Jump to content

Wikipedia:Long-term abuse

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Frosty0814snowman (talk | contribs) at 11:19, 9 August 2006 (→[[User:Outoftuneviolin]]: rm my signature). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
Shortcut

    Long term abuse is a page intended hold information describing editors or IPs which show extreme persistence in their policy violations so people can become familiar with their patterns and more easily spot and deal with them. Think of it as a "post office wall" with wanted posters. This page has been confused with several other pages, so please check the "Explanation" section if this is your first time here.

    Explanation

    Vandalism
    Dealing with vandalism
    Resources and assistance
    Further information

    This page should contain only properly categorized, unique entries on specific vandals or IP addresses with enough relevant and correct information to allow other people to identify them and their tracks. To keep this page functioning smoothly, please bear in mind:

    Don't add an entry here without correctly determining what section it goes in. "Other / Misc." should NOT be used; it exists as this page's equivalent to {{dontknow}}.
    Don't add an entry here requesting some account be blocked. That's like putting up a wanted poster asking for someone to be indicted. If you want request someone be blocked, see WP:AIV.
    Don't use this page for discussions. If there needs to be a discussion, start one on the talk page and link to its section from this page. If there is a discussion going on elsewhere, link to it.
    Don't sign entries, this page shouldn't be used for discussion (It gets long enough without it).
    Don't use relative phrases like "recently" or "lately" without qualification. Try using "as of" to remedy this: "lately (As of August 3rd), ..."
    Don't add entries without vital information: they will likely be removed for being useless or unintelligible.

    Criteria for addition

    Note that minor or first time attackers should be listed at the Administrator vandalism page. Listings here should be for people who obviously know what they're doing and aren't going to stop. Vandals who meet the the following are especially ripe for listing here:

    1. Ones that are recognizable by one or two edits alone because of their style
    2. Ones that create multitudes of sock puppets
    3. Ones that carry out prolonged attacks against Wikipedia

    Criteria for removal

    The most common causes of removal are:

    1. Archiving old entries of inactive vandals.
    2. Removing improper or useless additions.

    Entries here should have a marked past of policy violations related to the entry. IPs listed which haven't have any blocks are almost always removed. User accounts listed as vandals with minor blocks or "major vandals"/"sockpuppets" that aren't blocked will also likely be removed.

    Adding to this page

    1. Check the archives to see if the same IP, a similar username, or similar method of attack was used before.
    2. If so, copy that section out of the archive and list it here with relevant updates and link back.
    3. If it's new, check to see if the vandal is listed on a subpage, if so, add the information there.
    4. Then check this page itself. If it's totally new, create an entry at the bottom of the appropriate section (see below for an explanation), with a descriptive heading, and under it a "Modus operandi" subsection. Use {{userlinks}} to list registered users involved and {{IPvandal}} for IP addresses.
      • This is vital: Without information on what a certain "vandal" does or how they do it, it will be impossible for other readers to understand how to spot them. Entries without this information may end up being removed. See below for more information.
    1. If they're already listed on this page, add new information if you have it (Such as new sockpuppets or MOs). Try to keep discussion limited. This page is extremely long as it is, if there needs to be prolonged discussion, use the talk page and link to it from the entry. Off topic discussion will likely be removed on sight.

    Necessary information in an entry

    Entries *MUST* have the following information to be useful and be kept:

    • List of vandal accounts/IPs. If they use a wide range of IPs, list the ranges and any prominently used addresses. If they use user accounts, list at least the first one. If they have a category for their sockpuppets, list it also.
    • A description of their vandalism(s). Good detail is important: unneeded information will be trimmed out by others, but a underexplained entry will likely be removed.
    • Examples of their vandalisms. This is extremely important if they use a wide range of IPs with other users, or if they have made non-violatory contributions as well. Examples can also serve as springboards for further investigation.

    Sections

    The page is divided up into sections as follows:

    • The Archives which are periodically created for old entries who have become inactive for a significant length of time.
    • Unique entities — People with a specific MO. This section is for miscreants who are clearly defined in their attacks and are obviously a single person or group of people acting in concert.
      • Serial SPAMmers are usually IPs who literally do nothing but SPAM, frequently by inserting the same link into every article that's possibly related to what they're pushing.
    • Shared IPs lists the most problematic shared IP ranges and ISP proxies. These are frequently shared amongst large numbers of people within a geographic area, such as an ISP's proxy, or by people within a facilitiy, such as schoolchildren, businessmen, library users or prisoners, and should only be blocked for short lengths of time.
    • Other / Misc. — Don't fit into one of the above. New entries default into here if the submitter doesn't select one of the other section.

    Archives

    Unique entities

    Vandal sub-pages

    Well known attackers are listed on sub-pages; a list can be viewed at Category:Wikipedia vandals.

    Serial SPAMmers

    Consider also reporting these malefactors to the meta:Spam blacklist. If the addition is sucessful, you may wish to immediately archive or remove the section here.

    AlloExpat

    Jake and Tom's friend spammer

    SexInRussia spammer

    Car and Ringtone Spammer

    User keeps adding external links to his car website or ringtone/phone website, which only contains Wikipedia information (directly copied with no credit given to Wikimedia) and sponsored adverts. The links appear on many 'car' pages such as those of Aston Martin, Mercedes Benz, Land Rover etc (in the external links section). Spamming has continued to this day, despite a 24 hour ban by user RadioKirk. 50+ articles have had links added, some have now been removed be me and others, but he is persistent...

    Bulldog Spammer

    Using wikipedia to try to sell dogs, got final warning twice, still came back and spammed.

    datasheet4u.com serial spamer

    Not surprizingly this spammer hits the Datasheet page (history) and others related to electronics. The domain was Added to the SPAM blacklist.

