Wikipedia:Sockpuppet investigations/Никита-Родин-2002/Archive/1

07 August 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

See [//en.wikipedia.org/w/index.php?title=User_talk:Никита-Родин-2002&diff=620232759 this diff] where Ярославик-21 unwelcomes Никита-Родин-2002, and note that Ярославик-21 shares Никита-Родин-2002's obsession with Rainbow Fish and STS Kids.

See also Administrators' noticeboard/IncidentArchive848, which should have resulted in a block for Никита-Родин-2002. —/M endaliv /2¢/Δ's/ 16:37, 7 August 2014 (UTC)
 * Никита-Родин-2002 [//en.wikipedia.org/w/index.php?title=User_talk:Никита-Родин-2002&diff=620256330 has admitted to being Ярославик-21], who had been blocked (see ) shortly before then per WP:NOTHERE. At this point, by returning to editing as Никита-Родин-2002, this is a case of block evasion. —/M endaliv /2¢/Δ's/ 23:10, 7 August 2014 (UTC)


 * Added one more suspected sock per WP:DUCK. Seems to be obsessed with Rainbow fish, and creates the same type of meaningless categories as the sock master. Thomas.W talk 11:35, 8 August 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)
 * And a fair amount of IP logged out editing. -- DQ   (ʞlɐʇ)  02:20, 12 August 2014 (UTC)


 * All blocked now, socks and master tagged. Closing. Callanecc (talk • contribs • logs) 12:41, 14 August 2014 (UTC)

18 September 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Self-declared sock of Никита-Родин-2002 posting fake unblock templates on a number of blocked Никита-Родин-2002 socks. I'm not entirely convinced it really is Nikita Rodin, and not someone who's just trolling, but either way their edits show that they're not here to build an encyclopaedia... Thomas.W talk 07:35, 18 September 2015 (UTC)
 * Further edits showed beyond doubt that it really was Nikita Rodin, but they have been indeffed by Materialscientist, so this report can be closed and archived. Thomas.W talk 08:18, 18 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Closing. Mike V • Talk 02:09, 19 September 2015 (UTC)

19 October 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Obvious sock. Geolocate to Russia, redirected User:Никита-Родин-2002 to Youtube, and then did the same to User:Nick, an admin they've had previous run-ins with. Etcetera... Thomas.W talk 15:29, 19 October 2015 (UTC) Thomas.W talk 15:29, 19 October 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. Closing.  Vanjagenije  (talk)  20:31, 20 October 2015 (UTC)

02 November 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

User has made a bunch of Windows or Russian-related test edits to my sandbox, and User talk:Никита-Родин-2002. Also seems to have a thing for rollback, and I frequent WP:PERM/R.

Other intersting finds:
 * talk page of an IP I blocked back in August
 * where LenovoTest01 redirected their talk page to User talk:Lenovo~enwiki
 * All of the IP edits at User talk:Никита-Родин-2002, which geolocate to Moscow or Saint Petersburg
 * Windows-related test edit to my sandbox from an American IP

&mdash; MusikAnimal  talk  07:50, 2 November 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The account is . Blocked and tagged., the American IP belongs to a colocation service, among other things. It says nothing about the user's true location. I'm not blocking the so-called alternative account. It hasn't been used since its creation in 2006, and I have no idea if what the sock says is true or just a prank. Closing.--Bbb23 (talk) 18:26, 2 November 2015 (UTC)

24 November 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This IP address was used by Никита-Родин-2002. GeoffreyT2000 (talk) 05:50, 24 November 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Editing sandboxs. bad user name VoxelHouse23. 188.32.104.125 (talk) 06:28, 24 November 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * IP(s) blocked. Closing. Bbb23 (talk) 09:25, 25 November 2015 (UTC)

06 December 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Blocked in ruwiki. DellFan20 does not have local account in enwiki, global lock is recommended. OneLittleMouse (talk) 10:55, 6 December 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've got to them via routes other than this SPI, and verified/tagged NalibneWiki, Елена198302 and Mya9999 (DellFan20 is stale for CU). Materialscientist (talk) 00:06, 7 December 2015 (UTC)
 * Closing case for now. Mark Arsten (talk) 02:43, 7 December 2015 (UTC)

09 December 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Those accounts are already blocked in Russian Wikipedia as socks of Никита-Родин-2002 (See: ).  Vanjagenije  (talk)  12:17, 9 December 2015 (UTC)  Vanjagenije   (talk)  12:17, 9 December 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Added user, based on common edits to Tampa Bay Technical High School. - DVdm (talk) 12:23, 9 December 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
This is just for the record, I am going to block them both.  Vanjagenije  (talk)  12:17, 9 December 2015 (UTC)
 * I also blocked per this: .  Vanjagenije   (talk)  20:37, 9 December 2015 (UTC)
 * There is now also who is also blocked in Russian Wikipedia as a sock of Никита-Родин-2002. I am endorsing CU to look for sleepers.  Vanjagenije   (talk)  20:42, 9 December 2015 (UTC)

Вудд, Archivecraft and Itwiki6666 are one person, Никита-Родин-2002. Its Eastside appears unrelated. Materialscientist (talk) 06:38, 10 December 2015 (UTC)
 * After reviewing his edits again, I decided to unblock Its Eastside. Closing the case.  Vanjagenije  (talk)  13:17, 10 December 2015 (UTC)

10 December 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

I reverted Itwiki6666's edit on Tor talk page. This Moscow IP reverted my edit. The  Aven gers  13:45, 10 December 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked for 24 hours and closing.  Vanjagenije  (talk)  18:20, 10 December 2015 (UTC)

17 December 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Similar name to known sock. Sandbox blanking. Editing on User:Mya2ru, which is likely also a sock account as it has similar name to known sock.

User randomly messaged me... I think they like the attention.

Asking for CU as user is known to use multiple accounts at once. Wondering if this person is also related to a few "mario" accounts I've encountered in the past editing on cartoon pages.  Eve rgr een Fir  (talk) Please &#123;&#123;re&#125;&#125; 05:56, 17 December 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

- The sleeper account (UNOGabucho) explains why they contacted me... this is probably Gabucho181. See Sockpuppet investigations/Gabucho181. Requesting that this connection be considered and the cases merged if necessary.  Eve rgr een Fir  (talk) Please &#123;&#123;re&#125;&#125; 06:13, 17 December 2015 (UTC)
 * I can't be 100% sure because I have little experience with Gabucho181 and because both used anonymizing IPs, especially after we started blocking them. CU logs suggest Itwiki9999 = Никита-Родин-2002, and UNOGabucho = Itwiki9999. Combined with geolocation and edits I would say it is Никита-Родин-2002. Materialscientist (talk) 06:24, 17 December 2015 (UTC)
 * Okay. I only know Gabucho really and it wouldn't surprise me if he reinvented himself with new sock incarnations with new habits. That this sock contacted me and they edited on cartoon pages points to Gabucho being behind it imho, but I don't have the CU data. I only suggest the merge since Gabucho is older (I think).  Eve rgr een Fir  (talk) Please &#123;&#123;re&#125;&#125; 06:29, 17 December 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Itwiki9999 is ✅, blocked, tagged, together with one sleeper. Materialscientist (talk) 06:01, 17 December 2015 (UTC)
 * Itwiki9999 and UNOGabucho have been tagged and blocked indef by Materialscientist, closing case. Mark Arsten (talk) 20:00, 17 December 2015 (UTC)

27 December 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

It is probable that just one persistent editor have been introducing false information into pages mainly relating to the band Green Day in more than 6 months. The edits are similar, some identical, and mainly targeting the Green Day pages, for example List of awards and nominations received by Green Day, Green Day Discography and pages for individual songs. Most have been blocked indefinitely, but once one is blocked, the next one appears (i.e. they are mostly sequential, except for Coach pennis which was created before Chicken is burning was blocked), and the latest one appears to be User:Borisentwistle. Also linked to this are numerous IP addresses from Verizon Wireless or Comcast. The edits mostly involved changing certifications, awards won, and chart positions.

Examples of edits by User:Borisentwistle:, ,.

Examples of edits by blocked users:

Chicken is Burning:, ,

Coach Pennis:, ,

Stumpwentz:, ,

Patrickzump:, ,

Examples of edits by IP edittors:, , Hzh (talk) 15:06, 27 December 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * All of the accounts have been blocked for adding unsourced material. Semi-protection has been applied to some of the affected articles. Mike V • Talk 00:49, 28 December 2015 (UTC)

01 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This account was already blocked as a sock of Cosmic Emperor (the CU result was "likely"), but I have a reason to believe that this account is actually a sock of Никита-Родин-2002 (see this example: ).  Vanjagenije  (talk)  15:28, 1 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing my own request.  Vanjagenije  (talk)  15:31, 1 January 2016 (UTC)
 * From CU data this is very likely Никита-Родин-2002 (blocked one more fresh sock too), but note that CU data on Никита-Родин-2002 are never 100% conclusive and should be coupled with behavioral evidence. Materialscientist (talk) 23:38, 1 January 2016 (UTC)
 * Closing the case.  Vanjagenije  (talk)  10:37, 2 January 2016 (UTC)

03 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Editing pattern is similar in List of Billboard Hot 100 top 10 singles in 2005. Puppeteer has been indefinitely blocked, but this user restored an edit made by the puppeteer shortly after the puppeteer was blocked. Both have been similarly disruptive at said article by deliberately changing chart stats of songs without providing explanations or references to back their changes. I don't know if this in itself is enough evidence, but is worth filing report. MPFitz1968 (talk) 15:43, 3 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Blocked one account, tagged all, closing.--Bbb23 (talk) 20:12, 3 January 2016 (UTC)
 * Blocked one account, tagged all, closing.--Bbb23 (talk) 20:12, 3 January 2016 (UTC)
 * Blocked one account, tagged all, closing.--Bbb23 (talk) 20:12, 3 January 2016 (UTC)
 * Blocked one account, tagged all, closing.--Bbb23 (talk) 20:12, 3 January 2016 (UTC)
 * Blocked one account, tagged all, closing.--Bbb23 (talk) 20:12, 3 January 2016 (UTC)
 * Blocked one account, tagged all, closing.--Bbb23 (talk) 20:12, 3 January 2016 (UTC)

