Misplaced Pages

:Requests for checkuser/Case/COFS: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Requests for checkuser | Case Browse history interactively← Previous editContent deleted Content addedVisualWikitext
Revision as of 10:53, 8 May 2007 editAnynobody (talk | contribs)4,309 edits →Request official confirmation: Thank you← Previous edit Latest revision as of 15:40, 4 April 2022 edit undoMalnadachBot (talk | contribs)11,637,095 editsm Fixed Lint errors. (Task 12)Tag: AWB 
(27 intermediate revisions by 13 users not shown)
Line 1: Line 1:
<!-- BEGIN ARCHIVE TEMPLATE --><noinclude>
=== COFS ===
<!--
If you are adding a new request for this user please add it above this notice at the top of the page. Only the latest request will appear on the checkuser page. Please don't create a separate page with a different name.
-->
{| class="messagebox"
| style="text-align: center" | If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add </br><span style="font-size: 125%">'''<nowiki>{{</nowiki>{{FULLPAGENAME}}<nowiki>}}</nowiki>'''</span></br> to the checkuser page . Previous requests (shown below), and this box, will be automatically hidden on ] (but will still appear here).
|}
<div style="background: #f5fffa; border: 1px solid #AAAAAA; margin: 2em 0 0 0; padding: 0 10px 0 10px;">
<div style="text-align:center;">''The following discussion is preserved as an archive of a ]. <span style="color:red;">'''Please do not modify it'''</span>.''</div>
<!-- END ARCHIVE TEMPLATE -->
=== ] ===
{{rfcu box|case=COFS|filed=06:28, 6 December 2008 (UTC)}}
* {{checkuser|Shutterbug}} formerly (])
* {{checkuser|Misou}}
* {{checkuser|Shrampes}}
* {{checkuser|Proximodiz}}
* {{checkuser|TaborG}}
* {{checkuser|Derflipper}}
* '''Code letter: B, F'''

See prior evidence/history: ] and ] and ]. Directly-applicable rulings from the Arbitration Committee: ], ], ].

Checkuser at en.wikinews: ], revealing that ] uses open proxies in addition to . ] has been blocked at en.wikinews also for using open proxies to evade blocks: .

The other above users have all become active lately after long periods of inactivity, and edit in tandem with interests of Shutterbug/Misou , , , . I believe that Shutterbug/Misou is now using more accounts to avoid scrutiny, as the organization is its edits already bring from its main Shutterbug account and Misou account. Possibly all are editing from the same open proxy(s) so this may be a complex case.''']''' (]) 06:28, 6 December 2008 (UTC)

:Your statement about Wikinews is another of your lies, Cirt. I have not been blocked there for sockpuppetry but for disruptive behavior (which is just as bad, I know, as was giving in to your provocations there). Please correct this, and I ask you for the last time to stop the continuous insult of calling me "an organization". I bleed when you cut me, organizations don't. ] (]) 06:03, 9 December 2008 (UTC)
::Just FYI, if it's relevant, this user appears to be from . ''']]''' 06:13, 9 December 2008 (UTC)
Giant fishing expedition. Note that behavior such as this on the part of Cirt is an open topic at <s>] and</s> ]. --] (]) 13:59, 9 December 2008 (UTC)

:{{Confirmed}} that ] and ] have been editing from ns1.scientology.org
:{{Confirmed}} that ], ], and ] have been editing from what appears to be an open proxy in Asia
:{{Confirmed}} that ] has been editing exclusively from now-blocked proxies (yourfreedom.net) as well as the free dialup service sdfree.net, which is indistinguishable from an open proxy
:{{Unrelated}} Misou's IP usage is unrelated to the others.
:Note that this is very similar to the pattern detected in the prior COFS ArbCom case..
:I'd suggest this is more suitable for arbitration enforcement than anything else. --]<sup><small>]</small></sup> 02:03, 12 December 2008 (UTC)
*{{TakeNote}} - I have combined this technical evidence with previous evidence from this checkuser case page, and from the prior COFS Arbitration Case into a table on the talk page. Please see ''']'''. Thank you, ''']''' (]) 04:57, 12 December 2008 (UTC)
:{{clerknote}} Not acting, I feel this should go to the more knowledgeable folks at ]. -- ] <sup>]</sup> 09:58, 16 December 2008 (UTC)

