Misplaced Pages

:Requests for checkuser/IP check/Archive: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Requests for checkuser | IP check Browse history interactively← Previous editContent deleted Content addedVisualWikitext
Revision as of 14:51, 14 May 2007 view sourceLuk (talk | contribs)Edit filter managers, Autopatrolled, Administrators44,788 edits rm all cases older than 7 days← Previous edit Latest revision as of 10:50, 14 April 2022 view source WOSlinker (talk | contribs)Administrators854,737 editsm Fix lint errors 
(253 intermediate revisions by 27 users not shown)
Line 1: Line 1:
<noinclude>{{Misplaced Pages:Requests for checkuser/Clerks/Header|]}}__TOC__{{-}}</noinclude> <noinclude>{{Misplaced Pages:Requests for checkuser/Clerks/Header|]}}__TOC__{{-}}</noinclude>
<div style="background: #ffff99; border: 1px solid #AAAAAA; margin: 2em 0 0 0; padding: 0 10px 0 10px;"> <div style="background: #ffff99; border: 1px solid #AAAAAA; margin: 2em 0 0 0; padding: 0 10px 0 10px;">
== Requests for IP check == ==Requests for IP check==
This page lists '''requests to identify and block the IP addresses behind attack and vandal accounts''' that were previously listed at ]. After the account has been reported as blocked or declined by the checkusers, the report is moved here for seven days '''(most recent sections at the bottom)''', after which it is deleted. Because there is no attempt to establish a relationship with a puppetmaster account, no separate archive is kept, other than the page history. This page lists '''requests to identify and block the IP addresses behind attack and vandal accounts''' that were previously listed at ]. After the account has been reported as blocked or declined by the checkusers, the report is moved here for '''seven days (most recent sections {{red|at the bottom)}}''', after which it is deleted. Because there is no attempt to establish a relationship with a puppetmaster account, no separate archive is kept, other than the page history.

]
'''Clerks:''' when clearing this page, please make note of the names of the sections you are deleting in the edit summary.

]
</div> </div>


__TOC__ __TOC__
<!-- Old requests start below this line -->
===] ===


* {{checkuser|The cheapo}}
===Quebec vandal===
*{{checkuser|Nokcomputer}} * {{checkuser|LOL 00000000!}}
**Ok, I know we've tried this a hundred times before, but maybe we can get him pre-emptily this time instead of after the 12th sock? -]<small>(]·])</small> 03:30, 9 May 2007 (UTC)
:Only a few edits came from that specific IP. The vandal is not particularly isolated from any of the other traffic that comes through the city. If this is a recurring vandal, their IP must rotate, and per the above, I'd avoid a range block for now. ''']''' 04:43, 9 May 2007 (UTC)

I checked the range. Beyond the vandal, I found two legit users, a little IP vandalism (one IP vandalizing one article with obvious vandalism which was later reverted), and one account that had been registered but never edited. I don't see any problem with this range. ] 18:53, 9 May 2007 (UTC)
:Right, to be more clear, when I said "isolated", I meant that the the IPs used are hard to distinguish from the other users coming through there, which is why I'd avoid a block, as they are non-vandals (save that one). ''']''' 19:10, 9 May 2007 (UTC)
::A little odd for him not to have registered a ton of socks right away. Thanks for the quick result! -]<small>(]·])</small> 22:29, 9 May 2007 (UTC)

=== Possible zombies ===
*{{Checkuser|BuickCenturyDriver}}
*{{Checkuser|KnowledgeOfSelf}}

The first request is to check to see if BuickCenturyDriver might actually be right that he did not abuse AndyZ's account because his machine may have been zombified per WP:AGF. The second request is to see if KnowledgeOfSelf's computer was zombified by the attacker who used it to upload goatse.cx images. If this one is zombified, we will know not to resysop that account until the computer is cleaned. If you cannot check to see if they are zombies, please send the IPs to ]. ] 02:06, 9 May 2007 (UTC)
:{{declined}} - Brion has already OK'd the account as clean. ] 18:54, 9 May 2007 (UTC)

===JB196===
*{{checkuser|Jumbohead2}}

One off account used in conjunction with JB196 puppet {{user|Funksterjig}}, underlying open proxy needs blocking. &ndash;&ndash; ''']'''<sup><small>(])</small></sup> 01:09, 9 May 2007 (UTC)
:{{unrelated}} Does not appear to be an open proxy at this time. ''']''' 04:22, 9 May 2007 (UTC)

===TomSkillingJr.===
Code '''A'''

I believe the following accounts share one or two IPs:
*{{checkuser|TomSkillingJr.}}
*{{checkuser|Chudzooka}}
*{{checkuser|Shoopshoop}}
*{{checkuser|Mikeskehan}}
*{{checkuser|Nam69}}

All of them soleley focus on discrediting ], a notable YouTube user whose article was recently salted per Williams's request through ], due to harassment from WP editors outside of Misplaced Pages. Previous to Williams's complaint, these accounts made relentless and what I would characterize as stubborn attempts at compromising well sourced articles with endless templates; lengthy talk page diatribes; and stuffed votes at ], creating a false impression of genuine debate. Their activities extend to related article ]. I cannot say for certain the puppet master(s) was(were) responsible for Williams's harassment, but their concerted actions here render that possibility likely.

