Wikipedia:Suspected sock puppets/Lahiru k (2nd)

User:Lahiru_k

 * Suspected sockpuppeteer

(blocked on prior check user, see below) (blocked on prior check user, see below) (blocked on prior check user, see below) (blocked on prior check user, see below) (blocked on prior check user, see below) (blocked on prior check user, see below) (also see first Lahiru_k sock report) blocked indef by User:FayssalF blocked indef by User:Haemo blocked indef by User:Chaser
 * Suspected sockpuppets


 * Report submission by

Sumoeagle179 20:51, 14 October 2007 (UTC)

See Prior checkuser report
 * Evidence

A SPA report had been reported before by another user. Blow are the content User:Iwazaki, FIRST SSP REPORT:
 * After being warned that User Lahiru_k a known sockpuppeteer was following me [|around in my edits] contrary to WP:Stalk, User:Iwazaki began to follow me around in my edits  [|here] and [|here these are couple of examples only. Both the account were used to avoid 3RR rule in the [[Mylanthanai_massacre|following article]]. They are both interested in similar articles are vote together in XFD and edit in the same pattern. In the talk pages both accounts use !! after making a point. They have never edited at once. User Lahiru_k  although a good contributor  was  identified as a malicious sock puppeteer.

Below is connection between User:Mystìc, a sock of User:Lahiru_k, and User:Netmonger
 * User:Mystìc chose to fight his block and IP was revealed as 222.165.157.129. Then User:Netmonger apparently forgot to log in and then logins in as Netmonger, tying his IP to the one Mystìc used. 


 * The IP 222.165.157.129 belongs to Mystic here is where the Mystic admits that this is him and signs with the said IP. Now we see that Netmonger is using the same IP. Also note that Mystic is a sock of User:Lahiru_k

Here someone else accusses Netmonger of being a sock of Lahiru_k. Netmonger and Lahiru_k say the exact same thing, see here and here

Here are cases where Netmonger and Lahiru_k vote together:, ,  (check histories as they used custom signatures).

Netmonger and Lahiru_k both refer to WP:DGAF, which not many people know about. See and [ http://en.wikipedia.org/w/index.php?title=Talk:Tablighi_Jamaat_and_allegations_of_terrorism&diff=prev&oldid=142440452 ], Netmonger also has the DGAF userbox on his page. Snowolfd4 also refers to DGAF here

Again another simillarity, only Lahiru_k and netmonger have reference to Netmonger's Terrorism UB, see and. 

Both Netmonger and Lahiru_k call the same user a troll, see and  and 

Below is the Connection of User:Lahiru_k and User:Kaushini

Here Lahiru_k reveals his IP, which appears to be either dynamic or his account is in use by multiple users. Checking his edits, one sees he's active up to 18 hours a day.

Below is the Connection of User:Lahiru_k and User:Kaushini


 * Here Lahiru_k forgets to sign in as Kaushini and he corrects it. Here that same IP again acts as Kaushini AND ALSO refers to User:Snowolfd4 as Lahiru_k.


 * Another note: Lahiru himself claims that the IP (203.115.31.180} belongs to him. Take a look how he signs with the IP but then says oops and signs his name here. The same IP leaves a message on User:Lahiru_k talk under another name (Kaushini) here —Preceding unsigned comment added by Watchdogb (talk • contribs) 23:39, 14 October 2007 (UTC)

Kaushini, Lahiru_k and Mystìc all vote in a tfd together

There are two instances of lahiru_k and netmonger making edits on the same minute interval. However, lahiru_k did boast here that, there are "technical" ways to workaround it. Persumably he has the knowledge to do so.

See block logs for these users. They all seem to have been blocked before.

Snowolf4 and Iwazaki have removed their sock tags here and here Sumoeagle179 00:44, 15 October 2007 (UTC)
 * I stand corrected, it was another account that removed Iwazaki's tag. But Iwazaki is incorrect in that this is actually a pretty solid Sock case, esp with Netmonger and Lahiru. It was an honest mistake that I missed it was a different account.Sumoeagle179 10:13, 16 October 2007 (UTC)


 * Comments

Here is a damning connection between three of the accounts. Snowolfd4 here writes "You need to stop wasting other peoples time".

