Wikipedia:Long-term abuse/Hanoi vandal
Wikilifespan | 2007–present |
---|---|
ISP | FPT Telecom, Viettel Group |
Known IPs | see below for list |
Physical location | Hanoi, Vietnam, changing to the Philippines in October 2016 |
Sockpuppet investigations | Lam Thuy Van |
Instructions | IPs suspected of being used by the Hanoi Vandal should be reported to AIV. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information. |
Status | Active |
Please report all ongoing incidents of abuse to SPI or ANI |
When reporting please link this page in the report.
Current status and updates
editStatus: Vandal is ACTIVE
Basic information
editThe Hanoi vandal is a sneaky, IP-hopping, disruptive editor who has been introducing false information into music related articles for several years. Based in Hanoi (and sometimes geolocating to Nam Dinh or Korea via Korea Telecom), the Hanoi Vandal has been active since at least May 2007.
The name "Hanoi vandal" is a descriptive nickname, used because this person had not been known to have registered an account until May 2014 when Lam Thuy Van (talk · contribs) was created and soon blocked indefinitely. Richmond Reanzares (talk · contribs) was created in June 2017. Richmond Roldan Reanzares (talk · contribs) was created in August 2017.
The person used Philippines IPs in October 2016.
After disruption of Steps pop group topics, a handful of new usernames were blocked in 2024. A large variety of IPs was identified. The range of Special:Contributions/14.177.0.0/16 was involved, and Special:Contributions/2402:800:610D:0:0:0:0:0/48 was blocked.
Targeted areas, pages, themes
editFavorite targets of the vandal include the following artists and/or their works: The Carpenters, Elton John, the Eagles, John Miles, Eric Carmen, Il Divo, the Bee Gees, Gary Moore, Air Supply, Green Day, Sarah Brightman, ABBA, Alvin and the Chipmunks, Queen, Backstreet Boys, Westlife, Andrew Lloyd Webber, Charlotte Church, Meat Loaf, Diane Warren, Linkin Park, Heart, Boston, Warrant, X Japan, REO Speedwagon, Metallica, Guns 'n Roses, Prince, Avril Lavigne, Europe, Taylor Swift, Steps
Habitual behavior
editThe vandal's hallmarks include:
- Falsely crediting collaborations between popular music artists, with a preference for those popular during the 1970s
- Altering the recorded lengths of songs without any references
- Altering playlists, sometimes adding or replacing tracks with ones that don't exist on the album or set list, favoring live and compilation ("best of" type) albums.
- "Cross-referencing" their vandalism into multiple articles
- Category warring - Changing, adding and removing categories
- Altering/repeatedly removing templates ([1], [2], [3], [4], [5])
- Failing to communicate with fellow editors, absolutely, with no attempt at even basic edit summaries
- Uses any particular IP for a very short time, usually within a day or two, but rarely more than a week, then hops to a new IP, or even a new range, very quickly.
- On several occasions the vandal has been observed operating more than one IP address simultaneously, hopping back and forth from one to another seemingly at will.
- The vandalism is sneaky and is designed to be overlooked, although at times the vandal has taken to bolder, more blatant nonsense, such as his persistent assertion that John Miles is a member of the Eagles.
- The vandal often mixes completely legit changes in with more suspicious ones within an individual edit, in an attempt to sneak the vandalism through undetected.
- The vandal often makes several consecutive single edits that are 100% constructive, sometimes correcting misinformation that he himself has introduced months ago. These periods of constructive editing are usually short-lived and the vandal soon returns to add more false information and other nonsense.
- The Hanoi Vandal does not edit any articles outside the realm of popular music.
Cases
edit- Wikipedia:Administrators' noticeboard/IncidentArchive945#Range block needed for the Hanoi Vandal.
- Rangeblock on 49.144.0.0/16 during 6–20 February 2017
- Wikipedia:Administrators' noticeboard/Incidents#Hanoi vandal again.
- Rangeblock on 49.144.32.0/19 during 23 May – 23 June 2017
- Rangeblock on 49.144.224.0/20 during 23 May – 23 June 2017
Other notes
editConfirmed and suspected accounts
editNote: This list is incomplete and could be just the "tip of the iceberg". Any fair amount of time spent investigating the contributions of the IPs listed below invariably reveals more IPs belonging to the vandal. There could easily be hundreds more.
