Misplaced Pages

:Requests for checkuser/IP check/Archive - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Requests for checkuser | IP check

This is an old revision of this page, as edited by Luk (talk | contribs) at 14:51, 14 May 2007 (rm all cases older than 7 days). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Revision as of 14:51, 14 May 2007 by Luk (talk | contribs) (rm all cases older than 7 days)(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)
Checkuser pages
Requests: Unlisted • IP check • On hold
Archives: Main • Older • IP checks • Unsorted
Clerk pages
Clerk Overview • Noticeboard • Procedures
Shortcut
This page can be quickly accessed through:
WP:RFCU/IP/A

Requests for IP check

This page lists requests to identify and block the IP addresses behind attack and vandal accounts that were previously listed at Requests for checkuser/IP check. After the account has been reported as blocked or declined by the checkusers, the report is moved here for seven days (most recent sections at the bottom), after which it is deleted. Because there is no attempt to establish a relationship with a puppetmaster account, no separate archive is kept, other than the page history.


Quebec vandal

Only a few edits came from that specific IP. The vandal is not particularly isolated from any of the other traffic that comes through the city. If this is a recurring vandal, their IP must rotate, and per the above, I'd avoid a range block for now. Voice-of-All 04:43, 9 May 2007 (UTC)

I checked the range. Beyond the vandal, I found two legit users, a little IP vandalism (one IP vandalizing one article with obvious vandalism which was later reverted), and one account that had been registered but never edited. I don't see any problem with this range. Raul654 18:53, 9 May 2007 (UTC)

Right, to be more clear, when I said "isolated", I meant that the the IPs used are hard to distinguish from the other users coming through there, which is why I'd avoid a block, as they are non-vandals (save that one). Voice-of-All 19:10, 9 May 2007 (UTC)
A little odd for him not to have registered a ton of socks right away. Thanks for the quick result! -Royalguard11(Talk·Review Me!) 22:29, 9 May 2007 (UTC)

Possible zombies

The first request is to check to see if BuickCenturyDriver might actually be right that he did not abuse AndyZ's account because his machine may have been zombified per WP:AGF. The second request is to see if KnowledgeOfSelf's computer was zombified by the attacker who used it to upload goatse.cx images. If this one is zombified, we will know not to resysop that account until the computer is cleaned. If you cannot check to see if they are zombies, please send the IPs to Misplaced Pages:WikiProject on open proxies. Jesse Viviano 02:06, 9 May 2007 (UTC)

no Declined - Brion has already OK'd the account as clean. Raul654 18:54, 9 May 2007 (UTC)

JB196

One off account used in conjunction with JB196 puppet Funksterjig (talk · contribs), underlying open proxy needs blocking. –– Lid 01:09, 9 May 2007 (UTC)

Red X Unrelated Does not appear to be an open proxy at this time. Voice-of-All 04:22, 9 May 2007 (UTC)

TomSkillingJr.

Code A

I believe the following accounts share one or two IPs:

All of them soleley focus on discrediting Cory Williams, a notable YouTube user whose article was recently salted per Williams's request through WP:OTRS, due to harassment from WP editors outside of Misplaced Pages. Previous to Williams's complaint, these accounts made relentless and what I would characterize as stubborn attempts at compromising well sourced articles with endless templates; lengthy talk page diatribes; and stuffed votes at Misplaced Pages:Articles_for_deletion/Cory_Williams, creating a false impression of genuine debate. Their activities extend to related article The_FIZZ. I cannot say for certain the puppet master(s) was(were) responsible for Williams's harassment, but their concerted actions here render that possibility likely.

