User:Jeff G./IP Check Archive 2007-02

Death threats
. Possibly related to recent IP edits to my Talk page from, , , or other users who harbor animosity toward me probably based on some deep misunderstanding of the world. Ban. —Centrx→talk • 17:44, 1 February 2007 (UTC)
 * ❌. No apparent connection between named editor and IPs, or between the IPS (obviously, the first two are in Singapore.) Named user banned. --jpgordon&#8711;&#8710;&#8711;&#8710; 17:57, 1 February 2007 (UTC)


 * Is the IP behind it static and thus bannable, or have any other suspicious activity, or is it a dynamic IP address from some common ISP? —Centrx→talk &bull; 18:34, 1 February 2007 (UTC)
 * School district. No suspicious activity other than this. --jpgordon&#8711;&#8710;&#8711;&#8710; 19:45, 1 February 2007 (UTC)

Bobabobabo sock
This one was used for several days, and the contributions and actions to try and prevent a block show that this user is said banned user. Checks should be made against any IPs listed here or proxy checks performed on IPs uncovered.— Ryūlóng ( 竜 龍 ) 03:02, 3 February 2007 (UTC)
 * ✅. Back slashing open proxy. --jpgordon&#8711;&#8710;&#8711;&#8710; 04:16, 3 February 2007 (UTC)

User:Ortega orang tegal asli
This user stated that he "use[s] an open proxy". John254 17:45, 4 February 2007 (UTC)
 * ✅. Three open proxies blocked. Also:

--jpgordon&#8711;&#8710;&#8711;&#8710; 18:43, 4 February 2007 (UTC)

The Template Vandal
He's back... MER-C 10:00, 4 February 2007 (UTC)
 * ✅. Also:
 * Underlying IP blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 4 February 2007 (UTC)
 * Underlying IP blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 4 February 2007 (UTC)
 * Underlying IP blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 4 February 2007 (UTC)
 * Underlying IP blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 4 February 2007 (UTC)

Evolution
Users are blanking the Evolution article with text from the book of Genesis. The underlying IP needs to be blocked from further abuse.— Ryūlóng ( 竜 龍 ) 22:09, 5 February 2007 (UTC)
 * I've added to the above request.  A  ecis Brievenbus 23:13, 5 February 2007 (UTC)
 * ✅ that they're related. Underlying IPs are dynamic, and there are lots of them and lots of editors on them. They're on Tiscali SpA in England, for which I don't think a range block would be appropriate (given that they're the third largest ISP in Europe.) --jpgordon&#8711;&#8710;&#8711;&#8710; 23:20, 5 February 2007 (UTC)

Burak18
is a vandal, who attacks articles relating to Turkish football. So far, he's used about 90 sockpuppets, some of which are listed in Category:Suspected Wikipedia sockpuppets of Burak18. Some of the IPs have been blocked as open proxies per WP:OP. I would like the underlying IP to be blocked, to prevent further vandalism. Accounts identified as Burak18 are:


 * the following are stale:

Other throw-away accounts have probably already been created to be put to use in the following days. I request that they be indefblocked as well. A ecis Brievenbus 20:21, 5 February 2007 (UTC)
 * ✅. All save one of the fresh ones were on open proxies; a couple of the proxies were already blocked, and I blocked the rest. --jpgordon&#8711;&#8710;&#8711;&#8710; 23:06, 5 February 2007 (UTC)
 * The latest sockpuppet is . I request that the underlying IP of this account be blocked as well. A  ecis Brievenbus 11:28, 6 February 2007 (UTC)
 * Done. --jpgordon&#8711;&#8710;&#8711;&#8710; 14:29, 6 February 2007 (UTC)

Ockenbock



 * Code letter(s): A and F

All are or claim to be sockpuppets of. The last two (Chesster man and the IP) claim to be related, but I have my doubts about that. They mainly just attack my user talk page (and occasionally Gwernol too). The last check, about a week ago, confirmed a lot but nothing could be done because the range block would have caused a lot of collateral damage (see here). Hopefully this one will pinpoint a better target to block, Metros232 13:36, 7 February 2007 (UTC)
 * ✅ that the IP is not IP-related to Chesster Man. All the rest (well, to be honest, I took a random sample) are from the same Colorado school district (though many of them have had an occasional logon elsewhere.) --jpgordon&#8711;&#8710;&#8711;&#8710; 16:51, 7 February 2007 (UTC)

