Jump to content

Wikipedia:Requests for checkuser/IP check/Archive

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Luna Santin (talk | contribs) at 03:17, 30 December 2008 (Archiving.). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
Checkuser pages
Requests: UnlistedIP checkOn hold
Archives: MainOlderIP checksUnsorted
Clerk pages
Clerk OverviewNoticeboardProcedures
Shortcut
This page can be quickly accessed through:
WP:RFCU/IP/A

Requests for IP check

This page lists requests to identify and block the IP addresses behind attack and vandal accounts that were previously listed at Requests for checkuser/IP check. After the account has been reported as blocked or declined by the checkusers, the report is moved here for seven days (most recent sections at the bottom), after which it is deleted. Because there is no attempt to establish a relationship with a puppetmaster account, no separate archive is kept, other than the page history.

Clerks: when clearing this page, please make note of the names of the sections you are deleting in the edit summary.




These accounts were created within a few minutes on 14 August, and had not edited until yesterday, when they started vandalising articles about places in Illinois and Florida, particularly DuPage County, Illinois and Monroe County, Florida. Eborsisk (talk · contribs), also made several disruptive page moves of Chicago metropolitan area. Tyfghvb (talk · contribs) was blocked for 24 hours, which expires soon; the other two both received indefinite blocks. —Snigbrook 18:06, 20 November 2008 (UTC)[reply]

Good call.  Confirmed along with Moundaround (talk · contribs), accounts blocked indef and  IP blocked in a moment. – Luna Santin (talk) 22:08, 20 November 2008 (UTC)[reply]

Since November 14th, this user has infringed the 3RR rule and deleted sources many times on article halal under the pseudonym of Krister9000. The same reversions have been made under the two other names, with infringement of the 3RR rule since the 18th. I strongly suspect these are all the same user who have beeen reverted by everybody. [1] --Flying tiger (talk) 14:51, 20 November 2008 (UTC)[reply]

Have protected the Halal article for a week, will allow a CU to determine whether a check is really necessary here. Tempted to block a lot/all off the SPAs but I don't have the time or inclination to go through all the diffs etc. GDonato (talk) 16:10, 20 November 2008 (UTC)[reply]
 Confirmed and blocked all above, as well as Longlife465 (talk · contribs) and Islamispeace4u (talk · contribs). IP looks like it might be shared, so only softblocking it for now. – Luna Santin (talk) 22:02, 20 November 2008 (UTC)[reply]
 Clerk note: Tagged. OhanaUnitedTalk page 17:22, 21 November 2008 (UTC)[reply]

Jingoistic reference desk troll; investigation shows that these two accounts are the same. If some kind CU would mind looking for other accounts on their IP address - I notice Rossi Elisabetta was created through SUL. This is not a priority. Thanks. Hersfold (t/a/c) 22:12, 19 November 2008 (UTC)[reply]

Not finding any obvious sleepers or socks on Rossi.  Possible match on Getsua (talk · contribs · deleted contribs · logs · filter log · block user · block log), but should probably hold off on that one. Vindo geolocates to the same area, but appears to have used a different ISP. – Luna Santin (talk) 00:11, 20 November 2008 (UTC)[reply]

I am 99% certain that this user is behind these IPs: User:75.168.220.28, User:75.168.214.145, User:75.168.219.76 and several others, using them to evade a block (edits are the exact same, on the same pages, even replies to messages on his talk pages using the IPs). He keeps using new ones... however, he consistantly claims to not be a sock, so I would like a CU to be sure this really is him and not his number one fan or something since we are discussing a rangeblock. L'Aquatique[talk] 00:41, 18 November 2008 (UTC)[reply]

 Completed. A lack of relationship is impossible to prove conclusively, but the Sauve account hasn't used this ISP that I can see. – Luna Santin (talk) 00:57, 19 November 2008 (UTC)[reply]
And based on that, I have unblocked the account and apologised if I was in error. Spellcast (talk) 10:30, 19 November 2008 (UTC)[reply]

Accounts used to target Recovered Territories

Most recently Chefukija (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki). Maybe this has been looked into before, but clearly someone is regularly creating new accounts just to target this page and leave offensive edit summaries. Can you please check if they regularly come from the same IP - if so, then action might be taken.--Kotniski (talk) 10:35, 15 November 2008 (UTC)[reply]

Following are  Confirmed:
  1. Idegmcsa (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  2. Desjlvia (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  3. Magvlsor (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  4. Givzkrs (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  5. Copugcx (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  6. Roafbnmks (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  7. Equasrmn (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  8. Pildview (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  9. Urbklopi (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  10. Lauderty (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  11. Dannuity (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  12. Papfytra (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  13. Namtiota (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  14. Navgaknf (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  15. Verhutsa (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  16. Enjuitras (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  17. Abotuida (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
Along with a number of others (already blocked as sockpuppets of Serafin).  IP blocked in a moment. – Luna Santin (talk) 01:03, 19 November 2008 (UTC)[reply]

