Wikipedia:Sockpuppet investigations/Toug ma Tojer/Archive

02 June 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Well we already not that Sven is a sock of Toug because of the comment he left at User talk:John's page. The 212.183.128.72 IP address reverted the same articles as the Sven account, and the X.X.X.103 account also reverted one of the articles. The question is, who is the master sock? There are a number of suspects. MidnightBlueMan has a history of socking in this area. LevenBoy was recently topic banned for all topics relating to British or Irish affairs and may be avoiding his topic ban. Finally, LemonMonday was banned largely because of their activity in this area, and was denied an unblock last week and may be avoiding their block as they retired angry. I mention Mister Flash only because that account was shown to be a sock of MidnightBlueMan but frequently used variations of the phrase "political campaign to remove the term British Isles from Wikipedia", which is used in the recent edit summaries of Sven and Toug. There is also strong circumstantial evidence to suggest that all these accounts are related. --HighKing (talk) 23:54, 2 June 2011 (UTC)
 * The CU has come back as inconclusive. There are only two stale accounts - Mister Flash and MidnightBlueMan.
 * We also know that Mister Flash used to edit using Virgin Media ISP (at one stage used IP address 86.31.240.X) and MidnightBlueMan also used Virgin Media (86.29.126.X). We also know that many socks here are well versed in "hopping around" the Virgin Media network to make it look like they are in different locations (well know hack - I assume you know about it.  If not, email me).  Are the above "new" editors using Virgin Media, or perhaps using a VPN service?  From Sweden? :-) --HighKing (talk) 17:20, 3 June 2011 (UTC)
 * Did we get an "inconclusive" between User:Toug ma Tojer and User:Sven the Big Viking - given that we already know because the editor has admitted, that they're the same editor? --HighKing (talk) 17:12, 3 June 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' Sven is a not sock of Toug. Some child who does not speak Swedish took offence at the common name Tojer and disallowed it so edit I must use another name.

This is the man of Ireland who is on a campaign to remove the term British Isles from the Wikipedia and this is his dishonorable way of working. Sven the Big Viking (talk) 15:47, 3 June 2011 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
as far as technical evidence concerned; moreover, many of the accounts are. –MuZemike 23:56, 2 June 2011 (UTC)
 * Um.. per Sven's admission, along with behavioral evidence, I've blocked him as a sock of Toug. —  Hello Annyong  (say whaaat?!) 17:16, 3 June 2011 (UTC)
 * I'm gonna close for now. LevenBoy has been around a little while, so I'm not entirely convinced that they're connected. Relist if they become active, though, or if there are any other changes. —  Hello Annyong  (say whaaat?!) 17:33, 3 June 2011 (UTC)

04 June 2011

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Lots of reverting of the same articles by the Vodafone IP addresses. Well known socking problem in this area for years, and we're only now starting to close in on these disruptive editors. I'm happy to email more data (I've done this before) to show the links, and yes, some of these accounts have been around for years but essentially, there's all the same person. I also strongly suspect that they've been making use of the Virgin Media hack for years, although I haven't seen them using the Vodafone network previously. Is it possible to put a block on 212.183.128.X for anon access at least? --HighKing (talk) 15:21, 4 June 2011 (UTC) HighKing (talk) 15:21, 4 June 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' I've always suspected that LevenBoy & LemonMonday were socks of MidnightBlueMan. GoodDay (talk) 19:22, 4 June 2011 (UTC)

Wow, this user has a very dynamic IP. Đ  ARKJEDI   10   23:17, 10 June 2011 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Ugh. At the very least I've blocked 212.183.128.0/25 for two weeks. As to LevenBoy, I'd like to see some actual evidence. The account predates MidnightBlueMan by a few months, so some actual evidence would be good. —  Hello Annyong  (say whaaat?!) 20:58, 4 June 2011 (UTC)
 * I haven't looked over the edits, but adding a waiting CU request as we do have edits that are checkable and we might benefit from a sleeper check also. -- DQ  (t)   (e)  17:50, 6 June 2011 (UTC)
 * This has been open for a few days- if there is no more evidence, I'll mark for close. TN X Man  17:15, 13 June 2011 (UTC)
 * Marking for close. TN X Man  11:23, 14 June 2011 (UTC)