There might be others here who can do that, but, um, dare I suggest that if someone send me IP addresses and times of access, I could probably pretty easily chase down who exactly this MIT vandal is (being a stone's throw from MIT), which would be much more helpful in figuring out what to do.
The following IP addresses were used, the vandal has been active for up to four hours until the blocks (times are UTC+1).
# 14:24 Feb 8, 2003, Jimbo Wales blocked 18.56.0.30 (contribs) (unblock) (This is Ivone?) # 14:33 Feb 8, 2003, Jimbo Wales blocked 18.56.0.31 (contribs) (unblock) (The MIT vandal) # 14:40 Feb 8, 2003, Eloquence blocked 18.56.0.32 (contribs) (unblock) (preventive blocking) # 14:41 Feb 8, 2003, Eloquence blocked 18.56.0.33 (contribs) (unblock) (preventive blocking) # 14:41 Feb 8, 2003, Eloquence blocked 18.56.0.34 (contribs) (unblock) (preventive blocking) # 14:51 Feb 8, 2003, Jimbo Wales blocked 18.21.0.97 (contribs) (unblock) (MIT vandal again) # 14:56 Feb 8, 2003, Jimbo Wales blocked 18.21.0.108 (contribs) (unblock) (MIT vandal) # 15:02 Feb 8, 2003, Jimbo Wales blocked 18.21.0.109 (contribs) (unblock) (MIT vandal) # 15:02 Feb 8, 2003, Jimbo Wales blocked 18.21.0.110 (contribs) (unblock) (MIT Vandal) # 15:02 Feb 8, 2003, Jimbo Wales blocked 18.21.0.111 (contribs) (unblock) (MIT vandal (pre-emptive strike))