Here snowolfd4 again:

"I'm not going to waste my time regarding the extensive trolling on the other page, because I frankly have better things to do"

Here netmonger mentions:

"I do not want to waste anymore time discussing here who did the right thing or wrong thing, the article has been nominated for deletion, if the references are really unreliable as you guys are saying, let the wiki process take its course and the fellow editors will decide whether the article should stay or go."

Here lahiru_k mentions: "I have lots of things to do other than explaining things word by word to you. Go and read the content of the given policy and mind that I'm not your help desk guy who paid by Jimbo."

Three accounts have pretty much the same behavior and have shown to have an incivil attitude.

There is an IP edit (that could be verified via checkuser) that shows more resemblance to user snowolfd4 than lahiru_k, The IP is from New York and have edited Sri Lanka related articles such as STF. It has also been used as a shared vandalism account. Lahiru_k claims to be from Colombo, Sri Lanka. Snowolfd4 claims to be from New York. Here user snowolfd4 forgets to login into lahiru_k account hence blanks the page with the ip. User watchdogb reverts the edit, thinking it was vandalism. Realizing this mistake, he later logins in as lahiru_k and does the exact same thing as the ip address. . Sinhala freedom 19:15, 14 October 2007 (UTC)

User snowolfd4 writes a comment on Haemo page. Having mistakenly logged into lahiru_k corrects the formatting here. Having then noticed this mistake, lahiru_k accounts tries to further cover up that mistake by doing more formatting edits the next day of other users comments.

User lahiru_k seems to have uploaded a lot of US military pictures recently, ,,,,,, ,. This is very odd for a person coming from Sri Lanka. It is after all more in keeping with user snowolfd4 who claims to be from the US.

Apart from voting the same (lahiru_k,snowolfd4 and netmonger) on every xfd related to sri lanka, here for example, both chose to revert from Adam's Bridge. Here lahiru_k reverts changes. Here snowolfd4 does it,  Its a little suprsing both users would choose to have same page on their watchlist.

User snowolfd4 has also choosen to hide the suspsected sockpuppet tag from his userpage. .. with the comment "check user has already confirmed that's not true, so quit wasting my time." However as sumofeagle has reported above, lahiru_k boasts of how to get around this. Sinhala freedom 22:01, 14 October 2007 (UTC)


 * Comment
 * Looks like there are none, considering users who have the same POV talk the same. There is no "daming" evidence incriminating either. Baka man  22:40, 14 October 2007 (UTC)


 * Condiering how messy and unorganized this page is everyone will miss something. I know Lahiru k != iwazaki. I do not know about anything else. Baka man  23:16, 14 October 2007 (UTC)
 * I agree there is no evidence against Iwazaki, hence he is innocent. Actually, there might be some evidence now which I will present shortly.  Sinhala freedom 23:41, 14 October 2007 (UTC)
 * It cannot be claimed now that there is no evidence of a connection between Iwazaki and lahiru_k. For example, lahiru_k harps on the theme of justice in this post .  Ironically enough, in tandem, Iwazaki also harps on these theme of justice here .  This obviously is very very weak evidence and doesn't constitute enough to have a definite link, but raises suspicions.  Admin Maxsem has noted here  that vigour with which Iwazaki is attempting to defend lahiru_k raises suspicions.  Also it is very suspicious, you have the Arsath account, alternate name of banned Mystic account come here and correct a link in Iwazaki's defense of lahiru_k .  Sinhala freedom 02:20, 17 October 2007 (UTC)
 * Good, also please be noticed that U also vigorously defending the accuser, does that make you a sock puppet of the accuser ? I have seen some people have defended you at the SSP case against you, so does it make all of them your sock puppets ? Could you please for the sake of space here, go through the previous reports against me,where you can clearly see UNRELATED part at the end of the page. Iwazaki ' 会話. 討論 07:05, 19 October 2007 (UTC)

