Wikipedia:Long-term abuse/Page 2

Add links
Page semi-protected
From Wikipedia, the free encyclopedia

This is page 2 of Wikipedia:Long-term abuse/Full, made to prevent the main page from getting too long.

Tooj117/The Geek Vandal

Tooj117 is a vandal that started vandalizing the page Geek by repetedly adding a ridiculous picure of a stereotypical geek. The vandal the began adding this picture on various pages, or just doing other vandalism such as page blanking, and false information. The user was blocked indefinitely. Tooj117 kept creating sockpuppets and had accounts doing the same vandalism from different IPs. The vandalism by tooj117 of the page geek still happens frequently, but not nearly as often as before. Tooj117 has claimed to be more than 3 people working as a "team" to create sockpuppets and vandalize pages. Another user Stroon was thought to be an impersonator, but is simply a member of the Tooj117 "unit." The Geek Vandal still vandalizes pages freqeuntly. Mostly geek, Joe Lieberman, and Admin's user pages (Particularly Ohnoitsjamie). Tooj117 has started vandalizing across wikis and creating impersonations of Admins user pages. This troll/vandal or an impersonator of this vandal also appears to be active at Palaeos.org a free encyclopedia of Geologic history.[1]

Royal Court of Affairs or The Shame of Sultan Qaboos

Spams links to some sort of personal/attack site across numerous Omani related pages, including Qaboos of Oman, Sultan of Oman's Armed Forces, List of Muslim leaders and politicians, Grand Mosque, Sultan Qaboos Cultural Center, Sultan Qaboos Cup, Sultan Qaboos Grand Mosque, Sultan Qaboos University Timothy Landon. Uses different names including:

I found him by him hitting the Arabian Horse article once, but he's only hit it the once. He's definitely expanding each time he reappears. Ealdgyth | Talk 19:05, 15 September 2007 (UTC)[reply]

Has also now hit Cruelty to animals diff and Arabian Horse again with diff

Ealdgyth | Talk 19:15, 19 October 2007 (UTC)[reply]

CantStandYa

Blocked User:Gibraltarian

Gibraltarian (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) was indefinitely blocked in mid-December 2005 for constant sockpuppetry, personal attacks, malice and POV pushing. His sockpuppets can be seen here and here.

He uses the most major dial-up ISP in the territory, hence blocking them or individual IPs will result in collateral damage to most of Gibraltar. Keep the blocks short: Enough to make him impatient to re-dial-up. Also note that 195.244.195.104 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), which is occasionally used only by Gibnews (talk · contribs), is legitimate. A history of the IPs he's used may be seen here.

Comments made by Gibraltarian may be signed "Gibraltarian": (Example).

His purview is mostly the following, and can be identified by extreme POV edits:


Recent May 2007 examples

Added identical content to Conflict of interest/Noticeboard, Biographies of living persons/Noticeboard, Requests for comment/Biographies and user talk pages. — Athaenara ✉ 17:30, 21 May 2007 (UTC)[reply]

SpongeBob/The Shining vandal

Looks like 24.47.245.45 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) may also be one. Or an imitator. Daniel Case (talk) 14:23, 2 April 2008 (UTC)[reply]
  • A user named Uytku (talk · contribs) made many vandal edits to the List of experiments from Lilo & Stitch on January 1st, claiming that the characters appeared in SpongeBob Squarepants episodes, and also as puppets in The Muppets and Sesame Street. I remember seeing this same vandalism on the page earlier in December with a different account (this account was only used on the 1st). Could it be the same person? Miriam The Bat 09:28, 7 January 2007 (UTC)[reply]

Sollog

Followers of a self-styled god named Sollog frequently vandalise Wikipedia. They at one point had a website at http://www.wikipediasucks.com.

Articles regularly hit up on are:

Sockpuppets / Meatpuppets of Sollog will usually make themselves known by invoking the name of Sollog or linking to the aforementioned site or http://www.247news.net/2004/20041211-wikipedia.shtml, also sharing a similar writing style, using UPPER CASE for emphasis. See Talk:Sollog for information on their past behavior. An example of Sollog vandalism can be seen in this edit to Henry VIII of England:

In the past the following proxies have been used:

The physical location for most of the attacks seems to be Atlanta, Georgia and from northeastern Broward County, Florida, possibly Pompano Beach, Florida and/or Lighthouse Point, Florida.

