Wikipedia:Sockpuppet investigations/DontSpreadMisinformationGuys/Archive

DontSpreadMisinformationGuys

DontSpreadMisinformationGuys (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

15 November 2021

Suspected sockpuppets

User98207252129 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: original case name)
98.207.252.129 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Striking similarities to a blocked IP (note the username and ip):

user description on userpage

ip vandalism

([1] [2] edits on same page by both ip and user) - AssumeGoodWraith (talk - AssumeGoodWraith (talk | contribs) 07:44, 15 November 2021 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Considering this edit summary and the identical edit pattern, 73.63.168.159 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log)) is also the same editor. Given their general CIR issues, I would suspect that the use of multiple IPs plus the registered account is accidental rather than purposeful. However, blatant bigotry plus competence issues is enough for me to feel that this editor is a net negative to the project. Pi.1415926535 (talk) 18:24, 15 November 2021 (UTC)[reply]
Yes, I've unwittingly been using multiple accounts (but not in a contrary manner). I've been logged out of this account a few times and decided to stay logged out and continue my edits using multiple IP User accounts. I apologize for any inconvenience to the user who opened this SPI and beg for mercy. — Preceding unsigned comment added by User98207252129 (talk • contribs)
I guess we know now. I'll just wait; I don't exactly know how SPI reports work. - AssumeGoodWraith (talk | contribs) 04:28, 18 November 2021 (UTC)[reply]
Clerk note: User98207252129, I have left you a message on your talkpage here. Please read it as a matter of urgency, and I will warn you again here; if you make any comment or edit like this again, you will be blocked. --Jack Frost (talk) 10:50, 21 November 2021 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

This case is being reviewed by Jack Frost as part of the clerk training process. Please allow him to process the entire case (including admin actions against suspected socks) without interference, and pose any questions or concerns either on his talk page or on this page if more appropriate.

On hold - for training --Jack Frost (talk) 03:17, 21 November 2021 (UTC)[reply]
Clerk note: User warned in relation to logged out editing, straying into administrative areas, and making entirely unacceptable edits / comments while logged out. Closing. Any further disruption should result in blocks. --Jack Frost (talk) 10:59, 21 November 2021 (UTC)[reply]
I tacked on a further warning about block evasion, and a DS alert. Archiving. -- Tamzin^{[cetacean needed]} (she/they) 17:25, 23 November 2021 (UTC)[reply]

30 December 2021

Suspected sockpuppets

User98207252129 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) ( Clerk note: original case name)
NotTheWikipedianHere (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
98.207.252.129 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
73.63.168.159 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))

Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

There is substantial overlap between User98207252129 and NotTheWikipedianHere, with both focusing on recent changes to transit in SF.

NTWH created their account three minutes after User982 blanked their user page, and immediately created a blank user page of their own.
Four minutes after NTWH created a draft of 67 Bernal Heights, User982 moved it to articlespace,
Both users have similar idiosyncrasies, such as tagging me in non-automatic edit summaries (User982, NTWH)

Despite the warnings received during the last SPI, User982 has also continued to use the two IP addresses listed above, indicating an unwillingness to stick to a single logged-in account. Pi.1415926535 (talk) 00:59, 30 December 2021 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Well this is... weird. This usertalk message and this edit summary made me think, no, this can't be the same person. But then I looked at what the message actually said, and a few things jumped out at me, one of which is that their signature is "Checkip:User:NotTheWikipedianHere". Then I noticed that the edit summary reverting User9, and saw it has the broken syntax "[[User talk:User98207252129|(Talk)". Compare User9's latest edit at time of writing, which contains "[User talk:TheresNoTime|talk]] | contribs)". Based on that and the other evidence presented, I think this is most likely someone talking to themself, but I'd like CU to be sure.
But wait, there's more! That most recent edit by User9, with its edit summary implying familiarity with either that user or TNT, is to User talk:DontSpreadMisinformationGuys. I've added that account, already CUblocked by TheresNoTime for socking with TheAnonymousEditor0000 (talk · contribs), to the suspect list (and if confirmed this will need to be moved). They overlap extensively with User9 and IP98 on List of San Francisco Municipal Railway lines (edit | talk | history | protect | delete | links | watch | logs | views), with the same focus on adding overly-detailed content. Based on timeline there, DSMG was almost certainly also 2601:645:8780:D9F0::/64, which resumed editing the article four days after them, stopping when IP98 started. Edit summaries are broadly similar, but not conclusive.
I'm pretty sure on this, but special-interest editing can lead to behavioral false positives, so CheckUser requested and endorsed by clerk with respect to the accounts. In the unlikely event that this is unrelated, I do still plan to take some sort of action over the loutsocking (and a broader COI inquiry may be needed). -- Tamzin^{[cetacean needed]} (she/they) 08:14, 30 December 2021 (UTC)[reply]
In progress - -- RoySmith (talk) 16:38, 30 December 2021 (UTC)[reply]
User98207252129, NotTheWikipedianHere, DontSpreadMisinformationGuys, and TheAnonymousEditor0000 are all Confirmed to each other. I've cu-blocked the two new accounts, but Tamzin it sounds like you had some additional stuff you wanted to do, so I'll just bounce this back to you for tagging, case merging, etc. Please ping me when you're done so I can update the cuwiki notes. -- RoySmith (talk) 17:04, 30 December 2021 (UTC)[reply]
And, of course, no comment on the IPs. -- RoySmith (talk) 17:06, 30 December 2021 (UTC)[reply]
Case moved. Tagged. Closing. Thanks and back to you, Roy. -- Tamzin^{[cetacean needed]} (she/they) 18:50, 30 December 2021 (UTC)[reply]

05 January 2022

Suspected sockpuppets

SpiderCholoTheSFrider (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

First four edits are creating blank user and talk pages, and adding a relatively obscure template (ubl) used by past socks to two pages they commonly edited. Pi.1415926535 (talk) 05:12, 5 January 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Confirmed plus the following accounts:
- User101798s (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- UrLocalChristianBro (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Blocked and tagged, closing. Mz7 (talk) 07:33, 5 January 2022 (UTC)[reply]

19 February 2022

Suspected sockpuppets

Vqd123 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

First content edits are to J Church and Template:J Church about service changes (the sockmaster's main interest), one of which was an exact repeat of a sockmaster edit. Account was created as ThisWikiIsEditedByIrresponsibleJerks which is very similar to past socks. Pi.1415926535 (talk) 22:01, 19 February 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

In progress - -- RoySmith (talk) 22:10, 19 February 2022 (UTC)[reply]
Confirmed -- RoySmith (talk) 22:18, 19 February 2022 (UTC)[reply]
Master Tagged as banned under 3X, retroactive to 30 December. Archiving. -- Tamzin^{[cetacean needed]} (she/they) 19:14, 21 February 2022 (UTC)[reply]