*{{TakeNote}} - II have blocked several proxies used by these users. <span style="font-family:Verdana,sans-serif"> — ] • ] • </span> 00:25, 23 December 2008 (UTC)

=== ] ===
{{rfcu box|case=COFS|filed=21:05, 25 April 2007 (UTC)}} {{rfcu box|case=COFS|filed=21:05, 25 April 2007 (UTC)}}
* {{checkuser|COFS}} * {{checkuser|COFS}}
**Renamed to {{checkuser|Shutterbug}}
<!-- Add suspected sock puppets and IP addresses below this line. The above line will list an account matching the pagename. --> <!-- Add suspected sock puppets and IP addresses below this line. The above line will list an account matching the pagename. -->
* {{checkuser|CSI LA}} * {{checkuser|CSI LA}}
Line 8: Line 51:
* {{checkuser|Makoshack}} * {{checkuser|Makoshack}}


* '''Code letter:''' F * '''Code letter: F'''


In my experience ] first appeared after ] was blocked around April 9. After ] returned, ] contributions declined and then stopped around April 14th. ] has been blocked again, and ] has returned. In my experience ] first appeared after ] was blocked around April 9. After ] returned, ] contributions declined and then stopped around April 14th. ] has been blocked again, and ] has returned.
Line 39: Line 82:
==== Request official confirmation ==== ==== Request official confirmation ====


#] (<span class="plainlinks">] • ] • • ] • {{rfcu|1={{ucfirst:{{{User|Misou}}}}}|2=&#32;• rfcu|cond=n}}</span>) #] (<span class="plainlinks">] • ] • • ] • {{rfcu|1={{ucfirst:{{{User|Misou}}}}}|2=&#32;• rfcu|cond=n}}</span>)
#] (<span class="plainlinks">] • ] • • ] • {{rfcu|1={{ucfirst:{{{User|Grrrilla}}}}}|2=&#32;• rfcu|cond=n}}</span>) #] (<span class="plainlinks">] • ] • • ] • {{rfcu|1={{ucfirst:{{{User|Grrrilla}}}}}|2=&#32;• rfcu|cond=n}}</span>)
To make a record easily found in future archives about this issue. ] 21:34, 4 May 2007 (UTC) To make a record easily found in future archives about this issue. ] 21:34, 4 May 2007 (UTC)


Line 55: Line 98:
* {{checkuser|Makoshack}} added to the list, for more, see the talk page. ] 09:10, 6 May 2007 (UTC). * {{checkuser|Makoshack}} added to the list, for more, see the talk page. ] 09:10, 6 May 2007 (UTC).
:Makoshack {{confirmed}}. --]<sup><small>]</small></sup> 15:29, 6 May 2007 (UTC) :Makoshack {{confirmed}}. --]<sup><small>]</small></sup> 15:29, 6 May 2007 (UTC)

]<sup><small>]</small></sup> you mentioned different IPs being used, I realize you can't release the actual numbers involved, but could you say which usernames share the same IP? ] 19:05, 8 May 2007 (UTC)


;Additional request confirmation(s) ;Additional request confirmation(s)
#{{checkuser|Bravehartbear}} #{{checkuser|Bravehartbear}}
] 22:01, 7 May 2007 (UTC). ] 22:01, 7 May 2007 (UTC).

#{{checkuser|4.247.128.139}}
#{{checkuser|4.247.128.205}}
#{{checkuser|66.96.216.181}} -- These 3 have been used by confirmed sock, {{checkuser|Makoshack}}. Request confirmation. ] 04:44, 9 May 2007 (UTC).
#{{checkuser|205.227.165.244}} - ] using an anon-ip to attempt to evade a block. ] 10:52, 10 May 2007 (UTC).
*The 205. address is easy enough -- that's . --]<sup><small>]</small></sup> 16:25, 10 May 2007 (UTC)
**Is that a '''confirmation''' ? What of the other 3? Thank you for your time. ] 16:35, 10 May 2007 (UTC).
***What of the other 3? You already said "they've been used by confirmed sock"; what else do you need? We generally don't connect editors to specific IPs here. --]<sup><small>]</small></sup> 16:47, 10 May 2007 (UTC)
****Oh, okay. In that case, I suppose mention here with your comments in response is fine. I had not noticed that info, that is most interesting as well... ] 16:51, 10 May 2007 (UTC).
*****FYI: ] and ] both come from the same location in Florida, and use the same internet provider as . ] 16:57, 10 May 2007 (UTC).


