Massive disruption campaign and battleground behaviour in recent days at Talk:Robert Brokenshire, Talk:Dennis Hood (two South Australian MPs) and at [1]. As there is an Australian election just two weeks away, it would appear to be organised partisan campaigning for one of the two major parties. The accounts post in an interleaved fashion with each other and the IPs and make identical allegations against User:Timeshift9 and User:Frickeg (two WP:AUSPOL regulars), and all of them have only shown up since around Thursday.
The IPs are from two South Australian universities and a wifi hotspot in Adelaide - checkuser can't tell me any more about those than I can see myself but I've provided them in case they assist checkuser in their own unjumbling of this rather strange case. Orderinchaos 02:19, 8 August 2010 (UTC)
See Defending yourself against claims.
Clerk endorsed for a check on all the accounts above, please. Apart from Autorev, Maryogden and MileyFan1990 all the accounts are blocked, and the behavioural evidence linking those blocked accounts seems strong enough to justify a check (see the evidence submitted by Orderinchaos). Autorev, Maryogden and MileyFan1990 all have an established interest in Bob Day, and are linked more strongly to the blocked accounts by Autorev and MileyFan1990's involvement in Dennis Hood, and by the timing of the edits. All the accounts display familiarity with wiki-markup, have similar editing times along with similar areas of interest and there does appear to be evidence of an agenda of some nature against Timeshift9 and Frickeg. If CU could please establish whether Autorev, Maryogden and MileyFan1990 are linked to the other accounts and do a sleeper check, that would be appreciated. Per Wikipedia:CheckUser#IP information disclosure CU is not likely to be able to release any information about whether the IPs listed are connected to the accounts, however, it seems likely based on the behavioural evidence and geolocation data, it should also be noted that except from 203.122.223.121, all the IPs seem to be registered to an educational institution. In the end, it may be more desirable to leave the IPs to auto block. Regards, SpitfireTally-ho! 18:10, 13 August 2010 (UTC)
Confirmed
Unlikely
Confirmed ClemMacIntyre (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) = USydPolitics (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Likely ClemMacIntyre (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) = MileyFan1990 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
J.delanoygabsadds 03:38, 24 August 2010 (UTC)
Administrator note I've just blocked MileyFan1990 and Autorev. All the other accounts have been blocked previously. Nick-D (talk) 08:40, 24 August 2010 (UTC)
Both accounts are SPA. ID9.. created their user page with ((hi)) as did Moneyfizza. Both accounts are engaged in the same discussion thread (http://en.wikipedia.org/wiki/Talk:Labshare#Synthesis_problem) with the same point of view a nd Moneyfizza was created at 6:57 after ID9..'s last contribution at 6:30. WP:QUACK would seem to apply so checkuser not required. Fæ (talk) 07:07, 28 August 2010 (UTC)
Similarly the SPA Hardrockfan203 created shortly after Moneyfizza stopped contributing to the same talk page. Fæ (talk) 07:13, 28 August 2010 (UTC)
The SPA KevinDogg35 was active 6:35 to 6:50 (just before Moneyfizza was created) with similar edits. Fæ (talk) 07:52, 28 August 2010 (UTC)
Added a further 4 for consideration. Mostly SPA contributions with account creation and contribution timing dovetailing perfectly. WP:QUACK applies. Fæ (talk) 08:26, 28 August 2010 (UTC)
See Defending yourself against claims.
Continued serial SPA account contributions on the same talk page. QUACK applies. Fæ (talk) 14:16, 2 September 2010 (UTC)
See Defending yourself against claims.
TNXMan 18:28, 2 September 2010 (UTC)
Continued disruption of the same page by sequential SPA accounts - see Talk:Labshare. 'VladimirVaskyFan' is a deliberate disruptive doppelgänger name of another editor in the same discussion threads. Fæ (talk) 21:41, 7 September 2010 (UTC)
See Defending yourself against claims.
Possible Given relative geographic area. Behavior is the key here, I think. TNXMan 22:08, 7 September 2010 (UTC)
User has been editing Burnside Council and its talk page today. Nothing wrong with that. The strange thing is, this user has afterwards gone on a curious spree of userpage templating of a bunch of other accounts, every single one of which has exclusively edited the exact same article, in the same timeframe, as the page history makes very clear. (User:AECfan was the only one to have edited any other pages that I noticed). From the page history, I also noticed User:DemiNeesan was another "hub" of template-distribution, again to a slew of accounts (listed below that one) making edits in the same timeframe to the same article (though these users did same to have a few trivial edits to some other articles, mostly redirecting). User:ID982378353 was not tagged by either "hub" account, but did tag his/her own userpage with the exact same template both have been using, and, of course, has the same edit pattern. Quite frankly, I have absolutely no idea what is going on here, but it's a bizarre and massive enough pattern to throw a red flag for me. Might possibly be a large group of related users acting in concert off-wiki rather than sockpuppetry. Seems to have started in strings of minor edits after User:Gencouncil created the article yesterday. This might just be harmless, large group collaborative editing, but the manner of it seems to suggest a single person. Also notice on the article's history the large strings of minor edits, followed by one account abruptly dropping out entirely and another taking its place before repeating this process. Though not discernibly connected to the other accounts in terms of the template sprees, the originator's edits do follow the same pattern. Only the IPs and one or two probably unrelated passing users don't follow this pattern. It MIGHT have been more appropriate to list User:Gencouncil as the sockmaster, but User:Vote4Freedom seems to have directly connected himself/herself to the most other accounts. - Vianello (Talk) 03:53, 22 September 2010 (UTC) - Vianello (Talk) 03:53, 22 September 2010 (UTC)
See Defending yourself against claims.
These accounts all belong to MileyFan1990 (talk · contribs) and should be archived as such. The following are Confirmed and have been mass blocked:
The following are Likely based on checkuser evidence but at a glance don't appear to match behavioral patterns. They have not been blocked. Someone will need to take a closer look at them:
Hersfold (t/a/c) 04:54, 22 September 2010 (UTC)
Actually, correction - based on the difference in MO, this user may be someone else after all. They're still very likely the same user, and it looks like they were gunning for a block anyway, but it's not totally confirmed. Hersfold (t/a/c) 04:58, 22 September 2010 (UTC)
And sorry, missed one more - Paior (talk · contribs) is on a different ISP than all the rest, but is using an identically configured computer and is in the same geographical area. I'll call it Likely especially considering other Miley socks have appeared on that range (but less commonly). Hersfold (t/a/c) 05:14, 22 September 2010 (UTC)