Wikipedia:Requests for checkuser

From Wikipedia, the free encyclopedia

Shortcut:
WP:RCU
WP:RFCU
pending

Does your request belong here?

This is the place to request sockpuppet checks or other investigations requiring CheckUser privilege. Checkuser is a last resort for difficult cases. Use other methods first.

Code Situation Solution
— Obvious, disruptive sock puppet Block. No checkuser is necessary.
— Disruptive "throwaway" account used only for a few edits Block. No checkuser is necessary.
— Question about a possible sock puppet related to an open arbitration case Request checkuser on the arbitration case pages.
A Request to identify and block the IP addresses responsible for blatant vandalism and attack accounts List here in the IP check section.
B Evasion of bans or other remedies issued by the arbitration committee List here along with a link to the closed case.
C Ongoing, serious pattern vandalism List here with diffs.
— Vote fraud on ongoing vote Wait until vote closes before listing
— Vote fraud where the possible sockpuppet votes do not affect the outcome of the vote List on Wikipedia:Administrators' noticeboard/Incidents
D Vote fraud for a closed vote where the possible sockpuppet votes affect the outcome List here with a link to the closed vote.
E 3RR violation using socks List here with links to four diffs showing the 3RR violation
F Evasion of community-based bans or blocks List here with a diff of the discussion that resulted in the ban or block.
— Other disruption of articles List on Wikipedia:Administrators' noticeboard/Incidents
— Open proxy where you already know the IP address List on Wikipedia:WikiProject on open proxies
— You want access to the checkuser tool yourself You may contact the arbitration committee, but be advised that such access is rarely granted

Procedure

  • List your request using the Input box below. Specify the summary code letter that applies to your request.
  • Indicate the usernames or IP addresses you suspect. Use {{checkuser}} for accounts, and {{checkip}} for IPs. Please do not use those templates in the section header, as that makes it difficult to read the account names.
  • Include a brief summary of the reason for the investigation with links to the arbitration case(s) or other discussion. Lengthy discussions will be moved to WP:AN/I by the clerks.
  • You must clearly lay out the evidence for sockpuppetry.
  • You must explain how your request fits the policy above.
  • Sign your request.
  • There are clerks for RFCU who handle maintenance tasks. Clerks do not make decisions on the merits or outcome of a check.
    • Due to misunderstanding of these instructions and/or mis-use of this process, requests not in strict adherence to these instructions will be removed by the clerks. Requests deemed to be inappropriate for this page are liable to be moved to an appropriate venue where one exists. Only clerks should perform these actions.

Outcome

  • Responses will be brief in order to comply with Wikipedia privacy policy.
  • Due to technical factors, results are not always clear.
  • Users with checkuser privilege crosscheck each others' work frequently. Please do not make requests for crosschecking for a particular case.
  • After 3 days, closed requests are archived at Wikipedia:Requests for checkuser/Case.
  • Check back regularly to see the outcome of your request. In most cases, any block or other action based on the outcome will not be taken by the checkuser-people or the clerks. Instead, you will have to do this yourself.
Indicator
Confirmed
Likely
Possible
Inconclusive
Unlikely
Unrelated
Additional information needed
Note:
Declined
Unnecessary
Checkuser is not for fishing.
Rejected
IP blocked
Clerk assistance required:
Clerk note:

Contents

If this page is displaying outdated contents even after you refresh the page in your browser, please Purge the cache.

To request a check:
Cases are created on subpages of this page. To do so, insert the name of the sockpuppeteer (the main account, not the sockpuppet!) in the box below (do not remove the text in the box, add to the end only) and click "Request a checkuser." You will be taken to a page where you can fill out the request.


