Wikipedia:Sockpuppet investigations/JeffJor/Archive

Report date February 12 2009, 16:36 (UTC)

 * Suspected sockpuppets


 * Evidence submitted by Thesoxlost (talk)

On February 8th, JeffJor made a substantial edit to Boy or Girl paradox. Other editors, including myself, User:Snalwibma,User:Noe, User:Versus22, and User:Rick Block have reverted these changes and subsequent similar changes made from 5 different IP addresses. Given the edit history, it is extremely unlikely that these IP users are unrelated. All of the IP addresses resolve to domains in Japan. None of the IPs have made any other edits. The content of each of the edits has been similar or identical.

Over the course of 4 days, these IP addresses have made 11 reversions to this page, by outright reverting edits or by re-adding content that was removed. If these are the same user, then the user is clearly engaged in an edit war. If these are not the same user, then there may be more support for their common position. Either way, we need to know in order to resolve the dispute on the page.

Although it appears extremely likely that the IP addresses are all the same user, it is not necessarily the case that they are all JeffJor; it could be coincidental that an anonymous user with multiple IP addresses took up his cause for him, and he has laid low. JeffJor has not indicated that he is or is not the same user as these IP addresses. A simple CheckUser should be sufficient to make that determination, but I thought we should give Jeff the opportunity to respond before asking a CheckUser to spend his time on this relatively simple case. |Revision #1 by IP #7 Same content change, misleading description
 * |Original JeffJor post
 * |Revision #1 by IP #1
 * |Revision #2 by IP #1
 * |Partial Revision #1 by IP #2 Content highly similar to JeffJor's; in places it is identical (e.g., "The reduced sample space is the set {BG, BB}")
 * |Partial Revision #2 by IP #2
 * |Partial Revision #3 by IP #2
 * |Partial Revision #4 by IP #2
 * |Partial Revision #1 by IP #3 Content was part of JeffJor's original post (e.g., he deleted question #2 entirely)
 * |Partial Revision #2 by IP #3
 * |Partial Revision #1 by IP #4 Content changed was complained about by (only) Jeff in the talk page
 * |Partial Revision #2 by IP #4
 * |Revision #1 by IP #5 Same content change as IP #4
 * |Revision #1 by IP #6 Same content change again
 * |Revision #1 by IP #8 Same content change, misleading description
 * |Revision #1 by IP #9

At my talk page, JeffJor says that he has posted w/ an IP address twice on the talk page. Just like all of the IP addresses that have been used above to edit this page, 2 of the 3 IPs used to post to the talk page came from Japan, with the same profile that Foxy mentions below. ---Thesoxlost (talk) 14:43, 15 February 2009 (UTC)


 * Comments by accused parties    See Defending yourself against claims.

I post from only two IP addresses (this is the second), always try to log on, and always try to sign discussion pages. But no, I can't swear that I never forgot to log on, or sign, or maybe even I posted paragraphs of discussion in different parts of a page with only one signature. I thought they would be linked. When Thesoxlost asked about multiple IP addresses, I did answer as soon as I saw it. But I thought he was talking about the discussion page only. Both of my IP addresses may appear in the discussion page (I really don't recall).

I edited the article in question only once recently, and that was a large one. I purposely left it alone for a few days, because I knew it would either be reverted back, or heavily edited, and I really don't know how to trace the changes well. I wanted to end up replying to whatever it stablized into. I may have done a small edit a year and a half ago from a different IP address (changed providers), but I don't think that is what the issue is here.

Now, if others have appeared to be "sock puppeting," I really have no knowledge or control over that. But since I am trying to change consensus about the article, it would be counterproductive to do that, even if I knew how.

Arg - yes, I did just forget to sign that one. I'm upset by what seems to be bad faith. JeffJor (talk) 15:32, 13 February 2009 (UTC)

WHOIS shows all IP addresses registered to the Japan Network Information Center and several geolocated to Tokyo (others show unknown location). SockTiming the edits shows that the user is IP hopping once or twice a day either due to DHCP reassignment, turning his modem off, or intentionally to escape scrutiny. Foxy Loxy Pounce! 01:37, 14 February 2009 (UTC)
 * Comments by other users


 * Clerk, patrolling admin and checkuser comments


 * If you provide me some diffs, and correctly identify the article (the link you gave above is red) I'll be able to deal with this faster. More likely then not, depending on the status of the IP addresses themselves I'll be able to handle this without checkuser assistance. I just need diffs of the behavior from each account as to why you suspect they are socks. (Show the similar edit pattern). ——  nix eagle email me 22:52, 12 February 2009 (UTC)
 * From a CU perspective, is ❌ to all the IP listed at the top. --  lucasbfr  talk 17:22, 18 February 2009 (UTC)

 Syn  ergy 17:39, 18 February 2009 (UTC)
 * Conclusions