Wikipedia:Requests for checkuser/Case/Erkusukes

[edit] Erkusukes 3

• Erkusukes (talk • contribs • logs • block user • block log • checkuser)
• Verjakette (talk • contribs • logs • block user • block log • checkuser)
• Yerkatagear (talk • contribs • logs • block user • block log • checkuser)
• Ironback (talk • contribs • logs • block user • block log • checkuser)
• Pitael (talk • contribs • logs • block user • block log • checkuser)

• Code letter: F.
• Supporting evidence: Pitael (talk · contribs) appears to be a sock of the same banned user. While created about a month ago, he resumed the same edits wars on Caucasian Albania and Tzitzernavank Monastery, 2 favorite articles of this banned user. It is also interesting that the account of Pitael was created the same day when the last sock account Ironback was banned. Also, if sockery is confirmed, could you please check if there are any more sleeper accounts in the same range as the banned user? Grandmaster (talk) 04:55, 12 May 2008 (UTC)

Confirmed (no other socks detected). Dmcdevit·t 08:45, 13 May 2008 (UTC)

blocked John Vandenberg ^(chat) 09:47, 13 May 2008 (UTC)

[edit] Erkusukes 2

• Erkusukes (talk • contribs • logs • block user • block log • checkuser)
• Verjakette (talk • contribs • logs • block user • block log • checkuser)
• Yerkatagear (talk • contribs • logs • block user • block log • checkuser)
• Merjanov (talk • contribs • logs • block user • block log • checkuser)
• Ironback (talk • contribs • logs • block user • block log • checkuser)

• Code letter: F.

• Supporting evidence: Ironback (talk · contribs) appears to be a sleeper sock of Erkusukes/Verjakette. This account was registered on 12 December 2007, but started contributing only yesterday. First thing this account did was restoring all POV edits and tags by Erkusukes to the article Caucasian Albania word by word, plus deleted another paragraph: [1] It is very unlikely for an unrelated brand new user to start editing from restoring edits of a banned user. Grandmaster (talk) 06:05, 14 April 2008 (UTC)

• Confirmed. Thatcher 00:26, 16 April 2008 (UTC)

  blocked John Vandenberg ^(chat) 05:53, 16 April 2008 (UTC)

[edit] Erkusukes

• Erkusukes (talk • contribs • logs • block user • block log • checkuser)
• 70.21.139.214 (talk • contribs • WHOIS • RDNS • RBLs • block user • block log • checkip)
• 149.68.31.146 (talk • contribs • WHOIS • RDNS • RBLs • block user • block log • checkip)
• 69.125.221.82 (talk • contribs • WHOIS • RDNS • RBLs • block user • block log • checkip)
• Verjakette (talk • contribs • logs • block user • block log • checkuser)
• Yerkatagear (talk • contribs • logs • block user • block log • checkuser)
• Cn111 (talk • contribs • logs • block user • block log • checkuser)

• Code letter: G.

• Supporting evidence: Could you please check if the above IPs have any connection with this user? 70.21.139.214 and 149.68.31.146 revert war on Caucasian Albania from the same POV as Erkusukes, reverting to that users version. 69.125.221.82 edit wars in tandem with 70.21.139.214 to get the images deleted from wikipedia. According to Wikipedia:Requests for checkuser/Case/Azerbaboon, Erkusukes edits from open proxies. If cu is unable to demonstrate any connection, could you please check if the above IPs are open proxies or not? I have a suspicion that this user uses proxies to evade cu detection and many other disruptive IPs also belong to him. Grandmaster (talk) 06:00, 22 March 2008 (UTC)

• 149.68.31.146 now moved on to edit war on the same image as the other 2 IPs, and the comments left by him leave no doubt that all the IPs belong to the same person ("my requests remain unanswered", while the requests were made by another IP). It is obvious that this is the same person hopping IPs, but I'm interested in cu results. This might be a very serious case of a long term disruption by the same user using multiple IPs and single purpose accounts. Grandmaster (talk) 07:01, 26 March 2008 (UTC)

All three IP addresses listed above have been added to WP:OP for checking. Nwwaew (Talk Page) (Contribs) (E-mail me) 13:41, 26 March 2008 (UTC)

