Wikipedia:Requests for checkuser/IP check/Archive: Difference between revisions

Content deleted Content added
Luna Santin (talk | contribs)
old cases to archive
Luna Santin (talk | contribs)
Archiving.
Line 12:
<!-- Old requests start below this line -->
 
===Random username vandal===
*{{checkuser|2jr923jf9fj29fjj98}}
*{{checkuser |CJF2F2NF29J}}
*{{checkuser |19838j819j91}}
*{{checkuser |J2138r9j98f392j}}
*{{checkuser |Fj2fn29fk29k9}}
*{{checkuser |92j29f2jf293f29j}}
*{{checkuser |Fj9fj29fj29ff89}}
*{{checkuser |S19rjf9fj19ff91j}}
*{{checkuser |F9gj329239j2j923gj}}
 
=== TWINKLE abuse vandals ===
The random username vandal goes on template tagging sprees. Hopefully this is a one off incident, but I'll leave this here in case problems continue. If they do, hopefully the underlying range is small. [[User:Spellcast|Spellcast]] ([[User talk:Spellcast|talk]]) 17:07, 5 August 2008 (UTC)
*{{checkuser|2jr923jf9fj29fjj98Cyanoa Crylate}}
*{{checkuser |F9gj329239j2j923gjI didn't push her}}
*{{checkuser |CJF2F2NF29JHochitup}}
* {{checkuser|SupYiplop budsstick 954stop}}
 
Identical rapid-fire vandalism. '''''<font color="#FF0000">[[User:Hut 8.5|Hut 8.5]]</font>''''' 19:00, 18 August 2008 (UTC)
*Home and work or school. Work/school might be range blockable but home probably is not. [[User talk:Thatcher|Thatcher]] 17:24, 5 August 2008 (UTC)
:I've added User:Yiplop_stick_stop who was also already listed at [[Wikipedia:Requests for checkuser/Case/Avril Vandal]]. -- [[user:zzuuzz|zzuuzz]] <sup>[[user_talk:zzuuzz|(talk)]]</sup> 19:23, 18 August 2008 (UTC)
:{{IPblock}} [http://en.wikipedia.org/w/index.php?title=Special:Log&type=block&page=User%3A82.198.250.8 82.198.250.8] now hardblocked. The vast majority of the edits are from this address, with no good accounts. A bunch more are from TOR and from open proxies, now blocked. [[User:Sam Korn|Sam Korn]] <sup>[[User talk:Sam Korn|(smoddy)]]</sup> 20:28, 18 August 2008 (UTC)
 
=== [[User:Bjrothschild7|Bjrothschild7]] ===
===Check for collateral damage===
*{{checkipcheckuser|66.82.9.0/24Bjrothschild7}}
*{{checkuser |92j29f2jf293f29jDavidrockefeller}}
*{{checkip|69.19.14.0/24}}
*{{checkuser |19838j819j91Rockefeller2}}
For over a month now, I've been dealing with this persistent vandal who keeps adding bogus info into certain film/TV related articles, and he operates from those two ranges I've listed above. I have made an '''[[Wikipedia:ANI#Long_Term_IP_Vandalism|AN/I report]]''' about it, and an admin is afraid of blocking the ranges without knowing whether it will cause collateral damage or not. We would like a CheckUser to be done on these ranges to know if it will cause any collateral damage or not, and whether they should be blocked or not. --'''[[User:AAA!|<span style="color:red">AAA!</span>]]''' <small>([[User talk:AAA!|<span style="color:green">AAAA</span>]])</small> 20:53, 3 August 2008 (UTC)
*They are extremely active ranges. You could try blocking anonymous editors only, but allow account creation; if the vandal creates accounts that will help us track down his activities. A hard block would cause a lot of problems. [[User talk:Thatcher|Thatcher]] 21:03, 3 August 2008 (UTC)
 
* '''[[WP:RFCU#code letters|Code letter]]: A'''
:Started this before Thatcher posted, so it's possibly moot, but I'm posting it anyway in case it later becomes relevant. Here's a partial list of apparently involved IP addresses, judging from the AN/I thread:
:# {{checkip|69.19.14.39}}
:# {{checkip|69.19.14.17}}
:# {{checkip|69.19.14.15}}
:# {{checkip|69.19.14.36}}
:# {{checkip|69.19.14.19}}
:# {{checkip|69.19.14.24}}
:# {{checkip|69.19.14.44}}
:# {{checkip|69.19.14.34}}
:# {{checkip|69.19.14.31}} <small>Particularly egregious userpage vandalism</small>
 