10 January 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The editor is likely to have the same person who person who has been deliberately introducing false information, mostly into Green Day pages (occasionally other bands such as The Who), for example on album certifications, sales figures, awards won, and chart information. The editor have been using multiple aliases and numerous IP address, other have been reported previously, the current one is user:Wentzpretzels, example of edits -, , ,. Example of new IP edits are, , that introduced false information similar to or same as the others. These edits are similar to those made by other reported sockpuppets, a few examples of the hundreds of similar edits made - user:Borisentwistle - ,

user:Stumpwentz - ,

user:Patrickzump - ,

user:Coach pennis - , Hzh (talk) 13:28, 10 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Account has been blocked indefinitely by Materialscientist for persistent addition of unsourced content. Mike V • Talk 16:30, 11 January 2016 (UTC)

11 January 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

See this diff where Milanarashidova unwelcomes ZOKIDIN, and note that Milanarashidova shares ZOKIDIN's obsession. ZOKIDIN2 (talk) 06:02, 11 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

What even is this? You just accused yourself of sockpuppetry. BoxOfChickens (talk · contribs · CSD/ProD log) 06:05, 11 January 2016 (UTC)

(talk I am problems. ZOKIDIN2 Xakep Bad no i.
 * Hmm... I can't quite figure this out either. I think that what's most likely in this situation is that there's a huge, HUGE language barrier and ZOKIDIN may not understand enough English to really understand the whole gist of SPI. It looks like he's posted around in Russian, so I'm going to try to get a Russian speaker to talk to him and figure things out. There may be some mischief going on here in general, but a lot of this seems like it's a language barrier issue. I think he may speak/read enough to do some of the basics, but not enough to understand the more complex words - something common for anyone learning another language. Tokyogirl79 (｡◕‿◕｡)  07:18, 11 January 2016 (UTC)
 * I've posted in the Russian WikiProject and I'm also going to tag Ymblanter, since he's a native Russian speaker and I get the impression that ZOKIDIN speaks Russian. Tokyogirl79 (｡◕‿◕｡)  07:25, 11 January 2016 (UTC)
 * They are all Uzbek but I guess they should speak Russian.I will try to talk to ZOKIDIN--Ymblanter (talk) 07:58, 11 January 2016 (UTC)
 * Ok. ZODIKIN claims ZODIKIN2 is not them. Given that ZODIKIN2 has not a single useful contribution, is an impersonator, and this shows they are a serial vandal (I saw this pattern repeteadly in recent months), I blocked them infdef. No opinion on the other users at the moment. I guess we can close this investigation.--Ymblanter (talk) 08:08, 11 January 2016 (UTC)
 * Thanks YMblanter! I was wondering where they were from, but just sort of latched on to the Russian language, since that's what Google Translate was telling me what it was. Tokyogirl79 (｡◕‿◕｡)  09:31, 11 January 2016 (UTC)

Russian please. ZOKIDIN (talk) 08:02, 11 January 2016 (UTC)

ZOKIDIN2 BAD user. Vandalism... Blok user ZOKIDIN2 Cause the creation of an account on behalf of my name.
 * Ymblanter Yes i Uzbek. ZOKIDIN (talk) 08:10, 11 January 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Open Dragon in Portal2 is.
 * ZOKIDIN and Milanarashidova are ✅.
 * ZOKIDIN2 is highly  and technically  ZOKIDIN.
 * I'm comfortable blocking the unblocked accounts. I'm not tagging them because I'm unfamiliar with the behavior of Никита-Родин-2002 and their socks.--Bbb23 (talk) 13:17, 11 January 2016 (UTC)
 * Thanks. Just to make it clear, ZOKIDIN and Milanarashidova are identical between themselves, but did any of them do anything inappropriate? Is it block evasion?--Ymblanter (talk) 13:29, 11 January 2016 (UTC)
 * Никита-Родин-2002 was an immature account which only spoke Russian and was not able to contribute constructively. Recently, I had a number of accounts which sometimes were impersonating other users and started editing by creating a user page stating they are a sockpuppet of Никита-Родин-2002. I believe (who impersonated ) was such account.--Ymblanter (talk) 13:29, 11 January 2016 (UTC)
 * I saw some of the "impersonator" accounts. I believe at least some were technically indistinguishable from Никита-Родин-2002's socks. As for disruption, this report is disruptive, but beyond that, even if there is incompetence in the mix, these accounts are acting like trolls. I don't know about block evasion.--Bbb23 (talk) 13:57, 11 January 2016 (UTC)
 * I see, thanks.--Ymblanter (talk) 13:59, 11 January 2016 (UTC)
 * This is merged from Sockpuppet investigations/ZOKIDIN. See below for the explanation.  Vanjagenije  (talk)  02:18, 16 January 2016 (UTC)

11 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Sorry omitted reason: duck, quack. JohnBlackburne wordsdeeds 16:12, 11 January 2016 (UTC)
 * Added ZOKIDIN5, same reason.-- JohnBlackburne wordsdeeds 17:14, 11 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Someone at ANI appears to agree with the connection to Никита-Родин-2002 [//en.wikipedia.org/w/index.php?title=Wikipedia:Administrators%27_noticeboard/Incidents&diff=prev&oldid=699477523]. I don't know what the norms are at SPI now, but should the report be moved (well cut and pasted with proper attribution since it already exists) or archived at the page for the likely genuine master to avoid future confusion? Nil Einne (talk) 17:00, 12 January 2016 (UTC)
 * The diff above is wrong, this is the edit referred to above. Thomas.W talk 22:14, 14 January 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Based on behavior, I blocked ZOKIDIN3 and . I have no idea how to get rid of the "topics" they added.--Bbb23 (talk) 16:59, 11 January 2016 (UTC)
 * likewise blocked. BethNaught (talk) 17:17, 11 January 2016 (UTC)
 * This case is copy-pasted from Sockpuppet investigations/ZOKIDIN.  Vanjagenije  (talk)  18:12, 14 January 2016 (UTC)


 * ZOKIDIN, ZOKIDIN2..5 are very the same person (Никита-Родин-2002). Materialscientist (talk) 21:49, 14 January 2016 (UTC)
 * Are you sure about ZOKIDIN? said that ZOKIDIN and ZOKIDIN2  are "Unlikely" (here).  Vanjagenije   (talk)  16:11, 15 January 2016 (UTC)
 * The accounts are operating from different locations, but I discounted that because, as I recall, they are using proxies. However, they were also using different user agents. All that said, please defer to Materialscientist once he responds. He's been doing this a lot longer than I, and I have confidence in his judgment.--Bbb23 (talk) 17:11, 15 January 2016 (UTC)
 * First, nearly all CU data on this master is uncertain, because he actively uses proxies and different PCs. As to the connection between ZOKIDIN and ZOKIDIN2-5, the link comes when looking at all of them, not just ZOKIDIN and ZOKIDIN2. (There are some other hints, but they are just hints.) Materialscientist (talk) 22:17, 15 January 2016 (UTC)
 * That makes sense. When I ran the check, the only account that existed was ZOKIDIN2. The others came later and were blocked out of hand. I never checked them.--Bbb23 (talk) 22:22, 15 January 2016 (UTC)
 * I merged Sockpuppet investigations/ZOKIDIN here. Closing.  Vanjagenije  (talk)  02:17, 16 January 2016 (UTC)

16 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

At this point, I'm going on how much interest the puppeteer and its sockpuppets, plus this user, have for introducing false info about Green Day songs at various (non-protected) articles about the recording group, particularly RIAA certifications and performances on various Billboard record charts. They are also altering info in articles about the Billboard charts, such as falsely identifying Green Day reaching #1 in this edit, which clearly goes against the reference backing the entry. MPFitz1968 (talk) 16:40, 16 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 18:02, 16 January 2016 (UTC)

18 January 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The like Games for Windows, , Live&action=history&year=2012&month=-8&tagfilter,of Games for Windows titles&action=history&year=2012&month=-8&tagfilter,,, will games. 185.42.12.1 (talk) 05:07, 18 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Nice, a Nikita Rodin IP that reports itself. Not even a boomerang... this is more just holding the gun backwards. —/M endaliv /2¢/Δ's/ 08:22, 18 January 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Case filer blocked. Closing.  Vanjagenije  (talk)  10:44, 18 January 2016 (UTC)

20 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Editing habits similar to other sockpuppets of Stumpwentz (Grohlhole and Frankupapa) on the article List of Billboard Mainstream Top 40 number-one songs of the 1990s, changing a well-referenced #1 entry with a Green Day song, which goes against what the sources say. MPFitz1968 (talk) 00:50, 20 January 2016 (UTC)
 * I'm also observing the puppeteer may be operating using numerous IPv6 (and perhaps IPv4) addresses, but cannot pinpoint them exactly, though similar editing habits occur with these IP addresses (one such edit in the article I mentioned above). As these IP addresses are not constant, they might be dynamically assigned. MPFitz1968 (talk) 01:28, 20 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Might be related to this Sockpuppet investigations/Coach pennis. Hzh (talk) 20:49, 21 January 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 22:07, 22 January 2016 (UTC)

26 January 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

One of ThomasDTC's first edit was ti report an IP at SPI as a sock of ZOKIDIN (consistent with various previous socks reporting themselves).  Vanjagenije  (talk)  09:53, 26 January 2016 (UTC) Problematic username.  Vanjagenije  (talk)  09:53, 26 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing my own request.  Vanjagenije  (talk)  09:54, 26 January 2016 (UTC)
 * Can't be sure, but . Materialscientist (talk) 10:16, 26 January 2016 (UTC)
 * Both of them?  Vanjagenije  (talk)  10:18, 26 January 2016 (UTC)
 * Yes. Materialscientist (talk) 10:22, 26 January 2016 (UTC)


 * Closing the case.  Vanjagenije  (talk)  17:05, 26 January 2016 (UTC)

30 January 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

IP edit USA. Iliev2 (talk) 11:30, 30 January 2016 (UTC)

House anon think disruptive editing reading following was blocked by Only, If you think there are good reasons why you should bottom. --Iliev2 (talk) 11:58, 30 January 2016 (UTC)

Another reincarnation of group. --Iliev2 (talk) 12:05, 30 January 2016 (UTC)

Suggest account if it's possible. User:Ilieve3 and User:Uncyclomusic was created by account. --Ilieve3 (talk) 13:04, 30 January 2016 (UTC)

