Meta:Requests for CheckUser information/Archives/2009-09

Please do not post any new comments on this page. This is a discussion archive first created in September 2009, although the comments contained were likely posted before and after this date. See current discussion or the archives index.

Nstm, MS7@metawiki

The following discussion is marked as answered (no obvious matches). If you have a new comment, place it just below the box.

---

Suspected related users

• Nstm (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs)
• MS7 (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs)
• 221.190.246.248 (talk • contribs • WHOIS • block user • block log • luxo's • checkip)
• 60.44.36.112 (talk • contribs • WHOIS • block user • block log • luxo's • checkip)
• 220.105.246.19 (talk • contribs • WHOIS • block user • block log • luxo's • checkip)

Repeated (cross-wiki) vandalism, dayly faking requests on RfP and SRG. Both accounts have been blocked but since the user have been/is abusing multiple IP's/accounts to vandalize I request this check in order to know if this user has more socks or there is an underlying IP range(s) to block to limit disruption in the project. Just for information I've created this filter. Thank you. — df|  19:16, 8 September 2009 (UTC)

They shift between ranges on the Open Computer Network; their IPs are probably dynamically assigned on connection. These IPs include 58.88.128.0/17, 60.44.0.0/17, 125.172.128.0/17, 218.230.192.0/19, 220.105.0.0/16, and 221.190.128.0/17. Esitai and Mstn2 use the same ranges and have identical software profiles, but this may be coincidental. Four likely non-matches also use these ranges. —Pathoschild 19:42:00, 08 September 2009 (UTC)

Update

• Mstn2 (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs) (blocked)
• ひろえ (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs) (blocked)

The user continues disrupting, abusing multiple accounts and impersonating other editors. Can you please check again in order to find more accounts?. Thank you, — df|  20:05, 13 September 2009 (UTC)

Thanks - blocked a few more accounts now. Note I haven't locked them as at least one seems a possibly-productive user on jawiki.  — Mike.lifeguard | ^@en.wb 02:45, 14 September 2009 (UTC)

Thank you. I've tagged the accounts as appropiate just for the purposes of organization. Best regards, — df|  09:52, 14 September 2009 (UTC)

Update

I blocked and locked Esitai, Jawiki001, Tific, and Ura ura. —Pathoschild 03:15:43, 15 September 2009 (UTC)

Evgeny "Drbug" Genkin

The following discussion is closed.

---

• Evgeny "Drbug" Genkin (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs)

This user's name impersonates two ruwiki sysops, EvgenyGenkin and Drbug. Besides, he sent me an email about the article Калан which is the center of a large conflict involving abusive proxy puppets. I ask for a crosswiki check because he may be either a sockpuppet of a ruwiki user or another open proxy puppet. --Cvz1 08:24, 11 September 2009 (UTC)

No other accounts found, but I've locked the account in any event.  — Mike.lifeguard | ^@en.wb 14:48, 11 September 2009 (UTC)

• Евгений "Каве" Генкин (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs) — the same story... Could you check and lock this one as well? --Cvz1 07:22, 12 September 2009 (UTC)

As far as I understand, there are many messages like that were sent. I don't think that there's much sense in checking all the accounts used to send them - it won't help preventing abuses anyway, so I guess that checking them is simply time wasting. :-( Dr Bug (Vladimir V. Medeyko) 17:27, 13 September 2009 (UTC)

NK45

The following discussion is closed.

---

• NK45 (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs)

Suspected related users

• NYMetsFan2000 (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs) (locked)
• Phuntsok2000sback (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs) (locked)
• Phuntsok2000returns (talk • contribs • deleted contribs • logs • block user • block log • checkuser • CentralAuth • AllContribs) (locked)

Rationale

• Cross-wiki disruption, vandalism, creating nonsense RfX's. It seems to me to be the same behaviour NYMetsFan2000 had before it's lockage. At meta: RfP's, vandalism. At commons, same behaviour: commons:Commons:Administrators/Requests/NK45, commons:Commons:Oversighters/Requests/NYMetsFan2000. Last time this was checked a buch of accounts appeared so I think a check here might be appropiate. I've just noted that NK45 is now blocked in some wikis per WP:SOCK. Thank you, — df| 19:30, 21 September 2009 (UTC)

Comment I was actually thinking last night about asking for one. It may be coincidental but the first thing they brought to mind was the problems with Meta:Requests_for_CheckUser_information/Archives/2009-09#Nstm.2C_MS7.40metawiki. They seem to have a similar geographical location as the IPs and similar MO's with the constant Requests. Jamesofur 19:43, 21 September 2009 (UTC)

Yes, I forgot to request ask for a relationship between those accounts. The pattern of disruption of those accounts are really similar. Please check against those ones too. Thanks, — df| 19:47, 21 September 2009 (UTC)

• NK45 Confirmed as:
  • NP12
  • MOORS
• NYMetsFan2000 Confirmed as:
  • Newyorkmets2000
  • Phuntsok2000sback
  • Phuntsok2000returns
  • PhuntsokKongtsa2000
  • Tsepelcory
  • GsfshnxgshnFs Bot
  • others are Possible, but at a low level of confidence, so I won't name them. If more suspicious accounts appear, ask me.

 — Mike.lifeguard | ^@en.wb 20:00, 21 September 2009 (UTC)

I looked on enwiki and http://en.wikipedia.org/wiki/Special:Contributions/MOORS is Confirmed as him. I don't know if he's done anything crosswiki, though. J.delanoy^gabs_adds 20:05, 21 September 2009 (UTC)

BTW, the two sets of accounts seem Unrelated on technical evidence.  — Mike.lifeguard | ^@en.wb 20:13, 21 September 2009 (UTC)