Wikipedia:Requests for checkuser/Case/Cplot

{{rfcu box|case=Cplot|filed=04:55, March 15, 2007 (UTC)}}

• {{checkuser|Cplot}}
• {{checkuser|Guerillamarketing}}

• Code Letter: F

Used to harass user [http://en.wikipedia.org/w/index.php?title=User_talk:Mobile_01&diff=prev&oldid=115049484 here]

Reference to espionage, MONGO and Morton_devonshire smells like Cplot. --Tbeatty 04:59, 15 March 2007 (UTC)

:{{clerknote}} Merged from Wikipedia:Requests for checkuser/Case/Guerillamarketing. – Luna Santin (talk) 05:04, 15 March 2007 (UTC)

{{inconclusive}} Cplot has made no recent edits. The Uninvited Co., Inc. 21:26, 21 March 2007 (UTC)

• {{checkuser|Cplot}}
• {{checkuser|FuitOfTheLoon}}
• {{checkuser|AnAppleADay}}
• {{checkuser|WhenWeFall}}
• {{checkuser|GangOf4}}
• {{checkuser|2IfByC}}
• {{checkuser|OneForThe$}}
• {{checkuser|LivingYears}}
• {{checkuser|GummoM}}
• {{checkuser|ZeppoM}}
• {{checkuser|ChicoM}}
• {{checkuser|HarpoM}}

{{clerknote}} This is a crosspost from Special:Log/block; they were {{confirmed}} by Mackensen - see block logs. Daniel.Bryant ^{[ T · C ]} 03:24, 4 January 2007 (UTC)

=== Cplot 6.0 ===

{{rfcu box|case=Cplot|filed=09:45, 2 January 2007 (UTC)}}

• {{checkuser|Cplot}}
• {{checkuser|CplotArbComSock}}
• {{checkuser|Waterboarder}}
• {{checkuser|TheNameGame}}
• {{checkuser|Interrogation}}
• {{checkuser|TheRepoman}}
• {{checkuser|NotYetFree}}
• {{checkuser|TheFalseFlag}}
• {{checkuser|TheStars&BarsMakeAPerfectPrison}}
• {{checkuser|LazyMuthaFucka}}
• {{checkuser|ShakItOnDown}}
• {{checkuser|BreathingApparatus}}
• {{checkuser|Underdogs}}
• {{checkuser|PissOnYourGrave}}
• {{checkuser|WhatThePoPosHate}}
• {{checkuser|Bullets&Love}}
• {{checkuser|WeAreTheOnes}}
• {{checkuser|"Head" of state}}
• {{checkuser|Mind fuck}}
• {{checkuser|ThisIsWhereItEnds}}
• {{checkuser|WarOnDrugs}}
• {{checkuser|USDHSUberAlles}}
• {{checkuser|USCIAUberAlles?...}}
• {{checkuser|USFEMAUberAlles???...}}
• {{checkuser|LoveIsDaShit}}
• {{checkuser|OurFavoriteShop}}
• {{checkuser|ShoutToTheTop}}
• {{checkuser|YouCanBombTheWorldToPiecesButYouCantBombItIntoPeace}}
• {{checkuser|I'm just gettin' started}}
• {{checkuser|MyDreamTeam}}
• {{checkuser|HoleInTheBucket}}
• {{checkuser|Purgeusdhs}}, based on [http://en.wikipedia.org/w/index.php?title=Wikipedia_talk:WikiProject_Deletion&diff=next&oldid=95943207 this].
• Code letter: A, C, F

Latest dump from Wikipedia:Suspected sock puppets/Cplot. These puppets have appeared since the last checkuser run on the 28th of December or haven't been checkusered yet to the best of my knowledge. MER-C 09:45, 2 January 2007 (UTC)

{{Confirmed}} all except the last one (Purgeusdhs). Also confirm anything from the last twenty minutes or so in my block log. A number of these I already checked and blocked over the last few weeks. Mackensen (talk) 03:15, 3 January 2007 (UTC)

