User:Sable232/LTA#Chennai vandal

{{collapse top|1=This user appears to have largely ceased disruption.}}

This vandal's primary modus operandi is to violate WP:SUBCAT by adding diffusing subcategories to automotive articles; e.g. adding :Category:1990s cars where :Category:Cars introduced in 1999 is already present. This includes removing the hidden comments in the category sections explaining subcategorization. Other vandalism includes grammatical errors (removing or adding hyphens inconsistently, or changing "body style" to "bodystyle"). The more obvious vandalism includes childish nonsense ([https://en.wikipedia.org/w/index.php?title=Oliver_(given_name)&diff=prev&oldid=928262055]) and an apparent disdain for [https://en.wikipedia.org/w/index.php?title=Harry_(given_name)&diff=prev&oldid=932723064 Harry Styles] and [https://en.wikipedia.org/w/index.php?title=Ed_%28given_name%29&type=revision&diff=915891804&oldid=915113173 Ed Sheeran]. Multiple attempts have been made to communicate with this vandal (e.g. at User talk:2.217.39.9 and User talk:90.195.49.226) and direct them to a venue to discuss (there was a discussion here), to no avail. Upon being blocked (or before), the vandal may dish out childish insults or threats ([https://en.wikipedia.org/w/index.php?title=User_talk:2.123.42.107&oldid=934722741], [https://en.wikipedia.org/w/index.php?title=User_talk:217.32.152.10&diff=prev&oldid=932754363], [https://en.wikipedia.org/w/index.php?title=User_talk:217.32.152.10&diff=prev&oldid=932754534]) or claim to be autistic ([https://en.wikipedia.org/w/index.php?title=User_talk%3A90.195.53.226&type=revision&diff=943477747&oldid=943477300]); if the latter is true this is a WP:CIR issue, if not, it's obvious trolling. Blocking seems to work for roughly a week and then the vandal will find a new IP. Most, if not all, resolve to Reading, Berkshire.

IPs involved include but are not limited to:

• {{IP|2.123.37.178}} - August 2019
• {{IP|2.123.36.27}} - September 2019
• {{IP|2.217.39.9}} - November 2019, blocked twice
• {{IP|2.127.76.89}} - November 2019, blocked once
• {{IP|2.121.241.213}} - November 2019, blocked once
• {{IP|2.123.42.107}} - January 2020, blocked twice, the second time extended to three months
• {{IP|2.123.37.31}} - February 2020
• {{IP|90.195.53.44}} - February 2020, blocked once
• {{IP|90.195.53.226}} - March 2020, blocked twice
• {{IP|2.123.42.236}} - March 2020, blocked twice, TPA revoked, talk page threats revdel'd
• {{IP|90.195.52.33}} - April 2020, blocked once
• {{IP|2.123.34.248}} - April 2020, blocked once
• {{IP|2.123.47.201}} - April 2020, dealt with via rangeblock of {{rangevandal|2.123.32.0/20}}, which ended disruption for a few weeks
• {{IP|90.195.48.222}} - May 2020, blocked once
• {{IP|90.195.59.51}} - May 2020, blocked once
• {{IP|2.217.39.34}} - May 2020, blocked once
• {{IP|2.127.79.139}} - May 2020, blocked twice, TPA revoked, later rangeblocked
• {{IP|2.123.46.136}} - June 2020, blocked once
• {{IP|‎2.123.39.188}} - June 2020, another rangeblock applied to {{rangevandal|2.123.32.0/20}}
• {{IP|2.127.78.222}} - June 2020, rangeblocked ({{rangevandal|2.127.78.0/23}})
• {{IP|2.123.36.246}} - October 2020
• {{IP|2.125.184.255}} - October 2020
• {{IP|2.123.34.108}} - November 2020
• {{IP|2.123.40.160}} - November 2020, blocked once
• {{IP|2.123.33.170}} - November 2020
• {{IP|2.123.45.78}} - December 2020

January 2022 update: This person has stopped the SUBCAT disruption, but is still active with grammatical errors, tampering with dates, and leaving childish remarks on user talk pages, using the IP range {{IP|2A02:C7D:9B65:A800:0:0:0:0/64}}.

{{collapse bottom}}

Someone on a dynamic IP covering a wide range of addresses has been prolifically vandalizing automotive articles. Some edits appear like they may be productive, but some are questionable, and many are clear vandalism (e.g. [https://en.wikipedia.org/w/index.php?title=Ford_Taurus_(third_generation)&diff=prev&oldid=1080284692], [https://en.wikipedia.org/w/index.php?title=Chevrolet_Caprice&diff=prev&oldid=1080282065]). Tampering with vehicle size classes, including adding ones that aren't relevant to the market the vehicle was sold in, is a common theme, and List of Ford vehicles is a favorite target. Adding fake assembly locations has also become a recurring theme, both with IPs and with sockpuppet accounts. All IPs resolve to Chennai. Sometimes this vandal stays on an IP for a day or so, sometimes the IP switches in hours or even minutes.

