Jump to content

Wikipedia:Sockpuppet investigations/Heres The Dealio/Archive

From Wikipedia, the free encyclopedia


Heres The Dealio

Heres The Dealio (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki)

14 June 2019

[edit]

Suspected sockpuppets

[edit]


A bit of an unusual sock case, while patrolling recently created redirects, I've come across a slew of attack redirects created by accounts with <15 edits and which have extremely similar behavior on their user and talk pages, always having a short statement like "Hey" or "Sup" on both. The suspicious accounts proceed to make 10 test edits to their sandbox, and then create a single blatant attack redirect, followed by no other activity. I suspect that this is either meatpuppeting or someone who decided that their vandalism would be harder to catch and revert if they preemptively spread it across multiple accounts. Note that there's more accounts involved than the two listed here, but because the attack pages are promptly deleted, I can't find the first few examples of such behavior that I came across (once it clearly became a pattern I started taking notes). Attack redirects that I've come across include Plastic smile (pointing at John Kerry), Retarded fish frog (pointing at Jimmy Carter), Absurdly delusional (pointing at Lavar Ball), and a homophobic one that I can't specifically remember pointing to Adam Levine. signed, Rosguill talk 20:07, 14 June 2019 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]
  • I haven't checked any of these, but this is someone I first noticed a couple of months ago. I assume that it's one LTA or another, but so far, I've just been deleting the malicious redirects (if nobody has already done it) and blocking. CU hasn't been very useful because they're on a big mobile carrier, if I recall correctly, and I haven't been able to come up with a reasonable rangeblock. FWIW, I wouldn't bother with tags. —DoRD (talk)​ 16:04, 16 June 2019 (UTC)[reply]

18 July 2019

[edit]

Suspected sockpuppets

[edit]


Duck editing, types a short message on their user page, messes around in the sandbox, and then makes an attack redirect. signed, Rosguill talk 14:56, 18 July 2019 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

01 February 2020

[edit]

Suspected sockpuppets

[edit]

Create redirects with "nasty" titles targeting existing articles. Put "Hi" on their userpages. Play around with their sandboxes.--Bbb23 (talk) 19:28, 1 February 2020 (UTC) Bbb23 (talk) 19:28, 1 February 2020 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]
Bbb23, see Wikipedia:Sockpuppet investigations/Heres The Dealio. This troll has been around for a while now. Sro23 (talk) 23:31, 2 February 2020 (UTC)[reply]
@Sro23: You are absolutely right. You have a better memory than I. I can confirm the two cases technically. Please merge this case into the earlier one and tag accordingly. Thanks!--Bbb23 (talk) 00:10, 3 February 2020 (UTC)[reply]

27 February 2020

[edit]

Suspected sockpuppets

[edit]

All of these accounts appear to be edited and created by one person whose sole purpose is to create attack pages as can be seen in Should be in school, Amazing flopper and Too much plastic. Check for sleepers should be conducted too. —Nnadigoodluck🇳🇬 09:07, 27 February 2020 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

22 October 2021

[edit]

Suspected sockpuppets

[edit]

As reported by Sdrqaz, all accounts create a user page with just "hi" on (see deleted of Majorniceguy for an example), makes a number of edits to their sandbox and then creates and redirects a page (e.g. French Laundry ambassador).

Logging for the record, unsure if there are older accounts. I have checked Inthestall and Recyclelady and found them to be very  Likely, leaning  Confirmed ~TheresNoTime (to explain!) 22:35, 22 October 2021 (UTC)[reply]

Surprised that Recyclelady and Inthestall didn't pop up, they looked like twins of each other. Liz Read! Talk! 23:54, 22 October 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. Thank you, TNT. Looking through my CSD log and edits to AIV, I've found a few more that fit this modus operandi. In chronological order: Chargemeup (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki), Sandandown (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki), Warmbrowngoo (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki), Hoopstarslim (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki), Holderplacer (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki). While Chargemeup is stale (and the oldest account), the others should not be. All have been indefinitely blocked as regular administrative actions. Sdrqaz (talk) 23:27, 22 October 2021 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]

29 October 2021

[edit]

Suspected sockpuppets

[edit]
  • Same autoconfirmed gaming in sandbox as previous socks: [1] [2] and then disruption
  • Same username pattern as previous socks ("Floorwithdoor", "Tableglass"). Requesting checkuser to check for sleepers.

Thanks, Giraffer (talk·contribs) 18:17, 29 October 2021 (UTC)[reply]

@GeneralNotability, I think I found another – Paperzeed. Giraffer (talk·contribs) 18:22, 29 October 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

03 November 2021

[edit]

Suspected sockpuppets

[edit]

Identical behaviour to previously confirmed sock, and similar username pattern. Requesting CheckUser to find others given history of batch-creation. firefly ( t · c ) 18:26, 3 November 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

This case is being reviewed by Tamzin as part of her training as a clerk. Please allow her to process the entire case without interference. You may pose any questions or concerns either on her talk page or on this page.