Vandalism to [[Federal Reserve System]]. All edits are identical. --[[User:Slowking Man|Slowking Man]] ([[User talk:Slowking Man|talk]]) 06:36, 18 August 2008 (UTC)
:# {{checkip|66.82.9.74}}
:# {{checkip|66.82.9.77}}
:# {{checkip|66.82.9.62}}
:# {{checkip|66.82.9.61}}
:# {{checkip|66.82.9.92}}
:# {{checkip|66.82.9.81}}
:# {{checkip|66.82.9.55}}
:# {{checkip|66.82.9.53}}
:# {{checkip|66.82.9.110}}
:# {{checkip|66.82.9.104}}
:# {{checkip|66.82.9.103}}
:# {{checkip|66.82.9.108}}
:IPs were collected from AAA's contribs, so apart from sorting them into the two ranges, most recent IPs will be listed first. &ndash; <span style="font-family: Garamond">[[User:Luna Santin|<font color="#1E90FF">'''Luna Santin'''</font>]] ([[User talk:Luna Santin|talk]])</span> 21:06, 3 August 2008 (UTC)
::According to {{u|Rjd0060}} on IRC, the ranges that those IPs are covered in are actually the following ranges:
::*{{checkip|69.19.14.0/26}}
::*{{checkip|66.82.9.0/25}}<br>
::rather than the two ranges I originally mentioned. --'''[[User:AAA!|<span style="color:red">AAA!</span>]]''' <small>([[User talk:AAA!|<span style="color:green">AAAA</span>]])</small> 16:24, 4 August 2008 (UTC)
 
*Each:{{IPblock}} of24.82.129.35 thoseis rangesan hasopen probablyproxy/zombie overcomputer. 2000 edits[[User:Sam perKorn|Sam month or more.Korn]] <sup>[[User talk:ThatcherSam Korn|Thatcher(smoddy)]]</sup> 1620:4836, 418 August 2008 (UTC)
::Could we still do those range blocksOh, providingand weBjrothschild77 haveis bothalso anon users onlyconnected and accountblocked. creation enabled? --'''[[User:AAA!Sam Korn|<spanSam style="color:red">AAA!</span>Korn]]''' <smallsup>([[User talk:AAA!Sam Korn|<span style="color:green">AAAA</span>(smoddy)]])</smallsup> 1721:3000, 418 August 2008 (UTC)
:::I have blocked both ranges, but I have allowed account creation on them both. AAA, if you happen to see a similar pattern of vandalism to those types of articles, let a checkuser know. (be sure you have lots of evidence, as in several days worth showing the pattern). No existing accounts will be affected by the block. —— '''[[user:nixeagle|<font color="navy">nix</font>]][[User talk:Nixeagle|<font color="red">eagle]]'''</font> 17:53, 4 August 2008 (UTC)
 
===Refdesk spammer socks===
*{{checkuser |J2138r9j98f392j1=Greenlanop}}
*{{checkuser|ShiningPath1=Rick well}}
*{{checkuser |Fj2fn29fk29k91=Yorkking}}
*{{checkuser |Fj9fj29fj29ff891=Lsonfey}}
*{{checkuser |S19rjf9fj19ff91j1=Pdonbuff}}
* {{checkuser|32i8h5jui1=Crystal AB}}
* {{checkuser|Harold Hreem1=Selininaemily}}
* {{checkuser|O34ijt5oj51=Welawat}}
* {{checkuser|James 45uyh1=Cooner&0908}}
* {{checkuser|Versedoor creator1=Wishess2m}}
 
These accounts have been used to post fake questions and answers on the [[WP:RD/C|Computing reference desk]] to create publicity for some products that the user apparently wants to sell. See [[Wikipedia:Suspected sock puppets/Greenlanop]] for details. Cooner&0908 and Wishess2m have been [{{fullurl:Wikipedia:Requests for checkuser/IP check|oldid=219003771}} previously confirmed] as socks of each other, but no other accounts were found back then. Requesting a check to see if the underlying IP could be blocked. —[[User:Ilmari Karonen|Ilmari Karonen]] <small>([[User talk:Ilmari Karonen|talk]])</small> 23:12, 14 August 2008 (UTC)
===Harold Hreem===
:I modified the request to fix the spelling of Selininaemily --[[User:tcsetattr|tcsetattr]] ([[User talk:tcsetattr|talk]] / [[Special:Contributions/tcsetattr|contribs]]) 23:21, 14 August 2008 (UTC)
* {{checkuser|Harold Hreem}}
:I have blocked all these as sockpuppets of Iriszuo, who seems to be the first account to engage in this stuff. 208.77.40.0/21 and 125.70.128.0/22 are both blocked (AO ACB) for three months. Bizarrely, despite the physical distance between their locations, neither set appears to contain open proxies. The ranges might need extending, but we'll wait and see. [[User:Sam Korn|Sam Korn]] <sup>[[User talk:Sam Korn|(smoddy)]]</sup> 23:32, 14 August 2008 (UTC)
* {{checkuser|James 45uyh}}
* {{checkuser|Sup buds 954}}
* {{checkuser|32i8h5jui}}
* {{checkuser|O34ijt5oj5}}
* {{checkuser|24ij5i324u5tio8u3480t5ju34i890t0i89345gti89ju}}
* {{checkuser|Versedoor creator}}
 
