User:Cyphoidbomb/Vietnam Disney Vandal

Overview

Since at least March 2014, a user or users employing a number of Vietnam IPs, (which usually, but not always, geolocate to Ha Noi,) have persistently disrupted a number of Disney-related articles. Initially I discovered the vandalism at Disney Channel (Asia) where I noticed rampant incoherent prose, for example, bizarre statements like:

Under the contest by celebrate Phineas and Ferb Monstober and Phineas and Ferb Merry Christmas at American launched on Smartphone Applications Disney Channel by under the broadcasting coordination at American, the deep suicide 6 highlights with Phineas and Ferb of Disney Channel.[1]

I discovered that much of this type of prose was attributable to a few Vietnam-based IPs. Following some of these IPs to see where else they were editing, I found that they were also attempting to create a hoax about a 2016 Beauty and the Beast animated series. Some of the obvious clues that it was the same person/people, was the consistent attempt to introduce the same hoax, but also the way they kept screwing up the Disney character names. Chip Potts became Chip Potts Cup. Mrs. Potts became Mr. Potts Tea. Lumiere kept getting submitted as Light's the Candlestick.

Anyhow, with the help of some great admins, we were able to protect some templates and HJ Mitchell was kind enough to figure out some rangeblocks that seemed to have helped a bit.

Behavioral traits

Incoherent prose; never uses talk space; rarely uses edit summaries and if they do use summaries, they are not helpful; creates hoaxes (usually about Beauty and the Beast or Tarzan); edits obscure Disney-related articles; never creates account AFAIK; inexplicably changes wikilinks from one place to another, which seems to occasionally be beneficial, but how can we be sure? Vandal seems to have a recurring interest in setting up Tarzan III: Tale of Two Jungles as an actual project, even though it is clearly a hoax project that has roots at http://disneyfanon.wikia.com/wiki/Tarzan_III:_Tale_of_Two_Jungles. The Fanon wiki exists solely for the creation of "head canon" or "fan canon" (aka "fanon" or otherwise make-believe projects). Examples of Tale of Two Jungles additions: [2][3]

IPs used

14.162.167.36
14.162.173.132
14.162.197.138
14.162.204.238
72.88.234.200
113.178.50.99
113.178.53.199
113.190.130.134
113.190.143.140
113.190.159.202
113.190.166.17
113.190.171.94
113.190.176.85
113.190.188.105
113.190.191.136
113.190.202.147
113.190.207.134
113.190.219.83
113.190.221.158
113.190.221.180
113.190.221.190
117.3.101.66
123.16.108.5
123.16.131.127
123.16.135.166
123.16.136.152
123.16.137.180
123.16.146.139
123.16.156.41
123.16.244.40
123.24.210.134
123.24.213.21
222.254.19.86

IPs appearing after first round of rangeblocks by HJ

HJ Mitchell applied a series of rangeblocks to help suppress the problem, which did seem to have some effect. Some IPs have gotten through, though. These are the newer examples made after the first round of rangeblocks. If these are addressed, I'll move them back up into the main list.