;Possible sock of ]: ;Possible sock of ]:
Line 75: Line 130:
::I did not think this one was likely to be a sock/meatpuppet... ] 02:32, 8 May 2007 (UTC). ::I did not think this one was likely to be a sock/meatpuppet... ] 02:32, 8 May 2007 (UTC).
:::Thanks for looking anyway, I do appreciate the effort. ] 10:53, 8 May 2007 (UTC) :::Thanks for looking anyway, I do appreciate the effort. ] 10:53, 8 May 2007 (UTC)
::For the record, the concept certainly ran through my mind, as well. I don't think it was fishing as much as evidence that seemed to suggest something that just happened to be false. ] <span style="color: #999;">// ] // ] //</span> 19:50, 8 May 2007 (UTC)

<div style="text-align:center;">''The above discussion is preserved as an archive of the Request for checkuser. <span style="color:red;">'''Please do not modify it.'''</span><br />Subsequent requests related to this user should be made ''above'', in a new section.''</div></div>
</br>
</noinclude>

Latest revision as of 15:40, 4 April 2022

If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Misplaced Pages:Requests for checkuser/Case/COFS}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.

COFS 2

request links: main • edit • links • history • watch • talk
Filed: 06:28, 6 December 2008 (UTC)
  • Code letter: B, F

See prior evidence/history: Misplaced Pages:Requests for checkuser/Case/COFS#COFS and Misplaced Pages:Requests_for_arbitration/COFS/Evidence and Misplaced Pages:Requests_for_arbitration/COFS. Directly-applicable rulings from the Arbitration Committee: Responsibility of organizations, Multiple editors with a single voice, Use of Church of Scientology-owned IPs.

Checkuser at en.wikinews: n:Wikinews:Requests_for_CheckUser/Archive_3, revealing that User:Misou uses open proxies in addition to ws.churchofscientology.org. User:Shutterbug has been blocked at en.wikinews also for using open proxies to evade blocks: Sockpuppetry: Block evasion via proxies.

The other above users have all become active lately after long periods of inactivity, and edit in tandem with interests of Shutterbug/Misou , , , . I believe that Shutterbug/Misou is now using more accounts to avoid scrutiny, as the organization is aware of the scrutiny its edits already bring from its main Shutterbug account and Misou account. Possibly all are editing from the same open proxy(s) so this may be a complex case.Cirt (talk) 06:28, 6 December 2008 (UTC)

Your statement about Wikinews is another of your lies, Cirt. I have not been blocked there for sockpuppetry but for disruptive behavior (which is just as bad, I know, as was giving in to your provocations there). Please correct this, and I ask you for the last time to stop the continuous insult of calling me "an organization". I bleed when you cut me, organizations don't. Shutterbug (talk) 06:03, 9 December 2008 (UTC)
Just FYI, if it's relevant, this user appears to be editing from the corporate network of the Church of Scientology International. krimpet✽ 06:13, 9 December 2008 (UTC)

Giant fishing expedition. Note that behavior such as this on the part of Cirt is an open topic at Misplaced Pages:Administrators' noticeboard/Arbitration enforcement and Misplaced Pages:Requests for arbitration/Scientology. --Justallofthem (talk) 13:59, 9 December 2008 (UTC)

 Confirmed that User:Proximodiz and User:Shutterbug have been editing from ns1.scientology.org
 Confirmed that User:TaborG, User:Shutterbug, and User:Derflipper have been editing from what appears to be an open proxy in Asia
 Confirmed that User:Shrampes has been editing exclusively from now-blocked proxies (yourfreedom.net) as well as the free dialup service sdfree.net, which is indistinguishable from an open proxy
Red X Unrelated Misou's IP usage is unrelated to the others.
Note that this is very similar to the pattern detected in the prior COFS ArbCom case..
I'd suggest this is more suitable for arbitration enforcement than anything else. --jpgordon 02:03, 12 December 2008 (UTC)
 Clerk note: Not acting, I feel this should go to the more knowledgeable folks at WP:AE. -- lucasbfr 09:58, 16 December 2008 (UTC)

COFS

request links: main • edit • links • history • watch • talk
Filed: 21:05, 25 April 2007 (UTC)
  • Code letter: F

In my experience CSI LA first appeared after COFS was blocked around April 9. After COFS returned, CSI LA's contributions declined and then stopped around April 14th. COFS has been blocked again, and CSI LA has returned.

