Misplaced Pages

:Requests for checkuser: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
Browse history interactively← Previous editNext edit →Content deleted Content addedVisualWikitext
Revision as of 21:54, 4 June 2006 view sourceEssjay (talk | contribs)21,413 edits →[]/[]← Previous edit Revision as of 22:15, 4 June 2006 view source Essjay (talk | contribs)21,413 edits →[]/[]Next edit →
Line 59: Line 59:
::This was requested by ] after the original request, due to: the user's first edit was just after Merecat's block, use of Misplaced Pages slang, and editing ] article, supposedly one of Merecat's favorites. ::This was requested by ] after the original request, due to: the user's first edit was just after Merecat's block, use of Misplaced Pages slang, and editing ] article, supposedly one of Merecat's favorites.
:] <sup>]</sup> 20:45, 4 June 2006 (UTC) :] <sup>]</sup> 20:45, 4 June 2006 (UTC)

{{Confirmed}} as follows:

*Rex071404, Merecat, Neutral_arbiter, Cal_Burrattino, and Wombdpsw are the same editor.
*Zer0faults appears to be a distinct individual, and has used 74.64.40.102, along with several others. There is not an obvious connection with Rex/Merecat.
*69.46.20.59 is HIVELOCITY VENTURES CORP, a hosting company in Florida. Very little legitimate traffic comes from hosting companies, and their addresses often operate like open proxies.
*216.22.26.46 is Choice One Communications Inc., a business internet and phone service provider/hosting company. The address 216.22.26.46 appears to be part of the webhosting services.

In short, either of the two IP addresses could be anyone, including Rex/Merecat. It is impossible to tell, since they may or may not be available for proxying activities, and are not likely to be scannable. <span style="font-family: Verdana">] <font color="#7b68ee">(<small>] • ]</small>)</font></span> 22:15, 4 June 2006 (UTC)


==Clerk Attention Required== ==Clerk Attention Required==

Revision as of 22:15, 4 June 2006

Noticeboards
Misplaced Pages's centralized discussion, request, and help venues. For a listing of ongoing discussions and current requests, see the dashboard. For a related set of forums which do not function as noticeboards see formal review processes.
General
Articles and content
Page handling
User conduct
Other
Category:Misplaced Pages noticeboards


    Read this first

    This is the place to request sockpuppet checks and other investigations requiring access to the Checkuser privilege. Possible alternatives are listed below.

    Requests likely to be accepted

    Code Situation Solution, requirements
    A Blatant attack or vandalism accounts, need IP block Submit new section at #Requests for IP check, below
    B Evading blocks, bans and remedies issued by arbitration committee Submit case subpage, including link to closed arb case
    C Ongoing, serious pattern vandalism with many incidents Submit case subpage, including diffs
    D Vote fraud, closed vote, fraud affects outcome Submit case subpage, including link to closed vote
    E 3RR violation using sockpuppets Submit case subpage, including diffs of violation
    F Evading blocks, bans and remedies issued by community Submit case subpage, including link to evidence of remedy
    G Does not fit above, but you believe check needed Submit case subpage, briefly summarize and justify

    Requests likely to be rejected

    Situation Solution
    Obvious, disruptive sock puppet Block, no checkuser needed
    Disruptive "throwaway" account used only for a few edits Block, no checkuser needed
    Checkuser on yourself to "prove your innocence" Such requests are rarely accepted, please do not ask
    Related to ongoing arbitration case Request checkuser on the arbitration case pages
    Vote fraud, ongoing vote Wait until vote closes before listing, or post at Misplaced Pages:Suspected sock puppets
    Vote fraud, closed vote, did not affect outcome List at Misplaced Pages:Administrators' noticeboard/Incidents or Misplaced Pages:Suspected sock puppets
    Other disruption of articles List at Misplaced Pages:Administrators' noticeboard/Incidents or Misplaced Pages:Suspected sock puppets
    Open proxy, IP address already known List at Misplaced Pages:WikiProject Open proxies
    You want access to the checkuser tool yourself Contact the Arbitration Committee, but such access is granted rarely


    When submitting a request

    • If submitting a new case subpage, use the inputbox below; if adding to an existing case subpage, see WP:RFCU/P#Repeat requests.
    • Choose the code letter that best fits your request. Provide evidence such as diff links as required or requested. Note that some code letters inherently require specific evidence.
    • When listing suspected accounts or IP addresses, use the {{checkuser}} or {{checkip}} templates. Please do not use this template in a section header.
    • You may add your request to the top of the #Outstanding requests section, by adding {{Misplaced Pages:Requests for checkuser/Case/CASENAMEHERE}}. If you do not, clerks should check for pages in Category:Checkuser requests to be listed and will do this for you.
    • Sign your request.


    After submitting a request

    Purge cache

    Privacy violation?

    this header: view • edit

    File a Checkuser Request
    This page is currently inactive and is retained for historical reference.
    Either the page is no longer relevant or consensus on its purpose has become unclear. To revive discussion, seek broader input via a forum such as the village pump.
    Cases are created on subpages of Misplaced Pages:Requests for checkuser/Case.
    If you require help or advice, ask at Misplaced Pages talk:Requests for checkuser.

    If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top (if the case has been archived). When editing an existing case, be sure to list it here or add Category:Checkuser requests to be listed to the subpage.

