Misplaced Pages:Requests for checkuser

This is an old revision of this page, as edited by Jayjg (talk | contribs) at 23:29, 24 April 2006 (→NorbertArthur, Andrei George, Bombonel, & two anons: update). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Revision as of 23:29, 24 April 2006 by Jayjg (talk | contribs) (→NorbertArthur, Andrei George, Bombonel, & two anons: update)(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)

v t e Noticeboards
Misplaced Pages's centralized discussion, request, and help venues. For a listing of ongoing discussions and current requests, see the dashboard. For a related set of forums which do not function as noticeboards see formal review processes.
General	Administrators Main Incidents Bots Bureaucrats Centralized discussion Closure requests Education Interface admins Main Page errors Open proxies VRT Oversight User permissions
Articles and content	Biographies of living persons Copyrights Questions on media Problems Dispute resolution External links Fringe theories Neutral point of view Original research Pending changes Reliable sources Resource requests Scalable vector graphics Spam Blacklist Whitelist Style Titleblacklist Translation
Page handling	History merges Mergers Splits Moves Protection Importation XfD Articles Redirects Categories Templates Files Miscellany Undeletion
User conduct	Conflict of interest Contributor copyright Edit warring and 3RR Sanctions Personal restrictions General sanctions Contentious topics Sockpuppets Usernames (Requests for comment) Vandalism
Other	Arbitration Committee noticeboard Requests Enforcement Edit filters Requested False positives Questions Help desk Teahouse Reference desk New articles Requests for comment Village pump Policy Technical Proposals Idea lab WMF Miscellaneous WikiProject proposals Discussions for discussion
Category:Misplaced Pages noticeboards

Read this first

This is the place to request sockpuppet checks and other investigations requiring access to the Checkuser privilege. Possible alternatives are listed below.

Requests likely to be accepted

Code	Situation	Solution, requirements
A	Blatant attack or vandalism accounts, need IP block	Submit new section at #Requests for IP check, below
B	Evading blocks, bans and remedies issued by arbitration committee	Submit case subpage, including link to closed arb case
C	Ongoing, serious pattern vandalism with many incidents	Submit case subpage, including diffs
D	Vote fraud, closed vote, fraud affects outcome	Submit case subpage, including link to closed vote
E	3RR violation using sockpuppets	Submit case subpage, including diffs of violation
F	Evading blocks, bans and remedies issued by community	Submit case subpage, including link to evidence of remedy
G	Does not fit above, but you believe check needed	Submit case subpage, briefly summarize and justify

Requests likely to be rejected

Situation	Solution
Obvious, disruptive sock puppet	Block, no checkuser needed
Disruptive "throwaway" account used only for a few edits	Block, no checkuser needed
Checkuser on yourself to "prove your innocence"	Such requests are rarely accepted, please do not ask
Related to ongoing arbitration case	Request checkuser on the arbitration case pages
Vote fraud, ongoing vote	Wait until vote closes before listing, or post at Misplaced Pages:Suspected sock puppets
Vote fraud, closed vote, did not affect outcome	List at Misplaced Pages:Administrators' noticeboard/Incidents or Misplaced Pages:Suspected sock puppets
Other disruption of articles	List at Misplaced Pages:Administrators' noticeboard/Incidents or Misplaced Pages:Suspected sock puppets
Open proxy, IP address already known	List at Misplaced Pages:WikiProject Open proxies
You want access to the checkuser tool yourself	Contact the Arbitration Committee, but such access is granted rarely

When submitting a request

If submitting a new case subpage, use the inputbox below; if adding to an existing case subpage, see WP:RFCU/P#Repeat requests.
Choose the code letter that best fits your request. Provide evidence such as diff links as required or requested. Note that some code letters inherently require specific evidence.
When listing suspected accounts or IP addresses, use the {{checkuser}} or {{checkip}} templates. Please do not use this template in a section header.
You may add your request to the top of the #Outstanding requests section, by adding {{Misplaced Pages:Requests for checkuser/Case/CASENAMEHERE}}. If you do not, clerks should check for pages in Category:Checkuser requests to be listed and will do this for you.
Sign your request.

After submitting a request

Purge cache

Checkuser clerks assist with maintenance of the page but do not directly respond to checkuser requests. If you need help, post at Misplaced Pages talk:Requests for checkuser.
Responses will be brief in order to comply with Misplaced Pages's privacy policy. Likewise, the privacy policy often prevents us from running a check which has the effect of revealing IP addresses.
Due to technical factors, results are not always clear.
Check back regularly to see the outcome of your request.
Checkusers and clerks do not generally issue blocks. You may need to do this yourself or submit a request at Misplaced Pages:Administrators' noticeboard/Incidents.
Case subpages are typically archived several days after a checkuser responds.
More procedures at Misplaced Pages:Requests for checkuser/Procedures.