:{{clerknote}} for documentation's sake, here is the list of usernames blocked by Mackensen per above:-

:*{{checkuser|Norman Black}}

:*{{checkuser|Another$AnotherDay}}

:*{{checkuser|PieceOPeace}}

:*{{checkuser|CrimeToBeBrokeInAmerica}}

:*{{checkuser|CaughtWithoutAnUmbrella}}

:The IP's used are not listed. Daniel.Bryant ^{[ T · C ]} 03:24, 3 January 2007 (UTC)

=== Cplot ===

• {{checkuser|You can't always get whatyou want}}
• {{checkuser|WhoaNowWhyAreYouSayingThat}}
• {{checkuser|ImRickJamesBeeatch}}
• {{checkuser|ClaytonBigsbyCan'tSee}}

He's baaaaaaack (or did he never really leave?).—Ryūlóng (竜龍) 08:52, 23 December 2006 (UTC)

{{takenote}} This is not an IP check. Please put it on the request page for Cplot, and relist it in pending cases. Essjay (Talk) 05:42, 24 December 2006 (UTC)

:These are all {{confirmed}} also. They were all part of the latest attack, the accounts other admins blocked before me, which I think I stopped with a timely range block when it was happening. Dmcdevit·t 07:45, December 24, 2006

::{{clerknote}} moved per Essjay, and archived immediately because there is no point on relisting it on the main RFCU page. Daniel.Bryant ^{[ T · C ]} 11:15, 24 December 2006 (UTC)

=== Cplot 4 ===

• {{checkuser|Cplot}}

• {{checkuser|What a waste}}
• {{checkuser|What is their deal}}
• {{checkuser|Garbage band}}
• {{checkuser|OhTheFutility}}
• Code letter: ACF

The deleted edits at these sockpuppets' talk pages give them away. I hope they didn't slip through the cracks. MER-C 09:02, 16 December 2006 (UTC)

Added {{checkuser|OhTheFutility}}, [http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_checkuser/Case/Cplot&diff=prev&oldid=94678279 declining this request while impersonating Essjay] and [http://en.wikipedia.org/w/index.php?title=Wikipedia:Village_pump_%28news%29&diff=prev&oldid=94678431 this]. MER-C 09:29, 16 December 2006 (UTC)

{{Confirmed}}. Essjay (Talk) 23:38, 16 December 2006 (UTC)

=== Cplot 3rd Request ===

• {{checkuser|Cplot}}

• {{checkuser|SavoirFaireIsEverywhere}}
• {{checkuser|Aren't we all brothers}}
• {{checkuser|LittlePlasticCastle}}
• {{checkuser|ThisLandIsOurLand}}

• Code letter: ACF

User:SavoirFaireIsEverywhere was created on December 2nd, and made their first edit to their own user page. [http://en.wikipedia.org/w/index.php?title=User:SavoirFaireIsEverywhere&diff=prev&oldid=91678942] This matches a pattern seen with other Cplot socks. The user also made an edit [http://en.wikipedia.org/w/index.php?title=Talk:Helmut_Jahn&diff=prev&oldid=91684432] on Talk:Helmut Jahn about something relating to Chicago where Cplot apparently is from. Then, on December 8th, the user came on [http://en.wikipedia.org/w/index.php?title=September_11%2C_2001_attacks&diff=prev&oldid=92946749] the September 11, 2001 attacks, with an edit summary "see length ongoing discussion on talk page and throughout Wikipedia administrative pages" and made some more edits that are characteristic of Cplot socks. (e.g. [http://en.wikipedia.org/wiki/Special:Contributions/HowAboutThisNameThen] [http://en.wikipedia.org/wiki/Special:Contributions/WhosYourDaddyReally] [http://en.wikipedia.org/wiki/Special:Contributions/RandCorpIsAmerica]) I'm fairly sure this is another Cplot sock, but since I'm involved with those pages, I would like to be more sure of it before doing a block (or better yet, someone uninvolved do the block). --Aude (talk) 16:22, 13 December 2006 (UTC)