    If creating a new case subpage, add the name of the main account (or "puppetmaster", not the sockpuppet!) in the box below. Leave out the "User:" prefix. Do not remove the text in the box, add the name to the end only (that is, append the name to the existing text). Then press "Request a checkuser" and you will be taken to a page where you can fill out the request.

    Example: if you want to request a checkuser on User:John Doe, enter the text:
    Misplaced Pages:Requests for checkuser/Case/John Doe

    <inputbox> type=create editintro=Misplaced Pages:Requests for checkuser/Inputbox/Header preload=Misplaced Pages:Requests for checkuser/Inputbox/Sample default=Misplaced Pages:Requests for checkuser/Case/ buttonlabel=Request a checkuser bgcolor=#F8FCFF width=50 </inputbox>

    Indicators and templates   (v  · e)
    These indicators are used by Checkusers, SPI clerks and other patrolling users, to allow easier at-a-glance reading of their notes, actions and comments.
    Case decisions:
     IP blocked  {{IPblock}}  Tagged  {{Stagged}}
     Blocked but awaiting tags  {{Sblock}}  Not possible  {{Impossible}}
     Blocked and tagged  {{Blockedandtagged}}  Blocked without tags  {{Blockedwithouttags}}
     No tags  {{No tags}}  Blocked and tagged. Closing.  {{Blockedtaggedclosing}}
    Information:
     Additional information needed  {{MoreInfo}}  Deferred  {{Deferred}}
    information Note:  {{TakeNote}}  In progress  {{Inprogress}}
    Clerk actions:
     Clerk assistance requested:  {{Clerk Request}}  Clerk note:  {{Clerk-Note}}
     Delisted  {{Delisted}}  Relisted  {{Relisted}}
     Clerk declined  {{Decline}}  Clerk endorsed  {{Endorse}}
    Self-endorsed by clerk for checkuser attention  {{Selfendorse}} CheckUser requested  {{CURequest}}
    Specific to CheckUser:
     Confirmed  {{Confirmed}} Red X Unrelated  {{Unrelated}}
     Confirmed with respect to the named user(s). no No comment with respect to IP address(es).  {{Confirmed-nc}}
     Technically indistinguishable  {{Technically indistinguishable}}
     Likely  {{Likely}}  Unlikely  {{Unlikely}}
     Possible  {{Possible}}  Inconclusive  {{Inconclusive}}
    no Declined  {{Declined}} no Unnecessary  {{Unnecessary}}
     Stale (too old)  {{StaleIP}} no No comment  {{Nocomment}}
    crystal ball CheckUser is not a crystal ball  {{Crystalball}} fish CheckUser is not for fishing  {{Fishing}}
     CheckUser is not magic pixie dust  {{Pixiedust}} magic eight ball The CheckUser Magic 8-Ball says:  {{8ball}}
     Endorsed by a checkuser  {{Cu-endorsed}}  Check declined by a checkuser  {{Cudecline}}
     Possilikely (a mix between possible and likely)  {{possilikely}}



    Note: Individuals making requests must check back regularly. The role of checkusers is to report findings; it is the responsibility of the individual making the request to see that appropriate action is taken.

    Outstanding Requests

    User:Rex071404/User:Merecat

    Update on list: Last IP-editor started disruptively trolling and has been blocked following the heated debate between Mr Zero and others. Nomen Nescio 18:45, 4 June 2006 (UTC)

    After doing a brief analysis of these users' edits at User:Phr's request, it appears to me that User:Neutral arbiter and User:Wombdpsw are sockpuppets of Rex/Merecat who were both permanently banned for evading prior arbcomm resolutions. A previous noticeboard post by User:Nescio resulted in the suggestion of running a RFCU and User:Phr also made a noticeboard post regarding this. It needs to be known if these new users are sockpuppets of Rex/Merecat so the remedies (particularly remedy 2) from Rex's 4th and last arbitration case can be enforced. There is also an RfAr and a Request for clarification up about this user. -- Mr. Tibbs 07:13, 1 June 2006 (UTC)

    Clerk assistance required: I've archived the whole discussion to the history (see here), and would like a clerk summary. Essjay (Talk • Connect) 18:52, 4 June 2006 (UTC)

     Clerk note: More discussion archived here. Summary (by Pureblade) is:

    The request is on
    both of whom have been permabanned, are accused of having the following socks:
    Claims Rex is innocent
    Also campaigns for Rex's unblock
    Zer0faults vehemently argues that he is not a sockpuppet, and claims that his IP is 74.64.40.102, which is located in a different state than 69.46.20.59.
    This was requested by Noosphere after the original request, due to: the user's first edit was just after Merecat's block, use of Misplaced Pages slang, and editing this article, supposedly one of Merecat's favorites.
    Prodego 20:45, 4 June 2006 (UTC)

     Confirmed as follows:

    • Rex071404, Merecat, Neutral_arbiter, Cal_Burrattino, and Wombdpsw are the same editor.
    • Zer0faults appears to be a distinct individual, and has used 74.64.40.102, along with several others. There is not an obvious connection with Rex/Merecat.
    • 69.46.20.59 is HIVELOCITY VENTURES CORP, a hosting company in Florida. Very little legitimate traffic comes from hosting companies, and their addresses often operate like open proxies.
    • 216.22.26.46 is Choice One Communications Inc., a business internet and phone service provider/hosting company. The address 216.22.26.46 appears to be part of the webhosting services.

