Wikipedia:Sockpuppet investigations/Cmoibenlepro/Archive

13 April 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Cmoibenlepro returned from a 3 year hiatus on March 3rd to deal with Crimea related articles. CanadianKing began editing began editing on the 21st seemingly to support an AfD Cmoibenlepro started here.

I noted that Cmoibenlepro made similar accusations of name calling (again) vs. the same from CanadianKing.

Another user who was suspicious of their connection brought up the following: with.

I noticed an IP user was deleting a comment of mine from a talk page where Cmoibenlepro and I were arguing here. Cmoibenlepro admitted it was his IP. Upon bringing up the Canadian IP connection to user CanadianKing, Cmoibenlepro deleted his talk page and requested to be indef. banned. Within minutes of deleting his talk page, CanadianKing logged on to delete their talk page as well. < This I think is a smoking gun.

Both accounts seem to cover the same Russia/Crimea/Ukraine topic spectrum. CanadianKing is especially volatile in his comments, and Cmoibenlepro was indef banned already for his conduct.

As for Slovinan, I noticed that CanadianKing and he both brought up similar 'Yugoslavia 2.0' rhetoric. vs

Cmoibenlepro and Slovinian both removed warnings I left on their talk pages vs. --Львівське (говорити) 23:21, 13 April 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Special:Contributions/50.100.123.207 and Special:Contributions/Cmoibenlepro show an identical pattern of editing on the article about the Donetsk People's Republic. Both vast numbers of edits to the article in a short period of time. Both have the same pro-Russian anti-Kiev government POV. I think that the evidence of the pattern of editing is strong enough to justify a checkuser. A check user is needed - Lvivske ‎has an identical editing pattern on that article. Cmoibenlepro was blocked 13 April 2014 for disruptive editing; the rafts of edits to the article by 50.100.123.207 started on 17 April (though he/she made some edits before that).

Cmoibenlepro's contributions show that he/she made a first edit on 5 November 2007, and three more in March 2011, and then between 3 March and 13 April 2014 made 799 edits. Of those 799 edits since 3 March, 786 concern the Ukrainian crisis, and thirteen concern other topics. He/she appeared to be a single-purpose account, which was created as a sleeper account and activated when needed. This suggests to me that the account-holder has other accounts, including sleeper accounts.--Toddy1 (talk) 07:06, 17 April 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Please note I did not check . Salvio Let's talk about it! 10:09, 17 April 2014 (UTC)
 * Master and socks indef and tagged. Closing. Callanecc (talk • contribs • logs) 12:18, 17 April 2014 (UTC)
 * Please note I did not check . Salvio Let's talk about it! 10:09, 17 April 2014 (UTC)
 * Master and socks indef and tagged. Closing. Callanecc (talk • contribs • logs) 12:18, 17 April 2014 (UTC)
 * Master and socks indef and tagged. Closing. Callanecc (talk • contribs • logs) 12:18, 17 April 2014 (UTC)

17 April 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Based on a simple IP lookup: 50.100.123.207 is an IP address from Montreal, Canada, with a host address of bas1-montreal51-845446095.dsl.bell.ca (Bell Canada is the ISP), 69.156.168.142 is also a Montreal based IP with a host of bas1-montreal51-1167894670.dsl.bell.ca (Bell Canada is the ISP).

Before being blocked, the 50.100 IP was editing exclusively on Donetsk People's Republic and [[File:Leaflet ordering registration of the Jews.jpg]; as was Cmoibenlepro's sock account Cmoibenlepro2 . Upon being blocked, 69.156 has picked up where he left off and made 3 edits to the former article, all about the Leaflet --[[User:Lvivske|Львівське]] (говорити) 14:32, 17 April 2014 (UTC)

206* IPs popped up shortly after filing this, editing the same content as above with the same pattern. The IP is also Bell Canada and |type=ipv4&&value=206.47.245.252 located in Montreal --Львівське (говорити) 14:40, 17 April 2014 (UTC)

Comments by other users
As far as I can see from the article's edit history on 17 April, 206.162.160.197, 206.47.245.252, 69.156.168.142, and 69.156.130.146 are all identical in behaviour and objectives to the 50.100.123.207 IP that Cmoibenlepro used earlier in the day.--Toddy1 (talk) 20:19, 17 April 2014 (UTC)

According to their speech style, edit targets these IP Users are almost indistinguishable and are single-purpose accounts. Besides, a new profile is created User:Citizen of the Donetsk Republic by them. Bests, Ali-al-Bakuvi (talk) 11:42, 18 April 2014 (UTC)

''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
This is obvious per WP:DUCK. I blocked all 4 new IPs for 48 hours for block evasion. 50.100.123.207 was already blocked for 48 hours for the same. The Donetsk People's Republic article has been semi-protected for a few months, so making new accounts or hopping to new IPs won't work at that article. --  At am a  頭 18:07, 18 April 2014 (UTC)