Misplaced Pages

:Abuse response - Misplaced Pages

Article snapshot taken from[REDACTED] with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.

This is an old revision of this page, as edited by Woggly (talk | contribs) at 02:17, 4 August 2006 (→University of Auckland vandal ("Loserdick")). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Revision as of 02:17, 4 August 2006 by Woggly (talk | contribs) (→University of Auckland vandal ("Loserdick"))(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)
This page has an administrative backlog that requires the attention of willing administrators.
Please replace this notice with {{no admin backlog}} when the backlog is cleared.
Noticeboards
Misplaced Pages's centralized discussion, request, and help venues. For a listing of ongoing discussions and current requests, see the dashboard. For a related set of forums which do not function as noticeboards see formal review processes.
General
Articles,
content
Page handling
User conduct
Other
Category:Misplaced Pages noticeboards
    Shortcut
    • ]

    Misplaced Pages:Abuse reports is a centralized forum for the reporting and investigation of abuse complaints, related to IP-specific vandalism, to be reported to service providers, particularly schools and universities. Please be aware that this is not an official contact system put in place by the Wikimedia Foundation, but a volunteer-run process to counter vandalism.

    Please note: You cannot report user accounts here (They'll be removed on sight)! Because the purpose of this is to report violators to their ISPs, usernames cannot be traced back to their providers and so will not work.

    DO NOT LIST IPS WITHOUT A SIGNIFICANT HISTORY OF VANDALISM! We will not go through with these requests. Make sure that the IP in question has been blocked at least five times in recent history, or the request will be rejected. Please do not clog up this board with such requests, the report will not go through.

    Process

    Please read the guide to abuse reports, a detailed how-to on using this page.

    AR cases are a three step process:

    • Alert: An attentive user notices a trend of vandalism from a given IP, runs a whois, determines that the IP is registered to a school, a government agency, or other body that is likely to respond to an abuse report, and reports the IP here.
    • Under investigation: Once made, an alert is picked up by an investigator, who creates a subpage, and begins an investigation. The investigator uses the information provided by the user who made the alert to determine if there is similar vandalism from other IP addresses registered to the same provider. The investigator then compiles a report.
    • In Contact: Once a case has been investigated and a report prepared, the case is passed to a contactor. The contactor then attempts to contact the provider either by email or by telephone, with telephone being the preferred method (as it produces greater results on average). The contactor explains the situation to the provider, and points them to the AR report. The contact remains in contact with the provider, most likely by email, to answer any further questions or provide other information required by the provider.

    Once the contactor has made contact with the provider, the case remains open as long as contact continues. If the provider successfully resolves the complaint, then the contactor closes the case, with a summary of the result. If the provider is unwilling to cooperate, the contactor notes the case, and closes it with a summary.

    Volunteer groups

    There are three classifications of AR volunteers. Users may volunteer to undertake as many roles as they like; the classification system is not intended to make users feel they cannot or should not "see a case all the way through." Rather, the intent is to allow those who are interested in one area (such as investigation) but not another (such as contacting), or who do not have the resources to serve as a contact, to participate. The classifications are:

    • Attentive user: Everyone is an attentive user; anyone can notice a pattern and raise an alert. Some users may choose to be "professional" attentive users, specifically looking for potential cases.
    • Investigators: Investigators are tasked with preparing a report on the case. They are expected to look for trends such as time of day/week/month, movement from one IP block to another, etc, and to prepare a report that can be used by the provider to identify the responsible party. The most important task in investigation is to determine if there are other IP addresses assigned to the same provider that are engaging in similar behavior, or if there are other addresses making productive contributions. This is to ensure that the provider has all the relevant information, and so legitimate contributors are not affected.
    • Contactors: Contactors are tasked with actually making contact with the provider. Some contactors may choose to do so via email, although telephone is the preferred method, as a telephone call generally receives higher priority. Making telephone calls requires the contactor to have resources to expend in this manner; not everyone can be a contact, and no user should feel embarrassed or apologetic that they are unable to perform the contactor role. Users who have time to perform alerting and investigating tasks are needed just as much as contactors!

