Please do not post any new comments on this page. This is a discussion archive first created in July 2009, although the comments contained were likely posted before and after this date. See current discussion.
this has attacked some of fawiki legitimate user by defacing their page , i have block his ips for several time but he does it again so i would like to check this account for possible sleepers --Mardetanhatalk 08:18, 29 June 2009 (UTC)
Following accounts are Confirmed sleepers/socks of Ouch:
Can a steward do a range blocking & prevent account creation, preferably for a long time? Thanks. ...Aurora... 14:11, 22 June 2009 (UTC)
All IPs are within the same subnet (RIPE), and belongs to London School of Economics. There is no need for doing a CU with the information given, you can block 184.108.40.206/16 yourself, and then block the entire school... Laaknor 15:03, 22 June 2009 (UTC)
Ok, I wasn't sure how to do range blocking. Thanks for the info. ...Aurora... 15:14, 22 June 2009 (UTC)
Confirmed - same vandal as before, but this range cannot be blocked as it is very large and very busy. I've locked the account so they don't vandalize other wikis. — Mike.lifeguard | @en.wb 21:02, 27 June 2009 (UTC)
The above stated users are currently editing the articles about an animation (Hime-chan's Ribbon and related articles) in zh.wikipedia, with similar editing style (little content and only related to railway, which is one of Kftsang hk's contribution area in the past). In deletion request of some of the related articles, they support one another, giving an impression to me that the latter two users are the sockpuppets of Kftsang hk (though this account doesn't involve in the editing much). Therefore, I would like to request a CU to see if these three users are related. Thank you very much!--Altt311 07:26, 25 June 2009 (UTC)
For your information, Kftsang hk has been confirmed to use a sockpuppet to support himself in the past (CU Record). At that time, the behavior of the sockpuppets are similar.--Altt311 07:54, 25 June 2009 (UTC)
The previous check doesn't say "confirmed". As well, I don't see any indication of disruption to the project that would warrant a check. — Mike.lifeguard | @en.wb 21:04, 27 June 2009 (UTC)
The major concern is that he is fabricating the support for his preservation idea if the above accounts are related to each other. If this is not a valid reason, I will request again only when I have sufficient evidence. Thank you.--Altt311 08:30, 28 June 2009 (UTC)
Just because three people agree with one another is no reason to invade their privacy. — Mike.lifeguard | @en.wb 14:42, 28 June 2009 (UTC)
This vandal floods 'Recent changes' with obscenities and appears to use open proxies. We have blocked the following accounts indefinitely. Please block the open proxies involved. Thanks and sorry for the long list! Tmct 11:42, 26 June 2009 (UTC)
Please don't bother listing other socks of the same vandal. I'd appreciate if you list some of the open proxies so that I could find the list of open proxies the vandal might be using and block them all. Thanks.Tmct 19:23, 26 June 2009 (UTC)
I recommend to block the range 220.127.116.11/27, seems to be a proxy range and no good users are there.
Some proxy listings:
If vi.wiki wants to contact his provider to report abuse, contact me, his real IPs are known. Best regards, --birdy geimfyglið(:> )=| 20:45, 26 June 2009 (UTC)
P.S. If there are insulting accounts we can hide them, this might be better than to rename them (because when renaming them the names will be shown in the renamelog. Best regards, --birdy geimfyglið(:> )=| 20:47, 26 June 2009 (UTC)
You could think about blocking open proxies with a script, User:DerHexer has done this for wikis with similar problems (for example ml.wiki  and others), but of course You need consens of the community first, then You can contact DerHexer for help, he is a steward and runs this service.
Actually, the original request asks to block the proxies. If Tmct confirms that that is the community's wish, I can do it quickly. — Mike.lifeguard | @en.wb 18:41, 29 June 2009 (UTC)
Please do block them. The vandals are back now, creating many sleeper accounts and then renaming articles around, causing vast amount of damage. Could you also check for more sleeper accounts so that we can preemptively block them? DHN 18:45, 29 June 2009 (UTC)
Multiple vandalism on user page 12, but i think the anomynous IP is user himself. User has been already blocked on it.wikipedia 3 for vandalism. User also post a "personal attack" message. Anonimous IP are from the same geographic zone. Sorry for my english, but i hope you'll undestand me. :-) --Quaro75 19:40, 7 July 2009 (UTC)
No other users found, he seems to be very young. Info sent to ml so it.wiki checkusers can have a look there. Best regards, --birdy geimfyglið(:> )=| 06:57, 9 July 2009 (UTC)
Sorry but I don't understand. Is Germanoarceus = 18.104.22.168? May we block his account for vandalism? --Quaro75 09:45, 11 July 2009 (UTC)
Please make a cross-wiki check and check if Crabbofix is a sockpuppet. The very likely suspect is Bongoman, who has an extensive block logg on sv wikipedia for sockpuppetry (marionett in Swedish), outing, threatening fellow editors, among other things. There are several similarities in editing style between Bongoman and Crabbofix, and Crabbofix was obviously not a new user as he knew the wiki technique from the start. The perhaps strongest evidence is the name Crabbofix who is a character from the Asterix series. The account was created almost simultaneously as several other Asterix characters some of which are satirising (eg: Idefix, Obälisk, Tragicommiepoppix, Majestix, Hycklarix, Smidefix - while some of these were proven to be sockpuppets of another user, the others were likely puppets of Bongoman who was blocked at the time), all with the purpose to bemock sv:User:Obelix (also a Asterix character) on Swedish Wikipedia.
While Crabbofix has not yet been blocked (s)he is constantly making flamebites, edit warring and making unexplained reverts (example:
) and is probably aspiring to become an admin when everyone has forgotten about the Bongoman account.
Also check if (s)he is using ISP from Hi3G Access (the ISP of the trolling IP numbers above), and make a geographic comparison, especially Helsingborg and Kristianstad are suspect locations. A thorough check is necessary as (s)he is very skillful in using open proxies, wardriving and other tricks. Thanks. Hej 09:31, 9 July 2009 (UTC)
Hello, commons, sv.wiki and en.wiki have local checkusers, please contact one of them and tell them to communicate with the other two wikis, thanks, --birdy geimfyglið(:> )=| 09:54, 9 July 2009 (UTC)
It would be easier if you did it here. Hej 12:19, 10 July 2009 (UTC)
Declined, as said, please contact the locals, they communicate with each others. thanks, --birdy geimfyglið(:> )=| 23:38, 18 July 2009 (UTC)
Blocked user Wikademia has used alternate account Eme to evade block. This user has a number of accounts that have been used in the past. The See also section at v:Wikiversity:Community review#User:Wikademia has a list of alternate accounts that are suspected of belonging to the same person. Most of those are likely stale. Requesting CU to enforce block while community reviews the status of this user. --mikeutalk 21:16, 12 July 2009 (UTC)
Very likely: Wikademia, Eme, I eat wiki for breakfast, Palatial Regalia
Likely: Poettype8, The Book Saver, Gbullet
More info forwarded to CheckUser mailing list. — Mike.lifeguard | @en.wb 23:32, 12 July 2009 (UTC)
The user has been blocked as a suspected sockpuppet of an earlier blocked user. Asked that a CU be performed on himself here to establish that he is not a sockpuppet. The earlier user (Sju hav) was blocked in november, and a CU will probably not work, but there are suspicion that he has more than one account active now (as the earlier user had when that account was active). The user probably edits trough proxies as autoblock has failed.
Can you please perform a CU on the following accounts, and find possible sleepers:
Hello 22.214.171.124 is Unrelated to any of these accounts . Bjørn Sagvolden kommisjonen and E92f+ and Sju hav as you have mentioned are Stale.Bjørn Sagvolden Forum is also Unrelated to others .
Soldater og andre undertrykte and Gallery of soldiers and Gallery threshold are Likely to be same person . --Mardetanhatalk 14:01, 18 July 2009 (UTC)
The following discussion is closed.
On further request from Laaknor, I've checked Controversial soldiers and Negated soldiers. They are on the same IP range, with slightly different software profiles. Determination should depend on other similarities such as editing behaviour. —Pathoschild 16:33:45, 06 August 2009 (UTC)
그상찾 @ jawiktionary
The following discussion is closed.
Would you please check User:그상찾 @ jawiktionary? This user created the article which means the word looking down on Korean culture, so we suspect that it is a sock of regular vandal user. (And the words '그상찾' does not exist on Korean langauge.) Thank you. LERK 05:06, 19 July 2009 (UTC)
Declined: You can block the user now - there is no need to run a checkuser. — Mike.lifeguard | @en.wb 04:35, 20 July 2009 (UTC)