    In short, either of the two IP addresses could be anyone, including Rex/Merecat. It is impossible to tell, since they may or may not be available for proxying activities, and are not likely to be scannable. Essjay (Talk • Connect) 22:15, 4 June 2006 (UTC)

    Clerk Attention Required

    Declined requests

    User:Prometheuspan

    This user made a huge editing mess at Rationales to impeach George W. Bush and has now taken to calling wikipedia "evil" on Jimbo's talk page. He was recently blocked for 3RR and I am pretty sure he is a sockpuppet vandal. He may be BigDaddy or perhaps he is User:Nescio. Likely he's a troll or banned user. 69.46.20.59 21:04, 1 June 2006 (UTC)

    I would suggest to delete this frivolous accusation that clearly is a response to the RFCU against suspected socks of a disruptive user.Holland Nomen Nescio 22:58, 3 June 2006 (UTC)
    Considering your Checkuser request hasn't been completed on this IP, I think you are over stepping the grounds for having anything removed. Its valid unless the user is proven to be a sockpuppet. --zero faults 00:39, 4 June 2006 (UTC)

    fish CheckUser is not for fishing Essjay (Talk • Connect) 18:07, 4 June 2006 (UTC)

    Not Clear - Nobs01 or TJive?

    An anonymous user 141.153.74.246 is editing in a pattern that suggests it may be the banned User:Nobs01, who is banned due to an Arbcom decision. I am not sure, and would like it checked. I believe User:Nobs01 has returned in the past under a variety of sockpuppets. User:TJive, who used to tag team edit with User:Nobs01, sent me an off-Wiki e-mail claiming to be U141.153.74.246. Then, a new user User:YINever appeared with the same editing list and editing pattern. If it is TJive or Nobs01 or just one, what is happening is sockpuppetry to mask POV revert warring and potential 3RR avoidance.--Cberlet 16:25, 30 May 2006 (UTC)

    First of all, it is a lie to state that I sent you an "off-Wiki e-mail" as I sent it through my verified address, else I would not have any access to you in the first place.
    Second, the (brief) contents of that e-mail, though they do not serve in my disfavor (else I would not have sent it), were written in the expectation that you would have the decency to keep the matter private. I sent it so as to dispel your peculiar notion that Nobs had returned (e.g. here and here for reference, though you have now deleted the latter). I, perhaps naively, expected the courtesy of the matter being closed. Rather you have exacerbated it on a flimsy pretext.
    You have provided absolutely no evidence that there is a tie between Nobs and the other accounts, nor any involved policy violations on the part of the latter, and so this report is a highly inappropriate abuse of CheckUser in order to push a content dispute into other realms which do not concern the articles in question. That you would describe edits of a user you disagree with as being "POV revert warring" proves nothing but that you are engaged in an argument over the very question of appropriate content and your accusation of "potential 3RR avoidance" is speculation based on absolutely nothing, certainly not my rather spotless record in that regard. --TJive 21:59, 30 May 2006 (UTC)

    Declined. Nobs hasn't edited in six months; it's well known we don't keep logs going back that far. Regarding TJive and YINever, absent an alleged policy violation there's no reason to investigate at this time. Mackensen (talk) 16:33, 4 June 2006 (UTC)

    I note for the record that a number of comments were deleted, leaving primarily an attack on me. See: . I do not understand why this is considered ethical.--Cberlet 20:52, 4 June 2006 (UTC)


    Completed requests

    Chakabuh / Newssourceusa / Qed-news

    Several user accounts and IP addresses have recently vandalized articles related to email spam fighters -- people and organizations that track down and stop spammers. Vandalized articles include The Spamhaus Project, Steve Linford, and SPEWS. User:Chakabuh has been trying to insert libellous claims into Brian J. Bruns and may be the same person.

    The user in question is probably affiliated with spammers, and may be abusing Misplaced Pages for other purposes (e.g. to promote a spam business). There may be other puppets I've missed above, too. --FOo 04:03, 2 June 2006 (UTC)

    Did some Googleling/whois/traceroutes/calls. 166.70.177.1 appears to be based out of Salt Lake City, Utah (it looks like a library if the rdns is to be believed). The comment in the edit 166.70.177.1 made to the page on me is very very close style/wording wise to what Barbara Schwarz posts on usenet. However, as far as I know, she has been banned from the SLC Public Library, so it may be a sockpuppet or similar.Brian 19:30, 2 June 2006 (UTC)

    These addresses vandalized the Spamhaus article and put ads for spamming servies on Bullet proof hosting, an article describing ISPs that host spammers. Possibly part of the same crew. --FOo 20:29, 3 June 2006 (UTC)

     Additional information needed What exactly am I supposed to be checking here? Whether the accounts listed are associated with the IPs? Whether they're coming from the same area? This request seems to involve several different issues, and leaves out the connections. Could someone put together a concise summary of exactly what has gone on here? Essjay (Talk • Connect) 17:59, 4 June 2006 (UTC)

