Wikipedia:Sockpuppet investigations/Samsamcat/Archive

;Suspected sockpuppets

• {{checkip|1=207.34.115.71}}

• [http://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=Samsamcat User compare report] Auto-generated every hour.
• [http://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility]

A string of vandalism ([https://en.wikipedia.org/w/index.php?title=User%3AIvanvector&diff=649611211&oldid=648524720], [https://en.wikipedia.org/w/index.php?title=User%3AIvanvector&diff=649613168&oldid=649611363]) on my user page, very similar to vulgar trolling coming my way off-wiki. Compare [https://en.wikipedia.org/w/index.php?title=User:Ivanvector&diff=next&oldid=649611464 this] with [https://twitter.com/sambucacat1/status/572314391812558849 this tweet] from Twitter user "Sambucacat1"; I can provide screencap if tweet is deleted. I suspect the sockmaster is upset with fairly plain edits I made to Ezra Levant (Canada's Rush Limbaugh) and Naheed Nenshi (Mayor of Calgary, Alberta); Twitter user is a Nenshi critic; IP geolocates to Calgary. Requesting checkuser to confirm and check for sleepers. Thanks. Ivanvector (talk) 00:51, 3 March 2015 (UTC)

:Updated: added another IP on same ISP in Calgary vandalising Nenshi's article. Ivanvector (talk) 00:58, 3 March 2015 (UTC)

:{{yo|Callanecc}} Thanks, I'm not very familiar with the ins and outs of checkuser, I didn't consider that the request could possibly reveal the user's IP. Although I suppose the same can be said of any SPI involving IPs on the basis of a behavioural link. Ivanvector (talk) 19:40, 4 March 2015 (UTC)

:I've removed the second IP. The two IPs have overlapping edits and it seems likely that the second IP was simply drive-by vandalism by an unrelated user.

:Since the IP who was vandalising my page has been given a long block I considered withdrawing this as moot, since Samsamcat and the anon IP have very little in common as far as their editing history, other than both having revdel'd contributions in their history and having been blocked for it, but I can't get past the link established by the tweet. Here's a more descriptive timeline:

:#[https://en.wikipedia.org/w/index.php?title=Ezra_Levant&diff=648617276&oldid=647842980 06:53, 24 Feb]: Samsamcat edits Ezra Levant.

:#[https://en.wikipedia.org/w/index.php?title=Ezra_Levant&diff=prev&oldid=648641033 10:43, 24 Feb]: I tweak the edit, removing promotional language. I had been watching the page, I don't remember why.

:#[https://twitter.com/sambucacat1/status/572314391812558849 03:14, 2 Mar] (by Twitter's reckoning): "@sambucacat1" has some unsavory comments for me on Twitter, and then blocks me.

:#[https://en.wikipedia.org/w/index.php?title=Ezra_Levant&diff=649508784&oldid=649430715 03:52, 2 Mar] (38 minutes later): Samsamcat edits Ezra Levant again, their first edit since the one a week prior that I had tweaked.

:#[https://en.wikipedia.org/w/index.php?title=Ezra_Levant&diff=649598769&oldid=649515313 17:13, 2 Mar]: Samsamcat's English is not very good, and I revert their contribution, then incorporate parts that fit the article over a couple subsequent edits.

:#[https://en.wikipedia.org/w/index.php?title=User%3AIvanvector&diff=649613168&oldid=648524720 18:46, 2 Mar] (93 minutes later): an IP with a long block history, and whose English is also not very good, begins a half-hour campaign of vandalism on my user page, ending in the address being blocked for six months. The vandalism is highly reminiscent of the earlier Twitter comments from sambucacat1, whose user name I've already remarked is quite similar to our Samsamcat, who was not active during that time.

:So I think that this is a user who attempts to hide vandalism by editing while logged out, and judging by the IP's talk page may have been doing so for years. Or maybe it's just a series of very specific coincidences. Ivanvector (talk) 20:23, 4 March 2015 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
TOO OBVIOUS FOR WORDS. {{Duck}} The "liberal douchebag" simply gives it away. 68.237.140.93 (talk) 19:43, 19 March 2015 (UTC)

I agree. In fact, {{Megaphoneduck}}. 69.195.52.97 (talk) 20:52, 20 March 2015 (UTC)

• {{Declined}} and sent to the main list - CheckUsers will almost never publicly connect an account with an IP and there doesn't look to be a history of accounts vandalising the page. Callanecc (talk • contribs • logs) 11:50, 3 March 2015 (UTC)

{{clerk-note}} A large part of this SPI hinges on whether the master and the Twitter account are the same person. I'm unwilling to conclude that. Another aspect is the English of the IP and that of the master. The IP's English is ridiculous. The master's English is much better - certainly not elegant, probably not even very well-educated, but also possibly more hasty and shorthandish than anything else. The master has clearly deserved more blocks than he's received (the last - and only - two were over a year ago). Earlier this month, he attacked another editor but was not blocked for it, even though it evinces a continuing pattern of misbehavior in this area. I'd block him myself but it's not recent enough for that. He says he's retired, and his editing has certainly wound down since posting that on his user page, but retirement claims are often worthless, particularly when made in anger. I'm closing this with no action against the account for sock puppetry, but if he continues to be disruptive and attack other editors, I would consider a long-to-indefinite block on those bases.--Bbb23 (talk) 15:38, 22 March 2015 (UTC)

----