Pee Wee

Our friend the Pee Wee vandal came back to visit us again. Mind looking through those socks and seeing if there are any underlining IP addresses besides the one I listed and blocking them along with any stinky socks? Thanks.¤~Persian Poet Gal (talk) 01:13, 5 December 2008 (UTC)[reply]

 Completed. No obvious socks lingering, user is active on a pair of ranges which both show a fair amount of traffic. A soft rangeblock might keep them out if things get bad, but probably not worth a long one just yet; semiprot may be viable? – Luna Santin (talk) 02:26, 5 December 2008 (UTC)[reply]


The user at the top is a bot, which has been blocked indef. The bot was reverting all changes to any articles the IP edited in to the last version by the IP. If no other accounts are connected to this IP, I would suggest a block at least of a year, or longer.— dαlus Contribs /Improve 08:59, 3 December 2008 (UTC)[reply]

Looks more complex than might be expected at first glance...  Likely matches include:
  1. Rassmguy (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  2. Handllrich (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  3. RichHandsmGuy (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  4. RCAT120 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  5. GenHosts (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  6. Gwenne (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  7. Lastvers (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  8. Dremen (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  9. AbbST (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  10. Ceetton (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  11. Cizerex (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  12. AdoraShe-Ra (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  13. MDwww (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  14. Primegoodie (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  15. Rwws (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  16. Lliaa (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  17. Landings (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  18. Arcanne (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  19. Lestml (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  20. Stratrep (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  21. Promnowe (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  22. Bellrem (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  23. TheBoneWoman (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  24. DlsHouse (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
  25. Crommorc (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
Most of the above were already blocked; went through, so it should be all of them, now.  IP blocked for good measure. – Luna Santin (talk) 22:22, 3 December 2008 (UTC)[reply]

This user (account created 5 November) has made today exactly ten null edits, typical of Grawp-like sleepers to get autoconfirmed status. Cenarium Talk 02:39, 29 November 2008 (UTC)[reply]

Bfshrk (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki) might be worth looking at as well. The account was registered back in 2006 and made its first edits today.¤~Persian Poet Gal (talk) 03:06, 29 November 2008 (UTC)[reply]
 Completed, but would rather not go into too much detail in a public forum. – Luna Santin (talk) 00:12, 3 December 2008 (UTC)[reply]


Users targetting John Ellis (Irish politician) (edit | talk | history | protect | delete | links | watch | logs | views) and other articles for disruption, edit-warring and vandalism

Crafty Butcher is banned and is a sock of User:Bell V Bell, Crafty Butcher added the following lines to the John Ellis article [2] which mentions Victor Tsigal. He also created the Victor Tsigal article with a hoax reference to John Ellis [3].

User:Victor Tsigal has so far made only 1 edit [4], non vandalism but I believe this account may be used in future for this purpose when its new user status has expired.

User:Brisk69 has made only 3 edits so far, again non vandal [5] but the only link between the 3 articles, especially John Ellis (Irish politician) and City of Kingston are that they recently appeared in my recent contributions list. This user has recently created many impersonator accounts of me and has been wikistalking me. I believe these are all socks of the same banned user. Snappy56 (talk) 02:16, 15 November 2008 (UTC)[reply]

Any chance someone might look at this? It's been two weeks. Thanks, Snappy (talk) 06:03, 28 November 2008 (UTC)[reply]

Wikipedia:Requests for checkuser/Case/Bell V Bell is pertinent. There are two major ranges here and several smaller ones, mostly too big to range block, but I did one range block for two weeks.

 Confirmed Victor Tsigal (talk · contribs) = Fr. Slat O Bodach (talk · contribs) = Slappy.1 (talk · contribs)
 Confirmed Bell V Bell (talk · contribs) = Britney.Thorndyke (talk · contribs) = Guliolopaz (talk · contribs) = Scolairo (talk · contribs) = Jarlath.Burns (talk · contribs) = Barbara.thorndyke (talk · contribs) = Snappy55 (talk · contribs)
 Confirmed Crafty Butcher (talk · contribs) = Sore Ring (talk · contribs) = Mgr.James Horan Decd. (talk · contribs) = Dirty Micky (talk · contribs) = Bartholemew O'Keeffe (talk · contribs) = Snapy56 (talk · contribs) = Snappy56.1 (talk · contribs) = Snappy56.3 (talk · contribs) = Snappy56.6 (talk · contribs) = Snappy56.5 (talk · contribs) = Snappy56.4 (talk · contribs) = Snappy56.2 (talk · contribs) = Artist in residence (talk · contribs) = Snappy57 (talk · contribs) = R. Spender (talk · contribs) = Big Swinging Mickey (talk · contribs) = Biffin Bridge (talk · contribs) = Cess Poole (talk · contribs)
 Likely that all 3 groups are related.RlevseTalk 20:59, 28 November 2008 (UTC)[reply]
I pasted this to the Bell V Bell case. RlevseTalk 21:03, 28 November 2008 (UTC)[reply]
  • Supporting evidence: Appears to be IP used by blocked user who has a 1yr history of attacking SchuminWeb. In this diff, IP claims to have a sock who is an admin. I'm aware that CU is not a trip in a boat with hooks and worms, but this appears to be serious enough--especially since the user is banned--to warrant a closer look and action. If it's too fishing-trippy, perhaps a check could be run and if results show something untoward, can be handled by ArbCom privately. // roux   03:07, 9 December 2008 (UTC)[reply]
 Completed for now. I looked at this earlier, actually; it's a pretty noisy range, but I didn't see any obvious socks lurking in the grass. Sorry to say, but semi-protection or short rangeblocks (say, 15min each time they're active) may have to do until they get bored and move on to a better target. =\ – Luna Santin (talk) 07:45, 9 December 2008 (UTC)[reply]


Nypd aux

All accounts have been used to vandalize New York City Police Department Auxiliary Police with nonsense about "Eric." Blueboy96 04:48, 19 December 2008 (UTC)[reply]

 IP blocked. Nishkid64 (Make articles, not wikidrama) 05:09, 19 December 2008 (UTC)[reply]



UnrealSpiritX sockpuppets

I have blocked all of the lettered accounts. These are the three most current active accounts. -- Gogo Dodo (talk) 18:40, 18 December 2008 (UTC)[reply]

 Completed All IPs blocked. Nishkid64 (Make articles, not wikidrama) 04:22, 19 December 2008 (UTC)[reply]

Tile Join

-- zzuuzz (talk) 18:41, 13 December 2008 (UTC)[reply]

 Completed All active socks and IPs blocked. Nishkid64 (Make articles, not wikidrama) 03:57, 19 December 2008 (UTC)[reply]

Sock puppeteer impersonating me

StevanBuxton (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
StevenBuxton (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
StephanBuxton (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
BuxtonStevan (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
BuxtonStephan (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
BuxtonSteven (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)
BuxtonStephen (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki)

Following a block of 134.240.241.2 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki) (see [6] for the reasons), the vandal started impersonating me (see [7])The block of the IP address was modified to prevent account creation, but the vandal has found another IP address to vandalise from. Recent edits on my talk page indicate that although he is stopping for Christmas, he will be continuing [8]. All the above socks have been blocked, but he obviously can still create accounts. Can you see where he is operating from, and take the appropriate action? Thanks! StephenBuxton (talk) 16:58, 9 December 2008 (UTC)[reply]

follow up I've had a look on the list of usernames, and found BuxtonSteve (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log· investigate · cuwiki), which was created about the same time as the others. No edits have been made by the account as yet. StephenBuxton (talk) 17:12, 9 December 2008 (UTC)[reply]

The following are  Confirmed as one user:
  1. BuxtonStephan (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
  2. BuxtonStevan (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
  3. StevanBuxton (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
  4. BuxtonSteve (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
  5. BuxtanStephan (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)
  6. BuxtanStephen (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log)

One IP has been blocked, the other one has already been softblocked (hardblocking seems out of question). Nishkid64 (Make articles, not wikidrama) 07:31, 19 December 2008 (UTC)[reply]

Various accounts and IPs harassing User:Gwen Gale

Initially raised at ANI, these IPs may be using open proxies or anonymizers to harass and out Gwen Gale or otherwise disrupt her ARBCOM run. On the chance that they aren't all open-proxies or one of them got sloppy, I think we should run a checkuser to find out which account is using these to harass one of our admins--odds are the people making these edits (check deleted contributions) are not new to wikipedia. Protonk (talk) 04:34, 3 December 2008 (UTC) Adding one more:[reply]

Protonk (talk) 06:03, 3 December 2008 (UTC)[reply]

Gwen Gale (talk) 14:48, 6 December 2008 (UTC)[reply]

Another. — CharlotteWebb 13:54, 8 December 2008 (UTC)[reply]

Findings: (Another CU did some investigation of this as well, and may choose to present results).

(all already blocked)
(all already blocked)
(all already blocked except Seemstain, Scootey, Todaypoet, Tonesgoal, Levelbout, Risesigns which now are)

The rest of the IPs and users are inconclusive at best... block on behaviour. ++Lar: t/c 03:17, 9 December 2008 (UTC)[reply]

More, but they're all open proxies.

Gwen Gale (talk) 11:33, 11 December 2008 (UTC)[reply]

Gwen Gale (talk) 03:42, 12 December 2008 (UTC)[reply]

Gwen Gale (talk) 15:38, 13 December 2008 (UTC)[reply]

From now on I'm only going to log these at User:Gwen Gale/IP. Gwen Gale (talk) 13:33, 22 December 2008 (UTC)[reply]

No accounts from the blocked open proxies, but I can say that it is one person behind those IPs. Nishkid64 (Make articles, not wikidrama) 21:05, 22 December 2008 (UTC)[reply]