    Thanks for your response. To answer your questions:
    What exactly am I supposed to be checking here? Are the accounts and IP addresses being used by the same people? In dealing with the vandalism and harassment that these accounts and addresses have been committing, are we dealing with one person, or several? Whether they're coming from the same area is also relevant, particularly given Brian Bruns' brief investigation above suggesting that one is from the Salt Lake City area and could be a known harasser.
    Exactly what has gone on here? I noticed on WP:AN/I that User:Chakabuh and User:Bruns were having a dispute over Chakabuh's creation of an article about Bruns, Brian J. Bruns, which contained false and malicious claims. Bruns wished the article to be deleted, or at least the libels removed from it.
    (Bruns is a noted spamfighter; that is, a system administrator who does volunteer work to help other sysadmins reduce email spam for their users. Spamfighters often become victims of harassment by spammers, who naturally resent their work; as well as by cranks such as Brad Jesness and the aforementioned Barbara Schwarz.)
    Around the same time, I had been dealing with vandalism on other articles related to spam and spamfighting tools, such as The Spamhaus Project and Steve Linford. (Linford is another spamfighter; Spamhaus is the international effort he founded.) The nature of the vandalism was similar in scope: it was to insert false and malicious claims about the person in question, and to direct users to off-Wiki sites containing more such claims and concocted or misrepresented "evidence" of them.
    It occurred to me that Bruns and I could be dealing with the same offender here: a spammer or crank engaged in a pattern of Misplaced Pages abuse for the purpose of spreading derogatory falsehoods about spamfighters. This is a tactic that specific individual spammers have used before in other forums, the goals being (a) to harass the spamfighters into giving up their efforts; or (b) to convince others to distrust the spamfighters so that their efforts will be futile.
    Misplaced Pages needs to resist being abused for this purpose, which clearly goes beyond simple vandalism into persistent and malicious harassment. (Some comparison could be drawn between this sort of harassment and that perpetrated by "Misplaced Pages Review" users to drive away or sow distrust against Misplaced Pages administrators.)
    All I'm looking for is some determination which of these accounts and addresses represent the same offender. --FOo 18:57, 4 June 2006 (UTC)


    information Note::

    • Qed-news is 72.224.170.144; Newssourceusa is 72.224.169.2. Both are RoadRunner IPs registered to main; the same user, obviously.
    • 84.115.71.45 has been used by SpamhausSucks. It's an Austrian IP.
    • 89.36.88.2 has a single edit, not used by any contributor. It is a Romanian IP.
    • 166.70.177.1 is a Salt Lake City IP, registered to XMission.com, a hosting company. It has been used by a number of different types of unsavory users; I've blocked it, as little good traffic comes from hosting companies. This IP has been used by Chakabuh.
    • 66.167.180.248 and 68.165.190.33 are registered to Covad Communications Co. in San Jose, California, a combination hosting company/DSL/T1 provider. Each has only a few edits, and no logged in editors; if they continue to be a problem, they can be blocked.
    • The Rest of Chakabuh's traffic has come from Electric Lightwave Inc, a hosting company in Vancouver.

    In short, it seems the only common thread here is the subject matter (spammers/spamming). Essjay (Talk • Connect) 21:22, 4 June 2006 (UTC)

    Raptor30 / 03Rotpar / Demiurge010

    IP address has been labled as the "lingerie vandal" by User:Bachrach44 (See Misplaced Pages:Administrators'_noticeboard#Admin_Canidate, and this edit). User:03Rotpar made quite a demonstration of insisting on posting his RfA nom where his RfA was his first edit. Further commentary and investigation concluded that User:03Rotpar and User:Raptor30 were socks of each other, and both have been blocked indefinitely. User:193.111.10.29 was admitted by User:03Rotpar to be his IP, and that IP was blocked indefinitely as an open proxy. This edit gives me suspicion that these accounts and the IP are used by User:Demiurge010. I would like to have that confirmed, if possible, to verify that the bans on Raptor30 and 03Rotpar are fully appropriate. I also have suspicion that User:Jesterjester may be related due to timing of placement of his RfA close to the timing of User:03Rotpar's and the user having only just begun editing on Misplaced Pages, just as User:03Rotpar had. --Durin 13:33, 30 May 2006 (UTC)

    information Note: Can't check against Raptor30, there are no edits, and the creation is too old (Feburary). 03Rotpar is 193.111.10.29. Demiurge010 can't be connected to either, as 03Rotpar was using an open proxy. Jesterjester doesn't appear related to the above, but is the same person as User:MyUsername:. Essjay (Talk • Connect) 20:04, 4 June 2006 (UTC)

    General Eisenhower or GeorgeMoney

    information Note: Long discussion removed to history. Essjay (Talk • Connect) 20:12, 4 June 2006 (UTC)

    Results:

    • General_Eisenhower and GeorgeMoney, as indicated before, are unrelated.
    • General_Eisenhower is the same as User:Mr. Shame, which he has already acknowledged.
    • Gangsta-Easter-Bunny and Rayven_the_Crook do not appear directly related to any of the rest, or to each other.
    • Old_Abe, My_Old_Kentucky_Home, Code_Napoleon, and Robgerts cannot be checked due to age.
    • OrtonFan2006 is editing from Australia.
    • 68.211.205.149, a BellSouth IP, has two edits, neither of which are by any logged in user.