My suspicions about sock puppetry were particularly raised by this: http://en.wikipedia.org/search/?title=Wikipedia_talk:Deletion_review&oldid=125702519 Scroll to the bottom to find an abortive attempt at Williams's deletion by what look to be three SPAs that regularly appear on Talk:Cory Williams. They posted within six minutes of each other, and I can't fathom that 3 separate users made the same mistake of posting deletion arguments on a discussion page. Is there an IP to block? ] 21:34, 6 May 2007 (UTC)
:{{unlikely}} Only faint geographic connections exists, though the edits do warrant keeping an eye out perhaps. ''']''' 04:08, 9 May 2007 (UTC)

===Dereks1x===
*{{checkuser|Dereks1x}}
*{{checkuser|Afriools}}
*{{checkuser|Annalissette}}
*{{checkuser|Atlas87}}
*{{checkuser|DelloJello}}
*{{checkuser|DelloJello2}}
*{{checkuser|DJ3}}
*{{checkuser|Doc United States}}
*{{checkuser|Harry59}}
*{{checkuser|HumanThing}}
*{{checkuser|KMCtoday}}
*{{checkuser|Lawman8}}
*{{checkuser|MAB1970}}
*{{checkuser|MAB1971}}
*{{checkuser|Phd2007}}
*{{checkuser|Sample1234}}
*{{checkuser|TL500}}
*{{checkuser|Twinik}}

This user seems intent upon causing disruption in the ] and ] page and is continuously creating sockpuppets in order to get around their community ban. The editor has also made edits from several IP addresses from various parts of the US which may suggest open proxy use. {{checkuser|64.3.192.123}} was used to "accidentally" edit on ], {{checkuser|68.15.20.63}} was used to "prove" that Sample1234 was not Dereks1x, and we know of an IP address from the Seattle Public Library system that has been used.--] 19:28, 4 May 2007 (UTC)
:{{confirmed}} Users '''Atlas87, DJ3, MAB1970, MAB1971, TL500, HumanThing, Doc United States, Twinik, Afriools, Annalissette, Lawman8''' are likely to be the same user. ''']''' 03:00, 9 May 2007 (UTC)
::I'm confused... We've already confirmed the above as sockpuppets of Dereks1x, some by RFCU, others via Dereks1x's habit of coming back to complain about admin abuse after his latest sock has been identified. Lately he's been making edits from different IP addresses, so we were hoping to get some blocks on the underlying IP addresses if possible. --] <sup>]</sup> 21:06, 9 May 2007 (UTC)
:::Sorry, I was thinking this was in a different section. Looking into it now. ''']''' 23:27, 9 May 2007 (UTC)

::::{{takenote}} I've blocked several vandalism only ranges used heavily by this sock farm. ''']''' 23:58, 9 May 2007 (UTC)
:::::Excellent. Thanks! --] <sup>]</sup> 00:00, 10 May 2007 (UTC)

===Lewisskinner===
*{{checkuser|Lewisskinner}}

I suspect that the above user, with whom I have had a number of heated discussions, is the person behind the ''very'' abusive edits made by the following:

*{{checkuser|91.105.177.163}}
*{{checkuser|91.105.179.105}}
*{{checkuser|91.105.179.124}}
*{{checkuser|91.105.170.98}}

to my user- and talk- pages.

Note that the times of the anon edits coincide closely with the former's activity on Wikipeida, and that the IPs resolve to an ISP hub in Mansfield, geographically close (in telecoms terms) to the user's stated home of Sheffield.

Other inappropriate edits were made by:

*{{checkuser|143.167.168.29}} (see which referred to me; and and disruption to {{tl|Infobox UK place}}, which undid my addition of a microformat to that template, on spurious grounds)

which resolves to the University of Sheffield, his apparent place of study.