[edit] Outstanding requests

[edit] ShanM

  • Code letter: F

User:ShanM was blocked under the name Shan mcarthur@spamcop.net (talk • contribs • block user • block log • checkuser). He has since been unblocked and allowed to change his name, but it is suspected that during the block he used the sockpuppet account User:WebCmsXpert to evade the block and make "independent" comments supportive of the "other" user. -- Satori Son 22:58, 15 December 2006 (UTC)

[edit] Darrendeng

  • Code letter: F

Slow, sneaky spam. These accounts and IPs work in concert with each other adding brass-related spam from the set of links listed here Wikipedia talk:WikiProject Spam#Conex India. One user adds a link and another covers it up with minor changes. See the history of Bronze for prime example. Also trying to create linkfarms with sock user pages.

Users:

IPs involved: (both ranges from India)

Now, new users pop up whose only contribs are to create a userpage with a few links from this set:

Femto 21:15, 15 December 2006 (UTC)

[edit] Osaboramirez

  • Code letter: F

Osaboramirez's edit patterns are very similar to those of sock puppets of Copperchair, and the account creation time links up well. Please compare this latest account with the most recent sock puppets and IP addresses of Copperchair. I can provide more evidence if necessary, but it's extremely time consuming and somewhat stressful to do all of the comparisons, and I get the impression that I've provided way more than needed in past Copperchair checkusers. TomTheHand 20:34, 15 December 2006 (UTC)


[edit] Englishpound

  • Code letter: F

It's pretty obvious that these two are the same person. The same exact POV edits, to the same articles, at the same time of day, two days apart. The similarities in comment/writing style and in his usernames/userpages speak for themselves.

However, his immediate familiarity with (tendentious interpretations of) Wikipedia guidelines & policies, e.g. his claim that country articles written in English shouldn't have foreign words in their "native" titles, leads me to suspect that these may both be socks of another user (perhaps someone who is banned, perhaps not). I've tried to stay out of the various edit wars which have plagued Ireland/Northern Ireland/England topics, so I don't know who the usual suspects are. I'm hoping that someone who's seen his style before will recognize him. Dppowell 18:21, 15 December 2006 (UTC)

Edited to add:

This may be the main account of the puppeteer. This user made the same edits as the alleged socks to Republic of Ireland on December 4: [1] and to Isle of Man on December 5: [2]

...and made a related edit to Wales today, one minute after Aperfectmanisaenglishman stopped editing. Dppowell 18:21, 15 December 2006 (UTC)

...More info: These socks may have been created to make a point in relation to an ongoing naming dispute on Wales, as suggested by this Talk exchange: [3] Dppowell 19:57, 15 December 2006 (UTC)

[edit] Rugby 666

  • Code letter: F

Rugby 666 was blocked for one (now two) months for abusive sockpuppeteering about three days ago (see Wikipedia:Requests for checkuser/Case/Ehinger222). The sudden spurt of rugby league edits since this block by this editor, as well as the relationship between Rugby 666 and the user on the user talk page of Dannys-777, make me suspicious. However, this would have been pure suspicion, but this edit[4] sounded alarm bells, given what Rugby 666/Ehinger222 et al.'s disputes surround. My opinion is that it will be great if we can nip this one in the bud, if it's confirmed - if it is, that will be yet another violation of evading a block using a sockpuppet for this giant sockfarm. Cheers, Daniel.Bryant [ T · C ] 13:55, 15 December 2006 (UTC)

[edit] Lou franklin

Code letter: F

Lou franklin was banned after persistent violation of 3RR, including an Arbcom case, and finally making legal threats after being caught using a sockpuppet (Hernando Cortez). Yuuta appeared yesterday and began edit warring over a {{POV}} tag on Societal attitudes towards homosexuality, exactly the behavior that Lou indulged in. Like Lou franklin, Yuuta has not edited any article apart from SHAC. --Sam Blanning(talk) 13:23, 15 December 2006 (UTC)


[edit] Cute 1 4 u, take nine

Code: F. Cute 1 4 u banned by community consensus, very many sockpuppets created.

Account created very soon after the block of the prior sockpuppet, Jibbs fan. Editing many of the same articles ([Jibbs], The Wendy Williams Experience, Chris Brown (singer), Bow Wow, etc.) Similar short temper and grammar problems (see here).