Archive sock. --Uncyclomusic (talk) 13:12, 30 January 2016 (UTC)

Title short review lock manner. --Uncyclomusic (talk) 13:32, 30 January 2016 (UTC)

Bpple56 look archive. --Uncyclomusic (talk) 13:41, 30 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Can someone take a look at the edits of / ? Something weird is going on here and I can't figure it out. only (talk) 12:27, 30 January 2016 (UTC)
 * CheckUser hold pending further information or developments, Place title. --Uncyclomusic (talk) 14:22, 30 January 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Iliev2 was already globally locked. I blocked the others and will tag in a moment. I don't suppose you understand what's going on with ? --Bbb23 (talk) 14:34, 30 January 2016 (UTC)
 * I asked Tegel about it at meta: meta:User_talk:Tegel. Everything seems to be okay with Iliev (who's a sysop on the Bulgarian Wikipedia). Just appeared odd when he showed up for the first time since November to make edits with the version 2 here as well. only (talk) 14:59, 30 January 2016 (UTC)
 * Thanks much. Closing.--Bbb23 (talk) 15:15, 30 January 2016 (UTC)
 * Apologies for the confusion, really. Unfortunately, I'm quite busy on bg:W and recently with our User Group on Meta too, so nowadays I edit very rarely here. I suppose the guy (or girl) behind ZOKIDIN/Никита-Родин-2002 got pissed off by me when I blocked User:ZOKIDIN on bg:W (at the time, I hadn't yet realised the extent of the problem). Then my talk page there got vandalized by a couple of IP's and User:Iliev2, so I went to investigate what's going on on Meta, and asked for a global lock on Iliev2. In the meantime, I tried to revert the vandalisms here, which probably added to the confusion (and was likely by the guy behind all this). Anyway, thanks a lot for dealing with this issue! — Luchesar • T/C 15:42, 30 January 2016 (UTC)
 * is another. ​—DoRD (talk)​ 16:04, 30 January 2016 (UTC)
 * Iliev2 was already globally locked. I blocked the others and will tag in a moment. I don't suppose you understand what's going on with ? --Bbb23 (talk) 14:34, 30 January 2016 (UTC)
 * I asked Tegel about it at meta: meta:User_talk:Tegel. Everything seems to be okay with Iliev (who's a sysop on the Bulgarian Wikipedia). Just appeared odd when he showed up for the first time since November to make edits with the version 2 here as well. only (talk) 14:59, 30 January 2016 (UTC)
 * Thanks much. Closing.--Bbb23 (talk) 15:15, 30 January 2016 (UTC)
 * Apologies for the confusion, really. Unfortunately, I'm quite busy on bg:W and recently with our User Group on Meta too, so nowadays I edit very rarely here. I suppose the guy (or girl) behind ZOKIDIN/Никита-Родин-2002 got pissed off by me when I blocked User:ZOKIDIN on bg:W (at the time, I hadn't yet realised the extent of the problem). Then my talk page there got vandalized by a couple of IP's and User:Iliev2, so I went to investigate what's going on on Meta, and asked for a global lock on Iliev2. In the meantime, I tried to revert the vandalisms here, which probably added to the confusion (and was likely by the guy behind all this). Anyway, thanks a lot for dealing with this issue! — Luchesar • T/C 15:42, 30 January 2016 (UTC)
 * is another. ​—DoRD (talk)​ 16:04, 30 January 2016 (UTC)

30 January 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

One user has been continually introducing false information into Green Day and associated pages, as well as pages of other bands such as The Who, for example on awards won, certifications and chart info. It has been been going on for over six months, and latest two appear to be
 * User:Weezerfreezer -, , ,
 * User:Tysonritteraar -, , ,

Similar to edits by Stumpwentz, and his socks such as Borisentwistle, Billyjamesd, and many others -, , , ,

Also a note that that there appear to be two pages for likely socks of the same person Sockpuppet investigations/Coach pennis. I don't know if it is possible to merge the two. Hzh (talk) 14:46, 30 January 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The master at Sockpuppet investigations/Coach pennis is stale, but the cases are clearly related and will need to be merged at some point. ​—DoRD (talk)​ 15:37, 30 January 2016 (UTC)
 * Should this and cases be both merged into  case ?  Vanjagenije   (talk)  08:13, 1 February 2016 (UTC)
 * Yes, please merge them per DQ's finding. Thanks. ​—DoRD (talk)​ 13:36, 1 February 2016 (UTC)
 * Merged and closed.  Vanjagenije  (talk)  19:59, 1 February 2016 (UTC)
 * The master at Sockpuppet investigations/Coach pennis is stale, but the cases are clearly related and will need to be merged at some point. ​—DoRD (talk)​ 15:37, 30 January 2016 (UTC)
 * Should this and cases be both merged into  case ?  Vanjagenije   (talk)  08:13, 1 February 2016 (UTC)
 * Yes, please merge them per DQ's finding. Thanks. ​—DoRD (talk)​ 13:36, 1 February 2016 (UTC)
 * Merged and closed.  Vanjagenije  (talk)  19:59, 1 February 2016 (UTC)
 * Should this and cases be both merged into  case ?  Vanjagenije   (talk)  08:13, 1 February 2016 (UTC)
 * Yes, please merge them per DQ's finding. Thanks. ​—DoRD (talk)​ 13:36, 1 February 2016 (UTC)
 * Merged and closed.  Vanjagenije  (talk)  19:59, 1 February 2016 (UTC)

11 February 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same editing habits as a few other sockpuppets on this puppeteer's list, such as User:Frankupapa, User:Billyjamesd and IPv6 users in the 2600:1006:* group, misrepresenting how well the rock band Green Day performed on the Billboard charts with their songs, like at American Idiot (song). MPFitz1968 (talk) 15:03, 11 February 2016 (UTC)
 * Additional evidence, concerning IPv6 users in 2600:1006:*: This edit in List of Billboard Hot 100 top 10 singles in 2009, unjustifiably changing a song in the list and replacing it with a Green Day one. MPFitz1968 (talk) 19:25, 11 February 2016 (UTC)
 * The IPv6 users whose edit diffs I cited, in this section and below, appear to originate from same part of the U.S., in Orlando, Florida (Verizon, their ISP), if any of this helps with the investigation. MPFitz1968 (talk) 19:40, 11 February 2016 (UTC)
 * This will be from other articles, not specifically related to Green Day songs but to Billboard chart articles, which above user also altered at List of Billboard Hot 100 top 10 singles in 2004 . The main target in that series of articles, though, has been List of Billboard Hot 100 top 10 singles in 2005, but as these articles use tables, giving you diffs may not be enough, as all they show is numerical changes like this edit from a 2600:1006:* user, yet another IPv6 user in that family, from Dirnt55 (confirmed sock in this investigation) and from Grohlhole (another confirmed sock), but I've always pinpointed them back to altering stats about Green Day songs (or adding a Green Day song that did not chart in the top 10 of the Billboard Hot 100, as in the diff I provided from 2004 article). More telling is what socks did in the articles List of Billboard Mainstream Top 40 number-one songs of the 1990s and List of Billboard Mainstream Top 40 number-one songs of 2005: (diff from Billyjamesd in the 1990s article) (from a 2600:1006:* user in 1990s article) (another 2006:1006:* in 1990s article) (Frankupapa in 1990s article) (from another 2600:1006:* user in 2005 article) (from Dolenzchild, another confirmed sock in this investigation, in 2005 article) to name a few. Right now, the evidence is a bit thin for Cottonfields44, aside from the one I provided from List of Billboard Hot 100 top 10 singles in 2004, but the clear intent is to alter info in these articles to suit their liking about how well Green Day songs did on the record charts (to a better ranking than they actually achieved), not just Billboard magazine's in the U.S., but international charts as well. And with the Mainstream Top 40 chart articles, it's easy to see the falsifications by verifying the accompanying references in those articles. MPFitz1968 (talk) 16:52, 11 February 2016 (UTC)
 * Regarding JaggerFagger, I don't disagree with that one being a possible sock, as various confirmed socks in this investigation have also been altering RIAA certifications of Green Day songs. MPFitz1968 (talk) 17:08, 11 February 2016 (UTC)

Comments by other users
The edits by Cottonfields44 are pretty much consistent with what I have seen for many months on Day Green pages, for example this this and this are similar to this and this. From my observation in the last few months, the IP addresses are normally from Verizon Wireless or Comcast. You can probably add to the suspected list of socks as well, for example these edits, ,. Hzh (talk) 23:08, 11 February 2016 (UTC)

Another one who might be a sock -. This edit - is identical to this edit by a confirmed sock, and similar to many past edits on the same page -, , , etc.
 * That user's first edit was at List of Billboard Mainstream Top 40 number-one songs of 2005, which I reverted only for me to find similar edits made by IP's with the prefix 2600:1006:b1xx:* (a subset of the prefix I mentioned above)   MPFitz1968 (talk) 23:22, 14 February 2016 (UTC)

And another one - - this edit  is similar to this, and this (also this of ) is similar to this. Hzh (talk) 11:53, 15 February 2016 (UTC)

''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Could you throw us a few quick diffs please? Also if your saying the IPv6 is them (and tbh I don't remember if it is or not), then i'm more inclined to believe that is a sock vs. the one you listed. --  Amanda  (aka DQ) 15:58, 11 February 2016 (UTC)
 * See below. -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)

26 February 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

A few of many socks in recent months to alter Green Day related articles to misrepresent their sales certs and performance on the record charts, as well as altering Billboard related articles to misrepresent how Green Day did on their charts, such as List of Billboard Hot 100 top 10 singles in 2005 and List of Billboard Mainstream Top 40 number-one songs of 2005. Slimslimmii is currently in the middle of a one-week block, while Nubdub is not blocked at all; the other accounts (aside from the IP range) are indef blocked but are necessary to establish this as a long-term abuse case. Regarding the IP range 2600:1006:b1xx:*, xx represents any two hexadecimal digits, as that portion of the address is always four digits; the range geolocates to Orlando, Florida, with the ISP being Cellco Partnership DBA Verizon Wireless.