:Added another cplot sock per notice by Mackensen on ANI. Syrthiss 18:31, 14 December 2006 (UTC)

::And another. Gonna be a busy day. Tony Fox (arf!) 18:56, 14 December 2006 (UTC)

{{confirmed}}. Also:

• {{vandal|EveryoneDeservesMusic}}
• {{vandal|Ghetto Manifesto}}
• {{vandal|Party Music}}
• {{vandal|Don't Start Nothin' Won't Be Nothin'}}
• {{vandal|WaitingForTheGreatLeapForward}}
• {{vandal|DrugOfTheNation}}

I've changed some of Mackensen's previous anon-only IP blocks to full blocks, since he's been registering accounts on other IPs and using them on blocked ones. Dmcdevit·t 22:36, 14 December 2006 (UTC)

:Thank you. --Aude (talk) 22:43, 14 December 2006 (UTC)

=== Cplot 2nd Request ===

• {{checkuser|Cplot}}

• {{checkuser|ClownsAreCowards}}
• {{checkuser|SoColdTonight}}
• {{checkuser|HitTheRoad}}
• Code letter: ACF

Also these (from the Cplot sockpuppet case):

• {{checkuser|VIUlyanov}}
• {{checkuser|SoLittleTime}} - Obvious sockpuppet from contribs and language
• {{checkuser|ScaredOfClowns}} - Same massive copy/paste post as previous socks
• {{checkuser|MyFavoriteMutiny}} - Another copy/paste
• {{checkuser|GenericClownTaunt}} - Found from a copy/paste signature
• {{checkuser|RespectableWikiEditor}} - Found from looking at frequently posted pages
• {{checkuser|EvenMoreRespectableWikiEditor}} - Found from looking at frequently posted pages
• {{checkuser|GiveItAFewDays}} - Found from looking at frequently posted pages
• {{checkuser|ClownsAreCowards}} - In the new user log
• {{checkuser|WhosYourDaddyReally}}
• {{checkuser|ToTheTeet}}
• {{checkuser|RandCorpIsAmerica}}
• {{checkuser|SoColdTonight}} - Done after range blocks of 68.30.x.x and 70.8.x.x
• {{checkuser|Kang and Kodos}} - Copy/paste "clowns" diatribe
• {{checkuser|Novus Ordo Seculorum}} - more "clowns" crap
• {{checkuser|HowAboutThisNameThen}} - From deleted page Wikipedia:Clowns
• {{checkuser|WhyAllThisAnimosity}} - clowns and conspiracy theories
• {{checkuser|TheIlluminatiAreWatching}} - Attack only activity related to Cplot issues
• {{checkuser|WhereHaveAllTheFlowersGone}} more of the same
• {{checkuser|DuckAndCover}}

See Tbeatty 03:25, 7 December 2006 (UTC)

We need an IP range to block. --Tbeatty 00:27, 7 December 2006 (UTC)

See WP:ANI#Now_I_know_where_all_those_missing_socks_went. ClownsAreCowards is a new account created after the range blocks. User might be on another Sprint PCS or other ISP range now? Feel free to e-mail me, if this needs to be discussed privately. --Aude (talk) 22:28, 4 December 2006 (UTC)

{{TakeNote}}. I'm working on it. Please stand by. Mackensen (talk) 00:32, 8 December 2006 (UTC)

:Take your time. The block on those two IP ranges seems to help (another 24+ hours for it), though not 100%. There may be some other ranges we are missing, that need to be blocked if the problem persists. Range blocks are regrettable, but needed if the ISP doesn't work with us. Given Essjay's previous reply, I don't think there are many other users on those ranges. Any advice on all this would most appreciated. Thank you for assisting. --Aude (talk) 00:42, 8 December 2006 (UTC)