Involved accounts
edit- Lam Thuy Van (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
- Richmond Reanzares (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
- Richmond Roldan Reanzares (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
- Convert114 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
- Steptacular12 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
- Minhanh44 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
Involved IPs
edit- 2024
- 2024
- 2024 2402:800:610D:1C00:0:0:0:0/56 (block range · block log (global) · WHOIS (partial))
- 2024
- 2024 14.177.0.0/16 (block range · block log (global) · WHOIS (partial))
- 2021–2024 2402:800:610D:0:0:0:0:0/48 (block range · block log (global) · WHOIS (partial))
- September 2023
- September 2023
- September 2023
- May 2023
- May 2023
- May 2023
- May 2023
- Feb 2023
- Oct–Dec 2022 2402:800:610D:164E:0:0:0:0/64 (block range · block log (global) · WHOIS (partial))
- Aug 2021
- Jul 2021
- Jul 2021
- Jul 2021
- Jul 2021
- Jul 2021
- Jul 2021
- Jun 2021
- May 2021
- May 2021
- May 2021
- May 2021
- May 2021
- May 2021
- May 2021
- May 2021
- May 2021 [a]
- May 2021
- May 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Apr 2021
- Mar 2021
- Mar 2021
- Mar 2021 [b]
- Mar 2021
- Mar 2021
- Mar 2021
- Mar 2021 (blocked 1 month)
- Mar 2021
- Mar 2021
- Feb 2021
- Feb 2021 (blocked 2 weeks)
- Feb 2021
- Feb 2021 2405:4802:2DB:4400:0:0:0:0/64 (block range · block log (global) · WHOIS (partial))
- Feb 2021 2405:4802:37C:6A50:0:0:0:0/64 (block range · block log (global) · WHOIS (partial))
- Feb 2021
- Feb 2021 (blocked 1 week)
- Feb 2021
- Feb 2021
- Feb 2021
- Feb 2021
- Feb 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Jan 2021
- Dec 2020
- Dec 2020
- Dec 2020
- Nov 2020
- Oct 2020
- Oct 2020
- Oct 2020
- Oct 2020
- Oct 2020
- Oct 2020
- Oct 2020
- Oct 2020
- Oct 2020
- Sep 2020
- Sep 2020
- Sep 2020
- Sep 2020
- Sep 2020
- Sep 2020
- Aug 2020
- Jul 2020
- Apr 2020
- Apr 2020
- Mar 2020
- Jan 2020
- June 2019
- June 2019
- June 2019
- March 2019
- February 2019
- February 2019
- February 2019
- February 2019
- February 2019
- February 2019
- February 2019
- July 2018
- June 2018
- June 2018
- June 2018
- June 2018
- May 2018
- May 2018
- May 2018
- May 2018
- April 2018
- April 2018
- April 2018
- August 2017
- July 2017
- July 2017
- July 2017
- July 2017
- June 2017
- June 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- May 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- April 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- March 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- February 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- January 2017
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- December 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- November 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- October 2016
- August 2016
- September 2015 (blocked for one week on September 22)
- September 2015
- September 2015
- August 2015
- August 2015
- August 2015
- August 2015
- July–August 2015
- July 2015
- July 2015
- July 2015
- July 2015
- July 2015
- July 2015
- June–July 2015
- June 2015
- June 2015
- June 2015
- June 2015
- June 2015
- June 2015
- May–June 2015
- May 2015
- May 2015
- May 2015
- May 2015
- May 2015
- May 2015
- May 2015
- May–June 2015
- April 2015
- April 2015
- Nov 2014
- Oct 2014
- Aug 2014
2013 and earlier
editNotes
edit- ^ Includes one edit from 2015 that may not be the vandal
- ^ Includes eight edits from 2016 that may not be the vandal
- ^ This was an unusual case: The rare 42.113... range IP address (there have been only two other cases of the 42 range being used by the vandal) was used for unusually long time, nearly a week and was still active when finally blocked. Even more strange was the switching repeatedly back and forth between 42.113.99.32 and 1.55.16.46. This is the first known example of the vandal doing this.
- ^ Geolocating in Korea, but is certainly HV. The vandal has done this before in 2010. The contributions of this IP best show the transformation from introducing bogus tracks into album track listings, to the engagement in category genre wars.
- ^ The one that linked 2012 to the massive list of 2010 IPs
- ^ Confirmed IP that geolocates in Korea. Editing within a time gap the known IP's were not editing. Common edits with known Hanoi IPs. Several edits in '09 also
- ^ This IP links the vandal to the Alvin and the Chipmunks spree
- ^ The talk page of this IP includes a list of suspected sockpuppets that I have not yet personally sifted through
- ^ +1 edit in 2010
- ^ The earliest Eagles vandalism
- ^ includes one from 2010
- ^ Used again for 2 edits in 2010
- ^ Earliest known edits
- ^ Includes an edit from 2006 that may not be the vandal