From Boulevard of Broken Dreams (Green Day song): Dingdongtrump Slimslimmii Numberbullet SatisfactionDammit JaggerFagger Nubdub Borisentwistle Stumpwentz (confirmed sock) 2600:1006:b1xx:* 2600:1006:b1xx:* 2600:1006:b1xx:*

From American Idiot (song): Shethinksimbuckingthecousin JaggerFagger 2600:1006:b1xx:* 2600:1006:b1xx:*

From List of Billboard Mainstream Top 40 number-one songs of the 1990s: Shethinksimbuckingthecousin 2600:1006:b1xx:* Nubdub Billyjamesd (confirmed sock) Grohlhole (confirmed sock) Frankupapa (confirmed sock)

From List of Billboard Mainstream Top 40 number-one songs of 2005: Slimslimmii 2600:1006:b1xx:* 2600:1006:b1xx:* 2600:1006:b1xx:* 2600:1006:b1xx:* SatisfactionDammit Disherlamp (confirmed sock) Kalilisan (confirmed sock) Dolenzchild (confirmed sock) 2600:1006:b1xx:* Grohlhole (confirmed sock)

Another note: The IP range is particularly disruptive in the unprotected articles, and the address constantly changes per edit, except the prefix I note in the suspected list. I am aware range blocking should used as a last resort, and will leave it to the admin(s) who are involved with the sanctions per this report.

Note about Borisentwistle: I do list a diff of one of that account's edits above, and I checked thru this SPI archive, but do not know if it's a confirmed sock. (Account is indef blocked.)

MPFitz1968 (talk) 20:45, 26 February 2016 (UTC)


 * If any action were to be taken on the IP range (again, range blocking is a very last resort thing), I'm noticing with the b1xx part, it appears to be in the range b100 to b16f; I don't see anything b170 or higher from the diffs I cited, or edits in other Green Day/Billboard related articles they've been involved with. Hope this will help the admins. MPFitz1968 (talk) 21:45, 26 February 2016 (UTC)

More evidence:

From "Wake Me Up When September Ends": Slimslimmii Numberbullet 2600:1006:b1xx:* 2600:1006:b1xx:* 2600:1006:b1xx:*

MPFitz1968 (talk) 02:42, 27 February 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to archive:
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)
 * -- Amanda  (aka DQ) 04:32, 2 March 2016 (UTC)

24 March 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Boulevard of Broken Dreams (Green Day song) has seen heavy sock activity from this master; to quote the archived remarks, they are "alter[ing] Green Day related articles to misrepresent their sales certs and performance on the record charts." Here are some examples of past socks doing this:. Now, we have more of the same:. It is worth noting that they have edited on a number of other articles that have been hit by socks, and doing pretty much the same exact thing: Know Your Enemy (Green Day song), Green Day discography , Holiday (Green Day song) , Wake Me Up When September Ends. Since CU picked up a number of sleepers (7, by my count) last time, I think it is worth requesting here. GABHello! 00:25, 24 March 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ match to and several others. ​—DoRD (talk)​ 00:54, 24 March 2016 (UTC)
 * Blocked and tagged. Closing.  Vanjagenije  (talk)  01:00, 24 March 2016 (UTC)

28 March 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Made a strange edits at Wikipedia talk:Sockpuppet investigations/Никита-Родин-2002/Archive.  Vanjagenije  (talk)  22:55, 28 March 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * This is really weird: . GABHello! 15:14, 29 March 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing my own request.  Vanjagenije  (talk)  22:56, 28 March 2016 (UTC)
 * I don't know how they stumbled upon this case, but the rest of the behavior isn't at all like this sockmaster, so I'm not inclined to run a check. However, I did go ahead and take a look, and it doesn't appear to be related. ​—DoRD (talk)​ 15:30, 29 March 2016 (UTC)
 * Closing the case.  Vanjagenije  (talk)  16:21, 29 March 2016 (UTC)

14 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Back at the certification changes again. See, ,. He also originally was IP blocked and requested an exemption on his talk page. This one's a very obvious WP:DUCK. ~ RobTalk 12:13, 14 April 2016 (UTC)
 * See the archive for more detailed information. This master is well known for messing with certifications on Green Day articles, inserting factually incorrect information. Here's some diffs from past socks changing certifications and messing with chart ranks: . See the diffs I provided above to show the current account is doing the same. ~ RobTalk 21:28, 14 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
 * 1) At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
 * 2) At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
 * 3) In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this.  Vanjagenije   (talk)  21:18, 14 April 2016 (UTC)
 * - Please, compare him to previous socks and check for sleepers.  Vanjagenije  (talk)  22:32, 14 April 2016 (UTC)
 * Canonworks99 is ✅, blocked and tagged. No apparent unblocked sleepers. Closing.--Bbb23 (talk) 20:01, 16 April 2016 (UTC)

17 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More messing with certifications of Green Day songs/albums.
 * This unregistered editor:
 * Past socks doing the same:  ~ RobTalk 12:32, 17 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP range blocked for a week. CLosing.  Vanjagenije  (talk)  13:54, 17 April 2016 (UTC)

17 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Back at the Green Day certifications .... again. Sleeper check done just a couple days ago, so no CU should be needed for this.
 * This account:
 * Other accounts: See the above unarchived SPI for a list of diffs. ~ RobTalk 20:39, 17 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Sock blocked. CAse closed.  Vanjagenije  (talk)  12:50, 18 April 2016 (UTC)

24 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More false information regarding chart performance/certifications inserted to Green Day articles.


 * Past socks:
 * Itriedsohard:
 * Andivebeendown:

Andivebeendown is a tad less obvious because they haven't edited Green Day articles (only Green Day information on other articles), but they're also changing chart performance and the two edits above are reversions to the false information inserted by the first sock listed here.

As these two socks went active at a similar time, it seems likely that other accounts may exist. A sleeper check is requested. ~ RobTalk 18:39, 24 April 2016 (UTC)


 * I also want to note a previous sleeper check managed to identify seven sleepers at once, so sleeper checks have demonstrated success for this master. ~ RobTalk 18:56, 24 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, and tagged. . Closing.--Bbb23 (talk) 19:39, 24 April 2016 (UTC)

26 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Yet more socking with Green Day articles (certifications/chart positions). I'm starting to go the route of requesting page protection, and hopefully that will calm things down. CU done just yesterday, so no need for a sleeper check yet.


 * Past socks:
 * IP
 * Bangywangy ~ RobTalk 04:09, 26 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP range also blocked. Closing.  Vanjagenije  (talk)  17:06, 26 April 2016 (UTC)

27 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Again, changing details about Green Day chart rankings.


 * Past sock:
 * Kellysince:
 * IP:

~ RobTalk 20:36, 27 April 2016 (UTC)


 * Added a second IP above.
 * 2601:343:8102:A130:A85E:7064:9BC:738D:
 * ~ RobTalk 20:40, 27 April 2016 (UTC)


 * Added a second user above.
 * Dashie440:
 * ~ RobTalk 20:50, 27 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I would like to also add User:Tonywasbrave to this report. Only one edit in contributions, but continuing vandalism to List of Billboard Hot 100 top 10 singles in 2005, with same alteration of chart statistics (for same Green Day song) like a fairly recently confirmed sock User:Bangywangy1998. Tonywasbrave edit Bangywangy1998 edit

I have also documented the vandalism at that particular article on its talk page Talk:List of Billboard Hot 100 top 10 singles in 2005, which contains a lot of diffs from socks and IP socks that have been tied to this report, similar to that edit by User:Tonywasbrave. MPFitz1968 (talk) 00:12, 28 April 2016 (UTC)


 * I added the Tony account to the report. ~ RobTalk 00:16, 28 April 2016 (UTC)


 * Would it be possible to range-block them? They seem to create too much trouble, not just on en.wp, but also globally.--Ymblanter (talk) 08:34, 28 April 2016 (UTC)
 * The IP was range blocked for a week by, but this particular master is very persistent. They'll be back. I'm starting to go the route of requesting semi-protection or pending changes protection on relevant pages to hopefully chase them off-site, although I'm somewhat concerned that doing so will just drive them to other pages not in my watchlist and/or make their edits harder to detect and revert. ~ RobTalk 12:50, 28 April 2016 (UTC)
 * I am afraid they are just editing random pages.--Ymblanter (talk) 12:56, 28 April 2016 (UTC)
 * I've been following them, and they have a very clear pattern. They started out just vandalizing details of Green Day articles to display false certifications/chart rankings. When those pages began to be watched more heavily and/or semi-protected, they moved on to other pages, but always related to Green Day certifications/chart rankings. For instance, they've edited Kelly Clarkson related pages, but only when doing so fits the narrative that Green Day songs stayed at the top of the charts for longer. So they're somewhat predictable. It's just a matter of finding all the pages they'd potentially be interested in. I have a strategy for that, but WP:BEANS applies. ~ RobTalk 13:01, 28 April 2016 (UTC)
 * I'm noticing the IP addresses have this pattern 2601:343:8102:* ... which also applies to the IP reported in the most recently archived sock report on April 26 — 2601:343:8102:6320:89ee:1869:356f:a2e7 in particular, which is still range blocked on the first 64 bits (what I discovered/studied the /64 at the end means in the block log), but notice the fourth group of numbers (bits 49 to 64) is different than the IPs reported here. If a range block is to apply here, I wonder if /48 (or less) is necessary, rather than /64. MPFitz1968 (talk) 17:34, 28 April 2016 (UTC)
 * That very well might block too many editors, though. I have a script that can check ranges of IPv4 to ensure there isn't too much damage, but it doesn't work for these types. ~ RobTalk 17:39, 28 April 2016 (UTC)
 * Please add IPv4 user 50.139.254.63 to the report, per this edit at List of Billboard Hot 100 top 10 singles in 2005: this IP's edit which is similar to Tonywasbrave edit and Bangywangy1998 edit. Also made change at List of Hot 100 Airplay number-one singles of the 2000s but discovered I had to go back further in that article's history to find the last clean version as another IP user 2601:343:8000:e046:addd:f2e3:d144:9ed3 made a falsifying edit back in January, placing Green Day's "Boulevard of Broken Dreams" into the list  with the former IP user just making updates to already incorrect info. I believe the IPv6 (starting with 2601:343:8000:e046:*) has previously been reported under this SPI. Immediately flagged the IPv4 as sock, with instant level 4 warning on their talk page ; hopefully I'm not too premature with that, but given the nature of edits in these Billboard articles, I think it was necessary. MPFitz1968 (talk) 14:16, 30 April 2016 (UTC)


