View source for Wiki143:Requests for checkuser/Case/Willy on Wheels

<noinclude>
<!-- 
If you are adding a new request for this user please add it above this notice at the top of the page.  Only the latest request will appear on the checkuser page.  Please don't create a separate page with a different name.
-->
{| class="messagebox"
| style="text-align: center" | If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add </br><span style="font-size: 125%">'''<nowiki>{{</nowiki>{{FULLPAGENAME}}<nowiki>}}</nowiki>'''</span></br> to the checkuser page [http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/Pending&action=edit&section=1 here]. Previous requests (shown below), and this box, will be automatically hidden on [[Wikipedia:Requests for checkuser|Requests for checkuser]] (but will still appear here).
|}
<div style="background: #f5fffa; border: 1px solid #AAAAAA; margin: 2em 0 0 0; padding: 0 10px 0 10px;">
<div style="text-align:center;">''The following discussion is preserved as an archive of a [[Wikipedia:Requests for checkuser|Request for checkuser]]. <span style="color:red;">'''Please do not modify it'''</span>.''</div>

===Willy on Wheels===
<div class="plainlinks" style="text-align: right; font-size: 75%; width: 18%; background: #f9f9f9; border: 1px solid #aaaaaa; float: right; padding: 10px;"> 
[http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/Case/Willy_on_Wheels view]
[http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/Case/Willy_on_Wheels&action=edit edit]
[http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/Case/Willy_on_Wheels&action=history history]
[http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/Case/Willy_on_Wheels&action=watch watch]</br>
Filed: 04:10, [[December 28]] [[2006]] ([[UTC]])
</div>
{{checkuser|Willy888}}

This user only created a user page, but I am very suspicious of this user. [[User:Bushcarrot|Bushc]][[User:Bushcarrot/Esperanza|<font color=green>a</font>]][[User:Bushcarrot|rrot]] (<small>[[User_talk:Bushcarrot|Talk]]·[[User:Bushcarrot/Desk|Desk]]</small>) 02:02, 28 December 2006 (UTC)

{{fishing}}. [[User:Dmcdevit|Dmcdevit]]·[[User talk:Dmcdevit|t]] 08:32, 28 December 2006 (UTC)


===Willy on Wheels===
*{{checkuser|M62Manchester}}
*{{checkuser|TheM62Manchester TheM62Manchester TheM62Manchester}}
*{{checkuser|TheM25London}}
*{{checkuser|TheM32Bristol}}
*{{checkuser|TheM62Manchester likes tagging WoW accounts}}
*{{checkuser|TheM62Manchester is sockpuppet template adding crazy user}}
*{{checkuser|TheM62Manchester is sockpuppet template adding vandal user}}
This vandal is creating attack usernames that are offensive towards me, as a result of my reporting of vandals at [[WP:AIV]]. Can you find out if it is an open proxy, and if so, block?? --[[User:TheM62Manchester|TheM62Manchester]] 14:36, 28 August 2006 (UTC)

Done. [[User:Mackensen|Mackensen]] [[User_talk:Mackensen|(talk)]] 15:20, 28 August 2006 (UTC)

:What's the IP?? --[[User:TheM62Manchester|TheM62Manchester]] 15:23, 28 August 2006 (UTC)

::I think I am right in saying that checkuser information is not normally released except under exceptional circumstances. —&nbsp;[[User:FireFox|<span style="color:blue">FireFox</span>]]&nbsp;<sup>([[User talk:FireFox|<span style="color:red">'''talk'''</span>]])</sup> <sub>15:52, 28 August 2006</sub>
:::You are right; however, open proxy IP addresses ARE released. --[[User:TheM62Manchester|TheM62Manchester]] 16:06, 28 August 2006 (UTC)
::::You're free to go look in my block log over the past day. [[User:Mackensen|Mackensen]] [[User_talk:Mackensen|(talk)]] 11:22, 29 August 2006 (UTC)


===Willy on Wheels===
A user responsible for a number of blocked WOW socks has been going from one sock's talk page to the next posting the {{tl|unblock}} template with the reason "''I wish to write attack pages on the following: [insert names of various Wikipedians]''". I noticed it because it triggered the IRC bot that notifies of any use of {{tl|unblock}}; I've cleaned what I've found of it up, and after about the fourth one, I checkusered the accounts, determined them to be all from a single IP, and blocked it for six months. I don't expect any collateral damage (it appears to be fairly static) but just in case, it's 82.42.145.158. I strongly recommend against unblocking it unless a legitimate Wikipedian is affected; this vandal is having fun doing WOW moves and then causing trouble via thier talk pages once blocked. I don't doubt for a second they would try to instigate a wheel war over good-faith unblocking. <span style="font-family: Verdana">[[User:Essjay|<font color="#7b68ee">'''Essjay'''</font>]] <font color="#7b68ee">(<small>[[User talk:Essjay|<font color="#7b68ee">Talk</font>]] • [[User:Essjay/Contact|<font color="#7b68ee">Connect</font>]]</small>)</font></span> 09:45, 5 July 2006 (UTC)