If this user is shown to be a sockpuppet, I intend to file a complaint with the user's ISP or to work with a checkuser clerk to file such a complaint, if at all possible. The user clearly has no intention to stop abusing Wikipedia. --Yamla 20:55, 14 December 2006 (UTC)


[edit] Declined requests

[edit] CC80

  • Code letter: - C,E

All users vandalize Goa Inquisition:

Theres a serious pattern of vandalism occuring on that page, and myself and other users suspect sock/meatpuppetry.Bakaman 05:10, 14 December 2006 (UTC)

Declined. I don't see anything that rises to the level of needing checkuser; this looks like a plain old editing dispute. Essjay (Talk) 01:48, 15 December 2006 (UTC)

Would you consider reviewing that decline? I've come to this page for other reasons and recognized CC80 as a suspected sockpuppet of AWilliamson, who was community banned today as the Joan of Arc vandal. At WP:AN#Ethics_of_banning_socks I've queried about banning that particular account and other strongly suspected socks as listed at User:Highest-Authority-on-Joan-of-Arc-Related-Scholarship/AWilliamson sock puppets. While the other suspected socks on this RFCU request don't raise the same red flags for me, this vandal has been very creative and evaded policy enforcement for over two years. I think blanking vandalism and edit warrring by that account raise this to at least a C class request. Recent examples follow of a pattern I first noticed in September (diffs for the September blanks are at the WP:AN post).[12][13][14][15][16][17] DurovaCharge! 05:20, 16 December 2006 (UTC)

[edit] Completed requests

[edit] Top Gun

  • Code letter: A

User: Top Gun has recently taken aggressive actions against other editors, shortly after two anonymous Ip addresses were used to attack other editors that had been involved in disputes with him, the Ip addresses would engage in referring to the other editors in derogatory manners further more the IP editors also edited the same articles Top Gun did and used an Identical style in writing[18]. The varying IP address used by the anonymous vandals makes it impossible to suppress them without confirming whether Top Gun is the source of the assailants. Much circumstantial evidence points to him but confirmation is requested. Marshalbannana 22:27, 13 December 2006 (UTC)

Confirmed. Essjay (Talk) 01:42, 15 December 2006 (UTC)

[edit] Cplot 3rd Request

  • Code letter: ACF

User:SavoirFaireIsEverywhere was created on December 2nd, and made their first edit to their own user page. [19] This matches a pattern seen with other Cplot socks. The user also made an edit [20] on Talk:Helmut Jahn about something relating to Chicago where Cplot apparently is from. Then, on December 8th, the user came on [21] the September 11, 2001 attacks, with an edit summary "see length ongoing discussion on talk page and throughout Wikipedia administrative pages" and made some more edits that are characteristic of Cplot socks. (e.g. [22] [23] [24]) I'm fairly sure this is another Cplot sock, but since I'm involved with those pages, I would like to be more sure of it before doing a block (or better yet, someone uninvolved do the block). --Aude (talk) 16:22, 13 December 2006 (UTC)

Added another cplot sock per notice by Mackensen on ANI. Syrthiss 18:31, 14 December 2006 (UTC)
And another. Gonna be a busy day. Tony Fox (arf!) 18:56, 14 December 2006 (UTC)

Confirmed. Also:

I've changed some of Mackensen's previous anon-only IP blocks to full blocks, since he's been registering accounts on other IPs and using them on blocked ones. Dmcdevit·t 22:36, 14 December 2006 (UTC)

Thank you. --Aude (talk) 22:43, 14 December 2006 (UTC)


[edit] Some more Chadbryant

  • Code letter: none; see below

Yes, yes, we don't do self-requested checks, we rarely do checks not directly related to a code letter etc. etc. - I know the routine. However, this user was blocked as a result of being what I would consider the most blatantly obvious sockpuppet of Chadbryant I have ever seen - see [25] [26]. User is was "trolling" their userpage with {{unblock}} requesting a checkuser.