I have checked the three anonymous users and agree that they have been behaving inappropriately. They, however, have nothing to do with me. In fact, I suspect that the tree users are straw-men of User:Grandmaster who is trying to discredit me in order to remove an obstacle to his disruptive conduct and POV-pushing on the subjects like Caucasian Albania. In order to remove any doubt that I and the three users are NOT the same, I will revert, where appropriate, their disruptive edits. However, it came to my attention that User:Grandmaster and User:Tabib are the same person - whose real name is Tabib Huseynov, an Azerbaijani nationalist, former student of the Central European University, and, presently - an editor of the International Crisis Group. The suspected socks started the same pages, have the same opinions and blame they same users for same alleged misconduct. Erkusukes (talk) 22:13, 26 March 2008 (UTC)

You disagreed with the IPs only after I filed this cu, but did not mind them reverting for you. To me it looks like an attempt to cover up your connection with them. As for me and Tabib, I suggest you file a separate cu on us, this is not a place to bring that up. I always knew that it was User:Rovoam behind all those accounts, and the above post is another proof. Grandmaster (talk) 05:38, 27 March 2008 (UTC)

It is also of interest that all 3 IPs are trying to get another image deleted at commons: [2] It is quite obvious that the IPs belong to the same person, as they admit themselves. Grandmaster (talk) 13:12, 27 March 2008 (UTC)

To note, all three IP addresses don't appear to have any ports open. Non-technical translation: they're not open proxies, as far as I can see. Nwwaew (Talk Page) (Contribs) (E-mail me) 16:22, 27 March 2008 (UTC)

Like I said, I aint a sock, just not registered. It seems either way both certain admin and certain users consider me a banned user. If I had opened an account I would have been considered a sockpuppet. A win win for some, eh? but seriously, I am glad we can finally close this chapter and get back to point that there are copyright violations and not imaginary banned users at work here. Thank you Nwwaew for you honest and fair input.149.68.31.146 (talk) 00:20, 28 March 2008 (UTC)

Let's see if CU finds any connection between the listed accounts. Grandmaster (talk) 05:27, 28 March 2008 (UTC)

The IPs could also be related to Verjakette due to similarity of edits, so I added him and his latest sock to the list. Grandmaster (talk) 05:45, 28 March 2008 (UTC)

Confirmed 149.68.31.146 is banned user Azad chai (talk · contribs).

Confirmed that Cn111 = Erkusukes = Merjanov, using a host of open proxies, and

Likely, but not certain, that those three (not Azad chai) are Yerkatagear/Verjakette.

Possible that those three and/or Yerkatagear/Verjakette are AdilBaguirov based on geography.

Others are Unrelated, and I have no idea about Rovoam, because the edits are too old and the only IPs we have marked for him were from open proxies.

Phew. Dmcdevit·t 01:36, 29 March 2008 (UTC)

Thanks. It is unlikely to be Adil, because all those accounts push extreme Armenian POV, while Adil's POV was quite the opposite. Plus, all those accounts belong to the same person who was behind User:Robert599 and his army of socks, because Erkusukes repeated word by word all the fringe theories previously promoted by User:Jalaleddin, who was a known sock of Robert599, and those claims in turn match those made by User:Rovoam. Rovoam has a geographic location close to Adil, but Rovoam was banned back in 2005, after his conflict with User:Tabib reached the arbcom. Since then he returned many times, sometimes for open vandalism of user pages of User:Tabib and User:Codex Sinaiticus, and I believe that the countless sock accounts that emerged since then also belong to him. It is also interesting that Erkusukes mentions in his post above User:Tabib, with whom Rovoam had a conflict back then. How would a new user know about another user, who has not contributed for years? I think it would be good to conduct a separate investigation of who is actually behind all those socks, maybe with involvement of the admins who dealt with Rovoam back in 2005. I have no doubt that this person will be back soon with a new set of socks. Grandmaster (talk) 06:27, 29 March 2008 (UTC)

Another sock IP is 85.211.4.163 (talk · contribs). It made 2 rvs without any explanation. An obvious SPA, but could you please check if it directly related to the same user or not? Grandmaster (talk) 12:56, 29 March 2008 (UTC)

Another one: 85.211.2.204 (talk · contribs). He follows me and reverts my edits. Grandmaster (talk) 19:53, 29 March 2008 (UTC)

And yet another one: 85.211.4.116 (talk · contribs). 3 rvs, no comment or edit summary. Grandmaster (talk) 10:45, 30 March 2008 (UTC)

Relisted under "new requests", per Grandmaster's further suggestions. Anthøny 11:46, 30 March 2008 (UTC)

Unrelated. Dmcdevit·t 23:36, 30 March 2008 (UTC)

Thanks very much. Grandmaster (talk) 04:27, 31 March 2008 (UTC)