Privacy violation?

If you feel that a checkuser has led to a violation of the Wikimedia Foundation privacy policy regarding yourself, please refer the case to the Ombudsman commission.

this header: view • edit

File a Checkuser Request

This page is currently inactive and is retained for historical reference.
Either the page is no longer relevant or consensus on its purpose has become unclear. To revive discussion, seek broader input via a forum such as the village pump.

Cases are created on subpages of Misplaced Pages:Requests for checkuser/Case.
If you require help or advice, ask at Misplaced Pages talk:Requests for checkuser.

If a case subpage already exists, edit the existing page instead, either adding to the currently open section (if the case is not yet archived) or adding a new section to the top (if the case has been archived). When editing an existing case, be sure to list it here or add Category:Checkuser requests to be listed to the subpage.

If creating a new case subpage, add the name of the main account (or "puppetmaster", not the sockpuppet!) in the box below. Leave out the "User:" prefix. Do not remove the text in the box, add the name to the end only (that is, append the name to the existing text). Then press "Request a checkuser" and you will be taken to a page where you can fill out the request.

Example: if you want to request a checkuser on User:John Doe, enter the text:
Misplaced Pages:Requests for checkuser/Case/John Doe

<inputbox> type=create editintro=Misplaced Pages:Requests for checkuser/Inputbox/Header preload=Misplaced Pages:Requests for checkuser/Inputbox/Sample default=Misplaced Pages:Requests for checkuser/Case/ buttonlabel=Request a checkuser bgcolor=#F8FCFF width=50 </inputbox>

Indicators and templates (v · e)
These indicators are used by Checkusers, SPI clerks and other patrolling users, to allow easier at-a-glance reading of their notes, actions and comments.
Case decisions:
IP blocked {{IPblock}}	Tagged {{Stagged}}
Blocked but awaiting tags {{Sblock}}	Not possible {{Impossible}}
Blocked and tagged {{Blockedandtagged}}	Blocked without tags {{Blockedwithouttags}}
No tags {{No tags}}	Blocked and tagged. Closing. {{Blockedtaggedclosing}}
Information:
Additional information needed {{MoreInfo}}	Deferred {{Deferred}}
Note: {{TakeNote}}	In progress {{Inprogress}}
Clerk actions:
Clerk assistance requested: {{Clerk Request}}	Clerk note: {{Clerk-Note}}
Delisted {{Delisted}}	Relisted {{Relisted}}
Clerk declined {{Decline}}	Clerk endorsed {{Endorse}}
Self-endorsed by clerk for checkuser attention {{Selfendorse}}	CheckUser requested {{CURequest}}
Specific to CheckUser:
Confirmed {{Confirmed}}	Unrelated {{Unrelated}}
Confirmed with respect to the named user(s). No comment with respect to IP address(es). {{Confirmed-nc}}
Technically indistinguishable {{Technically indistinguishable}}
Likely {{Likely}}	Unlikely {{Unlikely}}
Possible {{Possible}}	Inconclusive {{Inconclusive}}
Declined {{Declined}}	Unnecessary {{Unnecessary}}
Stale (too old) {{StaleIP}}	No comment {{Nocomment}}
CheckUser is not a crystal ball {{Crystalball}}	CheckUser is not for fishing {{Fishing}}
CheckUser is not magic pixie dust {{Pixiedust}}	The CheckUser Magic 8-Ball says: {{8ball}}
Endorsed by a checkuser {{Cu-endorsed}}	Check declined by a checkuser {{Cudecline}}
Possilikely (a mix between possible and likely) {{possilikely}}

Outstanding requests

UCRGrad

UCRGrad (talk · contribs)
UnblockingTau (talk · contribs) - active
909er (talk · contribs) - possibly inactive
HisBundleAblation (talk · contribs) - probably inactive
Insert-Belltower (talk · contribs) - as UCRGrad's sole supporter on several issues, this user was accused earlier by someone else; I somehow doubt it, but if it happens to come up through investigating UCRGrad, it makes a difference

UCRGrad seems to be using socks for POV pushing, personal attacks on talk pages, and edit wars on University of California, Riverside. A few days ago I tried bringing it up on RFI, and Petros471 said I had enough grounds for requesting a checkuser. I wasn't sure, but since then there have been multiple personal attacks and accusations of bias and sockpuppetry on me and others coming from these users, in addition to a few more edit wars and heated talk page discussion. I anticipate at least an RfC or something happening before the problems with that article are over (if ever), but a checkuser would probably help clear things up. I have compiled evidence of the sockpuppetry here.