    Current investigators

    1. Essjay (talk · contribs) (admin: commons, en, meta, wikiquote; CheckUser) (Coordinating/supporting where I'm needed, but not doing full-time investigating or contacting right now.)
    2. Snoutwood (talk · contribs) (admin: en) (Same as Essjay.)
    3. Shanel (talk · contribs) (admin: en)
    4. lightdarkness (talk · contribs) (admin: en, wikispecies)
    5. Werdna648 (talk · contribs)
    6. Drini (talk · contribs) (admin: en)
    7. Petros471 (talk · contribs) (admin: en)
    8. Kilo-Lima (talk · contribs) (admin: en; Quite busy right now with other articles, but will try and help out Iolakana| 14:11, 2 July 2006 (UTC))
    9. User-multi error: "Can't sleep, clown will eat me" is not a valid project or language code (help). (admin: en)
    10. Sceptre (talk · contribs) (admin: en)
    11. Jaranda (talk · contribs)
    12. Geo.plrd (talk · contribs)
    13. KleenupKrew (talk · contribs)
    14. User-multi error: "Knowing Is Half The Battle" is not a valid project or language code (help).
    15. Voice of All (talk · contribs) (admin: en) (I can easily pull logged-out IP range contribs; I'll mainly just work with range issues.)

    Current contactors

    1. Essjay (talk · contribs) (admin: commons, en, meta, wikiquote; CheckUser) Contact: phone (U.S.), e-mail (Coordinating/supporting where I'm needed, but not doing full-time investigating or contacting right now.)
    2. Snoutwood (talk · contribs) (admin: en) Contact: e-mail (Same as Essjay.)
    3. Deskana (talk · contribs) (admin: en) Contact: phone (UK), e-mail
    4. Petros471 (talk · contribs) (admin: en) Contact: e-mail, possibly phone (UK)
    5. Sunholm (talk · contribs) Contact: phone (UK), e-mail
    6. User-multi error: "Can't sleep, clown will eat me" is not a valid project or language code (help). (admin: en) Contact: phone (US-all), e-mail
    7. User-multi error: "Knowing Is Half The Battle" is not a valid project or language code (help). Contact: phone (US), e-mail, US postal service

    New Alerts

    Please list your alert immediately below this message, in a new section using === ===. Please use the {{vandal}} template for all IP addresses, provide a link to the whois, list the name of the provider (from the whois report), and briefly summarize the situation. Please do not list IPs that have only made a few edits (unless they are part of a bigger case), as only severe, continuing vandalism should be listed here.

    University of Auckland vandal ("Loserdick")

    Petty vandalism of the most stupid variety. Repeated blocks and warnings seem to make this vandal happy. He is now playing tag with admins to see who blocks him, replacing warnings with texts like "Hahahahaha!" and "I'll just keep creating new accounts!". I think it's time to bring this to the attention of the University. The talkpage for Loserdick (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) will give you a good idea of what this person is all about, and why all the other IPs are clearly connected. Seems to also be using computers on a Telecom New Zealand server.

    IPs used so far: Registered to Auckland University:

    and possibly:

    Telecom New-Zealand:

    and possibly:

    --woggly 07:30, 3 August 2006 (UTC)

    Roitr

    A permabanned User:Roitr (see Misplaced Pages:Long term abuse/Roitr, Category:Suspected Misplaced Pages sockpuppets of Roitr and Category:Misplaced Pages sockpuppets of Roitr) is a long time[REDACTED] abuser who attacks a few articles using a great number of IPs and throw away accounts. All his IP numbers originate from Bezeq, Israel. The damage is moderate as he attacks only a few articles but blocking a few sock puppets a day is taxing. Recently he threatened to start more damaging campaign against Wiki (see ) Translation from Russian: Piece of an idiot: Stop adding to my accounts all these strange people. If you are not a compete imbecile you would realize that it is impossible to stop me! I have millions of IPs and you cannot block them for one hundred years! So leave me alone and stop crying to administrators! Because of your obtuse actions innocent editors are hurt! If you would not stop interfering with my articles I would start to randomly blank all the articles you ever edited.88.152.239.25 10:47, 30 July 2006 (UTC) Yes, I started making threats and your pathetic cry to Alex Bakharev will not stop me. Yes I am watching you and give you a chance to shut up, but soon will start to act! -88.155.222.218 11:23, 30 July 2006 (UTC) and so on. Maybe it is time to contact Bezeq? abakharev 12:09, 30 July 2006 (UTC)