Code: '''A'''. Thank you. ] 18:16, 2 May 2007 (UTC)

:{{confirmed}} - all of those and some more. He's the only editor from ''any'' of said IPs, and the personal attacks from the IPs match. (This is using the IP as a second identity to evade loss of reputation to his main account, so is sockpuppeting.) Other username (''barely'' possible it's a separate person, but not one who's made a good edit worth saving them for): ] (moved ] to Arsehole of the World: "it's being renamed"). Other IPs used in the last month or so: 81.77.130.11 (e.g. , ), 84.67.56.5 (e.g. , , , - I'm sure we can all be very proud of him managing that last), 91.105.152.10 (e.g. , ), 91.105.184.247 (), 91.105.128.20 (). He does appear to work very hard at editing stuff and seem to enjoy working on Misplaced Pages, but I hope he'll have a good think and be a bit better behaved about it in future - ] 22:34, 2 May 2007 (UTC)

::And now {{checkuser|91.105.171.175}}. ] 22:07, 3 May 2007 (UTC)
:::{{likely}} Appears to be the same person again, similar to the above. ''']''' 23:55, 8 May 2007 (UTC)


===Mr oompapa et al. ===
* {{checkuser|Wikifalls to Oompapa}} <small>—The preceding ] comment was added by ] (] • ]) 19:16, 17 April 2007 (UTC).</small><!-- HagermanBot Auto-Unsigned -->
* {{checkuser|Lord Oompapa}} <small>—The preceding ] comment was added by ] (] • ]) 18:53, 17 April 2007 (UTC).</small><!-- HagermanBot Auto-Unsigned -->
* {{checkuser|Oompapa Oompapa Oompapa}}
* {{checkuser|Oompapa buddha}}
* {{checkuser|Oompapa drinking beer}}
* {{checkuser|Oompapa in a spaceship!}}
* {{checkuser|Oompapa in space}}
* {{checkuser|Oompapa is at the door for a bedtime story}}
* {{checkuser|Oompapa on Television!}}
* {{checkuser|Oompapa on a motorbike}}
* {{checkuser|Oompapa on a mountain}}
* {{checkuser|Oompapa strikes back again!}}
* {{checkuser|Oompapa strikes back!}}
* {{checkuser|Oompapa the buddha}}
* {{checkuser|Oompapa Oompapa}}
* {{checkuser|Jimbo Oompapa}}
* {{checkuser|Here's Oompapa!}}
* {{checkuser|Fat Oompapa}}
* {{checkuser|Dadadada its Oompapa!!}}
* {{checkuser|Zum Gala Gala}}
* {{checkuser|Zum Gali Gali Gali}}
* {{checkuser|Gaaliea gali}}
* {{checkuser|Buddha eating curry}}
* {{checkuser|The rumbling buddha}}
* {{checkuser|I'm the Buddha round here}}
* {{checkuser|Oompapa Oompapa Oompapa Oompapa Oompapa Oompapa Oompapa Oompapa}}
* {{checkuser|Darkness of meta}}
* {{checkuser|Buddha rage}}
* {{checkuser|Gaaliea gali}}
* {{checkuser|Mr oompapa on the moon}}
* {{checkuser|Mr oompapa on mars!}}
* {{checkuser|Mr oompapa on the edge of the Adromeda galaxy}}
* {{checkuser|Mr oompapa on wheeels!}}
* {{checkuser|Count Oompapa}}
* {{checkuser|Darkness of Oompapa}}
* {{checkuser|Darkness of Buddha}}
* {{checkuser|Oompapa shark}}
* {{checkuser|Don't feed the oompapas}}
* {{checkuser|Oompapa is in Hollywood cos he's famous}}
* {{checkuser|Starting the war of Metabane}}
* {{checkuser|The darkness of metabane}}
* {{checkuser|Sneaky sockpuppet of a fairly obvious origin}} - ?
* {{checkuser|Sneaky sock of a fairly obvious origin}} - ?
* {{checkuser|Oompapa, ruler of the universe}}
* {{checkuser|The empire is rising}}
* {{checkuser|Behold. Empire of the budda}}
* {{checkuser|Hahahahahaah getting tired}}

* '''Code letter: A'''
This editor has an modem he keeps resetting and creating abusive accounts. He has created all of these today and is creating them generally every 5 minutes or so. He knows he is gaming the system. I am requestng a check to find an underlying IP range and block it temporarily to prevent this editor from gaming the system. ] 16:02, 17 April 2007 (UTC)
** I found {{checkuser|The bedtime story man}} removing this request saying oompapa had given up and was no longer active. I have reason to believe that he may also be a sock of Mr Oompapa. ] 16:15, 17 April 2007 (UTC)
**I am adding new ones as they come. ] 16:19, 17 April 2007 (UTC)
**This user has now been linked to some pretty serious privacy violations as mentioned at . ] 20:24, 17 April 2007 (UTC)
**I have also added some new ones. Darkness of meta send out spam emails to many administrators, it is believed that this was used to gather personal information from email addresses. ] 20:26, 17 April 2007 (UTC)