 * I also just caught this, from a new user Johntheonestatewonder at List of Billboard Mainstream Top 40 number-one songs of 2005 similar to Kellysince edit and Dashie440 edit, two other accounts also part of this SPI report. MPFitz1968 (talk) 14:25, 30 April 2016 (UTC)
 * OK, decided to add the above two myself. Didn't seem so hard ;) . MPFitz1968 (talk) 14:28, 30 April 2016 (UTC)
 * Kellysince still needs to be blocked. Also, all users need to be tagged with sockpuppet. ~ RobTalk 18:12, 1 May 2016 (UTC)
 * Not sure whether I'm allowed to tag as a non-admin so I won't, but that is the correct tag to place on all user pages. ~ RobTalk 18:51, 1 May 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * As of this moment, it appears that every IP or account in the above list that has been recently active has been blocked at least once. Can anyone who is following this say if there is anything more to do? EdJohnston (talk) 17:45, 1 May 2016 (UTC)
 * I blocked Kellysince. You also mentioned tagging the socks. Anyone who wishes to do so might consider adding to the user pages of any of these accounts that are indef blocked. Assuming that's the current way of doing tags. I'm not on SPI very often. Just don't use the 'confirmed' parameter unless you are a clerk or checkuser. EdJohnston (talk) 18:47, 1 May 2016 (UTC)
 * I have now tagged all the registered accounts. Unless you know of other socks, this can probably be closed. Nobody has requested checkuser. EdJohnston (talk) 00:31, 2 May 2016 (UTC)


 * Named accounts blocked and tagged by EdJohnston. Closing. Katietalk 02:11, 2 May 2016 (UTC)

03 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Back at changing Green Day certifications:
 * Past socks:
 * IP:
 * Mywifelife:

CU has had success in the past at uncovering additional socks. Several articles that are usually a target of this master have recently been semi-protected, so sleepers are more likely than usual. Last sleeper check was April 24 (at least 5 accounts and 2 IP ranges ago). ~ RobTalk 21:30, 3 May 2016 (UTC)
 * I also just realized this IP range was previously blocked for this master. See . So this is exceedingly obvious and a longer duration range block would likely be effective. ~ RobTalk 21:32, 3 May 2016 (UTC)
 * Added Bornanother: ~ RobTalk 22:42, 3 May 2016 (UTC)
 * Added Uncleernie99: ~ RobTalk 03:28, 4 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I blocked the IP range for a month. Please, check those accounts and look for sleepers.  Vanjagenije  (talk)  09:37, 4 May 2016 (UTC)
 * ✅, blocked, tagged. . There was no need for a sleeper check, and there was really no need for a CU. These accounts could have been blocked based on behavior. Closing.--Bbb23 (talk) 12:28, 4 May 2016 (UTC)

04 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More messing with certifications of Green Day articles. This is an IP on a previously blocked range, and he's back to using it. This edit actually isn't vandalism (it appears to remove previously inserted vandalism), but the subject area and range makes it clear the IP is being used by this master.


 * Past socks:
 * IP: ~ RobTalk 21:40, 4 May 2016 (UTC)


 * Added 50.139.254.63: . Previously blocked as a socking IP for this master as well. ~ RobTalk 02:46, 5 May 2016 (UTC)
 * Added Creepsfeet: . ~ RobTalk 02:46, 5 May 2016 (UTC)
 * Did you see the account that was added? ~ RobTalk 12:05, 5 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

That IP edit you cited, Rob, came less than 15 minutes after the week-long range block expired. (#2135 in range block database dated May 3.) MPFitz1968 (talk) 00:35, 5 May 2016 (UTC)
 * I hadn't noticed that, but it's not surprising in the least. Just goes to show that a longer range block would likely be effective. He's been cycling between this and one other IP range. The other range is currently blocked for a month, so hopefully we'd get some quiet after this one is blocked. ~ RobTalk 02:40, 5 May 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Both ranges blocked. Case closed.  Vanjagenije  (talk)  08:35, 5 May 2016 (UTC)
 * Sorry, I blocked that account too.  Vanjagenije  (talk)  17:12, 5 May 2016 (UTC)

09 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

If this is the same person (and I think it is), they've evolved a bit. The subject area is slightly different, but the edits are very similar. Note that many Green Day related articles (the previous subject area of choice for this master) have been semi-protected and under high scrutiny, so that could have prompted the slight change in subject area.

Marsjkaj89 hasn't touched Green Day at all. Instead, they've been introducing false information about chart rankings and certifications (the master's MO) into Kelly Clarkson articles.

This isn't the first time this master's edited Kelly Clarkson articles in this way, although it's usually in the context of also changing that information on top 100 lists to make way for Green Day songs/albums.

On Since U Been Gone:
 * Past sock:
 * Marsjkaj89:

Also, past sock accounts for this master have referenced the Kelly Clarkson song "Since U Been Gone". See.

Ignoring the slight subject area difference, the edits are highly similar:


 * Past socks:
 * Marsjkaj89:

~ RobTalk 09:26, 9 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Just noting that a suspected sock of the one who edited Green Day pages User:Coach pennis (previously reported, and merged into this one ) and other IP editors had also previously edited on Kelly Clarkson discography page, changing the certification - here, here and here. Hzh (talk) 18:02, 9 May 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
❌.--Bbb23 (talk) 14:00, 10 May 2016 (UTC)
 * Closing, per CU & a thread further down. Ivanvector 🍁 (talk) 16:31, 18 May 2016 (UTC)

15 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Opening this as a new case because it doesn't need CU and is a DUCK case, whereas the above is more complicated. Don't want to muddy the above case further.

More certification/chart nonsense in Green Day articles.


 * Past socks:
 * Badloveblood:

Note: This sock also evolved to change articles where Green Day was nominated for awards to show them (incorrectly) as the winner. This should be kept in mind when looking for socks in the future. ~ RobTalk 19:33, 15 May 2016 (UTC)


 * Added Skinperson98: ~ RobTalk 20:14, 15 May 2016 (UTC)
 * Added 50.139.254.63:, previously blocked as a socking IP, very recently unblocked before this master popped up again. ~ RobTalk 21:13, 15 May 2016 (UTC)
 * Added Xxx billie xxx: . ~ RobTalk 21:13, 15 May 2016 (UTC)
 * All are now blocked by (thanks!) and this just needs tagging and closing. ~ RobTalk 17:19, 16 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

16 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More certification/chart nonsense.

Past sock: (one example of many) Jwkg: ~ RobTalk 20:51, 16 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I indefblocked them as a duck.--Ymblanter (talk) 05:56, 17 May 2016 (UTC)


 * Case closed.  Vanjagenije  (talk)  08:14, 17 May 2016 (UTC)

18 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Changing copies sold on Sugar, We're Goin Down. This is an article previously targeted by this master.

Past socks: Jamesjoekok:

Lately, this master has been branching out the content area he's known for vandalizing (Green Day). He's also been playing more or a long game; you can see this sock went unnoticed for several days. Sleeper checks have been successful in the past and one may be helpful here. I'll leave that up to a clerk to decide. ~ RobTalk 05:35, 18 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - obviously a duck with, just perpetuating exactly the same vandalism, but I'm curious about this user's creation date. Please check against (was named above but turned out unrelated). Ivanvector 🍁 (talk) 15:02, 18 May 2016 (UTC)
 * The following accounts are ✅ and have nothing to do with Marsjkaj89:
 * Blocked, tagged, closing.--Bbb23 (talk) 16:05, 18 May 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 16:05, 18 May 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 16:05, 18 May 2016 (UTC)

22 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More Green Day charts/certification nonsense.

Current sock: Past sock: (There's a good 200 diffs related to this in the archive as well).

Just noting for other editors looking for this user in the future; he's moved onto "The Who" articles as well now. ~ RobTalk 21:13, 22 May 2016 (UTC)
 * I'm adding more behavioral evidence here. Please closely evaluate this behavioral evidence and don't rely solely on CU results. This master had several ranges blocked for long periods recently, so it's very possible he's tried to change his IP through some method. ~ RobTalk 12:41, 24 May 2016 (UTC)
 * Edited Tommy (album) and introduced the exact same edit as a past CU-confirmed sock:
 * Edited Who's Next, same edit as a past sock:
 * Edited The Who discography, same edit as a past sock:
 * Edited Who's Greatest Hits, similar edit as a past sock:
 * More recently edited List of best-selling albums in the United States, with a similar edit as a past sock. Moreover, this edit was Green Day-related, which is a topic area this master is well-known for operating in:
 * I think there's more than enough here behaviorally to indef as a suspected sock. ~ RobTalk 12:41, 24 May 2016 (UTC)


 * I see he's been indef'd, which is good. When more "The Who" socks pop up, should I file them as a separate case under or here? The block wasn't for sockpuppetry and there's been no determination one way or the other here, so not sure which the CUs/clerks would prefer. ~ RobTalk 12:44, 24 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
.--Bbb23 (talk) 22:35, 22 May 2016 (UTC)

23 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More Green Day chart/certification nonsense. See above unarchived SPI for the diffs of past socks.