    Rajput vandal

    Checkuser (Misplaced Pages:Requests for checkuser/Case/DPSingh) has established that the "Rajput vandal"'s activities (daily mass revert warring through multiple sock accounts) can be traced to the IP ranges 192.94.94.0/24 and 192.91.75.0/24, both registered to Texas Instruments. Essjay suggested to consider a complaint to the company. Fut.Perf. ☼ 10:19, 13 July 2006 (UTC)

    I pulled all edits for the two ranges; one is a vandal-only range and the other is low-use. I blocked the vandal only range (192.94.94.0/24) for some time, and the other range for a good month (accounts can still get through for this range).Voice-of-All 02:55, 26 July 2006 (UTC)

    207.200.116.* and 207.200.112.*

    It appears that these AOL ranges are being used by a vandalbot. The current solution is range blocks to 116/24 and 112/24, but the vandalism begins again as soon as the block expires. For further discussions on this vandalbot, please see here and here. It has also been reported below as "All of AOL". TigerShark 00:47, 9 July 2006 (UTC)

    207.200.116.0/24 has been given a heavy block; the other range has been blocked for a week (minimal restrictions).Voice-of-All 03:04, 26 July 2006 (UTC)

    202.182.131.21

    • 202.182.131.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    • Registered to Knox Grammar School
    • Brief summary: This address has a history of vandalism which dates back to July 21, 2004. The first block was not sanctioned until approximately one year later, on August 12, 2005. Since that time, vandalism has significantly increased, with at least 18 blocks within the past 10 months. A sampling of recent edits shows that most edits are vandalism, generally either random gibberish or greetings to fellow students also reading Misplaced Pages, while others are various types of insults, personal or otherwise, i.e. "Ilia Bulla is not welcom hear because he is gay" or "2006 - Current: My huge dick", as well as personal attacks directed toward our Misplaced Pages editors. The offending network has been blocked while investigation procedings are underway. Can't sleep, clown will eat me 05:42, 15 June 2006 (UTC)

    203.14.53.46

    216.56.25.166

    207.31.166.130

    208.22.177.10

    • Registered to the Loudoun County Department of Information Tech.

    Synopsis: High ratio of vandalism, some productive edits, and 12+ blocks in the past year so far. Can't sleep, clown will eat me 03:03, 19 May 2006 (UTC)

    169.244.143.115

    • Registered to the Maine Libraries and their Department of Education.

    Synopsis: Extremely high ratio of vandalism originates from this IP address, little to no productive edits, and has been blocked over 40+ times in the past. Can't sleep, clown will eat me 16:10, 15 May 2006 (UTC)

    Tim Starling (talk · contribs) has informed me via email that the people in charge of these servers have turned on X-Forwarded-For headers, so they've been added to the trusted list. I don't know if this means the vandalism attributed to these proxies will decrease or not, but I imagine that's the intended effect. Phoenix-forgotten 19:06, 13 June 2006 (UTC)

    Open Cases

    Under Investigation

    Please do not move alerts into this section unless you are the investigator opening a new case.


    /203.129.33.225 vandal


    /69.210.*.* vandal

    Synopsis: primarily uses 69.210.96.0/19, 69.210.128.0/19 and 68.74.160.0/19, 68.74.192.0/20, but has also used other ranges. Often targets particular articles including Apple Macintosh, Michael Moore, Liberalism, Steve Wozniak, Apple Computer, France, John Kerry, AOL, Howard Stern, MoveOn and others. When an article is protected, he immediately moves to another article; when an IP is blocked, he immediately moves on to another IP; he keeps this up for hours and the only remedy is a range block for several hours, after which he comes back the next day or sooner. Was active in mid-April, apparently took a break, but came back just now. Since range blocks cause collateral damage, the most effective remedy would be to take this up with his ISP. -- Curps 02:51, 5 May 2006 (UTC)

    Under investigation --lightdarkness 14:35, 5 May 2006 (UTC)

