User:Cyphoidbomb/Vietnam Disney Vandal

Overview
Since at least March 2014, a user or users employing a number of Vietnam IPs, (which usually, but not always, geolocate to Ha Noi,) have persistently disrupted a number of Disney-related articles. Initially I discovered the vandalism at Disney Channel (Asia) where I noticed rampant incoherent prose, for example, bizarre statements like: "Under the contest by celebrate Phineas and Ferb Monstober and Phineas and Ferb Merry Christmas at American launched on Smartphone Applications Disney Channel by under the broadcasting coordination at American, the deep suicide 6 highlights with Phineas and Ferb of Disney Channel."

I discovered that much of this type of prose was attributable to a few Vietnam-based IPs. Following some of these IPs to see where else they were editing, I found that they were also attempting to create a hoax about a 2016 Beauty and the Beast animated series. Some of the obvious clues that it was the same person/people, was the consistent attempt to introduce the same hoax, but also the way they kept screwing up the Disney character names. Chip Potts became Chip Potts Cup. Mrs. Potts became Mr. Potts Tea. Lumiere kept getting submitted as Light's the Candlestick.

Anyhow, with the help of some great admins, we were able to protect some templates and HJ Mitchell was kind enough to figure out some rangeblocks that seemed to have helped a bit.

Behavioral traits
Incoherent prose; never uses talk space; rarely uses edit summaries and if they do use summaries, they are not helpful; creates hoaxes (usually about Beauty and the Beast or Tarzan); edits obscure Disney-related articles; never creates account AFAIK; inexplicably changes wikilinks from one place to another, which seems to occasionally be beneficial, but how can we be sure? Vandal seems to have a recurring interest in setting up Tarzan III: Tale of Two Jungles as an actual project, even though it is clearly a hoax project that has roots at http://disneyfanon.wikia.com/wiki/Tarzan_III:_Tale_of_Two_Jungles. The Fanon wiki exists solely for the creation of "head canon" or "fan canon" (aka "fanon" or otherwise make-believe projects). Examples of Tale of Two Jungles additions:

IPs used

 * 14.162.167.36
 * 14.162.173.132
 * 14.162.197.138
 * 14.162.204.238
 * 72.88.234.200
 * 113.178.50.99
 * 113.178.53.199
 * 113.190.130.134
 * 113.190.143.140
 * 113.190.159.202
 * 113.190.166.17
 * 113.190.171.94
 * 113.190.176.85
 * 113.190.188.105
 * 113.190.191.136
 * 113.190.202.147
 * 113.190.207.134
 * 113.190.219.83
 * 113.190.221.158
 * 113.190.221.180
 * 113.190.221.190
 * 117.3.101.66
 * 123.16.108.5
 * 123.16.131.127
 * 123.16.135.166
 * 123.16.136.152
 * 123.16.137.180
 * 123.16.146.139
 * 123.16.156.41
 * 123.16.244.40
 * 123.24.210.134
 * 123.24.213.21
 * 222.254.19.86

IPs appearing after first round of rangeblocks by HJ
HJ Mitchell applied a series of rangeblocks to help suppress the problem, which did seem to have some effect. Some IPs have gotten through, though. These are the newer examples made after the first round of rangeblocks. If these are addressed, I'll move them back up into the main list.