Persistent, irritating vandal who keeps creating new accounts in order to make edits like these: [http://en.wikipedia.org/w/index.php?title=PowerBook_100&diff=230785907&oldid=230785571]
[http://en.wikipedia.org/w/index.php?title=PowerBook_100&diff=230785291&oldid=230785264]
[http://en.wikipedia.org/w/index.php?title=PowerBook_100&diff=230784198&oldid=230784123]
 
[[User:Reyk|<font color="Maroon">'''Reyk'''</font>]] <sub>[[User talk:Reyk|'''<font color="Blue">YO!</font>''']]</sub> 10:46, 9 August 2008 (UTC)
 
:These are similar to others in [[:Category:Wikipedia sockpuppets of Primetime]]. --[[User:Snigbrook|Snigbrook]] [[User talk:Snigbrook|<sup><span style="color:red">(</span><span style="color:green">talk</span><span style="color:red">)</span></sup>]] 11:58, 9 August 2008 (UTC)
 
: While it's not Primetime, far as I can see, it's hard to block IPs or ranges here, as they cover a large range of IPs. They're pretty-much all over the place - [[User:Alison|<span style="color:#FF823D;font-family:Monotype Corsiva">'''A<font color="#FF7C0A">l<font color="#FFB550">is</font>o</font>n'''</span>]] <sup>[[User talk:Alison|❤]]</sup> 07:37, 12 August 2008 (UTC)
 
===ShiningPath===
*{{checkuser|ShiningPath}}
ShiningPath is an SPA, appears to have assimilated WP conventions instantly, then disappeared after having removed links s/he didn't like from several hundred pages. Can this user be checked as a possible sockpuppet? Thank you, [[User:Badagnani|Badagnani]] ([[User talk:Badagnani|talk]]) 19:04, 8 August 2008 (UTC)
:{{clerknote}} Request reformatted. <span style="background:#E0FFFF;color:#007FFF;font-family:Georgia;">[[User:Nishkid64|Nishkid64]] </span><sub>([[User talk:Nishkid64|Make articles, not wikidrama]])</sub> 03:43, 9 August 2008 (UTC)
:: {{declined}} - fishing expedition[http://en.wikipedia.org/w/index.php?title=User_talk:Badagnani&diff=prev&oldid=230243437] with no evidence whatsoever. Has there actually been any abuse here you can point to? - [[User:Alison|<span style="color:#FF823D;font-family:Monotype Corsiva">'''A<font color="#FF7C0A">l<font color="#FFB550">is</font>o</font>n'''</span>]] <sup>[[User talk:Alison|❤]]</sup> 08:52, 9 August 2008 (UTC)
*'''Comment''' - The edits were questionable and it seems likely that this is a longtime editor who did not want any repercussions for his/her removals of websites from many dozens, or hundreds of articles. Most importantly, I was under the impression that it's not permissible to have multiple registered accounts, whether or not the editor believes it's justifiable. [[User:Badagnani|Badagnani]] ([[User talk:Badagnani|talk]]) 19:29, 11 August 2008 (UTC)
: Per [[WP:SOCK]], you actually ''can'', but it's in your best interests to declare the links. Deliberately avoiding scrutiny while being disruptive is a no-no, but I'm not seeing that here - [[User:Alison|<span style="color:#FF823D;font-family:Monotype Corsiva">'''A<font color="#FF7C0A">l<font color="#FFB550">is</font>o</font>n'''</span>]] <sup>[[User talk:Alison|❤]]</sup> 19:45, 11 August 2008 (UTC)
::I think the response depends on who the main account is (if there is one). If the user is blocked or has a long block log and a reputation for acting contentiously, then it might be acceptable to disclose the main account. If the user is in good standing, then there may be no reason to declare the other name; on the other hand, the SPA has given up the ability to comment meaningfully on the issue when editors restore the links. So I checked; there is nothing obvious. This is a textbook case of {{fishing}}. The question "Who is X" is often much harder to answer than, "Is X related to Y." Here, nothing stands out. [[User talk:Thatcher|Thatcher]] 20:40, 11 August 2008 (UTC)