Jump to content

Wikipedia:Long-term abuse

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by B&W Anime Fan (talk | contribs) at 13:18, 16 October 2006. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Shortcut

    Long term abuse is a page intended to hold information describing editors or IPs which show extreme persistence in their policy violations so people can become familiar with their patterns and more easily spot and deal with them. Think of it as a "post office wall" with wanted posters. This page has been confused with several other pages, so please check the "Explanation" section if this is your first time here.

    Explanation

    Vandalism
    Dealing with vandalism
    Resources and assistance
    Further information

    This page should contain only properly categorized, unique entries on specific vandals or IP addresses with enough relevant and correct information to allow other people to identify them and their tracks. To keep this page functioning smoothly, please:

    Don't add an entry here without correctly determining what section it goes in. "To be correctly filed" should NOT be used; it exists as this page's equivalent to {{Don't know}}.
    Don't list a vandal who'se attacked other Wikimedia wikis. Those wikis should have a place to report vandals or warn administrators. For cross-wiki vandals, see meta:vandalism reports.
    Don't add an entry here requesting some account be blocked. That's like putting up a wanted poster asking for someone to be indicted. If you want to request someone be blocked, see WP:AIV.
    Likewise, don't add an entry for someone who hasn't vandalized in a long time, or who never engaged in serious vandalism. This especially goes for IP addresses, which may fall dormant or be reassigned easily. Unless they are persistently used for continual severe vandalism they should probably not be listed.
    Don't use this page for discussions. If there needs to be a discussion, start one on the talk page and link to its section from this page. If there is a discussion going on elsewhere, link to it.
    Don't sign entries, this page shouldn't be used for discussion (It gets long enough without it).
    Don't use relative phrases like "recently" or "lately" without qualification. Try using "as of" to remedy this: "lately (As of August 3rd), ..."
    Don't add entries without vital information: they will likely be removed for being useless or unintelligible.
    Remember to update entries with new or important information.

    Criteria for addition

    Note that minor or first time attackers should be listed at the Administrator vandalism page. Listings here should be for people who obviously know what they're doing and aren't going to stop. Vandals who meet the following are especially ripe for listing here:

    1. Ones that engage in not easily noticed ("sneaky") vandalism
    2. Ones that create multitudes of sock puppets
    3. Ones that carry out prolonged attacks against Wikipedia

    Criteria for removal

    The most common causes of removal are:

    1. Archiving old entries of inactive vandals.
    2. Removing improper or useless additions.

    Entries here should have a marked past of policy violations related to the entry. IPs listed which do not have any blocks are almost always removed. User accounts listed as vandals with minor blocks or "major vandals"/"sockpuppets" that aren't blocked will also likely be removed. The relevant logs should back up your assertions, not contradict them.

    Adding to this page

    1. Check the archives to see if the same IP, a similar username, or similar method of attack was used before.
    2. If so, copy that section out of the archive and list it here with relevant updates and link back.
    3. If it's new, check to see if the vandal is listed on a subpage, if so, add the information there.
    4. Then check this page itself. If it's totally new, create an entry at the bottom of the appropriate section (see below for an explanation), with a descriptive heading, and under it a "Modus operandi" subsection. Use {{userlinks}} to list registered users involved and {{IPvandal}} for IP addresses.
      • This is vital: Without information on what a certain "vandal" does or how they do it, it will be impossible for other readers to understand how to spot them. Entries without this information may end up being removed. See below for more information.
    1. If they're already listed on this page, add new information if you have it (Such as new sockpuppets or MOs). Try to keep discussion limited. This page is extremely long as it is, if there needs to be prolonged discussion, use the talk page and link to it from the entry. Off topic discussion will likely be removed on sight.

    Necessary information in an entry

    Entries MUST have the following information to be useful and be kept:

    • List of vandal accounts/IPs with links from {{IPvandal}} or {{vandal}}. If they use a wide range of IPs, list the ranges and any prominently used addresses. If they use user accounts, list at least the first one. If they have a category for their sockpuppets, list it also.
    • A description of their vandalism(s). Good detail is important: unneeded information will be trimmed out by others, but a underexplained entry will likely be removed.
    • Difference ("diff") link examples of their vandalisms. This is extremely important as it will show exactly what the vandal does and explain the entry. Note that linking to an IPs contributions or the history of a page is NOT passable: IPs get reassigned, pages keep getting edits. After a while, these will push the vandalism further into history and make the entry on the vandal(s) very hard to use.

    Sections

    The page is divided up into sections as follows:

    • #Subpages are for vandals who are a serious enough threat to warrant a subpage for easy reference (Please read the guideline there before creating a subpage)
    • The Archives which are periodically created for old entries who have become inactive for a significant length of time.
    • Unique entities — People with a specific MO. This section is for miscreants who are clearly defined in their attacks and are obviously a single person or group of people acting in concert.
      • Serial SPAMmers are usually IPs who literally do nothing but SPAM, frequently by inserting the same link into every article that's possibly related to what they're pushing.
    • Shared IPs lists the most problematic shared IP ranges and ISP proxies. These are frequently shared amongst large numbers of people within a geographic area, such as an ISP's proxy, or by people within a facilitiy, such as schoolchildren, businessmen, library users or prisoners, and should only be blocked for short lengths of time.
    • To be correctly filed — Holding pen where entries are added by default. If you're in a hurry you can add yours here, but you should try and find the correct section yourself.

    Archives

    Unique entities

    Subpages

    These pages contain information on more serious or unusual cases which merit a fixed location of reference. Before creating a new subpage, please read the guidelines. Frequently people jump directly to creating a subpage instead of listing a vandal on this page which often results in unnecessary pages which serve little purpose.

    Guidelines for creating subpages:

    Some questions to ask of the new subpage and its subject:

    • Is the vandal a "long term" vandal? Remember the pages are subpages of LTA and have to fulfill the same criteria as entries on LTA.
    • Does the vandal deserve a more permanent information location? Why can't they be listed on LTA like any other? There has to be a definite reason (or number of reasons) for giving them a subpage beyond "the LTA page section is too long" (e.g. engages in a very serious form of vandalism; suffers from a mental disorder).
    • Is their vandalism obvious? If so, there probably isn't much need for a page describing it as users will be able to pick up and deal with it as "normal" vandalism without requiring any insight into previous vandalism. As above, prolixity doesn't by itself warrant a subpage.
    • Is the increased exposure for the vandal outweighed by the increased visibility to the community and people who may run across them? Pages on vandals which serve little purpose to vandal fighters are discouraged because, in addition to serving little practical purpose, are often seen by the vandals as a sign of notoriety, which may encourage them to vandalise further and/or encourage others to vandalise with the hopes of gaining similar attention. As an example, a vandal who engages in blatant, guileless page blanking doesn't usually need a page on them since anyone can see and realize their vandalism without needing to read a page on them.