    Now, I'm going to say this very clearly: Until someone can come up with serious, well supported allegations of serious policy violation (much more than "they sound alike"), I don't want to see any more requests related to General Eisenhower or GeorgeMoney. Essjay (Talk • Connect) 20:31, 4 June 2006 (UTC)

    Archdale

    Archdale has been permablocked for repeatedly recreating the nonsensical articles PeeWipes and Abusive Aussie Husband/Battered Southern Wife stereotype, and to make personal attacks on those who tried to reign in his nonsense, including, of course, me. Now Hunchkeh's only edits were to recreate the above articles and to make further attacks against me. I strongly suspect that the same individual is behind both accounts. 207.156.196.242 15:09, 30 May 2006 (UTC)

     Confirmed. Essjay (Talk • Connect) 19:51, 4 June 2006 (UTC)

    User:The Middle East Conflict Man

    A bunch of new suspected sock or meat puppets. The same edit style with inserting offensive images in the Socialism article. In eddit somments some of them said "no im not mid east conflict man" and "I'm not mid eats conflict man either!". Statements that both seems odd and hard to believe. // Liftarn 13:26, 31 May 2006 (UTC)

    User:Lights out!'s contribs suggest that TMECM has realised that edits to articles other than Socialism can go unnoticed.--Nema Fakei 12:16, 4 June 2006 (UTC)

     Inconclusive It actually appears to be an impersonator from the University of Auckland, New Zealand (TMECM is from Norway); I can find no evidence of either IP being an open proxy. TMECM's only known IP is still blocked (I blocked it for a month a week or so ago); the New Zealand IP can't be blocked because it is a shared IP. A complaint to the University of Auckland might be in order, however. Essjay (Talk • Connect) 19:43, 4 June 2006 (UTC)

    User:Kittyslasher

    Kittyslasher is currently blocked for vandalism/borderline trolling. Not only have they been talking to each other a lot, since 7 minutes after Kittyslasher's first edit, but Nintendude is the creator of Template:lowercase-Apple, a template that was deleted back in December. Seems inconspicuous, but Kittyslasher made the same template at Template:Iprefix, in May. Kittyslasher also already AfDed two things and commented in 4 others after just 10 days of being a user. Nintendude has been warned for mass-AfDing in violation of WP:POINT. They're also the only two users of {{MySpace2}}, a template that Kittyslasher created (and was deleted soon after). Kittyslasher added Category:Uncyclopedia into an article, which Nintendude created. They've also both screwed with redirects. Finally, they seem to be obsessed with feces. --Rory096 04:22, 31 May 2006 (UTC)

     Confirmed. Essjay (Talk • Connect) 19:48, 4 June 2006 (UTC)

    Pantherarosa

    User:Abdulrahman_Jaffer_Al_Zadjali has been indefinitely blocked as a sockpuppet; however, no admin was willing to make the call on who the puppet master was. User:Abdulrahman Jaffer Al Zadjali made two edits, one to his userpage and one to his talk page, and then began commenting on a WP:PAIN discussion on User:Melca, in which User:Pantherarosa had been invloved. Abdulrahman sided with Panthera in the debate. They have also both edited mainly the same articles, such as Reza Cyrus Pahlavi. As I said, the evidence is there but not overwhelming, and a CheckUser would help to alleviate doubt about who the master is and would perhaps present other sockpuppets being (ab)used. AmiDaniel (talk) 04:05, 1 June 2006 (UTC)

    information Note:: 212.72.21.53 is Abdulrahman_Jaffer_Al_Zadjali. Pantherarosa appears uninvolved. There is no obvious tie to any other user at this time, though that doesn't mean there isn't or hasn't been one. Essjay (Talk • Connect) 19:00, 4 June 2006 (UTC)

    I'm a little confused Essjay. Does the checkuser function not allow you to see if AJAZ's IP address(es) have been used by Pantherarosa? You said that it doesn't mean that there hasn't been a connection, but how does the CheckUser function not allow a conclusive result? (Feel free to use technical terms). Paul Cyr 20:06, 4 June 2006 (UTC)
    There are several reasons this could be, one is that the information checkuser uses only remains in the database for a limited amount of time. It is also possible that the internet service provider assigns IP addresses dynamically, so there would be no way to be certain. Checkuser is not a simple confirmed / denied function. Of course I do not posses checkuser, and do not know the exact reason. Essjay will be able to explain it better, if you really want to know. Prodego 20:13, 4 June 2006 (UTC)

    User:Mr. Tibbs

    Please check User:Añoranza and User:Mr. Tibbs. Both of these editors are agressive POV warriors at Iraq War and 2003 invasion of Iraq. Mr. Tibbs was recently blocked for 3RR and I am reasonably sure that this is the same editor splitting his edits between users to game the 3RR system. Also suspected with this is User:Nescio. 69.46.20.59 20:41, 1 June 2006 (UTC)

    information Note: Extensive discussion moved to history. Essjay (Talk • Connect) 18:09, 4 June 2006 (UTC)

    Red X Unrelated No connection whatsoever. Essjay (Talk • Connect) 18:25, 4 June 2006 (UTC)

    User:Rbdz29

    This user and IP addres keeps vandalising or adding independant research to the Fred Meyer and Fred G. Meyer page. Both this IP address and user insert the same misinformation on a constant basis. The IP address has already been blocked once. Hypernick1980 09:06, 1 June 2006 (UTC)

     Confirmed. Essjay (Talk • Connect) 18:26, 4 June 2006 (UTC)