    Zombie spam ("We are all looking fsorward to a great sseason" [sic])

    These SPAMmers, who may be running a botnet from zombie computers, add trash like this. Many of the IPs are in LACNIC's range). A site-specific search on Google reveals that it's been somewhat successful at getting some indexing. An example IP is 83.238.44.12 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) on June 1 2006. These malefactors have hit up other websites as well: [1]

    SPUSA spammer

    Anonymous IPs with similar IP numbers have persistently added links to the Socialist Party USA website and the wikipedia page on the organisation. These links number in the hundreds to any article on a social issue, such as black power, and re-adds the links repeatedly after they've been reverted by other editors. They are usually in the "see also" and "external links section, but sometimes, the same editor removes content critical of the SPUSA, or adds links in the body of the article (e.g. this diff, this diff and this diff). Occasionally these links may be considered legitimate, but the vast majority are things like "the SPUSA cares about this issue too" (e.g. this diff). It's hard to tell if they are honestly trying to promote the group or turn people against it! The editor/s have used the the following IP addresses, among others:

    Numerous wikipedians have added warnings to these anon talk pages. ntennis 02:28, 29 July 2006 (UTC)[reply]

    Hganesan

    User:Hganesan continues to use sockpuppets (really just different IP addresses) to circumvent blocks imposed due to constant and repeated edit wars on numerous pages. Most of his addresses were blocked yesterday but he seems to be at it again from another IP.

    See also:

    [2] [3]

    Thanks. Simishag 03:21, 20 May 2006 (UTC)[reply]

    Guinness/featured article vandal

    From late 2005 to recently, a vandal has been frequently attacking either the Guinness article or the daily featured article. The vandal's modus operandi consists of replacing the article with references to other Wikipedia vandals, such as the North Carolina Vandal and the Wikipedia is Communism vandal, or replacing the entire page with sexual images. Sometimes he would make personal attacks against Jimbo Wales in his vandalism sprees. The vandal used to attack the George W. Bush article. This vandal typically operates from AOL proxies.

    Shran/CantStandYa

    • Previously identified sock accounts/IPs:
    • Sample of articles which have been edited by more than one current account. *Conspicuous edit warring.
    • Proposed action:
    • "Shran" could be a more valued contributor if he would stop using sock puppets to edit war. He has been asked repeatedly by editors including myself to stick to one account. The user, through various accounts, has protested that the IPs are either open to many users, or are used by a "little brother" or "brother-in-law". Despite these claims the edits are clearly the work of one person. The previous set of sock puppet accounts was blocked by me and others in the fall of 2005, and a new set has been created since then. As with previous socks, these accounts have been used to abuse consensus and even to pile-on votes in CfDs and an AfD. As we did before, I propose that we block all the current sock accounts indefinitely while leaving one account open for editing, User:CantStandYa. I'd appreciate hearing input from members of the community on this user and on my proposed action. Are there any other known accounts for the user? Have there been any other editing problems? Are there any other measures, beyond blocking the obvious socks, that we should pursue? How can we get this prolific editor to follow community norms? -Will Beback 05:14, 11 March 2006 (UTC)[reply]
    See also User:Stbalbach/anontexan. -Will Beback 22:13, 11 March 2006 (UTC)[reply]
    Due to Stbalbach's research, it appears that this user has also been using a number of dial-up accounts. Short-term range blocks may also be necessary to manage this sock-puppetry. -Will Beback 00:24, 12 March 2006 (UTC)[reply]
    I can confirm that many of these accounts are sockpuppets (I simply haven't checked them all). I recommend dealing with the issue by blocking all by the main account, and then selectively sprotecting the articles in question, if IP editing or sockpuppeting continues, but I welcome other input. Jayjg (talk) 18:18, 13 March 2006 (UTC)[reply]
    Thanks for the confirmation. Hearing no objections, I will block the registered accounts except User:CantStandYa. I will semiprotect articles on which these IPs are seen to edit in the future. -Will Beback 22:46, 13 March 2006 (UTC)[reply]
    The so-called "Anon Texan" has been determined to be a separate person, and so I have removed all references to those accounts from this list. Sorry for the error. -Will Beback 19:56, 19 March 2006 (UTC)[reply]


    InFlames vandalizer


    Mr Belvedere poster

    A suspicious vandal who creates accounts in a fairly set pattern (See below) and then adds an image of "Mr. Belvedere" to various articles with only minor relations ("Mr. Belvedere never drove on Nevada State Route 689" was one) or outright nonsense ("Noted polygamist Mr. Belvedere was not a fan of the 1890 manifesto").

    A note from the former Mrbelvedereposter: I have given up vandalism and am contributing constructively to Wikipedia under a different name. I applogize for my past actions (although you must admit a bit of quality absurdist humor...). I want to make it clear that I am not responsible for any alleged mrbelvedereposter beyond #28, with the exception of "Iwasinspiredbythegreatmrbelvedereposter" and "mrbelvedereposter37". Every other user who has claimed to be mrbelvedereposter since I retired is not me. Again, I apologize for any harm I may have caused. Helpfulposter 05:28, 15 February 2006 (UTC)[reply]

    Impostors?

    According to the former "Mrbelvedereposter" vandal, these accounts were made by other people.

    DickyRobert

    DickyRobert (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) was an editor who was blocked indefinitely for disruption on pages related to warez and threats. He regularly creates new sockpuppets but doesn't use them untill they're old enough to skirt semi-protection, then he'll flood his chosen targets with them, frequently using each account only once, whether or not it's been blocked.

    His sockpuppet names generally are names of famous people (User:Issac Newton), or various productions. See Category:Suspected Wikipedia sockpuppets of DickyRobert for the full list of suspected accounts.

    Blocked User:Gibraltarian

    Gibraltarian (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) was indefinitely blocked in mid-December 2005. If you block another of his IPs, please list them here. So far, we have...

    Also, his ISP uses the ranges of 195.244.192.0 - 195.244.223.255 and 212.120.224.0 - 212.120.255.255. Please note that this corresponds to the largest ISP in Gibraltar and this guy is on dial-up. Also, there is least one legitimate IP in this range (212.120.227.226), which is occasionally used by the legitimate contributor Gibnews (talk · contribs). There may also be occasional unrelated edits from random IPs within these ranges as well. Blocks should therefore only be for a short period of time. Comments made by Gibraltarian will be signed as "Gibraltarian": [7].

    Most of his IPs fall within the ranges of 212.120.224.0 - 212.120.231.255 and 212.120.236.0 - 212.120.237.255. A full list can be seen from this.