    Today's update:

    and using different tactics, this is also probably the same guy (was also active in mid-April at the same time as the other form of vandalism and revived now as well):

    -- Curps 23:47, 5 May 2006 (UTC)

    Several other wikiprojects have taken my attention away from this case. I would appreciate if someone could follow up on this report, as I cannot focus 100% of my efforts at this time. --lightdarkness 14:20, 10 May 2006 (UTC)

    /Internet for Learning

    synopsis: this range of IP's apparantly belongs to a UK company, Research Machines, which provides a service called Internet for Learning to several schools and public libraries in the UK, including Marling School, Estover Community College, a public library in Bath, etc. At least one two respected Misplaced Pages administrators, user:Celestianpower and User:Sceptre, rely on this service. However even a superficial glance reveals that these IP's are collectively responsible for MASSIVE amounts of childish vandalism. I know they are just a bunch of silly kids, but look how much trouble and effort they cause. There must be some way of dealing with this, other than the constant short term blocks that don't even put an immediate end to vandalism sprees, because the same users simply switch computers and continue (I had my user page vandalised by one of these IP's soon after blocking other IP's in the same range). Two Three of the IP's have been indefinitely blocked as open proxies. I don't really understand why it's okay to block two three of them, but not all of them? Or at least, all but the one used by CelestianPower? And there should probably be a uniform template for all of them (not sure I have the savvy to create it myself)--woggly 12:23, 11 May 2006 (UTC)

    The point is, they change. My machine could be using one one minute and another the next. I am unbloking/re-blocking when I need to eidt at the moment but if that's not enough then there's not a lot I can do. The only solution I can think of is to not edit at school, which would be a real shame. If anyone has any better suggestions - I'd love to hear them! --Celestianpower 17:41, 11 May 2006 (UTC)
    For this range of IPs, I just counted 242 blocks since January 2005. I did not count instances of Celestianpower unblocking and reblocking (and with all due respect, you don't always remember to reblock). Each block represents several acts of vandalism. We're probably looking at thousands of acts of vandalism, and they've been multiplying from month to month, despite longer and longer blocks. It seems to me that this is a huge waste of energy for Misplaced Pages admins. In my opinion all these IPs should be indefinitely blocked as open proxies. Celestianpower can continue unblocking when editing from school, but should really try to remember to reblock. Other contributing editors affected by the block would have to ask an admin to temporarily unblock for them. The status of these IPs should be clearly documented somewhere, and a uniform template created for them. Any objections, or better ideas? --woggly 19:34, 11 May 2006 (UTC)
    Accept.--Shanel 20:25, 14 May 2006 (UTC)
    I have the same problem. When I'm at work I edit from behind the same proxy as almost every single schoolkid in Birmingham. It's got a three month block on it at the moment, and a quick look at its contributions will show why. There's an alternative proxy I can use (because I'm the IT guy at the school I work at) - schools are sometimes told to use it when there's a problem with the main one - its contributions show that this happened for two weeks recently. There is a solution: Misplaced Pages:Blocking policy proposal suggests a softer form of blocking that would block anonymous users from IPs with high vandalism rates, but still allow logged in users to edit. Sorry if I'm telling everyone something they already know. When I found this page I did think of adding those two IP addresses to it, but I don't see what can be achieved without asking schools to do the impossible. I was just going to wait for the new blocking policy to take effect. Let me know if you think this isn't the right approach. --Hughcharlesparker 21:40, 14 May 2006 (UTC)
    Thank you for bringing this up, I was not aware of the proposed policy. If it were to pass it might be a solution to all of the IP vandalism listed on this project page, not only that issuing from Internet for Learning. The problem is that this solution is, currently, hypothetical. If and when it becomes applicable, it may make sense to review and revert whatever stopgap measures we put into effect now. --woggly 06:33, 15 May 2006 (UTC)
    The full IP Range is 62.170.0.0/15 Will (@) T 09:33, 16 May 2006 (UTC)
    I think there is another block of IP addresses belonging to them:
    —Veyklevar 08:23, 16 May 2006 (UTC)
    I have the IP my school uses (which is I4L as well) (I also changed the one admin to two)
    I'll endorse investigation, if needs be Will (@) T 09:28, 16 May 2006 (UTC)