Zephram Stark

After being banned six months by the Arbitration Committee for POV-pushing on Terrorism and related pages, personal attacks (including a racial slur [2]), and unwillingness to cooperate with his fellow editors, he created multitudes of sockpuppets to circumvent his ban, which has been reset several times. --TML1988 21:39, 27 March 2006 (UTC)[reply]

Images:

Frequently, he will upload an image. It can either be a strange one that he created, or just a random one that he swiped from the web. He also creates sockpuppets and uploads images to Wikipedia Commons. (See [3], [4], [5], [6]). They're all Zephram sockpuppets, many of the same images have been deleted from Wikipedia. If anyone uses any of these images here, he is most likely a sockpuppet. For example War on Sockpuppetism. --JW1805 (Talk) 17:02, 29 March 2006 (UTC)[reply]

Currently identified sockpuppets:

Articles to watch (and associated talk pages):

Krabs502

Continued vandalism of this kind from Krabs and associated socks[7], most recently User:Krabs600. Kaisershatner 15:47, 19 May 2006 (UTC)[reply]
See [8], and [9] Kaisershatner 15:48, 19 May 2006 (UTC)[reply]
Why isn't this guy blocked at all? Any real edit he makes is drowned by the dozens of vandalistic ones he makes. - Hahnch e n 18:15, 28 May 2006 (UTC)[reply]
Update, July 2007, the hoax edits have continued for the past year, particularly concerning WWE, Bratz, and EA Games, and an indefinite block has now been placed on the underlying IP 216.83.121.194. ANI report. -- zzuuzz (talk) 19:10, 1 July 2007 (UTC)[reply]
Following the above IP block, the vandal started using 68.44.84.185 (talk · contribs) and continued with numerous more vandal sockpuppets. See [10] and Wikipedia:Requests for checkuser/Case/216.83.121.194. -- zzuuzz (talk) 00:57, 29 September 2007 (UTC)[reply]
useful links:
Category:Suspected_Wikipedia_sockpuppets_of_Krabs502
Category:Wikipedia sockpuppets of 216.83.121.194
Wikipedia:Requests_for_checkuser/Case/216.83.121.194
Wikipedia:Suspected sock puppets/216.83.121.194
Wikipedia:Suspected sock puppets/216.83.121.194 (2nd)
Wikipedia:Suspected sock puppets/216.83.121.194 (4th) (inconclusive)
Wikipedia:Suspected sock puppets/216.83.121.194 (5th)
Wikipedia:Administrators'_noticeboard/IncidentArchive266#Requesting_a_block_for_User:216.83.121.194
* Latest account is Buckcherry91, previous account to this was Princess34: Now editing High School Musical related subjects as well. Seems to also edit Spanish related articles. Strongsauce (talk) 01:36, 31 January 2008 (UTC)[reply]
* New account: Strongsauce21 Strongsauce (talk) 01:46, 25 May 2008 (UTC)[reply]

User:Hryun (D.A. Arbatsky vandal)

User has declared a "war" against Wikipedia because it did not allow the article on a purported scientific theory of Dmitri Arbatsky (who is probably the vandal) to survive. As such has created many single-edit sockpuppets and has made various edits to quantum physics articles, many of them intentional vandalism (inserting incorrect statements, moving or deleting sections) or variations of self-promotion spam. See Category:Suspected Wikipedia sockpuppets of Hryun for a list of them. They all have very similarly uninventive names and usually link to a diff of his declared "war" on Wikipedia, lord knows why. It would be great if we could assess whether or not the ISP, who is obviously assigning dynamic IPs, is worth contacting or just worth blocking alltogether. --Fastfission 00:08, 17 June 2006 (UTC)[reply]

Unemployed, living in basement, aka Brando(n)03, aka Louisville Vandal

Unemployed, living in basement (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) is a troll account which was indefinely blocked for repeated vandalism. He attempts to harass users who deal with his trollery by vandalising their user and user talk pages (Including using malicious redirects) and creating fraudulent impostor usernames and attempting to ruin their reputation. He has also made homophobic vandalisms against gay users. According to User:Chris24, his name is Jxxxxxx Bxxxxxx Mxxxxx.

Brandon03 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) shows strong knowledge of WpA process and culture, suggesting this vandal has done his research or has been around for a while. Many of his IPs are registered to Qwest in Louisville, Kentucky, hence the name.

See also, Category:Suspected Wikipedia sockpuppets of Unemployed, living in basement.

He has claimed that he is going to stop vandalising. [11] [12] Note that this was one of the hallmarks of the "North Carolina vandal".

He's still vandalising and spamming. Hopefully the following information will help catch him:

His name is Jxxxxxx B. Mxxxxx and he attends the University of Louisville http://louisville.edu/~jbmxxxxx/

Fursecution Vandal

A user has been repeatedly attacking articles related to Furry fandom, Therianthropy and Otherkin. The user violates WP:HA. The vandalism often involves insults aimed at these various subsultures and/or bad-faith merge requests. The vandalism also involves user page vandalism, hate speech, and is not just blanking.

User:Fursecution vandal's sock puppets list is here.