Eden Sher-related vandalism


Possibly related IP addresses:


 * Code letter: A

Started harassing Ned Scott after he edited Eden Sher. Boasted about it on 4chan's /b/ board, and asked others to do likewise (I can provide a copy of the thread privately if requested). Also threatened to continue, and to use proxies to do so: "The image was deleted by wikipedia, so I guess I'll save my proxies and continue my work tomorrow!" and "His page is protected now, but later I'll start spamming his n00d pic over digimon related pages and shit, and also link to his userpage." In light of that, these accounts should probably be checked for open proxy use and any other sockpuppets that may be lying around. --Slowking Man 11:18, 7 February 2007 (UTC)
 * ✅ for Mitchell Henderson and I Never Forgive -- they share an IP, and it's just them. The first IP address also unearths:
 * The second IP stands alone. The third IP yields questionable:
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * The second IP stands alone. The third IP yields questionable:
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * The second IP stands alone. The third IP yields questionable:
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)
 * This last one would appear to be the same mess as Miamivince63 below, from a couple of the names. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:10, 7 February 2007 (UTC)

More JINXTENGU Sockpuppets

 * Code letter: A
 * Code letter: A
 * Code letter: A
 * Code letter: A

More sockpuppets appearing lately from this user since the check user report filed on January 26. I'm suspecting IP hopping but I have only come across one IP myself.¤~Persian Poet Gal (talk) 03:46, 7 February 2007 (UTC)
 * ✅ that Excitingp and JINTEN match. DrSmallpox didn't match anything, but was an open proxy. --jpgordon&#8711;&#8710;&#8711;&#8710; 06:12, 7 February 2007 (UTC)

Burak18
Another Burak18 sock has arrived. I would like the underlying IP (probably an open proxy) to be blocked. The account in question is: A ecis Brievenbus 20:35, 8 February 2007 (UTC)
 * ✅. Two open proxies blocked (actually, I got one of them a couple of days ago.) --jpgordon&#8711;&#8710;&#8711;&#8710; 00:03, 9 February 2007 (UTC)

Primetime again

 * was blocked by an administrator well versed with 'T's pupetry. Given that he has always used open proxies, I suggest this latest pupet be checked and the proxy blocked. 68.39.174.238 03:21, 9 February 2007 (UTC)
 * Oddly enough, this one doesn't seem to be an open proxy. Another checkuser might want to investigate, but I couldn't find any indication that it is; if someone else does, point me to that tool! --jpgordon&#8711;&#8710;&#8711;&#8710; 04:55, 9 February 2007 (UTC)
 * Yes, well, Colorado State University is his home IP. ✅. Dmcdevit·t 05:39, 10 February 2007 (UTC)
 * Isn't an open proxy, though, which was all I was paying attention too. Guy was already blocked, after all. --jpgordon&#8711;&#8710;&#8711;&#8710; 05:40, 10 February 2007 (UTC)

Multiple Attack Accounts

 * Called me an ass here, then calls me a moron and insults Sri Lankans here, and finally removes the Dravidian topics template here
 * Removed section and called me an asshole here, then called me and another user assholes here
 * Removed Dravidian topics template here
 * Removed Dravidian topics template here
 * Removed Dravidian topics template here
 * used abusive language against me here
 * used foul language on a religious group here and vandalized Dravidian topics template here.


 * Code letter: A

There are eight IP Address users listed above whom have been involved with vandalizing pages, personal attacks, and attacks people's backgrounds. I respectufully request to have these accounts looked into for possible sockpuppetry and to be blocked. Thank you. Wiki Raja 06:48, 10 February 2007 (UTC)


 * moved from case subpage; IP checks go straight here. Daniel.Bryant 06:50, 10 February 2007 (UTC)


 * Note that many of those IPs are open proxies and should be reported to WP:OP and blocked indefinately. At least one is a web-based free-access proxy. 68.39.174.238 13:14, 10 February 2007 (UTC)