Current IP: ~ RobTalk 21:48, 23 May 2016 (UTC)


 * Adding 50.153.3.17: Similar chart/certification edits to The Who articles, which confirmed socks have also vandalized in the past.  ~ RobTalk 12:41, 24 May 2016 (UTC)
 * Adding Rosebeau6789: More of The Who stuff. ~ RobTalk 12:41, 24 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Based on Dasnasmas’s edits in between my last check and his indefinite block, I am reassessing my findings. Apparently, the user is branching out technically. Accordingly, the following two accounts are :
 * Block and tags. Closing.--Bbb23 (talk) 12:59, 24 May 2016 (UTC)
 * Block and tags. Closing.--Bbb23 (talk) 12:59, 24 May 2016 (UTC)
 * Block and tags. Closing.--Bbb23 (talk) 12:59, 24 May 2016 (UTC)

24 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More charts/certifications on The Who articles. ~ RobTalk 13:07, 24 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The accounts are filling in the blanks.
 * The following accounts are ✅ to each other and highly to the master:
 * I've tagged the new account (blocked by another administrator while I was checking) and adjusted the tags on the already-blocked accounts. Closing.--Bbb23 (talk) 14:19, 24 May 2016 (UTC)
 * I've tagged the new account (blocked by another administrator while I was checking) and adjusted the tags on the already-blocked accounts. Closing.--Bbb23 (talk) 14:19, 24 May 2016 (UTC)
 * I've tagged the new account (blocked by another administrator while I was checking) and adjusted the tags on the already-blocked accounts. Closing.--Bbb23 (talk) 14:19, 24 May 2016 (UTC)
 * I've tagged the new account (blocked by another administrator while I was checking) and adjusted the tags on the already-blocked accounts. Closing.--Bbb23 (talk) 14:19, 24 May 2016 (UTC)

24 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More chart/certification stuff, this time on Fall Out Boy, another artist that the master has targeted in the past. Example:

Is it possible to get some form of range block here? See the archive for some similar IPs that were used recently. ~ RobTalk 22:24, 24 May 2016 (UTC)


 * Adding 50.153.3.87: ~ RobTalk 00:03, 25 May 2016 (UTC)
 * Adding 50.153.1.25: ~ RobTalk 00:05, 25 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
I've looked at the feasibility of range blocks. When it's been possible, I've used them. The master does a fair amount of range hopping, and often the collateral damage is too high because the ranges are too wide and are used by innocent users and IPs.--Bbb23 (talk) 00:21, 25 May 2016 (UTC)
 * Case closed.  Vanjagenije  (talk)  18:36, 25 May 2016 (UTC)

25 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More chart/certification stuff. Back to Green Day this time. Example of near identical edits with past sock:  ~ RobTalk 17:57, 25 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Account has been blocked. Tagged as per diff. Closing. TDL (talk) 00:13, 27 May 2016 (UTC)

27 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More Green Day chart/certification stuff:  ~ RobTalk 23:30, 27 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked by Widr--Ymblanter (talk) 08:03, 28 May 2016 (UTC)


 * Already blocked. Case closed.  Vanjagenije  (talk)  08:16, 28 May 2016 (UTC)

28 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More chart/certification of Green Day articles. ~ RobTalk 17:13, 28 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Reported Jesseridway to AIV after this edit, and I saw this occurred after a final warning on their talk page. User has been blocked. MPFitz1968 (talk) 20:26, 28 May 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. Case closed.  Vanjagenije  (talk)  10:27, 29 May 2016 (UTC)

29 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Altering chart data at List of Billboard Mainstream Top 40 number-one songs of 2005 (diff), similar to a previous sock Johntheonestatewonder (diff), asserting a Green Day song was at #1 on that chart longer than it was, and clearly contradicting references in the article. MPFitz1968 (talk) 15:21, 29 May 2016 (UTC)
 * Adding Itsmagictime, asserting Green Day song was at #1 in weeks it wasn't at List of Billboard Mainstream Top 40 number-one songs of the 1990s (diff), similar behavior to the aforementioned sock Johntheonestatewonder who is listed in this SPI archive (diff). MPFitz1968 (talk) 04:28, 30 May 2016 (UTC)
 * Adding two related IPs: 50.153.1.21 at Good Riddance (Time of Your Life) (diff) similar to sock Tonywasbrave (diff); 50.153.1.17 at List of Billboard Mainstream Top 40 number-one songs of 2005 (diff) similar to aforementioned Johntheonestatewonder (diff).

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Blocked by . Tags on these past few socks that were blocked outside the SPI process would be appreciated, as it helps track the evolution of this master. His modus operandi has been expanding recently. ~ RobTalk 15:32, 29 May 2016 (UTC)
 * As a side note, I've been thinking about filing something at WP:LTA. Since mid-April, we've found 25 usernames and countless IPs connected to this master. His vandalism is sneaky enough that an LTA might help. Thoughts, ? ~ RobTalk 15:36, 29 May 2016 (UTC)
 * No objection, if it will deter the sockmaster(s) involved. Was looking at that LTA page and they identify alternatives, like WP:DENY and WP:RBI, which might also deter them, but I don't know which is better. MPFitz1968 (talk) 16:07, 29 May 2016 (UTC)
 * WP:DENY was tried for at least a month in March/April with no effect, and WP:RBI is more-or-less what's been done here. WP:LTA definitely isn't a deterrent; it's more about damage control. My understanding is that it's best used in the case of difficult-to-detect vandalism to increase awareness of the sneaky edits so editors can keep an eye out for them. I'm having second thoughts about listing after noticing LTA hasn't had a new case since 2014. It's borderline historical. Nevermind, was looking at the wrong page; the list is in a transcluded subpage. Most recent case was April 2016, so that's not a concern. ~ RobTalk 16:34, 29 May 2016 (UTC)
 * In any case, no objection. The sockmaster(s) here have been at it a long time. MPFitz1968 (talk) 17:01, 29 May 2016 (UTC)
 * Added Isleybros1962: ~ RobTalk 14:14, 30 May 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Group 1 is ✅ to each other:


 * Group 2 is ✅ to each other:
 * Both groups are to each other. . <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 16:30, 30 May 2016 (UTC)
 * Both groups are to each other. . <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 16:30, 30 May 2016 (UTC)
 * Both groups are to each other. . <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 16:30, 30 May 2016 (UTC)
 * Both groups are to each other. . <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 16:30, 30 May 2016 (UTC)
 * Both groups are to each other. . <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 16:30, 30 May 2016 (UTC)
 * Both groups are to each other. . <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 16:30, 30 May 2016 (UTC)

02 June 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More chart/certification stuff:  ~ RobTalk 14:54, 2 June 2016 (UTC)


 * Added 2600:1006:b157:10c3:404c:3dcc:fce2:a178:  ~ RobTalk


 * Added another IP and user. That range block badly needs to be reapplied. Here's the diffs for Oyvai and the IP following it:  ~ RobTalk 00:14, 3 June 2016 (UTC)


 * Added 2600:1006:B113:7E7:64FD:30E0:94D5:9D2A:
 * Identical edits introducing the same false content regarding charts between this account and a past sock:  ~ RobTalk 18:57, 6 June 2016 (UTC)
 * I'm done bothering with posting individual IPs, but please see the history on 21 Guns (song) to show that this 2600:1006:B1xx: range continues to pose an issue. ~ RobTalk 00:28, 9 June 2016 (UTC)
 * I'm done bothering with posting individual IPs, but please see the history on 21 Guns (song) to show that this 2600:1006:B1xx: range continues to pose an issue. ~ RobTalk 00:28, 9 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

IPs were part of three-month range block (2600:1006:B000:0:0:0:0:0/36) that just ended (Rangeblock report for May 31: #1904). MPFitz1968 (talk) 15:06, 2 June 2016 (UTC)
 * Added 2600:1006:b164:d727:9047:ed3d:6816:2280 (which made the same edit in List of Billboard Hot 100 top 10 singles in 2005 before the first IP listed above): MPFitz1968 (talk) 15:16, 2 June 2016 (UTC)
 * And another ... 2600:1006:b129:5f3e:5011:a694:24f6:ab3, similar to recently confirmed sock Tommycanyouhearme99. MPFitz1968 (talk) 15:23, 2 June 2016 (UTC)
 * Another edit by User:Oh3oh39231, at List of Billboard Mainstream Top 40 number-one songs of the 1990s, compared to an edit by yet another in the 2600:1006:B000:0:0:0:0:0/36 IPv6 family about an hour earlier —asserting Green Day songs were #1 in various weeks on this chart, going against cited sources there. MPFitz1968 (talk) 21:52, 2 June 2016 (UTC)
 * Comment about last range block: The block applied to 2600:1006:B000:0:0:0:0:0/36, and the IPs we've reported here so far have B1xx for the third group of the address. I have CIDR and wildcard prefix searches enabled to look at these IPs, and the block affected users with B0xx as well as B1xx in their third group of the address (couldn't find any users with B2xx thru BFxx in that group of numbers). From what I could see in the contributions for the B0xx group, they haven't been targeting the Green Day articles, or Billboard-related articles asserting one falsehood or another about Green Day's performance on the charts. So if another range block is needed, I'm hoping a narrower range. If I understand the notation correctly, something like 2600:1006:B100:0:0:0:0:0/40. MPFitz1968 (talk) 16:54, 3 June 2016 (UTC)
 * Adding Richreviewusa, making similar edit as Oh3oh39231 (also filed in this report) in List of Billboard Mainstream Top 40 number-one songs of the 1990s. MPFitz1968 (talk) 18:07, 5 June 2016 (UTC)
 * Yet another (after clerk endorsement): User:Wearoqwaz. Reached autoconfirmed status as they modified a semi-protected article, List of Billboard Mainstream Top 40 number-one songs of 2005: similar edit as sock Tommycanyouhearme99.
 * This user is now using sleepers to bypass semi-protection. Not great. We need a CU on this and a range block. ~ RobTalk 20:35, 13 June 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Please, check, , and  and check for sleepers.   Vanjagenije   (talk)  20:49, 8 June 2016 (UTC)


 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 01:13, 14 June 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 01:13, 14 June 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 01:13, 14 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

More false charts/certifications. This username has been around for long enough to be autoconfirmed and wasn't picked up in the recent CU, so a sleeper check would be appreciated.

