User talk:Zzuuzz/Archive 34

Page contents not supported in other languages.
From Wikipedia, the free encyclopedia
Archive This is an archive of past discussions. Do not edit the contents of this page. If you wish to start a new discussion or revive an old one, please do so on the current talk page.

(new section)

Hi Zzuuzz, I'm writing you here because I've seen this is the main wiki where you edit and because here you're an abusefilter, checkuser and sysop. I think I've found a few proxies used recently by a single user who hides behind them to make similar unconstructive edits in different pages, and a few socks used to do the same kind of edits created recently. If I write here the suspicious proxies IP ranges, will you be able to block them (as they're forbidden on Wikipedia) and do the same with the socks created over such ranges (as they weren't created for reasons according to community standards)? Let me know, please, I'd like to be helpful to the project by reporting vandals in bad faith who use proxies and socks such as this one! Zeronetwone (talk) 08:09, 30 June 2018 (UTC)[reply]

Lucarubis

I came across this: an IP (subsequently blocked) adding a sock tag to User talk:Lucarubis. That's a bit odd: the user was indeed CU blocked (by you: [1]), but the block log doesn't state whose sock they are, and the sockmaster claimed by the IP is a user who is not blocked. Have you got any idea what's going on here? – Uanfala (talk) 23:58, 1 July 2018 (UTC)[reply]

Well, that IP's talk page seems to have gone weird since I last looked at it. I can answer most of your question with this version. The unblocked account is not blocked merely because of a lack of need. The rest I don't know much about, but this vandal is what's being referenced. Maybe Binksternet or a stalker knows something. -- zzuuzz (talk) 03:50, 2 July 2018 (UTC)[reply]
Looks to me like the dog and rapper vandal only appeared on that IP for two days, starting with this change on June 24. Everything before that was someone with far better language skills. I don't have any idea about what's going on at the Lucarubis userpage. Binksternet (talk) 05:24, 2 July 2018 (UTC)[reply]
Thank you both. This is a real mess, isn't it? In the topic area of the languages, writing systems and esp. the anthems of former Soviet countries, there appear to be several apparently unrleated techincally, but editorially indistinguishable, sock rings. – Uanfala (talk) 11:59, 2 July 2018 (UTC)[reply]

Requested edit summary hiding

I'm not sure if I should report this here, but do you think you could remove the edit summaries for some of the edits by Special:Contributions/The Chawners? I would appreciate it if you did since the summaries are diruptive. SemiHypercube (talk) 22:37, 2 July 2018 (UTC)[reply]

More cell phone spam

Howdy - pursuant to that guy who is spamming cell phone numbers into university articles: a new number that has popped up a couple of times now is 9650828969 [2][3]. Do you think you could add it to the abuse filter? Cheers --Elmidae (talk · contribs) 15:42, 7 July 2018 (UTC)[reply]

I've added both numbers added by that IP. Thanks. -- zzuuzz (talk) 20:36, 7 July 2018 (UTC)[reply]
Another number please (used five times [4][5][6][7][8] - two of these are apparently typos with one "0" left out): 8929359037. PI and named; named account (Sandhya2525225) already shopped to AIV. Cheers --Elmidae (talk · contribs) 09:57, 14 July 2018 (UTC)[reply]
I've added the two non-typo numbers. -- zzuuzz (talk) 17:07, 15 July 2018 (UTC)[reply]
Another one : 9650938706. Plus what appears to be a number that is one digit short - 892935903. Not sure if typo, or whether there are 10 digit numbers? - It also appears that our friend has discovered the joys of obfuscation [9][10]. Not much one can do about that, I suspect :/ --Elmidae (talk · contribs) 08:08, 17 July 2018 (UTC)[reply]

Requesting a CU

Hello there, if you have time, could you run a CheckUser on SPI/NadirAli? It has been lying dormant for weeks and the supposed master is taking advantage of that by engaging in disruption. --RaviC (talk) 09:16, 8 July 2018 (UTC)[reply]

It looks complicated, and there's not a great deal for a CU to go on in relation to Boxman88. Fill in some gaps for me while I read up, if you wouldn't mind ... what restrictions are currently in place for this user? and what recent arbitration/admin activity has taken place in relation to this user? -- zzuuzz (talk) 11:05, 8 July 2018 (UTC)[reply]
There is enough behavioral evidence for a CU; in fact, I myself noted some similarities after the SPI was filed and those similarities are not mentioned there. The account (Boxman88) edited on the 29th June,[11] repeating the same POV as NadirAli[12] on an article that can be considered to border on the India-Pakistan conflict from where he is topic banned.[13] After the filing of this SPI, he stopped editing for a couple of days and then returned to engage in more disruption as generally observed in accounts that are on the verge of getting blocked. --RaviC (talk) 11:37, 8 July 2018 (UTC)[reply]
I didn't miss the similarities. Let me be explicit after my initial review: the CU result between the two accounts is somewhere between possible and inconclusive, but there is almost certainly logged-out editing (which I can't disclose in detail) and a match to at least one other account (which I might not disclose). -- zzuuzz (talk) 12:04, 8 July 2018 (UTC)[reply]
Yep, because that account is his. Obviously, he has carried out mass logged out editing to evade his siteban and topic ban throughout the years since 2007. Please take a look the previous SPI [14] which was closed without a policy based factor. I've looked deeper into these articles and could find more than dozens of IPs that have been abused by NadirAli (In addition to editing while logged out, NadirAli is explicitly banned from using any other identity including IP addresses per Arbcom restrictions placed on him.[15]). Let me know what's next. Thank you. --RaviC (talk) 12:13, 8 July 2018 (UTC)[reply]

Its always fun...

