Wikipedia:Sockpuppet investigations/Imbris/Archive

Imbris

Imbris (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Report date November 16 2009, 18:14 (UTC)

Suspected sockpuppets

• Bugoslav (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Evidence submitted by Spellcast

Bugoslav hit my radar after I saw some reverts on Coat of arms of Croatia. I suspect that account might've been used to breach Imbris' 1RR sanction. Their edit summaries have much of the same syntax such as:

• "(1)" or "(2)": [1][2]
• "has no place in the": [3][4][5]
• "personal opinion of": [6][7]
• "common practice": [8][9]
• "Not true": [10][11][12]
• "not some": [13][14][15]
• " + ": [16][17][18][19]
• "User:''name''": [20][21][22]
• "See:": [23][24][25]
• "btw": [26][27][28]
• Brackets: [29][30][31]

On Commons, Bugoslav has reverted to file versions that Imbris (or his blocked sock) has edited such as File:Flag of the Kingdom of Croatia.svg, File:Flag of SR Croatia.svg, File:Presidential Flag of the Republic of Croatia.jpg, File:Coat of arms of Croatia.svg, File:Rb-map-hr.png, File:SR Croatia coa.png, and File:Flag of Croatia Ustasa.svg. As well as reverting to his version, Bugoslav has edited the same files such as File:Naval Jack of Slovenia.svg, File:Coat of Arms of Slovenia.svg, File:Nuvola Slovenian flag.svg, File:Standard of the President of Slovenia.svg, File:Flag of Slovenia (bordered).svg, File:Flag of Krain.svg, and File:Civil Ensign of Slovenia.svg

Their edits never overlap. Even when they edit on the same day, one account is always dormant while the other is active. Initially, I thought this might've been a coincidence, but the more evidence I came across, the harder it was to believe this was a massive coincidence between two unrelated people.

If there's no matching IPs, I ask the CU to take geolocation into account. I've come across socks whose IPs may not look the same, but have been used by the same sock or meatpuppets. For example, 93.136.190.231, 78.3.190.197, 83.131.247.13, 89.164.138.177, and 89.164.222.130 look different, but they've undoubtedly been used by the same sock or meatpuppets. The first three are from the same ISP and the last two are from a different one, but they all geolocate to the same place. (Those IPs are not part of this SSP report, I'm just saying that geolocation may be a factor in helping determine a result). Thanks, Spellcast (talk) 18:14, 16 November 2009 (UTC)

Comments by accused parties See Defending yourself against claims.

Comments by other users

CheckUser requests

Checkuser request – code letter: A (Arbcom ban/sanction evasion )

Current status – Completed: Reviewed by a Checkuser, results and comments are below.    Requested by Spellcast (talk) 18:14, 16 November 2009 (UTC)

•  Clerk endorsed per strong behavioral evidence presented above. NW (Talk) 21:30, 16 November 2009 (UTC)

Clerk, patrolling admin and checkuser comments;

 Confirmed J.delanoy^gabs_adds 17:56, 18 November 2009 (UTC)

Conclusions

This case has been marked as closed. It has been archived automatically.

Blocked User:Bugoslav and User:Imbris indefinitely. Clerk please tag and bag. Thanks. Valley2city^‽ 18:08, 18 November 2009 (UTC)

---