Wikipedia:Requests for checkuser/Case/Kultur

[edit] Kultur

• Kultur (talk • contribs • logs • block user • block log • checkuser)

• Code letter:G
• Supporting evidence: All edits from November at Special:Contributions/Kultur.

This user has been blocked as suspected compromised account based on its recent odd and out of character edits. Today I received an e-mail user requesting an unblock. I'd like a checkuser to help figure out what's happening. -- John Reaves 21:42, 14 November 2007 (UTC)

Additional information needed on what you want checked for. Remember that Checkuser is not for fishing so we need something to go on. Even a diff to some of these edits might help determine what exactly ought to be checked. ++Lar: t/c 02:59, 15 November 2007 (UTC)

In the past CheckUSer has confirmed accounts were compromised when the IP changed coinciding with the supposed compromising. Of course, that's not what happens if someone, say leaves a public terminal logged in and the next user does something with the account. However, unless Kultur is on that sort of public terminal permanently since he has only ever had one IP, the IP evidence suggests that it is unlikely there is either type of compromised account here. Without prejudice to some explanation in the future that accounts for the evidence: Unlikely the account is compromised. Dmcdevit·t 03:08, 15 November 2007 (UTC)

Okay, I'm still awaiting a reply from the user that should clear things up. Thanks. -- John Reaves 06:16, 15 November 2007 (UTC)

Thanks also for the info Dom... I'll keep that in mind! So usually what is sought here in this sort of case from the requestor would be some idea of when exactly it was suspected that the compromise occurred (a date range perhaps)... Much appreciated! ++Lar: t/c 12:40, 15 November 2007 (UTC)