Joz2bba: Past socks:  ~ RobTalk 16:38, 14 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:45, 14 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

More charts/certifications nonsense. ~ RobTalk 19:32, 17 June 2016 (UTC)
 * Requesting CheckUser since this editor is apparently using sleepers regularly now. ~ RobTalk 00:35, 18 June 2016 (UTC)
 * Please consider whether full protection of relevant articles is appropriate. I filed a report at WP:RFPP requesting such, but it was declined with a note indicating the declining admin believed the clerks and CUs were better qualified to decide if full protection is appropriate. This master has never stopped until he no longer had the technical ability to continue. Now that he's decided to use sleepers consistently, which he's used multiple times in the past, it's highly unlikely the vandalism will stop. The wide IP ranges used by this master make detecting sleepers very difficult as well, even with CU. ~ RobTalk 02:30, 18 June 2016 (UTC)
 * Before this is closed, could Lqwer be indefinitely blocked? He's currently only blocked 24 hours for adding unsourced content, and leaving an autoconfirmed account available for this master would cause headaches down the road. ~ RobTalk 02:52, 18 June 2016 (UTC)
 * For those who may be interested, there is a relevant discussion at ANI here on how to mitigate disruption from this user. ~ RobTalk 04:37, 18 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Adding users Lqwer057888 ( similar to ) and Ohlava ( similar to ), altering the two affected articles as autoconfirmed as the articles are both semi-protected. MPFitz1968 (talk) 00:06, 18 June 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ Lqwer057888 is Ohlava and possibly Vegangains. All are blocked regardless. No others immediately visible.--kelapstick(bainuu) 02:45, 18 June 2016 (UTC)
 * Yes, I had missed that. Thanks. -kelapstick(bainuu) 02:55, 18 June 2016 (UTC)
 * Case closed.  Vanjagenije  (talk)  12:06, 18 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

More certification/chart stuff with The Who. Example:

Given the user's past use of sleepers to get around semi-protection, a CU check might be helpful here. ~ RobTalk 19:25, 21 June 2016 (UTC)


 * Added, who is an actual sleeper, now heavily suggesting that such a check would be fruitful. ~ RobTalk 20:35, 22 June 2016 (UTC)
 * Added : ~ RobTalk 19:17, 28 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 21:15, 28 June 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 21:15, 28 June 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 21:15, 28 June 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 21:15, 28 June 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 21:15, 28 June 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 21:15, 28 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same pattern of changing charts/certifications to insert false information on articles related to The Who. 

The account is already indeffed. I'm making this report mostly for tracking purposes (although you're welcome to evaluate whether a check for sleepers would be helpful, since the last one turned up a sleeper before it "activated"). See, which is the first time I've seen a Nikita sock change the awards that a specific musician earned on their biography page. Worth bearing in mind during future rounds of whack-a-mole. ~ RobTalk 06:29, 30 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Closing, it looks like Materialscientist was looking into it two minutes before the SPI was filed. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 14:33, 30 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same MO of inserting false certifications/charts:  ~ RobTalk 21:26, 30 June 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked. Widr (talk) 21:29, 30 June 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This might be too early, but the actions seem to match past sockpuppets. Their first edit was to List of awards and nominations received by The Who. They waited until their account is four days old and are now making little dummy edits to their userpage so they can have the ten edit count to be autoconfirmed it seems. Sro23 (talk) 05:10, 4 July 2016 (UTC)
 * Adding 188.32.100.140, who has been editing User:OneLittleMouse's user page (an admin on Ru wiki) and mentions this SPI with this this edit summary. Sro23 (talk) 05:16, 4 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * The edits to User:Qa2ards follow the exact pattern this sockmaster has used to activate sleepers. This account is now autoconfirmed. A check for further sleepers would be sensible, since this one has been lurking since June 30. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 05:46, 4 July 2016 (UTC)
 * Technically, the account is not quite autoconfirmed if I'm reading the definition correctly. The account was created at 21:32 UTC on June 30, but would need to get to that time on July 4 to be at least four days old. However, it is getting there and has the 10 edits already, so good idea to stop them before they do reach autoconfirmed status. MPFitz1968 (talk) 06:10, 4 July 2016 (UTC)
 * For some reason, I thought June had 31 days for a moment. It's been a long week. But yes, they should be blocked before they activate the sleeper. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 06:15, 4 July 2016 (UTC)
 * Right now the user is insisting they are new and not a sockpuppet. I'm discussing it with them on their user talk, but I still don't buy it. Sro23 (talk) 20:35, 4 July 2016 (UTC)
 * Ten rapid edits to userspace to gain autoconfirmed status, the same topic area as this sockmaster, and an awareness of an SPI they were never informed of? They would have no way to know about this SPI if they weren't already watching it or someone told them about it. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 21:00, 4 July 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
Now that you folk hopefully have autoconfirmed all worked out, the account is ✅, blocked, and tagged. Closing.--Bbb23 (talk) 21:39, 4 July 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

More chart/certifications nonsense on The Who articles:. Also has the same pattern of activating sleepers; waiting four days with few to no edits before making rapid edits to his userspace to become autoconfirmed. This sockpuppeteer has always cultivated multiple sleepers at once, so a sleeper check would be useful. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 02:17, 9 July 2016 (UTC)
 * Added, who is a similarly-activated sleeper: . Already blocked, adding more for the record and to support the need for a sleeper check. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 03:59, 9 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Did you know nixon like chocolate? GABgab 02:25, 9 July 2016 (UTC)
 * That just made my night! I was thinking... what could that link possibly go to? ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 02:28, 9 July 2016 (UTC)
 * Glad I could help. GABgab 02:32, 9 July 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, and  belong to Никита-Родин-2002. - Mailer Diablo 06:10, 9 July 2016 (UTC)
 * Case closed.  Vanjagenije  (talk)  16:34, 9 July 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The IP is already blocked, but it's being included both because it helps support the CU and just for documentation. I understand a CheckUser won't be able to comment on the IP itself.

IP 73.148.178.92 made edits similar to past socks on Fall Out Boy discography, introducing false charts/certifications information:

Both the IP and Tcl1111 edit-warred on List of highest-certified music artists in the United States to add false information about certifications on The Who (another common topic area of this master). A previous sock did the same:

Both Tcl1111 and Hb2hhhhhhhhhhhh made edit requests at The Who discography after it was WP:30/500 protected as per the community's authorization of that protection level to respond to Nikita's vandalism, both dealing with changing certifications for The Who albums:  ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 01:16, 13 July 2016 (UTC)


 * This new edit from Hb2hhhhhhhhhhhh seals things for me, so I'm blocking accordingly: ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 02:33, 13 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Doesn't sound like you need it, but ✅. Courcelles (talk) 02:55, 13 July 2016 (UTC)
 * Case closed.  Vanjagenije  (talk)  07:58, 13 July 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Tagged itself as a sock here. Sro23 (talk) 17:31, 13 July 2016 (UTC)

Added 188.32.96.255, whose edits to Moldova were restored by Unghhg. This is really bizarre, because while the IP range has claimed to be Никита-Родин-2002 before, I don't think the master has shown interest in languages before? Sro23 (talk) 17:37, 13 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Nikita has taken an interest in tagging himself before. See the deleted revisions of Long-term abuse/Никита-Родин-2002, for instance. He's also used IPs in the 188.32.xx.xx range before, as shown at Category:Suspected Wikipedia sockpuppets of Никита-Родин-2002. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 19:50, 13 July 2016 (UTC)
 * Ian.thomson has blocked the account as a suspected sock of Who R U? and Materialscientist blocked the IP for a month. Closing. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 17:15, 14 July 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Made edits asking when WP:30/500 will expire on Tommy (album), similar to other confirmed socks on similar pages:  ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 23:49, 24 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Another edit was made that made this user quack, so there's no more need for a CheckUser. Closing my own report. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 02:18, 25 July 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Two sleepers which have been making new types of edit requests (changing influences, etc.) than the master's usual MO recently activated and made typical edits of past socks:

They're both indefinitely blocked (the interests spanning The Who and Green Day in addition to introduction of false info makes them WP:DUCKs), but the pattern of new types of edits on an expanded scope of articles with previously undetected sleepers is concerning. Could we get a sleeper check? Since we've blue locked many of the "typical" articles of this sockmaster, which were all on my watchlist, it seems like they've been using many accounts to make low volume edits to articles that people may not be watching. The chance of additional sleepers here is high. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 20:28, 28 July 2016 (UTC)


 * Added Uuuu9, already blocked. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 17:30, 29 July 2016 (UTC)
 * Added Uf22, already blocked, a sleeper this time that's been there for over a week. His edit was originally not caught. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 18:09, 29 July 2016 (UTC)
 * Added ?tidy, already blocked, recently created. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 18:26, 29 July 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
for sleeper check. — Rich wales (no relation to Jimbo) 05:35, 1 August 2016 (UTC)
 * The listed accounts are ✅ plus the following accounts (only if they're unblocked):
 * Generally, is doing a very good job of spotting and blocking them.
 * Blocked, tagged, closing.--Bbb23 (talk) 07:52, 1 August 2016 (UTC)
 * Generally, is doing a very good job of spotting and blocking them.
 * Blocked, tagged, closing.--Bbb23 (talk) 07:52, 1 August 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

DUCK. IP is restoring edits from past sock. Compare to   Eve rgr een Fir  (talk) 05:34, 2 August 2016 (UTC)
 * That sly dog. The IP was even mentioning Никита-Родин-2002. I'll remember for the future. Cheers.  Eve rgr een Fir  (talk) 06:54, 2 August 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked, but this should be moved to Sockpuppet investigations/Who R U?. It's definitely a Who R U? sock, as is, who tagged himself with another puppeteer's tag. Fixing that now. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 06:09, 2 August 2016 (UTC)
 * Yeah, Nikita generally doesn't mention himself (at least not recently) except when gloating. And that's infrequent (non-existent since the introduction of the blue lock, since he's been trying to be more low key). ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 06:56, 2 August 2016 (UTC)
 * Already blocked. Closing.  Vanjagenije  (talk)  12:18, 2 August 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Subtle changes to The Who certifications:, also Pete Wentz:  Right now they are making enough dummy edits to their userspace in order to become extended confirmed. Sro23 (talk) 01:16, 17 October 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged. Requesting CU to check for sleepers, since this editor was relatively close to becoming extended confirmed with this sleeper. I haven't seen this master around in a while, but given past persistence, I doubt that means he's gone away entirely. He was moving to some other music-related topic areas not on my watchlist last I was aware. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 04:06, 17 October 2016 (UTC)
 * ✅. No other accounts seen. Closing.--Bbb23 (talk) 18:12, 17 October 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

