Wikipedia:Requests for checkuser

This is an old revision of this page, as edited by Luna Santin (talk | contribs) at 01:28, 4 March 2007 (move Anit.pimple, American Brit to completed). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.


    Read this first


    This is the place to request sockpuppet checks and other investigations requiring access to the Checkuser privilege. Possible alternatives are listed below.


    Requests likely to be accepted

    Code Situation Solution, requirements
    A Blatant attack or vandalism accounts, need IP block Submit new section at #Requests for IP check, below
    B Evading blocks, bans and remedies issued by arbitration committee Submit case subpage, including link to closed arb case
    C Ongoing, serious pattern vandalism with many incidents Submit case subpage, including diffs
    D Vote fraud, closed vote, fraud affects outcome Submit case subpage, including link to closed vote
    E 3RR violation using sockpuppets Submit case subpage, including diffs of violation
    F Evading blocks, bans and remedies issued by community Submit case subpage, including link to evidence of remedy
    G Does not fit above, but you believe check needed Submit case subpage, briefly summarize and justify

    Requests likely to be rejected

    Situation Solution
    Obvious, disruptive sock puppet Block, no checkuser needed
    Disruptive "throwaway" account used only for a few edits Block, no checkuser needed
    Checkuser on yourself to "prove your innocence" Such requests are rarely accepted, please do not ask
    Related to ongoing arbitration case Request checkuser on the arbitration case pages
    Vote fraud, ongoing vote Wait until vote closes before listing, or post at Wikipedia:Suspected sock puppets
    Vote fraud, closed vote, did not affect outcome List at Wikipedia:Administrators' noticeboard/Incidents or Wikipedia:Suspected sock puppets
    Other disruption of articles List at Wikipedia:Administrators' noticeboard/Incidents or Wikipedia:Suspected sock puppets
    Open proxy, IP address already known List at Wikipedia:WikiProject Open proxies
    You want access to the checkuser tool yourself Contact the Arbitration Committee, but such access is granted rarely


    When submitting a request

    • If submitting a new case subpage, use the inputbox below; if adding to an existing case subpage, see WP:RFCU/P#Repeat requests.
    • Choose the code letter that best fits your request. Provide evidence such as diff links as required or requested. Note that some code letters inherently require specific evidence.
    • When listing suspected accounts or IP addresses, use the {{checkuser}} or {{checkip}} templates. Please do not use this template in a section header.
    • You may add your request to the top of the #Outstanding requests section, by adding {{Wikipedia:Requests for checkuser/Case/CASENAMEHERE}}. If you do not, clerks should check for pages in Category:Checkuser requests to be listed and will do this for you.
    • Sign your request.


    After submitting a request


    Privacy violation?

    Indicators and templates   (v  · e)
    These indicators are used by Checkusers, SPI clerks and other patrolling users, to allow easier at-a-glance reading of their notes, actions and comments.
    Case decisions:
     IP blocked  {{IPblock}}  Tagged  {{Stagged}}
     Blocked but awaiting tags  {{Sblock}}  Not possible  {{Impossible}}
     Blocked and tagged  {{Blockedandtagged}}  Blocked without tags  {{Blockedwithouttags}}
     No tags  {{No tags}}  Blocked and tagged. Closing.  {{Blockedtaggedclosing}}
    Information:
     Additional information needed  {{MoreInfo}}  Deferred  {{Deferred}}
    information Note:  {{TakeNote}}  In progress  {{Inprogress}}
    Clerk actions:
     Clerk assistance requested:  {{Clerk Request}}  Clerk note:  {{Clerk-Note}}
     Delisted  {{Delisted}}  Relisted  {{Relisted}}
     Clerk declined  {{Decline}}  Clerk endorsed  {{Endorse}}
    Self-endorsed by clerk for checkuser attention  {{Selfendorse}} CheckUser requested  {{CURequest}}
    Specific to CheckUser:
     Confirmed  {{Confirmed}} Red X Unrelated  {{Unrelated}}
     Confirmed with respect to the named user(s). no No comment with respect to IP address(es).  {{Confirmed-nc}}
     Technically indistinguishable  {{Technically indistinguishable}}
     Likely  {{Likely}}  Unlikely  {{Unlikely}}
     Possible  {{Possible}}  Inconclusive  {{Inconclusive}}
    no Declined  {{Declined}} no Unnecessary  {{Unnecessary}}
     Stale (too old)  {{StaleIP}} no No comment  {{Nocomment}}
    crystal ball CheckUser is not a crystal ball  {{Crystalball}} fish CheckUser is not for fishing  {{Fishing}}
     CheckUser is not magic pixie dust  {{Pixiedust}} magic eight ball The CheckUser Magic 8-Ball says:  {{8ball}}
     Endorsed by a checkuser  {{Cu-endorsed}}  Check declined by a checkuser  {{Cudecline}}
     Possilikely (a mix between possible and likely)  {{possilikely}}

    If this page is displaying outdated contents even after you refresh the page in your browser, please Purge the cache.




