User:MARMOT

MARMOT
Original name(s)	MARMOT
Wikilifespan	June 13, 2005 — June 23, 2005
ISP	NTL
Known IPs	62.253.96.40 62.253.64.19 62.253.96.42 62.253.96.44 62.253.128.11 62.255.32.14 62.255.32.11 62.255.32.12 82.19.186.45 80.3.96.40
Known hostmasks	n=none@cpc4-rdng7-4-1-cust45.winn.cable.ntl.com
Physical location	United Kingdom
Requests for comment	Wikipedia:Requests for comment/MARMOT
Requests for arbitration	Rejected on basis that necessary action to take was obvious (ban)
Instructions	Basically, ban on sight. MARMOT is behind the User:Love Virus attacks as well as other vandalbots.
Status	Unknown

A known problem user; fill this with an infobox later.

NTL E-Mail

From: Alex Schenck <linuxbeak@wikipedia.org> (Wikipedia)

To: abuse@ntlworld.com

Date: Today 02:10:47 am

-- To whom it may concern:

My name is Alex Schenck. I am contacting you on behalf of Wikipedia and the Wikimedia Foundation concerning one of your ISP subscribers who identifies himself by the name "MARMOT". This user has engaged in a series of malicious and harmful attacks on our systems and against our users, causing dozens of hours of administrators' time wasted repairing the damage over several separate occasions, including damage caused by malicious scripts.

On June 13th, 2005, user "MARMOT" joined Wikipedia and soon began disrupting the activities of the site, leading several administrators, including myself, to track and monitor his activities. He was shortly thereafter banned from Wikipedia for excessive disruption. However, he continues to evade the ban using different IPS and usernames.

Recently MARMOT created a script (a "vandalbot") which automatically and quickly defaces pages on Wikipedia. When we ran an IP check on the originator of the script, MARMOT's IP was matched with the bot's. The bot's user name, "Love Virus", had an IP of 62.253.96.40. We know for a fact that it was MARMOT who was using this IP at this point, because the first time he ran the bot, he failed to login as the user account "Love Virus" and the vandalism showed up in the logs. An example of what the vandalbot actually did can be viewed at this link: http://en.wikipedia.org/w/index.php?title=Feces&diff=prev&oldid=21878549 Additionally, you may view a sample of his disruptive edits at http://en.wikipedia.org/wiki/Special:Contributions/62.253.96.40

The known IP addresses that MARMOT have used at various points include the following:

62.253.96.40 62.253.96.40 62.253.64.19 62.253.96.42 62.253.96.44 62.253.128.11 62.255.32.14 62.255.32.11 62.255.32.12

While I understand that these are actually proxy IP addresses that NTL assigns to use with HTTP, MARMOT has used this IP through IRC: 82.19.186.45, which I found using a DNS lookup when he signed on. Yesterday, I contacted this user via IRC, where he admitted to being the user MARMOT as well as the creator of the "Love Virus" attack. I would be happy to provide you with the log of this conversation if you would find it useful.

To assist you, please visit http://en.wikipedia.org/wiki/User:Linuxbeak/Love_Virus_XFF_log. Here, you will find the XFF log that shows MARMOT's actions in relation to the vandalbot.

On behalf of Wikipedia, I am asking you to please prevent this user from ever being able to access Wikipedia again. I understand that NTL has an acceptable use policy that explicitly prohibits this type of behavior. Please understand that Wikipedia has wasted an abhorrent amount of energy and manpower trying to fix damage caused by this user. We are weary of this user's actions, and we would greatly appreciate any action taken to block his access to the Internet and our encyclopedia.

Thank you for your time, and I look forward to your speedy response.

Regards,

Alex Schenck, aka "Linuxbeak" -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Linuxbeak

Florence Devouard -- Wikimedia Foundation Trustee http://en.wikipedia.org/wiki/user:Anthere

Angela Beesley -- Wikimedia Foundation Trustee http://en.wikipedia.org/wiki/User:Angela

Tim Starling -- Wikipedia developer and system administrator http://en.wikipedia.org/wiki/User:Tim_Starling

"Uncle Ed" -- Wikipedia Bureaucrat http://en.wikipedia.org/wiki/User:Ed_Poor

"Jtkiefer" -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Jtkiefer

"MarkSweep" -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:MarkSweep

Zach Harden "Zscout370" -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Zscout370

"Andrevan" -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Andrevan

"FreplySpang" -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:FreplySpang

Kat Walsh -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Mindspillage

Matt Binder -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Redwolf24

Dan Smith -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Rdsmith4

Seth Ilys -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Seth_Ilys

Kelly Martin -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Kelly_Martin

Oliver Brown -- Wikipedia Administrator http://en.wikipedia.org/wiki/User:Kingturtle

Jeff Willis -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:WikiFan04

"Ral315" -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:Ral315

AngryParsley -- Wikipedia contributor http://en.wikipedia.org/wiki/User:AngryParsley

Rob Church -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:Robchurch

AlexR -- Wikipedia contributor http://en.wikipedia.org/wiki/User:AlexR

"Luigi30" -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:Luigi30

Adam Stevens, aka "Phroziac" -- Wikipedia Contributer http://en.wikipedia.org/wiki/User:Phroziac

Nicholas Turnbull -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:NicholasTurnbull

NRS -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:A_Link_to_the_Past

"Toothpaste" -- Wikipedia Contributor http://en.wikipedia.org/wiki/User:Toothpaste