 * ✅ Indeed. I've blocked all but one of them (59.92.15.6) as multiply listed open proxies and/or exploited servers; someone might want to investigate that one more. Also:
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 10 February 2007 (UTC)
 * Thank you. Much appreciated. Wiki Raja 21:58, 10 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 10 February 2007 (UTC)
 * Thank you. Much appreciated. Wiki Raja 21:58, 10 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 10 February 2007 (UTC)
 * Thank you. Much appreciated. Wiki Raja 21:58, 10 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 10 February 2007 (UTC)
 * Thank you. Much appreciated. Wiki Raja 21:58, 10 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 10 February 2007 (UTC)
 * Thank you. Much appreciated. Wiki Raja 21:58, 10 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:13, 10 February 2007 (UTC)
 * Thank you. Much appreciated. Wiki Raja 21:58, 10 February 2007 (UTC)


 * Can the admin please clarify. Why were all those ips blocked?  Is it because the ip abused wikiraja a couple of times or is it because the ips 'vandalised' articles.  If it was because you think the ips vandalised articles, I have to say that the claim is preposterous.  Wikiraja has been fighting a lone and losing battle on Template_talk:Dravidian_topics, Talk:Yakshagana, Talk:Dravidian_people, Talk:Carnatic music etc., for some time now.  If anything, wikiraja is guilty of trolling, stonewalling and going against community consensus.  Last I checked, several users including me(and the ip) have serious concerns about the templates he's plastering on dozens of articles.  He hasnt got support from even a single participant in the discussion on those pages.  Yet he is unilaterally tagging dozens and dozens of articles with that template.  And if anybody reverts his tagging or makes consensus changes to his template, he is crying 'vandalism'.  If there ever has been vandalism in this case, it has been from Wikiraja.  He is simply trolling and trying everybody's patience.  I request the admin to take a look at the talk pages and observe that other editors have made a sincere effort to listen to Wikiraja's case.  But he has failed to convince anybody.  Sarvagnya 00:12, 11 February 2007 (UTC)
 * They're all identified as open proxies or compromised servers on various realtime blackhole lists. --jpgordon&#8711;&#8710;&#8711;&#8710; 01:33, 11 February 2007 (UTC)
 * To user Sarvagnya: Firstly, why are you here? I am not reporting you. This gives me the impression that there might be a possible connection between you and the IPs above. After all I have reported a couple of the IP Addresses above along with your username. It turned out that your username was in North America and the other two in India. So, don't accuse me of engaging in personal attacks against you since your actions cause suspicion. But, then why, or how did you know so fast that these IP Address users were reported? Please do not get upset when a few parts of the propoganda machine busts fuse. Wiki Raja 01:41, 11 February 2007 (UTC)
 * Stop, all of you, now. This was just referred to ANI, and any discussion about who-did-what should take place there. RFCU is not dispute resolution. I'm archiving this now, so don't continue it here.  Daniel.Bryant  01:48, 11 February 2007 (UTC)

Another Bobby Boulders sockpuppet


John254 16:23, 11 February 2007 (UTC)
 * ✅ with his friends:
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:47, 11 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:47, 11 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:47, 11 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 16:47, 11 February 2007 (UTC)


 * Would it be possible to block the IP address being used by these accounts? John254 16:55, 11 February 2007 (UTC)
 * Nope. Dynamic. --jpgordon&#8711;&#8710;&#8711;&#8710; 18:08, 11 February 2007 (UTC)

Bobabobabo
Need to block underlying IPs here. I know that some may be her home IP (72.33.something), but the bottom two were registered recently and would be open proxies.— Ryūlóng ( 竜 龍 ) 01:38, 12 February 2007 (UTC)
 * ✅. With some friends:
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)
 * (No, I'm not carefully counting the a's and o's in bobaoaboaoabaoaoa; there might be a dupe up there.) --jpgordon&#8711;&#8710;&#8711;&#8710; 15:06, 12 February 2007 (UTC)

Another Burak18 sock
Probably editing from an open proxy. Please block. A ecis Brievenbus 18:02, 11 February 2007 (UTC)
 * ✅. --jpgordon&#8711;&#8710;&#8711;&#8710; 15:11, 12 February 2007 (UTC)

Sockpuppets



 * Removed WikiProject Dravidian civilizations template here and here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here


 * A

Looks like we have the same problem again with a possible sockpuppet removing my templates with multiple IP Addresses. Please look into this. This is getting out of hand. Thanks Wiki Raja 23:43, 12 February 2007 (UTC)
 * . There's nothing to check. First of all, if these had a reason to be put anywhere, it's in the checkip section below. Secondly, you don't need checkuser to verify that an IP is an open proxy, which most of these probably are; go over to WP:OP and list them there. Thank you. --jpgordon&#8711;&#8710;&#8711;&#8710; 00:08, 13 February 2007 (UTC)