    Lutherian

    Lutherian is currently blocked for trolling at Talk:Armenian Genocide. All of a sudden 83.77.132.16 pops up, with the exact same sarcastic tone of voice as Lutherian to continue a "discussion" with another user. Both Lutherian and the anon almost always end their sentences with either an exclamation point or "LOL". (same with 81.62.128.110 & 83.79.98.206) I have no doubts that L is evading his block. —Khoikhoi 23:36, 1 June 2006 (UTC)

     Confirmed. Essjay (Talk • Connect) 18:02, 4 June 2006 (UTC)

    RichardMalter

    Possible attempts to circumvent a block , as well as a gentlemen's agreement that all editors in the discussion page agreed to (refraining from any non-consensus changes to article), including this user. Thanks for checking. Crum375 22:20, 1 June 2006 (UTC)

    Looking back, also possible use of IP 203.220.167.134 (talk · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs · CheckUser (log)) for anon 'unexplained edits' subsequently reverted by Will Beback. Crum375 22:53, 1 June 2006 (UTC)

    Why did you put this checkuser reqeuest at the end of the list? New requests are supposed to be at the top of the list. Kevin_b_er 00:16, 3 June 2006 (UTC)
    My mistake - thanks for catching it and helping. Hopefully we can still get this checkuser info in a timely manner nonetheless. Thanks, Crum375 11:12, 3 June 2006 (UTC)

     Confirmed: 203.220.167.134 is RichardMalter, likely that Morpheuz is as well. Essjay (Talk • Connect) 18:06, 4 June 2006 (UTC)

    User:Bookmain / User:HansAntel / User:AliceDeGrey / User:HeadleyDown

    I am a mentor on the Neuro-linguistic programming. The above 4 seem to be working together to try to get around the restrictions put upon them by the NLP arbcom decision. Essentially, one of the non affected people is reverting and then the affected people are editing. Any help would be appreciated. Thanks. --Woohookitty 09:04, 2 June 2006 (UTC)

     Confirmed as follows:

    • All are editing from IPs registered to schools or residental providers in Hong Kong.
    • HeadleyDown and Bookmain are the same user.
    • HansAntel may be HeadleyDown, or may be another individual recruited to assist. The IPs involved are residential, so could be an off-campus apartment or a friend/family home.
    • AliceDeGrey is editing from a different school than HeadlyDown, but may be the same user, utilizing another school's library or computer labs. It could also be a meatpuppet.

    The above will hopefully be helpful. If there are additional questions, please advise. Essjay (Talk • Connect) 17:31, 4 June 2006 (UTC)

    Astint1

    All users repeatedly remove an AfD notice from Pour over. If CheckUser confirms that these are the same user, I intend to report to WP:AIV Lbbzman 03:46, 4 June 2006 (UTC)

     Confirmed. Astint1 is 24.238.212.90; doesn't appear to be connected to 70.2.227.93. Essjay (Talk • Connect) 16:08, 4 June 2006 (UTC)

    Polaron & Node ue

    Same pattern, same user. Severe block. Recognized here http://en.wikipedia.org/search/?title=Talk%3AMoldovan_language&diff=50926117&oldid=50499656 --221.150.196.170 09:50, 4 June 2006 (UTC)

    Red X Unrelated 24.251.68.75 is Node ue, which is fairly clear from the history of his userpage, but there is no apparent connection with Polaron. Essjay (Talk • Connect) 16:27, 4 June 2006 (UTC)

    Hganesan

    Simishag (talk · contribs) asked me to see if they were one and the same, but obviously, as I don't have checkuser, I can't.

    Reasoning for Simishag to believe Bucs. is a puppet of Hganesan is here Will (@) T 01:06, 4 June 2006 (UTC)

    Red X Unrelated I can't find any evidence linking the two; from all appearances, Hganesan is coming from California, and Buscrsafe from the UK. Essjay (Talk • Connect) 16:38, 4 June 2006 (UTC)

    -Inanna-

    It seems that the banned Inanna just likes to edit! By looking at Dandanakan's contributions, one would find that:

    • Both like to change numbers to favor the Turks. (i.e. make it seem that Kurds only account for 5% of Turkey's population when the real number is 15-20%.)
    • Here again, this was one of the reasons Inanna got into edit wars all the time, because she changed numbers without citing her sources.
    • And now look at the edit history of the Yıldız Kenter article.

    I'm sure that this user is Inanna. —Khoikhoi 15:24, 3 June 2006 (UTC)

     Confirmed. Essjay (Talk • Connect) 16:41, 4 June 2006 (UTC)

    Ruzgar

    Ruzgar was blocked for a week today for continuing to add an inflammatory image to an article and personal attacks. Only a few hours after he was blocked, Erdemsenol, who hasn't edited in 4 months re-uploads the image and adds it to the article. Here's some interesting facts: both users seem to have an interest in (1.) the removal of the Muhammed cartoons picture (2.) anything Kurdish on Turkey-related articles, and (3.) pushing Turkish nationalistic views on Misplaced Pages. I have no doubts that these users are the same person, and that Ruzgar is evading his block. 80.145.74.84 also just re-added the image, and also talks just like Ruzgar. —Khoikhoi 05:53, 3 June 2006 (UTC)

     Confirmed. Essjay (Talk • Connect) 16:45, 4 June 2006 (UTC)