This user is confirmed to be the indefblocked DavidWittas, and has been vandalizing with sockpuppets as well per this AN/I thread. See Wikipedia:Sockpuppet investigations/DavidWittas/Archive.

• {{IP|27.4.14.89}}
• {{IP|27.4.20.224}} - 14 October 2022
• {{IP|27.4.38.116}}
• {{IP|27.4.44.90}} - 12-13 December 2022
• {{IP|27.4.111.101}}
• {{IP|27.4.124.95}} - 29 November 2022
• {{IP|27.4.157.254}}
• {{IP|27.4.225.208}} - 11 September 2022
• {{IP|27.4.237.151}} - 18 September 2022
• {{IP|27.4.254.81}} - 8 October 2022
• {{IP|27.5.9.213}} - 5 October 2022
• {{IP|27.5.12.220}} - 6 October 2022
• {{IP|27.5.53.226}} - 15 September 2022
• {{IP|27.5.57.116}} - 19 September 2022
• {{IP|27.5.58.95}} - 16 September 2022
• {{IP|27.5.58.114}} - 4 November 2022
• {{IP|27.5.62.44}} - 17 September 2022
• {{IP|27.5.71.77}} – 15 December 2022
• {{IP|27.5.78.86}} – 21 January 2023
• {{IP|27.5.92.231}} - 20 September 2022
• {{IP|27.5.93.8}} - 4 October 2022
• {{IP|27.5.94.130}} - 19 October 2022
• {{IP|27.5.137.236}} - 6 September 2022
• {{IP|27.5.190.6}} - 11 October 2022
• {{IP|27.5.195.34}} - 12 November 2022
• {{IP|27.5.208.1}} - 22 February 2023
• {{IP|27.5.220.5}} - 10 October 2022

• {{IP|27.5.252.12}} - 14 November 2022
• {{IP|27.7.67.174}}
• {{IP|27.7.69.224}}
• {{IP|27.7.70.158}}
• {{IP|27.7.71.207}}
• {{IP|27.7.71.211}}
• {{IP|27.7.74.93}}

• {{IP|49.37.221.171}}
• {{IP|49.207.176.77}} - September 2023

• {{IP|60.243.14.160}}
• {{IP|60.243.15.51}}
• {{IP|60.243.73.178}} – 29 October 2022
• {{IP|60.243.96.20}}
• {{IP|60.243.98.225}}
• {{IP|60.243.99.142}}
• {{IP|60.243.105.115}}
• {{IP|60.243.107.49}}
• {{IP|60.243.108.82}} - 26 November 2022
• {{IP|60.243.109.189}}

• {{IP|112.201.106.201}} – 20-24 September 2022

• {{IP|115.96.96.65}} - 4 September 2022
• {{IP|115.97.5.244}} - 3 November 2022
• {{IP|115.97.44.181}}
• {{IP|115.97.44.231}} - 9 April through 17 May 2022
• {{IP|115.97.46.93}} - 5 September 2022
• {{IP|115.97.73.82}}
• {{IP|115.97.75.205}}
• {{IP|115.97.76.250}}
• {{IP|115.97.77.107}}
• {{IP|115.97.79.43}}
• {{IP|115.97.79.209}}
• {{IP|115.97.228.23}}
• {{IP|115.99.10.215}}
• {{IP|115.99.20.92}}
• {{IP|115.99.32.75}} - 23 November 2022
• {{IP|115.99.32.108}} - 22 October 2022
• {{IP|115.99.37.143}} - 13 October 2022
• {{IP|‎115.99.46.206}} - 25 November 2022
• {{IP|115.99.75.217}} - 5 December 2022
• {{IP|115.246.251.198}} - March-April 2023
• {{IP|116.72.112.114}}
• {{IP|116.72.116.155}} - 12 October 2022
• {{IP|116.73.149.240}}
• {{IP|116.73.158.232}}
• {{IP|116.73.174.250}} - 14 December 2022
• {{IP|116.73.187.124}}

• {{IP|122.164.81.80}} - October 2023
• {{IP|122.164.83.39}} - September 2023
• {{IP|122.164.85.113}} - October 2023
• {{IP|122.164.86.30}} - 25 January 2023
• {{IP|122.164.87.233}} - 10 February 2023
• {{IP|122.164.159.92}} - 14 January 2023
• {{IP|122.164.192.98}} - October 2023
• {{IP|122.165.68.228}} - July 2023

• {{IP|183.82.26.219}}

This vandal either changes dates or adds specificity (i.e. month and/or day) to them without a source, and given that the date changes are incorrect the additions would logically be deliberate fabrications. Targeted articles are mostly automotive, with the occasional film article and sometimes seemingly-random ones. Entering the article (or section) title in edit summaries has become a common behavior of late.