    Some example of "legit" subpages and why:

    • Primetime — This vandal regularly engages in one of the most dangerous forms of vandalism: Wanton copyright infringement that could place the Wikimedia Foundation in serious legal danger. People should know how to spot him so as many people as possible will know and be prepared to counter his plagairism.
    • Lightbringer — This vandal is obsessed with inserting his extreme POV content into Freemasonry despite bans on doing so issued by the ArbCom and the community. To someone who doesn't know about this vandal and his MO, he may appear to be a participant in a legitimate content dispute rather than a vandal and banned user. Due to this, unneeded and (proven) useless dispute resolution may be pursued rather then his latest sockpuppet simply being blocked, wasting people's time.
    • Bonaparte — "Malicious sockpuppetry", vote stacking, consenseusfraud, ethnic disruption related to Romania and Moldova.
    • Primetime and on Meta — Deliberate copyright infringement, personal attacks and harrassment on and off wiki, cross-wiki sockpuppetry.
    • Lightbringer — POV pushing on Freemasonry, personal attacks, and ban evasion.
    • General Tojo — POV pushing on Parkinson's disease.
    • MascotGuy — Inserting hoax information into specific articles; possibly autistic.
    • VaughanWatch — POV pushing on subjects related to Vaughan, Ontario.
    • Randallrobinstine — Childish vandalism to specific articles and images; creates socks with "Vrray" in their names; may be autistic. (Vandal is likely now inactive due to the indef blocking of its static IP address.)
    • Isrealbeach — Personal attacks and harassment; legal threats.
    • Roitr — Adding false information on various militaries, especially Russia.
    • Universe Daily (No connection with the website) — Massive deceptive linkspam; personal attacks.

    Serial SPAMmers

    Consider also reporting these spammers to the meta:Spam blacklist. If the addition is sucessful, you may wish to immediately archive or remove the section here.

    Universe Today and sockpuppet-SPAMmers

    Operating most notabily from the shared 203.10.59.63 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) this user has been asserted to be the same as User:Universe Today, User:UniverseToday, User:Universedaily, User:Bad Astronomer and other sockpuppets. Their MO is both vandalizing and linkspamming. It should be noted that they use deceptive edit summaries, and flagrantly deceptive vandalism. See /Universe Daily.

    AlloExpat

    SexInRussia spammer

    Car and Ringtone Spammer

    User keeps adding external links to his car website or ringtone/phone website, which only contains Wikipedia information (directly copied with no credit given to Wikimedia) and sponsored adverts. The links appear on many 'car' pages such as those of Aston Martin, Mercedes Benz, Land Rover etc (in the external links section). Spamming has continued to this day, despite a 24 hour ban by user RadioKirk. 50+ articles have had links added, some have now been removed be me and others, but he is persistent...

    Bulldog Spammer

    Using wikipedia to try to sell dogs, got final warning twice, still came back and spammed.
    Cleaned up the links for now (linksearch). Suggest blacklisting if the spammer persists.

    datasheet4u.com serial spamer

    Not surprizingly this spammer hits the Datasheet page (history) and others related to electronics. The domain was Added to the SPAM blacklist.

    Zombie spam ("We are all looking fsorward to a great sseason" [sic])

    These SPAMmers, who may be running a botnet from zombie computers, add trash like this. Many of the IPs are in LACNIC's range). A site-specific search on Google reveals that it's been somewhat successful at getting some indexing. An example IP is 83.238.44.12 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) on June 1 2006. These malefactors have hit up other websites as well: [1]

    SPUSA spammer

    Anonymous IPs with similar IP numbers have persistently added links to the Socialist Party USA website and the wikipedia page on the organisation. These links number in the hundreds to any article on a social issue, such as black power, and re-adds the links repeatedly after they've been reverted by other editors. They are usually in the "see also" and "external links section, but sometimes, the same editor removes content critical of the SPUSA, or adds links in the body of the article (e.g. this diff, this diff and this diff). Occasionally these links may be considered legitimate, but the vast majority are things like "the SPUSA cares about this issue too" (e.g. this diff). It's hard to tell if they are honestly trying to promote the group or turn people against it! The editor/s have used the the following IP addresses, among others:

    Numerous wikipedians have added warnings to these anon talk pages.

    Talk:Cold fusion spammer

    The Talk:Cold Fusion page seems an odd target, but it's been hit repeatedly by someone who posts a bad joke with an advertisement, from different anon IP addresses. Not too notable except it's happened periodically for quite some time now.

    13 July User:SiPD isn't anonymous and doesn't fit the pattern, but might be related somehow- Talk:Cold_fusion was the first non-own user page edited.



    Shran/CantStandYa

    • Previously identified sock accounts/IPs:
    • Sample of articles which have been edited by more than one current account. *Conspicuous edit warring.
    • "Shran" uses sockpuppets to edit war. He has been asked repeatedly by editors to stick to one account. The user, through various accounts, has protested that the IPs are either open to many users, or are used by a "little brother" or "brother-in-law". Despite these claims the edits are clearly the work of one person. The previous set of sock puppet accounts was blocked several times in the fall of 2005, and a new set has been created since then. As with previous socks, these accounts were used to abuse consensus and fraudulate votes in CfDs and an AfD. User:Jayjg checkusered these accounts and showed a strong connection between many of them.


    InFlames vandalizer

    DickyRobert

    DickyRobert (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) was an editor who was blocked indefinitely for disruption on pages related to warez and threats. He regularly creates new sockpuppets but doesn't use them untill they're old enough to skirt semi-protection, then he'll flood his chosen targets with them, frequently using each account only once, whether or not it's been blocked.

    His sockpuppet names generally are names of famous people (User:Issac Newton), or various productions. See Category:Suspected Wikipedia sockpuppets of DickyRobert for the full list of suspected accounts.

    Blocked User:Gibraltarian

    Gibraltarian (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) was indefinitely blocked in mid-December 2005 for constant sockpuppetry, personal attacks, malice and POV pushing. His sockpuppets can be seen here and here.

    He uses the most major dial-up ISP in the territory, hence blocking them or individual IPs will result in collateral damage to most of most of Gibraltar. Keep the blocks short: Enough to make him impatient to re-dial-up. Also note that 212.120.227.226 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), which is occasionally used by Gibnews (talk · contribs), is legitimate. A history of the IPs he's used may be seen here.

