Wiki143:Requests for checkuser/Case/Aristideskrista439

If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add {{Wiki143:Requests for checkuser/Case/Aristideskrista439}} to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).

The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

Aristideskrista439 v2

• Template:Checkuser
• Code letter: A

More of the same - make a minor change to a low profile article, and then copy a page of barnstars to my talk page. Natalie 15:21, 22 April 2007 (UTC)

Template:Respond, open proxies. Dmcdevit·t 06:08, 1 May 2007 (UTC)

Aristideskrista439

• Template:Checkuser
• Template:Checkuser
• Code letter: A

These vandals are following the same pattern of the long, long list in the archived request, although they have stopped bothering to bluelink their user and talk pages. Probably more open proxies. Code letter C is also applicalble. Natalie 01:14, 16 April 2007 (UTC)

• I initially thought I would be able to go through the user creation log and find more of these accounts, but they were created about a week ago, and I just can't stand to go through the contributions of every person in the creation log for the past week. So, even though I know checkuser isn't for fishing, if the checkuser's are willing and able to fish they might catch something. Natalie 01:51, 16 April 2007 (UTC)

Template:Respond. Didn't see any new accounts. Dmcdevit·t 05:04, 18 April 2007 (UTC)

Aristideskrista439

• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser

• Code letter: C

This appears to be the return of the penis vandal or imitators. First two edits are always to user and user talk pages, making them blue links, then to a random page, either making a small but factually innacurate change or replacing a picture with a picture of penises, breasts, vaginas, or similar. Account creation suggests dynamic IP, multiple IP addresses, or open proxy, as all blocks have disabled account creation and enabled autoblock. Natalie 16:27, 20 March 2007 (UTC)

Template:Respond copy pasted subpage with the diffs into this page. Removed the mention of that page on Natalie's statement -- lucasbfr ^talk 17:00, 20 March 2007 (UTC)

A few more (copied from WP:AN by Lupo 08:14, 21 March 2007 (UTC)):

• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser
• Template:Checkuser

Same pattern, all blocked indefinitely by Lupo.

File:Symbol confirmed.svg Confirmed mostly. Here's a bigger list for you:

1. Template:Checkuser FALSE POSITIVE: edit pattern doesn't match, makes sincere edits. Lupo 23:26, 21 March 2007 (UTC)
2. Template:Checkuser
3. Template:Checkuser
4. Template:Checkuser
5. Template:Checkuser
6. Template:Checkuser
7. Template:Checkuser
8. Template:Checkuser
9. Template:Checkuser
10. Template:Checkuser
11. Template:Checkuser
12. Template:Checkuser FALSE POSITIVE: edit pattern doesn't match, makes sincere edits. Lupo 23:26, 21 March 2007 (UTC)
13. Template:Checkuser
14. Template:Checkuser
15. Template:Checkuser
16. Template:Checkuser
17. Template:Checkuser
18. Template:Checkuser POSSIBLE FALSE POSITIVE: User name doesn't match pattern (leet...). No contribs yet. Lupo 23:26, 21 March 2007 (UTC)
19. Template:Checkuser
20. Template:Checkuser
21. Template:Checkuser
22. Template:Checkuser
23. Template:Checkuser
24. Template:Checkuser
25. Template:Checkuser
26. Template:Checkuser
27. Template:Checkuser
28. Template:Checkuser
29. Template:Checkuser
30. Template:Checkuser
31. Template:Checkuser
32. Template:Checkuser
33. Template:Checkuser
34. Template:Checkuser
35. Template:Checkuser
36. Template:Checkuser
37. Template:Checkuser
38. Template:Checkuser
39. Template:Checkuser POSSIBLE FALSE POSITIVE: User name doesn't match pattern (punctuation). No contribs yet. Lupo 23:26, 21 March 2007 (UTC)
40. Template:Checkuser
41. Template:Checkuser
42. Template:Checkuser
43. Template:Checkuser
44. Template:Checkuser FALSE POSITIVE: edit pattern doesn't match, makes sincere edits. Lupo 23:26, 21 March 2007 (UTC)
45. Template:Checkuser
46. Template:Checkuser
47. Template:Checkuser
48. Template:Checkuser
49. Template:Checkuser
50. Template:Checkuser
51. Template:Checkuser
52. Template:Checkuser
53. Template:Checkuser
54. Template:Checkuser
55. Template:Checkuser
56. Template:Checkuser
57. Template:Checkuser
58. Template:Checkuser
59. Template:Checkuser
60. Template:Checkuser
61. Template:Checkuser
62. Template:Checkuser
63. Template:Checkuser
64. Template:Checkuser
65. Template:Checkuser
66. Template:Checkuser
67. Template:Checkuser
68. Template:Checkuser
69. Template:Checkuser

Template:Respond -- many open proxies detected and blocked. --jpgordon^∇∆∇∆ 21:44, 21 March 2007 (UTC)

Thanks. All contribs checked and undone, and blocked all of these usernames indefinitely, except the false positives. (Marked above, with rationale.) Those without contributions were also blocked, the block summary in these cases points to this page, so that in case of a mistaken block, the user can learn why he was blocked and can ask for unblocking.

Apparently, there are still more that checkuser missed (from the history of "Banana Man"):

• Template:Checkuser
• Template:Checkuser

Both also indef blocked by Lupo.

And then there's Template:Checkuser, which also clearly is another sock of this person (c.f. User:Apterygiformesk listed above and blocked). However, I did not block this one because actually all the edits were good! Surprise, surprise. Lupo 23:26, 21 March 2007 (UTC)

I've placed some more false positives and a whole slew of additional vandal socks on the talk page. Re-running checkuser on these additional vandal socks might reveal more open proxies. (Note that I still had to undo quite a lot of changes these newly discovered socks had done. The more obvious vandalisms were caught quickly after the were done, but this vandal often also only changes a number or a middle initial, and these more subtle changes often have remained since March 5, 2007.) Lupo 10:59, 22 March 2007 (UTC)

Template:RespondErrr.... moving it back to pending so a CU can see it. Maybe there's room to open a new case? -- lucasbfr ^talk 11:14, 22 March 2007 (UTC)

Don't worry about it. The talk page here will suffice; Lupo's kindly pointed me to the updates. --jpgordon^∇∆∇∆ 17:30, 22 March 2007 (UTC)

The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.