:Didn't even get this message saved before he was at it: [[User talk: 82.42.145.158]]. Strongly urge against unblocking. <span style="font-family: Verdana">[[User:Essjay|<font color="#7b68ee">'''Essjay'''</font>]] <font color="#7b68ee">(<small>[[User talk:Essjay|<font color="#7b68ee">Talk</font>]] • [[User:Essjay/Contact|<font color="#7b68ee">Connect</font>]]</small>)</font></span> 09:49, 5 July 2006 (UTC)

::Oh, the story doth get better! After being denied the unblock via the IP's talk page by [[User:Bookofjude]], he's now attempting to use a doppelganger, [[User talk:Sunholm1]] to deceive someone into unblocking him. Why deceive? Because if he posted it from his actual account, [[User talk:Sunholm]], the unblocking admin might see http://en.wikipedia.org/wiki/Special:Log/block?page=User:Sunholm and realize who he is and what he's been doing. (As [[User:Firefox]] did when denying the unblock). 

::At this point, I think there it's a good idea to discuss what to do with Sunholm & Sunholm1, as he's proven, beyond a shadow of a doubt, that he is the same user that has been doing the WOW vandalism; I held off on saying anything about those accounts because I had a strong feeling he would use them in a manner that would make a public connection between the WOW vandalism and the other accounts. I suggest indefblocks on both, but of course, yield to the judgment of the community. <span style="font-family: Verdana">[[User:Essjay|<font color="#7b68ee">'''Essjay'''</font>]] <font color="#7b68ee">(<small>[[User talk:Essjay|<font color="#7b68ee">Talk</font>]] • [[User:Essjay/Contact|<font color="#7b68ee">Connect</font>]]</small>)</font></span> 10:46, 5 July 2006 (UTC)

btw sun holm is not like [[user:poolguy]] he seems to be good editor. i am probably what you call 'mete puppet' and think we should not complain. sunholm is not vandal. see notices on talk page for info. btw he is good user. see [[WP:ER]] on editor review it is chance to give sun holm some feedback. may be i am right. please try and see positive light of situation rather than try accuse him of being vandal. he is not sock puppet of any one. he has alternate account for if he use public terminals (which he does in frequently). i would hope u could be nice to him. he isnt wow whoever wow might be. oh and as for how he baned wow from his pc. well u just delete user using administrator acount in windows xp. can we try and be nice 2 sunholm? --[[User:KarlaJoanne|KarlaJoanne]] 14:57, 5 July 2006 (UTC)

:Do you take us to be complete idiots! Ditch this sock, come back as your regular account and explain yourself properly. Using a sockpuppet account to back up protestations of innocence w.r.t. creating vandalising socks is just stupid. [[User:Theresa knott|Theresa Knott]] | [[User talk:Theresa knott|Taste the Korn]] 15:00, 5 July 2006 (UTC)

::"KarlaJoanne" ain't going to do much more chatting here, I've blocked "her" indefinitely as a transparent sockpuppet.  Just look at the history of contribs, including to Sunfazr's RFA.  Sunfazr was the old account name of Sunholm, by the way.  --[[User:Cyde|<span style="color:#ff66ff;cursor:w-resize;">'''Cyde↔Weys'''</span>]] 15:37, 5 July 2006 (UTC)

:::I thnk we need to block all the other accounts associated with this user, including sunfazer, sunholm and two others i can't remember off the top of my head as being WoW socks. I'll do it in a little while unless anyone objects [[User:Theresa knott|Theresa Knott]] | [[User talk:Theresa knott|Taste the Korn]] 15:49, 5 July 2006 (UTC)

::::I'd agree. [[User:Morven|Morven]] has been involved in multiple blocks of IPs also used by [[User:Sunholm|Sunholm]] which are always coincidentally used by vandals also. There have also been numerous assurances made that the vandalism will stop. (e.g. [[User:82.42.237.114]]). It is also interesting to note that it was [[User:Sunholm|Sunholm]] who [[User:Cyde|Cyde]] blocked as a bot when removing WoW from the list of permenantly banned users... --[[User:Pgk|pgk]]<sup>([[User_talk:Pgk|<span style="color:mediumseagreen;">talk</span>]])</sup> 18:45, 5 July 2006 (UTC)

