Wikipedia:Sockpuppet investigations/The UPN Vandal/Archive

07 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Quack. Sum mer PhD (talk) 18:33, 7 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked three months for block evasion based on duck test. Closing now. Mark Arsten (talk) 20:08, 8 December 2013 (UTC)

12 March 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Quack. Sum mer PhD (talk) 04:02, 12 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * There is a very long backlog, I really don't have time to search through the contribs of the IP and try and link it to the archive but this looks reasonably obvious, could you please give me a diff of a blocked account/IP and this reported IP. Thanks, Callanecc (talk • contribs • logs) 12:24, 12 March 2014 (UTC)
 * Two previous blocks for three months each, including this duck block for characteristic edits (mostly adding fake future productions), including this which is an obvious match for this. - Sum mer PhD  (talk) 13:34, 12 March 2014 (UTC)
 * New IP (97.73.64.143), same characteristic edit. - Sum mer PhD  (talk) 14:07, 12 March 2014 (UTC)
 * New IP (64.24.84.2),same characteristic edit. - Sum mer PhD  (talk) 19:30, 15 March 2014 (UTC)


 * Thanks for the extra info. The IPs haven't edited for a while now so no need to block. Closing. Callanecc (talk • contribs • logs) 03:29, 17 March 2014 (UTC)

26 March 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

IP repeatedly used by the UPN Vandal. Characteristic talk page edit. Compare. Sum mer PhD (talk) 11:46, 26 March 2014 (UTC)
 * 64.24.84.8 also repeatedly used by UPN.

While UPN uses numerous IPs, they are the same IPs again and again. By the time this case is handled, UPN will have moved on again. My goal with this case is merely to have a confirmation that this IP is being used by UPN, allowing for future blocks through fast and easy ARV listings. Thanks. - Sum mer PhD  (talk) 13:20, 26 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * This person sometimes signs the name "Joshua Raymond Hahn". He is a known hoaxer who uses proxy servers such as 97.73.64.143. One of the hoaxes is that Butch Hartman will direct a film about Tonka, which was repeatedly put into that article by 64.24.84.3, 64.24.84.5, 172.162.31.147, 97.73.64.149, and 64.24.84.8. See the discussion at Talk:Tonka. You can see how this guy gets around if you search for his name on talk pages. If there was a way to block everything he does I would endorse it. Binksternet (talk) 14:10, 26 March 2014 (UTC)
 * Their history is extensive with several IPs being used. However, they are the same IPs repeatedly. Other examples (With links to characteristic talk page edit and a fake/unsourced future film/roles):


 * 63.3.0.129
 * Forum-type question about Boomerang programming
 * Unlikely film appearance


 * 64.24.84.3
 * Talk
 * Unlikely movie The Pebble and the Penguin (CGI Remake) (2017)


 * 64.24.84.2
 * Talk
 * Unlikely movie Super Mario Bros. (remake)


 * 64.24.84.8
 * Unlikely film Tonka
 * Talk
 * Forum-type question about future film


 * 97.73.64.142
 * Talk
 * Unlikely film Super Mario Bros. (remake)


 * 97.73.64.143
 * Talk
 * Unlikely movie Super Mario Bros. (remake)


 * 97.73.64.145
 * Talk]
 * Unlikely film Popeye (remake with Jim Carey)


 * 97.73.64.146
 * Talk
 * Unlikely film Easy Bake Oven (yes, really)


 * 97.73.64.151
 * Talk
 * Unlikely film Super Mario Bros. (remake)


 * 97.73.64.154
 * Talk
 * Unlikely film Easy Bake Oven


 * 172.129.76.132
 * Talk


 * 172.130.242.60
 * Talk


 * 172.132.30.2
 * Talk
 * I have a list of others that I'm still weeding through. My compiled list is at User:SummerPhD/UPN.
 * Other than the "revert on sight" that is currently being used, I don't specifically know what we can do other than repeated blocks to the IPs. My goal here is to establish a confirmed list of IPs to make blocking easier/faster. As it seems clear the person behind this is young and/or intellectually disabled, it would seem that cutting off the problematic IPs would cut off the vandal (i.e., they can't very well go mobile or switch to a new ISP).
 * From what I can tell in an online search, the guy is in his early 20s, so we don't have to worry about a minor. Binksternet (talk) 18:33, 26 March 2014 (UTC)
 * We were dealing with the UPN Vandal back in 2007 so there's no way they're a minor any longer. Also check the history of Talk:Nickelodeon Kids' Choice Awards and Talk:2014 Kids' Choice Awards, where JRH has been asking inane questions and making predictions about winners and show hosts for the last two years and both the talk and main pages have been semi'ed at times (the main KCA page is semi'ed for the usual 'fantasy TV'/Nickcruft reasons, along with JRH's host and program predictions).  Nate  • ( chatter ) 02:32, 27 March 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * , closing. Callanecc (talk • contribs • logs) 02:00, 7 April 2014 (UTC)

04 April 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Signed talk page edit. Quack. Sum mer PhD (talk) 19:54, 4 April 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked for 1 week. Closing now. Callanecc (talk • contribs • logs) 02:00, 7 April 2014 (UTC)

14 May 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Has returned to this IP address to continue their disruption. Quack. STATic message me!   09:30, 14 May 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP already blocked 6 months, closing. &mdash;Darkwind (talk) 11:10, 16 May 2014 (UTC)

18 May 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Quack. STATic message me!   17:12, 18 May 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Blocked two weeks.--Bbb23 (talk) 18:21, 18 May 2014 (UTC)

25 October 2014

 * Suspected sockpuppets
 * 
 * 
 * 
 * 
 * 

The above edits look pretty much the same as this edit made by 97.73.64.152. I am willing to believe that this user is using multiple IPs to block evade. Does anyone else agree? Electricburst1996 (talk) 14:36, 25 October 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * 97.73.64.152 and 75.243.108.45 have both been blocked. 75.192.0.233 hasn't made an edit for ~20 days, so a block won't help now. Mike V  •  Talk  22:24, 25 October 2014 (UTC)
 * This needs to be merged with Sockpuppet investigations/The UPN Vandal when archiving it. ☺ ·  Salvidrim!   ·  &#9993;  16:24, 30 October 2014 (UTC)

01 March 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

More edits about unlikely events - - as is protocol for this chronic sockmaster. Electric Burst (Electron firings)(Zaps) 22:05, 1 March 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Thanks for the report. It looks like the IP belongs to an wireless network, which are known for switching quickly. As the IP hasn't made an edit since, I'm going to leave it be for now. I've protected one of the articles for a month and MusikAnimal semi-protected the talk page for a year. Mike V • Talk 02:13, 7 March 2015 (UTC)

26 June 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Has made edits at List of programs broadcast by Discovery Family - - adding unsourced information and all caps hidden notes telling editors to "LEAVE IT ALONE!!!" Quack. Electric Burst (Electron firings)(Zaps) 18:54, 26 June 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

As its username suggests he is a vandal. The registered user is indeffed already due to an inappropriate username. --Fazbear7891 (talk) 03:32, 29 June 2015 (UTC) Actually, the account was indeffed because it was a placeholder name to describe the vandal in question, due to the fact that he has a long-term abuse record and that he has used more IPs than he has used accounts. — Preceding unsigned comment added by Electricburst1996 (talk • contribs)

Clerk, CheckUser, and/or patrolling admin comments

 * The IP is not active any more. No need to block it. Reopen the case if the activity from the IP continues. Closing now.  Vanjagenije  (talk)  20:50, 29 June 2015 (UTC)  Vanjagenije   (talk)  20:50, 29 June 2015 (UTC)

12 November 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

- threatening hidden notes in all caps demanding that editors not remove his edits. Quack. Electric Burst (Electron firings)(Zaps) 01:29, 12 November 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Admin action needed - (compare with this). Please, block this IP for three days.  Vanjagenije   (talk)  08:21, 12 November 2015 (UTC)
 * Blocked as requested. Closing. Bbb23 (talk) 13:36, 12 November 2015 (UTC)

09 December 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

IP restored this edit, which has been made by numerous UPN Vandal socks. Quack. Electric Burst (Electron firings)(Zaps) 17:08, 9 December 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked one week for block evasion and target article semi-protected. Closing case for now. Mark Arsten (talk) 17:21, 9 December 2015 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This vandalizer keeps vandalizing the List of programs broadcast by Discovery Family and Talk:List of programs broadcast by Discovery Family pages by adding Beast Wars: Transformers and Beast Machines: Transformers. AdamDeanHall (talk) 18:23, 30 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * This IP and the others that AdamDeanHall mentioned in other reports all seem to be the work of USER:The UPN Vandal if that is any help. RickinBaltimore (talk) 19:02, 30 June 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Please, list all suspected sockpuppet accounts or IPs under "Suspected sockpuppets". Sockpuppeting means using multiple accounts, so there must be at least two.  Vanjagenije   (talk)  19:00, 30 June 2016 (UTC)
 * Thanks, . I moved the case. Since the IP is already blocked, I'm closing this.  Vanjagenije  (talk)  19:08, 30 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Signed talk page comment with "Joshua Raymond Hahn", one of the sockmaster's hallmarks. . Also, a rangeblock is desperately needed for IPs in the 172.164... range, as they are also being used by the sockmaster. Electric Burst (Electron firings)(Zaps) 18:57, 18 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the range. Looking at the contributions going back a month, I could only find two edits that probably weren't the UPN vandal. ~ Rob 13 Talk 03:02, 25 July 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Making same edits as previous incarnations, tagging posts with "Joshua Raymond Hahn" RickinBaltimore (talk) 12:41, 21 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the range. See above. ~ Rob 13 Talk 03:02, 25 July 2016 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Addressed self as "Joshua Raymond Hahn" on talk page - a common hallmark of The UPN Vandal -  The Grand Delusion (Send a message) 17:47, 28 January 2020 (UTC)

UPDATE 1/29/2020: Adding 2001:5B0:41DB:5118:A45D:922C:AFE8:C81E, who re-instated the offending talk page comment here. The Grand Delusion (Send a message) 16:15, 29 January 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Special:Contributions/2001:5b0:41d0::/44 range blocked for 1 year. The other IP is harder to range block without getting a lot of collateral damage. NinjaRobotPirate (talk) 08:05, 31 January 2020 (UTC)