...to wake up to email saying 'Blah has left you a message' only to find out its been rev-del. Anything interesting or was it common/garden wingnuttery? Only in death does duty end (talk) 13:01, 9 July 2018 (UTC)[reply]

Wingnuttery would be an understatement. You were deprived of a message from Jaredgk2008 - you might have seen him around recently - impersonating Kevin Gorman and spouting some shite incoherently. To be honest I don't even read what he says these days. -- zzuuzz (talk) 13:09, 9 July 2018 (UTC)[reply]
Thats 10 years of sockpuppetry. You would think they would find something better to do. Surprised they dont have an LTA page. Only in death does duty end (talk) 16:00, 9 July 2018 (UTC)[reply]
I don't think anyone reads the messages any more. Block, revert, ignore. 00:03, 10 July 2018 (UTC)

Proxy

Hello. Could you take care of this? It's being used by Wikipedia:Sockpuppet investigations/PavelStaykov in a very tricky way: first making edits with the IP and then only a minute later doing obvious vandalism on the same articles, and a few more, with a throw away account, Special:Contributions/Good bulgar, to draw attention away from the IP's edits. Which almost worked, because "Good bulgar's" edits were quickly reverted, but no one but me seems to have looked at the IP-edits that were made just before the vandalism... - Tom | Thomas.W talk 13:20, 9 July 2018 (UTC)[reply]

Indeed. I've blocked the /22 at this time. -- zzuuzz (talk) 13:33, 9 July 2018 (UTC)[reply]

Spurious SPIs

These days, I have been observing a rampage of most spurious SPIs ever, created in retaliation by someone but being filed by someone else in violation of WP:EVADE. I can successfully address the issue but where do you think this issue can be addressed? One of the suspicious filer of these SPIs has just admitted that he is evading block after I filed an SPI against him.[16]Lorstaking (talk) 08:30, 10 July 2018 (UTC)[reply]

Indeed. The best place to address a spurious SPI is in the comments section of that SPI. If you think there is a wider problem then I guess the admin or arbitration boards might be relevant in some cases. -- zzuuzz (talk) 08:51, 10 July 2018 (UTC)[reply]
(talk page stalker) @Lorstaking: If you know that an SPI has been filed by a block evader, you can tag the whole SPI under WP:G5. Home Lander (talk) 14:55, 10 July 2018 (UTC)[reply]
As an example - [17] Home Lander (talk) 15:03, 10 July 2018 (UTC)[reply]

User talk:Carfan56

You may wish to revoke talk page access.--Cahk (talk) 10:17, 11 July 2018 (UTC)[reply]

StLouis2

A little fishy

Saw your note at the SPI and I am of the same opinion that this account should be blocked for looking so suspicious. Using open proxies and supporting another account's point of view regularly and consistently should be good enough reason to block it. Why would someone use open proxies if they are not trying to hide themselves under a cloak? Sheriff | ☎ 911 | 15:26, 14 July 2018 (UTC)[reply]

When the seagulls follow the trawler, it's because they think sardines will be thrown into the sea (Cantona, 1995). -- zzuuzz (talk) 16:08, 14 July 2018 (UTC)[reply]
Cantona and his trawler misunderstood seagulls' intentions, they were just smelling the rotten sardines! Sheriff | ☎ 911 | 16:58, 14 July 2018 (UTC)[reply]
Re:Illustration: Little fishies do not take much time to get bigger! 🙂 Sheriff | ☎ 911 | 19:38, 14 July 2018 (UTC)[reply]

Baphomet

This two users make the same vandalism edits, ItzJoshiixx- diff, Dreams GMD diff, I dubious there are the same person, this diff may indicated as a sock of UnderArmourKid. SA 13 Bro (talk) 21:00, 15 July 2018 (UTC)[reply]

No to the first, yes to the second. -- zzuuzz (talk) 21:02, 15 July 2018 (UTC)[reply]

Recent block

In relation to your recent block, this account may be of interest? I've reverted a number of malicious edits to old RfAs in the past few months, but only realised something of a connection in light of the recent Kevin Gorman stuff. Thanks, 72 (talk) 23:13, 15 July 2018 (UTC)[reply]

Thanks. Yeah, he's been doing that. -- zzuuzz (talk) 23:36, 15 July 2018 (UTC)[reply]

AN RFC

Hello, I don't know if you can help, but this request for closure has been waiting more than two weeks and the Request for Comments is more than two months old. Can anything be done to resolve it? GPRamirez5 (talk) 16:38, 16 July 2018 (UTC) GPRamirez5 (talk) 15:06, 18 July 2018 (UTC)[reply]

You've got mail!

Hello, Zzuuzz. Please check your email; you've got mail!
Message added 18:07, 20 July 2018 (UTC). It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.