    NOTE: 212.120.227.126 is currently in semi permenant use by one of my clients and NOT User:Gibraltarian - I got a message saying its blocked, although seems to be working today--Gibnews 14:41, 9 February 2006 (UTC)[reply]

    Gibraltarian is currently using anon IP addresses to vandalise a range of articles and talk pages on at least a daily basis (five times just yesterday). The pages in question include:

    He is one of the most persistent vandals I've ever seen (check the article and talk page histories!). I've semi-protected the vandalised articles and talk pages in the hope of discouraging him. Regrettably, these pages are likely to need to be semi-protected for substantial periods (weeks at the least); in view of this, I've directed anon and newly registered users to my own user talk page to submit comments and changes, which I'll copy onto the article talk pages. -- ChrisO 08:27, 20 July 2006 (UTC)[reply]

    SpongeBob/The Shining vandal

    Sollog

    Followers of a self-styled god named Sollog frequently vandalise the Wikipedia. They at one point had a website at http://www.wikipediasucks.com.

    Articles regularly hit up on are:

    Sockpuppets / Meatpuppets of Sollog will usually make themselves known by invoking the name of Sollog or linking to the aforementioned site or http://www.247news.net/2004/20041211-wikipedia.shtml, also sharing a similar writing style, using UPPER CASE for emphasis. See Talk:Sollog for information on their past behavior. An example of Sollog vandalism can be seen in this edit to Henry VIII of England:

    In the past the following proxies have been used:

    Further aid on finding open proxies may be seen at User:Mirv/Open proxies

    The physical location for most of the attacks seems to be Atlanta, Georgia and from northeastern Broward County, Florida, possibly Pompano Beach, Florida and/or Lighthouse Point, Florida.

    200.55.213.30 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Persistent vandal over a number of months. Has been blocked several times for between a day and a week but always comes back. Likes to vandalise the Shakira article, primarily, but also vandalises various users' talk pages and other miscellaneous articles. User has attempted a denial of service attack on Wikipedia but only once. User never performs any legitimate edits and has indicated that he or she will continue vandalising indefinitely until permanently blocked. If you see any edits from this IP address, please verify that they are indeed vandalism (they always have been so far) and revert the edits. Please consider a permanent block. --Yamla 16:53, 14 November 2005 (UTC)[reply]

    Note: IP addresses don't get blocked indefenately unless they're open proxies. 68.39.174.238 13:43, 31 December 2005 (UTC)[reply]
    According to LACNIC its registered to "Colegio Nido de Aguilas", which sound educational. 68.39.174.238 19:45, 22 January 2006 (UTC)[reply]
    I can confirm. Translates to ‘Nest of Eagles High School’. ~Chris (talk/e@) 15:29, 2 July 2006 (UTC)[reply]

    Super Nintendo vandal

    This vandal vandalizes pages by replacing the page title or keyterms with the word Super Nintendo. This vandal moves at very high speed. I only have 2 IP's for this vandal but I'm almost positive that there are more.--Ichiro (会話|+|投稿記録|メール) 04:43, 26 January 2006 (UTC)[reply]

    IPs used by the Super Nintendo vandal

    Vandal changes wikilinks in templates to external links to goatse.ca, and also likes to add non-sensical links to cat-related topics. Uses deceptive edit summaries like "rv vandalism" (while adding vandalism). Should be blocked on sight. —Quarl (talk) 2006-02-14 12:51Z

    Note that most accounts seem to involve cats somehow. 68.39.174.238 13:49, 14 February 2006 (UTC)[reply]

    72.57.152.136 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user has been adding wrong content (mistakes and I am pretty sure it aims at adding mistakes) several times in wikipedia en. Poppypetty 15:15, 7 March 2006 (UTC)[reply]

    User:Bonaparte

    Permblocked for sockpuppetry, but notorious for vandalism of Moldova-related pages. After blocking perisitently pops up via open proxies. His track record is in user:Bonaparte/sockpuppetry. mikka (t) 02:39, 18 March 2006 (UTC)[reply]

    Jimbo Wales images vandal

    Example of this Vandalism This is a vandal who blanks articles with a worded caption "Jimbo Wales Ass-rapes Young Children", and below it, repeated images of Jimbo Wales, a penis, a rectum, and two different images of young girls. I have actually happened to view the articles at the very moment that such vandalism occured, thus seriously shocking me.

    The vandal targets solely the Featured Article, in that he will always vandalize whatever is the featured article for that day. He will always use a UserName, and not an IP address to edit. He seems to know how to circumvent blocks; he will only use a given account for one such edit, then immediately log off it to avoid being Autoblocked, create a new account, and then revert the Featured Article to his vandalized version. In some cases he could go through 30+ edits of a certain featured article before S-protection is needed.

    --NicAgent 15:12, 17 March 2006 (UTC)[reply]

    66.28.32.66 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This vandal has been blocked multiple times, most recently on 20 March 2006. The vandal has two consistent patterns in edits that are clustered. (1) The vandal edits pages rapidly by highlighting the entire page text and replacing it with immature phrases, the most recent of which was simply "poop." (2) The vandal inserts derogatory phrases and sentences, as well as changing spelling of random words ("biotch" seems to be the most prevalent insertion/replacement word). The vandal operates in a rapid period, typically editing in spurts every few weeks, during which he may vandalize 20 or more pages in a matter of minutes. Multiple warnings and 24-hour blocks have been issued according to protocol. The vandal does not begin editing as soon as the block is lifted, but rather, waits a few days or even weeks before making his next attack. The vandal's response to the most recent administrator block was erasing his/her own talk page and replacing it with "UNBLOCK ME NOW MOTHER FUCKING COCK SUCKER." The page was restored, notification of blocking was promptly inserted, and locked to prevent the vandal from changing it again. This vandal demonstrates consistent patterns of abuse, does not contribute meaningful information to Wikipedia, and operates in a malicious manner, sometimes even bashing persons mentioned in articles. The IP seems to be static, and given the continued pattern of abuse over several months, this user needs to be blocked for a long-term period or perhaps permanently. Dcteas17 20:24, 20 March 2006 (UTC)[reply]

    Zephram Stark

    After being banned six months by the Arbitration Committee for POV-pushing on Terrorism and related pages, personal attacks (including a racial slur [8]), and unwillingness to cooperate with his fellow editors, he created multitudes of sockpuppets to circumvent his ban, which has been reset several times. --TML1988 21:39, 27 March 2006 (UTC)[reply]

    Images:

    Frequently, he will upload an image. It can either be a strange one that he created, or just a random one that he swiped from the web. He also creates sockpuppets and uploads images to Wikipedia Commons. (See [9], [10], [11], [12]). They're all Zephram sockpuppets, many of the same images have been deleted from Wikipedia. If anyone uses any of these images here, he is most likely a sockpuppet. For example War on Sockpuppetism. --JW1805 (Talk) 17:02, 29 March 2006 (UTC)[reply]

    Currently identified sockpuppets:

    Articles to watch (and associated talk pages):

    United States dollar/$3 bill vandal

    This user continually vandalizes the United States dollar page with $3 bill nonsense. All IP addresses are from/registered in Atlanta, Georgia USA.

