment,1,30,0,0,disallow,0,default
+107,,1130897,Ruslik0,20090807112653,0,,Continued spam of blacklisted links,1,30,0,1,,0,default
+412,,7777104,Kingpin13,20110518202040,0,,Image added,1,30,0,1,,0,default
+440,"!""bot"" in user_groups & ('<a class=""inlineAdmedialink"" href=""#"">' in added_lines) &! ('<a class=""inlineAdmedialink"" href=""#"">' in removed_lines)",1257855,Gogo Dodo,20120719063817,0,"Based on filter 345. Search for intextual.com inline HTML markup. -- Gogo Dodo
+
+Doesn't seem to be a common occurrence. Disabling filter and marking as deleted. -- Gogo Dodo
+
+It's happening again. Re-enabled. - Earwig
+
+Merged to 345. -- Gogo Dodo",intextual.com markup,0,30,0,1,,0,default
+448,,258000,King of Hearts,20130404081056,0,,unblock disruption,1,30,0,1,disallow,0,default
+746,,9698266,Elockid,20160208201022,0,,Prolific socker IV (B),1,30,0,0,disallow,0,default
+407,,258000,King of Hearts,20120808231546,0,,Disruptive block evasion,1,29,0,1,disallow,0,default
+437,"article_articleid == 0
+& !(user_groups rlike ""autoconfirmed|bot"")
+& (article_text rlike ""[A-Z]{9,}"")
+& (((article_namespace != 3)
+& (article_namespace != 2))
+| (article_text rlike ""\/[A-Z]{9,}""))",258000,King of Hearts,20120808231808,0,"This is replacement for entry in blacklist. Only block new users. -Petrb
+
+FPs. Turn to log only. -Sole Soul
+Add constraints.
+
+:Removed spaces, it should be especially for User, User talk and Wikipedia spaces, and, what is id for, anyway it's a replacement for blacklist entry, so it should block users from doing it, so consider setting up some action --Petrb
+::Updated trigger when user subpages only or if other spaces, and restored warning, now it should trigger this in all spaces excepting user main pages (User:XXXXXXXXXXX is ok, User:XXXXXXXXXXXx/BIG TITLEARTICLE is not) --Petrb
+
+Regex allows for a much nicer syntax. - KoH
+:It would be cool if someone created a message in mw space explaining to user how title should look like --Petrb
+
+This filter isn't really doing anything useful. The previous ALLCAP limitation was only useful for page moves by established users who won't be put off by a warning. There's no need for restricting new pages. Disabled. --zzuuzz
+
+Marked as deleted - KoH",Title blacklist for TITLES with more than 9 caps,0,29,0,1,warn,0,default
+25,,16980,Dragons flight,20090318150015,0,,Unusual behavior from new account,1,28,0,1,,0,default
+911,,855858,Beetstra,20180724113113,0,,Wrestling social networking spammer,1,28,0,1,disallow,0,default
+237,"(article_articleid == 0) &
+(article_namespace == 0) &
+(user_editcount < 50) &
+(contains_any(added_lines,
+""{{AfDM"",
+""{{article issues"",
+""{{cleanup"",
+""{{notability"",
+""{{orphan"",
+""{{refimprove"",
+""{{unreferenced""
+)) &
+!(""construction}}"" in added_lines)",1130897,Ruslik0,20091003121439,0,"Create per Triplestop's request on AN. - KoH
+
+Restrict to users with less than 50 edits. - KoH
+
+Modified to also catch pages with {{hangon}} tag - ThaddeusB
+
+Add more. - KoH
+
+Fix typo & add some more tags - ThaddeusB
+
+Construction template allowed. - KoH
+
+Removing {{db- and {{hangon; both of these throw the article into CAT:CSD, so they'll be noticed soon enough anyway. Also re-ordering for speed and condition counts, 2.66 ms is too slow for what's really a fairly minor problem. - Hersfold
+
+Disabling - this is mostly redundant to filter 164; will modify that one to catch the few articles this catches that 164 doesn't - ThaddeusB
+
+Marked as deleted. - Ruslik",Creating page with maintenance templates,0,28,0,1,,0,default
+93,"user_editcount < 15 & (""http"" in SUMMARY)",1130897,Ruslik0,20090708124036,0,"Meant to catch User:ByAppointmentTo socks putting pornsite links in edit summaries (see for example User:One Way Motorway).
+
+Logging only to start.
+
+This seems way too broad -Prodego
+
+I disagree. What new user is going to need to add website links to more than two edit summaries in 60 seconds? Except BAT, that is. Note that the filter worked as intended just now with BAT's newest sock, User:Cole's Laws. --NW
+
+changed throttling to ""user,ip"" per http://en.wikipedia.org/wiki/Wikipedia_talk:Abuse_filter#Throttle_.22user.22_vs._IPs Also, the name is a little misleading, it throttles all websites, not just bad ones. -- Mr.Z-man
+
+-Trying 15 edits and 3 moves. --NW
+Renamed filter - Ruslik
+
+No need for this to be private; no need to check for both sysops and edit count. --Conti
+
+Low hit - disabled to reduce number of edits hitting the condition limit -Prodego
+Marked as deleted. - Ruslik",Web links in edit summaries,0,27,0,1,,0,default
+863,,14882394,MusikAnimal,20180403030800,0,,LGBT LTA,1,27,0,0,,0,default
+873,,14882394,MusikAnimal,20171118220117,0,,LTA 873,1,27,0,0,disallow,0,default
+933,,855858,Beetstra,20181001034355,1,,Deepak Khumar,1,27,0,0,disallow,0,default
+45,,16980,Dragons flight,20090322043601,0,,Move to title with special characters,1,26,0,1,,0,default
+307,,301395,NawlinWiki,20100404201317,0,,Redlink/edit summary vandalism by specific user,1,26,0,1,"throttle,warn,disallow",0,default
+609,,76,The Anome,20140801184723,0,,Europa Universalis-related disruption,1,25,0,0,disallow,0,default
+411,"!(""sysop"" in user_groups) & article_prefixedtext rlike ""^Template:Editnotices/""",1130897,Ruslik0,20110521082446,0,"Account creators shouldn't be creating edit notices! -P
+Deal with via bugzilla. -P
+Marked as deleted. - Ruslik",Edit notices,0,25,0,1,"warn,disallow",0,default
+199,"!( contains_any(user_name,""XLinkBot"",""SQLBot-Hello"",""Chris G Bot"",""JaGaBot"",""BryanBot"")) &
+!(""bot"" in user_groups) &
+( ""BOT"" in ccnorm(user_name))",82835,Rich Farmbrough,20160820181339,0,"Add AF to tag potential unflagged bots
+
+Add some FP's
+
+Don't use tags without properly formatting them, see [[WP:Tags]] - Cen
+
+:Disable. Not an appropriate use of the abuse filter. Finding accounts with BOT in their name should be done either A) at the time of account creation or B) by an offline parsing of the user list. Looking at every edit to find such is not a good idea. It is also currently the slowest filter (because you applied it to virtually every edit and ccnorm has a relatively large overhead). -DF
+Updated for new ccnorm. RF 20160820",Unflagged Bots,0,25,0,1,,0,default
+209,"('bot' in user_groups )
+&
+(article_namespace == 0)
+&
+(summary rlike '^robot.*Removing:.*ar:(ملØÙ‚:)?[0-9]+')",451766,Prodego,20090928231104,0,"Bot problem removing valid arwiki interwiki links due to pywikipedia bug. Flag only for now
+
+Disabled. No logged action in a week.",arwiki interwiki problem,0,25,0,1,disallow,0,default
+370,,258000,King of Hearts,20110310111524,0,,Persistent vandalism,1,24,0,1,"throttle,disallow",0,default
+157,,82835,Rich Farmbrough,20160820180542,0,,Greek nationalism,1,24,0,1,disallow,0,default
+938,,7529026,There'sNoTime,20181022180632,1,,Targeted abuse,1,24,0,0,disallow,0,default
+599,,14882394,MusikAnimal,20160614034844,0,,FPV,1,23,0,1,,0,default
+94,"article_text == ""San Diego"" & ""vagina"" in lcase(added_lines)",1130897,Ruslik0,20090807112502,0,"This is recurring vandalism inspired by a movie.
+
+Disabled, only 1 hit, performance -Prodego
+
+re-enabled - ongoing abuse. Will Beback
+
+Looks like it still only has one hit. This filter doesn't seem to be hitting anything ongoing? Could it be disabled? -Prodego
+
+Re-Disabled. 10 Hits in a month doesn't necessitate a filter. -Q
+Marked as deleted. - Ruslik",San Diego = whale's vagina,0,23,0,1,"warn,disallow",0,default
+326,,82835,Rich Farmbrough,20160904150103,0,,Vandalism-only article names,1,22,0,1,disallow,0,default
+845,,14882394,MusikAnimal,20170421164626,0,,Prevention of AIV/UAA hinderance,1,22,0,0,"warn,disallow",0,default
+361,,82835,Rich Farmbrough,20160904150215,0,,"""Scruffy"" vandalism",1,22,0,1,disallow,0,default
+372,,258000,King of Hearts,20110310111536,0,,Reference desk vandalism,1,22,0,1,disallow,0,default
+375,,301395,NawlinWiki,20120202004431,0,,9/11 Vandalism,1,22,0,1,disallow,0,default
+638,,365454,Zzuuzz,20170402074101,0,,Stern review,1,22,0,1,disallow,0,default
+656,,14882394,MusikAnimal,20160614040359,0,,Driver 3 vandal,1,22,0,1,disallow,0,default
+203,,258000,King of Hearts,20110310110538,0,,Template spam from 88.105.0.0/16,1,22,0,1,disallow,0,default
+488,,82835,Rich Farmbrough,20160911190128,0,,Currently active sockmaster,1,22,0,1,disallow,0,default
+839,"edit_delta < 250 &
+!""confirmed"" in user_groups &
+article_namespace == 0 &
+!(summary irlike ""und(id|o)|\brv[vt]?\b|revert"") & (
+
+ bad_word := ""cuck(|s|er|ing)\b"";
+
+ added_lines irlike bad_word &
+ !(added_lines rlike ""\bDick\b\s[A-Z][a-z]"") &
+ !(removed_lines irlike bad_word) &
+ !(removed_lines irlike ""\w\*\*?\w"") & !(
+ article_text rlike bad_word &
+ old_wikitext irlike ""\{\{disamb""
+ )
+)",3315180,Someguy1221,20170221004051,0,"Testing ""cuck"" for addition to filter 384. --Someguy1221
+Test complete, merged into 384, disabled. --Someguy1221",Bad word test,0,21,0,0,,0,default
+95,,1130897,Ruslik0,20090419183716,0,,Administrator attack page,1,21,0,1,,0,default
+363,,258000,King of Hearts,20110310104458,0,,Article becoming redirect to The Game,1,21,0,1,disallow,0,default
+112,,258000,King of Hearts,20090830005339,0,,Repeated advocacy/spam on Zoophilia,1,21,0,1,disallow,0,default
+641,,14882394,MusikAnimal,20160614040013,0,,AP disruption,1,21,0,1,disallow,0,default
+141,,301395,NawlinWiki,20090409111815,0,,Abusive unblock denials - new approach,1,21,0,1,,0,default
+923,,849713,Slakr,20180620111016,1,,Possible Nigerian phone scams,1,21,0,0,,0,default
+417,,82835,Rich Farmbrough,20160904150318,0,,Suspected Sockpuppets,1,21,0,1,disallow,0,default
+298,,301395,NawlinWiki,20100301152737,0,,Red link vandalism 2,1,20,0,1,warn,0,default
+615,,14882394,MusikAnimal,20160614035243,0,,Reference desk trolling,1,20,0,1,disallow,0,default
+618,,502540,Xaosflux,20150203031455,0,,Wikipedia space trolling,1,20,0,0,disallow,0,default
+726,,15991542,Samwalton9,20151216152913,0,,Paul Easter,1,20,0,0,disallow,0,default
+747,"article_namespace == 0 & (
+ !(user_rights rlike ""\bprotect\b"") & (
+ action == 'edit' & (
+ regexstr := ""{{[Pp]p-30-500}}"";
+
+ removed_lines rlike regexstr ^ added_lines_pst rlike regexstr
+ )
+ )
+)",14882394,MusikAnimal,20160420045711,0,"Per [[Special:PermaLink/698674019#Palestine-Israel articles 3 (2): Arbitrator views and discussion]]. Prevents adding and removing of {{pp-30-500}}. See also [[Special:AbuseFilter/747]]
+
+This is undergoing a test period before we definitively consider it for ongoing use.