Note: The ] sent out all these emails to possibly nearlly every single user who uses a wiki-email on this site (Including me which I was emailed one on April 4th). Whilst it may be for personal information. The email seemed to be promoting some kind of Conspiracy about Misplaced Pages, and notifying the user who's personal information was used. They stated they '''Did not'''. Reply to the email so somehow the personal information has by retrieved in a different place completely. I personally think the ] should be banned for this. ] 21:20, 17 April 2007 (UTC)

:I've found this new account: {{checkuser|Mr oompapa on the moon}} - ] 16:21, 18 April 2007 (UTC)
::It was unblocked so I blocked, I'll add to the list ] 16:26, 18 April 2007 (UTC)
::He started again today, i am adding more. I would like to find an underlying IP range, or at least the ISP if possible. ] 16:49, 18 April 2007 (UTC)

'''Comment''': Based on the ANI discussion I strongly recommend priority attention for this request. Can someone ding the appropriate channel or something! ] 23:38, 18 April 2007 (UTC)
::<small> That was meant to be a ? rather than a !, sorry. Editing on a Blackberry on a moving train will do that. ] 00:15, 19 April 2007 (UTC) </small>
I'm working on this now. ] ] 00:09, 19 April 2007 (UTC)

Range block not possible. Sorry. ] ] 00:33, 19 April 2007 (UTC)
:Can you get an ISP? ] 03:55, 19 April 2007 (UTC)

Another one, if it helps. ] 12:30, 21 April 2007 (UTC)


Racist and anti-semitic abuse, and now death threats, appears to have skirted the block on {{user|The cheapo}}, all apparent named acounts blocked. '''<span style="font-family:Arial;">] <sub><small>]</small></sub></span>''' 22:08, 11 January 2009 (UTC)
* {{checkuser|Oompapa on a boat!}}
* {{checkuser|Aliens rule Mediawiki}}
* {{checkuser|Rumbling robo buddha}}
::Gah, range blocks are still useless here, IPs are on several huge ranges with traffic. ''']''' 21:16, 9 May 2007 (UTC)


{{confirmed}} that {{vandal|TC Richardson}} and {{vandal|Mel jingles}} are this user. There are other accounts (the vast majority blocked) who might be related, but the evidence is inconclusive. ]</nowiki>]] <sup>]</sup> 18:24, 12 January 2009 (UTC)


===And more ] ===
===Nerdinator and related socks===
*{{checkuser|Nerdinator}}
*{{checkuser|AnotherDinosaurGuy}}
*{{checkuser|Timmy mctimmy}}
*{{checkuser|DaN PiCkFoRd}}
*{{checkuser|JustAnotherGuy01}}
*{{checkuser|Winkywinky}}
*{{checkuser|Kartoffelsalad}}
*{{checkuser|Frawetfva}}
*{{checkuser|Darn you indon}}
*{{checkuser|Big Boomba WikiVandal}}


* {{checkuser|Roliecoaster}}
Multiple sock-puppet accounts which all attack ] for reverting the vandalism they are causing. As shown here they have used at least 12 accounts for vandalism. (] 10:47, 11 May 2007 (UTC))
* {{checkuser|Jurk4stalyn}}
:{{takenote}} I've blocked the ranges and some accounts here. ''']''' 14:55, 11 May 2007 (UTC)
* {{checkuser|Stallynsshlong}}


More trademark vandalism ] (]) 17:51, 11 January 2009 (UTC)
===JB196===
*{{checkuser|Golf Crazy}}
*{{checkuser|Slumphitter}}


{{IPblock}} on 91.121.181.79, an apparent open proxy. No sleepers. ]</nowiki>]] <sup>]</sup> 18:16, 12 January 2009 (UTC)
Created and five minutes later first edits are to the talk page of Burntsauce following the same format as previous socks. Probably an open proxy. &ndash;&ndash; ''']'''<sup><small>(])</small></sup> 23:06, 10 May 2007 (UTC)
*Done. ] ] 00:13, 11 May 2007 (UTC)
:*Another added, edits are JB196esque. <font face="Verdana">]<sub>'']''</sub></font> 04:15, 11 May 2007 (UTC)
::{{takenote}} I've blocked two more open proxies. ''']''' 05:35, 11 May 2007 (UTC)


