User:MER-C/Blu Aardvark RFCU

This is an archive of RFCUs relating to banned vandal Blu Aardvark.

Note: this page will be moved to countervandalism.org when my account over there is established.

13 August 2006 - 20 August 2006
''The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it .''





Banned vandal has been creating a number of sockpuppets tonight, most with very vulgar user names (the two above are the relatively clean ones -- see Category:Suspected Wikipedia sockpuppets of Jew Aardvark for a partial list). Request a check to see if static IP, and if so, block the IP in question indefinitely. --Nlu (talk) 08:39, 13 August 2006 (UTC)


 * Correct me if I'm wrong, but don't they look like sockpuppets of ? 68.39.174.238 10:08, 13 August 2006 (UTC)
 * Could also be an imposter, but worth checking anyway. See Requests for checkuser/Case/Blu Aardvark. Thatcher131 (talk) 11:56, 13 August 2006 (UTC)

I've blocked some proxies. We're done here. Mackensen (talk) 14:14, 13 August 2006 (UTC)

Unfortunately it's not over yet. There was another breakout at about 0400 UTC:



...to name a couple of user accounts. MER-C 08:28, 14 August 2006 (UTC)
 * Wikipediacruft vandal names. Fascinating. Thatcher131 (talk) 18:43, 14 August 2006 (UTC)

--Added by user:DVD R W

Done. Mackensen (talk) 21:40, 14 August 2006 (UTC)

Here we go again. Yawn.


 * - might be an open proxy

By the way, does this account creation vandal have anything in common with, who vandalises in the same way? MER-C 09:41, 15 August 2006 (UTC)

Done. They show up on the same open proxies at times, but it could be a coincidence. Doesn't matter much. Mackensen (talk) 13:45, 15 August 2006 (UTC)

Here are some more. First wave:



Second wave:



MER-C 12:09, 16 August 2006 (UTC)

One more: MER-C 08:39, 17 August 2006 (UTC)


 * This group done. Mackensen (talk) 20:57, 18 August 2006 (UTC)

Just when you thought it was over:



MER-C 08:55, 17 August 2006 (UTC)

A self-confessed sockpuppet: (see ) MER-C 09:13, 17 August 2006 (UTC)

Second bunch in two hours:



MER-C 10:25, 17 August 2006 (UTC)

I'm not a clerk or checkuser, but some of these usernames are so obviously sockpuppets (or impersonators) that they don't require the intensive checkuser search. Simply report them as obvious sockpuppets or impersonators (or bad usernames) to get them indef blocked. Let's not waste Mackensen's valuable time with these obvious cases, shall we? --Deathphoenix ʕ 14:31, 17 August 2006 (UTC) Oh, and as a postscript, all these usernames are blocked. I think it's best to report these names elsewhere, such as Suspected sock puppets or WP:ANI. --Deathphoenix ʕ 14:33, 17 August 2006 (UTC)
 * Comment. Actually, this is useful, because many of these come from open proxies, which I can then identify and block. Mackensen (talk) 14:50, 17 August 2006 (UTC)
 * Ah, okay, then perhaps I should retract my statement. I was concerned about RFCU time, but if you have no complaints, then neither shall I. :-) --Deathphoenix ʕ 14:56, 17 August 2006 (UTC)

Yesterday's haul of sockpuppets:



MER-C 09:56, 18 August 2006 (UTC)

. I blocked several. The Uninvited Co., Inc. 21:52, 18 August 2006 (UTC) Three more:



MER-C 03:30, 19 August 2006 (UTC)

. I blocked. FWIW these in at least some cases don't respond to an open proxy scan. I'm blocking anyway in the absence of useful edits under the presumption that they're either zombies or open proxies that are not always operating. The Uninvited Co., Inc. 04:01, 19 August 2006 (UTC)
 * I've treated most the same way. Mackensen (talk) 13:27, 19 August 2006 (UTC)

Another bunch:



MER-C 05:13, 19 August 2006 (UTC)

Yet another lot:



MER-C 12:25, 19 August 2006 (UTC)

Seems there is an airport vandal mixed in there as well...



MER-C 02:16, 20 August 2006 (UTC)

Ahem: MER-C 03:14, 20 August 2006 (UTC)


 * Usual group of AOL and CenturyTel IPs, as we've come to expect. I've put a tentative block in place on the CenturyTel IPs. We'll see what happens. Mackensen (talk) 03:31, 20 August 2006 (UTC)

''The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it. Subsequent requests related to this user should be made below, in a new section.

Blocked: 20 August 2006 - undefined

 * 03:24, 20 August 2006 Mackensen (Talk | contribs) blocked "72.160.0.0/16 (contribs)" with an expiry time of 1 week (aardvarks on a plane)

''The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it .''

Seems the block is working, our vandal is now vandalising his talk pages. Some accounts got through, must be open proxies.



MER-C 12:46, 20 August 2006 (UTC)

Yep, proxies. Both blocked. Mackensen (talk) 14:19, 20 August 2006 (UTC)

Here's one that slipped through: MER-C 12:54, 22 August 2006 (UTC)

+ possibly --pgk( talk ) 17:50, 23 August 2006 (UTC)

We haven't seen this in a long time.



MER-C 07:55, 26 August 2006 (UTC)