To be fair, these are the editors that UCRGrad (or his suspected socks) have accused of being sockpuppets:

Tifego (talk · contribs)
Pimpclinton (talk · contribs)
TheRegicider (talk · contribs)
Calwatch (talk · contribs) - implied only
szyslak (talk · contribs) - implied only

–Tifego_{03:47, 24 April 2006 (UTC)}

Thousandsons and Bonafide.hustla

Thousandsons (talk · contribs) is indefinitely blocked for personal attacks. Bonafide.hustla (talk · contribs), who is formerly Freestyle.king (talk · contribs) (approved name change), has apparently copied Thousandson's user page to his own, and at the same time requested that Thousandson's user talk page be unprotected. If they are the same user, then Bonafide.hustla is using a sockpuppet to evade the indefinite block on Thousandsons. A CheckUser is requested. --Nlu (talk) 01:45, 24 April 2006 (UTC)

NorbertArthur, Andrei George, Bombonel, & two anons

I have reason to believe the following are the same person, or at least two of them are. It seems that this person is using these different accounts to bypass the 3RR on a number of pages, most notably the Romanians aritcle. Most of these users/accounts have been extremely disruptive lately, and have gotten into large-scale edit wars with a number of users. —Khoikhoi 22:13, 23 April 2006 (UTC)

Comment. Being familiar with the background of the editing history at Romanians and other related articles, there is a discernable pattern (for some users at least) which might indicate some sockpuppetry. However, I'm quite convinced that User:NorbertArthur is a bona fide user, distinct from the other accounts- based on my interactions with him these past few months- and don't think that his account needs investigating. Some of the others, however, such as Andrei, Bombonel (and also Romania (talk · contribs), Iasi (talk · contribs), Romanian (talk · contribs)) have exhibited suspicious behaviour, and the possibility remains that they are in some way associated with Bonaparte (talk · contribs · count), who was indefinitely banned for "malicious sockpuppetry and running a botnet" in January. --cjllw | TALK 00:26, 24 April 2006 (UTC)

Confirmed that User:Andrei George, User:Bombonel, User:Iasi, User:Romania and User:Romanian are all Bonaparte sockpuppets. As are User:StabiloBoss, User:THK, User:Puffydoll, User:Moldo, User:Moldoveanu, User:Deutsche, and User:Chisinau. User:NorbertArthur is unrelated to these. Jayjg 21:48, 24 April 2006 (UTC)

I'm slightly amused that while StabiloBoss wasn't a sockpuppet of De Mortuuis below, he was still someone's sockpuppet. --Syrthiss 21:56, 24 April 2006 (UTC)

Wow, I don't believe this! Thank you! —Khoikhoi 23:25, 24 April 2006 (UTC)

ZoeCroydon

Kerry ( work IP address for DB) (talk · contribs)
Joanne ( work IP address for DB) (talk · contribs)
Peter ( work IP address for DB) (talk · contribs)
Uni student (talk · contribs)
Johntheclivefan (talk · contribs)
Sockpuppets of ZoeCroydon (talk · contribs)

All these editors are new accounts that oppose a neutrality and cleanup edit to the article Clive Bull (edit | talk | history | protect | delete | links | watch | logs | views) on grounds such as 'poor wording' and 'flow'. The article is deadlocked due to 3RR constraints and the accounts refuse to work with other editors to correct the problems they claim to have. There is a strong possibility that these accounts are indefinitely blocked vandal, hoaxer and puppetmaster User:ZoeCroydon, who has a considerable sock farm, largely proven by previous CheckUser, which was also used a month ago to create illusions of a false consensus on this very same issue (as well as on Iain Lee).

Apart from their shared but otherwise unique opinions, they also share a similar style of writing, knowledge of obscure Misplaced Pages "rules" such as WP:AGF and WP:RPA despite being focused on one article , and the first three accounts share the same interesting typo in their bizarre names (the unnecessary space after the opening bracket), suggesting rapid account creation using copy-and-paste. --Sam Blanning 08:52, 14 April 2006 (UTC)

(Alternatively, the space after opening a bracket may be a habit.) --Sam Blanning 09:00, 14 April 2006 (UTC)

I've started investigating this but results will take some time to complete. The Uninvited Co., Inc. 03:57, 16 April 2006 (UTC)

Thanks. --Sam Blanning 12:56, 16 April 2006 (UTC)

Note: the users with IP for DB are working in the same organisation. People who work in the same organisation are not sockpuppets.