    Ericnorcross, Katherinejohnson, Almost Famous, Living large

    User:Almost Famous emailed threats to User:Econrad very much like previous threats from User:Ericnorcross; what's more, he used the email address of confirmed sockpuppet User:Sevenlinefeatures. User:Katherinejohnson has claimed in the past to be the roommate of Eric Norcross, and User:Living large has edits on subjects and described him or herself in such a way that it's not likely to be a coincidence.  RasputinAXP  c 02:37, 3 June 2006 (UTC)

    Additions:

    Each vandalized my user and talk page, including posting personal information. Not that it much matters because I don't hide it, but in the end it only adds fuel to the stalking.  RasputinAXP  c 15:02, 3 June 2006 (UTC)

     Confirmed: Finding A Solution = Living large = Finding A Solution = Nicole_Lynn = Katherinejohnson = SyossetMan (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) = Eric_The_Red (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) = LittleStinkNess (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) = J._Whales (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) Fred Bauder 03:01, 4 June 2006 (UTC)

    A_Funny_Thing_Happened (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) another one. Fred Bauder 12:34, 4 June 2006 (UTC)

    Bright888, Schola64, Polaris36, Foreastwest

    Brand new users trailing each other and taking turns reverting similar edits mostly having to do with the relationship between Japan and Korea. ···日本穣 23:33, 2 June 2006 (UTC)

    Adding a new one who just reverted my revert after I warned Schola64 about 3RR. ···日本穣 23:40, 2 June 2006 (UTC)

    adding more new accounts making similar reverts in related articles around the same time. Appleby 00:31, 3 June 2006 (UTC)

     Confirmed. Essjay (Talk • Connect) 17:07, 4 June 2006 (UTC)

    Chadbryant / Chud Manzier

    Chadbryant is quite well known for reverting Rec.sport.pro-wrestling to his preferred version (an example here), but he does so infrequently without breaking WP:3RR. Chud Manzier is another user who has come along and reverted the same version as Chadbryant (an example here, and has also done some things that I've seen Chadbryant do, such as flag other users as sockpuppets of Dick Witham. Other users have flagged Chud Manzier as a sockpuppet of Chadbryant, while Chadbryant has reverted to remove the notice.

    I indefinitely blocked Chud Manzier because he was obviously doing the same things as Chadbryant. Chud Manzier sent me email vehemently denying that he is Chadbryant while chastising me for not having any hard evidence of his sockpuppetry, and insisted that I unblock him ASAP. I unblocked Chud Manzier due to lack of hard evidence, but Chud Manzier hasn't done anything since I unblocked him. I am a little concerned that Chud Manzier is a "sleeper sockpuppet" that Chadbryant is keeping around to make it seem like he has more consensus than not. I have stayed in the background in the hopes that things will resolve themselves, but I don't want to wait any longer for fear that the IP addresses will be lost from the databases. --Deathphoenix ʕ 19:34, 2 June 2006 (UTC)

     Inconclusive Essjay (Talk • Connect) 17:13, 4 June 2006 (UTC)


    User:Bugman94

    This seems to be the 5th puppet now, constantly abuses {{helpme}} and generally annoying. -- 9cds 15:15, 4 June 2006 (UTC)

     Confirmed. Without a doubt, all of the following are the same user:

    Blocking the IP for a month. Essjay (Talk • Connect) 15:55, 4 June 2006 (UTC)

    User:Iloveminun

    Full reasoning behind argument - User:HighwayCello/Minun

    I have suspected that there may be a connection between "Po132", "Minun132" and "Iloveminun", primarily because of their similar names. What later aroused my suspicion further was the discussion between the three users, the somewhat suspicious breaks between editting and user contributions and their joint interest in Pokémon, all three of them joining the Pokémon WikiProject... for full reasoning, see here. Highway 21:00, 28 May 2006 (UTC)

     Confirmed as follows:

    Lou franklin

    Hernando's editing pattern closely mirrors that of Lou, consisting mostly of edits to Societal attitudes towards homosexuality and Talk:Societal attitudes towards homosexuality, which take a similar POV position to Lou. He also opposed KimvdLinde's RfA, following one of Lou's other habits - opposing the RfAs of people involved in the article and/or his Arbcom case.

    On the face of it, Hernando is a merely a meatpuppet of Lou. He has a very different speaking style, the account was created just under two months before he started to edit war in earnest, and on the face of it his edits mirror Lou's because Lou asked him to take up his position on the talk page. However, there is a crack in that image - Hernando's first four edits after his first to his userpage were minor copyediting edits, making no mistakes, despite the fact that his talk page edits imply that he has a poor grasp of English. He hasn't made any since he took up the edit war on SATH. As for the creation date, although the Arbcom case was not closed at the time it was fairly clear which way it was going. And the easiest way to 'disguise your handwriting' is to reduce it to the level of a child.