September 3

Since August 24, attacks on this group of pages are still being observed, but if they are from the same editor, the MO may be taking a turn for the more subtle. Rather than delete entire sections or add merge requests, recent attacks have been single sentences or even single words, continuing the pattern of WP:HA, but from accounts not flaunting an obvious connection with TFV. These may be unrelated incidents, but I would caution editors to keep a close eye out regardless. Baxil 09:07, 3 September 2006 (UTC)[reply]

May be also disrupting WikiFur etc. May be Blue Aardvark, since he has also disrupted WiiFur. ~Crazytales  (IP locations!) 13:41, 23 January 2007 (UTC)[reply]

IP Addresses for this vandal

This user is also vandalizing OtherkinCommunity.net, going under the name of TFV and TFV 2 (re-registered after banned). He has used the following IP addresses when posting in the forums:

  • 88.106.236.3
  • 88.106.137.49
  • 38.101.209.250
  • 88.106.238.87


Asian fetish vandal

User logs in from a randomized German IP 80.138.x.x to post racist, anti-semitic, and sexist material under the rubric of "anthropology." Uses white supremacist sources. Most notorious for persistent vandalism to Asian fetish. Also attacks Beethoven, Racial fetishism, Anti-relativity (Deleted), Mongoloid, Special relativity, Anthropology, Virago and possibly other pages. Insults other editors based on assumptions about their gender, religion, or ethnic background. Banning is impractical due to the range of IP addresses used.

Original report: User:Durova

January through March 2006 addresses used:

Returned in 4/2007:

"The Blasphemy Guy"

This person repeatedly vandalizes the dinosaur article by blanking it and replacing it with a Young-Earth fundamentalist Christian creed that states that dinosaurs did not exist. An example of this can be seen here. He or she also makes personal attacks against reverters; for example: [13] [14].

Some IPs used:

He or she may also hit articles relating to Islam.

AOL Europe IPs according to whois. Abuse report in order? —Crazytales (t.) 12:54, 31 August 2007 (UTC)[reply]
I don't know, I haven't seen them attack lately, probably because that articel has been protected for probably close to half a year. I suggest that this be removed soon barring future developments; this, now that I look at it, would've been better there in the first place! 68.39.174.238 19:02, 1 September 2007 (UTC)[reply]

The Middle East Conflict Man

The Middle East Conflict Man (talk · contribs · deleted contribs · logs · filter log · block user · block log), indefinitely banned from three Wikipedias (English and both Norwegians), uses numerous sockpuppets to make a highly POV edit to Socialism, as well as making inflammatory/vandalistic edits to various other socialism-related articles. As of late July 2006 he has 50 suspected sockpuppets. Blocks on his IP are apparently ineffective.

The sockpuppets variously claim to be from two different people: given their similar behaviour, they may be treated as one entity in accordance with Arbitration Committee rulings

Banned User:Irate

Banned user persistently returning using revolving IPs in the 84.9.x.x and 87.75.x.x range. This user uses the edit summary "revert vandalism" or "rvv".

Bulldog DSL ip addresses in UK. —Crazytales (t.) 12:55, 31 August 2007 (UTC)[reply]

Emico

Emico (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) was banned from editing Iglesia ni Cristo related articles for one year from August 21, 2005 (provided he doesn't violate his parole) by the arbitration comittee: Wikipedia:Requests for arbitration/Emico. He has not honored that decision and continues to cause disruption at the article and users involved with his ArbCom hearing. Emico is also believed to be using proxys to evade blocks, making it nearly impossible to confirm using checkuser functionality. A member of the Arbitration Comittee has declared explicitly that Emico's edits and edits edits of suspected sockpuppets may be reverted "without comment": [15]

Modus operandi

The following is a list of editing patterns which are common with Emico and his sockpuppets:

  • Posts only at Iglesia ni Cristo and its related articles.
  • Personal attacks or negative opinions aimed the contributers who are against him (mostly the ones who have participated in his ArbCom hearing). This includes, but is not limited to, comments about contributers' past policy violations or/and lack of knowlege of the subject matter.
  • New usernames where the majority of contributions are of the above point.
  • Posts coming from proxy addresses. A checkuser result has proven Emico posts from different IPs from all over the world.
  • Article edits which are nearly identical to Emico's initial edit pattern, which is explained at Wikipedia:Requests for comment/Emico.
  • Insult usernames which parodies current contributers' screen names (eg User:Starbucks, User:LenlenBunting)
  • Massive ommisions of sourced content which are critical of the Church.
  • Use of sockpuppets (See Category:Suspected Wikipedia sockpuppets of Emico and Category:Wikipedia sockpuppets of Emico)
  • Use of open proxies

Nokhc / aluminium, sulfur

Nokhc (talk · contribs · block log) is a vandal who attacks articles with unsourced comments and outright bias. His main targets are aluminium and sulfur, where he claims that the spellings are "a vulgar error that should not be perpetuated" and "a ridiculous spelling", respectively. He also seems to be homophobic (per this edit) and misogynistic (per this). He may be "EnthusiastFRANCE (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)".