Evidence seems to prove the connection between User:Mystìc, a sock of User:Lahiru_k, and User:Netmonger.
 * Comment by User:Watchdogb
 * The IP 222.165.157.129 belongs to Mystic here is where the Mystic admits that this is him and signs with the said IP. Now we see that Netmonger is using the same . Also note that Mystic is a sock of User:Lahiru_k'' ---Watchdogb 22:56, 14 October 2007 (UTC)

Evidence seems to prove the connection between User:Lahiru_k and User:Kaushini.
 * Lahiru himself claims that the IP (203.115.31.180} belongs to him. Take a look how he signs with the IP but then says oops and signs his name here. The same IP leaves a message on User:Lahiru_k talk under another name (Kaushini) here Watchdogb 23:10, 14 October 2007 (UTC)


 * Outside view by User:Haemo:

A lot of this report is very tenuous, and the sheer number of accused users makes this sketchy. However, in my opinion here is the bona fide material that is very damning:

is based in Sri Lanka, via Sri Lanka Telecom. It has been established that this IP is is User:Mystìc, who is an indefinitely blocked sockpuppet of User:Lahiru_k. However, we can also see that the same IP is is User:Netmonger. Thus, this is strong evidence that User:Lahiru_k is User:Netmonger.

However, I do not think there is evidence User:Snowolfd4 is a sockpuppet of User:Lahiru_k. All IPs associated with Lahiru, for example the above, and this IP are based in Sri Lanka, while all those associated with User:Snowolfd4 are from New York. This implies to me that they are probably not the same person.

I can't speak on the other users, since there is only very weak evidence presented against the currently non-blocked ones. However, I believe that the above is reasonably conclusive. Currently, there are six known sockpuppets of User:Lahiru_k; something which he has previously been blocked for. This would be the seventh, after his previous block for sockpuppetry. --Haemo 23:31, 14 October 2007 (UTC)

This is probably the worst SSP I have ever come across, accusing all the SL editors. The accuser has dig into past and giving an old SSP case against the same user. He has obviously given no proofs regarding many users, including me. And not only that, he falsely accusing me(here and at ANI) of removing sock tags, by giving diffs in which my name does not even appear!! This whole case is based on extreme bad faith and nothing else. The accuser him self had NO interaction with me before nor he has done any edit in SL related articles. still he is trowing me various accusations ! And I dont see a single action taken by administrators against him !! He is being blatantly breaching, civil,AGF and many others, and I see nothing!! Haemo, could you please explain why ? Why you have kept your silence while some one blatantly accusing ME,(when I did not even have a chance to defend my self ) ?
 * comment,

Haemo, with all the due respect, both yours and fayssals decision to block certain users is erroneous. I am a network engineer and have a fair good knowledge about how the IPs work.And even the wikipedia says ,|In current practice, an IP address is less likely to be an identifier! You know why ?? because, It is due to technologies such as:Dynamic assignment. Even the wikipedia article contrary your decision here.The only ADSL provider in SL is SL telecom and they allocate IPs dynamically. And if you know about DHCP, then you would know its highly possible to have same IPs at different times.Go through their edits and IPs, then you would see many IP addresses. go through yours,if you are using a static IP,then there will be only 1.(If you still don't believe me ask any of you friends who has any basic knowledge about networking/DHCP). Therefor I would kindly request you to retract your decision and do the justice to the relevant users. Iwazaki  会話. 討論 03:06, 16 October 2007 (UTC)
 * comment,


 * I'll just reply shortly to this. The IP which he and Netmonger used was not dynamic. Sri Lanka telecom allocates some of their IPs dynamically, and some statically.  The IP address that both Netmonger, Laihru and Mystic used was not a dynamic address. --Haemo 19:56, 16 October 2007 (UTC)
 * I ll be brief too. Please show us ,lahiru_k has ever used Mystics static IP .IF mystic uses a static one and Lahiru_k has also used that static IP, then you are right and                 case closed.But, if you have no evidence that, then you should seriously think about unblocking them.The earlier SSP,which blocked Mystic,was erroneous and here you have a very good opportunity to correct it and give justice to the blocked users. We dont hang innocent people, do we ? Iwazaki  会話. 討論 00:47, 17 October 2007 (UTC)
 * And, regarding allegations and false claims and insults against me(here), I am still waiting your reply. Iwazaki  会話. 討論 00:47, 17 October 2007 (UTC)