    --Kurt 00:49, 28 April 2006 (UTC)[reply]

    4.244.*.*

    Periodically turns up and removes images from a varying number of comics-related articles under a different, related, IP address (the list above may not be exhaustive - I only scanned the 4.244.60.* range). - SoM 00:34, 8 May 2006 (UTC)[reply]

    Another, still within the 4.244.*.* range, but outside the 4.244.60.* range:

    - SoM 02:23, 8 May 2006 (UTC)[reply]

    Level3 Communications IP, maybe related to earthlink/Peoplepc. My 4.x.x.x ip on Peoplepc dialup resolves to level3 via ARIN. ~Chris (talk/e@) 15:38, 2 July 2006 (UTC)[reply]

    Krabs502

    Continued vandalism of this kind from Krabs and associated socks[13], most recently User:Krabs600. Kaisershatner 15:47, 19 May 2006 (UTC)[reply]
    See [14], and [15] Kaisershatner 15:48, 19 May 2006 (UTC)[reply]
    Why isn't this guy blocked at all? Any real edit he makes is drowned by the dozens of vandalistic ones me makes. - Hahnchen 18:15, 28 May 2006 (UTC)[reply]

    150.101.79.82

    150.101.79.82 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has been blocked repeatedly since October 27, 2005 and returns to add more puerile profanities, most recently on a page in development under my user name. I did not find any substantive contributions from him/her. --Flex 13:45, 30 May 2006 (UTC)[reply]

    Erlopez2 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) blocked

    I have blocked this [ab]user for 6 months for causing repeated disruption (blanking, uncivil comments, suspected sockpuppetry) in Anti-semitism [16] [17] [18] [19] [20] and Anti-Christian prejudice [21] and for ad hom attack [22]. ←Humus sapiens ну? 08:17, 12 June 2006 (UTC)[reply]


    User:Hryun (D.A. Arbatsky vandal)

    User has declared a "war" against Wikipedia because it did not allow the article on a purported scientific theory of Dmitri Arbatsky (who is probably the vandal) to survive. As such has created many single-edit sockpuppets and has made various edits to quantum physics articles, many of them intentional vandalism (inserting incorrect statements, moving or deleting sections) or variations of self-promotion spam. See Category:Suspected Wikipedia sockpuppets of Hryun for a list of them. They all have very similarly uninventive names and usually link to a diff of his declared "war" on Wikipedia, lord knows why. It would be great if we could assess whether or not the ISP, who is obviously assigning dynamic IPs, is worth contacting or just worth blocking alltogether. --Fastfission 00:08, 17 June 2006 (UTC)[reply]

    206.170.104.*

    Keeps vandalising Steven Spielberg, Amblin Entertainment, E.T. the Extra-Terrestrial, the user pages of editors who revert his vandalism, and removes warnings from own talk pages. All the IPs have been blocked before but vandalism continues... --Fritz Saalfeld (Talk) 20:03, 17 June 2006 (UTC)[reply]

    Unemployed, living in basement, aka Brando(n)03, aka Louisville Vandal

    Unemployed,_living_in_basement (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) is a troll account which was indefinely blocked several weeks ago for repeated vandalism. I was involved in combatting this on RC patrol, including posting warning messages to his talk page, reporting him to WP:AIV, and nominating a garbage page he made for AfD. Since this occurred, he (or some other entity that I believe to be him) has started a pattern of harassment, consisting of:

    Could an admin with checkuser priveleges crosscheck the IP of unemployed, and the various imposter accounts, to see if they patch the IP ranges?

    --EngineerScotty 05:43, 18 June 2006 (UTC)[reply]

    List of IP addresses used by this user. The user has a dymamic IP (a fact which he has boasted about at least twice)

    Created three additional imposters of User:EngineerScotty on June 21, 2006; though all of them were blocked almost immediately. --EngineerScotty 21:26, 21 June 2006 (UTC)[reply]

    June 25

    Perhaps suffering from delusions of grandeur, impersonated the North Carolina Vandal (creating an account with that name, immediately blocked). --EngineerScotty 05:41, 26 June 2006 (UTC)[reply]

    June 29

    The following edit [24] on my talk page, suggests that Unemployed may be the same individual as Brando03 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log). Looking at the page history of BabuBhatt (talk · contribs · logs) shows abusive edits from unemployed's IP range, as well as from Brando03. Could checkuser be run on Brando03 to see what IPs he posted from? --EngineerScotty 05:30, 30 June 2006 (UTC)[reply]

    July 14

    July15

    Created account Brandon03 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log), which was used for vandalism against usual targets. Wrote a biography on his user page (unknown if any is true, other than vandal coming from Louisville area), can be viewed at [25] (the page has since been replaced with a {{indefblock}} message). Rails against "wiki deletionists" and such; though since the vandalism spree began, hasn't been involved in any genuine content disputes; all edits have either been noncontroversial additions or blatant vandalism. --EngineerScotty 05:14, 16 July 2006 (UTC)[reply]

    July 19

    Posting from 65.138.69.252 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) revealed personal info on two Wikipedia editors (no idea if the info is correct). I won't link to the posts here (they probably should be deleted anyway), was blocked for this. --EngineerScotty 05:13, 20 July 2006 (UTC)[reply]

    July 21

    Homophobic personal attacks against openly gay user Chris24 (talk · contribs) [26] posted to my talk page; from 4.224.51.242 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log). A different service provider, but also in Louisville; refers to a content dispute (but I didn't notice any contentious edits from Chris24 upon checking his contribs). --EngineerScotty 17:24, 21 July 2006 (UTC)[reply]

    Regularly attacks me with reference to another user--Kungfu Adam (talk) 17:43, 21 July 2006 (UTC)[reply]

    I have been libeled and slandered by this user and have reported this information to Jeffrey Brandon Morris' ISP. 4.224.114.129 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 4.224.114.132 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 4.225.123.7 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) 4.224.51.242 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) --Chris24 04:39, 25 July 2006 (UTC)[reply]

    and again... 4.225.115.45 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) --Chris24 04:47, 25 July 2006 (UTC)[reply]