    At least two editors other than myself have openly speculated as to whether Hernando is a sock, and I think this should be cleared up. Sam Blanning 19:09, 28 May 2006 (UTC)

    Hernando Cortez's editing times also correspond closely with blocks against Lou franklin. Phr (talk) 19:22, 28 May 2006 (UTC)

     Likely. Hernando_Cortez is editing from a number of public locations (libraries, copy shops, etc.) in the same city as Lou_franklin; looks like a textbook case of attempting to avoid detection. Essjay (Talk • Connect) 01:59, 29 May 2006 (UTC)


    Greier

    Greier, who has some weird obsession of adding {{historomania}} to the Vlachs article, is currently blocked for 3RR because of that. Today, Vlachul, with only 2 edits, comes out of nowhere and adds the tepmlate back, the exact same behavior as Greier. Looks like a clear case of block evasion to me. —Khoikhoi 18:01, 28 May 2006 (UTC)

    Also note here and here he comes to the page and reverts back to Greier's version. Or here where he edits G's userpage. —Khoikhoi 18:04, 28 May 2006 (UTC)
    Also perhaps the banned User:Bonaparte might be involved. He too has an interest in pushing the Romanian POV above all others and follows Greier from page to page. —Khoikhoi 18:10, 28 May 2006 (UTC)
    For proof of the above statement, check the anon (open proxy) IPs which reverted to Greiers version at Vlachs of Serbia - they were sockpuppets of Bonaparte (he was permabanned for using open proxies). --Telex 18:41, 28 May 2006 (UTC)

     Likely. Will have to check with Jayjg about a connection to Bonaparte. Essjay (Talk • Connect) 01:04, 29 May 2006 (UTC)

    DreamGuy

    Recent suspected multiple subversion of 3RR at Beelzebub and Spring Heeled Jack, where DreamGuy and Victrix have been involved in edit wars on numerous occasions with numerous editors.

    Example 1: After Dreamguy reverted Beelzebub for the third time (revert 1, revert 2, revert 3), Victrix appeared out of nowhere to post a message of support on his talk page, then reverted the article to Dreamguy's preferred version, using a similar longwinded edit summary to those Dreamguy typically uses, phrased in almost exactly the same hostile manner.

    Example 2: After Victrix reverted Spring Heeled Jack for the third time (revert 1, revert 2, revert 3), DreamGuy appeared out of nowhere and reverted the article to Victrix' preferred version, again using the same longwinded edit summary to those Victrix typically uses, phrased in almost exactly the same hostile manner.

    A comparison of their edit histories reveals that Dreamguy and Victrix edit the same group of articles (particularly those related to the Victorian era, Jack the Ripper, crime and mythology), use the same lengthy edit summaries, the same terminology (ie "crap", "fucked up", "spam" etc when describing anything they disagree with), the same technique of accusing anyone who disagrees with them as "harrassing" them, and the same predisposition to conducting edit wars over content.

    They are obviously the same person using multiple identities with the deliberate intention of circumventing the 3RR and attempting to influence the outcome of talk page discussions. Centauri 02:01, 1 June 2006 (UTC)

    CommentBoth have edited at similar times and periods. Both have been absent for prolonged periods at the same time as well, e.g. both DreamGuy and Victrix have been away from the early hours of June 1st, both also didn't edit from 13th onwards of may and both returned on 23 May 2006. Both use the same edit summaries and both step in to revert articles in order to avoid 3RR when nessessary. Both radily breach WP:PA. DreamGuy has a history of being blocked for breaching 3RR. Englishrose 10:36, 4 June 2006 (UTC)

     Likely. Essjay (Talk • Connect) 19:07, 4 June 2006 (UTC)

    User:Ed_Poor

    Serious edit war at Intelligent design between User:Ed Poor and the remaining editors, resulting in full protection of the page, 3RR violation report filed against Ed Poor and RFC filed against Ed Poor. Just after this all had started, User:LenW reinserted the last statement of Ed Poor, which was not a simple revert an other edit had taklen place to correct grammar errors . Consequently, the suggestion of sockpuppetry has been brougt forward, and it might need to be established beyond doubt. Of course, this could be a coincidence and if this is insufficient for a checkuser, I understand. -- Kim van der Linde 23:15, 31 May 2006 (UTC)

    Red X Unrelated I generally do not run checkusers on highly established users without strong evidence, but as I see potential for this to escalate, I went ahead and ran it. The two do not appear to be related at all (separate countries). Essjay (Talk • Connect) 19:11, 4 June 2006 (UTC)

    Category:Suspected Misplaced Pages sockpuppets of Krabs502

    I'd like to see conclusively if these group of users are in fact the same. Also please take a look at User:216.83.121.194. Listed on WP:LTA, but still conducted many vandalistic edits. These include inserting incorrect details into articles, which make it very difficult to pick out any real edits he makes, ridiculous computer game articles based on Medical documentaries (see the history), and all together fake articles. This guy is making vandalistic edits on a daily basis, and yet nothing has yet been done about it. Confirmation is the first step. - Hahnchen 15:40, 31 May 2006 (UTC)

    (Comment only) This category doesn't exist, and CheckUser is not for fishing. Stifle (talk) 20:48, 3 June 2006 (UTC)
    (Fixup) On June 2, 2006, the category was moved and deleted. It used to be this. Fixed to location in delete log. Kevin_b_er 08:58, 4 June 2006 (UTC)

     Confirmed They are related, and 216.83.121.194 is the underlying IP. I've blocked it for six months. Essjay (Talk • Connect) 19:19, 4 June 2006 (UTC)

    User:Jo Mic

    The puppeteer of Jo_Mic (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) is unknown, but this user's first edits were setting up an AfD for the NPOV policy, so I highly doubt they are a new user. New users tend not to have policy disputes, and for the minority that do, AfD is usually not something they know about. MSJapan 15:20, 31 May 2006 (UTC)

     Inconclusive It is not possible to determine a puppeteer from the technical information available. Essjay (Talk • Connect) 19:22, 4 June 2006 (UTC)

    Categories: