User:Linuxbeak/Admin stuff/MARMOT

From: Alex Schenck (Wikipedia)

To: abuse@ntlworld.com

Date: Today 02:10:47 am

-- To whom it may concern:

My name is Alex Schenck. I am contacting you on behalf of Wikipedia and the

Wikimedia Foundation concerning one of your ISP subscribers who identifies

himself by the name "MARMOT". This user has engaged in a series of malicious

and harmful attacks on our systems and against our users, causing dozens of

hours of administrators' time wasted repairing the damage over several

separate occasions, including damage caused by malicious scripts.

On June 13th, 2005, user "MARMOT" joined Wikipedia and soon began disrupting

the activities of the site, leading several administrators, including myself,

to track and monitor his activities. He was shortly thereafter banned from

Wikipedia for excessive disruption. However, he continues to evade the ban

using different IPS and usernames.

Recently MARMOT created a script (a "vandalbot") which automatically and

quickly defaces pages on Wikipedia. When we ran an IP check on the originator

of the script, MARMOT's IP was matched with the bot's. The bot's user name,

"Love Virus", had an IP of 62.253.96.40. We know for a fact that it was

MARMOT who was using this IP at this point, because the first time he ran the

bot, he failed to login as the user account "Love Virus" and the vandalism

showed up in the logs. An example of what the vandalbot actually did can be

viewed at this link:

http://en.wikipedia.org/w/index.php?title=Feces&diff=prev&oldid=21878549

Additionally, you may view a sample of his disruptive edits at

http://en.wikipedia.org/wiki/Special:Contributions/62.253.96.40

The known IP addresses that MARMOT have used at various points include the

following:

62.253.96.40 62.253.96.40 62.253.64.19 62.253.96.42 62.253.96.44 62.253.128.11

62.255.32.14 62.255.32.11 62.255.32.12

While I understand that these are actually proxy IP addresses that NTL assigns

to use with HTTP, MARMOT has used this IP through IRC: 82.19.186.45, which I

found using a DNS lookup when he signed on. Yesterday, I contacted this user

via IRC, where he admitted to being the user MARMOT as well as the creator of

the "Love Virus" attack. I would be happy to provide you with the log of this

conversation if you would find it useful.

To assist you, please visit

http://en.wikipedia.org/wiki/User:Linuxbeak/Love_Virus_XFF_log. Here, you

will find the XFF log that shows MARMOT's actions in relation to the

vandalbot.

On behalf of Wikipedia, I am asking you to please prevent this user from ever

being able to access Wikipedia again. I understand that NTL has an acceptable

use policy that explicitly prohibits this type of behavior. Please understand

that Wikipedia has wasted an abhorrent amount of energy and manpower trying

to fix damage caused by this user. We are weary of this user's actions, and

we would greatly appreciate any action taken to block his access to the

Internet and our encyclopedia.

Thank you for your time, and I look forward to your speedy response.

Regards,

Alex Schenck, aka "Linuxbeak" -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Linuxbeak

Florence Devouard -- Wikimedia Foundation Trustee

http://en.wikipedia.org/wiki/user:Anthere

Angela Beesley -- Wikimedia Foundation Trustee

http://en.wikipedia.org/wiki/User:Angela

Tim Starling -- Wikipedia developer and system administrator

http://en.wikipedia.org/wiki/User:Tim_Starling

"Uncle Ed" -- Wikipedia Bureaucrat http://en.wikipedia.org/wiki/User:Ed_Poor

"Jtkiefer" -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Jtkiefer

"MarkSweep" -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:MarkSweep

Zach Harden "Zscout370" -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Zscout370

"Andrevan" -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Andrevan

"FreplySpang" -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:FreplySpang

Kat Walsh -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Mindspillage

Matt Binder -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Redwolf24

Dan Smith -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Rdsmith4

Seth Ilys -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Seth_Ilys

Kelly Martin -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Kelly_Martin

Oliver Brown -- Wikipedia Administrator

http://en.wikipedia.org/wiki/User:Kingturtle

Jeff Willis -- Wikipedia Contributor

http://en.wikipedia.org/wiki/User:WikiFan04

"Ral315" -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:Ral315

AngryParsley -- Wikipedia contributor

http://en.wikipedia.org/wiki/User:AngryParsley

Rob Church -- Wikipedia Contributor

http://en.wikipedia.org/wiki/User:Robchurch

AlexR -- Wikipedia contributor http://en.wikipedia.org/wiki/User:AlexR

"Luigi30" -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:Luigi30

Adam Stevens, aka "Phroziac" -- Wikipedia Contributer

http://en.wikipedia.org/wiki/User:Phroziac

Nicholas Turnbull -- Wikipedia Contributor

http://en.wikipedia.org/wiki/User:NicholasTurnbull

NRS -- Wikipedia Contributor

http://en.wikipedia.org/wiki/User:A_Link_to_the_Past

"Toothpaste" -- Wikipedia Contributor

http://en.wikipedia.org/wiki/User:Toothpaste