Other targets include Jeremy Bentham, Stanford prison experiment, Prostitution, Foreskin, Morality, Naturism.

Userpage vandalism and personal attacks, signs himself as User:Nokhc (indef blocked). IPs used:

Creates one-time socks: User:Diched, User:Dichead, User:RESURGAM, User:V----l Sch----l, User:Dududuh, User:Duh duh duh, User:Not the duke of Devonshire, User:Master of the prick, User:TICK TOCK, User:DINGGGGG!, User:At the speed of light, User:Wikipedia is immoral, User:Porud!!!

Disney/Barney vandal

Since late May 2006, this user has vandalized several articles related to The Walt Disney Company, Barney & Friends and Public Broadcasting Service. Occasional targets include articles related to The Simpsons and The Land Before Time, along with miscellaneous television and media topics. His/her modus operandi is to introduce inaccuracies and bad formatting, much of it subtle to inexperienced users or those who know little about either subject. Edits from all IPs are identical, so it's virtually certain they are operated by the same user.

Articles frequented by this user include:

Disney articles:

Barney and PBS articles:

Other:

User:Enlighter1 & sock puppets

Original report by clearthought Sept 2006

Seems to always vandalize Reuters, Agence France-Presse, Associated Press the most (sometimes other news and non-news articles too), as well as making personal and vile attacks against users. Always reverts the reverts people do to his/her (Enlighter1's) vandalism by saying something like "rv vandalism" or "I am not the real vandal" in the edit summary. Has edits and actions aforementioned consistent to all of this users IP and registered user sock puppets. Also, when registering a username, tends to have the name end in "1" or have something to do with "AllPowerful" or "AllKnowing". A vandal profile page keeping an eye on this vandal is needed (like what has been done with the 'communism' and 'on wheels' vandals, but obviously not as serious). I myself, and others, have spent much time trying to take care of this vandal, so I think that the Wikipedia community — as well as admins who can actually do something when help is needed — should be made known to this new serial vandal. Still very active 30.11.2006: [22] activity includes "archiving" aka blanking of larger talkpages as well as targeting specific talkpages. See [23] [24] [25] for typical patterns. Often uses webproxies - some open - some backslashing.

  • Has disrupted IRC numerous times. Works from a Chello isp in austria apparently. He's banned from many Wikimedia IRC channels. I'm at school atm so I can't look up his static IP in the ban list. ~Crazytales  (IP locations!) 13:39, 23 January 2007 (UTC)[reply]

User:Outoftuneviolin

This vandal uses similarly named sockpuppets to vandalize. His edits follow few, set patterns. Their vandalisms are usually written in "AOL speak" or just poorly spelled. For the most part, they're trollish posts attacking evolution and users they think are "evilutionists" sic.

His sock puppets: category:Wikipedia sockpuppets of Outoftuneviolin Category:Suspected Wikipedia sockpuppets of Outoftuneviolin

Galatasaray, etc POV pushers

Galatasaray and some other Turkish football articles are repeatedly hit on by an IP-hopping, sockpuppeting vandal who will engage in midless reverts of these pages to "their" version regardless of the differences. When partially protected, this vandal uses sockpuppets such as Burak18 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and Johnny200 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) to perpetrate the same reversions.

A sampling of IPs used by this vandal will show their typical MO: 194.171.121.27 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log),124.50.89.17 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), 148.233.120.49 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), 200.76.104.121 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 82.168.59.236 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) and 82.92.94.108 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

Most vandalic edits involve "Turkifying" Galatasaray or other clubs by removing lists of foreign coaches. They also add unsourced conjectures ("X'll be coach of Galatasaray next year", etc.) and removing dispute tags calling attention to their unsourced assertions.

Administrator Robdurbar (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) has been helping out with dealing with this vandal, concerns (New sockpuppets, etc) sent to him may be understood more quickly.

Ionocraft, Lifter (ionic propulsion device), and Biefeld – Brown effect

An AOL user has been using AOL's proxies to persistently revert two articles (one of which was moved to a new name). Their edits are always exactly the same; replacing the entire article with an old version that they wrote in a bot-like fashion. They could easily be countered by a bot that watched the page and looked for their signature edit. Page protection logs (due entirely to this vandal): Lifter (now entitled Ionocraft), Biefeld – Brown effect — Omegatron 19:15, 17 October 2006 (UTC)[reply]

Jinxtengu Vandal

Operating from the main account called JINXTENGU (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) this vandalizer persistently launches personal attacks, creates a large amount of malicious sock puppets, creates imposter/spoof accounts, and many of his accounts have been blocked but one in particular was blocked for issuing a death threat (see this post) JINXTENGU is also being reported at Wikipedia:Suspected sock puppets/JINXTENGU and this check user report caused one of the static IPs to be blocked for a month. This user has also claimed to have written a program specifically aiming to create large amounts of sockpuppet accounts to override bans (see this).