My suspicions about sock puppetry were particularly raised by this: http://en.wikipedia.org/search/?title=Wikipedia_talk:Deletion_review&oldid=125702519 Scroll to the bottom to find an abortive attempt at Williams's deletion by what look to be three SPAs that regularly appear on Talk:Cory Williams. They posted within six minutes of each other, and I can't fathom that 3 separate users made the same mistake of posting deletion arguments on a discussion page. Is there an IP to block? Ichormosquito 21:34, 6 May 2007 (UTC)

 Unlikely Only faint geographic connections exists, though the edits do warrant keeping an eye out perhaps. Voice-of-All 04:08, 9 May 2007 (UTC)

Dereks1x

This user seems intent upon causing disruption in the Barack Obama and John Edwards page and is continuously creating sockpuppets in order to get around their community ban. The editor has also made edits from several IP addresses from various parts of the US which may suggest open proxy use. 64.3.192.123 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) was used to "accidentally" edit on Dereks1x's checkuser page, 68.15.20.63 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) was used to "prove" that Sample1234 was not Dereks1x, and we know of an IP address from the Seattle Public Library system that has been used.--Bobblehead 19:28, 4 May 2007 (UTC)

 Confirmed Users Atlas87, DJ3, MAB1970, MAB1971, TL500, HumanThing, Doc United States, Twinik, Afriools, Annalissette, Lawman8 are likely to be the same user. Voice-of-All 03:00, 9 May 2007 (UTC)
I'm confused... We've already confirmed the above as sockpuppets of Dereks1x, some by RFCU, others via Dereks1x's habit of coming back to complain about admin abuse after his latest sock has been identified. Lately he's been making edits from different IP addresses, so we were hoping to get some blocks on the underlying IP addresses if possible. --Bobblehead 21:06, 9 May 2007 (UTC)
Sorry, I was thinking this was in a different section. Looking into it now. Voice-of-All 23:27, 9 May 2007 (UTC)
information Note: I've blocked several vandalism only ranges used heavily by this sock farm. Voice-of-All 23:58, 9 May 2007 (UTC)
Excellent. Thanks! --Bobblehead 00:00, 10 May 2007 (UTC)

Lewisskinner

I suspect that the above user, with whom I have had a number of heated discussions, is the person behind the very abusive edits made by the following:

to my user- and talk- pages.

Note that the times of the anon edits coincide closely with the former's activity on Wikipeida, and that the IPs resolve to an ISP hub in Mansfield, geographically close (in telecoms terms) to the user's stated home of Sheffield.

Other inappropriate edits were made by:

which resolves to the University of Sheffield, his apparent place of study.

Code: A. Thank you. Andy Mabbett 18:16, 2 May 2007 (UTC)

 Confirmed - all of those and some more. He's the only editor from any of said IPs, and the personal attacks from the IPs match. (This is using the IP as a second identity to evade loss of reputation to his main account, so is sockpuppeting.) Other username (barely possible it's a separate person, but not one who's made a good edit worth saving them for): Jen Kettle (moved Leeds to Arsehole of the World: "it's being renamed"). Other IPs used in the last month or so: 81.77.130.11 (e.g. , ), 84.67.56.5 (e.g. , , , - I'm sure we can all be very proud of him managing that last), 91.105.152.10 (e.g. , ), 91.105.184.247 (), 91.105.128.20 (). He does appear to work very hard at editing stuff and seem to enjoy working on Misplaced Pages, but I hope he'll have a good think and be a bit better behaved about it in future - David Gerard 22:34, 2 May 2007 (UTC)
And now 91.105.171.175 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki). Andy Mabbett 22:07, 3 May 2007 (UTC)
 Likely Appears to be the same person again, similar to the above. Voice-of-All 23:55, 8 May 2007 (UTC)


Mr oompapa et al.

  • Code letter: A

This editor has an modem he keeps resetting and creating abusive accounts. He has created all of these today and is creating them generally every 5 minutes or so. He knows he is gaming the system. I am requestng a check to find an underlying IP range and block it temporarily to prevent this editor from gaming the system. -- Chrislk02 (Chris Kreider) 16:02, 17 April 2007 (UTC)

Note: The User:Darkness of meta sent out all these emails to possibly nearlly every single user who uses a wiki-email on this site (Including me which I was emailed one on April 4th). Whilst it may be for personal information. The email seemed to be promoting some kind of Conspiracy about Misplaced Pages, and notifying the user who's personal information was used. They stated they Did not. Reply to the email so somehow the personal information has by retrieved in a different place completely. I personally think the Mr oompapa should be banned for this. Retiono Virginian 21:20, 17 April 2007 (UTC)