    Comments made by Gibraltarian may be signed "Gibraltarian": (Example).

    His purview is mostly the following, and can be identified by extreme POV edits:

    SpongeBob/The Shining vandal

    Sollog

    Followers of a self-styled god named Sollog frequently vandalise the Wikipedia. They at one point had a website at http://www.wikipediasucks.com.

    Articles regularly hit up on are:

    Sockpuppets / Meatpuppets of Sollog will usually make themselves known by invoking the name of Sollog or linking to the aforementioned site or http://www.247news.net/2004/20041211-wikipedia.shtml, also sharing a similar writing style, using UPPER CASE for emphasis. See Talk:Sollog for information on their past behavior. An example of Sollog vandalism can be seen in this edit to Henry VIII of England:

    In the past the following proxies have been used:

    Further aid on finding open proxies may be seen at User:Mirv/Open proxies

    The physical location for most of the attacks seems to be Atlanta, Georgia and from northeastern Broward County, Florida, possibly Pompano Beach, Florida and/or Lighthouse Point, Florida.

    200.55.213.30 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) (Colegio Nido de Aguilas/Nest of Eagles High School)

    Persistent vandal over a number of months. Has been blocked several times for between a day and a week but always comes back. Likes to vandalise the Shakira article, primarily, but also vandalises various users' talk pages and other miscellaneous articles. User has attempted a denial of service attack on Wikipedia but only once. User never performs any legitimate edits and has indicated that he or she will continue vandalising indefinitely until permanently blocked. If you see any edits from this IP address, please verify that they are indeed vandalism (they always have been so far) and revert the edits.

    Super Nintendo vandal

    This vandal vandalizes pages by replacing the page title or keyterms with the word Super Nintendo. This vandal moves at very high speed. I only have 2 IP's for this vandal but I'm almost positive that there are more.--Ichiro (会話|+|投稿記録|メール) 04:43, 26 January 2006 (UTC)[reply]

    IPs used by the Super Nintendo vandal


    72.57.152.136 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user has been adding wrong content (mistakes and I am pretty sure it aims at adding mistakes) several times in wikipedia en. Poppypetty 15:15, 7 March 2006 (UTC)[reply]

    User:Bonaparte

    Permblocked for sockpuppetry, but notorious for vandalism of Moldova-related pages. After blocking perisitently pops up via open proxies. His track record is in user:Bonaparte/sockpuppetry. mikka (t) 02:39, 18 March 2006 (UTC)[reply]


    66.28.32.66 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This vandal has been blocked multiple times, most recently on 20 March 2006. The vandal has two consistent patterns in edits that are clustered. (1) The vandal edits pages rapidly by highlighting the entire page text and replacing it with immature phrases, the most recent of which was simply "poop." (2) The vandal inserts derogatory phrases and sentences, as well as changing spelling of random words ("biotch" seems to be the most prevalent insertion/replacement word). The vandal operates in a rapid period, typically editing in spurts every few weeks, during which he may vandalize 20 or more pages in a matter of minutes. Multiple warnings and 24-hour blocks have been issued according to protocol. The vandal does not begin editing as soon as the block is lifted, but rather, waits a few days or even weeks before making his next attack. The vandal's response to the most recent administrator block was erasing his/her own talk page and replacing it with "UNBLOCK ME NOW MOTHER FUCKING COCK SUCKER." The page was restored, notification of blocking was promptly inserted, and locked to prevent the vandal from changing it again. This vandal demonstrates consistent patterns of abuse, does not contribute meaningful information to Wikipedia, and operates in a malicious manner, sometimes even bashing persons mentioned in articles. The IP seems to be static, and given the continued pattern of abuse over several months, this user needs to be blocked for a long-term period or perhaps permanently. Dcteas17 20:24, 20 March 2006 (UTC)[reply]

    Zephram Stark

    After being banned six months by the Arbitration Committee for POV-pushing on Terrorism and related pages, personal attacks (including a racial slur [4]), and unwillingness to cooperate with his fellow editors, he created multitudes of sockpuppets to circumvent his ban, which has been reset several times. --TML1988 21:39, 27 March 2006 (UTC)[reply]

    Images:

    Frequently, he will upload an image. It can either be a strange one that he created, or just a random one that he swiped from the web. He also creates sockpuppets and uploads images to Wikipedia Commons. (See [5], [6], [7], [8]). They're all Zephram sockpuppets, many of the same images have been deleted from Wikipedia. If anyone uses any of these images here, he is most likely a sockpuppet. For example War on Sockpuppetism. --JW1805 (Talk) 17:02, 29 March 2006 (UTC)[reply]

    Currently identified sockpuppets:

    Articles to watch (and associated talk pages):

    United States dollar/$3 bill vandal

    This user continually vandalizes the United States dollar page with $3 bill nonsense. All IP addresses are from/registered in Atlanta, Georgia USA.

    --Kurt 00:49, 28 April 2006 (UTC)[reply]

    4.244.*.*

    Periodically turns up and removes images from a varying number of comics-related articles under a different, related, IP address (the list above may not be exhaustive - I only scanned the 4.244.60.* range). - SoM 00:34, 8 May 2006 (UTC)[reply]

    Another, still within the 4.244.*.* range, but outside the 4.244.60.* range:

    - SoM 02:23, 8 May 2006 (UTC)[reply]

    Level3 Communications IP, maybe related to earthlink/Peoplepc. My 4.x.x.x ip on Peoplepc dialup resolves to level3 via ARIN. ~Chris (talk/e@) 15:38, 2 July 2006 (UTC)[reply]

    Krabs502

    Continued vandalism of this kind from Krabs and associated socks[9], most recently User:Krabs600. Kaisershatner 15:47, 19 May 2006 (UTC)[reply]
    See [10], and [11] Kaisershatner 15:48, 19 May 2006 (UTC)[reply]
    Why isn't this guy blocked at all? Any real edit he makes is drowned by the dozens of vandalistic ones he makes. - Hahnchen 18:15, 28 May 2006 (UTC)[reply]

    150.101.79.82

    150.101.79.82 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has been blocked repeatedly since October 27, 2005 and returns to add more puerile profanities, most recently on a page in development under my user name. I did not find any substantive contributions from him/her. --Flex 13:45, 30 May 2006 (UTC)[reply]