    And yet more. Not sure these are quite the same, but they are also school proxies in the UK, contributing much vandalism:

    What a can of worms! --woggly 11:45, 16 May 2006 (UTC)

    Are we getting stuff mixed up? So far we have:
    1. 62.171.194.* — Research Machines Internet for Learning
    2. 212.132.0.* — Research Machines Internet for Learning
    3. 217.33.207.195 — Yorkshire & Humberside Grid 4 Learning (Is that related to the above?)
    4. 212.135.1.* — Easynet, Brick Lane Backbone and Core Servics —Veyklevar 12:11, 16 May 2006 (UTC)
    Quite likely there is some confusion here. I've been grouping all of these together based on information that had already been posted on talk pages of similar IPs. But it may be time to run new whois(?) checks on each IP. (Never done it myself). --woggly 12:42, 16 May 2006 (UTC)
    Yes, I do believe so; unless these are all somehow connected I'll investigate only I4L and separate the other two into their own cases.--Shanel 19:08, 18 May 2006 (UTC)
    I concur. If you want to report the non-I4L IPs, they should be separated into different cases. Snoutwood (talk) 20:30, 18 May 2006 (UTC)
    I've started investigating 217 Will (@) T 13:07, 4 June 2006 (UTC)

    Please take a look at the template I propose to add to these IP talk pages: Template:ReaMUKip Feel free to suggest improvements. If you approve of this template, please endorse it. Thanks. --woggly 07:56, 15 May 2006 (UTC)

    Endorse
    Object

    In Contact

    Please do not move alerts into this section unless you are the investigator passing the case on to a contactor.

    163.150.15.187

    163.150.15.187 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Blocked 11 times in the past 3 months, most recent one was a few hours ago. Appears that the vandalism continues as soon as the block ends. School IP, owned by San Bernardino County Superintendent of Schools, San Bernardino, Califorina

    /Father's Wish vandal

    Numerous IPs linked to the same user, including but not limited to:

    These IPs and others are owned by a user who is behind a large case of numerous page vandalisms, and are registered to Southwestern Bell. Several sock puppets and anon users believed to be the same user have been vandalizing the group of articles related to Avatar: The Last Airbender. The edits were shown to be a violation of WP:V and WP:C. This has been explained on many talk pages, and many sockpuppet accounts and IPs have been blocked, yet the user(s) continue to insert the content. Their actions have included massive WP:3RR violations, ban evasions, personal attacks, blatant vandalism, plagairism, and more. A sockpuppet case was opened and investigated, and can be found at Misplaced Pages:Suspected_sock_puppets/Father's_Wish. All of the sockpuppet accounts identified, as well as the IP addresses listed above, were blocked as a result of this case. However, because the vandal has a dynamic IP address, he/she is able to continue vandalizing pages (both by remaining anonymous and by registering new sockpuppet accounts). According to user Neil916, who has investigated the sockpuppet case, "Reviewing the history of the dynamic IP addresses this user has received from his Internet provider shows no overlap in contribution times, which shows that it is highly unlikely that there is more than one user involved here. This user has an AT&T Yahoo! DSL account (specifically Southwestern Bell) with a dynamic IP address. It appears that in his area, he is being assigned addresses out of at least 4 class "B" IP blocks: 68.74.0.0, 68.78.0.0, 70.229.0.0, and 70.230.0.0. That means that there are about 260,000 potential IP addresses he could be assigned. Obviously, range blocks would result in an undesirable level of collateral damage." He suggested that this abuse report be filed. Additional information on this case can be found at the corresponding sockpuppet case report page. –Prototime (talk • contribs) 20:45, 26 July 2006 (UTC)

    I am the vandal, and I must apologize for the inconvience I have caused to everyone, I was pretty pissed that they wouldn't allow me to use the titles I obtained from Nick's XML file, but I have stopped for 2 days now. (All Chicago IP Addresses should be stopped). Unfortunately, I am not father's wish but rather a completely different individual. Again, I apologized and have stopped. 69.214.221.232 05:44, 27 July 2006 (UTC)

    You are contradicting yourself. You say you are the vandal, in this case Father's Wish, but then you state you are not Father's Wish. So..? Anyway, also as an investigator, I will accept this case. Review it at Misplaced Pages:Abuse reports/Father's Wish. Iolakana| 18:40, 27 July 2006 (UTC)
    Case opened etc etc. Waiting for contactor to pick up. Iolakana| 19:46, 27 July 2006 (UTC)

    It's kind of weird how you think I'm Father's Wish when I'm not. 68.74.151.1 21:31, 27 July 2006 (UTC)

    No no no no no, no no no. You are not listed. Iolakana| 21:39, 27 July 2006 (UTC)

    No, I'm that guy above, the Chicago IPs, it's just that I'm not father's wish when you guys put me as him.

    Even though I've stopped and apologized, you still got to go? Hm. 68.74.79.71 14:05, 28 July 2006 (UTC)

    217.23.232.194

    Very active school vandals, apparently "Derwentside District Council (schools)". Just over 500 edits since October 2005, and a few older ones. Nineteen distinct blocks by sixteen distinct admins since last September, all short blocks because it's a school.

    151.198.171.57

    Geo. 23:22, 5 July 2006 (UTC)

    • Investigation complete, cleared for contact.Geo. 00:48, 6 July 2006 (UTC)

    163.153.27.11

    --Pi3832 14:09, 26 May 2006 (UTC)

    /Cumbria Lancashire Education Online

    FYI, 212.219.82.37 has now been blocked for 12 weeks, and a user from Archbishop Temple School is requesting that the block be lifted. -Will Beback 21:56, 18 May 2006 (UTC)


    137.164.143.111

    132.70.50.117

    • Registered to Bar-Ilan University Network .

    This IP has been continuously blocked for vandalism, with the exception of a period in April when Hall Monitor blocked it indefinitely (Raul undid him). Also, its user talk page was protected for about a month after the IP kept adding bogus warnings and removing genuine ones. I unprotected it when I came across it as I felt it had been long enough, but almost immediately it started happening again, with the IP performing a series of schizophrenic removals and self-reverts (presumably two different people using the IP). Just now I reblocked and reprotected. A lot of his edit summaries say "Please block me for good". --Sam Blanning 13:59, 16 May 2006 (UTC)

    So maybe we should. Anyway, after this is investigated, I would be willing to contact Bar-Ilan. --woggly 15:23, 16 May 2006 (UTC)
    I will email them tomorrow about this, hopefully this should help. --Sunfazer | Talk 20:22, 16 May 2006 (UTC)
    To block the IP for good means to allow this user's real vandalism to take place. His blanking of pages is a relatively minor matter - anyone can see that the page was vandalised, and it will be fixed almost immediately. This user seems to be trying to enforce a political boycott which has long been cancelled (see edits of Dittoboy), and blocking the university means allowing his vandalism, of the concept of Misplaced Pages being free for all to edit, take place.
    Just for the record, the reverrts described above were done by me when I couldn't do it while logged in due to the IP address being blocked. Eli Falk 05:08, 17 May 2006 (UTC)
    Very strange. Could you explain a little more of the background? And technically, how can he be blocking from the Bar Ilan IP if he's not from Bar Ilan?--woggly 06:07, 17 May 2006 (UTC)
    Very likely, he lives somewhere near Bar Ilan. Anyone can enter the university, and there are public computer rooms in which anyone can access the internet without logging in. This means that anyone can access these computers, and once they leave no one can figure out who they are.
    Through checking which pages link to the Bar Ilan IP talk page, I discovered a vandal names Dittoboy, who wrote that "I've now succeeded in getting the university finally" on his talk page. He claims that last year he tried to keep the university on autoblock, but that Frazzydee was fighting his attempts to do this. Eli Falk 06:32, 17 May 2006 (UTC)
    University has been contacted by me. Awaiting reply. --Sunfazer | Talk 13:04, 17 May 2006 (UTC)

    /195.194.185.41

    /70.49.111.121

    • 2006-05-05 16:25:00 (= 12:25 Eastern Daylight Time)
    • Sympatico (largest ISP in Canada):

    NOTE: contribs show nothing, the edit was already purged from the history. It goes without saying that edits aren't ever completely purged, so if you're an admin and want to verify that this edit took place, contact User:Freakofnurture by e-mail and he can show you where to find it.

