Wikipedia:Sockpuppet investigations/Rokarudi/Archive

20 June 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Since User Rokarudi is making some strange edits on this page, after talking with no succsess  a IP user appeared today with the exact replica and contributions(while ignoring the talk page) such as:  - Rokarudi and  - IP editor. I believe that this IP is Rokarudi editing avoiding to make his next edit also considering that IP`s first edit was exactly at the Targu Mures article. Adrian (talk) 09:28, 20 June 2012 (UTC)

I hope this is enough behavioral evidence,, , , , , and more. When he logged in he made the exact same edits, at the exact same articles with the exact same edit summary.Adrian (talk) 08:30, 21 June 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' The Ip is perhaps Rokarudi. However, said user has not edited Wikipedia from the end of the last year up to recently. Considering that Rokarudi began editing yesterday, the Ip could be Rokarudi. But, if that is the case, it is likely that Rokarudi forgot to log in to Wikipedia. And, forgetting to log in is not the same as sockpuppeting.--Nmate (talk) 10:01, 20 June 2012 (UTC)


 * It is when he is trying to make edits which he avoids while logged in. Per WP:SOCK - Creating new accounts to avoid detection, Using another person's account (piggybacking), Logging out to make problematic edits as an IP address... Adrian (talk) 10:16, 20 June 2012 (UTC)


 * But if that is the case, Iadrian yu should provide diffs of the fact that the Ip user has been editing Wikipedia for a considerable time from which it obviously ensues that Rokarudi delibatery does not want to log in to Wikipedia if at all the Ip user is Rokarudi.--Nmate (talk) 10:20, 20 June 2012 (UTC)


 * I believe I explained this aspect in my report, it is strange that his first article was Targu Mures and the exact edit summary, letter by letter, and not to mention that his edits are exactly the same content. Also if you take a look at contributions of this IP user it is clear. After Rokarudi received a warning for edit warring this IP appeared and made the exact same edits with same edit summaries - to much to be a coincidence. It is clear that by this action, Rokarudi avoided to make edits with his own account. Before making any serios accusation I suggest to wait for Check User. Also you said it yourself that it is likely for this IP to be Rokarudi indeed.Adrian (talk) 10:24, 20 June 2012 (UTC)
 * The IP is likely to be Rokardi ,however, the probability of the fact that the Ip is Rokarudi is not too high. Let there be a sockpuppet investigation, if the administrators agree with your reasoning.--Nmate (talk) 10:38, 20 June 2012 (UTC)
 * Here is an newly created account whose behavior is very similar as that of user:Rokarudi (i.e. revert warring and inclusion of Hungarian names into various articles about towns in neighboring countries): http://en.wikipedia.org/wiki/Special:Contributions/Magyarcsaba There should be check whether this is sock of Rokarudi. PANONIAN  19:13, 23 June 2012 (UTC)
 * Here is another suspicious IP involved in same "business": http://en.wikipedia.org/wiki/Special:Contributions/89.132.208.217 PANONIAN  19:21, 23 June 2012 (UTC)
 * Let me also post diffs that showing the connection: Rokarudi: ; Magyarcsaba: ; 89.132.208.217: . Appearance of these accounts and IP numbers that adding Hungarian names to various articles about cities in countries that surrounding Hungary cannot be just a coincidence. It looks like a campaign of a single person that trying to use socks and IP numbers to cover his tracks. PANONIAN  21:54, 23 June 2012 (UTC)
 * You don't have Magyarcsaba listed as a sock here. It is difficult for us to compare users if you don't actually list them.  Dennis Brown -  2&cent;    &copy;  22:38, 23 June 2012 (UTC)
 * Is it OK now: ? PANONIAN  22:48, 23 June 2012 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Checkusers will not disclose connections between a named user and an IP, so a determination will have to be made using behavioral evidence. ​—DoRD (talk)​ 14:02, 20 June 2012 (UTC)
 * The IP is clearly Rokarudi. In this case, however, Rokarudi made edits on different days, the IP made edits only on one day.  That the edits match is more of a fact that they were Undo edits, without using the default summary.  This *could* be socking, but it could be forgetting to log in as well (or being on an insecure station).  Neither would be approaching 3RR, with one edit per day per article, so the abuse is minimal, if at all, since it was ONE day, and a day the "Master" didn't edit at all.  I suggest waiting and seeing just a little longer.  A note on the user's talk page about editing while logged out might be a good idea, if we assume good faith here, reminding them that this can be seen as socking, and will if it continues.  Other admins may feel differently, however, and may prefer to take action.  I feel it is just below the threshold to block as it stands today. Dennis Brown -  2&cent;    &copy;  23:35, 22 June 2012 (UTC)
 * Another admin has blocked Magyarcsaba 48 hours for edit warring. EdJohnston (talk) 15:40, 25 June 2012 (UTC)
 * Closing case as no action taken. If there is new evidence, please refile. ⋙–Berean–Hunter—►  14:08, 26 June 2012 (UTC)