+
+Log-only for the time being. Any performance tweaks greatly appreciated.
+
+Can be deleted now that we have the new protection level ~MA",Removal or addition of [[WP:PP-30-500|pp-30-500]] by non-admin,0,20,0,1,,0,default
+6,"!(""sysop"" in user_groups) & (article_namespace == 2 | article_namespace == 3) &
+!(user_name in article_text) & (article_text rlike ""\/Editnotice"")",1130897,Ruslik0,20090718184557,0,"Something I used to see all the time when doing redirect work - people would move articles written at [[user:foo]] to [[foo]], unknowingly taking [[user talk:foo]] with history along for the ride.
+
+(Needs testing.)
+ Moved !(""sysop"" in user_groups) to the beginning. -- Ruslik
+ Disabled (merged to filter 5). - Ruslik0
+ Merged filter works normally so I will mark this one as deleted. - Ruslik0
+
+I remade this filter. It now tracks the changes to Editnotices in other users userspaces. - Ruslik
+
+5 hits ever, doesn't seem to be a big problem, disabled filter -Prodego
+I reenabled it the filter. - Ruslik
+
+Disabling again; the condition limit percentage is high, and filters that aren't doing much good can go. People can watchlist their editnotices if they care. - Hersfold
+
+Marked as deleted. ~~~~",Users editing editnotices of other users,0,19,0,1,,0,default
+538,,14882394,MusikAnimal,20160614033954,0,,Possible sockpuppetry,1,19,0,1,disallow,0,default
+60,"(article_prefixedtext == ""Wikipedia:Sandbox"")
+& (""{{Please leave this line alone (sandbox heading)}}"" in removed_lines)
+& !(""{{Please leave this line alone (sandbox heading)}}"" in added_lines)",16980,Dragons flight,20090319175424,0,"Now that braching logic is smart, this might impose a trivial load. Let's find out.
+
+Is this really necessary? We do have a bot to do this every 30-60 mins... ~~~~
+
+: I think that depends on whether it is happening frequently or infrequently. Let's see... -DF",Removing sandbox header,0,19,0,1,,0,default
+851,"article_articleid == '252092' &
+!""confirmed"" in user_groups &
+added_lines irlike ""(\|\s*origin\s*=|\|\s*birth_place\s*=)"" &
+added_lines irlike ""uruguay""",14882394,MusikAnimal,20180312212211,0,"Testing. Regular vandalism to Carlos Gardel to change his birth place or origin to uruguay. Alternative approach would be removed_lines like Toulouse or Argentina and added_lines like uruguay. --Samwalton9, 27 April 2017
+
+No hits since October 2017. Disabling ~MA",Carlos Gardel vandalism,0,19,0,0,,0,default
+101,"article_text == ""Fritzl case"" &
+!(user_groups contains ""autoconfirmed"") &
+lcase(added_lines) contains ""australia""",1130897,Ruslik0,20090807112431,0,"Common vandal MO at the [[Fritzl case]] article.
+--
+
+Setting to disallow, seems to work fine. --Conti
+
+Disabled, 0 hits, performance -Prodego
+
+Re-disabled. Not costly, but 8 hits in a month isn't necessary for a Filter. -Q
+
+Re-re-disabled, per the above -Prodego
+Marked as deleted. - Ruslik",Fritzl case vandalism,0,19,0,1,,0,default
+645,,14882394,MusikAnimal,20160614040149,0,,Camp Half-Blood vandal,1,19,0,1,disallow,0,default
+400,,258000,King of Hearts,20120808231520,0,,Prolific socker IV,1,19,0,1,"throttle,disallow",0,default
+763,,14882394,MusikAnimal,20161111052036,0,,Persistent vandal,1,19,0,0,,0,default
+395,,258000,King of Hearts,20120808231426,0,,Topic rangeblocks,1,18,0,1,disallow,0,default
+443,,258000,King of Hearts,20130404081000,0,,Beatles,1,18,0,1,,0,default
+456,,258000,King of Hearts,20130404081129,0,,Kay Uwe Böhm,1,18,0,1,"throttle,disallow",0,default
+482,,3863102,Scottywong,20120802134516,0,,Using comments to evade edit filter,1,18,0,1,,0,default
+232,,258000,King of Hearts,20110310110732,0,,[[BJCP]],1,18,0,1,disallow,0,default
+255,,1130897,Ruslik0,20100106173931,0,,Rodgarton,1,18,0,1,,0,default
+259,,1130897,Ruslik0,20100106173841,0,,Brazil vandal,1,17,0,1,,0,default
+55,,1130897,Ruslik0,20100808082207,0,,Signing articles,1,17,0,1,,0,default
+832,,14882394,MusikAnimal,20171018033635,0,,Profile sock,1,17,0,0,disallow,0,default
+849,,14882394,MusikAnimal,20190104233809,1,,Cat Creek II,1,17,0,0,,0,default
+137,,82835,Rich Farmbrough,20160818210043,0,,Copernicus vandal 2,1,17,0,1,,0,default
+951,,14882394,MusikAnimal,20181218185129,0,,TFA disruption,1,17,0,0,,0,default
+186,,451766,Prodego,20090928231112,0,,INFRINGEMENT vandal - [[Special:Contributions/172.130.240.199]],1,17,0,1,disallow,0,default
+883,"action == ""move"" &
+user_editcount < 30 & (
+
+ bad_word := ""\bass\s?holes?\b|bitch|\bcock(s?|sucker)\b|\bdicks?\b|cuck(|s|er|ing)\b|\bcunts?\b|\bdildo|douche|f(u|v)ck|nigg(er|ah*)|p(a|e|ae)do(f|ph)il|fag(g[aio]t)?\b|penis|\bcrap|\bslut\b|whore|\bshits?\b|\bblah|\bpussa?y|\bidiot\b|\bwas here\b|\blol\b|(([asdfghjkl;])(?!\1)\s*){30}"";
+
+ ! summary irlike ""und(id|o)|\brv[vt]?\b|revert"" &
+ moved_to_text irlike bad_word &
+ ! moved_from_text irlike bad_word &
+ ! new_text irlike bad_word &
+ ! moved_to_text rlike ""\bDick\s[A-Z][a-z]|\b[A-Z][a-z]+\sDick\b""
+)",7586,Cyp,20171014154339,1,"This is just filter 384, except that it's for page moves.",Page moves to bad words or other vandalism,0,16,0,0,,0,default
+900,,19818307,Crow,20180126234203,1,,David Adam Kess Sock,1,16,0,0,,0,default
+447,,258000,King of Hearts,20130404081024,0,,Tile join targets,1,16,0,1,disallow,0,default
+15,"article_namespace <= 5 & article_namespace >=2
+& !('sysop' in user_groups | 'bot' in user_groups)
+& user_name != article_text
+& new_html rlike '^\s*<p><a href=""\/w\/index.php\?title=([^&]*?)&action=edit&redlink=1"" class=""new"" title=""([^""]*?) \(page does not exist\)"">([^<]*?)<\/a><\/p>\s*$'",646348,Mr.Z-man,20090319005312,0,"regex should match if the new version of a page contains only a redlink - common vandalism on noticeboards and user talk
+
+This is broken, disabling....
+-tested changes against the 3 false positives, re-enabling
+
+probably redundant to some other filters now",Discussion page vandalism,0,15,0,1,,0,default
+544,,82835,Rich Farmbrough,20161012202424,0,,Specific-page vandalism by single vandal,1,15,0,1,disallow,0,default
+381,,301395,NawlinWiki,20120202004457,0,,Scientology group,1,15,0,1,disallow,0,default
+954,,365454,Zzuuzz,20190103221750,1,,LTA 954,1,15,0,0,disallow,0,default
+503,,14882394,MusikAnimal,20160614033605,0,,GISHWHES,1,15,0,1,disallow,0,default
+539,,10639536,Reaper Eternal,20140102175832,0,,Lebanese football rangeblock,1,14,0,1,disallow,0,default
+37,"!(""autoconfirmed"" in USER_GROUPS) & (""uranus"" in lcase(article_text)) & (lcase(added_lines) rlike ""(\banus|penis|\bfuck|\bdick|\bcock|uh-anus|pussy|stupid|silly|\bhah(ah)*|\bblah)"" | added_lines rlike ""(ur|uR)ANUS"")",1130897,Ruslik0,20090404190702,0,"Trying to filter out this old joke about Uranus -> ""Er anus"" (or ""your anus"")
+
+Added some more examples
+
+Disabled, too specific, try to save some performance
+
+I made adjustments. Should work better with branching logic enabled.
+
+Enabled with the expanded scope -- Ruslik0
+
+Merging redundancies - Hersfold
+
+I added new conditions. In addition, the expression uRANUS in lcase(added_line) was always false. - Ruslik0
+
+Change to disallow. - Ruslik0
+Improving performance. - Ruslik0
+
+Candidate for removal, very specific, and mostly covered by other filters - Prodego
+
+Ur anus joke will not be caught by any other filter, if this one is disabled. - Ruslik
+I protected Uranus anyway, so the filter is disabled. - Ruslik
+Marked as deleted - Ruslik","""Ur anus"" joke",0,14,0,1,"warn,disallow",0,default
+549,,10639536,Reaper Eternal,20140102181348,0,,Airport vandal,1,14,0,1,disallow,0,default
+319,,301395,NawlinWiki,20101208223054,0,,Attacks on User:Rodhullandemu,1,14,0,1,disallow,0,default
+359,,82835,Rich Farmbrough,20160904150143,0,,Specific-page vandalism 2,1,14,0,1,disallow,0,default
+897,"title_title := ""^("" + rescape(article_text) + ""(.*\n)?){2}"";
+weird_title := ""\b(XOAI\.NET|LBN22|LBN77|울산출장샵|울산출장만남|출장안마|콜걸\s?출장업소|ì¼ë³¸ì¸ì½œê±¸ìƒµ|출장샵추천|출장가격|ì• ì¸ëŒ€í–‰)\b"";
+
+article_namespace == 1 &
+old_size == 0 &
+user_editcount < 30 &
+(
+ added_lines rlike title_title |
+ ccnorm(article_text) rlike weird_title
+)",7586,Cyp,20180123142941,1,"See contributions of 119.206.249.167, 45.122.138.58 and 121.165.41.82.",Weird spambot,0,14,0,0,disallow,0,default
+949,"page_namespace = 0 &
+ contains_any( added_lines, ""amazon"", ""amzn"" ) &
+ added_lines contains ""tag=""",3637572,SQL,20181225000531,0,"Looks for amazon affiliate links - Links to amazon's sites that contain tag= in the URL.
