Wikipedia:Requests for checkuser/Case/Serafin

Add links
From Wikipedia, the free encyclopedia
If you are creating a new request about this user, please add it to the top of the page, above this notice. Don't forget to add
{{Wikipedia:Requests for checkuser/Case/Serafin}}
to the checkuser page here. Previous requests (shown below), and this box, will be automatically hidden on Requests for checkuser (but will still appear here).
The following discussion is preserved as an archive of a Request for checkuser. Please do not modify it.


Serafin (4th)[edit]

request links: main • edit • links • history • watch
Filed: 00:56, 19 September 2008(UTC)
  • Code letter: F

POV warrior on Recovered Territories, Nicolaus Copernicus and Bureaucracy, returns on a daily basis with socks registered several weeks prior. Acroterion (talk) 00:56, 19 September 2008 (UTC)[reply]

 Clerk assistance requested: ... I'm confused, does this belong in the upper section? What's being asked for here, a range block? Thanks. ++Lar: t/c 22:14, 22 September 2008 (UTC)[reply]
I was thinking in terms of the standard IP sweep used for chronic autoconfirmed account sockpuppeteers like Tile Join. However, it is becoming apparent that Serafin has an extensive supply of socks in reserve, so it might need to be moved up the page. Acroterion (talk) 22:51, 22 September 2008 (UTC)[reply]
In view of the apparent large number of sleeper socks, I've moved this out of RFCU/IP into the main section. Acroterion (talk) 03:12, 23 September 2008 (UTC)[reply]

Results[edit]

OK, lots to report. First, Serafin itself is too  Stale to directly connect to these accounts. But the listed accounts, all of them, correlate strongly to each other. If they're redlinked they still need tagging though. Further, they correlate to the following ones too,

New ones I found (all blocked and tagged):

Ones that (I think) Acroterion already found, and tagged, which are  Confirmed are related to each other and above, but which weren't listed above. However if a clerk could check that these are properly tagged that would be great (I went on whether the link is red or blue guessing who did what):

Ones that I think were found by others (maybe Gwermol?) in previous sweeps but which weren't tagged so I tagged them.

Some of these IDs are coming from a public library, which needs to be kept a watch on but which we probably can't block, there are good IP edits and good users there.

Some of these are coming from a /23 range which also has a few good users on it (we are stretching the definition of "good" here, 2 of the 3 are mostly vandalism only, but not correlated to this bunch), which I chose not to rangeblock, for now.

That's it. ++Lar: t/c 01:16, 24 September 2008 (UTC)[reply]

Holy crap - thanks, and thanks to Ckatz, Gwernol, Oxymoron83, C Fred and others who blocked and tagged. Acroterion (talk) 02:01, 24 September 2008 (UTC)[reply]


Serafin (3rd)[edit]

request links: main • edit • links • history • watch
Filed: 12:24, 21 February 2007 (UTC)
  • Code letter: F [1]

no Declined. Mackensen (talk) 22:00, 5 April 2007 (UTC)[reply]

Serafin (2nd)[edit]

request links: main • edit • links • history • watch
Filed: 12:24, 21 February 2007 (UTC)
  • Code letter: F [2]

Wiatr's sole purpose is to add language condemning the Holocaust to the article Germany which emphasizes the losses in Poland and the USSR [3], similar to Serafin's [4]. His use of the phrase "reverted vandal" as an edit summary is also consistent with Serafin's style: [5]. Blacha, meanwhile, has made an edit at Recovered Territories, [6], which clearly resembles Serafin's edits [7] (note the same misspelling of "occupied"). Heimstern Läufer 03:48, 26 February 2007 (UTC)[reply]

information Note: Serafin does not appear related to these two users, but they are sockpuppets of each other. Serafin does have a sockpuppet, however, User:Snieg, which appears to have already been uncovered. Essjay (Talk) 01:37, 27 February 2007 (UTC)[reply]

Thank you. Hmm ... I was wondering if you could do a further check including another account. You see, Serafin has a main IP (131.104.218.46 (talk+ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · block log · cross-wiki contribs · CheckUser (log))) and innumerable others from various countries (Japan, Brazil and China were among them according to WHOIS). Wiatr was used after Serafin and his main IP were blocked few days ago, which means that if Serafin wanted to edit, he had to use one of those innumerable others. Indeed, he was using 202.134.182.201 and 206.117.32.31 on that day. Any CheckUser was practically doomed to failure.
But there's still a chance of conclusive discovery if Deszcz (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · block log · CA · CheckUser(log) · investigate · cuwiki) is taken into account. Granted, that user was already blocked as obvious sockpuppet of Serafin but whoever was behind Deszcz must also have been behind Wiatr:
Apart from their similar edits, they've both Polish names ("Deszcz" means "Rain" and "Wiatr" means "Wind"). Wiatr and Deszcz were created days before they edited. Deszcz edited when Serafin was blocked and after Deszcz was blocked, Wiatr was used. This order is even mirrored in their time of creation. Wiatr was created just one minute (yes, you heard right: one minute) after Deszcz was created. That can't be a coincidence. The person behind Deszcz is also behind Wiatr. And as CheckUser has now revealed, the person behind Wiatr is also the person behind Blacha (Polish for "Sheet metal"). If CheckUser can prove that Deszcz is no other than Serafin, then that person will finally have a face.
If CheckUser can track IPs used for edits with an account that are two weeks old, then Deszcz's February 14's edits may show an IP used by Serafin, possibly even his main IP. Then Wiatr and Blacha would have been proven as sockpuppets of Serafin. Sciurinæ 14:47, 27 February 2007 (UTC)[reply]