    Erlopez2 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) blocked

    I have blocked this [ab]user for 6 months for causing repeated disruption (blanking, uncivil comments, suspected sockpuppetry) in Anti-semitism [12] [13] [14] [15] [16] and Anti-Christian prejudice [17] and for ad hom attack [18]. ←Humus sapiens ну? 08:17, 12 June 2006 (UTC)[reply]


    User:Hryun (D.A. Arbatsky vandal)

    User has declared a "war" against Wikipedia because it did not allow the article on a purported scientific theory of Dmitri Arbatsky (who is probably the vandal) to survive. As such has created many single-edit sockpuppets and has made various edits to quantum physics articles, many of them intentional vandalism (inserting incorrect statements, moving or deleting sections) or variations of self-promotion spam. See Category:Suspected Wikipedia sockpuppets of Hryun for a list of them. They all have very similarly uninventive names and usually link to a diff of his declared "war" on Wikipedia, lord knows why. It would be great if we could assess whether or not the ISP, who is obviously assigning dynamic IPs, is worth contacting or just worth blocking alltogether. --Fastfission 00:08, 17 June 2006 (UTC)[reply]

    206.170.104.*

    Keeps vandalising Steven Spielberg, Amblin Entertainment, E.T. the Extra-Terrestrial, the user pages of editors who revert his vandalism, and removes warnings from own talk pages. All the IPs have been blocked before but vandalism continues... --Fritz Saalfeld (Talk) 20:03, 17 June 2006 (UTC)[reply]

    Unemployed, living in basement, aka Brando(n)03, aka Louisville Vandal

    Unemployed,_living_in_basement (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) is a troll account which was indefinely blocked several weeks ago for repeated vandalism. I was involved in combatting this on RC patrol, including posting warning messages to his talk page, reporting him to WP:AIV, and nominating a garbage page he made for AfD. Since this occurred, he (or some other entity that I believe to be him) has started a pattern of harassment, consisting of:

    Could an admin with checkuser priveleges crosscheck the IP of unemployed, and the various imposter accounts, to see if they patch the IP ranges?

    --EngineerScotty 05:43, 18 June 2006 (UTC)[reply]

    List of IP addresses used by this user. The user has a dymamic IP (a fact which he has boasted about at least twice)

    Created three additional imposters of User:EngineerScotty on June 21, 2006; though all of them were blocked almost immediately. --EngineerScotty 21:26, 21 June 2006 (UTC)[reply]

    June 25

    Perhaps suffering from delusions of grandeur, impersonated the North Carolina Vandal (creating an account with that name, immediately blocked). --EngineerScotty 05:41, 26 June 2006 (UTC)[reply]

    June 29

    The following edit [20] on my talk page, suggests that Unemployed may be the same individual as Brando03 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log). Looking at the page history of BabuBhatt (talk · contribs · logs) shows abusive edits from unemployed's IP range, as well as from Brando03. Could checkuser be run on Brando03 to see what IPs he posted from? --EngineerScotty 05:30, 30 June 2006 (UTC)[reply]

    July 14

    July15

    Created account Brandon03 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log), which was used for vandalism against usual targets. Wrote a biography on his user page (unknown if any is true, other than vandal coming from Louisville area), can be viewed at [21] (the page has since been replaced with a {{indefblock}} message). Rails against "wiki deletionists" and such; though since the vandalism spree began, hasn't been involved in any genuine content disputes; all edits have either been noncontroversial additions or blatant vandalism. --EngineerScotty 05:14, 16 July 2006 (UTC)[reply]

    July 19

    Posting from 65.138.69.252 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) revealed personal info on two Wikipedia editors (no idea if the info is correct). I won't link to the posts here (they probably should be deleted anyway), was blocked for this. --EngineerScotty 05:13, 20 July 2006 (UTC)[reply]

    July 21

    Homophobic personal attacks against openly gay user Chris24 (talk · contribs) [22] posted to my talk page; from 4.224.51.242 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log). A different service provider, but also in Louisville; refers to a content dispute (but I didn't notice any contentious edits from Chris24 upon checking his contribs). --EngineerScotty 17:24, 21 July 2006 (UTC)[reply]

    Regularly attacks me with reference to another user--Kungfu Adam (talk) 17:43, 21 July 2006 (UTC)[reply]

    I have been libeled and slandered by this user and have reported this information to Jeffrey Brandon Morris' ISP. 4.224.114.129 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 4.224.114.132 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 4.225.123.7 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 4.224.51.242 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) --Chris24 04:39, 25 July 2006 (UTC)[reply]

    and again... 4.225.115.45 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) --Chris24 04:47, 25 July 2006 (UTC)[reply]

    July 27

    Has posted to several users talk pages [23] [24] stating his intent to no longer vandalize Wikipedia. --EngineerScotty 23:13, 27 July 2006 (UTC)[reply]

    The saying "Actions speak louder than words" would seem to apply in this instance.--Chris24 05:03, 28 July 2006 (UTC)[reply]

    User:Paul adams

    Paul adams (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) has been removing material from Mazher Mahmood (and details regarding him on two other pages, initially) since the 2nd of April this year. His constant attempts to whitewash details regarding Mahmood's failed court action against George Galloway (and, initially, pictures released by Galloway after the injunction was lifted) led to the page being fully protected from the 3rd of May to the 7th of June, since when he has resumed his attempts. He has no other edits of any sort - the account exists solely to remove details regarding Mahmood. - SoM 07:24, 19 June 2006 (UTC)[reply]

    Fursecution Vandal

    A user has been repeatedly attacking articles related to Furry fandom, Therianthropy and Otherkin. The user violates WP:HA. The vandalism often involves insults aimed at these various subsultures and/or bad-faith merge requests. The vandalism also involves user page vandalism, hate speech, and is not just blanking.

    User:Fursecution_vandal's sock puppets list is here.

    September 3

    Since August 24, attacks on this group of pages are still being observed, but if they are from the same editor, the MO may be taking a turn for the more subtle. Rather than delete entire sections or add merge requests, recent attacks have been single sentences or even single words, continuing the pattern of WP:HA, but from accounts not flaunting an obvious connection with TFV. These may be unrelated incidents, but I would caution editors to keep a close eye out regardless. Baxil 09:07, 3 September 2006 (UTC)[reply]

    67.185.57.48 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user has been serially vandalising articles on occult subjects, notably Dion Fortune, Adolph Hitler and Madame Blavatsky. They serially edit or remove other users posts from talk pages and never sign their posts. They have been blocked at least six times now. They ignored mediation see Wikipedia:Mediation_Cabal/Cases/2006-06-21_Dion_Fortune which page also contains a partial list of block or warning messages that they have removed from their talk page. They also serially abuse and threaten other users for reverting their vandalism. I think this is probably a single user due to the pattern of vandalism and the fact that this IP resolves to c-67-185-57-48.hsd1.wa.comcast.net which looks like a single cable customer.

