Jump to content

Wikipedia:Requests for checkuser/IP check/Archive

Add links
From Wikipedia, the free encyclopedia
< Wikipedia:Requests for checkuser | IP check
This is an old revision of this page, as edited by Luna Santin (talk | contribs) at 06:07, 29 August 2008 (Archiving.). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
Checkuser pages
Requests: Unlisted • IP check • On hold
Archives: Main • Older • IP checks • Unsorted
Clerk pages
Clerk Overview • Noticeboard • Procedures
Shortcut
This page can be quickly accessed through:
WP:RFCU/IP/A

Requests for IP check

This page lists requests to identify and block the IP addresses behind attack and vandal accounts that were previously listed at Requests for checkuser/IP check. After the account has been reported as blocked or declined by the checkusers, the report is moved here for seven days (most recent sections at the bottom), after which it is deleted. Because there is no attempt to establish a relationship with a puppetmaster account, no separate archive is kept, other than the page history.

Clerks: when clearing this page, please make note of the names of the sections you are deleting in the edit summary.



TWINKLE abuse vandals

Identical rapid-fire vandalism. Hut 8.5 19:00, 18 August 2008 (UTC)[reply]

I've added User:Yiplop_stick_stop who was also already listed at Wikipedia:Requests for checkuser/Case/Avril Vandal. -- zzuuzz (talk) 19:23, 18 August 2008 (UTC)[reply]
 IP blocked 82.198.250.8 now hardblocked. The vast majority of the edits are from this address, with no good accounts. A bunch more are from TOR and from open proxies, now blocked. Sam Korn (smoddy) 20:28, 18 August 2008 (UTC)[reply]

Bjrothschild7

Vandalism to Federal Reserve System. All edits are identical. --Slowking Man (talk) 06:36, 18 August 2008 (UTC)[reply]

 IP blocked 24.82.129.35 is an open proxy/zombie computer. Sam Korn (smoddy) 20:36, 18 August 2008 (UTC)[reply]
Oh, and Bjrothschild77 is also connected and blocked. Sam Korn (smoddy) 21:00, 18 August 2008 (UTC)[reply]

Refdesk spammer socks

These accounts have been used to post fake questions and answers on the Computing reference desk to create publicity for some products that the user apparently wants to sell. See Wikipedia:Suspected sock puppets/Greenlanop for details. Cooner&0908 and Wishess2m have been previously confirmed as socks of each other, but no other accounts were found back then. Requesting a check to see if the underlying IP could be blocked. —Ilmari Karonen (talk) 23:12, 14 August 2008 (UTC)[reply]

I modified the request to fix the spelling of Selininaemily --tcsetattr (talk / contribs) 23:21, 14 August 2008 (UTC)[reply]
I have blocked all these as sockpuppets of Iriszuo, who seems to be the first account to engage in this stuff. 208.77.40.0/21 and 125.70.128.0/22 are both blocked (AO ACB) for three months. Bizarrely, despite the physical distance between their locations, neither set appears to contain open proxies. The ranges might need extending, but we'll wait and see. Sam Korn (smoddy) 23:32, 14 August 2008 (UTC)[reply]


Lkent

Attack accounts and general vandalism. Is there an underlying IP range? Woody (talk) 00:19, 22 August 2008 (UTC)[reply]

 IP blocked These are sleeper socks which are coming from one, already-softblocked IP address. I've just reblocked as hardblock, as there's no good edits whatsoever coming from that IP address. Also blocked a handful of other socks which were already starting up - Alison ❤ 02:00, 22 August 2008 (UTC)[reply]
Thanks Alison. Woody (talk) 02:08, 22 August 2008 (UTC)[reply]

Strong pad

Vandal, normally on proxies. Thanks. -- zzuuzz (talk) 13:15, 21 August 2008 (UTC)[reply]

 IP blocked on 213.192.13.2, an open proxy. Other IPs are already blocked as the same. Sam Korn (smoddy) 14:00, 21 August 2008 (UTC)[reply]

Roaming vandal

I expect it will be clear from logs, warnings and auto vandal tags --Danorton (talk) 23:25, 20 August 2008 (UTC)[reply]

 IP blocked - Alison ❤ 04:59, 22 August 2008 (UTC)[reply]

Attack accounts

Should be pretty obvious from contribs. Already blocked, but a check for underlying proxies and further sleepers couldn't hurt. – Luna Santin (talk) 11:24, 20 August 2008 (UTC)[reply]

  • These accounts and their underlying IPs are all blocked. They could only edit because of block-conflicts between Thatcher's hard rangeblock and various soft-blocks that have been placed at various times. Sam Korn (smoddy) 23:11, 20 August 2008 (UTC)[reply]

Pagemove fun

Edits are all very similar--attempts to redirect pages to penis. Don't know how this guy is getting around the autoblock ... if the underlying IP can be blocked, it would definitely help. Blueboy96 22:31, 20 August 2008 (UTC)[reply]

  • This is two different people in different countries -- Duderdas in one country and Markhelping and Haha you lost time reading my name in another. The IPs appear to be dynamic and the users moved on -- if there are continued problems bring it back here and additional evidence will make it possible to work out what rangeblock is necessary. Sam Korn (smoddy) 23:16, 20 August 2008 (UTC)[reply]

Pagemove fun

Edits are all very similar--attempts to redirect pages to penis. Don't know how this guy is getting around the autoblock ... if the underlying IP can be blocked, it would definitely help. Grapecakecooker (talk) 13:59, 21 August 2008 (UTC)[reply]

All different IP addresses and one-off accounts, I'm afraid - Alison ❤ 05:01, 22 August 2008 (UTC)[reply]
So... wait, this guy essentially requested an IP check on himself and his socks? I wish all vandals were that helpful. :-) Too bad nothing came up, though if the edits match but the IPs are scattered, might be worth seeing if they're proxies. —Ilmari Karonen (talk) 07:26, 22 August 2008 (UTC)[reply]


Bjrothschild7

Repeated inserting of anti-Semitic rant in Federal Reserve System. -- Gogo Dodo (talk) 08:40, 24 August 2008 (UTC)[reply]

no Declined. All on different A classes. Aaron Schulz 16:22, 24 August 2008 (UTC)[reply]

Tile join

Sockpuppet of Tile join (talk · contribs); probably a few more that can be found. --Snigbrook (talk) 11:32, 23 August 2008 (UTC)[reply]

information Note: Several more users blocked. Aaron Schulz 01:46, 24 August 2008 (UTC)[reply]


Ceauntay

See previous case Wikipedia:Requests for checkuser/Case/Ceauntay. Ceauntay makes it easy, he's up to Ceauntay46, now blocked, with the same pattern of creating a massive userspace with fictional movie listings. While it's unlikely that he's strayed from his Ceauntayxx naming convention, it's worth a check. Posting the two most recent names. Acroterion (talk) 21:37, 27 August 2008 (UTC)[reply]

 IP blocked - for a while. Ceauntay39 - 46 are all created but most are already blocked, from what I can see - Alison ❤ 21:56, 27 August 2008 (UTC)[reply]


Darkness avails

Page-move vandalism, please check for more socks created at the same time, especially with regards to

 Completed Several accounts blocked (see my block log). It's a dynamic range, so I'd need more examples before I could work out if there are any ranges that can be blocked. Sam Korn (smoddy) 12:59, 26 August 2008 (UTC)[reply]

Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/IP_check/Archive&oldid=234936228"