    July 27

    Has posted to several users talk pages [27] [28] stating his intent to no longer vandalize Wikipedia. --EngineerScotty 23:13, 27 July 2006 (UTC)[reply]

    The saying "Actions speak louder than words" would seem to apply in this instance.--Chris24 05:03, 28 July 2006 (UTC)[reply]

    User:Paul adams

    Paul adams (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) has been removing material from Mazher Mahmood (and details regarding him on two other pages, initially) since the 2nd of April this year. His constant attempts to whitewash details regarding Mahmood's failed court action against George Galloway (and, initially, pictures released by Galloway after the injunction was lifted) led to the page being fully protected from the 3rd of May to the 7th of June, since when he has resumed his attempts. He has no other edits of any sort - the account exists solely to remove details regarding Mahmood. - SoM 07:24, 19 June 2006 (UTC)[reply]

    Fursecution Vandal

    A user has been repeatedly attacking articles related to Furry fandom, Therianthropy and Otherkin. The vandalism often involves insults aimed at these various subsultures and/or bad-faith merge requests.

    User 67.185.57.48

    This user has been serially vandalising articles on occult subjects, notably Dion Fortune, Adolph Hitler and Madame Blavatsky. They serially edit or remove other users posts from talk pages and never sign their posts. They have been blocked at least six times now. They ignored mediation see Wikipedia:Mediation_Cabal/Cases/2006-06-21_Dion_Fortune which page also contains a partial list of block or warning messages that they have removed from their talk page. They also serially abuse and threaten other users for reverting their vandalism. I think this is probably a single user due to the pattern of vandalism and the fact that this IP resolves to c-67-185-57-48.hsd1.wa.comcast.net which looks like a single cable customer. Morgan Leigh 03:27, 1 July 2006 (UTC)[reply]

    Armking

    This user blanks a page and redirects it to another page, then blanks that page and redirects it back to the previous page. His original account was Armking (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log), and he has since started creating socks. Most of his accounts include the word "arm" at the beginning of their names (e.g. Armsanta; Armsworth).--Conrad Devonshire Talk 05:37, 1 July 2006 (UTC) (update) armking has started using backwards names such as user:!!!gnikmrA (armking backwards) so be on the look out aswell for names ending in "mra." -Micheal Mathews 207.69.137.6 06:46, 10 July 2006 (UTC)[reply]

    Asian fetish vandal

    User logs in from a randomized German IP 80.138.x.x to post racist, anti-semitic, and sexist material under the rubric of "anthropology." Uses white supremecist sources. Most notorious for persistent vandalism to Asian fetish. Also attacks Beethoven, Racial fetishism, Anti-relativity, Mongoloid, Special relativity, Anthropology, and possibly other pages. Was a major vandal on Virago until the page was deleted and protected. Also insults other editors based on assumptions about their gender, religion, or ethnic background. Banning is impractical due to the range of IP addresses used. January - March 2006 addresses are listed below. Durova 04:50, 25 March 2006 (UTC)[reply] 

    80.138.128.87 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.130.146 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.134.141 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.141.154 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.142.102 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.148.67 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.152.165 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.152.199 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.158.108 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.166.174 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.39 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.54 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.55 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.168.9 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.172.139 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.172.31 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.174.234 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.175.232 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.177.147 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.184.169 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.185.229 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.188.125 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.188.86 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.189.79 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.190.240 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.190.246 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.190.9 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.138 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.193 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.193 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.191.208 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.174 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.181 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.188 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.188 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.206 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.251 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.192.251 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.152 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.187 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.56 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.77 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.193.176 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
80.138.194.83 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    "The Blasphemy Guy"

    This peson repeatedly vandalizes the dinosaur article by blanking it and replacing the article with a fundamentalist Christian creed. An example of this can be seen here. They also make personal attacks against people to try and revert his attacks, for example.

    Some IPs used:

    He may also hit up on articles relating to Islam.

    The Airport Vandal

    The Airport Vandal is identified by its creation of new pages with a misplaced page from a major airport. Airports have included Stapleton International Airport, Denver International Airport, and Phoenix Sky Harbor International Airport. The difficulty caused is that a new page is created with an inappropriate article, which eventually gets speedied, and the record of contributions from the editing sock is eliminated. In addition to vandalizing new pages, there is an occasional replacement of a previous page with an airport's page, for example Sunset Strip replaced with Sky Harbor.[29]This type of vandalism is reverted easily enough and leaves a trace in the vandals contributions. The accounts are typically named using a human name and a type animal, often with alliteration, as evinced by the list of accounts, used by the Airport Vandal, below.

    Please be on the look-out. Any information regarding this, whether an originating account, diff.s, other articles frequented, or aditional socks would be greatly appreciated. DVD+ R/W 04:21, 18 July 2006 (UTC)[reply]

    Per User talk:Phoenix Int'l, he says he was previously Philp the Moose (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and Denver Int'l (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log). Looks like Philp's vandalism was more traditional, putting obscenities and nonsense everywhere. -- Fan-1967 04:31, 18 July 2006 (UTC)[reply]
    Philp did substitute one article for an obsessed other, namely Exxon Mobil Corporation. This seems to me like the airports that substitute seemingly unrelated articles. I wish that speedying left more of a trace, that allowed some viewing of speedied contribs, like how deleted edits are viewable by administrators. Philp may have done new articles, but they were speedied,and are now lost in making the case. No airports with Philp though so it sorta rules him out as the puppetmaster of the Airport Vandal, but checkuser may show the same IP. May be worth checking if this type of vandalism persists. DVD+ R/W 04:50, 18 July 2006 (UTC)[reply]
    There are a lot more names listed at: Category:Suspected Wikipedia sockpuppets of Philp the Moose). I have tagged all the user names above to add them to the category. Fan-1967 14:36, 18 July 2006 (UTC)[reply]

    The Middle East Conflict Man

    The Middle East Conflict Man (talk · contribs · deleted contribs · logs · filter log · block user · block log), indefinitely banned from three Wikipedias (English and both Norwegians), uses numerous sockpuppets to make a highly POV edit to Socialism, as well as making inflammatory/vandalistic edits to various other socialism-related articles. As of late July 2006 he has 50 suspected sockpuppets. Blocks on his IP are apparently ineffective.