— MusikAnimal talk 18:07, 20 July 2018 (UTC)[reply]

Proxy-socks

Thanks for swiftly undoing their nonsense and blocking 'm. Any clue who it is? They seem to have a fascination (among other things) with sneakily reverting my redir tagging and I'm wondering if it is because my edits happen to be part of the recent changes a lot at the moment or if it's one of the LTAers I've ran into before holding a grudge. AddWittyNameHere 20:07, 20 July 2018 (UTC)[reply]

It's commonly known as the derp vandal, and yes it's automated to immediately undo any recent changes. -- zzuuzz (talk) 20:09, 20 July 2018 (UTC)[reply]
Ah, I see. Think I've heard of that one before, but this is the first time I've run into them myself. Again, thanks for your swift action (and swift response here) AddWittyNameHere 20:12, 20 July 2018 (UTC)[reply]

You've got mail!

Hello, Zzuuzz. Please check your email; you've got mail!
Message added 00:06, 22 July 2018 (UTC). It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.

Home Lander (talk) 00:06, 22 July 2018 (UTC)[reply]

Replied. Home Lander (talk) 00:27, 22 July 2018 (UTC)[reply]

Should this be revdelled?

See this: https://en.wikipedia.org/w/index.php?title=Michael_Ian_Black&type=revision&diff=851393301&oldid=851313880 It's a BLP article, and the edit seems like an extremely serious, unsourced smear. I am worried even mentioning this is too public, but I don't have an email registered to this account, so I can't email anyone. Thank you. Diamond Blizzard (talk) 00:19, 22 July 2018 (UTC)[reply]

It seems https://en.wikipedia.org/wiki/Special:Contributions/156.57.55.41 (thanks, 156.57.55.41!) reverted it, but the problematic material is still in the history. Diamond Blizzard (talk) 00:21, 22 July 2018 (UTC)[reply]

It's happened again

It seems that someone has decided to add defamatory material again to the Michael Ian Black page, of similar nature as the stuff from before, and with Breitbart (seriously) as the reference. It has been reverted, but is still visible in the page history. Here's a diff: https://en.wikipedia.org/w/index.php?title=Michael_Ian_Black&type=revision&diff=851441421&oldid=851440941

I'm just letting you know because it's very similar to what got revdelled last time. Diamond Blizzard (talk) 20:42, 22 July 2018 (UTC)[reply]

hey

Hey zuzz can we please be friends. I am thabo from lesotho. — Preceding unsigned comment added by Thabo Monaheng (talk • contribs) 12:18, 26 July 2018 (UTC)[reply]

A barnstar for you!

The Original Barnstar
Got your message. A good opportunity to say "thank you for all the good work you've done for our beautiful project": Thank you for all the good work you've done for our beautiful project. Drmies (talk) 14:58, 26 July 2018 (UTC)[reply]

Change of email address

This is a PGP signed message, using the key at User:Zzuuzz/PGPkey. The full signed message can be viewed in the source code of this section.

As of 22 July 2018 I have changed email address. The SHA-512 hash of the new email address is:

6155f6703fe31666221a2172edd2080553c6e5e970e584adce3fee41c8aa5969751b9f0268fb7ff56e51902bd7dd588254e3e0df66334586d499959be4db285e

-- zzuuzz (talk) 09:35, 27 July 2018 (UTC)[reply]

Hi zzuuzz. Can you please email me with your new email address (wrt CU list/wiki)? Thanks. (Also ping to There'sNoTime.) Trijnsteltalk 13:02, 27 July 2018 (UTC)[reply]
@Trijnstel: fwiw, I managed to get in contact with Zzuuzz yesterday - TNT 💖 15:12, 27 July 2018 (UTC)[reply]
 Done: email sent. -- zzuuzz (talk) 15:16, 27 July 2018 (UTC)[reply]
Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.

Trijnsteltalk 16:25, 27 July 2018 (UTC)[reply]

Quick request

Can you just quick add File:Shaved_Vulva_1.jpg to the WP:BIL. It's been taking a while over there lately for requests to be answered. Home Lander (talk) 23:03, 27 July 2018 (UTC)[reply]

Range block to stop the noticeboard vandalism?

I've just done a 24-hour block of Special:Contributions/2405:204:0:0:0:0:0:0/32. That seems large, but in a quick look I see most of the contributions to be either vandalism or questionable. Please undo if you think this is excessive. Leaving a ping for User:Bbb23 since he might also have noticed the blanking issue. Thanks, EdJohnston (talk) 13:38, 28 July 2018 (UTC)[reply]

Shingling

Hello. I noticed you're online, so would you mind dealing with this? Cheers, - Tom | Thomas.W talk 18:00, 29 July 2018 (UTC)[reply]

The range makes sense, I'm just looking for the smoking gun. -- zzuuzz (talk) 18:09, 29 July 2018 (UTC)[reply]
They're not proxies, it's a company called Nethouse that among other things offers a wireless hotspot service, obviously operating in both Turkey and Northern Cyprus. - Tom | Thomas.W talk 18:23, 29 July 2018 (UTC)[reply]

File:Tyler Faith 2.jpg

The pages this image has exceptions for on the WP:BIL have been deleted per an Afd, so the exceptions can probably be erased. Home Lander (talk) 18:19, 29 July 2018 (UTC)[reply]

You've got mail!

Hello, Zzuuzz. Please check your email; you've got mail!
Message added 22:42, 29 July 2018 (UTC). It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.