    Armking

    This user engages in circular redirect vandalism (Pointing two pages at each other via redirects). His original account was Armking (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log), and he has since started creating socks. Most of his accounts begin with "arm" or end with "mra" (arm backwards)

    Asian fetish vandal

    User logs in from a randomized German IP 80.138.x.x to post racist, anti-semitic, and sexist material under the rubric of "anthropology." Uses white supremecist sources. Most notorious for persistent vandalism to Asian fetish. Also attacks Beethoven, Racial fetishism, Anti-relativity, Mongoloid, Special relativity, Anthropology, and possibly other pages. Was a major vandal on Virago until the page was deleted and protected. Also insults other editors based on assumptions about their gender, religion, or ethnic background. Banning is impractical due to the range of IP addresses used. January - March 2006 addresses are listed below. Durova 04:50, 25 March 2006 (UTC)[reply] 

    80.138.128.87 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.130.146 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.134.141 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.141.154 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.142.102 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.148.67 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.152.165 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.152.199 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.158.108 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.166.174 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.39 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.54 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.55 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.9 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.172.139 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.172.31 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.174.234 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.175.232 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.177.147 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.184.169 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.185.229 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.188.125 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.188.86 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.189.79 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.190.240 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.190.246 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.190.9 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.138 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.193 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.193 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.208 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.174 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.181 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.188 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.188 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.206 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.251 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.251 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.152 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.187 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.56 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.77 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.176 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.194.83 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    "The Blasphemy Guy"

    This person repeatedly vandalizes the dinosaur article by blanking it and replacing it with a Young-Earth fundamentalist Christian creed that states that dinosaurs did not exist. An example of this can be seen here. He or she also makes personal attacks against reverters; for example: [25] [26] [27].

    Some IPs used:

    He or she may also hit articles relating to Islam.

    The Middle East Conflict Man

    The Middle East Conflict Man (talk · contribs · deleted contribs · logs · filter log · block user · block log), indefinitely banned from three Wikipedias (English and both Norwegians), uses numerous sockpuppets to make a highly POV edit to Socialism, as well as making inflammatory/vandalistic edits to various other socialism-related articles. As of late July 2006 he has 50 suspected sockpuppets. Blocks on his IP are apparently ineffective.

    The sockpuppets variously claim to be from two different people: given their similar behaviour, they may be treated as one entity in accordance with Arbitration Committee rulings.

    Banned User:Irate

    Banned user persistently returning using revolving IPs in the 84.9.x.x and 87.75.x.x range. This users always uses the edit summary "revert vandalism", however they will frequently mangle the spelling of one or both words in the attempt.

    Emico

    • Emico (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) has been banned from editing Iglesia ni Cristo related articles for one year, provided he doesn't violate his parole, per decision of the arbitration comittee at Wikipedia:Requests for arbitration/Emico. He has not honored that decision and continues to cause disruption at the article and users involved with his ArbCom hearing. Emico is also believed to be using proxy server software to evade blocks, making it nearly impossible to confirm using checkuser functionality. A member of the Arbitration Comittee has declared explicitly that Emico's edits to that and related articel may be reverted the same as vandalism: [28]

    Modus operandi

    The following is a list of editing patterns which are common with Emico and his sockpuppets:

    • Posts only at Iglesia ni Cristo and its related articles.
    • Personal attacks or negative opinions aimed the contributers who are against him (mostly the ones who have participated in his ArbCom hearing). This includes, but is not limited to, comments about contributers' past policy violations or/and lack of knowlege of the subject matter.
    • New usernames where the majority of contributions are of the above point.
    • Posts coming from proxy addresses. A checkuser result has proven Emico posts from different IPs from all over the world.
    • Article edits which are nearly identical to Emico's initial edit pattern, which is explained at Wikipedia:Requests for comment/Emico.
    • Insult usernames which parodies current contributers' screen names (eg User:Starbucks, User:LenlenBunting)
    • Massive ommisions of sourced content which are critical of the Church.
    • Use of sockpuppets (See Category:Suspected Wikipedia sockpuppets of Emico and Category:Wikipedia sockpuppets of Emico)
    • Use of open proxies

    Johnny Knight

    Has been vandalising and creating a lot of sockpuppets recently, some of which have a Neo-Nazi theme to their names and/or use a swastika-like symbol in their names. According to some posts by various {{AOL ranges}}. The truthfulness of these edits is not verifiable.

    A user claiming to be the "real" Johnny Knight has stated that they will stop their vandalizations and that they use 69.124.118.120 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log).

    Tooj117/The Geek Vandal

    Tooj117 was a vandal that began vandalising the page Geek by repetedly adding a rediculous picure of a steriotypical geek. The vandal the began adding this picture on various pages, or just doing other vandalism such as page blanking, and false information. After being warned several times, the user was blocked indefinitely. Tooj117 created alot of sockpuppets and had accounts doing the same vandalism from different IPs. The vandalism of the page geek still happens frequently, but not nearly as often as before. Tooj117 also "teamed up" with Stroon and felt it nececary to advertise their allaince and club on a bunch of pages. It seams the nonesense from Tooj117 has been reduced, but not completely stopped.

    Nokhc / aluminium, sulfur

    Nokhc is a vandal who attacks articels with unsourced comments and outright bias. His main targets are aluminium and sulfur, where he adds extremely biased statements that the spellings are "a vulgar error that should not be perpetuated" and "a ridiculous spelling", respectively. He also seems to be homophobic (per this edit) and mysinogynistic (per this).

    Other targets include Jeremy Bentham, Stanford prison experiment, Prostitution - "Wikipedia is immoral", Foreskin, Morality, Naturism.

    Userpage vandalism and personal attacks, signs himself as User:Nokhc (indef blocked). IPs used:

    Creates one-time socks: User:Diched, User:Dichead, User:RESURGAM, User:V----l Sch----l, User:Dududuh, User:Duh duh duh, User:Not the duke of Devonshire, User:Master of the prick, User:TICK TOCK, User:DINGGGGG!, User:At the speed of light, User:Wikipedia is immoral, User:Porud!!!

    Disney/Barney vandal

    Since late May, this user has vandalized several articles related to The Walt Disney Company and Barney and Friends. His modus operandi is to introduce inaccuracies and bad formatting, much of it subtle to inexperienced users or those who know little about either subject. Edits from all IPs are identical, so it's virtually certain both are operated by the same user.

    Articles frequented by this user include:

    Disney articles:

    Barney articles:

    Other:

    User:Kenwood 3000

    This vandal has two targets:

    1. The article on jazz fusion band Brand X and related articles, replacing tracklistings and band lineups with fake ones, occasionally inventing entire imaginary albums. A giveaway is including an 'Ian Hart-Stein' in the lineup.
    2. Libellous vandalism against biographies of living persons, the majority black celebrities.

    Has created numerous sockpuppets, and further ones should be blocked and rolled back on sight.

    User:Enlighter1 & sock puppets

    Seems to always vandalize Reuters, Agence France-Presse, Associated Press the most (sometimes other news and non-news articles too), as well as making personal and vile attacks against users. Always reverts the reverts people do to his/her (Enlighter1's) vandalism by saying something like "rv vandalism" or "I am not the real vandal" in the edit summary. Has edits and actions aforementioned consistent to all of this users IP and registered user sock puppets. Also, when registering a username, tends to have the name end in "1" or have something to do with "AllPowerful" or "AllKnowing". A vandal profile page keeping an eye on this vandal is needed (like what has been done with the 'communism' and 'on wheels' vandals, but obviously not as serious). I myself, and others, have spent much time trying to take care of this vandal, so I think that the Wikipedia community — as well as admins who can actually do something when help is needed — should be made known to this new serial vandal. ~ clearthought 16:57, 4 September 2006 (UTC)[reply]


    User:Outoftuneviolin

    This vandal uses sockpuppets to evade bans, almost all of them have "outoftune" in them somewhere, or spelled backwards. There are almost never any spaces used. He has very specific edit patterns that should be watched for:

    • Vandalism of pages on musical instruments (EG. Violin) and pages related to Evolution.
      • Replaces articles with "Outoftuneviolin was here", "your {name of instrument} is outoftune!", borderline personal attacks with "{username} is outoftune" and variations on those.
    • Makes attacks against the theory of evolution and "evolutionists".
    • May make attacks against those who reverts his vandalism, labeling them as "trollish blasphemous evolutionists" or "outoftune evolutionists".
    • He frequently makes use of "AOL speak" like "ur" for "your" and commits other spelling mistakes "Sientists" for "Scientists", etc.

    His sock puppets: category:Wikipedia sockpuppets of Outoftuneviolin Category:Suspected Wikipedia sockpuppets of Outoftuneviolin

    Bugs Bunny vandal

    Creates sockpuppets with a naming pattern of "Bugs Bunny's _ (a form of death or injury)" and vandalises the Bugs Bunny article by blanking it and saying that Bugs Bunny has died.

    POV pushing and reverting on Galatasaray and Turkish football articles

    Galatasaray and some other Turkish football articles are repeatedly hit on by an IP-hopping, sockpuppeting vandal who will engage in midless reverts of these pages to "their" version regardless of the differences. When partially protected, this vandal uses sockpuppets such as Burak18 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and Johnny200 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) to perpetrate the same reversions.

    A sampling of IPs used by this vandal will show their typical MO: 194.171.121.27 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log),124.50.89.17 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), 148.233.120.49 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), 200.76.104.121 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 82.168.59.236 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) and 82.92.94.108 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Most vandalic edits involve "Turkifying" Galatasaray or other clubs by removing lists of foreign coaches. They also add unsourced conjectures ("X'll be coach of Galatasaray next year", etc.) and removing dispute tags calling attention to their unsourced assertions.

    Administrator Robdurbar (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) has been helping out with dealing with this vandal, concerns (New sockpuppets, etc) sent to him may be understood more quickly.

    possible return of the "ass pus" vandal

    Recently, some vandals have been uploading goatse images (often under the filename "stretch.jpg") onto various Wikimedia wikis. Note that this is one of the modi operandi of the "ass pus" vandal (often "pelican shit" on other wikis) that attacked Wikimedia projects in 2005 (and late 2004). --Ixfd64 08:27, 9 October 2006 (UTC)[reply]

    Shared IPs

    This section is for IPs that are provably or strongly suspected to be shared amongst several people at a public/semipublic place, NOT for any IP vandal.

    Note: Before listing IPs here, check {{AOL ranges}} to see if the vandal is an AOL address. If it is, it should not be listed unless there is strong reason to believe that the IP is not dynamic or is restricted to a small number of accounts, one of which is a severe vandal.

    212.219.248.236 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) (Aberdeenshire school)

    Several blocks, evidently quite a broad vandalizer.

    IP vandalism from 203.36.44.11 to 203.36.44.18 inclusive

    Found two more IP's, updated information to match - Bootstoots 00:01, 6 August 2006 (UTC)[reply]
    An indefinite block of all these IPs, anon only, account creation blocked, would solve. I think we should treat school IPs like open proxies. ~ c. tales *talk* 02:29, 8 August 2006 (UTC)[reply]

    Repetitive Vandalism

    152.163.100.199 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has been making excessive edits and posting nonsense that inhibits several Wikipedia articles. This user's talk page and contributions reveal an extensive history of vandalism on multiple pages, issued warnings by different editors, and long list of blocks. The user has recent act of vandalism on a televsion show page about the VR Troopers, more specitifcally the article entitled List_of_Mutants_and_Cyborgs_in_the_Virtual_Dungeon, however this is not first time they vandalized the said article, as it has been going on since June 25 2006. Many of thier edits have been reverted to restore the damaged pages, but the user continues to make the absurd changes. In addition, there are other IP adresses that have also commmited the exact same vandalism to the above page. They are: 209.158.23.64, 71.240.204.56, 205.188.116.199. I cannot prove that all these users are the same entity, or if they are copycats/mimics. The grafitti has gone on long enough and I wish to do my part in keeping Wikipedia professional, informative, and fun as it was meant to be.Pitstain 02:50, 1 August 2006 (UTC)[reply]

    216.20.0.118 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) (Merrimack Education Center) has been warned many times, and after theatened with a block on 2006-09-29 (s)he vandalized Rapping on 2006-10-10. WhyTanFox 16:10, 10 October 2006 (UTC)[reply]

    Suki

    64.110.251.69 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log): see Talk:Suki. Long-term hoax edits every month or so, notably to Suki and New World Religion, asserting the existence of a major world religion called "SUKI(tm)", despite repeated consensus to delete due to absence of reliable sources. Some examples: [35], [36].