Note: Unistudent and is a university student and some of his roomates use his computer.

This does not make them sock puppets, and they have a right to contribute. 147.114.226.175 12:54, 18 April 2006 (UTC)

The vandal has used this defence in the past. See this edit from a confirmed sock. --Sam Blanning 13:01, 18 April 2006 (UTC)

Sam Banning has an agenda to change the Clive Bull article. I ask to produce examples of the vandalism he says there is? 147.114.226.175 13:40, 18 April 2006 (UTC)

Continually reverting an updated version of the Clive Bull to a dated one with no valid reason is vandalism. Minglex 08:53, 19 April 2006 (UTC)

Declined requests

Pegasus1138

Pegasus1138 (talk · contribs)
Netscott (talk · contribs)

Both users are consistently online at the same time, have similar edits, and use each other to avoid 3rr. See recent edits of Muhammad cartoons. ScottRR 04:30, 24 April 2006 (UTC)

Declined. I'm not running a checkuser on a long time contributor (Netscott) without a lot more evidence than "They are online at the same time." Essjay 05:09, 24 April 2006 (UTC)

Muslim_sunni, Muslima_sunnia, and others

I would like to invite you to read Complete background in a nutshell which can be found here. Complex Vandalism and delibrate Revert War on this Misplaced Pages-NPOV Compliant version (written by a NEUTRAL, non-Muslim and non-Al-Ahbash party Tearlach), to replace it with a partially and promotionally written version was started precisely on April 07, 2006 by the above users. These user have also been using Misplaced Pages to insert hidden links for link-framing to drive more traffic to their group's web-sites. Consequently, I request that an investigation should be conducted to track all the SockPuppets. Thanking you in anticipation. Sincerely, McKhan

Declined. I don't see a case for checkuser; "the article is not NPOV" is not grounds for a checkuser. Essjay 02:55, 24 April 2006 (UTC)

Khoikhoi and ManiF

Khoikhoi (talk · contribs)
ManiF (talk · contribs)

] I request a CheckUser on this users. I have resons to belive that they are the same persons. Arthur 23 April 2006

Declined. Mackensen (talk) 23:07, 23 April 2006 (UTC)

Khoikhoi and Chaldean

Khoikhoi (talk · contribs)
Chaldean (talk · contribs)

I request a CheckUser on this users. I have resons to belive that they are the same persons. --Andrei George 12:53, 24 April 2006 (UTC)

Declined. Thanks for putting this in the right place. Mackensen (talk) 13:05, 24 April 2006 (UTC)

What means declined? The other person has reverted exactly the same edits of Khoikhoi. It's too strange to be real.. --Andrei George 13:07, 24 April 2006 (UTC)

62.251.114.0 (talk · contribs) and Hyrule (talk · contribs)

Myself and Hyrule are currently in a dispute over links on a few Zelda pages. We are discussing it on talk pages however 62.251.114.0 just came in and made changes to the articles in dispute, and I am worried that it might be Hyrule as the writing style and view are similar (at least to me, though I admit to not being the best judge of the differences and similarities between writing styles). — Ian Moody 22:45, 23 April 2006 (UTC)

Declined. Mackensen (talk) 23:07, 23 April 2006 (UTC)
- Umm any chance of a reason? — Ian Moody 23:27, 23 April 2006 (UTC)
  - Read the criteria above. —Khoikhoi 23:31, 23 April 2006 (UTC)
    - 2 or 7? — Ian Moody 23:34, 23 April 2006 (UTC)
      - No idea, I'm a non-checker. :( —Khoikhoi 23:36, 23 April 2006 (UTC)

Munckin

Munckin (talk · contribs) Indef blocked by Curps, edits display the telltale sign (backslashes before every apostrophe) of a broken open proxy, which should also be indef blocked per WP:NOP. —Ilmari Karonen (talk) 21:06, 23 April 2006 (UTC)

Declined. Already dealt with below. Mackensen (talk) 21:09, 23 April 2006 (UTC)
Oops. Sorry. I'll go get some sleep now. —Ilmari Karonen (talk) 21:15, 23 April 2006 (UTC)

Kroche14 and ip adress 208.96.78.122 (Pubdownunder as well)