Might have accidentally sent twice. Home Lander (talk) 22:42, 29 July 2018 (UTC)[reply]

More cell phone spam (2)

New Indian university cell phone spam number, multiply used: 9650938071 (last here: [18]). Can you add to the filter? Also let me know if you'd prefer me to drop these at filter requests instead. Cheers --Elmidae (talk · contribs) 06:56, 5 August 2018 (UTC)[reply]

Done, thanks. -- zzuuzz (talk) 10:00, 5 August 2018 (UTC)[reply]
A new incumbent: 8929583662, used here. Cheers --Elmidae (talk · contribs) 14:44, 11 August 2018 (UTC)[reply]
'Nother one: 9871364815 [19]. Cheers --Elmidae (talk · contribs) 07:06, 13 August 2018 (UTC)[reply]
Thanks. That one's already filtered, hence the stupidity. The filter does quite a lot to prevent obfuscation, which is why we get things which don't look like phone numbers, which can't be a totally bad thing. -- zzuuzz (talk) 07:13, 13 August 2018 (UTC)[reply]

Another one

Special:Contributions/114.189.33.154 ~ Abelmoschus Esculentus (talk to me) 12:01, 8 August 2018 (UTC)[reply]

YGM

Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.

~ Rob13Talk 22:50, 9 August 2018 (UTC)[reply]

Give your feedback about changes to Special:Block

Hello,

You are receiving this message because you are a top user of Special:Block on this wiki. Thank you for the important work that you do. There is a discussion happening about plans to improve Special:Block with the ability to set new types of blocks. To get the best design and new functions added, it is essential that administrators who use the tool join the discussion and share their opinions about these changes.

Instead of a full site wide block, administrators would be able to set a Partial Block. A user could be blocked from a single page, multiple pages, one or more namespaces, from uploading files, etc. There are several different ways to add this feature to Special:Block. Right now Important decisions are being made about the design and function.

Please review the page on Meta and share your feedback on the discussion page. Or you can reach me by email Also, share this message with anyone else who might be interested in participating in the discussion.

I appreciate any time that you can give to assist with making improvements to this feature. Cheers, SPoore (WMF) (talk) , Trust and Safety Specialist, Community health initiative (talk) 01:47, 10 August 2018 (UTC)[reply]

A beer for you!

Thanks for catching and blocking all proxies. ~ Abelmoschus Esculentus (talk to me) 09:06, 10 August 2018 (UTC)[reply]
Second one is on me! Λυδαcιτγ 09:08, 10 August 2018 (UTC)[reply]

Vandal tracking

Hey, just curious, how do you you track the various IP addresses used by "jeffman"? Is there a way to search for recent edits with "jeffman" in the summary? Λυδαcιτγ 09:08, 10 August 2018 (UTC)[reply]

Control F in recent changes? ~ Abelmoschus Esculentus (talk to me) 09:08, 10 August 2018 (UTC)[reply]
Thanks both. Yes, filtered RC makes things easy. -- zzuuzz (talk) 09:15, 10 August 2018 (UTC)[reply]
Special:Contributions/217.69.8.93 "Jeff" ~ Abelmoschus Esculentus (talk to me) 09:31, 10 August 2018 (UTC)[reply]
Is it possible for me to do vandal track as well, or its only for admins? Also, what vandalism does user I pull up in the alfa romeo and shoot you in the penjs causing? I see only inappropriate username and that is all. His talkpage is blank as well as his contribution page.--Biografer (talk) 21:25, 19 August 2018 (UTC)[reply]
That's just a long term problem user, and the block reason is vastly generalised. Here's a relevant page for finding trouble: Special:Log/newusers. There's also Special:RecentChanges and WP:RCP. Fun for everyone! -- zzuuzz (talk) 21:30, 19 August 2018 (UTC)[reply]
Thanks. This will help me a lot, especially when the recent changes is backlogged.--Biografer (talk) 19:38, 4 September 2018 (UTC)[reply]

Banned editor HarveyCarter

Besides 81.143.201.72, who you just blocked, 92.8.217.88 ‎and 2A00:23C4:5D1F:9500:903B:C7D0:1366:E608 also appear to be HarveyCarter, judging by their geolocations. Beyond My Ken (talk) 07:57, 28 August 2018 (UTC)[reply]

This is almost certainly Vote (X) for Change. Perhaps they're neighbours. Wouldn't that be fun? -- zzuuzz (talk) 08:20, 28 August 2018 (UTC)[reply]
Oh, golly, what a thought. Beyond My Ken (talk) 21:27, 28 August 2018 (UTC)[reply]

Lilpumpernickle

I saw that you checkuser blocked Lilliam pumpernickle just now due to vandalism added to Buzz Lightyear. I'm just messaging you to let you know that I noticed another editor, Lilpumpernickle, was editing the same page and added the same vandalism. They were both also created within five minutes of one another and with similar usernames. I've blocked this account. Cheers - ~Oshwah~(talk) (contribs) 17:50, 30 August 2018 (UTC)[reply]

Thanks, I got called away before I could finish the cleanup. That one's confirmed (of course) along with some others - my last 3 blocks and another recent one of yours. -- zzuuzz (talk) 18:17, 30 August 2018 (UTC)[reply]

Edit Filter Helper Permission Request for StarlightStratosphere

Hello there. This is not anything but a question.