I've blocked them all [[User:Theresa knott|Theresa Knott]] | [[User talk:Theresa knott|Taste the Korn]] 20:47, 5 July 2006 (UTC)

:Thanks guys, I apprecaite everyone keeping on top of this while I was asleep. (By the way, I answered Theresa's question on my talk page, if anyone was waiting for an answer to that.) There is an open checkuser request on WOW at RFCU that Mackensen has been dealing with; it just mentioned Blueyonder, the same ISP, so perhaps he may have useful information as well. Something tells me this isn't going to be the end of it. <span style="font-family: Verdana">[[User:Essjay|<font color="#7b68ee">'''Essjay'''</font>]] <font color="#7b68ee">(<small>[[User talk:Essjay|<font color="#7b68ee">Talk</font>]] • [[User:Essjay/Contact|<font color="#7b68ee">Connect</font>]]</small>)</font></span> 08:14, 6 July 2006 (UTC)

{{Clerk-Note}} This is an edited version of a discussion that took place on the [http://en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard/Incidents&oldid=62334628 administrator's noticeboard] regarding an IP used by a Willy on Wheels vandal.  



===WoW again===
*[[WP:WOW]]
*65.167.69.0/24 (range)
*{{checkip|66.197.201.70}}
*{{checkip|69.44.58.97}}
*{{checkip|84.9.72.164}}
*{{checkip|193.251.149.11}}
*195.188.152.0/24 (range)
*205.188.0.0/16 (range)
*{{checkip|217.107.212.159}}
*{{checkuser|Linux on Limpets}}
*{{checkuser|Hive of scum and viliany!}}
*''(more may be added)''
If you find IP's different from those listed on [[WP:WOW]], could you please list them in the infobox where it says "Known IPs"? Thanks. This is the first time in a long while that I've seen real high-speed page-move vandalism (WoW usernames appear frequently, but actually moving pages in a widespread manner have been quite rare). -- [[User:King of Hearts|King of]] [[User:King of Hearts|<font color="red">♥</font>]] [[User talk:King of Hearts|<font color="red">♦</font>]] [[Special:Contributions/King of Hearts|<font color="black">♣</font>]] [[Special:Emailuser/King of Hearts|<font color="black">♠</font>]] 23:43, 27 June 2006 (UTC)
:Note that {{vandal|Hive of scum and viliany!}} appears to have been created in response to User:Mackensen's block of {{vandal|195.188.152.16}} ([{{fullurl:Special:Log|type=block&user=Mackensen&page=User:195.188.152.16}}]), an IP that has been used by an individual claiming to be Willy on Wheels. — <small>Jun. 28, '06</small><tt> '''[00:31] <<u class=plainlinks>[{{fullurl:user:freakofnurture}} freak]&#124;[{{fullurl:user talk:freakofnurture|action=edit&section=new}} talk]</u>>'''</tt>

{{TakeNote}} I've reblocked the responsible IP address. [[User:Mackensen|Mackensen]] [[User_talk:Mackensen|(talk)]] 12:21, 2 July 2006 (UTC)

:See talk please... -- [[User:King of Hearts|King of]] [[User:King of Hearts|<font color="red">♥</font>]] [[User talk:King of Hearts|<font color="red">♦</font>]] [[Special:Contributions/King of Hearts|<font color="black">♣</font>]] [[Special:Emailuser/King of Hearts|<font color="black">♠</font>]] 01:04, 5 July 2006 (UTC)



====WoW or Marmot? Or someone else?====
*[[User:Hobbo Hotel on Wheels!]]
*[[User:On wheels on wheels! On Wheels On Wheels! ON WHEELS ON WHEELS!]]
*[[User:PLAGIARISM ON WHEELS]] 
*[[User:Cool Cat on Frozen Felines]] 
*[[User:A loud-mouthed extrovert on wheels!]]
Seems like brions patch to cap the number of usernames that can be created from an IP payed off. However I expect range attacks as thats tipical. Are all fo them originating from the same IP? Is this a known dynamic IP range or is it an open proxy? --<small>[[User:Cool Cat|Cool Cat]]<sup>[[User talk:Cool Cat|Talk]]|[[Special:Emailuser/Cool Cat|@]]</sup></small> 14:22, 13 January 2006 (UTC)
:Looks like a compromised proxy.  Blocked and marked as such. [[User:Kelly Martin|Kelly Martin]] ([[User talk:Kelly Martin|talk]]) 03:55, 17 January 2006 (UTC)

<div style="text-align:center;">''The above discussion is preserved as an archive of the Request for checkuser.  <span style="color:red;">'''Please do not modify it.'''</span><br />Subsequent requests related to this user should be made ''above'', in a new section.''</div></div>
</br>
</noinclude>