Wikipedia:Sockpuppet investigations/RMS52

RMS52

RMS52 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Populated account categories: confirmed

For archived investigations, see Wikipedia:Sockpuppet investigations/RMS52/Archive.

08 October 2015

– This SPI case is closed and will be archived shortly by an SPI clerk or checkuser.

Suspected sockpuppets

• HJrider (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• ReflinkerMS (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 146.199.5.176 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 31.84.4.79 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))

• User compare report Auto-generated every hour.
• Editor interaction utility

Logging account socks HJrider and ReflinkerMS, confirmed socks of sock master per tags here and here respectively. This diff shows that the IP editor is  Likely the sock master, due to an obsession with a blocked user (block log) from weeks ago, relates to the sock master's kiss-up and falsely professional behavior. Very similar to the sock master's editing styles - see here, here, and here. Since the IP editor seems to claim they received link on their talk page "I saw RMS52's link on my talk page and now I know the whole story, be smart, be stale.", and their talk page is empty, it appears to imply that they may have other lingering accounts. Sleepers may need to be searched for. JustBerry (talk) 01:24, 8 October 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Comment:  Added User:31.84.4.79 per this diff. Relates to sock master in bold, controversial, disruptive edits with 'fresh' edit summaries. Relates to other suspected IP sock in (a) both geo-locate to UK, Europe (b) both edited only my user spaces within a few days. --JustBerry (talk) 02:13, 8 October 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

• Both accounts are already blocked, and the IPs are not active any more. Closing. Vanjagenije (talk) 21:56, 8 October 2015 (UTC)

---

10 October 2015

– This SPI case is closed and will be archived shortly by an SPI clerk or checkuser.

Suspected sockpuppets

• 31.87.118.245 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))

• User compare report Auto-generated every hour.
• Editor interaction utility

Vandalization of my user space again here by IP geo-locating to UK, Europe again. --JustBerry (talk) 03:11, 10 October 2015 (UTC) JustBerry (talk) 03:11, 10 October 2015 (UTC)

 Comment: Also, the IP's only contribution is vandalism to my user page here again. Also, they choose to vandalize subpages on my user space, rather than the main user page, so that the changes got undetected until someone finds it. --JustBerry (talk) 03:15, 10 October 2015 (UTC)

 Comment: Taking an educated guess based on the ISP information provided by the IP addresses themselves, 31.x seems to be an IP from a mobile network versus 146.x, which seems to be an IP from a personal (or public) network of some sort. --JustBerry (talk) 03:21, 10 October 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

If anyone needs the 'other' IP I used to vandalize, please request it and I will be happy to show it to you. 195.99.50.131 (talk) 08:09, 10 October 2015 (UTC)

I don't know who the heck the vandal IP's are, promise. 195.99.50.131 (talk) 08:11, 10 October 2015 (UTC)

Wait a minute, how is ReflinkerMS a sock? The account looks like it is a legitimate alternative account. 195.99.50.131 (talk) 08:14, 10 October 2015 (UTC)

Ok, here you go. User talk:213.205.253.171 195.99.50.131 (talk) 08:34, 10 October 2015 (UTC)

Here, my IP is located here. So, now we will look at RMS52'S block log and see if he has socked any IP's in the past, shall we? Yes, he has. Now, lets find out where 194.224.188.90 is located. it is located in Spain. RMS52 claimed that he lived in the UK. Maybe he learned English as a 2nd language? Let's find some more related IP'S. Now, where is 217.39.23.1 located? is located in London. In fact, it is probably many of throw away IP's that connect to the same place. Pinging User:RMS52 so maybe he can pose as an IP and we can expose location and reveal the truth of this whole incident after all. I'm not considering creating an account, I'm here to help. For a while. But you will thank me for it.

Many thanks, Anonymous

195.99.50.131 (talk) 08:46, 10 October 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

• Closing, 6 hours later on a mobile ISP isn't worth blocking anymore. Callanecc (talk • contribs • logs) 03:32, 10 October 2015 (UTC)

---