 * 113.171.36.66 - Added January 8, 2015
 * 113.190.221.0 - Added November 9, 2014 - In this edit, user claims that Lilo & Stitch 3: Lilo's New Adventure is the next incarnation of Lilo & Stitch. The user then links to a section at Lilo & Stitch 2, where we find unsourced, incoherent prose. (He calls Lilo 3 a prequel and a follow-up, for example.)
 * 222.252.116.247 - Added January 4, 2015
 * 222.254.21.109 - Added December 10, 2014
 * 222.254.23.176 - Added January 2, 2015
 * 222.254.28.108 - Added November 18, 2014
 * 222.254.31.246 - Added December 24, 2014
 * 222.254.23.119 - Added February 22, 2015
 * 222.254.21.218 - Added February 23, 2015
 * 222.254.21.152 - Added March 4, 2015
 * 222.254.26.64 - Added March 10, 2015
 * 113.190.219.20 - Added March 19, 2015 - More Tarzan III: Tale of Two Jungles nonsensee
 * 113.190.216.253 - Added March 20, 2015
 * 113.190.210.213 - Added March 21, 2015
 * 113.190.216.222 - Added March 24, 2015
 * 222.254.19.22 - Added March 28, 2015
 * 222.254.22.187 - Added March 29, 2015
 * 222.254.16.133 - Added April 5, 2015 - Tarzan III: Tale of Two Jungles
 * 113.190.211.91 - Added April 9, 2015
 * 113.190.214.194 - Added April 20, 2015
 * 113.190.210.124 - Added April 23, 2015
 * 113.190.223.233 - Added May 5, 2015
 * 113.23.122.36 - Added May 11, 2015 - Not sure about this one. Vandalism to Disney article here, but the remainder of their edits from yesterday are not Disney-related. It's possible that they just hopped to this IP today.
 * 113.190.212.208 - Added May 16, 2015 - Definitely editing the same range of articles. I've not reverted much, since some of their edits have been improvements.
 * 222.254.31.189 - Added May 19, 2015 - Commitment is: using dial-up to commit Wikipedia vandalism, the most fruitless form of vandalism on the planet.
 * 222.254.30.82 - Added May 19, 2015 - More gibberish.
 * 222.254.16.129 - Added May 30, 2015
 * 113.190.213.178 - Added June 2, 2015
 * 222.254.26.2 - Added June 13, 2015
 * 113.190.211.25 - Added June 26, 2015 - Not confirmed, but very likely. All three of their edits up to that point had to do with Disney stuff.
 * 113.190.218.188 - Added July 15, 2015 - They seem to have quieted down over these last 2 weeks. Unsourced future content here at Disney's Recess article.
 * 113.163.116.70 - Added July 23, 2015 - Note the addition of the year 2045 in this edit. Blatant vandalism.
 * 113.190.222.16 - Added October 12, 2015 - Blocked 1 month by Cyphoidbomb
 * 42.112.99.230 - Added October 15, 2015 - Looks like a different range entirely. FPT Telecom Company. Still focused on Disney. Here they manipulate another user's talk page comment. Here they point to the talk page comment. Here as well. Gibberish here. Not taking action just yet. I want to see if more stuff comes out of this range.
 * 113.190.222.78 - Added October 15, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.190.210.143 - Added October 17, 2015 - Blocked 3 months by Cyphoidbomb
 * 113.190.223.207 - Added October 23, 2015 - Blocked 31 hours by Materialscientist
 * 123.16.243.164 - Added October 29, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.190.145.240 - Added October 30, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.190.208.157 - Added October 30, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.190.151.199 - Added November 1, 2015 - typical gibberish here - Blocked 1 month by Cyphoidbomb
 * 123.16.244.177 - Added November 3, 2015 - Blocked 1 month by Cyphoidbomb
 * 123.16.148.72 - Added November 4, 2015 by Spshu - making similar edit on DisneyToon Studios as 123.16.243.164 - Blocked 1 month by Cyphoidbomb
 * 123.16.240.205  - Added November 4, 2015 by Spshu -  making similar edit on Animation studios owned by The Walt Disney Company as 123.16.244.177 - Blocked 1 month by Cyphoidbomb
 * 113.190.146.104 - Added November 5, 2015 by Rchard2scout - Blocked 1 month by Cyphoidbomb
 * 123.16.241.255 - Added November 8, 2015 - Blocked 1 month by Cyphoidbomb
 * 14.162.193.186 - Added November 8, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.23.16.179 - Added November 9, 2015 - Blocked 3 months by Cyphoidbomb
 * 123.16.244.88 - Added November 10, 2015 - Blocked 3 months by Cyphoidbomb
 * 123.16.253.40 - Added November 15, 2015 - Blocked 1 month by Cyphoidbomb
 * 14.162.197.255 - Added November 15, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.190.153.203 - Added November 18, 2015 - Blocked 1 month by Cyphoidbomb
 * 123.16.247.79 - Added November 20, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.190.210.31  - Added November 4, 2015 by Spshu -  making similar edit on Animation studios owned by The Walt Disney Company as 123.16.244.177 & editing Brother Bear template with false info - Blocked 1 month by Cyphoidbomb
 * 113.190.220.174 - Added November 24, 2015 by Spshu - similar edits as 123.16.247.79 - Blocked 1 month by Cyphoidbomb
 * 123.16.252.7 - Added November 30, 2015 by Spshu - making similar edit on Animation studios owned by The Walt Disney Company as 113.190.210.31
 * 113.190.209.86 Added December 3, 2015 by Spshu -  making similar edit on Animation studios owned by The Walt Disney Company as 123.16.252.7
 * 123.16.246.108 - Added December 6, 2015 - Blocked 1 month by Cyphoidbomb
 * 113.178.53.224 - Added January 2, 2016 - Blocked 1 month by Cyphoidbomb
 * 123.16.132.59 - Added January 16, 2016 - Blocked 1 month by Cyphoidbomb
 * 123.16.129.63 - Added January 26, 2016 -  now making up UK unit on with some of the usually edit on Animation studios owned by The Walt Disney Company as 113.190.209.86; back again
 * 14.177.139.69 - Animation studios owned by The Walt Disney Company] edits again
 * Special:Contributions/14.162.139.194 - added April 14, 2016 - Stitch! and Animation studios owned by The Walt Disney Company
 * 14.176.207.24 - Added May 26, 2016 - Blocked 1 month by Cyphoidbomb
 * 113.190.253.131 – Added August 13, 2016 – Blocked for a measly 3 days by Favonian
 * 171.233.165.201 - Added September 16, 2016 - Warned by Cyphoidbomb. Can't be sure it's him. The disruptions seem to have waned.

Articles affected

 * Talk:Tarzan III: Tale of Two Jungles - Vandal creates talk page without creating corresponding article so that he can add hoax content to Template:Tarzan and have it point somewhere.
 * Template:Tarzan -
 * Template:Beauty and the Beast -
 * DisneyToon Studios
 * Animation studios owned by The Walt Disney Company

Admin interventions

 * 113.178.48.0/21 blocked for a year on 28 October 2014,
 * 113.190.128.0/18 blocked for a year on 28 October 2014,
 * 14.162.192.0/20 blocked for a year on 4 November 2014,
 * 132.219.129.149 (registered to Centre De Recherche Informatique De Montreal) blocked on 4 November 2014 until January 2015. HJ Mitchell  &#124;  Penny for your thoughts?  18:29, 6 November 2014 (UTC)