Vandal with a grudge

 * * - user's contributions suggest more abuse on German Wikipedia. (Update: indeed, there's de:User:Upravenec, see his user page. Update: the German user page has been deleted on my request, it contained a redirect to de:User:-jkb-.)
 * * - user's contributions suggest more abuse on German Wikipedia. (Update: indeed, there's de:User:Upravenec, see his user page. Update: the German user page has been deleted on my request, it contained a redirect to de:User:-jkb-.)
 * * - user's contributions suggest more abuse on German Wikipedia. (Update: indeed, there's de:User:Upravenec, see his user page. Update: the German user page has been deleted on my request, it contained a redirect to de:User:-jkb-.)
 * * - user's contributions suggest more abuse on German Wikipedia. (Update: indeed, there's de:User:Upravenec, see his user page. Update: the German user page has been deleted on my request, it contained a redirect to de:User:-jkb-.)

Code Letter: A,C
 * - probably unrelated

Vandal with a grudge attacking various Wikipedia users; I have made three checkuser requests about him. (See my edits to checkuser pages; this is the most recent one). - Mike Rosoft 18:29, 11 February 2007 (UTC)
 * Note: I had e-mailed Thatcher131 about indirect evidence connecting the vandal to other existing accounts (also on Czech Wikipedia). See cs:Wikipedie:Žádost o arbitráž/Egg versus Semenáč/Důkazy. - Mike Rosoft 18:33, 11 February 2007 (UTC)
 * If this is possible, please coordinate checkuser with Czech Wiki. The guy is doing the same over there. A contact to cs: is on cs:Wikipedie:Velvyslanectví. Pavel Vozenilek 19:37, 11 February 2007 (UTC)
 * note from cs-0 user: maybe also, as that's also a Czech name that means a vulgarity (proud cock). ~Crazytales (AAAA and ER!) 03:25, 12 February 2007 (UTC)
 * Obviously, it's the same vandal, but the account is over two months old and has already been blocked. I don't see him mentioned in any of the requests ... - Mike Rosoft 12:53, 12 February 2007 (UTC)


 * ✅ that they're on same or very close dialup IPs, except for FAKEACCOUNTLOL. I bet if I could read Czech my ears would turn red. --jpgordon&#8711;&#8710;&#8711;&#8710; 22:38, 12 February 2007 (UTC)
 * deep red. Thx -jkb- 22:51, 12 February 2007 (UTC)

Sockpuppets of starwars1955


Code letter: A

A rangeblock of 4.245.120.0/24 and 4.245.121.0/24 has been proposed and is being discussed here. That discussion also includes a list of IP addresses identified as sockpuppets of starwars1955 as well. Thank you, PSUMark2006   talk  |  contribs  01:32, 15 February 2007 (UTC)
 * I've added another sock. The user is now impersonating other users. PSUMark2006   talk  |  contribs  01:48, 15 February 2007 (UTC)


 * ✅. Probably want to add 4.245.122.0/24 to that list. Also found, and should be evaluated:

--jpgordon&#8711;&#8710;&#8711;&#8710; 02:43, 15 February 2007 (UTC)
 * Range blocks enacted, and it appears that all socks listed above are blocked as well. Thanks. | Mr. Darcy talk 04:00, 15 February 2007 (UTC)

Wheels for willys


Code letter: A

See and. You know the drill. --Slowking Man 01:08, 14 February 2007 (UTC)
 * . --jpgordon&#8711;&#8710;&#8711;&#8710; 01:10, 15 February 2007 (UTC)

Another Burak18 sock
Burak18 vandalism socks, probably editing from an open proxy. Please block. A ecis Brievenbus 21:12, 13 February 2007 (UTC)
 * for Mp3ryanb -- open proxy. --jpgordon&#8711;&#8710;&#8711;&#8710; 01:13, 15 February 2007 (UTC)

Joe Trohman vandalism attack





 * Code letter: A

Per Daniel.Bryant's suggestion on my talk page, I'd like to request an IP check for the several SPAs that vandalized the Joe Trohman page tonight. -- Shadowlynk 09:59, 15 February 2007 (UTC)
 * (Recused) Per above, I believe I have blocked the IP underlying - 69.156.204.242, who was joining in - but I want to be sure via a CU. As you can see from the contribs of the four usernames, this was a malicious and ridiculous attack vandalism spree of high-speed editing, and in my opinion warrants a checkuser being run to ensure that there are no unblocked IP's underlying these accounts. I would also appreciate it if the checkuser could list any accounts (that are being used for Trohman vandalism) that are currently unblocked but on 69.156.204.242, so I can block them. Cheers,  Daniel.Bryant  10:02, 15 February 2007 (UTC)
 * ✅ except for Falloutbecky, not IP-related. No other editors were found on the IP; Lu*sh is not IP-related to the other named editors. Missed were:

--jpgordon&#8711;&#8710;&#8711;&#8710; 18:06, 15 February 2007 (UTC)

More Starwars1955 socks



 * Code letter: A, F

See Requests_for_checkuser/IP_check for context. Apparently the range block mentiined there is insufficient. The above accounts are what's happening this morning.

I have protected Brett Favre for the time being, but if we need to find more socks, we can just unprotect the article and they will turn up. Kusma (討論) 09:19, 15 February 2007 (UTC)
 * Agree with that assessment; I hate using an article as bait, but it would almost certainly produce results in this case.--Isotope23 15:23, 15 February 2007 (UTC)
 * I have unprotected the article. The rangeblocks are anon-only no-account-creation, so I hope we should be done after a manageable number of socks. The other method would be to change the block to a hard one; that would be up to a checkuser to decide. Kusma (討論) 15:31, 15 February 2007 (UTC)


 * ✅. Also:

--jpgordon&#8711;&#8710;&#8711;&#8710; 18:10, 15 February 2007 (UTC)

WikiTruth Trolling

 * WikiTruth trolling. Most of these accounts were created by the same user at the same time . They took exception to me declining an unblock request and began using their talk pages for personal attacks. (See deleted revisions of all of their talk pages.)  Please, if possible, identify and block any other related accounts (and protect their talk pages), along with IP addresses, if possible. Thank you. BigDT 03:41, 16 February 2007 (UTC)
 * ✅. Also several others blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 07:21, 16 February 2007 (UTC)
 * WikiTruth trolling. Most of these accounts were created by the same user at the same time . They took exception to me declining an unblock request and began using their talk pages for personal attacks. (See deleted revisions of all of their talk pages.)  Please, if possible, identify and block any other related accounts (and protect their talk pages), along with IP addresses, if possible. Thank you. BigDT 03:41, 16 February 2007 (UTC)
 * ✅. Also several others blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 07:21, 16 February 2007 (UTC)
 * WikiTruth trolling. Most of these accounts were created by the same user at the same time . They took exception to me declining an unblock request and began using their talk pages for personal attacks. (See deleted revisions of all of their talk pages.)  Please, if possible, identify and block any other related accounts (and protect their talk pages), along with IP addresses, if possible. Thank you. BigDT 03:41, 16 February 2007 (UTC)
 * ✅. Also several others blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 07:21, 16 February 2007 (UTC)
 * WikiTruth trolling. Most of these accounts were created by the same user at the same time . They took exception to me declining an unblock request and began using their talk pages for personal attacks. (See deleted revisions of all of their talk pages.)  Please, if possible, identify and block any other related accounts (and protect their talk pages), along with IP addresses, if possible. Thank you. BigDT 03:41, 16 February 2007 (UTC)
 * ✅. Also several others blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 07:21, 16 February 2007 (UTC)
 * WikiTruth trolling. Most of these accounts were created by the same user at the same time . They took exception to me declining an unblock request and began using their talk pages for personal attacks. (See deleted revisions of all of their talk pages.)  Please, if possible, identify and block any other related accounts (and protect their talk pages), along with IP addresses, if possible. Thank you. BigDT 03:41, 16 February 2007 (UTC)
 * ✅. Also several others blocked. --jpgordon&#8711;&#8710;&#8711;&#8710; 07:21, 16 February 2007 (UTC)


 * Vandal and attack accounts may be listed here for the purpose identifying and blocking the underlying IP address or open proxy. Requests to confirm sockpuppets of known users should be listed in the sockpuppet section above.
 * If you already know the IP address of the suspected open proxy, list it at Wikipedia:Open Proxies instead.
 * Use === Subsections ===, do not create subpages.
 * List user names using the template. Add new reports to the top of the section.
 * Requests may be acted on or declined according to the discretion of the checkuser admins. Responses will be noted here.
 * Answered requests will be moved to Requests for checkuser/IP check for 7 days, after which they will be deleted. No separate archive (other than the page history) will be maintained.

Primetime marching on...

 * — I am almost totally certain that this is another attack pupet of the copyright plagiarist and troll Primetime. Given his MO of always using open proxies, this dude should be checked. 68.39.174.238 00:58, 16 February 2007 (UTC)
 * named user does not appear to exist. --jpgordon&#8711;&#8710;&#8711;&#8710; 02:23, 16 February 2007 (UTC)

Starwars1955



 * Code letter: A

Apparently the rangeblock wasn't enough. He is back with:

Pretty typical vandalism --> revert vandal with username similar to established editor while introducing his edits into the article. I've blocked both but it should probably be looked at to see if he is now using WP:OP or if an additional rangeblock should be looked at.--Isotope23 21:13, 15 February 2007 (UTC)
 * ✅; no problem with range block. Just a couple we missed. --jpgordon&#8711;&#8710;&#8711;&#8710; 22:25, 15 February 2007 (UTC)

User:PiratesArCool
There are a series of accounts that are engaging in what appears to be a game of vanalizing articles and then trying to get each other blocked. I've already blocked:

...and other admins got:



All are exhibiting the same sort of edit behavior so WP:DUCK they have been blocked. Related accounts that are still active:



Some of these accounts might be too stale, but if it would be possible to identify the underlying IPs and check for any other socks, it might be worth blocking them. if or  are sharing an IP with any blocked accounts they should probably be blocked as well. I suspect you will find more than 1 IP because like I said, it appears to be a group of school kids doing this. I just want to make sure we are getting any sleepers that are out there and the IP's as well if it wouldn't cause too much collateral damage to block them for a period of time.--Isotope23 19:23, 16 February 2007 (UTC)
 * ✅. Underlying IP was already blocked a few days ago. I also found:
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 20:26, 16 February 2007 (UTC)
 * Thanks, I'll get blocking...--Isotope23 20:38, 16 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 20:26, 16 February 2007 (UTC)
 * Thanks, I'll get blocking...--Isotope23 20:38, 16 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 20:26, 16 February 2007 (UTC)
 * Thanks, I'll get blocking...--Isotope23 20:38, 16 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 20:26, 16 February 2007 (UTC)
 * Thanks, I'll get blocking...--Isotope23 20:38, 16 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 20:26, 16 February 2007 (UTC)
 * Thanks, I'll get blocking...--Isotope23 20:38, 16 February 2007 (UTC)
 * Thanks, I'll get blocking...--Isotope23 20:38, 16 February 2007 (UTC)

Primetime (For real this time)

 * — Sorry, last time I listed this pupet of Primetime I misspelled the name. He always uses open proxies, so this one should be checked. Sorry for the screwup. 68.39.174.238 20:37, 16 February 2007 (UTC)

User:JarlaxleArtemis
For the last four days, the banned user (see WP:JARLAXLE) has been creating throwaway accounts to perform mass additions of templates to the same set of articles (see Wikipedia:Administrators' noticeboard/Incidents#JarlaxleArtemis sock to block). Can someone check the IPs for these accounts to determine whether an IP block is feasible? (He's been known to use open proxies, though we might be lucky this time.) The accounts so far are as follows: —Psychonaut 19:16, 16 February 2007 (UTC)
 * . Also:

--jpgordon&#8711;&#8710;&#8711;&#8710; 19:31, 16 February 2007 (UTC)

User:Zwartepiet
Another vandalism sockpuppet, probably editing from an open proxy. Please block. A ecis Brievenbus 17:13, 16 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 18:28, 16 February 2007 (UTC)

59.92.51.210 and multiple vandal accounts

 * Removed Dravidian topics template here
 * Removed Dravidian topics template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here
 * Removed WikiProject Dravidian civilizations template here


 * Code Letter: A

Here are several anonoymous users of IP Addresses removing templates from several related sites at the same time. Respectfully request to have a check on these accounts and block. Regards. Wiki Raja 19:29, 13 February 2007 (UTC)


 * You already know the IP addresses. What do you want checked?  Please read the instructions at the top of the page.  If you would like them blocked, post to WP:AIV or WP:ANI.  If you would like them checked to see if they are open proxies, post to WP:OPP.  Checkuser can investigate the IP addresses used by registered editors; here, you already know the IP addresses. Thatcher131 19:41, 13 February 2007 (UTC)


 * With the exception of the 3rd from the last, they're all open proxies/compromized machines. Report them at WP:OP. 68.39.174.238 01:00, 16 February 2007 (UTC)

Nothing for checkuser to do here; see the advice above. Essjay  ( Talk )  05:26, 17 February 2007 (UTC)

Original Research by User Paintrials ??
New User has just added external links to 3 articles. These links point to a Research dept of a hospitals, where they do... Pain Trials. Although there is some good info on the Hospital site in question, it's not unique, but does look like Original Research or Self Promotion. Perhaps a check of the IP against whois could sort it out. Johnpf 21:00, 13 February 2007 (UTC)
 * I think this qualifies as fishing. Could you specify what you want a checkuser to check for, utilizing one of the code letters up top? Oh, and I don't think "original research" is the word you're looking for. Self promotion, however, sounds apt. Picaroon 03:18, 14 February 2007 (UTC)

Essjay  ( Talk )  05:25, 17 February 2007 (UTC)

Johnny the Vandal is back (yet again)



 * Code Letter: A

This user is a long-term vandal (see the deleted history of Long term abuse/Johnny the Vandal). It never ceases to amaze me that this guy's obscession with impersonating and/or  (see the username pattern he uses, as well as his unblock trolling), inserting incorrect info (such as Crass) and making profane personal attacks (such as User talk:Arwel Parry) comes up every so often, and the above accounts are part of his latest sock parade. I've asked for CU on him several times before (see this, this, this, and this), so it's time for me to repeat this request once more. Scob e ll302 02:47, 6 February 2007 (UTC)

He's jumping IPs in a fairly well-used /16; for now, it's probably best to just block the accounts as he creates them (he's not using the same IP for more than one account at this time, so blocking them does little good). If he stays in this /16 for long, we can block account creation from it. Essjay  ( Talk )  05:24, 17 February 2007 (UTC)

Oma56
Another vandalism sock, probably editing from an open proxy. Please block. A ecis Brievenbus 20:27, 17 February 2007 (UTC)
 * I couldn't demonstrate an open proxy here. --jpgordon&#8711;&#8710;&#8711;&#8710; 00:28, 18 February 2007 (UTC)

Starwars1955



 * Code letter: A

Banned and rangeblocked a few days ago, it appears he is still at it. I'm not sure if these are old accounts of his or if he is using another IP, but it might be worth checking. At the very least it might turn up some sleepers that need a block. --Isotope23 20:19, 17 February 2007 (UTC)
 * ✅. I also found:
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 00:34, 18 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 00:34, 18 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 00:34, 18 February 2007 (UTC)
 * --jpgordon&#8711;&#8710;&#8711;&#8710; 00:34, 18 February 2007 (UTC)

Tooj117



 * See also: Requests for checkuser/Case/Tooj117
 * See also: 27 January 2007 IP check
 * See also: 29 January 2007 IP check


 * Code letter: A, C, F

I really don't think any justification is needed here, especially per Mackensen's comment.

Basically, three things:-
 * Is this Tooj, or a lame impersonator, and are these all related?
 * Is the IP/IP range blockable (ie. shared, not shared)?
 * Are there any other unblocked socks of this banned user?

Cheers,  Daniel.Bryant  08:11, 18 February 2007 (UTC)
 * ✅. Also:


 * I'm not sure how to tell if it's Tooj or someone else who hates Ohnoitsjamie and uses the same networks. I've not done any blocking. --jpgordon&#8711;&#8710;&#8711;&#8710; 17:53, 18 February 2007 (UTC)

Ed Kavalee vandalism





 * Code letter: A, C

Can we see if the accounts were created from the same IP range, and if so can we find out all the accounts that have done 5 edits or less and that have existed for more than 2-3 months?

All of these accounts have been vandalising Ed Kavalee, and all appear to have been created some time ago just to get around semi-protection. This means that there are probably more of them, in which case I think we should proactively work out which ones were created and then decide whether to indefinitely block them or at least come to some sort of solution to prevent further vandalism. - Ta bu shi da yu 02:37, 18 February 2007 (UTC)
 * . --jpgordon&#8711;&#8710;&#8711;&#8710; 17:59, 18 February 2007 (UTC)