Jump to content

Wikipedia:Requests for checkuser/IP check: Difference between revisions

Add links
From Wikipedia, the free encyclopedia
Browse history interactively
← Previous editNext edit →
Content deleted Content added
VisualWikitext
dear god man, at least have the courage to put your name to your convictions.
Line 30: Line 30:
::*{{checkuser|Spielberg2002}}
::*{{checkuser|Spielberg2002}}
::*{{checkuser|The master of puppets}}
::*{{checkuser|The master of puppets}}
-{{unsigned|87.194.192.117}} 17:40, March 29, 2006


===Hinomaru===
===Hinomaru===

Revision as of 18:28, 29 March 2007

Checkuser pages
Requests: Unlisted • IP check • On hold
Archives: Main • Older • IP checks • Unsorted
Clerk pages
Clerk Overview • Noticeboard • Procedures
Shortcut
This page can be quickly accessed through:
WP:RFCU/IP
IP

Requests for IP check

  • Vandal and attack accounts may be listed here for the purpose identifying and blocking the underlying IP address or open proxy. Requests to confirm sockpuppets of known users should be listed in the sockpuppet section above.
  • If you already know the IP address of the suspected open proxy, list it at Wikipedia:Open Proxies instead.
  • Use === Subsections ===, do not create subpages.
  • List user names using the {{checkuser|username}} template. Add new reports to the top of the section.
  • Requests may be acted on or declined according to the discretion of the checkuser admins. Responses will be noted here.
  • Answered requests will be moved to Wikipedia:Requests for checkuser/IP check/Archive for 7 days, after which they will be deleted. No separate archive (other than the page history) will be maintained.

TJ Spike sock mini-farm

This guy just won't go away. He keep creating sockpuppets, claiming that User:TJ Spyke is a moron and edit warring on articles. Even with ACB and autoblock on he just keeps making more socks. Please fry him. --Deskana (talk) 23:12, 28 March 2007 (UTC)[reply]

Would appreciate checkuser confirmation that these accounts are related, though I arrived at this conclusion based on the edit histories (particularly, insertion of inappropriate links, editing the same articles, similar personal attacks against the same users, etc.) independently already. --Yamla 14:03, 29 March 2007 (UTC)[reply]
These 2 users are also exhibiting the same edit patterns as those above, they look like throwaway accounts:

-— Preceding unsigned comment added by 87.194.192.117 (talk • contribs) 17:40, March 29, 2006

Hinomaru

The user Hinomaru has constantly been creating sock puppet accounts since October 2006 to continue vandalise Wikipedia. There are currently 111 socks:

    • Code letter: A

I've been chasing after his socks since a month or so and have observed his strongly malicious technique: he creates a bunch of sock accounts, and begins using them only a few weeks after. His vandalism concerns mainly Asian non-Japanese related article. It consists in deleting a fragment of sentence in the articles while hiding the entire page's contents in comment tags, and putting a picture of the Japanese flag (hinomaru) at the top instead. This is especially malicious because if people don't undo the edit correctly (i.e. if they just remove the picture and the comment tag instead of reverting), there would still be a fragment of sentence missing in the middle of the article.

When his vandalism is noticed and his accounts blocked, he doesn't lose any time because he always has a few sock accounts created weeks before: he just continues to vandalise with these sock accounts while his others are being blocked.

This is the same pattern since (at least) October 2006; Hinomaru has created 111 socks and shows no sign of getting tired. Something has to be done, please! Kariteh 14:35, 28 March 2007 (UTC)[reply]

Turok 1

Numbered Turok accounts are all sock puppets in addition to the names below:

Massive and still continuing sockwar. He gets banned, he's back in five minutes with a new name and vandalising the same stuff as before.

information Note: I've added Turok 29 to the above list. User keeps rapidly creating sockpuppets. Michaelas10Respect my authoritah 18:09, 25 March 2007 (UTC)[reply]
information Note: Added Turoks 30-33. More sockpuppets still incoming. AOL IP usage suspected as per User_talk:Persian_Poet_Gal/Archive6#More_Turok_stuff. —210physicq (c) 22:26, 25 March 2007 (UTC)[reply]

Venki123


  • Code letter: A

Repeated vandalism of Mudaliar and Sengunthar articles over the past few months. I furnish some of the vandalised diffs beside the above ips/users. Venki123 (talk · contribs) has been constantly deleting and trashing heavily referenced sections. I suggest a block on the ips and this user. Could you check and say if any of the users are socket puppets of Venki123 (talk · contribs) or if any of the ips are related to Venki123 (talk · contribs)? Thanks. Mudaliar 04:18, 25 March 2007 (UTC)[reply]