+
+TODO: Add the ""cleaner"" amazon links, which use a path like /affiliatename-[0-9]{2}/ instead of GET variables -- SQL 12/16/18",SQL Testing filter,0,14,0,1,,0,default
+217,,451766,Prodego,20090928231047,0,,Abdul Rahman Al-Sudais anon vandalism,1,14,0,1,"warn,disallow",0,default
+827,,76,The Anome,20170305092905,0,,Abusive username activity,1,13,0,1,disallow,0,default
+616,"(user_name=""187.109.239.254"")
+&(article_namespace=0)",15991542,Samwalton9,20150628135346,0,"Disabling, no hits 17 June ~ MusikAnimal 2014.07.16
+
+Made public. I see no reason to hide this filter from public view seeing as it's now deleted. --Samwalton9, 28 June 2015",disruption of music articles,0,13,0,1,"warn,disallow",0,default
+713,,14882394,MusikAnimal,20150805150247,0,,Lee Corso,1,13,0,0,disallow,0,default
+820,,15991542,Samwalton9,20170102113336,0,,Talk page vandal,1,12,0,0,disallow,0,default
+317,,855858,Beetstra,20100413092702,0,,Sentry Gun,1,12,0,1,"warn,disallow",0,default
+580,,14882394,MusikAnimal,20160614034639,0,,Airport vandal,1,12,0,1,disallow,0,default
+333,,258000,King of Hearts,20110310111140,0,,Akraj block evasion - IP socks (live test),1,12,0,1,disallow,0,default
+352,,365454,Zzuuzz,20101107190729,0,,Macedonian language multiple AfDs,1,12,0,1,disallow,0,default
+884,,19818307,Crow,20180131195533,0,,Nsmutte,1,12,0,1,disallow,0,default
+654,"!""autoconfirmed"" in user_groups
+& (lcase(added_lines) rlike ""jetanian?"")",15991542,Samwalton9,20150119183842,0,"Long term vandal (see [[Wikipedia:Sockpuppet_investigations/HoshiNoKaabii2000/Archive]]) often inserts fake country 'Jetania' into pages. Log only for a few days. -- Samwalton9, 18 Jan 2015
+
+Given that it seems to be working fine and was tripped today I've added this filter to Mr.Z-Bot's AIV list. -- Samwalton9, 18 Jan 2015
+
+Deleting, incorporated into filter 16. -- Samwalton9, 19 Jan 2015",Jetania vandalism,0,12,0,1,,0,default
+929,"user_age == 0 &
+substr(user_name, 0, 4) == '126.' & (
+ stringy := ""hydro dot net"";
+ (
+ added_lines irlike stringy &
+ !removed_lines irlike stringy
+ ) | (
+ summary irlike stringy
+ )
+)",82835,Rich Farmbrough,20180826201614,1,A long term editor attempting to use WP as a soap box for a domain name dispute. RF 20180826,LTA Hydro,0,12,0,0,,0,default
+683,,14882394,MusikAnimal,20160614040802,0,,New users removing sections from the Reference Desk,1,12,0,1,,0,default
+462,,10639536,Reaper Eternal,20120820155230,0,,Serial harassment of MuZemike,1,12,0,1,disallow,0,default
+219,"!(lcase(article_text=='sandbox'))
+&(article_namespace % 2) == 1 | (article_namespace == 4)
+& contains_any(lcase(added_lines), 'fuck you', 'fuck off')",353669,Avraham,20090803161738,0,"Logging only, temporary filter. -- Avi 08/02/2009
+Wikipedia namespace too.
+-See also Filter 1 -Prodego
+--Excluding sandboxes
+--Filter 1 will take care of the issue better than this one. -- Avi",Arbcom requested filter (FOFF),0,12,0,1,,0,default
+780,"!(""confirmed"" in user_groups) & (
+ article_namespace == 0 & (
+ added_lines rlike ""\n\[\[(?!en)(\w{2}):\w+\]\]$""
+ )
+)",14882394,MusikAnimal,20160812030457,0,"Per https://en.wikipedia.org/wiki/Wikipedia:Edit_filter/Requested/Archive_7#Interwiki_added
+
+We may ditch this. It doesn't happen often and it's mostly harmless... probably not worth the expense of a filter ~MA 2016.07.21
+
+Disabling. Too infrequent and for the good-faith edits I'm not too happy with even throwing a warning ~MA 2016.08.11",Addition of interlanguage links,0,11,0,0,,0,default
+556,,82835,Rich Farmbrough,20161012202550,0,,Impersonation usernames,1,11,0,1,disallow,0,default
+332,,8544547,Shirik,20100522071643,0,,J.delanoy vandal,1,11,0,1,,0,default
+598,,10639536,Reaper Eternal,20140102175720,0,,Template redirect protection,1,11,0,1,"warn,disallow",0,default
+158,"article_text == ""Bill Posey"" & ""alligator"" in lcase(added_lines)",451766,Prodego,20090617081158,0,"Another Colbert truth
+
+I suppose this can be deleted in a week or two. --Conti
+
+Been more than a week or two -Prodego",Bill Posey = alligator child,0,11,0,1,disallow,0,default
+451,,258000,King of Hearts,20130404081107,0,,IP attacks,1,11,0,1,disallow,0,default
+727,"""Samwalton9"" in user_name",15991542,Samwalton9,20160126000441,0,For a quick test.,Samwalton9 test filter,0,11,0,0,,0,default
+500,,82835,Rich Farmbrough,20160929181057,0,,Sock,1,11,0,1,disallow,0,default
+758,,855858,Beetstra,20160426065334,0,,Block evading editor,1,11,0,0,,0,default
+776,,7529026,Samtar,20160829162005,0,,Prolific socker IV (update),1,10,0,1,disallow,0,default
+290,"ip_in_range(user_name, ""172.128.0.0/10"") &
+(
+ ""Canada"" in new_text & new_text rlike ""[Pp](?:olitic|arty)"" |
+ ""Trudeau"" in added_lines
+)",8544547,Shirik,20100312022427,0,"Testing filter for resolution of the 172 vandal, as proposed at Wikipedia:Administrators'_noticeboard/Incidents/Soft_blocking_AOL#Filter. Log only, testing for collateral damage and performance. --Shirik 7 Feb 2010
+
+Added ""Trudeau"" additions per request -- Shirik 9 Feb 2010
+
+narrowed to relevant range 172.128.0.0/10 --zzuuzz
+Disabled since the pages are protected. False positives suggest we should expect 1-4 per day if this were to go live. While the pages are protected, there is no reason to leave this active. -- Shirik 14 Feb 2010",172 Filter,0,10,0,1,,0,default
+36,,258000,King of Hearts,20090830005032,0,,SEO push University of Atlanta,1,10,0,1,"warn,disallow",0,default
+817,,14882394,MusikAnimal,20170104011726,0,,Obamacare vandalism,1,10,0,0,disallow,0,default
+824,,14882394,MusikAnimal,20170418153256,0,,Zeitgeist,1,10,0,0,disallow,0,default
+343,"article_articleid == 0 & /* Article creation */
+""keemstar"" in lcase(added_lines)",5697725,NuclearWarfare,20100920023444,0,"Sudden rush of vandalism, blocking it -- Shirik 14 Jul 2010",Keemstar vandalism,0,10,0,1,,0,default
+603,,855858,Beetstra,20160405110310,0,,Special case of reverting XLinkBot reverts,1,10,0,0,warn,0,default
+533,,14882394,MusikAnimal,20160614033928,0,,Balun link spammer,1,9,0,1,disallow,0,default
+291,,1130897,Ruslik0,20100808081955,0,,Prolific Seelincolshire Sock puppetry,1,9,0,1,,0,default
+810,,14882394,MusikAnimal,20161213162548,0,,Suix vandal,1,9,0,1,,0,default
+315,,1130897,Ruslik0,20100808081913,0,,Garbled content,1,9,0,1,,0,default
+74,"!(""autoconfirmed"" in user_groups) &
+(article_namespace == 0) &
+(edit_delta > 0) &
+(
+ (length(removed_lines) > 0) ? (
+ !(""\n"" in removed_lines) &
+ ((removed_lines + ""\n"") in added_lines) &
+ !(added_lines rlike ""\n.*[{}<>\[\]]"")
+ ) : (
+ !(added_lines rlike ""[{}<>\[\]]"") &
+ (old_wikitext in new_wikitext)
+ )
+)",16980,Dragons flight,20090320212342,0,"Looks for unwikified text added to end of article. Subject to quirky behavior of added_lines / removed_lines at the last line of an article.
+
+This doesn't seem to work. Problem with ternary operator? May revisit later. -DF",Unwikified text added to end of article,0,9,0,1,,0,default
+353,,58193,OverlordQ,20100819063503,0,,Blackout vandalism,1,9,0,1,disallow,0,default
+468,,14882394,MusikAnimal,20160614032907,0,,Fixing vandal,1,9,0,1,,0,default
+486,,14882394,MusikAnimal,20160614033248,0,,Chilean vandal,1,9,0,1,disallow,0,default
+248,,258000,King of Hearts,20110310110852,0,,Memphis Music Spam,1,9,0,1,disallow,0,default
+764,,365454,Zzuuzz,20170402074700,0,,Shirik's Refdesk Filter,1,9,0,1,disallow,0,default
+530,,10639536,Reaper Eternal,20130228170555,0,,Writ Keeper's test filter,1,8,0,1,disallow,0,default
+22,,82835,Rich Farmbrough,20160812194447,0,,New accounts mentioning the abuse filter,1,8,0,1,disallow,0,default
+284,,8544547,Shirik,20100214192857,0,,Image vandalism,1,8,0,1,disallow,0,default
+802,,7529026,There'sNoTime,20170716170553,0,,Teenage Fairytale Dropouts LTA,1,8,0,0,,0,default
+611,,12539517,Ryan Kaldari (WMF),20160818174003,0,,Persistent talk page abuse from IP ranges III,1,8,0,1,disallow,0,default
+371,,258000,King of Hearts,20110310111531,0,,Reference desk trolling,1,8,0,1,,0,default
+908,,14882394,MusikAnimal,20180809162142,0,,Si Thu Moe Min,1,8,0,0,,0,default
+153,,451766,Prodego,20090928230922,0,,Sock deterrance,1,8,0,1,disallow,0,default
+932,"page_namespace == 0 &
+added_lines contains ""theknot.com"" &
+!(removed_lines contains ""theknot.com"") &
+!(summary irlike ""^(Revert|rv|Undid)"") &
+new_wikitext contains ""[[Category:Living people]]"" &
+!(""bot"" in user_groups)",14882394,MusikAnimal,20180912225448,1,"Cleanup. Check added_lines before new_wikitext, as the latter is slower ~MA","Adding ""theknot.com"" into BLP articles",0,8,0,0,,0,default
+679,,15991542,Samwalton9,20150518215516,0,,Possible offensive redirect,1,8,0,1,,0,default
+729,,16980,Dragons flight,20160126162749,0,,Vandalism from Santa Cruz Coe,1,8,0,0,,0,default
+514,"user_name = ""Legoktm""
+& article_articleid == ""37923510""",365454,Zzuuzz,20170402073819,0,"quick test filter, will disable in a few minutes --Legoktm
+done, ori is awesome -Lego
+testing again",Legoktm's test filter,0,7,0,1,warn,0,default
+8,"new_wikitext contains (""#REDIRECT [["" + article_prefixedtext + ""]]"") & ! (""sysop"" in USER_GROUPS)",451766,Prodego,20090819175717,0,No reason to redirect a page to itself,Self-redirect,0,7,0,1,,0,default
+324,,82835,Rich Farmbrough,20160904145949,0,,Possible edits by Fraberj,1,7,0,1,disallow,0,default
+327,,365454,Zzuuzz,20101107191330,0,,Special TFA filter,1,7,0,1,disallow,0,default
+857,,14882394,MusikAnimal,20170522203213,0,,DigitalRavan,1,7,0,1,disallow,0,default
+108,"(article_namespace == 3) & (""{{hangon}}"" in added_lines)",451766,Prodego,20090327021159,0,"Its very common for new users who'se articles have been tagged for speedy deltion and gotten a talk page message about it to add the hangon tag there rather than on the article itself, adding their userpage to cat:csd. Provided this works ok, a message can be given to them telling them what they should be doing - jac
+
+Changed order, should be faster. We could consider doing also 'remove speedy-tag, add hangon' as a catch here. --Beetstra
+
+user talk is 3 not 2 apparently - jac
+
+Already covered, explained on the db template, and this is in the speedy deletion category. Deleted. This is not what a filter is for. -Prodego",Hangon Tag,0,7,0,1,,0,default
+927,,764407,Kuru,20181028205638,1,,LTA 927,1,7,0,0,,0,default
+695,,365454,Zzuuzz,20181104191958,0,,Long term vandal,1,7,0,1,,0,default
+444,,258000,King of Hearts,20130404081005,0,,"Pezzuto, Ivo references",1,7,0,1,disallow,0,default
+208,"(article_namespace == 0) &
+count(""webcitation.org"", removed_lines) > count(""webcitation.org"", added_lines)",258000,King of Hearts,20090830005614,0,"Created per ThaddeusB's request on EF/R. Log-only mode. -- KoH
+
+Gah! Forgot added_lines. Of course. -- KoH
+
+Wrong inequality direction. Fail. -- KoH
+
+This is going to catch too much - disabled, but discuss on my talk page if you think it is worth it -Prodego
+
+Marked as deleted. - KoH",Removal of WebCite URLs,0,7,0,1,,0,default
+245,,258000,King of Hearts,20110310110845,0,,AN and AN/I abuse,1,7,0,1,disallow,0,default
+275,,301395,NawlinWiki,20100329231511,0,,New users moving featured articles,1,6,0,1,,0,default
+38,,1130897,Ruslik0,20090807112247,0,,Argentina nuclear energy IP hopper,1,6,0,1,"warn,disallow",0,default
+57,"(article_articleid == 0) & (action == ""edit"") &
+((lcase(article_text) rlike ""\s?(is|was)\s?(a|an|the)\s?"") |
+(lcase(article_text) rlike ""\s?real\s?name\s?(is|was)\s?"") |
+(lcase(article_text) rlike ""(of|at)\s?\d*\s?(\w*\s?)*(street|road|way|court|drive|boulevard|avenue|lane|circle|loop|alley|close|end|grove|mews|place|plaza|retreat|arcade|circuit|circus|concourse|crescent|esplanade|fairway|gate|grange|mall|parade|parkway|path|ridge|row|rue|terrace|track|trail|walk|access|boardwalk|chase|crest|piazza|square|vista|courtyard|cove|green|lookout|point|viaduct|driveway|glen|spur)""))",1130897,Ruslik0,20090327103250,0,"Recently vandals have been trying to post personal information into page titles; these get logged, and can be hard to get rid of. This should help stop some of those.
