Wikipedia:Requests for checkuser/Case/Molag Bal

[edit] Geordie vandals

• Roomtrain (talk • contribs • logs • block user • block log • checkuser)
• Brokemiles (talk • contribs • logs • block user • block log • checkuser)
• Shearersongs (talk • contribs • logs • block user • block log • checkuser)
• Readydream (talk • contribs • logs • block user • block log • checkuser)
• Watchwants (talk • contribs • logs • block user • block log • checkuser)

Geordie had to be semi-protected because of these socks. A checkuser might reveal unknown sleeper accounts. Spellcast (talk) 18:15, 14 January 2008 (UTC)

Note: - experience and IP traces tell me that this is almost certainly User:Molag Bal yet again, especially given the subject. Lots of the IPs involved in Blueanode's accounts have been trolling, "Wikipedia is Fascism", etc, etc. Logging in and out to troll. All the usual Sunderland targets, too,

Confirmed - Blueanode (talk · contribs) = Watchwants (talk · contribs), Readydream (talk · contribs), Shearersongs (talk · contribs), Brokemiles (talk · contribs), Roomtrain (talk · contribs), Biameevent (talk · contribs), Pointedge (talk · contribs), Hi I have created this account just to be blocked (talk · contribs) ... and numerous vandalising IPs.

Clerk assistance required: - can we move this to the Molag Bal section, please, just to keep track of them all? Thanks - Alison ^❤ 06:19, 15 January 2008 (UTC)

Clerk note: moved from IP check. -- lucasbfr ^talk 09:50, 16 January 2008 (UTC)

[edit] Molag Bal

• Molag Bal (talk • contribs • logs • block user • block log • checkuser)
• Redrocketboy (talk • contribs • logs • block user • block log • checkuser)
• Code letter: F

Molag Bal (talk · contribs) was banned from editing Wikipedia over a year ago. After a long string of sockpuppets, he claims (via IRC) to have not created any sockpuppets for many months. After much disruption towards Nishkid64, Martinp23, myself and other editors (including the revealing of personal information) using sockpuppets, and as Mr oompapa (talk • message • contribs • count • logs • email) several months back (now a confirmed to be sock of his). However, recently, Redrocketboy (talk · contribs) appeared on 1 December, creating a userpage less than 8 hours before his first edit, he then proceeded to edit articles, indicating a good policy knowledge (despite his account only being 6 days old to date) [1], [2], [3] ; as well as creating several short articles (1 - 2 - 3, etc — one of which is a current DYK candidate). He adds {{blp}} templates to talk pages, despite most new users not knowing about this, and edits Sunderland articles [4], [5], [6], a thing was Molag did commonly. The only thing which would lead me to believe otherwise is the fact this user has a coded signature, which Molag never bothered about. This user also seemed to come straight to my talk page, after being suggested by Anonymous Dissident. It seems rather fishy that a new usr would come across so many users who I'm familiar with in only 5 days of his time, as well as learn policies so well. Qst 18:58, 6 December 2007 (UTC)

I was pointed this out on IRC. Like I say on my page, I'm obviously not brand new. I've simply started up fresh, and wanted to quietly get on with it but now I have to worry about being checked. No, I'm not a banned user, nor have I ever been banned. I'd rather no one knew of my other identitie(s), not even checkusers, who have been known to "out" users unintentionally before. If I am checked, please have the good courtesy to keep the information you get to yourself. You'll find I am completely innocent of this "crime"; I'm simply worried that careless checkusers will out me. Thanks. Redrocketboy 19:14, 6 December 2007 (UTC)

The last confirmed sock was User:The sunder king. The ISP which Molag uses (ask me on IRC for name) uses dynamic addressing, with the IP changing after a re-connection to the DSL service. Thus, the best link that we could expect to get would be that they were on the same ISP. That may or may not be good enough to block - we'd have to see. Martinp23 19:46, 6 December 2007 (UTC)

Unrelated - Alison ^❤ 05:53, 7 December 2007 (UTC)

Thank you. Qst 15:45, 7 December 2007 (UTC)

[edit] Molag Bal

• Molag Bal (talk • contribs • logs • block user • block log • checkuser)
• Eaomatrix (talk • contribs • logs • block user • block log • checkuser)
• Retiono Virginian (talk • contribs • logs • block user • block log • checkuser)
• Tellyaddict (talk • contribs • logs • block user • block log • checkuser)
• The Sunshine Man (talk • contribs • logs • block user • block log • checkuser)
• Mr oompapa (talk • contribs • logs • block user • block log • checkuser) (and socks)
• IPs tend to be BT ones, so 81.*.*.* and 86.*.*.* are predominant.

• Code letter: F, encompassing C on the Oompapa front.

User:Molag Bal (banned) had over 30 socks on Wikipedia, all blocked. The user behind these accounts (henceforth "Tom") has, on multiple occasions, returned to wikipedia editing well under a primary account (User:Rasillon, for example), while vandalising on others. Past checkusers on IRC have confirmed the Molag Bal socks, as has a later admission by Tom. Now, Tom has this annoying habit of babbering to me on IRC or in email, and it was during one of these sessions that I asked him if he was Eaomatrix. He denied this, but after I gave him the evidence, he logged on to IRC to chat with me under the name "Eaomatrix". Hence, we hace a link between Eaomatrix and Molag Bal (IRC logs available on request). A checkuser was run by Dmcdevit after Retiono's account ran amock, determining that Eaomatrix and Retinolo were one and the same - this is admitted by Eaomatrix on IRC. Looking at the history of User talk:Dmcdevit, we see anon edits from various ranges - 81.. and 86.., removing a comment made by me requesting a checkuser to find a link between Oompapa and Eaomatrix - this would seem to be evidence that (by the IP ranges used) these users are the same, and this edit shows a disturbing link, by the mention of Yamla (who was a target of Oompapa).

Tellyaddict and Sunshine man are the same (as admitted on one of those user pages), but it is suspected that they could be Eaomatrix - if anything, I would like to "eliminate them from our enquiries" in the truest sense of the phrase. There has been a large amount of evidence dug up to support this assertion, and I am going to ask the relevant users to post their findings here (don't know if they will have time to comment though - please don't let it delay you if you wish to run the request). Thanks, Martinp23 20:50, 13 May 2007 (UTC)

Some links which may help:

• Coincidential involvement?
• Wikipedia:Administrators'_noticeboard/IncidentArchive231#Serious_privacy_violation_attack
• Special:Undelete/Wikipedia:Long_term_abuse/Mr_oompapa
• Retinolo had two barnstars, both from Tellyaddict
• I have tons of email correspondance which may help the checkusers
• User:Martinp23/Molag is a summary of what we know now, though a check of Oompapa against the above would be nice, I think that the edit patterns do make it quite clear. I've also slapped a couple of emails on there
• Also, see the history of this page

Martinp23 20:57, 13 May 2007 (UTC)

I know that this probably comes under the definition of fishing, but if you notice any other accounts in your searches, would you be able to disclose them please, as sockpuppetry is a perennial problem with this user (the more sleeper (or otherwise) accounts we can block, the better)? Thanks, Martinp23 22:48, 13 May 2007 (UTC)

Confirmed. Molag Bal = Eaomatrix = Retiono Virginian = Mr oompapa (and various similar sock names). The Sunshine Man = Tellyaddict, who are likely not related to the others.Voice-of-All 22:58, 13 May 2007 (UTC)