    Synopsis: Massive vandalism spree, posting User:Alkivar's personal information (phone numbers) in edit summaries, particularly to main-page-linked articles, also to some warez-related articles. Probably the "Dicky Robert" vandal of a few months ago, possibly GNAA-related. Nearly always uses a throwaway sockpuppet, but on this occasion seems to have screwed up and used an IP. I can supply dates and timestamps of dozens of other recent edits if necessary (nearly all purged from the database already), but since those are all sockpuppets someone would have to be willing to plow through checkuser on all those.

    Because the actions of this vandal are particularly reprehensible (privacy and implicit invitation to real-life harassment), I would suggest contacting the Wikimedia Foundation and getting authorization to file a complaint in the name of Misplaced Pages, rather than simply on your own authority as private individuals. Or contact Brad Patrick and have him make the phone call (I'll leave a message on his talk page). -- Curps 19:57, 5 May 2006 (UTC)

    For reference, here are Sympatico's terms of service, which include the usual clause forbidding harassment. He's still at it: latest sockpuppet was User:Stencils at 08:31 UTC. -- Curps 08:37, 6 May 2006 (UTC)

    Began contact. Snoutwood (talk) 21:01, 18 May 2006 (UTC)

    /ACT Department of Education

    • Registered to the ACT Department of Education (Australia)

    Synopsis: Frequent source of vandalism, often picks up vandalizing as soon as prior blocks expire, has been blocked over 20+ times by various administrators with no signs of collateral damage. Can't sleep, clown will eat me 02:20, 12 May 2006 (UTC)

    /159.191.12.24

    DNS: Portland Public Schools, Info. Services

    Block log says it all. -- OnPatrol 23:25, 5 May 2006 (UTC)

    /216.79.194.96

    Synopsis: Over 400 edits since October 2004, around 95% vandalism, with a few good edits. Blocked 16 times since August 2005. See also this article about the principal of Grimsley, which they've created and keep vandalising, and which I've nominated for deletion. He might be a good guy to contact - he seems no-nonsense, and would probably be amused by his detailed bio, unless it gets deleted first. GTBacchus 02:42, 4 May 2006 (UTC)

    Rejected requests

    These requests have been rejected, and will be archived after several days.

    198.70.42.52

    198.70.42.52 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) Persistant vandalism, seven blocks in a month. Knowing Is Half The Battle 20:05, 19 July 2006 (UTC)

    All of AOL

    See WP:LTA#AOL_DoS_Vandal_from_207.200.116..2A, User:Mboverload/vandalattack, User:Kevin Breitenstein/aolvandal for info, IP lists. I don't have time to list them all, because by the time I write this, they'll be on a new subrange of AOL, as two of them are currently blocked, 207.200.116.xxx and 152.163.100.xxx . Needless to say, this person needs to be reported or stopped, else[REDACTED] will be littered with 100+ vandalisms per night that are often very subtle like 'sn' or 'ts' being added at random. Kevin_b_er 06:31, 19 June 2006 (UTC)

    no much point on reporting "All of aol", and reviewing al aol's ips conribs is just not doable. Who would we contact? AOL? -- Drini 22:04, 4 July 2006 (UTC)

    128.101.152.7

    Contributions here. Obsessed with prostitution and the alternative spellings of "sulfur" and "aluminum," for some reason. -Tapir Terrific 20:22, 11 July 2006 (UTC)

    216.143.138.153

    Contributions here. Adding POV and anti-liberal bias against pages of liberal personalities. They have been warned, but have continued. --Folksong 04:09, 13 July 2006 (UTC)

    24.61.57.127

    Frequently blanks entire pages, added "i like to get it in my butt and your mom is really a man she gots a great big dick like me" to an article about ARPANET

    167.7.39.145

    User currently messing up the pages of Taiwan and China. — Nrtm81 21:06, 1 July 2006 (UTC)

    See also

    Archives

    Abuse Reports Archives
    Completed Reports

    1 | 2 | 3 | 4 | 5

    Rejected Alerts:

    1 | 2 | 3 | 4 | 5

    Categories:
    Misplaced Pages:Abuse response Add topic