Their sockpuppets can be seen at: category:Suspected_Wikipedia_sockpuppets_of_JINXTENGU. Note that Prussian Poet gal. (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and Tunisian Prophet poet (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) are both attacks on User:Persian Poet Gal.

The following is a list of diff pages tracking some of his vandalism/personal attacks throughout 2006:

Joan of Arc vandal

This vandal edits Joan of Arc, homosexuality, cross-dressing, Catholicism and related articles, particularly on topics where these interests intersect. Uses AOL (64.12.116.x, 152.163.100.x, 205.188.11x.x) and sockpuppets.

This vandal alters pages toward a devoutly Catholic, anti-homosexual POV. Favored methods include deletion of cited material, deceptive edit summaries, and edit warring. Sometimes engages in lengthy talk page debates; at other times avoids talk pages and conducts disputes through edit summaries. Has been known to add inaccurate statements to cited passages, degrade existing footnotes, and fabricate fraudulent citations. Deletes material from talk pages. Has created at least one account to impersonate an established editor. Highly persistent vandal can read sources in French and attempts to mask destructive activity as legitimate editing disputes. Active since October 2004.

On 16 December 2006 User:AWilliamson was community banned as the (dormant) sockmaster of this sockfarm. Sockpuppets have also been banned although new and unidentified socks may remain active.

See also:

Original report by User:Durova.

The name vandal

  • Modus operandi/analysis

IP (85.210.192.0/18) add one after another unsourced/false first & middle names,mostly in professional wrestlers[26] [27] [28] [29] [30]/Football articles[31] [32] [33] [34] [35], Googling shows no results verifying users edits with rare exceptions., the vandal will sometimes revert own earlier vandalism when someone discovers his activities; an example: (vandalism another user removes fictionalize middle name the vandal will later add the true middle name back), will also engage in blatant vandalism in articles[36] [37] [38] [39] [40] and on user pages.

Known Ip's

" you wikipedia assholes think u can stop me ha ha ha ha ha" [41] insulting a sysop [42] - Sirex98 16:06, 5 December 2006 (UTC)[reply]

User:Kermanshahi long term vandalism (found here on this page)

The complete wikipedia-nl file on this group of schoolboys from The Netherlands including all used IP-addies can now be found here. All accounts have been blocked indefinitely and the two home IP-numbers and the school I-number have been blocked for a year. The text says in translation"The following user accounts and IP-addresses, the Multiple Personality Spammer" belong to pupils of a Dutch secondary school, Maartenscollege. Their names are known with Wikipedia. From these accounts many dubious edits have been done and communication with themselves as well." We traced with userchecks and comparing edits all sockpuppets and hopefully now the problems with us have ended. Hopes this may help you since I saw the sillyness continues at wiki-en. If more information is needed feel free to contact me on my Dutch talk page. This affair has cost several administrators a lot of work. Best wishes, MoiraMoira 17:57, 15 August 2007 (UTC) (administrator and bureaucrat on Wikipedia-nl)[reply]

New user names added in april 2008. Please compare the names with our list of accounts and IP-addies since the affair is not over yet alas. The complete listing of this group of teenagers can be found here MoiraMoira (talk) 08:05, 16 July 2008 (UTC)[reply]
Updated file present [here]. School was contacted nov 2008 and promised to monitor events. Individuals belonnging to this group how ever continue from home adresses. MoiraMoira (talk) 18:50, 4 September 2009 (UTC)[reply]

ClaimJumperPete

From WP:AN

An FYI. There's an odd persistent vandal, ClaimJumperPete (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and sockpuppets whose habit is to insert seemingly misguided "ant-vandalism" comments in random articles, using a highly stylized southern U.S. accent. He plays the "just trying to help" and "I don't understand why you don't like me" games, but has also started scoreboarding his vandalism (see Example 1, Example 2). I've asked for full protect on the user and user talk pages this vandal can edit, to stop the scoreboarding. I mention the guy here:

  • to alert a wider range of admins, since he plays the naive user game very well
  • to inquire if there's more that can be done

I'm not an admin and don't know all the tools you guys have for squashing vandalism. Studerby 19:56, 2 October 2007 (UTC)[reply]

Modus operandi

The vandal creates accounts with the name "ClamJumper _" (a common name such as "Bob" or "Dan") and occasionally uses a different prefix such as "Whiskey" or "Cactus". He mainly vandalizes articles related to alcohol or the Old West (e.g. ghost town"; American Old West) by inserting messages similar to the following as embedded text:

Howdy y'all, Claim Jumper Pete here. Jus' thought I'd stop by and tell ya not to vandalize this page, it just ain't right! Try to put somethin' nice, it works so much better, and y'all will feel all warm 'n fuzzy inside. Well, 'am done here, happy editin

The vandal also trolls user and user talk pages [43], always writing so as to create a strong Southern US dialect.--Avant Guard 21:02, 2 October 2007 (UTC)[reply]

The latest twist is adding the comments as hidden text e.g.

