Wikilifespan | 2007-present |
---|---|
ISP | FPT Telecom |
Known IPs | see below for list |
Physical location | Hanoi, Vietnam |
Instructions | IPs suspected of being used by the Hanoi Vandal should be reported to AIV. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information. |
Status | Active |
Please report all ongoing incidents of abuse to AIV. When reporting please link this page in the report.
Current status and updates
Status: Vandal is ACTIVE
Basic information
The Hanoi Vandal is a sneaky, IP-hopping, disruptive editor who has been introducing false information into music related articles for several years. Based in Hanoi (and sometimes geolocating to Nam Dinh or Korea via Korea Telecom), the Hanoi Vandal has been active since at least May of 2007.
The name "Hanoi Vandal" is a descriptive nickname, used because this person had never registered an account until May 2015 when the account Lam Thuy Van was registered and soon blocked indefinitely.
Targeted areas, pages, themes
Favorite targets of the vandal include the following artists and/or their works: The Carpenters, Elton John, the Eagles, John Miles, Eric Carmen, Il Divo, the Bee Gees, Gary Moore, Air Supply, Green Day, Sarah Brightman, ABBA, Alvin and the Chipmunks, Queen, Backstreet Boys, Westlife, Andrew Lloyd Webber, Charlotte Church, Meat Loaf, Diane Warren, Linkin Park, Heart, Boston, Warrant, X Japan, REO Speedwagon, Metallica, Guns 'n Roses, Prince, Avril Lavigne, Europe
Habitual behavior
The vandal's hallmarks include:
- Falsely crediting collaborations between popular music artists, with a preference for those popular during the 1970's
- Altering the recorded lengths of songs without any references
- Altering playlists, sometimes adding or replacing tracks with ones that don't exist on the album or set list, favoring live and compilation ("best of" type) albums.
- "Cross-referencing" their vandalism into multiple articles
- Category warring - Changing, adding and removing categories
- Altering templates ([1], [2], [3], [4], [5])
- Failing to communicate with fellow editors, absolutely, with no attempt at even basic edit summaries
- Uses any particular IP for a very short time, usually within a day or two, but rarely more than a week, then hops to a new IP, or even a new range, very quickly.
- On several occasions the vandal has been observed operating more than one IP address simultaneously, hopping back and forth from one to another seemingly at will.
- The vandal never engages in your familiar ordinary blatant vandalism: never adds "HI THERE!" or "I like bananas", never adds gibberish, never adds vulgarisms. The vandalism is sneaky and is designed to be overlooked, although at times the vandal has taken to bolder, more blatant nonsense, such as his persistent assertion that John Miles is a member of the Eagles.
- The vandal often mixes completely legit changes in with more suspicious ones within an individual edit, in an attempt to sneak the vandalism through undetected.
- The vandal often makes several consecutive single edits that are 100% constructive, sometimes correcting misinformation that he himself has introduced months ago. These periods of constructive editing are usually short-lived and the vandal soon returns to add more false information and other nonsense.
- The Hanoi Vandal does not edit any articles outside the realm of popular music.
Cases
Other notes
Confirmed and suspected accounts
Note: This list is incomplete and could be just the "tip of the iceberg". Any fair amount of time spent investigating the contributions of the IPs listed below invariably reveals more IPs belonging to the vandal. There could easily be hundreds more.
Involved IPs
- September 2015
- September 2015
- August 2015
- August 2015
- August 2015
- August 2015
- July–August 2015
- July 2015
- July 2015
- July 2015
- July 2015
- July 2015
- July 2015
- June–July 2015
- June 2015
- June 2015
- June 2015
- June 2015
- June 2015
- June 2015
- May–June 2015
- May 2015
- Blocked twice
- May 2015
- May 2015
- May 2015
- May 2015
- May 2015
- May–June 2015
- May–July 2014 Lam Thuy Van (talk · · contribs · deleted contribs · logs · filter log · block user · block log · SUL · CA · checkuser (log))
- Blocked indefinitely
- April 2015
- April 2015
- 1.55.11.44 (talk · contribs) (2 September 2013)
- 1.55.120.4 (talk · contribs)
- 1.55.127.41 (talk · contribs) (August 2013)
- 1.55.16.46 (talk · contribs)
- 1.55.18.62 (talk · contribs)
- 1.55.132.159 (talk · contribs) (August 2013, no activity after block expired)
- 1.55.136.51 (talk · contribs) (August 2013, no activity after block expired)
- 1.55.59.130 (talk · contribs) (5 October 2013)
- 1.55.61.215 (talk · contribs)
- 1.55.8.173 (talk · contribs)
- 1.55.8.85 (talk · contribs)
- 113.23.125.129 (talk · contribs) (currently active as of 12 October 2013)
- 113.23.125.22 (talk · contribs) (17 September 2013)
- 113.23.25.104 (talk · contribs) (September 2013)
- 113.23.59.217 (talk · contribs) (last edit 8 September 2013)
- 118.71.0.62 (talk · contribs)
- 118.71.17.149 (talk · contribs)
- 118.71.21.38 (talk · contribs) (active as of 11 October 2013)
- 118.71.233.89 (talk · contribs)
- 118.71.45.97 (talk · contribs) (17 August 2013)
- 183.81.103.10 (talk · contribs) (25 September 2013)
- 42.112.244.250 (talk · contribs) (31 August 2013)
- 42.113.163.88 (talk · contribs) (6 October 2013)
- 42.113.236.0 (talk · contribs) (August 2013, no activity after block expired)
- 42.113.27.53 (talk · contribs) (blocked on 18 Aug 2013)
- 42.113.99.32 (talk · contribs) [a]
- 42.114.77.20 (talk · contribs) (blocked on 12 September 2013)
- 58.187.111.57 (talk · contribs)
- 58.187.115.106 (talk · contribs)
- 58.187.118.41 (talk · contribs) (31 August 2013)
- 58.187.17.178 (talk · contribs) (9 October 2013)
- 58.187.2.63 (talk · contribs)
- 58.187.215.31 (talk · contribs)
- 58.187.215.34 (talk · contribs)
- 58.187.22.90 (talk · contribs) (28 September 2013)
- 58.187.231.238 (talk · contribs) (active as of 11 October 2013)
- 58.187.238.59 (talk · contribs) (2 September 2013)
- 58.187.4.111 (talk · contribs)
- 58.187.41.94 (talk · contribs)
- 58.187.43.166 (talk · contribs) (1 September 2013)
- 58.187.46.104 (talk · contribs)
- 58.187.78.218 (talk · contribs) (5 October 2013)
- 61.79.117.27 (talk · contribs) (June 2013 - Geolocating in Korea, but is certainly HV. The vandal has done this before in 2010.)[b]
2012 IPs used
2011
|
|
|
2010
- Beginning on June 29, 2010, the Hanoi Vandal went on a massive vandalism spree lasting several months in which they used dozens upon dozens of IPs to aggressively edit-war their garbage into articles like Singing in the Twins Wonderland (Volume 1) (and Vol. 2 & 4) and most of the Alvin and the Chipmunks recordings (as well as Template:Alvin and the Chipmunks). The vast majority of the IPs used in these edit wars are not listed above due to the overwhelming volume.
2009
2008
2007
Notes
- ^ This was an unusual case: The rare 42.113... range IP address (there have been only two other cases of the 42 range being used by the vandal) was used for unusually long time, nearly a week and was still active when finally blocked. Even more strange was the switching repeatedly back and forth between 42.113.99.32 and 1.55.16.46. This is the first time that I am aware of the vandal doing this.
- ^ The contributions of this IP best show the transformation from introducing bogus tracks into album track listings, to the engagement in category genre wars.
- ^ The one that linked 2012 to the massive list of 2010 IPs
- ^ Confirmed IP that geolocates in Korea. Editing within a time gap the known IP's were not editing. Common edits with known Hanoi IPs. Several edits in '09 also
- ^ This IP links the vandal to the Alvin and the Chipmunks spree
- ^ The talk page of this IP includes a list of suspected sockpuppets that I have not yet personally sifted through
- ^ +1 edit in 2010
- ^ The earliest Eagles vandalism
- ^ includes one from 2010
- ^ Used again for 2 edits in 2010
- ^ Earliest known
- ^ Includes an edit from 2006 that may not be the vandal