    The IP above attempted to remove this section [37] and is noted for ranting wildly and making borderline personal attacks on people he runs in to.

    Persistent sneaky vandalism from AOL IP range 207.200.116.0/24

    There is persistent sneaky small-edit vandalism coming from multiple addresses in the AOL/Netscape address range 207.200.116.0/24 [38] (which has earlier been the source of a number of other types of vandalism) -- it has been repeatedly tempblocked so many times that a longer-term block (1 day, perhaps?) might be in order. -- The Anome 10:36, 8 July 2006 (UTC)[reply]

    AOL Vandal 195.93.21.136 and 195.93.21.100.

    195.93.21.136 and 195.93.21.100 are believed to be the same vandal. Constantly vandalizes and causes trouble in the Paris Hilton article and talk-page. Claims he is not the vandal in talk-page, but refuses to setup account, and has been blocked repeatedly for vandalising Paris Hilton and other articles multiple times. As soon as block is lifted, starts causing trouble again. In the same places. Someone please permanantly ban this person. Celebrity-Benji 15:37, 5 July 2006 (UTC)[reply]

    AOL DoS Vandal from 207.200.116.*

    For the last few days, Wikipedia has come under attack from a person (or bot) who seems to be intent on forcing a complete block on his/her entire AOL IP range. This vandal's MO has varied from inserting images onto random articles [39], to inserting random gibberish [40], to inserting malformatted equations. All of these attacks have occured from IPs in the 207.200.116.*** range and have occured too close to one another to be a conincidence. When this vandal is active, we recieve an attack every 30 seconds or so of one of the varients describved above. More information on this vandal has been documented on User:Mboverload/vandalattack. Currently, the most we can do is try to revert this vandal's edits as they occur. Range blocks have mostly been limited to 15 minutes or less to limit collateral damage. This vandal has also been discussed on the Administrator's Noticeboard at [41] and [42]. I am moving this discussion here since this vandal's behavior seems to indiciate that he/she has no intention of stopping anytime soon. -Loren 03:59, 18 June 2006 (UTC)[reply]

    Anyone have a long-term idea for dealing with this? Its happened the 18th, 19th, and 20th. On more ranges than just the one mentioned above. I can't stay up late every night clicking contrib over and over and looking through all 256 IP's for minute looking things like 'sn' or 'ts' or 'the ' added to articles at random. They're vandalizing at least '100 articles a night. As of this writing, there's more Image:Ceiling cat 00.jpg from 64.12.116.* now. Kevin_b_er 06:08, 19 June 2006 (UTC)[reply]
    152.163.101.xxx also has another spattering of the AOL vandal changing IPs with every few randomized changes. Now back to ceiling cat page additions, sometimes with ts thrown in for good measure after the image inclusion. Kevin_b_er 06:53, 19 June 2006 (UTC)[reply]
    And 152.163.100.xxx adding celing cat. He seems to be now rapidly changing ranges rather staying within one. Kevin_b_er 06:53, 19 June 2006 (UTC)[reply]

    Active again on 207.200.116.*, inserting Image:Sarahvulva.jpg. -Loren 03:32, 26 June 2006 (UTC)[reply]


    202.68.88.74

    AOL 205.188.117.74

    205.188.117.74 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Vandalism of userpage on 23 September (spotted today) (http://en.wikipedia.org/w/index.php?title=User%3AImjustmatthew&diff=77309475&oldid=73905707)

    IP address has a history of vandalism and short-term bans. --Saganaki- 07:21, 6 October 2006 (UTC)[reply]

    69.117.18.239

    Has not ceased to vandalize the Kathleen Rice article. Paul 16:48, 10 June 2006 (UTC)[reply]

    208.39.164.129

    Registered to Souderton School District, however, from the contributions it is clear that most (all?) edits are vandalism.Daleh 16:10, 6 June 2006 (UTC)[reply]

    65.5.36.35/Mater Academy High School

    User talk:63.164.145.198

    Kinko's shared machine. Someone goes in every few days to use it to spread page-rank spam. SchmuckyTheCat 05:07, 21 April 2006 (UTC)[reply]


    216.56.22.34/Oshkosh Area School District


    Missouri Research and Education Network (MOREnet)


    213.249.155.237


    This IP address is indeed part of the East Midlands Broadband Consortium [43], its a schools-only ISP in the UK.
    Each institution connected to EMBC gets cycled from one server to the next every day or so, although it can be as short as every couple of hours. Those two marked with * have been hijacked by Squidward, I keep meaning to inform EMBC of this so they can close the security hole, but I've got a memory like a sieve. A couple of them have been given a long block, the blocking admin asking for a school representative to contact them, it would be better to contact EMBC, as these serve probably hundreds of schools, altogether hundreds of thousands of pupils. I believe a good email to use is embc AT embc.org.uk. CaptainVindaloo 17:42, 6 April 2006 (UTC)[reply]

    Pinellas County Schools

    [44] Shows up about once a week, vandalizes a few pages and then goes away. SchmuckyTheCat 17:20, 12 May 2005 (UTC)[reply]

    All registered to Pinellas County Schools, one of the largest school systems in the country. Keep blocks in the 30-ish minute range to cut down on collateral damage — I sometimes edit from these IPs and get blocked along with everyone else. —BorgHunter ubx (talk) 03:06, 16 March 2006 (UTC)[reply]

    207.235.223.32 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user IP has been blocked quite a few times. This IP deserves another block. Evan Robidoux 20:46, 7 February 2006 (UTC)[reply]

    Whois suggests its with some school or other educational org, so its likely shared D:... 68.39.174.238 22:50, 8 February 2006 (UTC)[reply]

    24.168.141.213 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    24.168.141.213 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has been inserting the same unsubstantiated allegations since January 25th in the Scientology and Free_Zone_(Scientology) articles. Reverted by many different users. Seven times in the last two days, five times today alone (at this point), always with the same text, same typos, and never with a single explanation. Raymond Hill 21:56, 11 February 2006 (UTC)[reply]

    Sports television vandal

    Keeps vandalising Category:Sports television in the United States articles. Blocked several times but keeps on adding the nonsense after the blocks expire. Zzyzx11 (Talk) 19:00, 25 February 2006 (UTC)[reply]

    4.18.162.20 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Just look at his history, there just nothing constructive but vandalism in it. IOOI 18:03, 18 March 2006 (UTC)[reply]

    167.206.128.202

    167.206.128.202 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) - Registered to Jericho School District. Has been blanking articles and adding nonsense for months; virtually no useful contributions. -- ElTchanggo 01:01, 29 March 2006 (UTC)[reply]

    203.19.141.50 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Belongs to Sacred Heart College Senior in Australia. Has really only contributed vandalism over the past month, and has been blocked four times so far. -- Mithent 03:59, 4 April 2006 (UTC)[reply]

    204.76.0.33 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) /St. Louis Public Schools

    Vandalizing since Febuary 2005. The administrator is supposedly: Thomas Randolph (trandolph@slps.org) +13143452616

    St. Louis Public Schools, Board of Education, 801 North 11th Street, St. Louis, MO, 63101, United States

    207.63.113.10 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    It appears that this IP address belongs to a school using the Illinois Century Network, which "is a telecommunications backbone providing high speed access to data, video, and audio communication in schools and libraries, at colleges and universities, to public libraries and museums, and for local government and state agencies.[45] Their abuse email address is abuse@illinois.net but I don't know if anyone has tried that route up to this point (not cited on the user talk page).