 * I thought I was pretty clear that the case against you, and Snowolf was without merit. In any case, I'll leave it up to Laihru to explain the circumstances here &mdash; there's too much up in the air to over-ride a prior confirmed checkuser, and the suspicious behavior going on regard Arsath.  --Haemo 01:56, 17 October 2007 (UTC)


 * Its not about that. This user making so many accusations(such as following him around, and removing sock tags), for which I have no idea. And I consider them highly uncivil and insolent.
 * Thanks for the comment you made at your talk page. Hope you can get into the inner side of technical issues related to IPs. As I said below this case is extremely complicating, esp the whole episode is based on wrong decisions made earlier. Humans do make errors,mistakes, that's our nature. But we also correct them and thats what we need here,now . Iwazaki 会話. 討論 09:19, 17 October 2007 (UTC)


 * I don't understand these claims about Lahiru k and Mystìc. The checkuser result confirmed that they are the same person. To my mind, the burden now moves to them to explain why two people are operating from the same IP.--chaser - t 02:06, 17 October 2007 (UTC)


 * Chaser my friend,to my knowledge, these two disputed editors, Arsath and Lahiru_k have never used same IP, which is claimed by some as a static IP. And this gives the conclusion that the earlier decisions to block was erroneous. Regarding dynamic allocation of IPs, I think I have quite clearly explained that, this is alone shouldn't be used to identify. I know this case is rather confusing. And thats why I am kindly requesting you to look back at their contributions,editing time,writing style and things.Regarding Kaushini, she is from the same school as Lahiru_k(and with probably hundreds of others), and probably using school computers. So isn't it unfair to block her based on IP similarities?? She was blocked less than 2 months after she became an editor here. I have seen users from Cambridge university sharing IPs and editing here. So why would you block users from Sri Lankan schools ? Isn't this a discrimination against a poor third world country like SL, where most of the people edit from the schools ?? Iwazaki  会話. 討論 09:19, 17 October 2007 (UTC)


 * This IP chaos in brief,
 * 222.165.157.129 is the Mystic/Arsath/Netmonger [Static ip, Sri Lanka Telecom (SLT)]
 * 203.155.32.180 is me [Static ip. SLT] only few months I used that but not now
 * 124.43.000.000 to 124.43.255.255 range use by both of us [Dynamic ip, SLT]
 * I never used 222.165.157.129 or Mystic/Arsath/Netmonger never used 203.155.32.180 which are both static IPs but we both used 124.43.000.000 - 124.43.255.255 IP range which is assigned to the ADSL/ISDN dynamic pool. If someone can proove that I used 222.165.157.129, I'll pack my bags. Lahiru_k 15:27, 18 October 2007 (UTC)


 * You neglect to mention that another sockpuppet of yours, Mystic/Arsath used the static Netmonger IP address. --Haemo 20:01, 18 October 2007 (UTC)


 * Also, please don't circumvent your block using IP address. It will be a huge pain if you do; just comment on your talk page.  --Haemo 20:04, 18 October 2007 (UTC)


 * Sorry for commenting here and I'm not going to do this again. I didn't neglect that actually but it was a mistake. Also please be kind enough to call those accounts as my suspected sockpuppets of mine, because though you guys had your own jugement, I'm still a Suspected sockpuppeteer. Lahiru_k 20:30, 18 October 2007 (UTC)


 * IP recap solid evidence:
 * -Colombo, Sri Lanka; Lahiru_k
 * -Sri Lanka; Mystic and Netmonger, which ties Netmonger to Lahiru_k since the first checkuser tied Mystic to Lahiru_k
 * -Sri Lanka; Kaushini and Lahiru_k
 * -York College of CUNY Jamaica NY, has to be Snowolfd4
 * other evidence shows Snowolfd4, Iwazaki (who says he lives in Japan), and Lahiru_k all supporting each other. Sumoeagle179 22:36, 18 October 2007 (UTC)
 * For the last time I am asking you to stop your rants and insults towards me.You have been,even after admins cleared me, engaging in mud slingging at me by calling me as socks of others and I belive these claims are highly insultive.I am not sure why you cant see the earlier SOCK reports. I and snowolf are