Without going into all the gory details (and my, are they gory), this fellow has availed himself of over a half-dozen different ISPs within the greater Chicago area, so actually nailing him will prove complicated. I concur in the range-blocks of 68.30.0.0/16 and 70.8.0.0/16; if these have lapsed they need to be re-imposed immediately. In addition, I have pinpointed a couple Illinois Comcast addresses which I'll be hitting with lengthy disruption blocks. There are a couple other public IPs that would cause too much collateral damage. Mackensen (talk) 00:55, 8 December 2006 (UTC)

:These probably include Illinois Century Networks and the Comcast IP listed on Wikipedia:Suspected sock puppets/Cplot. Cplot seemed to come out in force last night when the range blocks lapsed. Whatever you judge best to do is fine with me. Thank you for working on this. Most appreciated. --Aude (talk) 01:10, 8 December 2006 (UTC)

• {{checkuser|Cplot}}
• {{checkip|70.8.171.35}} [http://www.dnsstuff.com/tools/whois.ch?ip=70.8.171.35]
• {{checkip|70.8.159.158}}
• {{checkip|70.8.151.103}}
• {{checkip|70.8.139.192}}
• {{checkip|70.8.132.79}}
• {{checkip|70.8.91.12}}
• {{checkip|70.8.56.126}}
• {{checkip|68.30.87.114}} - [http://www.dnsstuff.com/tools/whois.ch?ip=68.30.87.114]
• {{checkip|68.30.26.171}}
• {{checkip|68.30.65.203}}
• {{checkip|68.30.46.228}}
• {{checkip|68.30.31.232}}
• {{checkip|68.30.170.7}}
• others from same ISP

• Code letter: CF

User:Cplot has been indefinitely blocked for trolling, personal attacks, incivility, and disruption on articles relating to the September 11, 2001 attacks. See WP:ANI#Block review requeste for details. These IPs listed have been editing various policy and project pages, such as the [http://en.wikipedia.org/w/index.php?title=Wikipedia:Help_desk&diff=90986621&oldid=90984616 Help Desk] and [http://en.wikipedia.org/w/index.php?title=Wikipedia:Village_pump_%28news%29&diff=prev&oldid=91285097 Village pump (news)], and Wikipedia:Village_pump_%28miscellaneous%29#US_Authorities_on_Wikipedia.3F Village pump (miscellaneous) and targeting user talk pages. [http://en.wikipedia.org/w/index.php?title=User_talk%3AZoe&diff=91285688&oldid=91265162]

The IPs come from Sprint PCS. I think perhaps the user has sprint wireless broadband, where the IP changes each time one logs on the Internet. It only takes a minute to log off and on again, so the user can repeatedly do that and evade blocks. As a result, Talk:September 11, 2001 attacks has been semi-protected.

See also: Wikipedia:Suspected_sock_puppets#User:Cplot

While blocking may not be the answer, I'd like this pursued further, such as on WP:ABUSE, if this is Cplot evading his/her indef block. --Aude (talk) 01:52, 1 December 2006 (UTC)

I have blocked a few:

• {{checkip|70.8.38.190}}
• {{checkip|70.8.138.11}}
• {{checkip|68.30.82.0}}
• {{checkip|68.30.65.203}}

But, the user comes back after a couple minutes with a new IP. --Aude (talk) 02:16, 1 December 2006 (UTC)

{{TakeNote}} Cplot is definately in the 68.30 /16, there is no sign of him in 70.8.0.0/16. User:HowAboutThisNameThen, who was blocked yesterday, is also in that /16. The good news is, there isn't much of anyone else in the /16's, so if they are creating problems, an anon-only block of either or both (keep it short) would be fine. Essjay (Talk) 09:30, 2 December 2006 (UTC)

:Thank you.--MONGO 09:35, 2 December 2006 (UTC)