+Checks for:
+* ""John Doe of 123 Nowhere street""
+* ""John Doe is/was a something""
+* ""John Doe's real name is/was Jane Doe""
+Logging only right now. - Hersfold
+Need to fix the regexes - Hersfold
+Try this again.... - Hersfold
+Nope, still false positives. Norway doesn't like this regex. I'll come back later. - Hersfold
+Marked as deleted. - Ruslik",Creation of attack page titles,0,6,0,1,,0,default
+70,,16980,Dragons flight,20090321081152,0,,Unusual move reason,1,6,0,1,,0,default
+347,,502540,Xaosflux,20190105155520,0,,Yet another test filter,1,6,0,1,"warn,disallow",0,default
+612,,855858,Beetstra,20140602034412,0,,Wrestling pusher,1,6,0,1,disallow,0,default
+870,,14882394,MusikAnimal,20180821180549,0,,nowiki phishing,1,6,0,0,disallow,0,default
+903,,502540,Xaosflux,20181108021307,0,,neocatechumenal way,1,6,0,0,disallow,0,default
+401,"article_articleid = ""270381""
+&! ""autoconfirmed"" in user_groups
+&(
+pattern:=""\bsoul|\b[gj]+i+n+[gj]+[ea]+r*s*(\b|vi)|\branga|south park|\bfat\b|\bugly|\bpubic\b|crotch|carpet|drapes|sexy|\bhot\b"";
+lcase(added_lines) rlike pattern
+)
+&!lcase(removed_lines) rlike pattern",258000,King of Hearts,20120808231528,0,"Based on years of vandalism of Red hair.
+
+Page semi-protected indefinitely by Dabomb87.
+
+Marked as deleted - KoH","""Red hair"" vandalism",0,6,0,1,disallow,0,default
+418,,365454,Zzuuzz,20170402073605,0,,User is Shirik (test filter),1,6,0,1,disallow,0,default
+421,"article_namespace == 0
+&user_editcount < 100
+&edit_delta < 20
+&((added_lines rlike ""\bB\.? ?C\.? ?E\b""
+&removed_lines rlike ""\bB\.? ?C\b"")
+|(added_lines rlike ""\bB\.? ?C\b""
+&removed_lines rlike ""\bB\.? ?C\.? ?E\b""))",258000,King of Hearts,20120808231722,0,"Testing a filter to log/tag changes between accepted styles by new users.
+
+Marked as deleted - KoH",Engvar filter,0,6,0,1,,0,default
+428,,258000,King of Hearts,20120808231734,0,,Image abuse,1,6,0,1,,0,default
+207,"!(""sysop"" in user_groups) &
+(article_namespace == 3) &
+(""{{unblock"" in lcase(removed_lines)) &
+!(contains_any(lcase(removed_lines), ""{{unblock reviewed"", ""{{unblock on hold"")) &
+!(user_name == article_text)",258000,King of Hearts,20090830005600,0,"Created per Kingpin13's request on EF/R. Log mode only. -- KoH
+
+Addressing false positive: removing {{unblock}} from own talk page. -- KoH
+
+Copy of another one we disabled. Unneeded, a bot already sees this. -Prodego
+
+Marked as deleted. - KoH",Non-admins reviewing unblock requests,0,6,0,1,,0,default
+214,"(article_namespace == 0) &
+(article_recent_contributors == """") &
+(lcase(article_text) in lcase(user_name)) &
+!(lcase(user_name) == lcase(article_text)) &
+(old_size == '0') &
+(user_editcount < 25)",5711305,Cenarium,20090728230153,0,"Temp filter to see what we get. Then probable merge in 188. - Cen
+
+merged in 188, no longer needed - Cen",Creating articles with title contained in username,0,6,0,1,,0,default
+512,,14882394,MusikAnimal,20160614033654,0,,Long-term pattern abuse IV,1,5,0,1,,0,default
+20,"rmspecials(ccnorm(ADDED_LINES + summary)) contains ""THEABUSEFILTERWILLBLOCKTHIS""",82835,Rich Farmbrough,20160812193140,0,"*simplified and compacted the syntax a bit —Nihiltres
+
+A waste of processor time, deleted -Prodego
+Updated for new ccnorm. RF 20160812","Saying ""The abuse filter will block this""",0,5,0,1,,0,default
+540,,9698266,Elockid,20130329222146,0,,Temporary filter,1,5,0,1,disallow,0,default
+801,,25420061,BU Rob13,20161113203914,0,,Prolific_socking_IPs,1,5,0,1,,0,default
+49,,82835,Rich Farmbrough,20160813234857,0,,Hina spam,1,5,0,1,,0,default
+571,,14882394,MusikAnimal,20160614034525,0,,Persistent Disruption,1,5,0,1,disallow,0,default
+69,,16980,Dragons flight,20090321185406,0,,Unusual title change 2,1,5,0,1,,0,default
+842,,14882394,MusikAnimal,20170314161944,0,,Talk page abuse,1,5,0,0,disallow,0,default
+338,"!(""confirmed"" in user_groups) &
+added_lines rlike ""\b[Bb]+[Zz]{5,}\b""",8544547,Shirik,20100618045125,0,"Testing. It's really sad I have to make a filter like this.
+
+Removing hide details restriction. It should be quite obvious what this is hitting. -- Shirik 15 June 2010
+
+Disabled, insufficient activity to warrant a filter. -- Shirik 18 June 2010",Vuvuzela vandalism,0,5,0,1,,0,default
+858,"!(""confirmed"" in user_rights) &
+article_namespace == 0 &
+contains_any(lcase(added_lines), ""vierratime"", ""striveshoot"")",14882394,MusikAnimal,20181211182505,0,"Requested filter PermaLink 783380721
+
+-exempt xconfirmed holders of all types
+
+-unhiden
+
+Disabling, after 6 months with no hits except for the two test edits ~MA
+
+Renabling, they are happening again (see Permalink 815387169) - Nihonjoe
+
+Using contains_any since there's no need for regex. ~MA
+
+Merged to Special:AbuseFilter/58 ~MA",Anime vandal filter,0,5,0,1,,0,default
+610,,12539517,Ryan Kaldari (WMF),20160818173520,0,,Turkish Vandal,1,5,0,0,disallow,0,default
+355,,258000,King of Hearts,20110310111343,0,,Misc vandal,1,5,0,1,disallow,0,default
+109,,451766,Prodego,20090617081623,0,,Fleshlight,1,5,0,1,"warn,disallow",0,default
+392,,5711305,Cenarium,20150212181750,0,,/v/,1,5,0,1,disallow,0,default
+658,"action == ""move""
+& moved_to_namespace == 2600",236191,Nihiltres,20150123194720,0,"– Simple condition: no one should move pages to the Topic namespace at the moment, since moving pages *from* the namespace isn't supported.
+
+– Fix has been deployed, so the filter's no longer necessary.",Disallow moving articles to the Topic namespace,0,5,0,1,disallow,0,default
+952,,14882394,MusikAnimal,20181230215051,0,,Image vandalism IV,1,5,0,1,,0,default
+476,,14882394,MusikAnimal,20160614032919,0,,Kingdom of Sardinia,1,5,0,1,disallow,0,default
+748,"article_namespace == 0 & (
+ article_restrictions_edit rlike 'autoconfirmed' & (
+ (
+ user_editcount < 500 | (
+ /* in seconds = 30 * 24 * 60 * 60 */
+ user_age < 2592000
+ )
+ ) & (
+ old_wikitext rlike ""{{[Pp]p-30-500}}""
+ )
+ )
+)",14882394,MusikAnimal,20160420045626,0,"Per [[Special:PermaLink/698674019#Palestine-Israel articles 3 (2): Arbitrator views and discussion]]. This is undergoing a test period before we definitively consider it for ongoing use.
+
+Log-only for the time being. Any performance tweaks greatly appreciated.
+
+Can be deleted now that we have the new protection level ~MA",pp-30-500 editing restriction,0,5,0,1,,0,default
+286,,8544547,Shirik,20100204022213,0,,Tokusatsu Vandal,1,4,0,1,"warn,disallow",0,default
+40,"!(""autoconfirmed"" in USER_GROUPS) &
+(lcase(added_lines) rlike ""(she|he|it|they|) (died|(is|are) (dead|deceased))"")",1130897,Ruslik0,20090325082823,0,"Uh. why do we need this, and if we do, why restrict to new users?
+
+-- Disabling, no hits in a day. Feel free to modify and re-enable but be careful with it we are having some performence issues atm. The fewer filters the better.
+
+Maybe this could work? Keeping restricted to new users to avoid performance issues; reasoning behind this could be BLP things, etc. - Hersfold
+Never mind, 3 out of the first 4 hits were false alarms. - Hersfold
+Marked as deleted. - Ruslik0",Detect deaths,0,4,0,1,,0,default
+318,,8544547,Shirik,20100416220302,0,,School attacks,1,4,0,1,disallow,0,default
+348,,8544547,Shirik,20100801172202,0,,Rapid insertion of external links,1,4,0,1,,0,default
+127,"!(""sysop"" in user_groups) & action == ""edit"" &
+article_namespace % 2 == 0 &
+contains_any(added_lines,""{{helpme"",""{{adminhelp"")",3075976,Hersfold,20090402212520,0,"Checks for helpme tags in non-talk namespaces.
+
+Helpful warning to come soon... - Hersfold
+
+Could this be merged into Filter ID #104? - Zzyzx11
+
+Oops, yes it can. I'll disable this and copy things over to 104. - Hersfold
+Deleted, merge complete - Hersfold",Helpme tag in content namespace,0,4,0,1,,0,default
+646,"!""autoconfirmed"" in user_groups
+ & article_namespace === 0
+ & added_lines irlike ""(?:image|file)(?:\s*=\s*|:)(?:https?://|C:\\|data:)""",14882394,MusikAnimal,20141202045818,0,"This happens frequently. A new user is unfamiliar with mediawiki image syntax and thinks they can just add the URL (and sometimes the file location on their computer!). Often associated with outright vandalism, the effectiveness of this filter may be twofold. Log only for now. ~MusikAnimal 2014.12.01
+
+Already exists with filter 220",Incorrectly adding images,0,4,0,1,,0,default
+924,,14882394,MusikAnimal,20180719144037,0,,Supersonic Transport Vandal,1,4,0,1,disallow,0,default
+173,,1130897,Ruslik0,20090807113129,0,,Knave,1,4,0,1,,0,default
+429,"!(""confirmed"" in user_groups) &
+(lcase(added_lines) rlike ""\|\s*link\s*=\s*https?://"")",10639536,Reaper Eternal,20110822003015,0,"Creating to prevent malware attacks by Meepsheep. See http://en.wikipedia.org/w/index.php?title=Template:IUCN&diff=445920194&oldid=443167302&unhide=1&diffonly=1. (Warning, turn off previews!) --Reaper
+
+Deleting, FPs. --Reaper",Possible malware attack,0,4,0,1,,0,default
+943,,6362721,Mifter,20181221050308,0,,Prevent special disruption,1,4,0,0,disallow,0,default
+693,"(article_text rlike ""Drake Bell"")
+& (lcase(added_lines) rlike ""trans"")",3210516,Kww,20150625151023,0,Disabled. Terribly-designed filter. --Reaper 02-06-2015,Drake Bell attack,0,4,0,0,disallow,0,default
+720,"!""autoconfirmed"" in user_groups & (
+ action = ""edit"" & (
+ book_match := ""Rothwell-Smith|Silent Films!|Cordelia Books|1-907540-32"";
+ added_lines rlike book_match & (
+ ! removed_lines rlike book_match
+ )
+ )
+)",14882394,MusikAnimal,20151231175642,0,"Disabled, four hits total, and none in over 3 months ~MA 2015.12.31",Rothwell-Smith spam,0,4,0,0,,0,default
+536,,9698266,Elockid,20130317180029,0,,Mrpontiac1,1,3,0,1,,0,default
+301,,301395,NawlinWiki,20100321234837,0,,Blu Aardvark abusive unblock requests,1,3,0,1,,0,default
+574,,3855926,Legoktm,20130718094758,0,,Vandalism,1,3,0,1,disallow,0,default
+853,,15991542,Samwalton9,20170512133620,0,,Quick vandalism response,1,3,0,0,disallow,0,default
+882,,14882394,MusikAnimal,20171010005143,0,,LTA 882,1,3,0,1,,0,default
+387,,82835,Rich Farmbrough,20160904150238,0,,Fake pagemove edit summaries,1,3,0,1,disallow,0,default
+691,"!(""confirmed"" in user_groups) &
+(article_namespace == 0) &
+(""shadows of the void"" in added_lines)",15991542,Samwalton9,20150618161603,0,"Per request, log only for now --Samwalton9, 25 May 2015
+
+Cleaned up and optimized. --Reaper 2 June 2015
+
+Disabling, not worth continuing. --Samwalton9, 18 June 2015",Shadows of the Void,0,3,0,0,,0,default
+184,,2091313,Chris G,20090620043823,0,,abusive edit summaries,1,3,0,1,"warn,disallow",0,default
+707,,76,The Anome,20150719124707,0,,Edit filter false positives vandalism,1,3,0,0,disallow,0,default
+749,,14882394,MusikAnimal,20160111160718,0,,SS disruption,1,3,0,0,,0,default
+243,,5711305,Cenarium,20150212173432,0,,WikiMedia Viewer possible malware,1,3,0,1,,0,default
+244,"!(""autoconfirmed"" in user_groups) &
+contains_any(added_lines, ""%26gt%3B"", ""%2526gt%253B"", ""%7B%7B"")",365454,Zzuuzz,20091003125413,0,"testing for broken proxies, eg 216.22.10.185, 209.188.92.11, 93.174.88.31 applies to user accounts as well
+might get around to finishing this one day. deleted --zzuuzz",Possibly broken proxies,0,3,0,1,,0,default
+251,,82835,Rich Farmbrough,20160820181913,0,,Mark Levin Vandalism,1,3,0,1,,0,default
+552,,14882394,MusikAnimal,20160614034140,0,,Wikiassociate rangeblock,1,2,0,1,disallow,0,default
+302,"""onzale"" in lcase(added_lines) &
+ip_in_range(user_name, ""208.54.14.0/24"")",8544547,Shirik,20100317030333,0,"Per WP:EF/R, IP range that has a known paid/COI editor
+
+Log only for now. -- Shirik 9 Mar 2010
+It appears the /24 range, not the /8 range, was meant. -- Shirik 13 Mar 2010
+Insufficient activity to justify; disabled/deleted -- Shirik 16 Mar 2010",Possible COI,0,2,0,1,,0,default
+814,,365454,Zzuuzz,20170402072733,0,,More refspam,1,2,0,1,,0,default
+73,"(""sysop"" in user_groups) &
+(article_namespace == 2) &
+(""this is bad"" in lcase(added_lines))",16980,Dragons flight,20090320200641,0,"Is the throttle working at all? What does it log
+
+Just a note how the throttling works. No action is taken until the throttle is hit. Then whatever options are selected are taken (e.g. warn, disallow, etc) -Prodego
+
+:Also important, no action is LOGGED until the throttle is hit. -DF",Throttle test,0,2,0,1,"throttle,warn,disallow",0,default
+841,"!(""confirmed"" in user_groups) &
+added_lines contains ""current_team"" &
+edit_delta < 500 &
+contains_any(lcase(old_wikitext), ""transaction pending"", ""current sports transaction"")",14882394,MusikAnimal,20170224013137,0,"Per [[Special:Permalink/766713936#Unofficial sports transaction]]. Log-only for now ~MA
+
+Not that helpful ~MA",Unofficial sports transaction,0,2,0,1,,0,default
+589,"(user_name = ""AnomieBOT"") &
+(old_size = 0) &
+(""Adding {{old AfD multi}}"" in summary) &
+(""delete"" in new_wikitext)",14882394,MusikAnimal,20160614034734,0,"Logs talk pages created by the bot. Helps in detecting when a page has been recreated following a deletion discussion, which can be speedily deleted.",Possible recreation of deleted material,0,2,0,1,,0,default
+606,"edit_delta > 100000
+& article_articleid == 5137507",14882394,MusikAnimal,20160614035031,0,"testing a filter to catch the old-version restoartion bug on ANI that's been prevalent today
+
+Not explding anything, so let's try it with warn on
+
+No hits for many hours; issue appears to be fixed, so let's disable",ANI restoration bug,0,2,0,1,warn,0,default
+362,"article_articleid == 0
+& article_namespace == 0
+& !""autoconfirmed"" in user_groups",10056771,EdoDodo,20100922082300,0,"Creating log-only mode to check how common this is and if it is useful. -EdoDodo
+
+Marking as deleted, uses too many conditions. -EdoDodo",New user creating page,0,2,0,1,,0,default
+628,,14882394,MusikAnimal,20160614035602,0,,User talk page vandalism by sockpuppets,1,2,0,1,disallow,0,default
+118,"!(user_name == ""Raul654"")
+& (article_namespace == 4)
+& (""Today's featured article"" in article_text)
+& (action == ""edit"")
+& (""{{tfaempty}}"" in lcase(removed_lines))",16980,Dragons flight,20090423050115,0,"As per [[WP:TFA]], the final selection is only made by the featured article director ([[User:Raul654|Raul654]]). All the daily TFA templates are originally populated by {{TFAempty}} prior to Raul654 saving each blurb.
+
+Too specific, disabling, performance -Prodego","The final selection of TFA's is made by Raul654, the featured article director",0,2,0,1,,0,default
+379,"article_namespace == 2 & ""automatically reserved through Trademarkia.com"" in added_lines",676502,Nakon,20110119220533,0,"log
+
+Too specific, 2 hits ever, and condition lim is being hit -P",username registrations by trademarkia,0,2,0,1,,0,default
+413,,258000,King of Hearts,20120808231609,0,,Adding images to userspace,1,2,0,1,,0,default
+669,"old_size==0 &
+(contains_any(lcase(added_lines+article_text), ""kompor gas "", ""kompor-gas "", "": 0878-0824-2095"", "":087808242095"", ""service kompor "", ""service-kompor "", ""-0878 0824 2095"", "":0878 0824 2095""))",14882394,MusikAnimal,20160614040618,0,"[[Wikipedia:Sockpuppet_investigations/Service_kompor_gas]]
+
+Tagging filter in test, looking for impact of false positive, where we can look to increase the actions, and if we do, we should hide this filter. - billinghurst 20150303
+-additional terms added - billinghurst 20150306
+
+This looks like a very specific issue that shouldn't need a publicly viewable tag, wouldn't the abuse filter log be sufficient for tracking ? If a tag is really needed, please add a tag description so that users at Special:Tags know what this is about. Thanks, Cen 3/3/15
+
+Disabled. Only two hits. --Reaper 2015-06-02",Service Kompor,0,2,0,1,,0,default
+162,,855858,Beetstra,20090517140757,0,,Thermal bag,1,2,0,1,"warn,disallow",0,default
+682,,365454,Zzuuzz,20181104191913,0,,SEO/Attack page,1,2,0,1,disallow,0,default
+431,,301395,NawlinWiki,20110903105437,0,,Malaysian IP hopping vandal,1,2,0,1,disallow,0,default
+687,"beforeStr := ""cloud"";
+afterStr := ""butt"";
+
+user_editcount < 50 &
+(
+ article_namespace == 0 &
+ (
+ added_lines irlike afterStr &
+ !(new_wikitext irlike beforeStr) &
+ (
+ !(old_wikitext irlike afterStr) &
+ old_wikitext irlike beforeStr
+ )
+ )
+)",14882394,MusikAnimal,20160614040910,0,"In response to the growing popularity of humourous browser extensions that replace words with obscenities. Many edits are otherwise constructive, with the user completely unaware that the extension affected their edit. Example extension: https://chrome.google.com/webstore/detail/cloud-to-butt-plus/apmlngnhgbnjpajelfkmabhkfapgnoai?hl=en
+
+""Cloud"" to ""butt"" is the most popular, only capturing those for now, log only. ~MA
+
+Too infrequent ~MA",Possible word replacement extension,0,2,0,1,,0,default
+714,,365454,Zzuuzz,20170402074415,0,,Reference desk sexuality trolling,1,2,0,1,disallow,0,default
+715,"article_articleid == ""23609350""
+& user_age == 0",14882394,MusikAnimal,20170114074839,0,"for logging -nakon
+block edits with warning -nakon
+
+disabling, very rarely hit ~MA 2016.01.07",IP notification on RFP/C,0,2,0,1,"warn,disallow",0,default
+484,"(article_prefixedtext == ""User:ClueBot NG/Run"")
+& !(""administrator"" in user_groups)
+& !(""bureaucrat"" in user_groups)
+& (lcase(removed_lines) rlike ""true"")
+& (lcase(added_lines) rlike ""false"")",5711305,Cenarium,20150212172634,0,"Creating new filter
+
+* Trying this instead
+
+Any user who thinks to check here will just check the /Run page. Just sysop-protect the page if you don't want non-admins messing with it. --Reaper 2012-09-06",Shutdown of ClueBot by non-admin user,0,2,0,1,warn,0,default
+487,"action == ""feedback"" & !(user_groups contains ""autoconfirmed"") &
+lcase(new_wikitext) irlike "".*@([A-Za-z0-9-]+[.])+[A-Za-z0-9-]+.*""",3855926,Legoktm,20140303202310,0,"Test: Match article feedback entries if they contain an email address. Once we're sure it's working, the filter will be configured to disallow the comment, as the majority of oversight requests involve email addresses. - Hersfold, 02:14 August 27 2012 UTC
+
+Adding group check for performance - Hersfold, 02:26 August 27 2012 UTC
+
+Disabling, just noticed that 463 already exists for this. - Hersfold, 02:36 August 27 2012 UTC
+
+Deleting, AFTv5 removed from WMF wikis --Legoktm 03/03/13",Test filter for feedback tool oversight prevention,0,2,0,1,,0,default
+805,,14882394,MusikAnimal,20161213162528,0,,Compromised activity,1,1,0,1,,0,default
+561,,14882394,MusikAnimal,20160614034418,0,,Chaosname II,1,1,0,1,disallow,0,default
+310,,82835,Rich Farmbrough,20160824183625,0,,Pagemove vandalism by specific vandal #2,1,1,0,1,disallow,0,default
+822,,258000,King of Hearts,20170130055044,0,,Shinji,1,1,0,0,disallow,0,default
+831,"nope :=""Vasily Yanchilin"";
+! ""confirmed"" in user_groups &
+(
+ (article_namespace == 0 | article_namespace == 1)&
+ (added_lines irlike nope)
+)",14882394,MusikAnimal,20170418152852,0,"[[Special:PermaLink/761642496#Spammer]] -- Xaos
+
+Disabling, only a single hit over 2 months ago ~MA",Yanchilin spammer,0,1,0,0,,0,default
+334,,7777104,Kingpin13,20100531204443,0,,Grawp page move vandalism,1,1,0,1,"disallow,blockautopromote",0,default
+350,,258000,King of Hearts,20110310111326,0,,Waterspaces candidates,1,1,0,1,,0,default
+120,,82835,Rich Farmbrough,20160818205831,0,,Real life info,1,1,0,1,,0,default
+121,,349283,Werdna,20090331035312,0,,Testing filter,1,1,0,1,,0,default
+649,,14882394,MusikAnimal,20160614040218,0,,SP disruption,1,1,0,1,,0,default
+142,,5711305,Cenarium,20090525134153,0,,Buddhism and Quantum Physics,1,1,0,1,disallow,0,default
+399,,258000,King of Hearts,20120808231514,0,,User page vandalism,1,1,0,1,disallow,0,default
+145,,352579,Wknight94,20090501020009,0,,Socks abusing talk page privilege,1,1,0,1,disallow,0,default
+677,"regexstr := ""april\s*fo+ls"";
+
+!""autoconfirmed"" in user_groups
+ & article_namespace == 0
+ & added_lines irlike regexstr
+ & !(old_wikitext irlike regexstr)",14882394,MusikAnimal,20150401165223,0,"Log only, see if this is worth anything ~MA
+
+not useful",April Fools disruption,0,1,0,1,,0,default
+685,,14882394,MusikAnimal,20160614040844,0,,HH disruption,1,1,0,1,,0,default
+196,,5711305,Cenarium,20150212173405,0,,Michael Jackson move vandalism,1,1,0,1,,0,default
+198,,352579,Wknight94,20090704200951,0,,Sock test,1,1,0,1,,0,default
+230,,82835,Rich Farmbrough,20160820181534,0,,AnonTalk 4,1,1,0,1,disallow,0,default
+256,,451766,Prodego,20091127160945,0,,Duran Duran vandal,1,0,0,1,,0,default
+515,,3855926,Legoktm,20121219184028,0,,More LTA,1,0,0,1,"warn,disallow",0,default
+771,,14882394,MusikAnimal,20160701154055,0,,Orion LTA,1,0,0,1,,0,default
+772,"!(""autoconfirmed"" in user_groups) & (
+ article_namespace == 0 & (
+ crosses :=""^(\w+( \w+(✝|âœ|\+))*)?"";
+ added_lines irlike crosses & (
+ !(removed_lines irlike crosses)
+ )
+ )
+)",7529026,Samtar,20160703161546,0,"Testing rquested edit filter (Wikipedia:Edit_filter/Requested#Crosses_for_deceased_people) --Samtar
+
+No hits, marking for deletion --Samtar 03/07/16 16:15",Crosses for deceased people,0,0,0,1,,0,default
+517,,14882394,MusikAnimal,20160614033741,0,,Train station removal,1,0,0,1,"throttle,disallow",0,default
+262,,301395,NawlinWiki,20091116214938,0,,If you donate ...,1,0,0,1,,0,default
+518,,14882394,MusikAnimal,20160614033748,0,,Hoppity Hooper vandal,1,0,0,1,disallow,0,default
+774,,14882394,MusikAnimal,20160701152056,0,,Eolgi highway vandal,1,0,0,1,,0,default
+265,"!(""autoconfirmed"" in user_groups) &
+(contains_any( ccnorm(added_lines),
+""SHIT"",
+""FOCKER"",
+""BITCH"",
+""BASTERD"",
+""PRICK"",
+""DICK"",
+)
+)",82835,Rich Farmbrough,20160823115029,0,"created to prevent l337 vandalism
+Disable, won't match anything, please read the documentation for ccnorm. Also, no need for this to be private. -P
+
+Marked as deleted. - Ruslik
+Updated for new norm/ccnorm, and fixed some stuff. RF 20160823",l337 vandalism,0,0,0,1,,0,default
+522,,82835,Rich Farmbrough,20160929181853,0,,Prolific Socking,1,0,0,1,disallow,0,default
+267,,301395,NawlinWiki,20091217171048,0,,Samlaptop,1,0,0,1,"disallow,blockautopromote",0,default
+272,"user_editcount < 50 &
+article_recent_contributors rlike (""(.*\n){0,8}"" + user_name + ""\n$"") &
+(contains_any(removed_lines, ""{{db-"", ""{{hangon"")) &
+!(contains_any(added_lines, ""{{hangon"", ""{{db-"")) &
+!(lcase(removed_lines) rlike ""{{db-(self|blanked|auth|g7)}}"")",1130897,Ruslik0,20100217195233,0,"Filter to warn or disallow users from removing SD templates from their own page, parts taken from 29.