    Banned User:Irate

    Banned user persistently returning using revolving IPs in the 84.9.x.x and 87.75.x.x range. This users always uses the edit summary "Revert vandalism by County Watch vandal".

    Emico

    Modus operandi

    The following is a list of editing patterns which are common with Emico and his sockpuppets:

    • Posts only at Iglesia ni Cristo and its related articles.
    • Personal attacks or negative opinions aimed the contributers who are against him (mostly the ones who have participated in his ArbCom hearing). This includes, but is not limited to, comments about contributers' past policy violations or/and lack of knowlege of the subject matter.
    • New usernames where the majority of contributions are of the above point.
    • Posts coming from proxy addresses. A checkuser result has proven Emico posts from different IPs from all over the world.
    • Article edits which are nearly identical to Emico's initial edit pattern, which is explained at Wikipedia:Requests for comment/Emico.
    • Insult usernames which parodies current contributers' screen names (eg User:Starbucks, User:LenlenBunting)
    • Massive ommisions of sourced content which are critical of the Church.

    Action

    This message was posted by Arbitration Comittee member User:Fred Bauder to Talk:Iglesia ni Cristo on Sept. 2, 2005 [30]

    Any edit Emico makes to this article may be removed without comment, any sockpuppet or anonymous ip he uses may be blocked, if practical. He may be blocked under his own account for up to one week. If you make a note of his violation of his editing ban at Wikipedia:Requests for arbitration/Emico the ban on editing certain articles will be extended from that date. It is not necessary that you know beyond a shadow of a doubt that an editor is Emico, it is enough that he has the same point of view and style of editing.

    Sockpuppets

    Aside from a wide array of proxy IPs he is listed at

    Johnny Knight

    Has been vandalising and creating a lot of sockpuppets recently, some of which have a Neo-Nazi theme to their names and/or use a swastika-like symbol in their names. Not sure if he is connected to Johnny the Vandal or not.--The Count of Monte Cristo Parley 04:29, 7 August 2006 (UTC)[reply]

    Johnny Knight is NOT connected to Johnny the Vandal in ANY way whatsoever! He is mostly a TROLL, not a vandal. 128.59.112.88 17:06, 8 August 2006 (UTC)[reply]

    Johnny the Vandal is also actually more of a troll than a vandal.--The Count of Monte Cristo Parley 17:49, 8 August 2006 (UTC)[reply]

    I'm seriously NOT JTV!!! Did JTV create 100 accounts per day and attack those particular admins or use swastikas? I don't think so! And I quit doing that shit, I'm infamous enough as it is! 205.188.116.137 21:23, 8 August 2006 (UTC)[reply]

    I also NEVER tried to pass myself off as any admin, only making obscene comments at Jaranda, Xaosflux, etc. 205.188.116.137 01:26, 9 August 2006 (UTC)[reply]

    User:Outoftuneviolin

    This user used to be a vandal with no real modus operandi. Since his third sockpuppet, [User:Niloivenutfotuo]], he has been engaging in the following activities:

    • Vandalizes the articles Violin and Evolution. Also attacks Viola, Evolutionism, Big Bang, and articles about other instruments. (one or more of the following to an article)
      • Replaces articles with "Outoftuneviolin was here" [31] or "your {name of instrument} is outoftune!" [32]
      • Makes attacks against the theory of evolution and "evolutionists". [33]
      • May make attacks against those who reverts his vandalism, labeling them as "evolutionists." [34]
      • Makes attacks against User:Antandrus, calling him a "trollish blasphemous evolutionist". [35]

    His sockpuppets usually have "Outoftune" somewhere in their names. Any account which follows the Outoftuneviolin's nomenclature or engages with vandalism as described above should be blocked indefinitely and their user pages tagged with {{OoTV}}.

    Shared IPs

    This section is for IPs that are provably or strongly suspected to be shared amongst several people at a public/semipublic place, NOT for any IP vandal.

    Note: Before listing IPs here, check {{AOL ranges}} to see if the vandal is an AOL address. If it is, it should not be listed unless there is strong reason to believe that the IP is not dynamic or is restricted to a small number of accounts, one of which is a severe vandal.


    IP vandalism from 203.36.44.11 to 203.36.44.18 inclusive

    Found two more IP's, updated information to match - Bootstoots 00:01, 6 August 2006 (UTC)[reply]
    An indefinite block of all these IPs, anon only, account creation blocked, would solve. I think we should treat school IPs like open proxies. ~ c. tales *talk* 02:29, 8 August 2006 (UTC)[reply]

    Repetitive Vandalism

    152.163.100.199 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has been making excessive edits and posting nonsense that inhibits several Wikipedia articles. This user's talk page and contributions reveal an extensive history of vandalism on multiple pages, issued warnings by different editors, and long list of blocks. The user has recent act of vandalism on a televsion show page about the VR Troopers, more specitifcally the article entitled List_of_Mutants_and_Cyborgs_in_the_Virtual_Dungeon, however this is not first time they vandalized the said article, as it has been going on since June 25 2006. Many of thier edits have been reverted to restore the damaged pages, but the user continues to make the absurd changes. In addition, there are other IP adresses that have also commmited the exact same vandalism to the above page. They are: 209.158.23.64, 71.240.204.56, 205.188.116.199. I cannot prove that all these users are the same entity, or if they are copycats/mimics. The grafitti has gone on long enough and I wish to do my part in keeping Wikipedia professional, informative, and fun as it was meant to be.Pitstain 02:50, 1 August 2006 (UTC)[reply]

    Suki

    64.110.251.69 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log): see Talk:Suki. Long-term hoax edits every month or so, notably to Suki and New World Religion, asserting the existence of a major world religion called "SUKI(tm)", despite repeated consensus to delete due to absence of reliable sources. Some examples: [36], [37].

    The IP above attempted to remove this section [38] and is noted for ranting wildly and making borderline personal attacks on people he runs in to.

    Persistent sneaky vandalism from AOL IP range 207.200.116.0/24

    There is persistent sneaky small-edit vandalism coming from multiple addresses in the AOL/Netscape address range 207.200.116.0/24 [39] (which has earlier been the source of a number of other types of vandalism) -- it has been repeatedly tempblocked so many times that a longer-term block (1 day, perhaps?) might be in order. -- The Anome 10:36, 8 July 2006 (UTC)[reply]

    AOL Vandal 195.93.21.136 and 195.93.21.100.