Is it allowed for people just to view the Edit Filters, just so they can find abuse? Since that is virtually what I was trying to get at by getting EFH status. Thanks!

--StarlightStratosphere (talk) 23:00, 1 September 2018 (UTC)[reply]

You can follow any links at Special:AbuseFilter and Special:AbuseLog. There's plenty of public stuff there to deal with. -- zzuuzz (talk) 23:04, 1 September 2018 (UTC)[reply]

Another Shingling-proxy

Hello. Special:Contributions/38.104.117.50 geolocates to Tunisia but has been used by Shingling334 (just like Special:Contributions/92.4.224.193 that you blocked an hour and a half ago and Special:Contributions/92.22.148.237 from yesterday, both of them TalkTalk in Essex), so it's with all probability an open proxy begging for a block. Cheers, - Tom | Thomas.W talk 14:54, 5 September 2018 (UTC)[reply]

Thanks. Remind me at some point to revisit those range blocks I made before the summer. -- zzuuzz (talk) 15:01, 5 September 2018 (UTC)[reply]
The latest IP I've seen Shingling use is Special:Contributions/92.3.99.26, TalkTalk, Colchester, Essex. An IP that is in the same /22 as Special:Contributions/92.3.97.69 and Special:Contributions/92.3.98.240 that were used by Shingling last spring. - Tom | Thomas.W talk 20:05, 10 September 2018 (UTC)[reply]
And he was blocked just minutes ago on Special:Contributions/38.122.207.34, a proxy/webhost belonging to Cogent in Texas. - Tom | Thomas.W talk 20:14, 10 September 2018 (UTC)[reply]
I think the TalkTalk is a /21 or /20. I'll go for the /21 at this time. What do you think of this? -- zzuuzz (talk) 20:15, 10 September 2018 (UTC)[reply]
There's a very good chance it's him, but at the same time it's not 100% him, so I would give some more rope and see what happens... - Tom | Thomas.W talk 20:20, 10 September 2018 (UTC)[reply]
Yup, I'd upgrade that to 100%. I've just blocked a few others if you're interested. -- zzuuzz (talk) 20:42, 10 September 2018 (UTC)[reply]
I took a look at them, and he has changed his MO on some of them, to make it harder to spot them. Some are as usual, some (like TCypriot) are halfway between, and some show none of the usual signs at all... - Tom | Thomas.W talk 21:59, 10 September 2018 (UTC)[reply]
Hi, fyi I reported 38.142.216.42, 38.122.207.34, and 38.30.28.202 already a few days ago at Wikipedia:WikiProject on open proxies, as well as an SPI report for PuertoRicanBanana (only one edit but it's obviously him), not sure if anyone is monitoring those... Should I do something different? Looks like he's still active on the third proxy. --IamNotU (talk) 23:20, 10 September 2018 (UTC)[reply]
PS, meant to also ping Thomas.W... btw, how are you getting Tunisia for the first one? I'm seeing it as another Cogent proxy/webhost, in Delaware. Anyway, as I've been putting some time into this lately, maybe it would be good for everyone to coordinate so as not to duplicate efforts, not sure how to best do that though...? --IamNotU (talk) 03:12, 11 September 2018 (UTC)[reply]
If you search for the IP and Tunisia, you'll find a cached page saying so. I've seen China and all sorts for recent Cogent IPs, and it is in fact a tricky network to properly nail down. So 38.30.28.202 is now also blocked. WP:OP is officially a laid back place, and things can take time over there. Really, SPI would the place to put it all together, but in reality it can often be quicker to just hassle a CU directly. -- zzuuzz (talk) 06:32, 11 September 2018 (UTC)[reply]
Ok, thanks. Fyi, today's Cogent proxy for him is Special:Contributions/38.122.207.210. --IamNotU (talk) 01:09, 17 September 2018 (UTC)[reply]
And today's proxy/webhost is Special:Contributions/209.50.57.103. --IamNotU (talk) 19:25, 17 September 2018 (UTC)[reply]
Looks like there's a good handful of Cogent/UpCloud ranges that aren't blocked. [20]. I'll get to work on those. I'm one of the few that watch WP:OPP by the way, I usually clear those out every couple days. SQLQuery me! 21:55, 17 September 2018 (UTC)[reply]
Today's cogent proxy: Special:Contributions/38.142.192.178. Has been used by some other people too. SQL, I saw you were clearing out some of the WP:OPP reports, but skipped over mine, so I wondered if I'd done something wrong... is it better to report them there? --IamNotU (talk) 03:35, 22 September 2018 (UTC)[reply]

Poke

I undid this report because it doesn’t really fit with the Deep Nikita MO, but it’s clearly a sockmaster and looking a bit closer, there are a few abbreviations added. I’m still skeptical it’s Deep Nikita, but it might be worth looking to see if we can get a range block on the underlying range. Revdel’d the report because of the attack named: [21]. Thanks, zzuuzz. TonyBallioni (talk) 21:47, 5 September 2018 (UTC)[reply]

And Lord, I’m an idiot. It was reverting to an old abuse pattern from a while back in the SPI, before I started monitoring it Facepalm Facepalm. Anyway, I’m still keeping it hidden since most of those usernames have been scrubbed from revision histories (which is why I was quick to revert), but any help to try to put the LTA out of commission would be useful given the harassment. TonyBallioni (talk) 21:55, 5 September 2018 (UTC)[reply]