+Marked as deleted. - Ruslik",Page author removing CSD tags,0,0,0,1,,0,default
+528,,82835,Rich Farmbrough,20160929182033,0,,Persistent Abuse,1,0,0,1,disallow,0,default
+274,,1130897,Ruslik0,20100217195157,0,,Digimon vandal,1,0,0,1,,0,default
+276,,82835,Rich Farmbrough,20160823115528,0,,scripted anomtalk/spoofed IP vandalism,1,0,0,1,,0,default
+21,,451766,Prodego,20090318070855,0,,"""Ezekiel"" guy",1,0,0,1,blockautopromote,0,default
+277,,712163,DMacks,20091221082656,0,,possible vandalbot,1,0,0,1,,0,default
+535,,14882394,MusikAnimal,20160614033947,0,,Voobly spam,1,0,0,1,disallow,0,default
+791,,855858,Beetstra,20160822044357,0,,Spam(bot|mer)s continuously hitting the spam blacklist,1,0,0,1,,0,default
+537,"ccnorm(added_lines) rlike ""WIKIPEDIOCRACY""",82835,Rich Farmbrough,20161012201334,0,"This filter will attempt to block all mention of the word ""wikipediocracy"" (not just the link) regardless of whether it is originally there and regardless of who mentioned it. Add to that the fact that it simply cannot trip because ccnorm(""Wikipediocracy"") is ""W1K1PED10CRACY"", not ""wikipediocracy"". Use the spam blacklist if necessary. Deleted. --Reaper 2013-03-13
+Updated for new norm/ccnorm. RF 20161012",Transient harassment sites filter,0,0,0,1,disallow,0,default
+282,,5697725,NuclearWarfare,20100224000622,0,,ArbCom filter 1,1,0,0,1,,0,default
+794,"article_namespace == 0 &
+added_lines contains ""bbc.co.uk/iplayer""",14882394,MusikAnimal,20160909183200,0,"Per [[Wikipedia:Edit_filter/Requested#iPlayer_Programme_links]], logging only and batch tested --Samtar 3/9/16
+
+When running on *every* edit in the mainspace, think of some way to improve performance. URLs will very likely all be lowercased, and ""contains"" does not use the regex engine ~MA 2016.09.03
+
+Disabling until we hear back from User:Sfan00_IMG. It seems Special:Search would suffice for their purpose ~MA 2016.09.04
+
+Going with XLinkBot instead. Marking fitler as deleted ~MA 2016.09.09",iPlayer Programme link,0,0,0,1,,0,default
+27,"(""Replaced content with"" in summary) & !(""autoconfirmed"" in user_groups) & (user_name != article_recent_contributors)",16980,Dragons flight,20090318044030,0,"I'm using the autosummary to detect page replacements. Probably that could be implemented directly here, but I'm not sure which approach would be better.
+
+Autosummary is not available to edit filter.",New user replacing page content,0,0,0,1,,0,default
+283,,8544547,Shirik,20100118222848,0,,Copyright violations in edit summaries,1,0,0,1,,0,default
+32,"action == 'edit' & !(""autoconfirmed"" in user_groups) & edit_delta > 400000",1130897,Ruslik0,20090511155725,0,"Leaving this on log-only mode for a day or so on the off chance there's a false positive
+
+12 hours with no hits, setting to disallow - Mr.Z-man
+
+Seems to be taking a rather large time (80-120 ms) for a simple check; testing with edit_delta before user_editcount to see if that makes a difference
+
+Changed editcount check to user groups check
+
+Turning down to 500000 and disabling disallow to check for false positives @ 3/20 4:55 UTC
+
+Disabled. No hits in more than three weeks. - Ruslik
+Marked as deleted. - Ruslik",Huge additions by new users,0,0,0,1,,0,default
+292,"(user_editcount < 47) & article_namespace != 2
+& article_prefixedtext != 'Wikipedia:Sandbox'
+& rmwhitespace(summary) rlike ""([^_:*'|=}{-]{1,9})\1{6}""
+& !(added_lines rlike ""\[https?:\/\/\w*([^_:*'|=}{-]{1,9})\1{6}.*?\]"")",301395,NawlinWiki,20100212192820,0,"Similar to #135, but applied to edit summaries. Testing (with tag) to start. --NW
+Merged to #135 to save desparately-needed conditions. - Shirik 12 Feb 2010",Repeating characters in edit summary,0,0,0,1,,0,default
+548,,14882394,MusikAnimal,20160614034107,0,,Fort Irwin National Training Center rangeblock,1,0,0,1,disallow,0,default
+551,,14882394,MusikAnimal,20160614034132,0,,Leandro Carvalho rangeblock,1,0,0,1,disallow,0,default
+807,,14882394,MusikAnimal,20161213162516,0,,Ourmine,1,0,0,1,,0,default
+296,,82835,Rich Farmbrough,20160824183554,0,,Edit summary vandalism III,1,0,0,1,disallow,0,default
+41,,1807070,East718,20090318131947,0,,Pagemove vand,1,0,0,1,,0,default
+297,,8544547,Shirik,20100304052321,0,,Jeske's Test Filter,1,0,0,1,,0,default
+42,,1130897,Ruslik0,20090408124340,0,,ASCII art Mk.2,1,0,0,1,disallow,0,default
+299,,8544547,Shirik,20100226033620,0,,Personal attacks,1,0,0,1,disallow,0,default
+555,,14882394,MusikAnimal,20160614034308,0,,Aaron spam,1,0,0,1,,0,default
+300,,8544547,Shirik,20100304052339,0,,Cross-posting,1,0,0,1,,0,default
+558,,14882394,MusikAnimal,20160614034337,0,,FIFA West Germany,1,0,0,1,disallow,0,default
+303,"article_articleid == 0 & /* new page */
+""onzale"" in lcase(article_text) &
+ip_in_range(user_name, ""208.54.14.0/8"")",8544547,Shirik,20100312024806,0,"Per WP:EF/R known COI/paid user creating inappropriate pages
+
+Log only for now -- Shirik 9 Mar 2010
+IP creating new articles? No.... Deleted in shame. -- Shirik 11 Mar 2010",COI Page Creation,0,0,0,1,,0,default
+304,"!(""confirmed"" in user_groups) &
+lcase(added_lines) rlike ""rayman (?:advent|unlimited|rx)""",8544547,Shirik,20100320185413,0,"Per WP:EF/R, prolific sock introducing deliberate inaccuracies. Log only for testing. -- Shirik 11 Mar 2010
+Missed a condition -- Shirik 15 Mar 2010
+
+No hits; deleting -- Shirik 20 Mar 2010",Rayman vandalism,0,0,0,1,,0,default
+562,,14882394,MusikAnimal,20160614034426,0,,Hackneyhound,1,0,0,1,disallow,0,default
+308,"article_articleid == 0 &
+article_text rlike ""^Wikipedia:Mediation Cabal\/Cases\/[^\/]+\/$""",8544547,Shirik,20100323215045,0,"Per WP:EF/R, filter to detect and warn regarding inappropriately created medcab cases (ones without a name).
+
+Log only for now. -- Shirik 18 Mar 2010
+
+The abusefilter is intended to stop abusive edits. This is neither problematic, nor abusive. Disable - P",Malformed Mediation Cabal Requests,0,0,0,1,,0,default
+565,,365454,Zzuuzz,20170509185916,0,,Cat abuse,1,0,0,1,warn,0,default
+823,,14882394,MusikAnimal,20170115205517,0,,Suspicious activity from new account,1,0,0,0,,0,default
+568,,14882394,MusikAnimal,20160614034501,0,,SPI Clerk impersonation,1,0,0,1,,0,default
+569,,14882394,MusikAnimal,20160614034508,0,,Texas film fan,1,0,0,1,,0,default
+572,,82835,Rich Farmbrough,20170419224852,0,,Persistent Disruption II,1,0,0,1,disallow,0,default
+62,"action == ""delete""
+& article_namespace == 0
+& article_text == ""Main Page""",502540,Xaosflux,20170511125337,0,Don't delete the main page!,Deleting the Main Page,0,0,0,1,,0,default
+64,,82835,Rich Farmbrough,20160818205234,0,,Shock sites in edit summaries,1,0,0,1,,0,default
+321,,8544547,Shirik,20100425083044,0,,Shirik's test filter,1,0,0,1,,0,default
+67,"(user_editcount < 25 | !(""user"" in user_groups))
+& ""Articles for deletion/"" in article_text
+& !(""Articles for deletion/Log"" in article_text)
+& (article_namespace == 4)
+& !(user_name in article_recent_contributors)
+&
+(
+count(""keep"",lcase(added_lines)) >= 1 |
+count(""delete"",lcase(added_lines)) >= 1 |
+count(""redirect"",lcase(added_lines)) >= 1 |
+count(""merge"",lcase(added_lines)) >= 1
+)",1130897,Ruslik0,20090408124418,0,"Theoretically this should trigger if a newish user comments for the first time on an AfD, but only if three such edits are made from the same IP range on the same page during a five-day period. Leaving this log only for a while to test. In the future, we could add a user_age check as well, but I'm not certain what format that's in. - Hersfold
+
+Was running kinda slow for a while there, let's try this - Hersfold
+
+Attempting to reorder to increase speed - Hersfold
+P.S. - The no hits on this should be a good thing; with the throttle enabled, the filter will not trip until the limit is reached (probably indicating socking). Five days seems to be too much for the filter to handle, though, so I'm reducing this to trip if there are two triggers in the same /16 IP range on the same discussion within a 2 1/2 day period. - Hersfold
+
+
+Lower editcount to 25, allow editing of log pages. - X!