113.171.36.66 - Added January 8, 2015
113.190.221.0 - Added November 9, 2014 - In this edit, user claims that Lilo & Stitch 3: Lilo's New Adventure is the next incarnation of Lilo & Stitch. The user then links to a section at Lilo & Stitch 2, where we find unsourced, incoherent prose. (He calls Lilo 3 a prequel and a follow-up, for example.)
222.252.116.247 - Added January 4, 2015
222.254.21.109 - Added December 10, 2014
222.254.23.176 - Added January 2, 2015
222.254.28.108 - Added November 18, 2014
222.254.31.246 - Added December 24, 2014
222.254.23.119 - Added February 22, 2015
222.254.21.218 - Added February 23, 2015
222.254.21.152 - Added March 4, 2015
222.254.26.64 - Added March 10, 2015
113.190.219.20 - Added March 19, 2015 - More Tarzan III: Tale of Two Jungles nonsensee
113.190.216.253 - Added March 20, 2015
113.190.210.213 - Added March 21, 2015
113.190.216.222 - Added March 24, 2015
222.254.19.22 - Added March 28, 2015
222.254.22.187 - Added March 29, 2015
222.254.16.133 - Added April 5, 2015 - Tarzan III: Tale of Two Jungles
113.190.211.91 - Added April 9, 2015
113.190.214.194 - Added April 20, 2015
113.190.210.124 - Added April 23, 2015
113.190.223.233 - Added May 5, 2015
113.23.122.36 - Added May 11, 2015 - Not sure about this one. Vandalism to Disney article here, but the remainder of their edits from yesterday are not Disney-related. It's possible that they just hopped to this IP today.
113.190.212.208 - Added May 16, 2015 - Definitely editing the same range of articles. I've not reverted much, since some of their edits have been improvements.
222.254.31.189 - Added May 19, 2015 - Commitment is: using dial-up to commit Wikipedia vandalism, the most fruitless form of vandalism on the planet.
222.254.30.82 - Added May 19, 2015 - More gibberish.
222.254.16.129 - Added May 30, 2015
113.190.213.178 - Added June 2, 2015
222.254.26.2 - Added June 13, 2015
113.190.211.25 - Added June 26, 2015 - Not confirmed, but very likely. All three of their edits up to that point had to do with Disney stuff.
113.190.218.188 - Added July 15, 2015 - They seem to have quieted down over these last 2 weeks. Unsourced future content here at Disney's Recess article.
113.163.116.70 - Added July 23, 2015 - Note the addition of the year 2045 in this edit. Blatant vandalism.
113.190.222.16 - Added October 12, 2015 - Blocked 1 month by Cyphoidbomb
42.112.99.230 - Added October 15, 2015 - Looks like a different range entirely. FPT Telecom Company. Still focused on Disney. Here they manipulate another user's talk page comment. Here they point to the talk page comment. Here as well. Gibberish here. Not taking action just yet. I want to see if more stuff comes out of this range.
113.190.222.78 - Added October 15, 2015 - Blocked 1 month by Cyphoidbomb
113.190.210.143 - Added October 17, 2015 - Blocked 3 months by Cyphoidbomb
113.190.223.207 - Added October 23, 2015 - Blocked 31 hours by Materialscientist
123.16.243.164 - Added October 29, 2015 - Blocked 1 month by Cyphoidbomb
113.190.145.240 - Added October 30, 2015 - Blocked 1 month by Cyphoidbomb
113.190.208.157 - Added October 30, 2015 - Blocked 1 month by Cyphoidbomb
113.190.151.199 - Added November 1, 2015 - typical gibberish here - Blocked 1 month by Cyphoidbomb
123.16.244.177 - Added November 3, 2015 - Blocked 1 month by Cyphoidbomb
123.16.148.72 - Added November 4, 2015 by Spshu - making similar edit on DisneyToon Studios as 123.16.243.164 - Blocked 1 month by Cyphoidbomb
123.16.240.205 - Added November 4, 2015 by Spshu - making similar edit on Animation studios owned by The Walt Disney Company as 123.16.244.177 - Blocked 1 month by Cyphoidbomb
113.190.146.104 - Added November 5, 2015 by Rchard2scout - Blocked 1 month by Cyphoidbomb
123.16.241.255 - Added November 8, 2015 - Blocked 1 month by Cyphoidbomb
14.162.193.186 - Added November 8, 2015 - Blocked 1 month by Cyphoidbomb
113.23.16.179 - Added November 9, 2015 - Blocked 3 months by Cyphoidbomb
123.16.244.88 - Added November 10, 2015 - Blocked 3 months by Cyphoidbomb
123.16.253.40 - Added November 15, 2015 - Blocked 1 month by Cyphoidbomb
14.162.197.255 - Added November 15, 2015 - Blocked 1 month by Cyphoidbomb
113.190.153.203 - Added November 18, 2015 - Blocked 1 month by Cyphoidbomb
123.16.247.79 - Added November 20, 2015 - Blocked 1 month by Cyphoidbomb
113.190.210.31 - Added November 4, 2015 by Spshu - making similar edit on Animation studios owned by The Walt Disney Company as 123.16.244.177 & editing Brother Bear template with false info - Blocked 1 month by Cyphoidbomb
113.190.220.174 - Added November 24, 2015 by Spshu - similar edits as 123.16.247.79 - Blocked 1 month by Cyphoidbomb
123.16.252.7 - Added November 30, 2015 by Spshu - making similar edit on Animation studios owned by The Walt Disney Company as 113.190.210.31
113.190.209.86 Added December 3, 2015 by Spshu - making similar edit on Animation studios owned by The Walt Disney Company as 123.16.252.7
123.16.246.108 - Added December 6, 2015 - Blocked 1 month by Cyphoidbomb
113.178.53.224 - Added January 2, 2016 - Blocked 1 month by Cyphoidbomb
123.16.132.59 - Added January 16, 2016 - Blocked 1 month by Cyphoidbomb
123.16.129.63 - Added January 26, 2016 - now making up UK unit on with some of the usually edit on Animation studios owned by The Walt Disney Company as 113.190.209.86; back again
14.177.139.69 - Animation studios owned by The Walt Disney Company] edits again
Special:Contributions/14.162.139.194 - added April 14, 2016 - Stitch! and Animation studios owned by The Walt Disney Company
14.176.207.24 - Added May 26, 2016 - Blocked 1 month by Cyphoidbomb
113.190.253.131 – Added August 13, 2016 – Blocked for a measly 3 days by Favonian
171.233.165.201 - Added September 16, 2016 - Warned by Cyphoidbomb. Can't be sure it's him. The disruptions seem to have waned.

Articles affected

Talk:Tarzan III: Tale of Two Jungles - Vandal creates talk page without creating corresponding article so that he can add hoax content to Template:Tarzan and have it point somewhere.
Template:Tarzan - [4][5]
Template:Beauty and the Beast - [6][7][8][9][10][11][12][13][14][15][16]
DisneyToon Studios [17]
Animation studios owned by The Walt Disney Company [18]

Admin interventions

113.178.48.0/21 blocked for a year on 28 October 2014,
113.190.128.0/18 blocked for a year on 28 October 2014,
14.162.192.0/20 blocked for a year on 4 November 2014,
132.219.129.149 (registered to Centre De Recherche Informatique De Montreal) blocked on 4 November 2014 until January 2015. HJ Mitchell | Penny for your thoughts? 18:29, 6 November 2014 (UTC)