 Clerk note: See also Wikipedia:Requests for checkuser/Case/Venki123. – Luna Santin (talk) 19:01, 27 March 2007 (UTC)[reply]

Burnsvillemike

The story starts here: Wikipedia:Articles for deletion/Mike_Satter where three (identical) deleted articles on Mike Satter were recreated. This disclosed a web of socks - see the text. The theme has been the injection of Satter into a wide range of law enforcement articles, replacement of images with ones of Satter, creation and recreation of copyright images (some of which have been hanging around on C:CSD for a long time awaiting deletion). Burnsvillemike (talk · contribs) has been blocked for a week here and most of the socks on that page were banned indefinitely. User:Seraphimblade is doing a great job. However, as you will see from User talk:Seraphimblade#User:Burnsvillemike the socks are multiplying faster than I can track them down. I think that some decisive action is needed on the IP(s} being used. Bridgeplayer 02:36, 23 March 2007 (UTC)[reply]

 Clerk note: Moved from Wikipedia:Request for checkuser/Case/Burnsvillemike. Real96 06:24, 23 March 2007 (UTC)[reply]

However whatever

User However whatever (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) is being very aggressive and miltant on BLP related issues on William Oefelein. To the point that others are routinely reverting him, and he is endless edit warring over the inclusion of specific words... he was also 3rr blocked, and has another 3rr report pending at this moment, on the heels of the last. As seen in his entire history here, he is a SPA for this one article. Similar matching edits were done weeks ago by Banana Republic (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log), as seen here and here and here. Baba gump (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) is the same again--matching edits, as seen in the full history here, and all three seem to have the identical vindictive bent towards Gwen Gale (talk · contribs) who has religiously tried to keep the lurid mess that is the Lisa Nowak and Oefelein story... compliant with common sense and our BLP rules. the user Baba gump does the same sorts of edits. I believe all three are one and the same. they push the same agenda at the Nowak/Oefelein articles, and all are ready to throw verbal punches at anyone that counters them in the same sort of language. Thanks, - Denny 04:18, 19 March 2007 (UTC)[reply]

All I can meaningfully add to that is he uses the same distinctive double dash (--) before all three user sigs. Gwen Gale 04:36, 19 March 2007 (UTC)[reply]
I agree that they seem to be the same user. Although to be fair about the dashes, that is what you get when you click on the signature button in the editor.--HarryHenryGebel 05:10, 19 March 2007 (UTC)[reply]
Ok, still, it's a common thread, along with the two word usernames, empty main userpages and so on... Gwen Gale 05:23, 19 March 2007 (UTC)[reply]
Gwen, I totally agree with you that they seem to be the same person based on all of the other evidence, I was just pointing out that the double dash is pretty common. --HarryHenryGebel 15:06, 19 March 2007 (UTC)[reply]
I knew that's what you meant, thanks. Meanwhile I was only "thinking aloud" there, mulling it all over after learning the sig button does that (haha!) :) Gwen Gale 15:16, 19 March 2007 (UTC)[reply]

Additional info, where However whatever inexplicably is linking back to a comment on Gwen's page, here, which was a response to this comment by Baba here. - Denny 04:50, 19 March 2007 (UTC)[reply]

 Clerk note: Moved from Wikipedia:Requests_for_checkuser/Case/However_whatever. Real96 05:05, 19 March 2007 (UTC)[reply]
Can I ask why? Just curious what procedure/info shows it to be an IP issue instead of a regular CU. - Denny 05:10, 19 March 2007 (UTC)[reply]
Per A, IPs checks must be listed below in the IP section. Cheers! Real96
I guess cuz they look for the same IP and block it if there's a match? Gwen Gale 05:23, 19 March 2007 (UTC)[reply]
Got it, sorry for being dense last night. - Denny 12:05, 19 March 2007 (UTC)[reply]

Eternal Pinkish

Hoping I could get some help on this one. This particular troll has been a very persistent problem, for over a month or more -- issuing death threats and harassing users. Tried mass protection, tried blocking. Have already rangeblocked BT-AOL's 81.145.x.x addresses as a bit of a last ditch effort (not quite a /16, but looks like one at first glance). ISP hasn't yet been responsive to abuse reports. This one cropped up, today -- are they working out of the 81.145.x.xs range, still? Or some other address? If so, any sleepers to worry about? Supporting diffs: [19] [20] [21] [22] [23] [24] (and plenty more if you need 'em). Thanks in advance for any support you may be able to provide. – Luna Santin (talk) 01:38, 14 March 2007 (UTC)[reply]

I'd like to add some more:

displaying the same behaviour, and

-- zzuuzz(talk) 15:01, 16 March 2007 (UTC)[reply]

