This tool scans recent changes to retrieve the IPs used by a user or show the edit/user data for an IP.
Users and edits by a client IP can be retrieved via XFF headers by appending the IP with "/xff". IPv4 (CIDR 16-32) and IPv6 (CIDR 96-128) are supported.
No more than 5000 edits will be returned for performance reasons.
Use this in accordance with policy.
Usage help
|
- How to use this tool
- Enter the user name or IP address of the user you want to check and select the time period you want information about
- Set the check mode:
- Get IPs: Get all IP addresses associated with the entered user name
- Get edits from IP: Get all contributions made from the IP address (both from registered and anonymous users)
- Get users: Get all users that are associated with the IP address
- Get account edits: Get all contributions from the user account
- Enter a reason so that other administrators can see why you did this check
- Press Check to start
- The different modes and the interpretation of their results
- Identity modes: These modes list associated IP addresses or user accounts, showing the time frame in which the account/IP was used and the number of edits that were made in bolded brackets.
- The "Get IPs" mode is used to get all IPs used for edits while logged into the queried user account. In case one IP was used by multiple accounts, a note is appended to a result line providing the total number of edits made from that IP address.
- The "Get users" mode is used to get all user accounts that were used from the queried IP address. Additionally, a list of used User Agent headers is shown for each result.
- Edit modes: The "get edits" modes are similar to Special:Contributions, and list all contributions by the queried user/IP in a format similar to Special:RecentChanges. They provide the publicly visible contributor's name (user name or IP address for anonymous users) and an edit summary, but additionally show the IP address used for the edit and its User Agent header.
- The "Get edits from IP" mode is used to get all edits made by the queried IP address, showing edits from all accounts where the IP address was used.
- The "Get account edits" mode is used to get all edits made by the queried user name, showing edits made while logged into that user account.
- Useful tips
- To check if a user is socking, get IPs from the user in question. Look for notes at the end of a line mentioning "(~X from all users)"; this means that there were other user accounts logged in with this IP address. Click the IP address to open a pre-filled form to check the IP address, and use the "Get edits from IP" or "Get users" option to receive detailed information about the contributions or user accounts used by that IP address.
- Note: Due to the late installation date, it is not possible to use check user for edits made prior to the 12th November 2009.
|