    This IP has been consistantly vandalizing over the last 4 months (see contributions), and sporadically doing the same before that. Many warnings and at least two temporary blocks have been done, with no change in behavior (see user talk). Perhaps it's time for a more long term block. -- Argon233 T C @   05:53, 27 April 2006 (UTC)[reply]

    131.109.123.253

    131.109.123.253 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has consistently vandalized multiple pages over the past 6 months. Has been given 11 "last warnings" since then but continues to vandalize. The latest vandalism was today, occurring 8 times to the System of a Down article. I suggest permanent ban due to consistent disregard to our warnings. --Noetic Sage 19:11, 19 May 2006 (UTC)[reply]

    A number of vandalism edits have been made by this IP since the last noted vandalism. More "last warnings" have been sent but no repercussions have been taken. Can we please permanently ban this user? -- Noetic Sage 02:52, 24 May 2006 (UTC)[reply]

    More Vandalism in the past few days. The user has not made a single beneficial edit to Wikipedia. What is the process for permanent banning? This is getting frustrating and making more work for the rest of our busy editors and administrators. -- Noetic Sage 06:32, 27 May 2006 (UTC)[reply]

    Once again this user is vandalizing Wikipedia, yet nothing is being done. I understand they are using a shared domain, but month after month the vandalism continues. They have been blocked 5 times since the beginning of September. How is this still unresolved???? --Noetic Sage 16:58, 11 October 2006 (UTC)[reply]

    203.208.92.82 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Has been almost all (or all) vandalism from the start, and has numerous warnings to stop. Zepheus 17:31, 24 May 2006 (UTC)[reply]


    193.84.191.3 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user IP is assigned to Wigan and Leigh College, in Leigh, Lancashire, United Kingdom Unfortunately one or more students appear to abuse the privilage of access to Wikipedia I have reverted all vandalism I can find - and this has remained undetected sometimes since about March of 2005.

    Joan of Arc vandal

    User blanks information and inserts inaccurate material to Joan of Arc, Cultural depictions of Joan of Arc, and Joan of Arc facts and trivia. Originates from a randomized AOL IP:

    • 64.12.116.XXX
    • 152.163.100.XXX
    • 205.188.11X.XX

    Changes are often subtle: adds inaccurate statements to previously cited passages, alters footnote links, eliminates references to authors who do not portray Joan of Arc in a pro-Catholic manner. Masks deletions by substituting low quality material. Characteristic traits include long edit notes, convoluted syntax, excessive passive voice, and excessive punctuation. Occasionally cites sources that fail WP:V. Very rarely, makes a useful edit. Also disrupts transgender/homosexuality articles. Possible sockpuppetry. Intermittent activity goes back possibly as far as 2004. Durova 19:09, 1 September 2006 (UTC)[reply]

    205.237.29.2 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    IP from a Canadian School I think. Not too may edits, but the IP is exclusively used for vandalism. I don't know what the policy is but we wouldn't miss much if this address were blocked indefinitely. Piet | Talk 08:02, 15 September 2006 (UTC)[reply]

    64.88.21.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This IP is registered to Macomb Intermediate district. Many "contributions" are deletion important information from articles (such as replacing entire paragraphs with gibberish letters) or vandalizing articles by changing words (such as "Soul Edge" to "Scrappy Doo" and "Umbra" to "Pumba").

    205.202.240.101 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) (Millard Public Schools)

    Repeated vandalism of prominent articles and current events.

    To name a few:

    To be correctly filed

    193.112.136.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)/Stockport borough Council

    This user has consistenly used fairly juvenile vandalism ("a'ight guys wassup!", "poopy"), often in racist ways ("paki", "why are people tight on jew's there safe", "Japan is where mario lives") (his targets include "List of ethnic slurs", "Judaism", "Japan", "invasion", "Coal", and "Asian"), not to mention in ways that are severely disruptive/destructive, causing other users to have to do many reverts. This has spanned many months, with many other editors complaining (as they had to do reverts).

    202.144.168.18 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    numerous instances of vandalism, usually inserting one or two offensive lines--, often dealing with homosexuality, in the text of long, in depth articles:

    other instances of vandalism include complete deletion of sections of articles:

    Vandalism by this user has been occuring since Aug 2005

    This vandal's targets are varied but include more esoteric scientifically oriented articles that may not be revised so quickly. Examples include:


    Karl Vandal

    This vandal had vandalized the Whitney High School (Cerritos, California) page several times with the most common edits similar to this. However he have targeted several other pages including my talk page. His most common edit is adding " with the only non credible teachers being Mr. and Mrs. Perry." after 95% (demonstrated in first example). Most (but not all of the vandalism) coming from the Whitney High School Network (yes the same school he is vandalizing about) IP (67.115.220.195) is his work. For details check Talk:Whitney High School (Cerritos, California) and Talk:Whitney High School (Cerritos, California)/VandalArchive1 along with the Whitney High School page's history. Typer525 Talk 20:06, 5 September 2006 (UTC)[reply]

    Anti-Colonel Sanders

    A massive Wikinews vandal who creates nonsense that Colonel Sanders is behind the 9/11 attacks. Uses different IP Addresses, and multiple sockpuppets. Automatically spawned imitators the minute he first vandalized. Has been known to perform pagemove vandalism also.[56] All accounts are from Jacksonville, Florida. Has been permablocked several times and keeps creating sockpuppets. Usernames include;Anti-Colonel Sanders,Anti-Colonel Sanders returns,Kentucky Tortured Chicken KTC DIE!,and THE TRUTH. Recently he has started to vandalize Wikipedia.[57]

    Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Long-term_abuse&oldid=81780435"