Darkhero seems to be Eternal Pink's real-life friend, so it's not impossible. And Pink himself edits in a weirdly consistent pattern, in between the edits of the various vandals. I am hoping this is coincidence... --Masamage 16:39, 16 March 2007 (UTC)[reply]
One more. – Luna Santin (talk) 19:00, 21 March 2007 (UTC)[reply]
Another rangeblock was slowing them down, but this one popped up today. – Luna Santin (talk) 18:32, 22 March 2007 (UTC)[reply]
This one still needs to be blocked. --Masamage 21:43, 23 March 2007 (UTC)[reply]

We need to sort this out as soon as possible. User:Eternal Pink is talking about leaving because of it. --Masamage 00:40, 25 March 2007 (UTC)[reply]

Not sure it's the same guy, but since other Darkheros are listed above... --Masamage 17:34, 26 March 2007 (UTC)[reply]
I dont know if it is him (he wasnt in college today) but he dosn't know how to sign a page let alone rederct one ♥Eternal Pink-Ready to fight for love and grace♥ 17:55, 26 March 2007 (UTC)[reply]

64.151.173.168

Very strange edit for a first-time edit. Likely sockpuppet or meatpuppet of Terminator III who has a host of other sockpuppets. It might be difficult to tell, but let's see.. --Hamsacharya dan 23:27, 10 March 2007 (UTC)[reply]

 Clerk note: The account, Terminator III (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) made its most recent edit on 24 Jan 2007, which is too old to check.[25] --Michael Billington (talk • contribs) 00:02, 11 March 2007 (UTC)[reply]
Can you try these two accounts just added? Hamsacharya duh and Akal Purakh. Thanks. --Hamsacharya dan 00:34, 11 March 2007 (UTC)[reply]
 Clerk note: Hamsacharya duh's last edit was even earlier, (Jan 19). Akal Purakh edited most recently on Jan 30, which is still too far back. (Anything before Feb 10 or so is too old) Note further, that CheckUser works from the recent changes table in the databasem, which (as a general guide) only goes back 30 days. (more detailed info at m:Help:CheckUser#How it works) --Michael Billington (talk • contribs) 07:20, 11 March 2007 (UTC)[reply]
 Clerk note: Moved from Wikipedia:Requests for checkuser/Case/64.151.173.168. PTO 02:06, 13 March 2007 (UTC)[reply]

Quebec Vandal

Vandal with a grudge

Confirmed accounts:

Suspected accounts (replacing images on various pages with one of a gorilla):

Long-term vandal. See this page for a list of accounts discovered so far (over 60) and more information. - Mike Rosoft 13:59, 11 March 2007 (UTC)[reply]

 Clerk note: Copied from Wikipedia:Requests for checkuser/Case/Vandal with a grudge. --Michael Billington (talk • contribs) 01:55, 12 March 2007 (UTC)[reply]

Older accounts (from about a month ago) include:

Mike Rosoft 09:46, 12 March 2007 (UTC) From my talk page:[reply]

84.169.195.10 (talk+ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs · CheckUser (log)) has recently been blocked for some similar vandalism (putting a picture of a monkey or gorilla in pages related to African Americans). Not sure if it's a sock, an imitator, or a coincidence. Natalie 01:56, 12 March 2007 (UTC)[reply]

Adishankaracharya

This is a motion for reconsideration. Users' agenda are identical as per 1, 2, 3. If it is the same person then IP should be blocked to avoid registration of more user names. Thank you! Armando Barrera 00:09, 12 March 2007 (UTC)[reply]

 Clerk note: Copied from Wikipedia:Requests for checkuser/Case/Adishankaracharya. PTO 02:25, 12 March 2007 (UTC)[reply]

512theking

Self-confessed vandal socks. Harassing JohnnyAlbert10. --Slowking Man 01:22, 10 March 2007 (UTC)[reply]

Comment: The situation seems to be a bit more complex; see my Talk page. --Slowking Man 02:54, 10 March 2007 (UTC)[reply]

Paradocks

Obvious vandal socks, admitted at Wikipedia:Requests for adminship/Paradocks2 (see the deleted revisions). --Slowking Man 00:31, 10 March 2007 (UTC)[reply]

Northwich Victoria F.C. vandal

Hi guys,

Could someone please identify the underlying network our vandal puppeteer is operating from? He's been hitting the article on a daily basis with a new sock every day since March 13. I believe he operates in the 80.47.0.0/16 range -- probably a dial-up range belonging to Tiscali. --  Netsnipe  ►  14:31, 21 March 2007 (UTC)[reply]

19:44, 25 March 2007 (UTC):

Two more so far today (26/3/07) :
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/IP_check&oldid=118836727"