Their styles are very similar, see above diffs. It also seems suspicious that this statement appears on COFS user page:

I am a Scientologist from Los Angeles area. I had been editing earlier in Misplaced Pages and sorry, I totally forgot my username and password. So, here is my new one. Feel free to ask questions.

I realize this could be an innocent mistake, but taken in with the information above it makes me wonder if CSI LA is the forgotten account since it was created three days prior to COFS. Anynobody 21:05, 25 April 2007 (UTC)
Update
COFS block expired, and CSI LA hasn't edited since about an hour before expiration.
  • COFS first edit back from block: Revision as of 20:40, 25 April 2007
  • CSI LA last edit Revision as of 19:58, 25 April 2007

Anynobody 07:42, 26 April 2007 (UTC)

 Confirmed --jpgordon 16:13, 29 April 2007 (UTC)
Thank you jpgordon, I appreciate your time. Anynobody 21:51, 29 April 2007 (UTC)
Yes, thank you jpgordon, for dealing with this disruptive problem. Smee 04:48, 2 May 2007 (UTC).
Another sock identified

Fred Bauder recently said that another editor not previously mentioned above is also in this IP range. (Misplaced Pages:Administrators' noticeboard/Incidents#COFS indef blocked) How difficult would it be to find out who else edits in the same ranges? I realize it might not be possible (from a privacy angle) to mention the usernames involved if discovered but I'd be happy knowing general info like: There are X editors in this range. (X being the number of course).

The more I read about banned users in the archives the more I think this may be the latest incarnation of some old troublemakers. Anynobody 11:07, 3 May 2007 (UTC)

Request official confirmation

  1. Misou (talk • contribs • page moves • block user • block log)
  2. Grrrilla (talk • contribs • page moves • block user • block log)

To make a record easily found in future archives about this issue. Anynobody 21:34, 4 May 2007 (UTC)

Note this diff: discussing how the IP works. Anynobody 21:46, 4 May 2007 (UTC)

 Confirmed. --jpgordon 03:05, 5 May 2007 (UTC)
And what's this "how the IP works" stuff? There were multiple IPs involved. Not ranges, either. --jpgordon 04:45, 5 May 2007 (UTC)
That would be referring to one of the IPs that was autoblocked, I think. Other users say they found themselves unable to edit when I blocked COFS and CSI LA. ··coelacan 04:53, 5 May 2007 (UTC)
Since I haven't seen the actual IP address(es) I feel ackward describing the situation. That was my best term to describe info I don't have access to myself, I'm sorry if that was wrong. Anynobody 05:03, 5 May 2007 (UTC)
I do want to say thank you again for your time and patience, jpgordon I really appreciate it. Anynobody 00:16, 6 May 2007 (UTC)
Makoshack  Confirmed. --jpgordon 15:29, 6 May 2007 (UTC)

jpgordon you mentioned different IPs being used, I realize you can't release the actual numbers involved, but could you say which usernames share the same IP? Anynobody 19:05, 8 May 2007 (UTC)

Additional request confirmation(s)
  1. Bravehartbear (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)

Smee 22:01, 7 May 2007 (UTC).

  1. 4.247.128.139 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  2. 4.247.128.205 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki)
  3. 66.96.216.181 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) -- These 3 have been used by confirmed sock, Makoshack (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki). Request confirmation. Smee 04:44, 9 May 2007 (UTC).
  4. 205.227.165.244 (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) - User:COFS using an anon-ip to attempt to evade a block. Smee 10:52, 10 May 2007 (UTC).
Possible sock of Misou

Lsi john (talk · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) This looks like it could be an unsuccessful attempt at a self conversation to reduce suspicion of the account being another sock. Anynobody 00:24, 8 May 2007 (UTC)

Red X Unrelated, and let's knock off the fishing. --jpgordon 02:31, 8 May 2007 (UTC)
I did not think this one was likely to be a sock/meatpuppet... Smee 02:32, 8 May 2007 (UTC).
Thanks for looking anyway, I do appreciate the effort. Anynobody 10:53, 8 May 2007 (UTC)
For the record, the concept certainly ran through my mind, as well. I don't think it was fishing as much as evidence that seemed to suggest something that just happened to be false. EVula // talk // ☯ // 19:50, 8 May 2007 (UTC)
The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.