I'm sure not sure how to use Wikipedia, but "...For President" is a confirmed sockpuppet of Deep Nikita and the person I am talking about is the same subject of edits and name is used when creating the Wikipedia users. Be gentle. https://en.wikipedia.org/wiki/Category:Wikipedia_sockpuppets_of_DeepNikita — Preceding unsigned comment added by Spacenacho (talk • contribs) 22:09, 5 September 2018 (UTC)[reply]

Spacenacho, you’re fine. I’ve been monitoring that SPI for a while, and the I didn’t see the for president account in the archives, and didn’t make the connection because of that. My concern was hiding some of the blatant attack names since what I saw was a new user filing a good faith SPI, but without a clear connection. That was my mistake. I’m normally pretty good at these sort of things, but I do make errors on occasion, and this was one. Sorry for any confusion to you (and apologies to zzuuzz on the notifications.) TonyBallioni (talk) 22:19, 5 September 2018 (UTC)[reply]
OK I'll check to see what's going on and whether there's anything useful. It may take a little time... In the meantime Spacenacho if you see any content that should be hidden, see WP:RFO. -- zzuuzz (talk) 22:21, 5 September 2018 (UTC)[reply]
Sro23 and GB_fan have had the most experience reverting edits and blocking alleged sockpuppets from Deep Nikita. Thank you. Spacenacho (talk) 22:51, 5 September 2018 (UTC)[reply]
So I've had a look. All the accounts are blocked and do appear to be DeepNikita, though I'm sure you'll appreciate the original account is lost to the sands of time and some things are a bit uncertain - we can probably only say that it's the vandal commonly known as DeepNikita. I've blocked some other accounts and some IPs and put down some rangeblocks on top of any existing blocks. It might slow them down a bit, but one thing about this vandal is that range blocks are never going to be fully effective. You can see this for example in the history of PV. Semi-protection might be in order in a few places, and perhaps a filter. @GB fan, Spacenacho, Sro23, and TonyBallioni: -- zzuuzz (talk) 08:55, 6 September 2018 (UTC)[reply]
Can the confirmed sockpuppet's page be updated to reflect this conclusion? If not what is needed? I know some of the names are grossly inappropriate, but the ones that are appropriate (K... H..., H..., K...) I believe should be added. How about the IP addresses? They are usually from cities like Seattle, Redmond, and Bellevue WA Spacenacho (talk) 01:17, 7 September 2018 (UTC)[reply]
There's really three issues here. The first is the question of how this would help to improve, maintain, or reduce disruption to the encyclopaedia. The second is problems involved with listing what is presumably someone's real name. And thirdly there is my policy, generally held in these parts, of not repeating that which a vandal is so keen to have repeated. So in short I think the answer is no. -- zzuuzz (talk) 06:41, 7 September 2018 (UTC)[reply]

Sock

Can you take a look at this throwaway disruptive sock  VALIDALTguy? For more details see WP:AIV. Accesscrawl (talk) 09:04, 6 September 2018 (UTC)[reply]

Thanks

Thanks for taking care of that. I wasn't familiar with that particular LTA. I will keep an eye out for anything else. EclipseDude (talk) 10:04, 6 September 2018 (UTC)[reply]

Thanks for cleaning up. Yup it's a fairly typical MO for this LTA, at the moment, plus pretty much anything mentioning Bonadeaphone. Also note the really bad English. -- zzuuzz (talk) 10:15, 6 September 2018 (UTC)[reply]

Nillurcheier1

Thanks for blocking this fake account. It was not created by me. If I had diverging oppinions on content, I'd rather go to talk than using such ugly sockpuppet tricks. BR Dr. Ulrich Leiner, Brandst. 9, 85540 Haar close to Munich. --Nillurcheier (talk) 13:36, 6 September 2018 (UTC)[reply]

No problem. It's a confirmed long term abuse case, so you're entirely in the clear. @Acroterion: -- zzuuzz (talk) 13:43, 6 September 2018 (UTC)[reply]

Needs a little less rope

BuddhaIsLord is playing silly buggers on its talk page. Any change you could shorten the rope a little ? Regards  Velella  Velella Talk   21:33, 6 September 2018 (UTC)[reply]

A barnstar for you!

The Anti-Vandalism Barnstar
Thanks for blocking the socks so quickly. Much appreciated! GenuineArt (talk) 20:41, 8 September 2018 (UTC)[reply]

Sock block of SpaceKevin51

I just noticed that you blocked SpaceKevin51 as a sock of Wikipedia:Sockpuppet investigations/Architect 134, but the behaviour is similar to Wikipedia:Sockpuppet investigations/RobThomas15. Is there one sock master here or did you associated SpaceKevin51 with the wrong master? Walter Görlitz (talk) 05:11, 9 September 2018 (UTC)[reply]

Hello. I'm waiting for some input from Bbb23. I'd suggest this is all some joe-jobbing from Architect 134 and that RobThomas15 has not socked once. Actually everyone has consistently denied being RobThomas15 so mistaken identity might be a better suggested description. Imagine what can happen if all accounts, except the original, were linked up by CU. Watch this space. -- zzuuzz (talk) 06:49, 9 September 2018 (UTC)[reply]

Misleading user page

and with particular regard to this, how about a CU? I did email the functionaries list, but tbh I'm not hopeful that it'll ever get through the spam filter  :) take care, —SerialNumber54129 paranoia /cheap sh*t room

I'll leave you to use your imagination. For the record, the userpage approximately came from Pinkadelica. -- zzuuzz (talk) 10:51, 14 September 2018 (UTC)[reply]

Vote (X)

...has turned up with a new IP: https://en.wikipedia.org/w/index.php?title=Talk:Coordinated_Universal_Time&curid=180720&diff=859659320&oldid=859550520. That change was reverted for ban evasion; but AFAIK is not blocked.