+
+0 hits, disabled, performance -Prodego
+Marked as deleted - Ruslik",Sockpuppetry at AfD discussions,0,0,0,1,throttle,0,default
+836,,358954,Georgewilliamherbert,20170302013108,0,,ANI / Air India Tehran,1,0,0,0,disallow,0,default
+582,"!(added_lines rlike ""[\[\]\.]"") & (removed_lines rlike ""[\[\]\.]"") &
+(count(""#"", added_lines) - count(""#"", removed_lines) > 5)",14882394,MusikAnimal,20160614034657,0,"See https://bugzilla.wikimedia.org/show_bug.cgi?id=32013.
+
+Blocks users from making affected edits.",IE 8/9 XSS Filter Bug,0,0,0,1,,0,default
+329,"article_articleid = 27269241 &
+article_namespace = 4 &
+user_editcount < 1000",8544547,Shirik,20100511004040,0,"Temporary filter for SPI disruption. Will be disabled soon.
+
+No longer necessary. Baleeted. -- Shirik 10 May 2010",SPI disruption,0,0,0,1,"warn,disallow",0,default
+586,"(article_namespace = 5 | article_namespace = 4) &
+article_articleid != 21063913 &
+user_editcount < 300 &
+( summary rlike ""\(\[\[WP:AFCH\|AFCH\]\].*?\)"" |
+( (""{{AFC submission||"" in old_wikitext) & !(""{{AFC submission||"" in new_wikitext) ) )",14882394,MusikAnimal,20160614034715,0,"Detects reasonably new users who are reviewing AfC submissions using the AFCH script. --Legoktm
+
+Updated to include reviewing not just via script.",New user reviewing AfC submissions,0,0,0,1,,0,default
+75,(new_size <= 200) & old_size >= 1000 & ('NEEGAR' in ccnorm(added_lines) ),58193,OverlordQ,20090321080048,0,,Blanking Vandalism,0,0,0,1,,0,default
+588,,14882394,MusikAnimal,20160614034723,0,,Promotional usernames,1,0,0,1,,0,default
+335,,365454,Zzuuzz,20101107190843,0,,Talk page abuse,1,0,0,1,disallow,0,default
+591,,258000,King of Hearts,20140422022459,0,,Christian2941,1,0,0,0,,0,default
+336,,258000,King of Hearts,20100902044736,0,,Darth Vader,1,0,0,1,disallow,0,default
+592,,258000,King of Hearts,20140422022515,0,,Christian2941 (duplicate),1,0,0,1,,0,default
+337,"(ip_in_range(user_name, ""4.227.0.0/16"")
+& contains_any(article_prefixedtext, ""KEWI""))",258000,King of Hearts,20110310111239,0,"per request on my talk page -- NW, 6/4/10
+-Disable no hits to date -P
+
+Deleted. - KoH",Arkansas TV IP vandalism,0,0,0,1,"warn,disallow",0,default
+83,,1130897,Ruslik0,20090408124448,0,,Genesis vandal,1,0,0,1,disallow,0,default
+84,,646348,Mr.Z-man,20090323041819,0,,goatse vandalism,1,0,0,1,,0,default
+85,,855858,Beetstra,20090323174915,0,,Beetstra - speed testing rules,1,0,0,1,,0,default
+86,,451766,Prodego,20090323164705,0,,Argentina nuclear energy IP hopper - Rule 1,1,0,0,1,,0,default
+87,,451766,Prodego,20090323164702,0,,Argentina nuclear energy IP hopper - Rule 2,1,0,0,1,,0,default
+88,,451766,Prodego,20090323164659,0,,Argentina nuclear energy IP hopper - Rule 3,1,0,0,1,,0,default
+89,,451766,Prodego,20090323164656,0,,Argentina nuclear energy IP hopper - Rule 4,1,0,0,1,,0,default
+90,,451766,Prodego,20090323164654,0,,Argentina nuclear energy IP hopper - Rule 5,1,0,0,1,,0,default
+91,,451766,Prodego,20090323164655,0,,Argentina nuclear energy IP hopper - Rule 6,1,0,0,1,,0,default
+92,,451766,Prodego,20090323164725,0,,Argentina nuclear energy IP hopper - Rule 7,1,0,0,1,,0,default
+349,,8544547,Shirik,20100809145939,0,,Dudley Attacks,1,0,0,1,disallow,0,default
+605,,14882394,MusikAnimal,20160614035004,0,,Animal Welfare issues,1,0,0,1,,0,default
+607,,12539517,Ryan Kaldari (WMF),20160818172941,0,,March 2014 test filter,1,0,0,0,,0,default
+100,"article_text == ""Warren G. Harding"" &
+(""gangsta"" in lcase(added_lines) | ""secret negro president"" in lcase(added_lines))",1130897,Ruslik0,20090429123827,0,"Filters out recurring vandalism inspired by TV show.
+
+Added paren to reflect what I believe is the intended operation order. -DF
+
+Disabled, performance -Prodego
+Marked as deleted. - Ruslik","""Warren G. Harding"" = Gangsta",0,0,0,1,,0,default
+356,,258000,King of Hearts,20110310111353,0,,Removal of LGBT project banner with disruptive edit summary,1,0,0,1,,0,default
+357,"article_namespace == 0
+& !""autoconfirmed"" in user_groups
+& (old_size == 0)
+&!added_lines rlike ""[^0-9\[\\\^\$\.\|\?\*\+\(\)\{\}\]~!@#%&_;:,<>/']""",3315180,Someguy1221,20100902060504,0,"Should detect new pages that contain ""only"" numbers, punctuation, and some special symbols. Just testing for now. - Someguy1221
+
+Consumes too many conditions, disabled. - Someguy1221",Test pages,0,0,0,1,,0,default
+110,"""user"" in user_groups &
+(
+ ! (""sysop"" in user_groups | ""accountcreator"" in user_groups)
+)
+& action = 'createaccount'",1130897,Ruslik0,20090408124254,0,"Trying again, log only. - J.delanoy
+
+:Disable. The software is not populating user_groups during account creation. -DF
+Marked as deleted. - Ruslik",Account creation throttle,0,0,0,1,throttle,0,default
+111,"!(""autoconfirmed"" in USER_GROUPS)
+& (article_namespace == 0)
+& (added_lines rlike ""(you(re?|'re| are) (gay|(a )?fag(gy|got)?))"")",160367,Mindmatrix,20090327010201,0,"Basic filter, may need optimisation. - Mindmatrix
+Never mind, I just found filter 97 covers this. - Mindmatrix",Gay or fag,0,0,0,1,,0,default
+626,"!(""sysop"" in user_groups)
+& action == 'delete'",14882394,MusikAnimal,20160614035502,0,This filter tag deletions by users not in local sysop group.,Deletion by a non-administrator,0,0,0,1,,0,default
+374,,258000,King of Hearts,20120808231359,0,,"""linkless spam""",1,0,0,1,disallow,0,default
+376,,258000,King of Hearts,20110310111547,0,,InfoCheck Vandalism,1,0,0,1,,0,default
+122,"(article_prefixedtext contains ""Wikipedia:Changing username"")
+& (added_lines contains ""{{renameuser2"")
+& (
+ (added_lines contains ""CURRENT"") |
+ (added_lines contains ""NEW"")
+)
+& !(""bot"" in user_groups )",1130897,Ruslik0,20090429123937,0,"-Change to subpages, allow bot to edit
+-Too specific, disabled and deleted, performance. -Prodego
+Marked as deleted. - Ruslik",Changing Username malformed requests,0,0,0,1,,0,default
+124,,5711305,Cenarium,20090525134106,0,,hitlerbunker.com,1,0,0,1,"warn,disallow",0,default
+893,"(article_namespace == 0) &
+(added_links irlike ""(?i)doi[ ]*=[ ]*10[.](4172|4236|5897|11648)"")",855858,Beetstra,20171206121123,0,"Per https://en.wikipedia.org/w/index.php?title=Wikipedia:Edit_filter/Requested&oldid=814008367#Predatory_open_access_journals
+
+Case insensitive",Predatory open access journals.,0,0,0,1,,0,default
+382,,301395,NawlinWiki,20120202004509,0,,Scientology,1,0,0,1,disallow,0,default
+128,,301395,NawlinWiki,20090404113726,0,,Vandal accounts,1,0,0,1,,0,default
+130,,855858,Beetstra,20090617092044,0,,Kaveh L. Afrasiabi,1,0,0,1,"warn,disallow",0,default
+644,"(
+ ip_in_range(user_name, ""27.123.64.0/18"")
+|ip_in_range(user_name, ""101.2.0.0/17"")
+)
+& (article_text rlike(""Kww""))",14882394,MusikAnimal,20160614040138,0,-- seems to have gone away,Mitrabarun Mitra,0,0,0,1,disallow,0,default
+647,"testRegex := ""{{mfd|{{Article for deletion"";
+
+!""autoconfirmed"" in user_groups
+ & (article_namespace === 0 | article_namespace === 2)
+ & removed_lines irlike testRegex
+ & !(added_lines irlike testRegex)",14882394,MusikAnimal,20141202050416,0,Already exists with filter 174,New user removing XfD template,0,0,0,1,,0,default
+136,"(article_namespace == 0)
+& (""Main Page"" in article_text)
+& (action == ""edit"")
+& (edit_delta != 0)",1130897,Ruslik0,20090429123741,0,"This is used to display a ""Are you sure you want to save the Main Page?"" warning message. As the most highly visible page on Wikipedia, the Main Page has historically been one of the first vandalism targets of a compromised account. Thus, admins are generally cautioned to be careful when editing the Main Page because any edit that resembles vandalism might be perceived as one made by a compromised sysop account (see also [[Template:Editnotices/Main Page]]).
+
+Disabled for now until an appropriate warning message is created, and there is actually enough activity to warrant such a filter. -- Zzyzx11
+
+Enough activity? The history tab says it hasn't been edited in a month and a half! A software workaround should be much better in terms of performance. And it's not like we're having a lot of compromised sysop accounts... --Admiral Norton
+
+Maybe not immediately recent. It appears from your user contributions, Admiral Norton, that you were not around during April-May 2007 when at least five sysop accounts were compromised and attacked the Main Page in less than two weeks (see [[Wikipedia:Wikipedia Signpost/2007-05-07/Admins desysopped]]). I was thinking about that when creating this filter. It would be nice to have something like a warning just in case. But since it only covers one page, you may be right that using Abuse Filter might have some performance issues. -- Zzyzx11
+
+Even then, though, a compromised account won't stop just because a big ugly box tells them to. Even if they do, they'll just find some other (more difficult to reverse) means of wreaking havoc with the admin tools. Maybe throw up an editnotice (and I think there already is one...?) but an abuse filter isn't necessary and risks slowing things down. - Hersfold
+
+Couldn't an edit-notice do the same job? --Conti
+
+Marked as deleted. - Ruslik",Editing the Main Page,0,0,0,1,,0,default
+138,,451766,Prodego,20090407142140,0,,Template vandalism,1,0,0,1,,0,default
+907,"article_prefixedtext == ""St. Bernard (dog)"" &
+user_editcount < 250 &
+contains_any(lcase(added_lines), ""benedictine daily double"", ""weighed 367 pounds"", ""heaviest and largest dog ever"")",19502780,Galobtter,20181230082522,0,"There are many unreliable sources out there, all synthesis. It keeps on being added, new editors and IPs alike. Only reasonable solution would be a permanent page protection (which is disruptive), so we put a filter in place.