09 November 2021

[edit]

Suspected sockpuppets

[edit]

 Looks like a duck to me. Please check for sleepers. Sdrqaz (talk) 20:35, 9 November 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

10 November 2021

[edit]

Suspected sockpuppets

[edit]

Created attack page redirect right after being autoconfirmed by making useless user sandbox edits. Similar behavior to suspected sock Carsonshoe. EDM fan 2 (talk) 20:58, 10 November 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

28 November 2021

[edit]

Suspected sockpuppets

[edit]

WP:DUCK, see edit filter log. JavaHurricane 16:35, 28 November 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

01 December 2021

[edit]

Suspected sockpuppets

[edit]

Same pattern of contributions as many other socks of this user. EDM fan 2 (talk) 00:40, 1 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

01 December 2021

[edit]

Suspected sockpuppets

[edit]

Typical redirects and sandbox. Giraffer (talk·contribs) 17:31, 1 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

01 December 2021

[edit]

Suspected sockpuppets

[edit]

See the contributions. Same old thing. EDM fan 2 (talk) 19:26, 1 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Theres another one. Check https://en.wikipedia.org/wiki/Special:Contributions/Tastypillow. User also created a redirect that was a rapidly deleted. ASpicyNugget (talk) 19:31, 1 December 2021 (UTC)[reply]

Yup, and I would also request a CU check for sleepers, although I doubt I can update the status to that in a case I didn't file. Giraffer (talk·contribs) 20:25, 1 December 2021 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]

01 December 2021

[edit]

Suspected sockpuppets

[edit]

Same modus operandi. Requesting CheckUser due to the rapid use of accounts and to save having to change the status of another case (though I've certainly done that before. Is it worth asking a CheckUser to do a lengthy rangeblock (with the usual caveat that they can't directly link IPs to accounts)? I know there's precedent for this. Sdrqaz (talk) 23:50, 1 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I searched and searched to find out who this editor is and I'm glad to have a name for them. I see their work regularly in the Deletion log. They seem to have three accounts do joke redirects around the same time after each making 10 edits to their sandbox a few days earlier. Seems like a lot of work for vandalism that lasts a few minutes. I have to stop trying to understand the motivations of sockpuppets. Liz Read! Talk! 01:07, 2 December 2021 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]

03 December 2021

[edit]

Suspected sockpuppets

[edit]

Heres The Dealio will never change I guess. EDM fan 2 (talk) 17:58, 3 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

10 December 2021

[edit]

Suspected sockpuppets

[edit]

I cannot count how many times have I seen this user's redirects. EDM fan 2 (talk) 19:37, 10 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

11 December 2021

[edit]

Suspected sockpuppets

[edit]

Gaming autoconfirmed to create an attack redirect – another day, another sock. Sdrqaz (talk) 00:49, 11 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

14 December 2021

[edit]

Suspected sockpuppets

[edit]

Still won't stop these redirects I guess. EDM fan 2 (talk) 20:14, 14 December 2021 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

04 January 2022

[edit]

Suspected sockpuppets

[edit]

Same modus operandi. Since it's in a wave this time, please check for sleepers. Sdrqaz (talk) 20:50, 4 January 2022 (UTC)[reply]

Added another one. Sdrqaz (talk) 20:53, 4 January 2022 (UTC)[reply]
On second thoughts, not worth checking given previous conversations with checkusers. Everyone's been  Blocked without tags and both can be closed. Sdrqaz (talk) 21:06, 4 January 2022 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

04 January 2022

[edit]

Suspected sockpuppets

[edit]

Here's The Dealio has returned! EDM fan 2 (talk) 20:53, 4 January 2022 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

18 March 2022

[edit]

Suspected sockpuppets

[edit]

Their username is referencing me now. EDM fan 2 (talk) 20:29, 18 March 2022 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

05 October 2022

[edit]

Suspected sockpuppets

[edit]

I'm positive Sheelofmack and Colorflower are the same editor - both were registered in early June, the in late September/early October created their user page with "Hi", made a series of single letter additions to their sandbox to get autoconfirmed and then created Bush Dick Affair / Bush Dick Happening as redirects to Presidency of George W. Bush (both nominated at Wikipedia:Redirects for discussion/Log/2022 October 5#Bush Dick Affair). I suspect they are the same editor as StrexcorpEmployee because they were the editor who created Bush Dick Incident as a redirect to the same target (that was deleted at Wikipedia:Redirects for discussion/Log/2022 July 15#Bush Dick Incident). Thryduulf (talk) 10:26, 5 October 2022 (UTC) Thryduulf (talk) 10:26, 5 October 2022 (UTC)[reply]

Comments by other users

[edit]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

23 May 2024

[edit]

Suspected sockpuppets

[edit]

Similar pattern as before. 10 quick edits then attack redirect. Bush Dick Happening with comment "Bush dick incident was better but salted for no reason, history will remember you". User page says "Hi". — rsjaffe 🗣️ 03:39, 23 May 2024 (UTC)[reply]

Comments by other users

[edit]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

12 June 2024

[edit]

Suspected sockpuppets

[edit]

Accounts all making the same sort of edits of pages such as the Occupied Korea redirect and using the phrase history will remember you with abusive language to try bully other editors

Some the accounts have been banned but not the original who continues to make POV edits 2001:8003:3FB4:CF00:AD26:6F01:CC5B:F709 (talk) 08:28, 12 June 2024 (UTC)[reply]

Comments by other users

[edit]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Looks like StrexcorpEmployee has another sock puppet account with Smackarea (talk · contribs)

Voting on same subject to get past limitations on how many times they can vote

Creation of redirects that heave [same problems that that have got warnings for POV in the past

Same sort of POV changes 2001:8003:3FB4:CF00:61A2:EF47:953:9B18 (talk) 06:26, 24 July 2024 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]