How much point is there in blocking a DHCP IP address for a week? I would block the entire TalkTalk range for a month, but then nobody thinks I'd make a good admin. MrDemeanour (talk) 13:22, 15 September 2018 (UTC)[reply]

It's complicated... Vote (X) has the ability to use multiple ISPs, and multiple ranges, and to hang on to IP addresses for various and surprising lengths of time. Although the occasional range block might be applied, they're just not going to be effective. That said, I've taken out the /21. -- zzuuzz (talk) 14:01, 15 September 2018 (UTC)[reply]

you've got mail

Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.theinstantmatrix (talk) 15:57, 18 September 2018 (UTC)[reply]

Gary1207

Hi! Thanks for blocking Gary1207 and removing a revision from my user page history. The user has left more degrading material in the page histories of my user page and talk page, would you mind redacting those as well? Regards, Lordtobi (✉) 12:50, 21 September 2018 (UTC)[reply]

Falun Gong

Is it possible to lay down a rangeblock here? Thanks for your help. GABgab 22:44, 22 September 2018 (UTC)[reply]

Not really. They are probably using CyberGhost, so we can take out the IP ranges as they turn up, but there's probably going to be a few of them. -- zzuuzz (talk) 22:51, 22 September 2018 (UTC)[reply]
Ah, well. GABgab 23:08, 22 September 2018 (UTC)[reply]

Shingling334 using proxy

Hello. 27.255.77.46 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) and 27.255.77.47 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) appear to be Shingling334, editing through a webhosting service in Korea (27.255.64.0/19, EHOSTIDC, Seoul). - Tom | Thomas.W talk 19:16, 24 September 2018 (UTC)[reply]

85.217.171.7 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log), webhost, was used by him in July, just used again today. --IamNotU (talk) 22:31, 27 September 2018 (UTC)[reply]

SPIs

One wonders, maybe we should just automatically semi-protect all these SPIs. Drmies (talk) 22:08, 25 September 2018 (UTC)[reply]

Maybe, on a case by case basis, for affected ones. I could see where some newbie might want to comment in some cases. You know, we have a filter which goes by the name of "SPI disruption". One would think... -- zzuuzz (talk) 22:16, 25 September 2018 (UTC)[reply]
But this one goes just randomly, no? But yeah, good point: new users do get called up sometimes. Drmies (talk) 22:30, 25 September 2018 (UTC)[reply]

A barnstar for you!

The Defender of the Wiki Barnstar
For defending against sockpuppets! dmartin969 04:56, 4 October 2018 (UTC)[reply]

Ref desk talk page...

...needs longer protection, like maybe a few days. ←Baseball Bugs What's up, Doc? carrots→ 12:17, 4 October 2018 (UTC)[reply]

My talk page

I walk away for 30 minutes and all hell broke loose. Thanks for cleaning it up. RickinBaltimore (talk) 15:07, 4 October 2018 (UTC)[reply]

Bunchesofoats3

Hi Zzuuzz, could you remove TPA for Nsmutte sock Bunchesofoats3? Much appreciated :-) (Tbh, it's rather sad that he actually keeps track of his throwaway sock accounts!) --bonadea contributions talk 08:44, 5 October 2018 (UTC)[reply]

Reading this, Bonadea, I thought you were speaking to Tbhotch but on second thoughts I think you mean "to be honest" - always a good thing to be! 86.152.81.16 (talk) 10:19, 9 October 2018 (UTC)[reply]

Ref desk talk page again

Could you maybe extend the protection for another week? As soon as it expired, VXFC started infesting it. ←Baseball Bugs What's up, Doc? carrots→ 14:56, 7 October 2018 (UTC)[reply]

User talk:IndoorSkygiving

You may wish to revoke talk page access.--Cahk (talk) 10:29, 8 October 2018 (UTC)[reply]

Shingling proxy

45.33.16.63 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log) (whois) seems to be an open proxy, based on both this and that it obviously is being used by Shingling. Compare that IP to this IP (TalkTalk in Essex) that was used by Shingling yesterday. - Tom | Thomas.W talk 15:15, 8 October 2018 (UTC)[reply]

Removing vandalism from your talk page

This is not easy, because when I try to do it I hit a number of edit filters. You might want to look at them again. 86.152.81.16 (talk) —Preceding undated comment added 10:32, 9 October 2018 (UTC)[reply]

Thanks, it mostly affects banned users. -- zzuuzz (talk) 14:24, 9 October 2018 (UTC)[reply]

Abusive IP

Hi Zzuuzz, thanks for reverting the abusive IP [22]. You might be interested to know that the IP is likely connected to an old case that you dealt with last year [23]. I've just filed a new SPI report at Wikipedia:Sockpuppet investigations/ProfessorJane. Cheers, -Zanhe (talk) 19:26, 11 October 2018 (UTC)[reply]

