User:Mboverload/vandalattack

From Wikipedia, the free encyclopedia

In the late hours of June 16th, 2006 An AOL user using 207.200.116.xxx IP addresses, possessing at the least a limited knowledge of wikimarkup started adding images to articles and did not cease his unrelenting attacks. It was finally stopped by blocking a whole range of IP addresses. However, once the block was up the attack continued until the IP range was blocked for a whole 3 hours.

Contents

[edit] A timeline

~09:17, February 2, 2006 — ~22:13, June 16, 2006 Time 100 Jimmy Wales stares and grins.jpg Attack
Actually the EARLIEST edit, this shows the SAME user was testing the waters long before we because aware of the true nature of his intentions. First found edit. This attack is likely MUCH larger than is known.

~19:26, June 16, 2006 — ~19:38, June 16, 2006 Mrbelvedere.jpg Attack
The earliest found edit was here, adding an image to an article Image:Mrbelvedere.jpg. This image was added to many articles, but a lack of records meant that a limited number of these edits could be found.

Starting at ~22:00(?), June 16, 2006 and lasting for over 30 minutes The final blow - Sarahvulva.jpg
The largest and final attack was inserting a high-resoltution, graphic photograph of the female genitalia.

00:38, June 17
Because of the rule about AOL only being blocked for 15 minutes, the vandal returned and started vandalizing once again. MO changed to inserting gibberish.

08:53, 17 June 2006
User tested the waters yet again, was blocked for an hour, attack seems to be over

18:01, 17 June 2006
There are numerous AOL vandals going about doing an "Insertformulahere" formula into pages, all in the 207.200.116.*** range. User:Kilo-Lima

03:46, 18 June 2006
The vandal appears to have stuck again inserting gibberish and other nonsense. The range has been blocked for 15 minutes. -Loren 04:04, 18 June 2006 (UTC)

The vandal was blocked a little while ago through a 3 hour range block. 207.200.116.* range was checked through as best as possible. Gibberish was the addition of ts to the article. Kevin_b_er 09:44, 18 June 2006 (UTC)

12:44 18 June 2006 (UTC) Range blocked for an hour. See [1] Ian Manka Talk to me! 14:24, 18 June 2006 (UTC)


Kevin_b_er
Range was apparently blocked again for a few hours. Yhough, an even wider range was 15 minute blocked shortly after. Old vandalism observed in 152.163.97.* and 152.163.100.* as well of similar nature. Kevin_b_er 05:52, 19 June 2006 (UTC)

[edit] Comments by Alphachimp, main reverter in this attack

I've been working on this attack for about an hour now. The user appears to be familiar with the fact the WP cannot effectively block AOL users. His MO is simple. He posts an offensive picture on a WP page and moves on. At first it was a picture of Jimbo Wales waving, but he has moved on to a picture called sarahsvulva (basically labelled porn). I've been trying to revert, but I'll bet that we are missing a lot.

I would suggest running a search for pages that link to this image and reverting them all. --Alphachimp talk 06:47, 17 June 2006 (UTC)

I've been checking by looking at what links to the vulva page. It seems to have calmed for a while. A large, large portion of my recent edits (all of the ones without a warning, just a rollback) are removing that vandalism. This is getting kinda ridiculous. --Alphachimp talk 07:19, 17 June 2006 (UTC)

[edit] Comments by Kevin_b_er

Watched the attack the in the wee american hours of the morning on sun June 18, 2006 which went on for about an hour before the entire subrange was blocked by an admin. ts was added at some location to each article in this round. What's interesting to see is the sub-sub-ranges that the vandal (as well as any wikipedian) edits from. Needless to say, the vandal may have found a way to trick the AOL proxy servers into giving him a new IP, as normal editing AOL users seem to retain their IP for a meaningful length of time (by virtue of an AOL IP editing in a similar style for a period of time) whereas this one rapidly changes IPs every coulple of seconds. Kevin_b_er 09:41, 18 June 2006 (UTC)

[edit] COMPLETELY INCOMPLETE LIST - THIS IS ONLY SCRATCHING THE SURFACE

WARNING: Images of the vagina

Ones where he inserted jimmy's picture


[edit] The whole subrange