UNRELATED and no one even paid attention to this,which was removed by the accuser him self!! And even here,admins have cleared both me and snowolf,and if you continue your insults like this,I have no options but to take your insolent behaviour to the ANI. Thank you. Iwazaki  会話. 討論 07:05, 19 October 2007 (UTC)

This is a another evidence that user Arsath is not Lahiru_k. From the Wiki scanner, one could easily get the edits made by the disputed address(which some claim Arsath and Lahiru shares). it is clear from this that Lahiru_K has done no editing from this IP. Isn't this a proof that both Arsath and Lahiru_k's blocks are erroneous ? Iwazaki  会話. 討論 10:13, 17 October 2007 (UTC)
 * comment


 * New Behavioral Evidence Linking lahiru_k to Mystic/Netmonger/Arsath

Mystic account was the one who apparently created a smiley template. See through talk history. Isn't it highly suspicious that lahiru_k account would hold onto the custom smileys in his user space, after the smiley template was deleted off wikipedia ? . Sinhala freedom 02:36, 19 October 2007 (UTC)


 * if you are accusing them as socks because they had similar interests, then why don't you look around your self?? We have you, watchdogb,wikiraja.raveen editing same way and with same POV. So are you accusing all those guys(including)of sock-puppeting ? Iwazaki  会話. 討論 07:05, 19 October 2007 (UTC)

I emailed Arsath/Netmonger, who indicated that it's true that Arsath=Mystic=Netmonger. The only issue remains the checkuser result connecting those three to Lahiru k. I'm still investigating that connection. It's not clear whether the IP has any relevancy since we don't know what evidence Dmcdevit used to make the original checkuser finding. It's typical that checkusers can't reveal much information in performing their checks.--chaser - t 03:06, 19 October 2007 (UTC)

After being dormant for 10 months, this account was created by User:Mystìc and he admits it. As Mystìc is a known sock of Lahiru_k, this makes Arsath a known sock of him too. Sumoeagle179 20:26, 16 October 2007 (UTC)
 * New evidence on User:Arsath

I'm still looking through behavioral evidence with mixed results. To wit, there are a few indications of similar misuse of English words, but it's not yet clear to me that this constitutes enough commonality to indicate they are the same person. I'm still looking through behavioral evidence like that, although I'm still uncertain about how much, if any of that, is due to a common first language; there are some common errors among those with the same first language. There's still the prior checkuser result, of course.--chaser - t 22:48, 19 October 2007 (UTC)
 * Misusing "bias": Netmonger "article so it is not bias"  "...are bias reports"; Lahiru k  "Are those bias?"
 * Misusing "advice": Netmonger "advices"; Lahiru k  "advices"

User:Netmonger blocked indef by User:FayssalF User:Lahiru k blocked indef by User:FayssalF User:Kaushini blocked indef by User:Haemo user:Arsath blocked indef by User:Chaser
 * Conclusions


 * Enough of this. Lahiru k has been using a bunch of sockpuppets, including Snsudharsan, Arsath, Mystic, and Netmonger. All of this has been confirmed by Checkuser or other IP evidence.
 * There is no compelling evidence that Snowolfd4 and Iwazaki are sockpuppets of Lahiru k, and given the number of Checkuser requests that have been run (including Requests_for_checkuser/Case/Snowolfd4, which found that Snowolfd4 and Iwazaki are unrelated to each other, and Requests for checkuser/Case/Lahiru k, which found that Snowolfd4 was unrelated to Lahiru k), there's strong reason to think that they aren't sockpuppets. --Akhilleus (talk) 17:51, 19 October 2007 (UTC)
 * This seems straightforward enough to me, but User:Chaser has asked me to unarchive this case, so I have. --Akhilleus (talk) 18:24, 19 October 2007 (UTC)
 * Re-archiving. Endorse current results of case. Not much new is going to be decided here. RyanGerbil10 (C-Town)
 * Thanks, Ryan. There's a relevant review statement at ANI .--chaser - t 01:27, 22 October 2007 (UTC)