Commons:Requests for checkuser/Case/MRYSOCKER2017
MRYSOCKER2017
[edit]- MRYSOCKER2017 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
Suspected related users
[edit]- MRYSOCKER2018 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- 175.158.192.0/18 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log – native
- 203.87.128.0/17 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log – see notes
- 203.92.8.0/21 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log – native
- 92.40.249.252 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log – a proxy as of March 13
Added March 18–19 following another bunch of attacks:
- RoyalYoungWikiWorld (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- RoyalYoungWikiWorld1 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- RoyalYoungWikiWorld2 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- SUPERWARRIORSOPS1 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- SUPERWARRIORSOPS2 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- RoyalYoungWikiWorld3 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- RoyalYoungWikiWorld4 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- RoyalYoungWikiWorld5 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- RoyalYoungWikiWorld6 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
Discovered and blocked April 2 by Jdx:
- Super Socker 7 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- Lander Grider Array 2011 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- Lander Grider Array 2000 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- Super Socker 8 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- MRYSOCKER1 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- MRYSOCKER2 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- MRYSOCKER3 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- MRYSOCKER4 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
Less certain—tentative identification relies on this edit:
- 110.54.147.159 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log
- 110.54.215.67 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log
- 110.54.222.7 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log
- 110.54.175.215 (talk • contribs • WHOIS • RBL • tools • luxo's • crossblock • block user • block log
A remote guess—from this query and File:DWCL-new-logo-1.png (hist • logs • abuse log):
- Moonrivers (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
Rationale, discussion and results
[edit]Reason: The vandal was able to register an acc at 11:40 (UTC) when all three known IP ranges were already blocked. It indicates that s/he is operating some IPs yet unknown to the community. Incnis Mrsi (talk) 14:14, 16 March 2018 (UTC)
P.S. The problem is older than I supposed initially. Special:Contribs/110.54.128.0/17 was used since this edit and up to February 15. Incnis Mrsi (talk) 16:35, 16 March 2018 (UTC)
The vandal also certainly has some connection to Obra19 (talk · contribs) due to Revision of File:BANGUI_WINDMILL,ILOCOS_NORTE_2.jpg and
https://commons.wikimedia.org/w/index.php?title=Special%3ALog&type=newusers&user=Obra19 and also because Obra19 is likely based in the same country, Philippines. Of course, some connection does not mean “is necessarily the same person” – a productive user would very unlikely turn to a pure vandal. As a guess, “Jojodeladia” may be a nick of the vandal in question who was Obra19’s close friend in 2013. Incnis Mrsi (talk) 17:46, 16 March 2018 (UTC)
- Internet search reveals “Jojo deladia” as the same person as Obra19, a photographer. Incnis Mrsi (talk) 19:47, 16 March 2018 (UTC)
Note that Moonrivers (talk • contribs • block log • filter log) has an extensive history of blocks in November–December 2017. Incnis Mrsi (talk) 19:47, 16 March 2018 (UTC)
The first six are likely related. The latter four are possible, but I can't say likely. I don't have time to follow up further. . Jim . . . (Jameslwoodward) (talk to me) 13:20, 17 March 2018 (UTC)
- What about the eleventh item? Six plus four give ten, not eleven. Incnis Mrsi (talk) 06:10, 18 March 2018 (UTC)
Please, check 7 new vandal accs added today. Incnis Mrsi (talk) 06:10, 18 March 2018 (UTC)
Check-users, please, take care about IP ranges used by registered socks observed on April 2. Incnis Mrsi (talk) 06:29, 2 April 2018 (UTC)
Please, check for sleeper accounts using updated list of IP ranges. Incnis Mrsi (talk) 09:23, 17 April 2018 (UTC)
Notes on 203.87.128.0/17
[edit]On querying en.Wikipedians a fine structure of the range was revealed. All edits except from two narrow ranges—Special:Contribs/203.87.156.116/30 and Special:Contribs/203.87.171.160/28—are not from MRY. Incnis Mrsi (talk) 12:46, 19 March 2018 (UTC)
21-04-2018
[edit]- Lander Grider Array 2066 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- Lander Grider Array 1151 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
- Lander Grider Array 775 (talk • contribs • Luxo's • SUL • deleted contribs • logs • block user • block log )
This LTA managed to get 3 autoconfirmed accounts. Please find the sleepers. Thanks, Yann (talk) 05:33, 21 April 2018 (UTC)
Most accounts and some ranges are blocked. sorry for the delay, but I currently don't see anything to be done. If there is anything missing, please advise. --Krd 13:02, 3 May 2018 (UTC)
Subsequent requests related to this user should be made above, in a new section.