I've found this new account: Mr oompapa on the moon (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) - Kariteh 16:21, 18 April 2007 (UTC)
It was unblocked so I blocked, I'll add to the list Ryan Postlethwaite 16:26, 18 April 2007 (UTC)
He started again today, i am adding more. I would like to find an underlying IP range, or at least the ISP if possible. -- Chrislk02 (Chris Kreider) 16:49, 18 April 2007 (UTC)

Comment: Based on the ANI discussion I strongly recommend priority attention for this request. Can someone ding the appropriate channel or something! Newyorkbrad 23:38, 18 April 2007 (UTC)

That was meant to be a ? rather than a !, sorry. Editing on a Blackberry on a moving train will do that. Newyorkbrad 00:15, 19 April 2007 (UTC)

I'm working on this now. Mackensen (talk) 00:09, 19 April 2007 (UTC)

Range block not possible. Sorry. Mackensen (talk) 00:33, 19 April 2007 (UTC)

Can you get an ISP? -- Chrislk02 (Chris Kreider) 03:55, 19 April 2007 (UTC)

Another one, if it helps. MER-C 12:30, 21 April 2007 (UTC)

Gah, range blocks are still useless here, IPs are on several huge ranges with traffic. Voice-of-All 21:16, 9 May 2007 (UTC)


Nerdinator and related socks

Multiple sock-puppet accounts which all attack User:Indon for reverting the vandalism they are causing. As shown here they have used at least 12 accounts for vandalism. (Caniago 10:47, 11 May 2007 (UTC))

information Note: I've blocked the ranges and some accounts here. Voice-of-All 14:55, 11 May 2007 (UTC)

JB196

Created and five minutes later first edits are to the talk page of Burntsauce following the same format as previous socks. Probably an open proxy. –– Lid 23:06, 10 May 2007 (UTC)

information Note: I've blocked two more open proxies. Voice-of-All 05:35, 11 May 2007 (UTC)

JB196

Previously editing using an open proxy which was blocked, I neglected to get the account blocked due to his use of throwaway accounts, but he's still editing using it which makes me think he's now using a different open proxy. One Night In Hackney303 02:07, 12 May 2007 (UTC)

 IP blocked Two of 'em. --jpgordon 02:48, 12 May 2007 (UTC)

Bobabobabo

Banned user on proxy IPs. Search and destroy mission (and dig up other socks).—Ryūlóng (竜龍) 06:34, 13 May 2007 (UTC)

 IP blocked Voice-of-All 15:01, 13 May 2007 (UTC)

JB196

First edit was to nominate an independent wrestler for deletion, likely to be JB196 back with a new open proxy. One Night In Hackney303 21:39, 13 May 2007 (UTC)

 IP blocked. Yup. --jpgordon 22:46, 13 May 2007 (UTC)
Added another, Eightball440 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki), as his previous account, Pharoahski, was smacked when one of his open proxies was banned. This new account was created and then did nothing but edit JB's latest pet project, Steve Rizzono. –– Lid 06:07, 14 May 2007 (UTC)
Yah.  IP blocked. Fuller list from Eightball search:
  1. Bearhug Lewis (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  2. Cabel Starcraft (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  3. Cat attack quack (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  4. Eightball440 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  5. Flasherlr (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  6. Flat Top Bully (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  7. Flatreef (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  8. Flippage9 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  9. Funksterjig (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  10. Hashbeefcorn1 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  11. Hirschman A (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  12. Howlerah (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  13. Insipid Dr (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  14. Organiccereal (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  15. Out of control Smurf (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  16. Potato rhino (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  17. Shavenhead2 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  18. SkalyMartian (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  19. Skiier43noogie (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  20. Slumphitter (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  21. Wet Fish Handshake (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
jpgordon 14:38, 14 May 2007 (UTC)
Category: