Wikipedia:Suspected sock puppets/84.255.150.16

User:84.255.150.16

 * Suspected sockpuppeteer
 * (October 17)


 * Suspected sockpuppets
 * (October 16-17)
 * (October 8-14)
 * (October 6-16)
 * (October 2-3)
 * (October 1)
 * (September 30, October 1)
 * (August 26)
 * (August 2-8, September 14)
 * (September 18)
 * (October 18)
 * (October 18)
 * (October 18)
 * (Novemer 18)
 * (November 18)
 * (November 21)
 * (November 24)
 * (November 24)
 * (November 24)
 * (December 6)
 * (January 8 2009)
 * (February 24 2009)
 * (February 24 2009)
 * (February 24 2009)
 * (February 24 2009)
 * (February 24 2009)
 * (February 24 2009)
 * (February 24 2009)


 * Frequently targeted articles
 * Everything edited by User:Enzuru

ناهد/(Nåhed) speak! 06:13, 17 October 2008 (UTC)
 * Report submission by

IP vandal who chases User:Enzuru and myself. cf. User talk:193.188.105.20, User talk:63.216.122.126, User talk:195.174.9.35 (& cetera!!!) for most recent bannage by this IP skipper.
 * Evidence

Personally, I'm not quite sure what to make of the data. There's definitely some harassment going on, but it's unclear if it's all the same user. The top 3 IPs do have very similar edit summaries, but two of them track to Bahrain, and one of them to the United States. So it's unclear if someone's traveling, or possibly using a proxy of some type. In any case, the behavior is clearly unacceptable. As soon as a new IP is noticed, please post it here, and we'll block as-needed. --Elonka 01:50, 18 October 2008 (UTC)
 * Comments
 * Added a new one: 193.188.105.220. . And yes, I believe he is using a proxy. He appears to actually be Bahraini. ناهد/(Nåhed) speak! 15:21, 18 October 2008 (UTC)
 * I blocked the most recent one. Do they seem to target the same articles?  Or is it your own contribs that are targeted, wherever you happen to be editing? --Elonka 01:31, 19 October 2008 (UTC)
 * They target her and I's contributions, wherever we edit. -- Enzuru 01:36, 19 October 2008 (UTC)
 * Chases Enzuru, reverts everything he does, signs it the same way: "revert Ismaili vandal" (for Enzuru) or "revert Ismaili vandal's gf" (for me). Today's spelling error in the edit titles suggests maybe he's using a program to mass-revert. ناهد/(Nåhed) speak! 01:37, 19 October 2008 (UTC)
 * I heavily doubt he's using a program, it is way too slow for a program. Spelling errors like that can easily be done manually on a mass scale too if you're not careful enough. -- Enzuru 01:42, 19 October 2008 (UTC)
 * BTW, can you use IMs? It's a quicker way to get in touch with me.  Plus I can share some other possible strategies on how to deal with this. --Elonka 01:50, 19 October 2008 (UTC)
 * IM? Some Wikipedia IM? Or AIM or MSN? My MSN is helai@live.com. -- Enzuru 01:58, 19 October 2008 (UTC)
 * AIM is better: I'm "elonka". --Elonka 02:02, 19 October 2008 (UTC)

This person may or may not be User:Klaksonn. He may be Klak-sonn because he calls me an Ismaili and enters into revert wars. However, his writing style is completely different and as is his style of vandalism. -- Enzuru 02:18, 19 October 2008 (UTC)
 * Okay, for reference, that report is at: Suspected sock puppets/Klaksonn. --Elonka 02:24, 19 October 2008 (UTC)
 * Just for the record, I went on a blocking spree on the 19th, which was a bit of game of whack-a-mole, as one anon would show up with rapid-fire reverts going through a contrib list, I'd block it, and then another anon would show up, I'd block that one, and so forth. I think the final tally was 5 blocks within an hour or so, mostly on IPs originating from Bahrain.  I was also looking into the possibility of a range block, but they weren't close enough together.  Another option was semi-protecting the articles that were being targeted, but since the reverts were focusing on a target user's contrib list rather than specific articles, this wasn't really an option.  I did semi-protect the Agal (accessory) article for one week, at which point the anon attacks subsided, though whether this was because they lost interest, or ran out of computers in their local internet cafe/library, I'm not sure.  There's also a possible pattern in that the attacks come in waves once a week or so, perhaps on weekends. If they start up again, I recommend setting a watch on the Bahrain article as an early warning system for future attacks, and if an anon is showing a pattern of doing a rapid series of reverts through multiple articles, to block rapidly. --Elonka 23:43, 22 October 2008 (UTC)


 * Okay, after a scuffle I had over a dubious tag on Avicenna, this guy re-emerges. A couple things:

I am starting to think these may be the same people, but I am not sure yet. -- Enzuru 04:29, 19 November 2008 (UTC)
 * Alirezaabbas, who I originally started arguing with, reminded me much of Klak-Sonn. His only contributions have to do with my dubious tag on that article.
 * The IP came after I told Alirezaabbas that I had given him a final warning and was alerting an administrator.
 * The new batch that was added today, I wasn't seeing a link. Then  started up again just now, which does match the old pattern.  I've blocked that one for a month this time. --Elonka 03:18, 24 November 2008 (UTC)
 * I just added, he's also up to the same thing. -- Enzuru 03:37, 24 November 2008 (UTC)
 * Now I added . -- Enzuru 20:32, 24 November 2008 (UTC)
 * Confirmed. Blocked for one week. --Elonka 00:43, 25 November 2008 (UTC)


 * Just blocked for 24 hours. --Elonka 06:42, 6 December 2008 (UTC)

He's back! -- ♥ pashtun ismailiyya  07:38, 9 January 2009 (UTC)


 * - On Hasan al-Askari and Shi'a Islam; vandalism after final warning. 65.49.14.13, 65.49.2.18, 82.194.41.231, all three IPs have been working towards the same goal, and two of them have been warned enough. Please block all three, and lock Shi'a Islam and Hasan al-Askari. ♥  pashtun ismailiyya  08:48, 24 February 2009 (UTC)
 * Also, these four IPs: 66.17.160.200, 65.49.2.10, 82.194.41.231, 84.255.166.47. These may all be located in Bahrain. -- ♥ pashtun ismailiyya  08:57, 24 February 2009 (UTC)


 * Conclusions