CheckUser is a last resort for difficult cases, due to the effort involved, difficulty of interpretation of results and privacy issues raised. Use other methods first.
Obvious sockpuppets may be treated as such without using CheckUser.
DO NOT list non-disruptive "throwaway" accounts that only have a few edits.
Data is kept for 90 days so we cannot compare against accounts that have not edited earlier.
Block evasion: may be listed where the problem is ongoing.
Routine 3RR violations: do not list unless there is:
(a) an ongoing problem,
(b) reasonable doubt as to whether sockpuppets are being used, and
(c) disruption of editing that cannot be otherwise addressed.
Vandalism: only for ongoing serious vandalism.
Vote fraud: only if:
(a) there is reasonable doubt about the validity of votes,
(b) the vote or discussion has closed, and
(c) the possible sockpuppet votes affect the outcome of the vote.
Provide a link to the closed vote or discussion.
Procedure
DO NOT post long discussions about the merits of the check. If a compact, reasonable request, with the necessary diffs, cannot be made, then post it on WN:ALERT.
Burnsboyamazing is already globally locked for cross-wiki vandalism. I suspect the IP accounts are both sockpuppets at least of each other and likely of Burnsboy as well.
Both of the IP accounts are posting similarly-styled, nonsensical vandalism[1], both IPs are sourced from the same Canadian town, and all three accounts have posted content about that town.