+
+This filter is intended to be set to block this addition except for experienced editors (at which moment the filter can be disabled, though I doubt that there is a reliable source for this, this is more likely to be a hoax).
+
+As I have the feeling that the current editor intentionally gained confirmed rights, filtering on less than 250 edits, or being an IP. --Beetstra 21/03/2018
+
+Some cleanup. user_editcount is blank for unregistered users, so you can < to account for it and registered users. If we only want to target the article ""St. Bernard (dog)"" (and not the talk page), I would use article_articleid. I also made some aesthetic changes, hope you don't mind :) ~MA
+
+Disabled, no hits ever, and I don't see that kind of disruption on ""St. Bernard (dog)"" or the talk page in the past 6 months. Can be reenabled if disruption resumes. -Galobtter",St. Bernard (dog),0,0,0,0,,0,default
+396,"(action = ""delete"") & (article_articleid = ""15580374"")",10639536,Reaper Eternal,20110521164212,0,"Don't do it! - KoH
+
+Looks similar to no. 62. -JVDB
+
+Deleting April Fool's joke. --Reaper",Don't delete the main page,0,0,0,1,,0,default
+143,,5711305,Cenarium,20090525134202,0,,Cases of extreme spam of appropriate links,1,0,0,1,"warn,disallow",0,default
+147,"(action = ""edit"") &
+(article_namespace == 4) &
+contains_any( lcase(added_lines), '\'\'\'delete\'\'', '\'\'delete\'\'\'', '\'\'\'keep\'\'', '\'\'keep\'\'\'', '\'\'\'merge\'\'', '\'\'merge\'\'\'', '\'\'\'redirect\'\'', '\'\'redirect\'\'\'', '\'\'\'merge and redirect\'\'', '\'\'merge and redirect\'\'\'') &
+!contains_any( lcase(added_lines), '\'\'\'delete\'\'\'', '\'\'\'keep\'\'\'', '\'\'\'merge\'\'\'', '\'\'\'redirect\'\'\'', '\'\'\'merge and redirect\'\'\'')",258000,King of Hearts,20090420225402,0,"Prevents people from carelessly leaving off an apostrophe when bolding !votes in AfD discussions.
+
+Since this is my first filter, I'm disabling for now until someone makes sure this is valid. -- KoH
+
+Deleting -- KoH",AfD filter,0,0,0,1,,0,default
+659,,210954,Rschen7754,20150124042744,0,,Repeat vandal,1,0,0,1,throttle,0,default
+404,,258000,King of Hearts,20120808231534,0,,Talk page abuse,1,0,0,1,disallow,0,default
+150,,82835,Rich Farmbrough,20160820180413,0,,Pattern vandal on name-dropping,1,0,0,1,,0,default
+406,,258000,King of Hearts,20120808231540,0,,Prolific socker V,1,0,0,1,throttle,0,default
+662,"(
+ ((user_editcount < 50) | (user_age < (86400*14)) | !(""autoconfirmed"" in user_groups))
+ &
+ ((article_namespace == 0) |
+ (article_text rlike ""Articles for creation/.*"") |
+ ((article_namespace == 2) & (article_text rlike "".*/.*""))
+ )
+)
+&
+(
+ (new_wikitext rlike ""Jo[ée]l.{0,35}Fils-?[Aa]ime|Prince.{0,25}L[ée]og[âa]ne|D-PLOY|D-Ploy|J-Pimp|Tha Pimp Of Tha South|ThaPimpOfThaSouth|thapimpofthasouth|THA PIMP OF THA SOUTH|Florida Finest|FLORIDA FINEST|PIMP WAYZ VOL\.1|Pimp Wayz"")
+|
+ (article_text rlike ""Jo[ée]l.*Fils-?[Aa]ime|Prince.*Jo[ée]l|Jo[ée]l.*L[ée]og[âa]ne|Prince.*L[ée]og[âa]ne|Jo[ée]l I\b|J[- ]*Pimp|Florida *Finest|D-PLOY|D-Ploy|Pimp.*Of.*Th.*South|Haitian Fever|Tr[âa].*Kilo|Pimp Wayz"")
+|
+ (lcase(article_text) rlike ""jo[ée]l.*fils-?aime|prince.*jo[ée]l|jo[ée]l.*l[ée]og[âa]ne|prince.*l[ée]og[âa]ne|jo[ée]l I\b|j[- ]*pimp|florida *finest|d-ploy|pimp.*of.*th.*south|haitian fever|tr[âa].*kilo|pimp wayz"")
+)",3210516,Kww,20150202235933,0,,,0,0,0,1,disallow,0,default
+156,"!(""autoconfirmed"" in user_groups) & action == ""edit"" & article_namespace == 0 & (""'''Power Rangers''' is a critical, distasteful and lousy Americanized adaptation which is being expressively loathed and resented by many Japanese and American tokusatsu fans for mocking and insulting Toei’s most prominent Japanese '''Super Sentai''' series and tarnishing the reputation of the genre as a whole"" in added_lines)",5711305,Cenarium,20090525144449,0,"*Requested by Ryulong to take care of [http://en.wikipedia.org/wiki/Special:Contributions/70.48.115.89 this]. It's pretty specific, so I'm boldly enabling it with disallow to start. If it's too inefficient, feel free to disable it or add more quick-fail parameters. —Nihiltres
+*Added not-autoconfirmed to improve efficiency. —Nihiltres
+*Disabled. Zero hits in 4 days. Doesn't seem that necessary. -OverlordQ
+
+mark as deleted, disabled for almost one month, no more discussion/testing - Cen","""Power Rangers suck"" vandal",0,0,0,1,disallow,0,default
+671,,14882394,MusikAnimal,20150331163002,0,,Raghu Acharya,1,0,0,1,,0,default
+160,,855858,Beetstra,20090617092217,0,,"Punchbowl, New South Wales",1,0,0,1,"warn,disallow",0,default
+416,,7634339,Lustiger seth,20160304203651,0,,sbl-circumvention,1,0,0,1,,0,default
+672,,14882394,MusikAnimal,20150326011345,0,,technewsprovider,1,0,0,1,,0,default
+169,,82835,Rich Farmbrough,20160820180644,0,,WoW Socks,1,0,0,1,disallow,0,default
+427,"article_namespace == 3 &
+lcase(added_lines) contains ""kill myself"" &
+user_name == article_text",258000,King of Hearts,20120808231728,0,"Created, modification in Progress. -Penwhale 8/5
+Currently making it work only on user's own talk page. - Penwhale
+Assist in making this better requested.
+:Hiding for now, would like to see what the WMF department that handles these say - Courcelles
+::Unhiding now. -P
+
+Marked as deleted - KoH",Possible Emergency Reponse Needed,0,0,0,1,,0,default
+939,,14882394,MusikAnimal,20181030195650,0,,Tracking 201810,1,0,0,1,,0,default
+692,"user_editcount < 50 &
+(
+ article_namespace == 0 &
+ (
+ added_lines irlike ""{{copyvio""
+ )
+)",10639536,Reaper Eternal,20150602035048,0,"Per request, log only --Samwalton9, 25 May 2015
+
+Disabled. This does not happen with enough frequency to justify a filter. --Reaper 2 June 2015.",New user placing copyviocore template,0,0,0,0,,0,default
+181,"accountname contains ""TungstenCarbide""",451766,Prodego,20090606063308,0,"Add usernames as desired
+
+Totally redundant to the username blacklist -Prodego",Stop persistent sockpuppets of banned users,0,0,0,1,,0,default
+182,0,349283,Werdna,20090609134130,0,Just me testing this...,Test filter,0,0,0,1,,0,default
+950,,365454,Zzuuzz,20181216233854,1,,LTA circus performers,1,0,0,0,,0,default
+187,,258000,King of Hearts,20090830005446,0,,Gunfu vandal - [[Special:Contributions/69.124.8.165]],1,0,0,1,,0,default
+700,,365454,Zzuuzz,20181104192042,0,,Image redirect vandalism,1,0,0,1,,0,default
+446,,258000,King of Hearts,20120808231819,0,,Vandal on JW's talk (temporary),1,0,0,1,disallow,0,default
+704,,15991542,Samwalton9,20150712080907,0,,Page spam,1,0,0,0,,0,default
+449,,10639536,Reaper Eternal,20120817124147,0,,Long-term BLP violations,1,0,0,1,,0,default
+705,,365454,Zzuuzz,20170402074337,0,,Module vandal,1,0,0,1,,0,default
+452,,10639536,Reaper Eternal,20120210140344,0,,Inserted a spam link to any page,1,0,0,1,,0,default
+197,"(article_namespace != 0)
+& (edit_delta > 50)
+& (""*/ new section"" in summary)
+& (new_wikitext rlike ('((.|\n){' + edit_delta + '})\1$'))",1130897,Ruslik0,20090708123243,0,"This is to find duplicate sections added (clicking save on the new section page twice). -- Cobi
+Reorder comparisons for speed. -- Cobi
+
+-Please, don't use the abuse filter for this, it isn't abuse. Disabled to reduce number of edits hitting the condition limit -Prodego
+Marked as deleted. - Ruslik",Duplicate section,0,0,0,1,warn,0,default
+457,,258000,King of Hearts,20130404081134,0,,Vandalbots,1,0,0,1,"throttle,disallow",0,default
+202,,258000,King of Hearts,20090812211532,0,,Masked Rider Blade Knight vandal,1,0,0,1,,0,default
+717,,14882394,MusikAnimal,20150803161435,0,,Temporary blacklisted usernames,1,0,0,1,disallow,0,default
+206,,451766,Prodego,20090928231108,0,,Scibaby #2,1,0,0,1,,0,default
+724,,502540,Xaosflux,20180312202435,0,,John Galea,1,0,0,0,,0,default
+216,,451766,Prodego,20090928231053,0,,Circumcision vandalism 1,1,0,0,1,,0,default
+222,,451766,Prodego,20090928231040,0,,Kamen Rider vandal,1,0,0,1,disallow,0,default
+223,,451766,Prodego,20090928231036,0,,Marco Lupis articles,1,0,0,1,disallow,0,default
+481,,365454,Zzuuzz,20170402073748,0,,Noticeboard Troll,1,0,0,1,disallow,0,default
+227,,451766,Prodego,20090928231033,0,,Financial sockfarm,1,0,0,1,,0,default
+741,"(action == ""move"") &
+(moved_from_namespace == 0) &
+(moved_to_namespace == 4)",365454,Zzuuzz,20181104192516,0,2015-12-17_xaosflux: VPPr request to track these moves - testing,Article to Wikipedia namespace moves,0,0,0,1,,0,default
+498,,7852030,Materialscientist,20121007070002,0,,Creator of test pages,1,0,0,1,,0,default
+754,,20800274,BethNaught,20160317115051,0,,Harassment by IP hopper,1,0,0,1,,0,default
+246,"!(""autoconfirmed"" in user_groups)
+& (article_namespace == 0)
+& (norm(added_lines) == ""IMMALETYOUFINISH"")",82835,Rich Farmbrough,20160820181803,0,"Not hitting anything disable, no need to hide -P
+
+Marked as deleted - KoH
+Updated for new norm/ccnorm. RF 20160820","""Imma let you finish ..."" new meme",0,0,0,1,,0,default
+504,"!(""confirmed"" in user_groups) &
+( added_lines rlike ""(Costarrica's|Michael Hidalgo)"" & added_lines rlike ""(Top ?Model|Supermodelo)"" )",1257855,Gogo Dodo,20121124181553,0,"Filter for Wikipedia:Sockpuppet investigations/Mikaela salas
+
+Sock appears to no longer be active.",Costarrica's Top Model sock,0,0,0,1,,0,default
+761,,20800274,BethNaught,20160426210822,0,,High-volume socker,1,0,0,1,,0,default
+252,,451766,Prodego,20091127160925,0,,Power rangers vandal,1,0,0,1,,0,default
+254,"!(""autoconfirmed"" in user_groups) & (contains_any(article_articleid,""prefix:"",""intitle:"",""incategory:"")) & (article_recent_contributors == """")",451766,Prodego,20091127160932,0,"see VPT - log only for now, see what we get - Cen
+
+Too many conditions (consumes 100 conditions) [note they can sometimes be wrong, but usually that it only when the filter has recently been changed] Disable -Prodego",Titles with special search terms,0,0,0,1,,0,default
+511,,7596304,Chris G's Test Account,20121207071122,0,,test filter,0,0,0,1,,0,default
--
GitLab