    195.93.21.136 and 195.93.21.100 are believed to be the same vandal. Constantly vandalizes and causes trouble in the Paris Hilton article and talk-page. Claims he is not the vandal in talk-page, but refuses to setup account, and has been blocked repeatedly for vandalising Paris Hilton and other articles multiple times. As soon as block is lifted, starts causing trouble again. In the same places. Someone please permanantly ban this person. Celebrity-Benji 15:37, 5 July 2006 (UTC)[reply]

    AOL DoS Vandal from 207.200.116.*

    For the last few days, Wikipedia has come under attack from a person (or bot) who seems to be intent on forcing a complete block on his/her entire AOL IP range. This vandal's MO has varied from inserting images onto random articles [40], to inserting random gibberish [41], to inserting malformatted equations. All of these attacks have occured from IPs in the 207.200.116.*** range and have occured too close to one another to be a conincidence. When this vandal is active, we recieve an attack every 30 seconds or so of one of the varients describved above. More information on this vandal has been documented on User:Mboverload/vandalattack. Currently, the most we can do is try to revert this vandal's edits as they occur. Range blocks have mostly been limited to 15 minutes or less to limit collateral damage. This vandal has also been discussed on the Administrator's Noticeboard at [42] and [43]. I am moving this discussion here since this vandal's behavior seems to indiciate that he/she has no intention of stopping anytime soon. -Loren 03:59, 18 June 2006 (UTC)[reply]

    Anyone have a long-term idea for dealing with this? Its happened the 18th, 19th, and 20th. On more ranges than just the one mentioned above. I can't stay up late every night clicking contrib over and over and looking through all 256 IP's for minute looking things like 'sn' or 'ts' or 'the ' added to articles at random. They're vandalizing at least '100 articles a night. As of this writing, there's more Image:Ceiling cat 00.jpg from 64.12.116.* now. Kevin_b_er 06:08, 19 June 2006 (UTC)[reply]
    152.163.101.xxx also has another spattering of the AOL vandal changing IPs with every few randomized changes. Now back to ceiling cat page additions, sometimes with ts thrown in for good measure after the image inclusion. Kevin_b_er 06:53, 19 June 2006 (UTC)[reply]
    And 152.163.100.xxx adding celing cat. He seems to be now rapidly changing ranges rather staying within one. Kevin_b_er 06:53, 19 June 2006 (UTC)[reply]

    Active again on 207.200.116.*, inserting Image:Sarahvulva.jpg. -Loren 03:32, 26 June 2006 (UTC)[reply]

    203.10.59.63 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This IP address has been vandalizing and linkspamming consistently for a month and a half at least, has already been given four "final" block warnings, was recently banned for 48 hours, and has been well established as a sock puppet of a user who has already been "indefinitely" blocked at least four times (see Category:Wikipedia:Sock_puppets_of_Universe_Daily and Wikipedia:Requests_for_investigation/Archives/2006/06#Registered_users) including for obscenities, deceptive edit summaries, and flagrantly deceptive vandalism directed at other editors who undo his vandalism. This user has established a consistent pattern of circumventing blocks and repeating the same linkspam in the same article literally 13 times [44] [45] [46] [47] [48] [49] [50] [51] [52] [53] [54] [55] [56], in one example, over a period of almost a month. (The URL is different for one out of those 13 times, but redirects to the same site; some of the edits are under this IP address, while others were done under some of the now indefinitely blocked usernames.)

    With this record, I think this IP address clearly meets the criteria at the top of this page for persistent vandalism to the neglect of indefinite blocks of sock puppets. I don't know whether this IP address is a personal or shared computer, but its edits have mostly or all fallen into a persistent pattern of vandalism at least for the past few months. Petros471 put the block for 48 hours, with the stated intention of reviewing this IP address's activity afterward before evaluating the need for a longer block, which is appropriate given the uncertainty whether this IP address serves multiple users. However, I think an eye should be kept on this IP address's contributions, and evidence for a continuation of the previous pattern of vandalism after the current block will justify a long-term block. This IP address has been blocked 16 times now, many of them noted for cause of vandalism, which should be kept in mind when evaluating future action. - Reaverdrop (talk/nl/w:s) 11:52, 17 June 2006 (UTC)[reply]

    This is certainly User:Universe Today, User:UniverseToday, User:Universedaily, User:Bad Astronomer, and others. Tom Harrison Talk 03:08, 31 July 2006 (UTC)[reply]

    202.68.88.74

    69.117.18.239

    Has not ceased to vandalize the Kathleen Rice article. Paul 16:48, 10 June 2006 (UTC)[reply]

    208.39.164.129

    Registered to Souderton School District, however, from the contributions it is clear that most (all?) edits are vandalism.Daleh 16:10, 6 June 2006 (UTC)[reply]

    65.5.36.35/Mater Academy High School

    User talk:63.164.145.198

    Kinko's shared machine. Someone goes in every few days to use it to spread page-rank spam. SchmuckyTheCat 05:07, 21 April 2006 (UTC)[reply]


    216.56.22.34/Oshkosh Area School District

    209.146.29.253

    Missouri Research and Education Network (MOREnet)


    213.249.155.237


    This IP address is indeed part of the East Midlands Broadband Consortium [57], its a schools-only ISP in the UK.
    Each institution connected to EMBC gets cycled from one server to the next every day or so, although it can be as short as every couple of hours. Those two marked with * have been hijacked by Squidward, I keep meaning to inform EMBC of this so they can close the security hole, but I've got a memory like a sieve. A couple of them have been given a long block, the blocking admin asking for a school representative to contact them, it would be better to contact EMBC, as these serve probably hundreds of schools, altogether hundreds of thousands of pupils. I believe a good email to use is embc AT embc.org.uk. CaptainVindaloo 17:42, 6 April 2006 (UTC)[reply]

    Pinellas County Schools

    [58] Shows up about once a week, vandalizes a few pages and then goes away. SchmuckyTheCat 17:20, 12 May 2005 (UTC)[reply]

    All registered to Pinellas County Schools, one of the largest school systems in the country. Keep blocks in the 30-ish minute range to cut down on collateral damage — I sometimes edit from these IPs and get blocked along with everyone else. —BorgHunter ubx (talk) 03:06, 16 March 2006 (UTC)[reply]

    207.235.223.32 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user IP has been blocked quite a few times. This IP deserves another block. Evan Robidoux 20:46, 7 February 2006 (UTC)[reply]

    Whois suggests its with some school or other educational org, so its likely shared D:... 68.39.174.238 22:50, 8 February 2006 (UTC)[reply]

    24.168.141.213 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    24.168.141.213 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has been inserting the same unsubstantiated allegations since January 25th in the Scientology and Free_Zone_(Scientology) articles. Reverted by many different users. Seven times in the last two days, five times today alone (at this point), always with the same text, same typos, and never with a single explanation. Raymond Hill 21:56, 11 February 2006 (UTC)[reply]

    Sports television vandal

    Keeps vandalising Category:Sports television in the United States articles. Blocked several times but keeps on adding the nonsense after the blocks expire. Zzyzx11 (Talk) 19:00, 25 February 2006 (UTC)[reply]

    4.18.162.20 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Just look at his history, there just nothing constructive but vandalism in it. IOOI 18:03, 18 March 2006 (UTC)[reply]

    167.206.128.202

    167.206.128.202 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) - Registered to Jericho School District. Has been blanking articles and adding nonsense for months; virtually no useful contributions. -- ElTchanggo 01:01, 29 March 2006 (UTC)[reply]

    203.19.141.50 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Belongs to Sacred Heart College Senior in Australia. Has really only contributed vandalism over the past month, and has been blocked four times so far. -- Mithent 03:59, 4 April 2006 (UTC)[reply]

    204.76.0.33 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Upon traceback is revealed to be registered to "St. Louis Public Schools". Numerous vandalisms and warnings (Feb 2005 - current), and some not stated on the talk page such as the MacGyver vandalism which was reverted without cautionary measures.

    The administrator for this address is "Thomas Randolph" ([email protected]). The phone number is +1.3143452616 (whatever that means - not American, don't know.)

    And if it helps, the school's postal address:

    St. Louis Public Schools, Board of Education, 801 North 11th Street, St. Louis, MO, 63101, US

    --Theeph 01:36, 19 May 2006 (UTC)[reply]

    That's an American phone number 1 (314) 345-2616.
    Atlant 20:27, 19 May 2006 (UTC)[reply]
    Really? Cool. They're different here.
    --Theeph 11:00, 22 May 2006 (UTC)[reply]

    207.63.113.10 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    It appears that this IP address belongs to a school using the Illinois Century Network, which "is a telecommunications backbone providing high speed access to data, video, and audio communication in schools and libraries, at colleges and universities, to public libraries and museums, and for local government and state agencies.[59] Their abuse email address is [email protected] but I don't know if anyone has tried that route up to this point (not cited on the user talk page).

    This IP has been consistantly vandalizing over the last 4 months (see contributions), and sporadically doing the same before that. Many warnings and at least two temporary blocks have been done, with no change in behavior (see user talk). Perhaps it's time for a more long term block. -- Argon233 T C @   05:53, 27 April 2006 (UTC)[reply]

    131.109.123.253

    131.109.123.253 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) has consistently vandalized multiple pages over the past 6 months. Has been given 11 "last warnings" since then but continues to vandalize. The latest vandalism was today, occurring 8 times to the System of a Down article. I suggest permanent ban due to consistent disregard to our warnings. --Noetic Sage 19:11, 19 May 2006 (UTC)[reply]

    A number of vandalism edits have been made by this IP since the last noted vandalism. More "last warnings" have been sent but no repercussions have been taken. Can we please permanently ban this user? -- Noetic Sage 02:52, 24 May 2006 (UTC)[reply]

    More Vandalism in the past few days. The user has not made a single beneficial edit to Wikipedia. What is the process for permanent banning? This is getting frustrating and making more work for the rest of our busy editors and administrators. -- Noetic Sage 06:32, 27 May 2006 (UTC)[reply]

    203.208.92.82 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    Has been almost all (or all) vandalism from the start, and has numerous warnings to stop. Zepheus 17:31, 24 May 2006 (UTC)[reply]


    193.84.191.3 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user IP is assigned to Wigan and Leigh College, in Leigh, Lancashire, United Kingdom Unfortunately one or more students appear to abuse the privilage of access to Wikipedia I have reverted all vandalism I can find - and this has remained undetected sometimes since about March of 2005.

    Other / Misc.

    64.88.21.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    • From viewing about a dozen "contributions" of this person's, they all seem to be deleting important information from articles (such as replacing entire paragraphs with gibberish letters) or vandalizing articles by changing words (such as "Soul Edge" to "Scrappy Doo" and "Umbra" to "Pumba"). Apparently s/he has been warned and blocked in the past; "his" edit history shows that after returning yesterday from a one month block, he immediately vandalized another ~20 articles. Please consider a long-term block. Blue Crest 17:20, 5 May 2006 (UTC)[reply]

    204.171.48.7 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    193.112.136.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    This user has consistenly used fairly juvenile vandalism ("a'ight guys wassup!", "poopy"), often in racist ways ("paki", "why are people tight on jew's there safe", "Japan is where mario lives") (his targets include "List of ethnic slurs", "Judaism", "Japan", "invasion", "Coal", and "Asian"), not to mention in ways that are severely disruptive/destructive, causing other users to have to do many reverts. This has spanned many months, with many other editors complaining (as they had to do reverts). -- Adam Mathias 17:37, 20 January 2006 (UTC)[reply]

    204.100.220.2 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

    User 204.100.220.2 has repeatedly vandalized pages. Hit A Clockwork Orange today. 162.111.235.16 17:21, 23 March 2006 (UTC)[reply]

    RuneScape Vandalism

    Whilst RuneScape, Jagex and related articles attract a lot of petty vandalism, most vandals hit the article only once or twice. However, one particular individual is a quite determined long time vandal, hitting the articles constantly when his or her IP is not blocked, and the articles are not protected, with homophobic insults [60]. When the articles are protected, the Talk pages are attacked instead, with editors being called 'newbs' and other insults: [61], [62], [63], [64]. This individual seems to edit from two IP addresses:

    These IPs are probably a home IP and a school/work IP, as they never edit at the same time. WHOIS places both of them in Calgary. The first is registered to Big Pipe Inc, and Lakehead Schools, the second to Shaw Communications Inc. CaptainVindaloo t c e 19:21, 13 June 2006 (UTC)[reply]

    Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Long-term_abuse&oldid=68587877"