===] again ===
===JB196===
*{{checkuser|Slumphitter}}


* {{checkuser|Jailtraitorrance}}
Previously editing using an open proxy which was blocked, I neglected to get the account blocked due to his use of throwaway accounts, but he's still editing using it which makes me think he's now using a different open proxy. <font face="Verdana">]<sub>'']''</sub></font> 02:07, 12 May 2007 (UTC)
:{{IPblock}} Two of 'em. --]<sup><small>]</small></sup> 02:48, 12 May 2007 (UTC)


Continued disruption from this vandal
===Bobabobabo===
*{{checkuser|Yugiohgxfan}}
Banned user on proxy IPs. Search and destroy mission (and dig up other socks).—] (]) 06:34, 13 May 2007 (UTC)


] (]) 11:00, 11 January 2009 (UTC)
{{IPblock}} ''']''' 15:01, 13 May 2007 (UTC)
===JB196===
*{{checkuser|Flatspace20}}
*{{checkuser|Eightball440}} (new)


First edit was to nominate an independent wrestler for deletion, likely to be JB196 back with a new open proxy. <font face="Verdana">]<sub>'']''</sub></font> 21:39, 13 May 2007 (UTC) {{IPblock}} 67.222.139.157 blocked for three years as an apparent open proxy. No apparent sleepers. ]</nowiki>]] <sup>]</sup> 11:33, 11 January 2009 (UTC)
:{{IPblock}}. Yup. --]<sup><small>]</small></sup> 22:46, 13 May 2007 (UTC)
::Added another, {{checkuser|Eightball440}}, as his previous account, Pharoahski, was smacked when one of his open proxies was banned. This new account was created and then did nothing but edit JB's latest pet project, ]. &ndash;&ndash; ''']'''<sup><small>(])</small></sup> 06:07, 14 May 2007 (UTC)
:::Yah. {{IPblock}}. Fuller list from Eightball search:
:#{{checkuser|Bearhug Lewis}}
:#{{checkuser|Cabel Starcraft}}
:#{{checkuser|Cat attack quack}}
:#{{checkuser|Eightball440}}
:#{{checkuser|Flasherlr}}
:#{{checkuser|Flat Top Bully}}
:#{{checkuser|Flatreef}}
:#{{checkuser|Flippage9}}
:#{{checkuser|Funksterjig}}
:#{{checkuser|Hashbeefcorn1}}
:#{{checkuser|Hirschman A}}
:#{{checkuser|Howlerah}}
:#{{checkuser|Insipid Dr}}
:#{{checkuser|Organiccereal}}
:#{{checkuser|Out of control Smurf}}
:#{{checkuser|Potato rhino}}
:#{{checkuser|Shavenhead2}}
:#{{checkuser|SkalyMartian}}
:#{{checkuser|Skiier43noogie}}
:#{{checkuser|Slumphitter}}
:#{{checkuser|Wet Fish Handshake}}
:]<sup><small>]</small></sup> 14:38, 14 May 2007 (UTC)

Latest revision as of 10:50, 14 April 2022

Checkuser pages
Requests: Unlisted • IP check • On hold
Archives: Main • Older • IP checks • Unsorted
Clerk pages
Clerk Overview • Noticeboard • Procedures
Shortcut
This page can be quickly accessed through:
WP:RFCU/IP/A

Requests for IP check

This page lists requests to identify and block the IP addresses behind attack and vandal accounts that were previously listed at Requests for checkuser/IP check. After the account has been reported as blocked or declined by the checkusers, the report is moved here for seven days (most recent sections at the bottom), after which it is deleted. Because there is no attempt to establish a relationship with a puppetmaster account, no separate archive is kept, other than the page history.

Clerks: when clearing this page, please make note of the names of the sections you are deleting in the edit summary.


User:The cheapo

Racist and anti-semitic abuse, and now death threats, appears to have skirted the block on The cheapo (talk · contribs), all apparent named acounts blocked. Acroterion (talk) 22:08, 11 January 2009 (UTC)

 Confirmed that TC Richardson (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) and Mel jingles (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) are this user. There are other accounts (the vast majority blocked) who might be related, but the evidence is inconclusive. ] 18:24, 12 January 2009 (UTC)

And more User:Runtshit

More trademark vandalism RolandR (talk) 17:51, 11 January 2009 (UTC)

 IP blocked on 91.121.181.79, an apparent open proxy. No sleepers. ] 18:16, 12 January 2009 (UTC)

User:Runtshit again

Continued disruption from this vandal

RolandR (talk) 11:00, 11 January 2009 (UTC)

 IP blocked 67.222.139.157 blocked for three years as an apparent open proxy. No apparent sleepers. ] 11:33, 11 January 2009 (UTC)

Category: