Commons:Requests for checkuser/Case/MRYSOCKER2017

From Wikimedia Commons, the free media repository
Jump to navigation Jump to search
If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Commons:Requests for checkuser/Case/MRYSOCKER2017}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

MRYSOCKER2017

[edit]
[edit]

Added March 18–19 following another bunch of attacks:

Discovered and blocked April 2 by Jdx:

Less certain—tentative identification relies on this edit:

A remote guess—from this query and File:DWCL-new-logo-1.png (histlogsabuse log):

Rationale, discussion and results

[edit]

Reason: The vandal was able to register an acc at 11:40 (UTC) when all three known IP ranges were already blocked. It indicates that s/he is operating some IPs yet unknown to the community. Incnis Mrsi (talk) 14:14, 16 March 2018 (UTC)[reply]
P.S. The problem is older than I supposed initially. Special:Contribs/110.54.128.0/17 was used since this edit and up to February 15. Incnis Mrsi (talk) 16:35, 16 March 2018 (UTC)[reply]
The vandal also certainly has some connection to Obra19 (talk · contribs) due to Revision of File:BANGUI_WINDMILL,ILOCOS_NORTE_2.jpg and https://commons.wikimedia.org/w/index.php?title=Special%3ALog&type=newusers&user=Obra19 and also because Obra19 is likely based in the same country, Philippines. Of course, some connection does not mean “is necessarily the same person” – a productive user would very unlikely turn to a pure vandal. As a guess, “Jojodeladia” may be a nick of the vandal in question who was Obra19’s close friend in 2013. Incnis Mrsi (talk) 17:46, 16 March 2018 (UTC)[reply]

Internet search reveals “Jojo deladia” as the same person as Obra19, a photographer. Incnis Mrsi (talk) 19:47, 16 March 2018 (UTC)[reply]

Note that Moonrivers (talkcontribsblock logfilter log) has an extensive history of blocks in November–December 2017. Incnis Mrsi (talk) 19:47, 16 March 2018 (UTC)[reply]

The first six are likely related. The latter four are possible, but I can't say likely. I don't have time to follow up further. .     Jim . . . (Jameslwoodward) (talk to me) 13:20, 17 March 2018 (UTC)[reply]

What about the eleventh item? Six plus four give ten, not eleven. Incnis Mrsi (talk) 06:10, 18 March 2018 (UTC)[reply]

Please, check 7 new vandal accs added today. Incnis Mrsi (talk) 06:10, 18 March 2018 (UTC)[reply]

Check-users, please, take care about IP ranges used by registered socks observed on April 2. Incnis Mrsi (talk) 06:29, 2 April 2018 (UTC)[reply]

Please, check for sleeper accounts using updated list of IP ranges. Incnis Mrsi (talk) 09:23, 17 April 2018 (UTC)[reply]

Notes on 203.87.128.0/17

[edit]

On querying en.Wikipedians a fine structure of the range was revealed. All edits except from two narrow ranges—Special:Contribs/203.87.156.116/30 and Special:Contribs/203.87.171.160/28—are not from MRY. Incnis Mrsi (talk) 12:46, 19 March 2018 (UTC)[reply]

21-04-2018

[edit]

This LTA managed to get 3 autoconfirmed accounts. Please find the sleepers. Thanks, Yann (talk) 05:33, 21 April 2018 (UTC)[reply]

Most accounts and some ranges are blocked. sorry for the delay, but I currently don't see anything to be done. If there is anything missing, please advise. --Krd 13:02, 3 May 2018 (UTC)[reply]

The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made
above, in a new section.