    Declined requests



    Completed requests





    Code letter: B

      Confirmed. No sleepers on his range. Nishkid64 (Make articles, not wikidrama) 19:13, 24 December 2008 (UTC)[reply]









    Requests for IP check

    • Vandal and attack accounts may be listed here for the purpose identifying and blocking the underlying IP address or open proxy. Requests to confirm sockpuppets of known users should be listed in the sockpuppet section above.
    • If you already know the IP address of the suspected open proxy, list it at Wikipedia:Open Proxies instead.
    • Use === Subsections ===, do not create subpages.
    • List user names using the {{checkuser|username}} template. Add new reports to the top of the section.
    • Requests may be acted on or declined according to the discretion of the checkuser admins. Responses will be noted here.
    • Answered requests will be moved to Wikipedia:Requests for checkuser/IP check for 7 days, after which they will be deleted. No separate archive (other than the page history) will be maintained.

    Primetime

    Boy, that was hard (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki) — Classic Primetime pupet. Uses open proxies. 68.39.174.238 23:39, 1 March 2007 (UTC)[reply]

    CBDrunkerson

    Same MO as always.—Ryūlóng () 19:34, 1 March 2007 (UTC)[reply]

    Lieutenant Jojo

    [1] This post looks very malicious, and the guy has a sock puppet warning on his user page and a history of what appears to be Sneaky Vandalism in his contribs. I don't envy the people who revert his vandalisms, which is why I logged out before posting here. -- 60.229.126.181 13:10, 28 February 2007 (UTC)[reply]

    Bobby Boulders again?

    Bobby Boulders is a notorious long-term vandal (see the deleted history of Wikipedia:Long term abuse/Bobby Boulders for reference) who has sometimes used open proxies. He has also been CheckUsered a number of times (check the history of the IP check page). Mister Donkadonk's first couple of edits were to state on his user & talk pages that "I be Bobby Boulders" - although this account was blocked before it could "liberate" any pages. Are any open proxies involved, and is this the real Bobby Boulders? Scobell302 21:31, 27 February 2007 (UTC)[reply]

    indefblocked vandal

    • Code letter: A

    Keeps replacing admin user/talk pages with{{indefblocked}} - see contribution-logs

    Underlying IP would need to be identified and blocked. The last two were able to edit a semiprotected page, which suggests sleeperaccounts. Agathoclea 18:59, 27 February 2007 (UTC)[reply]

    Lollypop11 and Road500

    Two more Burak18 vandalism socks. Please block the underlying IP, probably an open proxy. AecisBrievenbus 18:23, 27 February 2007 (UTC)[reply]

    Attack accounts on my user page

    All the following accounts attacked my user/talk page with obscenities, including penis vandalism. Please block the underlying IP and check to see if any sleeper accounts are registered. --sunstar nettalk 23:18, 27 February 2007 (UTC)[reply]

    BigBadBradFromCarrollton

    Repeatedly recreated the attack article Brad Beighley (now protected). Also uploaded various pornographic images for vandalism. --Slowking Man 23:41, 26 February 2007 (UTC)[reply]

    I sure have a lot of friends lately

    I was notified of Afganistaun on my talk page concerning his first edit. After a bit of thinking, I blocked, as there's no reason why he should know about me. Not ten minutes later, the first attack account showed up.—Ryūlóng () 22:31, 26 February 2007 (UTC)[reply]

    Given the threatening nature of these, should this be taken to any other areas of Wikipedia for reporting? ThuranX 21:14, 3 March 2007 (UTC)[reply]

    CBDrunkerson

    Moved from current case for faster response.—Ryūlóng () 00:12, 24 February 2007 (UTC)[reply]

    Looking now - David Gerard 00:24, 24 February 2007 (UTC)[reply]
    Home run derriby is likely PRBuster2007. The others are either geographically disparate or using work and home accounts. If the editing patterns really smell the same, it may be open proxies or people editing on their behalf. (Personally I always go by smell and regard checkuser as corroboration, but ymmv.) The corporate IPs may well be 0wnz0r3d - David Gerard 00:44, 24 February 2007 (UTC)[reply]
    This one showed up today, editted the same RFA as KnownTypes and articles that others had in the original case.—Ryūlóng () 21:03, 24 February 2007 (UTC)[reply]

    Possibly unrelated

    These are moved from Wikipedia:Requests for checkuser/Case/CBDrunkerson, as they are unrelated.—Ryūlóng () 03:45, 21 February 2007 (UTC)[reply]

    Below is another that showed up at WP:RFCN this evening: --BigDT 01:33, 21 February 2007 (UTC)[reply]

    One more --BigDT 05:04, 21 February 2007 (UTC)[reply]

    All the below are   Confirmed:

    The IP has been blocked. Essjay (Talk) 23:07, 20 February 2007 (UTC)[reply]

    • Some of the above were added after Essjay's initial check, given the backslashing in the names these are clearly misconfigured proxies and need to be checked also. --pgk 13:43, 21 February 2007 (UTC)[reply]
      Additional information needed like, which? --jpgordon∇∆∇∆ 03:58, 23 February 2007 (UTC)[reply]
    From User:Pgk's an asshole, and your autoblocks won't work on me! down (These were originally listed under the CBDrunkerson case, so the edit history is there) --pgk 23:33, 23 February 2007 (UTC)[reply]
      Clerk note: Misconfigured proxies should not be able to edit, due to the way the edit token is set up. The user might be faking that part, and probably is using properly configured proxies. Prodego talk 23:36, 23 February 2007 (UTC)[reply]