• {{IP|190.172.80.84}} appears to be the earliest and the most prolific so far.
• {{IP|190.172.85.73}}
• {{IP|190.172.90.126}}
• {{IP|190.172.97.94}}
• {{IP|190.172.97.192}}
• {{IP|190.172.108.6}}
• {{IP|190.172.109.144}}
• {{IP|190.172.125.246}}

• {{IP|181.20.50.5}}

• {{IP|186.129.16.128}}
• {{IP|186.129.18.163}}
• {{IP|186.129.20.219}}
• {{IP|186.129.23.110}}

• {{IP|186.143.135.147}}
• {{IP|186.143.197.71}}

• {{IP|201.213.102.19}}

{{anchor|G}}

{{userlinks|Gajananperka}}

This vandal adds unsourced lists of supposed competitors ("competitorcruft") to various articles on commercial trucks and vans. The account's behavior has confirmed that the editing is intentional bad-faith disruption. A more recent development is that this vandal will spam the lead section of the article on a vehicle with a list of every vehicle the manufacturer built prior to it.

An assortment of IPs have also been used, resolving to different areas of the country all located in Georgia per WHOIS queries (the standard geolocation link is seemingly incorrect).

Atlanta, GA

• {{IP|2600:1005:B060:0:0:0:0:0/44}}

Most edits are in this range, but some have come from others within {{IP|2600:1005:B000:0:0:0:0:0/40}}.

Suwanee, GA

• {{IP|2601:CF:8201:A8D0:596F:D06E:2F86:A6D1}}
• {{IP|2601:CF:8201:A8D0:C45E:7C43:4C0:C0BA}}

This /64 has been rangeblocked; the user has also used other IPs in the range, but only to edit the IPs' respective talk pages.

• {{IP|2601:CF:8200:3720:0:0:0:0/64}}

• {{IP|2601:CF:8200:5830:0:0:0:0/64}}

Cumming, GA

• {{IP|50.202.102.110}}
• {{IP|71.199.188.111}}
• {{IP|162.251.128.4}}

Atlanta, GA

• {{IP|174.209.192.211}}

Suwanee, GA

• {{IP|24.98.147.127}}
• {{IP|24.125.193.121}}

This vandal has also begun using an IP that resolves to the Netherlands, {{IP|5.22.251.77}}.

{{Anchor|logo|Logo}}

This vandal targets logos in infoboxes for a wide array of companies, usually by changing it to an outdated logo, removing captions, changing the size, or changing from an SVG to a PNG image. IPs appear to be stable for days before changing.

• {{IP|45.165.127.1}}
• {{IP|177.66.37.146}}
• {{IP|181.217.155.201}}
• {{IP|186.195.78.166}}
• {{IP|187.180.49.55}}
• {{IP|2804:14C:B52B:0:0:0:0:0/48}}
• {{IP|2804:389:8108:6959:0:0:0:0/64}}
• {{IP|2804:389:8100:0:0:0:0:0/44}}
• {{IP|2804:1DC8:7FC8:C600:0:0:0:0/64}}

This vandal engages in misinformation vandalism (even when sources are cited, e.g. [https://en.wikipedia.org/w/index.php?title=Volkswagen_ID.7&diff=1161887248&oldid=1161034723]) and other disruption, and will escalate to personal attacks when reverted (e.g. [https://en.wikipedia.org/w/index.php?title=Buick_Electra_E5&diff=prev&oldid=1162912182], [https://en.wikipedia.org/w/index.php?title=User_talk:83.21.158.88&diff=prev&oldid=1130252300]). They shift between IPs within wide ranges; sometimes they will stay on a single IP for a week or more, other times will change daily. The user may have been editing for some time and appears to have made some productive edits; however, with the wide IP ranges it's possible that there's someone else in this range editing the same topic area. There was a discussion at AN/I regarding this user in December 2022.

{{IP|91.235.230.117}} is stable and has been used by this vandal since 2020; some of the other most disruptive IPs are listed below.

• {{IP|46.205.194.15}}
• {{IP|46.205.195.73}}
• {{IP|46.208.102.11}}

• {{IP|83.11.174.89}}
• {{IP|83.21.147.54}}
• {{IP|83.21.158.88}}
• {{IP|83.21.205.123}}

• {{IP|94.254.152.112}}

This vandal adds disruptive unnecessary hatnotes to various articles. All IPs resolve to the Philippines.

• {{IP|49.146.32.62}}
• {{IP|49.146.32.217}}
• {{IP|49.146.32.251}}
• {{IP|49.146.45.209}}
• {{IP|2001:4455:40D:0:0:0:0:0/48}}
• {{IP|210.1.130.49}}

One of the defining characteristics of this vandal is that they will manually enter the article title or a section heading in the edit summary. Edits are generally run-of-the-mill vandalism - randomly deleting content, adding false information, etc.

{{IP|2600:8803:B11D:FA00:0:0:0:0/64}} is one of the most commonly-used IP ranges. --Sable232 (talk) 15:31, 29 December 2024 (UTC)

• {{IP|68.12.25.68}}