Check your email

Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template. — ~Oshwah~(talk) (contribs) 05:45, 12 October 2018 (UTC)[reply]
Update: This applies to two (possibly three) additional accounts you handled. Cheers - ~Oshwah~(talk) (contribs) 05:51, 12 October 2018 (UTC)[reply]

Thank you

Not sure if we ended up overlapping on any RDs, but thank you all the same - TNT 💖 20:47, 13 October 2018 (UTC)[reply]

You've got mail

Hello, Zzuuzz. Please check your email; you've got mail!
It may take a few minutes from the time the email is sent for it to show up in your inbox. You can remove this notice at any time by removing the {{You've got mail}} or {{ygm}} template.Den... (talk) 17:39, 15 October 2018 (UTC)[reply]

Grawp LTA

Hi, I notice you deleted a revision on the Grawp LTA page a few months ago.[24] Do you think the revision was actually made by Grawp, or just by some unrelated sympathizer? If you think it was Grawp, can you update the SPI archive unless you think it's unadvisable per DENY? Reason I ask: the current refdesk attack has got me thinking about very persistent abusers and whether there's hope of the RD situation getting better with time. If Grawp is really still around, that tells us something. I'm usually against this sort of thing but I wonder if we should work on new technical countermeasures.[25] Thanks for your own persistence in dealing with this headache. 173.228.123.166 (talk) 21:46, 20 October 2018 (UTC)[reply]

Hello. That edit was made another unrelated LTA (this one). Grawp is still active, even this week, and has been fairly consistently since the SPI was last updated four years ago. I don't think there's much to be gained by documenting their latest activities, but I might update the LTA page at some point. Needless to say we are keeping an eye on the RD situation. -- zzuuzz (talk) 22:22, 20 October 2018 (UTC)[reply]
Thanks, I trust your judgment about documenting stuff. 173.228.123.166 (talk) 00:41, 21 October 2018 (UTC)[reply]

anon blocks

The recent thread at ANI regarding range block of Georgia Dept. Education made me wonder: is it possible to put anon block on a range? —usernamekiran(talk) 01:20, 21 October 2018 (UTC)[reply]

A range? Sure, most things are possible. Whether it is effective, beneficial, policy-compliant, or will cause side-effects are different questions. -- zzuuzz (talk) 05:54, 21 October 2018 (UTC)[reply]

Wowsers!

What is going on with all of the vandalism? I can't believe you can keep up with this! -- Dolotta (talk) 08:16, 21 October 2018 (UTC)[reply]

Please block Special:Contributions/117.197.41.41 and Special:Contributions/218.32.46.68 as well. ―Abelmoschus Esculentus 08:36, 21 October 2018 (UTC)[reply]

Not sure what this is

Hello Z. Thanks for the r/d today. I'm not sure what this is but it is a sinebot leftover from another of the incessant socks. Since I am clueless about what it is I thought I'd ask you to check and see if it needs r/d as well. Cheers. MarnetteD|Talk 15:54, 21 October 2018 (UTC)[reply]

It appears to be vandalbot vomit. I've cleaned it up anyway. -- zzuuzz (talk) 17:36, 21 October 2018 (UTC)[reply]
Thanks Z. Vandalbot vomit ick :-P MarnetteD|Talk 18:32, 21 October 2018 (UTC)[reply]

TW

Yea sorry, i pressed the damn button too fast... Sorry. Thegooduser Let's Chat 🍁 22:24, 21 October 2018 (UTC)[reply]

No problem. -- zzuuzz (talk) 22:25, 21 October 2018 (UTC)[reply]

Reversion on my talk page

Would you mind sharing what that IP you reverted on my Talk Page said? I don't mind you scrubbing it if it had to be scrubbed, but I'm curious now. At least a paraphrase, if you'd rather not directly echo a troll. InedibleHulk (talk) 15:36, October 23, 2018 (UTC)

Hello. It was a vandalbot that you may have seen wandering these parts recently. The summary was a random personal attack against an unrelated user, totally unrelated I'd imagine. Random. -- zzuuzz (talk) 16:50, 23 October 2018 (UTC)[reply]
I don't believe in randomness, but if you say it was about someone else, it's none of my business. Cheers. InedibleHulk (talk) 19:27, October 23, 2018 (UTC)
OK, maybe not entirely random. You were probably derived from an algorithm based on some page's history at some point in time. But it wasn't directed at you, that's for sure. -- zzuuzz (talk) 19:38, 23 October 2018 (UTC)[reply]
That's a relief. I'd always feared I was derived from my parents commiting a truly unspeakable and vile act long ago. Guess it's more of a pseudorelief, but it'll do for now. InedibleHulk (talk) 19:54, October 23, 2018 (UTC)

Teahouse

Can we at least try to unprotect even temporarily and see if things have died down? It's really problematic having that page semi protected. GMGtalk 21:22, 23 October 2018 (UTC)[reply]

Go ahead. I don't really care about the "Teahouse" I was just experimenting. The ref desks should stay on lockdown though, and I will make sure of that even if I have to do it manually :) 199.27.95.186 (talk) 06:56, 24 October 2018 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=User_talk:Zzuuzz/Archive_34&oldid=1079389929"