Wikipedia:Requests for checkuser/Case/1pixel

class="messagebox"

| style="text-align: center" | If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{{{FULLPAGENAME}}}}
to the checkuser page [http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser&action=edit§ion=1 here]. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).

The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

= [[Wikipedia:Requests for checkuser/Case/1pixel|1pixel]] =

{{checkuser|Ffddd}}
{{checkuser|Mp3tt}}
{{checkuser|Zzttr}}
Code letter: G

We have a repeat vandal who is creating large numbers of pages full of very large numbers (thousands or more) of 1px versions of Wikipedia images. See deleted contributions for any of the above for examples.

Based on the pattern, I believe that this is apparently run-up to a denial of service attack involving many more images on many more pages, intended to overload the Wikipedia image servers.

See: [http://en.wikipedia.org/wiki/Wikipedia:Administrators%27_noticeboard/Incidents#1px_image_DoS_vandal_is_back 1 px image DoS vandal is back] on ANI

In my opinion, a CU to block the underlying IP range(s) is necessary as part of the preventive measures to keep this person or persons from launching a more widespread actual attack in the coming days or weeks. Georgewilliamherbert (talk) 23:47, 31 January 2008 (UTC)

: {{IPblock}} - just two of them. Let me know if this restarts and I will rangeblock. It's only two narrow /25 and /20 ranges.

:{{confirmed}} - {{User|Ffddd}}, {{User|Mp3tt}}, {{User|Zzttr}}, {{User|Sttstt}}, {{User|Kkllt}}, {{User|Ragt}}, {{User|Ggiga}}, {{User|Htth}}, {{User|Gigaabot}}, {{User|Mp3 za}}, {{User|. Mp3 and}}, {{User|Mp3 rr}}, {{User|Poptopr}}, {{User|Drsttt}}, {{User|Drstt}}, {{User|Sysfr}}, {{User|Drsibt}}, {{User|Sibmen}}, {{User|Fdws}}, {{User|Trrm}}, {{User|Trrtt}}

: - Alison ^❤ 01:39, 1 February 2008 (UTC)

::I've deleted all of the spam pages these socks have created. Nakon 03:02, 1 February 2008 (UTC)

:::...and I have blocked and tagged all of them that weren't already, with User talk:Ffddd as the notional sockpuppet master account. Thanks all... Georgewilliamherbert (talk) 03:06, 1 February 2008 (UTC)

The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.