Now, and this is also unusual, I know, what I would like if this is accepted is a response where the benefit of the doubt lies with the blocking admin, rather than the accused. Given the diffs we have, it is extremely suggestive; however, if the checkuser results come back with no possible links (eg. no proxies, in different countries etc.), then the admins may have to grant a benefit of the doubt. If they're in the same area, state even, or proxies are somehow involved, the admins will simply discard the technical evidence as being not 100% either way, and go on the diffs. I hope you get my drift :) Daniel.Bryant [ T · C ] 11:52, 14 December 2006 (UTC)

I am the blocking administrator. It seemed clear to me but the user subsequently promised he was not a sockpuppet. On the basis that we need to double-check administrators when they admit they may have made a mistake, I'd like a checkuser performed here as well. Please. --Yamla 20:46, 14 December 2006 (UTC)

Confirmed, clear match. Dmcdevit·t 22:11, 14 December 2006 (UTC)


[edit] Requests for IP check

  • Vandal and attack accounts may be listed here for the purpose identifying and blocking the underlying IP address or open proxy. Requests to confirm sockpuppets of known users should be listed in the sockpuppet section above.
  • If you already know the IP address of the suspected open proxy, list it at Wikipedia:Open Proxies instead.
  • Use === Subsections ===, do not create subpages.
  • List user names using the {{checkuser|username}} template. Add new reports to the top of the section.
  • Requests may be acted on or declined according to the discretion of the checkuser admins. Responses will be noted here.
  • Answered requests will be moved to Wikipedia:Requests for checkuser/IP check for 7 days, after which they will be deleted. No separate archive (other than the page history) will be maintained.

[edit] More "John * Robinson" Accounts

This is an extension of this archived request. Just when I thought the drama was over for the time being, the above accounts popped up, which means either (1) Michael/Mike Garcia/Johnny the Vandal has found a new, unblocked IP, or (2) someone has decided to imitate this vandal/troll. Scobell302 17:05, 15 December 2006 (UTC)

[edit] Willy on Wheels

He's back... MER-C 05:41, 15 December 2006 (UTC)

[edit] K42

  • Code letter: A

User was blocked for being a "self-professed vandal account". After this, an IP - 202.9.48.50 - popped up and remonstrated against all those who had caused the demise of the main account (see contribs).

I would have let it slide as a normal troll, but this comment[27] by the IP, who I am 99.9% sure is the same person as the indeffed account, was too good to pass up. Any chance you could check if he/she has any sleepers that he/she may use to carry out this threat, and if so, illuminate them to us. If there are sleepers, or other vandal accounts that haven't yet been linked to this user/IP, there may also be cause for an account creation block on the underlying IP. Cheers, Daniel.Bryant [ T · C ] 01:51, 15 December 2006 (UTC)

[edit] St. Mark's School Vandal

  • Code letter: A

Appears to be based out of St. Mark's School of Texas. Vandalism of that article as well as other schools Episcopal School of Dallas and The Hockaday School. Also Owen Wilson and Sai Gunturi frequently, as well as others which vary. Since the St. Marks article has been SProtected, appears the vandal has been registering new accounts ahead of time. Probably has others ready, as most of the above have been blocked. Fan-1967 21:22, 14 December 2006 (UTC)

[edit] The Template Vandal

Fresh from the front line. MER-C 07:16, 14 December 2006 (UTC)

Clerk note: Although it may be trolling, [28] is of interest. Daniel.Bryant [ T · C ] 07:44, 14 December 2006 (UTC)
  • Blocked. Clerks, please leave this here for now. Mackensen (talk) 13:20, 14 December 2006 (UTC)

More:

MER-C 07:59, 15 December 2006 (UTC)

[edit] Ated

User:Ated appears to be a sockpuppet of the prolific sockpuppet creator User:Snle. Making similar edits at Chinese people. Badagnani 19:13, 14 December 2006 (UTC)

Retrieved from "http://en.wikipedia.org../../../r/e/q/Wikipedia%7ERequests_for_checkuser_3b77.html"