General threat

Another of his sockpuppets, User:GhostofPete, made the general threat in this edit.

To note, one of his socks dropped [44], which appears to be a free YaBB forum he set up. Nwwaew (Talk Page) (Contribs) (E-mail me) 20:37, 11 November 2007 (UTC)[reply]

Serial SPAMmers

NOTE: The content in this section was moved from the main LTA page to this page on May 4, 2009 (cut - paste). See here for explanation.

upc-online.org

Used some weird google redirect... [45] --Oursinees324 (talk) 07:35, 11 March 2009 (UTC)[reply]

Universe Today and sockpuppet-SPAMmers

Formerly operated most notably from the shared 203.10.59.63 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) this user is a sneaky sockpuppeting SPAMMer. All this info is at /Universe Daily.

AlloExpat

This entry was blanked by a user from 203.109.50.20 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log). Like the previous case, this IP resolves to a host in Malaysia, suggesting that the spammer may have been trying (clumsily) to cover his/her tracks. -Loren 04:08, 13 February 2007 (UTC)[reply]

SexInRussia spammer

 Defer to WPSPAM--Hu12 (talk) 11:54, 1 April 2008 (UTC)[reply]

Car and Ringtone Spammer

User keeps adding external links to his car website or ringtone/phone website, which only contains Wikipedia information (directly copied with no credit given to Wikimedia) and sponsored adverts. The links appear on many 'car' pages such as those of Aston Martin, Mercedes Benz, Land Rover etc (in the external links section). Spamming has continued to this day, despite a 24 hour ban by user RadioKirk. 50+ articles have had links added, some have now been removed be me and others, but he is persistent...

 Defer to WPSPAM--Hu12 (talk) 11:55, 1 April 2008 (UTC)[reply]

Bulldog Spammer

Using wikipedia to try to sell dogs, got final warning twice, still came back and spammed.
Cleaned up the links for now (linksearch). Suggest blacklisting if the spammer persists.
MasterOfAllBulls and all his socks have been indef blocked from editing. (except the IP) Calvin 1998 Talk Contribs 01:57, 16 January 2008 (UTC)[reply]
 Defer to WPSPAM--Hu12 (talk) 11:55, 1 April 2008 (UTC)[reply]

Datasheet serial spammer

Not surprizingly this spammer hits the Datasheet page (history) and others related to electronics. The original URL (datasheet4u.com) was banned on Meta, but recently mirrors have sprung up, requiring the page to be kept under nearly constant protection.

COIBot user report: Wikipedia:WikiProject_Spam/UserReports/124.60.232.59

SPUSA spammer

Anonymous IPs with similar IP numbers have persistently added links to the Socialist Party USA website and the wikipedia page on the organisation. These links number in the hundreds to any article on a social issue, such as black power, and re-adds the links repeatedly after they've been reverted by other editors. They are usually in the "see also" and "external links section, but sometimes, the same editor removes content critical of the SPUSA, or adds links in the body of the article (e.g. this diff, this diff and this diff). Occasionally these links may be considered legitimate, but the vast majority are things like "the SPUSA cares about this issue too" (e.g. this diff). It's hard to tell if they are honestly trying to promote the group or turn people against it! The editor/s have used the the following IP addresses, among others:

RedPenOfDoom

All IPs in their home range belong to dsl.sfldmi.ameritech.net. To avoid unnecessary collateral damage by blocking IP addresses they've no access to, the following split ranges were found to cover only the IPs they can use:

  • 68.79.64.0/18 his main range; collateral: ~ 2 constructive IP users/week
  • 68.79.164.0/22 collateral: ~ 1 constructive IP user/month
  • 68.248.72.0/22 68.248.73.0/24 + 68.248.74.0/24's IP edits almost exclusively from this vandal; other IPs in this range were used in July but not recently
  • 68.248.78.0 — 68.248.91.255 (= 68.248.78.0/23 + 68.248.80.0/21 + 68.248.88.0/22) also belong to dsl.sfldmi.ameritech.net, but don't seem to be used by the vandal to date
  • 68.249.44.0/22 collateral: ~ 1 constructive IP user/month

Note that because they are inserting a phone number the IP's may appear to have no edits. Check the deleted contributions, but most edits have been oversighted.