Kroche14 (talk · contribs) 208.96.78.122 (talk · contribs) Pubdownunder (talk · contribs)

Both of the first two listed have virtually identical edit histories, the IP address often being used to blank or remove information from pages, specificly articles created by Kroche14 that have been tagged for deletion or to remove copyright violation tags from pages created by Kroche14 after he has been warned not to do such. User Pubdownunder has only two edits, both to my talk page, to create comments that were later resigned by by user Kroche14. Even if ip 208.96.78.122 is not Kroche14, then ip 208.96.78.122 is a repeat vandal, as it has removed copy vio tags from Judith Woodsworth and Rand Dyck (both articles were created and almost solely edited by Kroche14. Tomb Ride 17:22, 20 April 2006 (UTC)

Declined. There doesn't seem to be any doubt that they're the same user. Absent a serious violation we're not going to out someone's IP address. Mackensen (talk) 20:47, 23 April 2006 (UTC)

Vigilant

Vigilant (talk · contribs) possible sock of
Friendly Neighbour (talk · contribs)
Why you so hawny? (talk · contribs)
Sue me Jeff (talk · contribs)

Accounts fall within an IP address range controlled by Sean Crandall of megapath.net. Address posted for these accounts appears in the edit summaries of all these accounts, 64.139.4.129 (talk · contribs). This IP Address is also associated with several MediaWiki breakins and DOS attacks on InterWiki servers. Account appears to be a sockpuppet used for vote fraud and perpetual 3RR reversions of various accounts. All of the accounts associated with this address also appear to be used for this purpose. No constructive edits for these accounts, a large number of perpetual 3RR and talk page trolling and disruption. Why you so hawny? (talk · contribs) and Sue me Jeff (talk · contribs) blocked by user Guanaco (talk · contribs). Accounts appear to exist solely for vote fraud and disruption. Several Afd comment pages with votes appearing from multiple accounts User:Vigilant and Friendly Neighbour (talk · contribs) and possibly others. Cannot locate a single article produced by these address ranges or accounts contributed by these accounts.

* Include the reason for the investigation with links to the arbitration case(s) or other discussion.

* You must lay out clearly the evidence for sockpuppetry.

* You must explain how your request fits the policy above.

Can anyone spot which elements of this complaint are missing? Anyone? Anyone? Bueller? Bueller? Vigilant 07:35, 18 April 2006 (UTC)

They seem to exist solely for disruption and vote fraud. TempusFugit 06:13, 17 April 2006 (UTC) Log Excerpts from MediaWiki Interwiki site linked to Misplaced Pages:

ACCESS_LOG

Buffer Oveflow Attacks of PHP Server by this address

ip-64-139-4-129.sjc.megapath.net - - "GET /index.php?title=Special:Recentchanges&amp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bfeed=rss& amp%3Bamp%3Bfeed=rss&amp%3Bfeed=rss&feed=rss HTTP/1.1" 200 37443 "-" "Mozilla/4.0 (compatible; Google Desktop)" ip-64-139-4-129.sjc.megapath.net - - "GET /index.php?title=Special:Recentchanges&amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bamp %3Bfeed=rss&amp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bfeed=rss&amp%3Bfeed=rss&feed=rss HTTP/1.1" 200 37686 "-" "Mozilla/4.0 (compatible; Google Desktop)" ip-64-139-4-129.sjc.megapath.net - - "GET /index.php?title=Special:Recentchanges&amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp %3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp %3Bfeed=rss&amp%3Bfeed=rss&feed=rss HTTP/1.1" 200 37959 "-" "Mozilla/4.0 (compatible; Google Desktop)" ip-64-139-4-129.sjc.megapath.net - - "GET /index.php?title=Special:Recentchanges&amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp %3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bamp %3Bfeed=rss&amp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bfeed=rss&amp%3Bfeed=rss&feed=rss HTTP/1.1" 200 38262 "-" "Mozilla/4.0 (compatible; Google Desktop)" ip-64-139-4-129.sjc.megapath.net - - "GET /index.php?title=Special:Recentchanges&amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp %3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp %3Bamp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bamp%3Bfeed=rss&amp%3Bamp%3Bamp%3Bfeed=rss&amp %3Bamp%3Bfeed=rss&amp%3Bfeed=rss&feed=rss HTTP/1.1" 200 38595 "-" "Mozilla/4.0 (compatible; Google Desktop)"

ERROR_LOG

Attempts to locate magic numbers and override .htaccess settings by this IP address.

client denied by server configuration: /wikidump/.ht