Wikipedia:Sockpuppet investigations/69.204.5.196/Archive

14 May 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This is the Nick Kroll vandal. He's been trying to vandalize the Nick Kroll article since December, but JesseRafe kept reverting his edits. I guess he wasn't happy about this, because he's been mass reverting all of JesseRafe's recent edits out of revenge I presume, causing a great amount of disruption. The master has been blocked for a week but that hasn't stopped him. Common targets include: Nick Kroll: master and ip1, Nathan Lane: master and ip1, Jingle Bells: master, ip1, ip2, ip3, ip5, and ip6, Joe Budden: master, ip2, ip4, and ip5, Pill (rapper): master, ip2, ip3, and ip5, Peter Paul Candy Manufacturing Company: master, ip2, ip3, and ip5, and there's a lot more. All of the socks geolocate to either New York or Kansas. They also will be mobile app edits with canned edit summaries, and they are all to article's JesseRafe has recently edited. Sro23 (talk) 04:57, 14 May 2016 (UTC)


 * Adding 66.87.92.151 and 66.87.94.107, getting more sophisticated in edits and vandalism, undoing and refactoring XFD comments, the IPs are being blocked intermittently, I don't think enough admins know this is all the same vandal causing mass carnage and 31 hour blocks just bring the IP back a day later. Need some type of blanket block, this IP has shown aggressive malice on Wikipedia. JesseRafe (talk) 00:51, 16 May 2016 (UTC)

I saw you added, but I really doubt the two are related. 68.48.241.158 doesn't seem to have any relationship with the articles JesseRafe has edited and acts completely different from the Nick Kroll vandal. I'm pretty sure the Nick Kroll vandal doesn't even know to sign his posts, but 68.48.241.158 appears to be much more of a regular. Sro23 (talk) 23:16, 16 May 2016 (UTC)
 * OK, you can remove him if you want. It just looked suspicious to me. --Laber□T 07:51, 17 May 2016 (UTC)
 * I agree the 68IP doesn't fit the pattern as the subject of this investigation has a very specific MO, which is not only limited to inane edits about Nick Kroll or/and Jingle Bells and getting revenge on me via simple reversions, but also adding German language text from the corresponding de.wikipedia site. 68IP has done none of those. JesseRafe (talk) 14:06, 17 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Yep, they've popped up on AFD, too. Is the range quiet enough to allow for a rangeblock? GABHello! 01:04, 16 May 2016 (UTC)

Very well, I'm done. The carnage stops now. From where the Sun now stands, I will edit no more forever. — Preceding unsigned comment added by 66.87.95.102 (talk) 01:28, 16 May 2016 (UTC)

I do have one request; now that I've voluntarily ceased my campaign, you should - after however long a time you need to verify the legitimacy of my surrender - unblock the above ips mistakenly identified as "sockpuppets".

They're only a handful of the literally thousands I could've used to continue unhindered. Keeping them blocked would serve only to punish any innocent bystanders who happened to land on them.

Sincerely, The Nick Kroll Vandal — Preceding unsigned comment added by 66.87.95.102 (talk) 02:13, 16 May 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've anon blocked the /16 range for 2 weeks given the persistent disruption. Mike V • Talk 00:15, 18 May 2016 (UTC)


 * , you missed 69.204.5.196 and 69.204.0.113, clearly the same user, but not within that IP range, thanks! JesseRafe (talk) 02:58, 18 May 2016 (UTC)
 * I'm not necessarily sure that those IPs belong to the same individual. The /16 I blocked belongs to Sprint PCS and geolocates near Wichita, Kansas. 69.204.0.113 and 69.204.5.196 belong to Time Warner Cable and geolocate to Lockport, New York and 68.48.241.158 is assigned to Comcast Cable in Ann Arbor, Michigan. Mike V • Talk 03:07, 18 May 2016 (UTC)