"Martial arts vandal" aka "Burton-on-Trent vandal"
Wikilifespan2010–present (possibly 2008)
ISPBSkyB
Known IPs2.120.*.* to 2.223.*.*
90.195.*.* to 90.221.*.*
94.0.*.* to 94.7.*.*
Physical locationUK
InstructionsRevert non-constructive edits on sight. Report new accounts to AIV with a link to this page.
StatusActive

Basic information

The martial arts vandal is a long-term disruptive user who primarily targets Hong Kong martial arts films, especially those that star Sammo Hung and Jackie Chan. He also targets American action films that star Dolph Lundgren, Jean-Claude Van Damme, Cuba Gooding, Jr., and Cynthia Rothrock. Any film in these stars' filmography should be considered to be at high risk. His edits generally fall under several narrow behaviors: genre warring, removing categories, enforcing alphabetical order in categories, adding unsourced information, and edit warring to maintain these changes. He is on a highly dynamic IP range, but the IP addresses generally stick for about three to seven days, during which he will be inactive if blocked. Once his IP address changes, he will evade his block and immediately return to edit warring. Short blocks (less than three days) may prove ineffective in preventing further disruption. Although he has never had a known user account, he can be identified by IP range, behavior, or geolocation. Attempts to reason or converse with him are ignored, and he almost never uses an edit summary. He has certainly been active since 2010, and some reports date back to 2008.

This is a tenacious edit warrior. He will patiently wait out blocks and page protection, even if the protection lasts a month. He likely uses his browser to bookmark articles in lieu of a watchlist. He checks the articles daily, and it is likely that he will revert dozens of articles in a single session. He has been repeatedly blocked and was subject to a community ban proposal; this LTA report was filed as an alternative to the ban.

He was blocked until March 2017 in a range block (2A02:C7D:9EC5:3800::/64).

Targeted areas, pages, themes

His primary targets are Hong Kong martial arts films, but he will occasionally target American action films, especially if they star a martial artist. He seems to keep an eye on certain categories, such as Category:Hong Kong martial arts films and Category:American martial arts films, and he will target new articles as they are created. His most commonly targeted articles include:

Most edited articles as of August 2014
Article Edits IPs Notes
Yes, Madam 30 10 disruption going back to August 2011. Indefinitely semi-protected
Don't Give a Damn 30 9 article created in June 2014. Indefinitely semi-protected.
Double Impact 33 11 disruption going back to April 2011
Project A Part II 37 24 disruption going back to November 2011
Ninja in the Dragon's Den 40 22 disruption going back to February 2011
Rob-B-Hood 44 26 disruption going back to October 2010. Indefinitely semi-protected.
Legacy of Rage 46 10 disruption going back to August 2011
Heart of Dragon 53 24 disruption going back to April 2011. Indefinitely semi-protected.
No Retreat, No Surrender 2 55 17 disruption going back to October 2011
SPL: Sha Po Lang 85 24 disruption going back to October 2010
No Retreat, No Surrender 95 35 disruption going back to October 2010
Crime Story (film) 125 20 disruption going back to October 2010. Indefinitely semi-protected.

Edits is number of obvious edits by this vandal counted until August 2014. IPs is number of individual IP addresses used. A small number of IP addresses means constant edit warring in a short period of time.

Other commonly targeted articles include:

List courtesy of StG88, AWNH, and others

Low risk topics include articles on United States-based professional wrestling, such as wrestlers and wrestling films. These articles are traditionally subject to fewer edits and much less disruption. Rare targets include American and British heavy metal bands, which are generally not subject to disruption.

Articles listed as indefinitely semi-protected have been protected per request against this vandal; if protection is lifted, please consider adding the article to your watchlist.

Habitual behavior

The most obvious and recognizable behavior is genre warring. This generally takes the form of editing the lead and the categories to remove unwanted genres. He may cite Allmovie in HTML comments for genre in the categories. He may also add information sourced from the IMDb, which WikiProject Film considers an unreliable source. Categories will always be forced into alphabetical order. Also possible are minor incidents of content blanking, removal of templates, and changing sourced text to values based on original research. In all cases, he will edit war for days or even weeks to retain his changes to the article. Continuing edit wars with Soangry (talk · contribs) are iconic and help to identify both old and new accounts. These edit wars may persist almost indefinitely. The vandal may even target new articles shortly after Soangry creates them. Continuing edit wars with other anti-vandals also exist, but they are not pathological.

Cases

Diffs, discussions, and evidence are posted in the above cases. Refer to them for more detailed information.

User pages with information incorporated here:

Several further discussions can be found linked from those pages.

Other notes

Proven and suspected accounts

IP accounts are normally in the 2.120.*.* to 2.222.*.* and 90.195.*.* to 90.221.*.* ranges. Additional ranges include 94.0.*.* to 94.2.*.* and a one-off at 176.251.46.19. IP addresses outside these ranges are possible but break with habitual behavior, which does not seem to indicate the use of VPNs or proxies. Compulsive genre warring across dozens of Hong Kong film articles from non-habitual IP ranges should be treated as suspect regardless of geolocation. Note that geolocation might not always result in Burton-on-Trent; neighboring cities are occasionally possible, and locations as distant as Singapore have been suspected. Due to the BT system in the UK, any geolocation with a UK address will be the address of the ISP offices for that range of addresses, and will never be the location of the user.

