Wikipedia

Wikipedia:Long-term abuse/Denver LTA

< Wikipedia:Long-term abuse
Denver LTA (provisional)
Shortcut: WP:LTA/DENVER
WikilifespanApril 2007 – present
ISPCenturyLink, T-Mobile
Known hostmasks66.87.150.0/23 globally blocked; 75.160.0.0/12; 97.112.0.0/12; 174.16.0.0/12; 184.96.0.0/13
Physical locationDenver or Aurora
Requests for commentJump2255
Sockpuppet investigationsDan689, James265, Way4743, Home367, John574, Diana335, Cody MR
InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information. Blocked socks must have talk-page access revoked per WP:DENY.
Confirmed socks and those socks who abuse cross-wiki should be reported to Steward requests/Global on Meta for global locking.
StatusArchived

This is a long-term abuser that appears to geolocate to Denver or its suburbs, and has an interest in blanking Denver radio stations and other things. Signature vandalism is page blanking of radio station KYGO-FM and Chili's. They are aware of the John574 SPI and this page.

Timeline summary
Probably related sockfarms and accounts

Habitual editing

Circa 2007

Category:Wikipedia sockpuppets of Dan689

Circa 2008

Way4743 sockfarm
Jump2255 sockfarm

  • Repeated vandalism to Carly Smithson.
  • Similar misspellings, such as "Iam" for "I am"
  • Similar usernames; name and then a 2 to 4 digit number
  • Users edit in tandem.
  • Vandalize own SSP (SPI) page
  • Users end talk page comments with unspaced double dashes followed by their signature. e.g. [13]

Circa 2009

Home367 sockfarm

  • KYGO-FM blanking
  • Vandalism of SPI
  • Carly Smithson

User:Cold465

  • Carly Smithson
  • Denver radio blanking

2017 and later

Wikipedia:Sockpuppet_investigations/John574

  • Many IPs in the 66.87.xx.xx and 174.16.xx.xx range geolocating to Denver
  • SPI and AIV vandalism
  • Personal attacks
  • False accusations on ANI
  • Abuse of warning templates

Demands for unblocking

Beans

New analysis

To be considered

Fan423 (talk · contribs · deleted contribs · logs · filter log · block user · block log). This user 2008 edits:

  • KYGO-FM
  • Way4743 checkuser request [14]

Dude643 (talk · contribs · deleted contribs · logs · filter log · block user · block log)

Joe Barton (talk · contribs · deleted contribs · logs · filter log · block user · block log)

  • 13 November 2017 User talk:Bri; blanking KYGO-FM, Love's Travel Stops & Country Stores, KSCS (Dallas), Chili's

Mark Bowman (talk · contribs · deleted contribs · logs · filter log · block user · block log)

  • Blanking KSCS, KYGO-FM, Chili's

Chase287 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
Doug511 (talk · contribs · deleted contribs · logs · filter log · block user · block log)

  • August 2012–March 2016
  • Chase287 & Doug511 checkuser blocked, interacts with Denver IP 75.171.214.91 & 168.103.200.176
  • Denver radio edits

75.171.214.91 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
71.215.124.194 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)

  • see above & logged-out edit [18]

Dal445 (talk · contribs · deleted contribs · logs · filter log · block user · block log)

  • Carly Smithson
  • interactions with Denver IPs

71.33.146.220 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
174.16.157.15 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
66.87.151.29 (talk · contribs · deleted contribs · logs · filter log · block user · block log)

  • see above

Vandals at Carly Smithson

Vandals at Bennigan's, Applebee's Chili's and Wendy's


KEZW fixation

April 2016

vandals at User talk:Favonian / Denver geolocation

17 June 2016

immediately after protection dropped on 20 June:

17 August 2016

17 April 2017

Favonian/Floquenbeam vandalism

Vandals at User talk:Sro23

Vandals at this page

1Love's Travel Stops & Country Stores page blanker
2Reunion Tower ibx scrambling
3User talk:Bri/Denver LTA diddling

Vandals at User talk:L235

Vandals at John574 SPI

Vandals at simple:User talk:Bri and Commons:User talk:Bri

Vandals at Chili's, KSCS, KYGO and Larkspur, Colorado

Note Larkspur23 Colorado radio vandal in Dan689 sockfarm

Airing some old socks

A number of very seasoned socks have been given one last trot before the final, global lock:

Favonian (talk) 18:34, 5 February 2019 (UTC)[reply]

User talk:Wizzito harassment (false warning templates) / false ANI accusations

wizzito | say hello! 20:08, 2 February 2022 (UTC)[reply]

Update: I sent an e-mail report to CenturyLink detailing the abuse by this LTA on their networks on February 22, 2022. The last communication from them was from an abusive global unblock request sent from meta:User_talk:184.96.250.159 on March 1st, 2022. As the /17 range is currently unblocked, with no activity since its global unblock on March 2, I believe that CenturyLink has likely terminated their internet service. wizzito | say hello! 07:55, 26 March 2022 (UTC)[reply]
They have made two impersonation accounts and used them for abuse on simplewiki as recently as March 18th, though, so that theory is likely up in the air. wizzito | say hello! 07:57, 26 March 2022 (UTC)[reply]
1 year after this. The T-Mobile range they used has been unblocked for a few days now and there is no harassment to be seen on any of the ranges used. I would consider this LTA gone. wizzito | say hello! 05:17, 4 February 2023 (UTC)[reply]
FYI: the impersonation accounts I thought were them were actually another LTA wizzito | say hello! 05:17, 4 February 2023 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Long-term_abuse/Denver_LTA&oldid=1137355939"
  NODES
INTERN 1
Note 3
Project 1
USERS 2