information Note: There is no connection between Serafin and Deszcz, but there is between Deszcz and Wiatr. There are two different countries involved, and neither of them are in the same hemisphere as the ones you've mentioned. I'm afraid you're just going to have to accept that Serafin is not related to these other acounts. Essjay (Talk) 14:57, 27 February 2007 (UTC)[reply]

No problem. It was just that this chain of accounts clearly belonged together in my eyes and the choice of article, view and language of Deszcz shown in his first edit had already reminded me of Serafin. Clearly he has something to do with him. de:User:Wiatr was also the name of a supposed sockpuppet of Serafin in the German wikipedia. As well as that, Snieg, the CheckUser-proven puppet in this wikipedia, had also been a supposed sockpuppet of Serafin (de:User:Snieg) in the German wikipedia, too. In addition to that, Snieg in the German wikipedia was created on January 20 (days before Snieg made its first edit in the English wikipedia), just less than three hours before Wiatr and Deszcz were created in the English wikipedia. And some minutes before and after Deszcz edited on February 14, Serafin edited with Special:Contributions/131.104.218.46, so I thought Deszcz used that IP. Maybe he didn't or maybe he did but CheckUser couldn't track 131.104.218.46 down to Serafin any longer because some weeks had passed since Serafin last used this IP. At any rate, I'm not convinced that they're unrelated even though, yes, the locations of their IPs are.
I had thought that one of his IPs he was using with those accounts was from India. Because I can only remember two times when he was using an IP from India: the day he created the accounts, 58.68.39.229 was used, and the day Wiatr edited, 202.134.182.201 was in use, both from India and both without a doubt Serafin. India, however, is in the southern hemisphere, like the other countries I cited as examples, so you're not talking of India when you say it's in a different hemisphere than the ones I mentioned because I mentioned China, Brazil and Japan. But he also appears to have IPs from the northern hemisphere. 168.215.123.44 and 206.117.32.31 are from different states in the US and were used on February 23 and 26 respectively. Were those the different countries on the northern hemisphere you were talking of? Anyhow, they represent Serafin even if they aren't Serafin and Serafin doesn't appear to mind being "misrepresented" by them. My conclusion is what CheckUser help said, "An editing pattern match is the important thing; the IP match is really just extra evidence (or not)." Sciurinæ 23:53, 27 February 2007 (UTC)[reply]



Serafin[edit]

request links: main • edit • links • history • watch
Filed: 12:24, 21 February 2007 (UTC)
  • Code letter: E (twice)

Three-revert rule violations on Germany (edit | talk | history | protect | delete | links | watch | logs | views). Serafin (talk · contribs · deleted contribs · logs · filter log · block user · block log):

This was just case one, six reverts within 24h. It does not even include the four reverts in the following case two:

Notes He knows well about the 3RR, see for example Special:Contributions/Arudra.

He always tried to put in his sentence in this featured article without agreement of others and even without so much as an explanation by him on Talk:Germany.

Among other IPs and at least one other account, Snieg was also used to bypass Serafin's latest block. In fact, Serafin spent the whole month that he was supposed to be blocked editing, but no admin cared.

Snieg also appeared in the German wikipedia and was blocked indefinitely as sockpuppet of Aserafin (Aserafin was Serafin's main account in the German wikipedia until it got blocked indefinitely in late November 2006).

I did not know what to enter at "{{checkip|Related IP address, if any}}", so I've just entered Serafin's main IP, 131.104.218.46. But apart from that IP, he uses a myriad of others (only some of them are listed at Category:Wikipedia sockpuppets of Serafin and the corresponding report).

Sciurinæ 12:24, 21 February 2007 (UTC)[reply]

 Confirmed. Essjay (Talk) 13:10, 21 February 2007 (UTC)[reply]


The above discussion is preserved as an archive of the Request for checkuser. Please do not modify it.
Subsequent requests related to this user should be made above, in a new section.


Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/Case/Serafin&oldid=1138659024"