More-or-less proven:

Since June 2016, he's begun to be addressed IPv6 ranges, which may make a range block easier.

Range blocks
Date Admin Length IP range
20 June 2016 Malcolmxl5 two weeks 2A02:C7D:9EC5:3800::/64
5 July 2016 KrakatoaKatie 45 days
21 August 2016 NeilN 1 month
21 September 2016 NeilN 3 months
28 December 2016 Black Kite 3 months
27 January 2017 NinjaRobotPirate 3 months 2a02:c7d:9e64:2c00::/64
28 April 2017 NinjaRobotPirate 6 months
October 2017 NinjaRobotPirate 1 year

Suspected:


Brianmagallano
Wikilifespan2012–present
ISPvarious
Physical locationCebu City, Philippines
Sockpuppet investigationsBrianmagallano
InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
StatusActive

Basic information

Brianmagallano (talk · contribs · block log · arb · SPI confirmed suspected)
Comprehensive edits analysis
Vandal primarily targeting video game articles, Philippine media articles, and Football articles, introducing false information, active for years even after blocks. Dozens and dozens of suspected socks from the same IP range.

Targeted areas, pages, themes

Video game articles, Philippine media companies, Football articles

Habitual behavior

Other notes

  • The vandal is rarely seen creating new accounts, however, he is very active using IP addresses. The IPs are based from Cebu City or the Central Visayas region of the Philippines when checked with Geolocate.
  • As of 2022, the vandal is using different IP addresses in en.wiki and seldom creates sockpuppet accounts. However, he has been seen creating various accounts in Commons, with the main sockpuppet account named as User:Yuiyui2001. See Requests for checkuser/Case/Yuiyui2001 and Category:Sockpuppets of Yuiyui2001.
  • The vandal is also seen in Tagalog and Cebuano Wikipedias, doing the same edits whenever his current IP address is blocked here in en.wiki.

Confirmed and suspected accounts


Boy band vandal
WikilifespanJanuary 2013 – present
Known IPsSee list
Physical locationAlberta, Canada
InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
StatusActive

Basic information

This person who travels around Alberta, but (since 2015) has often been geolocated to Grande Prairie, adds inappropriate categories such as "boy band" and "girl group" to the articles about musical groups.[46][47][48][49][50] The earliest known edit was on 27 January 2013. Other interests include video games and Canadian television.[51][52]

They've also been editing non-English Wikipedias – see, for example, the global contributions for 104.205.121.217 and those for 2001:56A:F5C2:C100:877:229D:F45E:F67F.

Local blocks

Global blocks

IP addresses associated with the boy band vandal have been globally blocked as shown in the following links:

Involved IP addresses


Caribbean music vandal
WikilifespanDecember 2009-present
Known IPsSee list, especially 203.205.120.0/21 and 163.251.128.0/26
Physical locationvarious
InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
StatusActive

Basic information

This is a Caribbean music vandal who has been blocked many times for disruptive editing. He commonly misrepresents sources or commits copyright violations in quoting sources unattributed. This person is obsessive, making many thousands of changes, sometimes leaving strident edit summaries. Many problems with original research, competence, and the promotion of several bands. In March 2014, JamesBWatson blocked the ranges 203.205.120.0/21 and 163.251.128.0/26 for two years, an uncommonly long period.

Starting in New Jersey with 209.212.25.186 in December 2009, this person has moved around a lot, using IP addresses mostly in the US, but from a few other places including Hong Kong and some US Navy bases.

Targeted areas

Suspected accounts

Cause of death vandal
WikilifespanOctober 2013 – present
Known IPsSee list
Physical locationMostly Keighley or Leeds in England, also Greece
InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
StatusActive

Basic information

This person puts false biographical data into biographies, such as adding cause of death information to infoboxes without regard to whether the cause of death was a defining characteristic. Editing primarily from Keighley or Leeds but occasionally elsewhere in the UK, they make many other false changes to biographical data such as birth date, birth name, place of residence, as well as adding pre- and post-nominals such as Jr/Sr, OBE/CBE, etc. They are especially attracted to the biographies of super-centenarians and people who have recently died. The Leonard Nimoy biography is a particular target. Their first known edit was changing the year of death to be wrong.

On 30 June 2015, this person began using IP addresses in Greece. A discussion was raised at ANI. They returned to the UK after two weeks.

Examples of disruptive behaviour include

Involved IP addresses

Wikipedia:Long-term abuse/Teenage Fairytale Dropouts vandal

Wikipedia:Long-term abuse/Gabucho181

Continued on WP:Long-term abuse/Page 3.

Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Long-term_abuse/Page_2&oldid=1213808745"