First ever edit was to The Ultimate Collection (The Who album), also later on Pete Wentz, and they are now making enough dummy edits in their user space in order to become extended confirmed. Sro23 (talk) 00:29, 13 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - please block. Also for sleepers based on past experience. Ivanvector (Talk/Edits) 00:32, 13 November 2016 (UTC)
 * - Katietalk 02:20, 13 November 2016 (UTC)
 * ✅, no sleepers that I see. Blocked and tagged. Katietalk 02:27, 13 November 2016 (UTC)
 * Closing. GABgab 03:03, 13 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The last time User:Joi1234 made similar disruptive changes to The Who's certified sales at the list of best-selling music artists was on October 8, 2016. Joi1234 has made similar edits to the list multiple times including this edit, and this edit Harout72 (talk) 01:30, 19 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 02:14, 19 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The same subtle changes to The Who:  Sro23 (talk) 06:22, 6 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
 * 1) At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
 * 2) At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
 * 3) In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this.  Vanjagenije   (talk)  09:10, 6 January 2017 (UTC)
 * The behavior convinced me to run a check. ✅ plus and a lot of logged-out editing. ​—DoRD (talk)​ 12:59, 6 January 2017 (UTC)
 * - Please block those accounts. Thanks, GABgab 15:04, 6 January 2017 (UTC)
 * Blocked. Widr (talk) 15:15, 6 January 2017 (UTC)
 * Thanks, closing. GABgab 15:20, 6 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

It's another sock making the same edit on The Who:. These socks have been bypassing semi-protection at a pretty quick rate, it might be appropriate to apply ECP to the article once again. Sro23 (talk) 01:14, 11 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Blocked and tagged. It looks like the socks are routinely getting autoconfirmed, so I'll upgrade it to ECP. I see BU Rob13 set up ECP for two months last time this came up, so I'll do the same. NinjaRobotPirate (talk) 10:54, 11 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

10 dummy edit to userspace in order to be autoconfirmed, just like other socks such as Xswwsx1234:. Is now creating hoaxes on the same articles:  Sro23 (talk) 13:14, 17 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. Case closed.  Vanjagenije  (talk)  14:50, 17 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

False certifications for the Who:    Sro23 (talk) 19:08, 22 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. Case closed.  Vanjagenije  (talk)  20:12, 22 January 2017 (UTC)
 * Just noting that a CU did a sleeper check requested off-wiki. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 20:13, 22 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Alteration of chart statistics of a song by The Who in List of Billboard Hot 100 top 10 singles in 1967, with recent sockpuppets' focus on articles pertaining to the rock group. MPFitz1968 (talk) 06:27, 28 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked. Requesting a sleeper check because this sockmaster tends to keep at least one sleeper going at all times. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 06:38, 28 January 2017 (UTC)
 * -- Amanda  (aka DQ) 07:20, 28 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Used similar methods of becoming autoconfirmed in order to subtly disrupt The Who  and related. Sro23 (talk) 03:04, 22 March 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus:
 * ​—DoRD (talk)​ 11:56, 23 March 2017 (UTC)
 * ​—DoRD (talk)​ 11:56, 23 March 2017 (UTC)
 * ​—DoRD (talk)​ 11:56, 23 March 2017 (UTC)


 * - Please block them. Thanks, GABgab 13:53, 23 March 2017 (UTC)
 * GeneralizationsAreBad - ✅.  ~Oshwah~  (talk) (contribs)   13:54, 23 March 2017 (UTC)


 * Plus the above listed account, if you don't mind? Thanks, GABgab 13:55, 23 March 2017 (UTC)
 * Heh, oops. Missed that one. All set ;-)  ~Oshwah~  (talk) (contribs)   13:56, 23 March 2017 (UTC)


 * Thanks. Tagged and closing. GABgab 14:01, 23 March 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

These edits show the same pattern of behaviour as before, adding false information to the same articles -
 * 1) changing awards won by Green Day -, , , , , , etc.
 * 2) changing certification -, , , , etc. Hzh (talk) 10:57, 2 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus . ​—DoRD (talk)​ 21:58, 2 April 2017 (UTC)
 * Socks blocked and tagged. Closing.  Vanjagenije  (talk)  22:09, 2 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

At List of Billboard Hot 100 top 10 singles in 2005, intent to alter chart statistics for Green Day songs is identical to past socks. MPFitz1968 (talk) 21:24, 20 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 23:44, 20 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The edits show the same pattern of behavior as before:
 * 1) changing awards won by Green Day -, , , , , , , etc.
 * 2) changing chart peak positions and certifications -, , , , , , etc. Hzh (talk) 09:50, 23 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 15:33, 23 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The edits show the same pattern of behavior as before:
 * 1) changing awards won by Green Day - ,,, , , , , , etc.
 * 2) changing sales and certifications of the album American Idiot -, , , , , etc. Hzh (talk) 21:13, 27 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Added Ramenpoodle:  Sro23 (talk) 20:00, 30 April 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Ks0stm (T•C•G•E) 21:25, 3 May 2017 (UTC)
 * - But, you are a checkuser.  Vanjagenije   (talk)  21:41, 3 May 2017 (UTC)
 * My goal was to go through all the open, non-CU cases and request CU where appropriate so CUs (myself included) could thin out the non-CU backlog, but the list is rather daunting, and my focus isn't quite where it needs to be at the moment. Ks0stm  (T•C•G•E) 21:46, 3 May 2017 (UTC)
 * - Katietalk 22:04, 3 May 2017 (UTC)
 * ✅ to the master are:


 * Ramenpoodle is ✅ from the others, though they're using different proxies/webhosts. All blocked and tagged. Katietalk 22:30, 3 May 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Yet more certifications hoaxing on The Who. Sro23 (talk) 23:58, 24 May 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Please, check this one.  Vanjagenije  (talk)  20:43, 26 May 2017 (UTC)
 * I laid down a few rangeblocks; hopefully they'll do the trick.  Ks0stm  (T•C•G•E) 21:09, 26 May 2017 (UTC)
 * - Please block the unblocked socks. Thanks, GABgab 05:34, 27 May 2017 (UTC)
 * Blocked and tagged. Closing.  Vanjagenije  (talk)  11:27, 27 May 2017 (UTC)
 * I laid down a few rangeblocks; hopefully they'll do the trick.  Ks0stm  (T•C•G•E) 21:09, 26 May 2017 (UTC)
 * - Please block the unblocked socks. Thanks, GABgab 05:34, 27 May 2017 (UTC)
 * Blocked and tagged. Closing.  Vanjagenije  (talk)  11:27, 27 May 2017 (UTC)
 * - Please block the unblocked socks. Thanks, GABgab 05:34, 27 May 2017 (UTC)
 * Blocked and tagged. Closing.  Vanjagenije  (talk)  11:27, 27 May 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Sigh. More hoaxing on The Who: Sro23 (talk) 18:54, 29 May 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Check this account, please.  Vanjagenije  (talk)  21:47, 29 May 2017 (UTC)
 * -  Ks0stm  (T•C•G•E) 23:23, 29 May 2017 (UTC)
 * Somewhere between and ✅. Rangeblocks will be of minimal use this time around. .  Ks0stm  (T•C•G•E) 23:45, 29 May 2017 (UTC)
 * Closed without tagging.  Vanjagenije  (talk)  11:34, 30 May 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Part of a group that consistently makes unreasonable and improperly sourced edit requests on Green Day related articles. jd22292 (Jalen D. Folf) (talk) 15:11, 20 July 2017 (UTC)


 * Update: 2 of the subjects also go to my Talk page for similar requests. jd22292 (Jalen D. Folf) (talk) 19:20, 20 July 2017 (UTC)


 * Adding Onlygodknowswhy. Just recently made a similar edit request on this talk page. jd22292 (Jalen D. Folf) (talk) 01:28, 23 July 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
The IPs are editing from different countries.--Bbb23 (talk) 17:06, 20 July 2017 (UTC)


 * I believe that Bowielowie may actually be . This edit is nearly identical to the one made by a recent sock, and they've been making edit requests to restore the sockmaster's preferred hoaxes on EC protected pages . Please compare Bowielowie to . Sro23 (talk) 00:04, 21 July 2017 (UTC)
 * ❌/.--Bbb23 (talk) 14:33, 21 July 2017 (UTC)
 * I've blocked the account, based also on these: . Closing. GABgab 14:59, 23 July 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Making more certification inflation edit requests at Talk:The Who discography. LTA. jd22292 (Jalen D. Folf) (talk) 00:14, 23 August 2017 (UTC)
 * First IP blocked 36 hours by . jd22292 (Jalen D. Folf) (talk) 00:34, 23 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Both IPs blocked. Closing. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 04:47, 23 August 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Per this edit's summary. Seems like this user is mimicking Gabucho181 again as they've done before. Or maybe it's just Gabucho...

Sleeper check and CU confirmation requested  Eve rgr een Fir  (talk) 05:05, 15 August 2017 (UTC)

sorry meant to file at Sockpuppet_investigations/Никита-Родин-2002.  Eve rgr een Fir  (talk) 02:41, 17 August 2017 (UTC)


 * This account have been globally locked and doesn't need to do anything, file it at Sockpuppet_investigations/Никита-Родин-2002 and case can be closed.  S A 1 3 B r o  (talk) 01:17, 19 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The account you listed as the master account does not exist; please can you fix that? Please also provide a diff for the sockmaster to compare to the one you provided for the suspected sockpuppet. Thanks! --Deskana (talk) 23:27, 16 August 2017 (UTC)
 * Closed.  Vanjagenije  (talk)  16:50, 23 August 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

sockpuppet request not good 46.17.7.19 (talk) 08:32, 8 September 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * It may be worth noting the user is blocked on at least three different wikis, though I'm not exactly sure why. Sro23 (talk) 21:41, 8 September 2017 (UTC)


 * Yeah, I'm not sure about this one. From the look of things, Пугачов Иван Петрович looks to be fighting Nikita socks. At least on Meta, he or she has filed global lock requests for a variety of Nikita socks and possibly IPs/open VPNs. I get the feeling this filing, along with another at the Steward Requests at meta is an attempt to harass Пугачов Иван Петрович. That said, there's a hell of a lot of smoke surrounding this account. The block on ruwiki is for socking, with the alleged sockmaster being Пугачов Иван, who is on an indef block originally for vandalism. There are a bunch of account names patterned after Пугачов Иван, like Пугачов Иван Петрович here. I don't completely understand what's going on here, so I feel like we should be coordinating with someone at Meta to find out what the heck is going on here. Whether there are grounds for a CU on the weird circumstances here, I'm not sure. The username similarities are pretty weird. —/M endaliv /2¢/Δ's/ 01:50, 9 September 2017 (UTC)
 * I did a bit of further looking into the other blocks of this account. It looks like the indef from Meadow Mari Wikipedia was primarily for edit warring with Пугачов Иван 2 over the status of Abkhazia. The edits at Russian Wikipedia appear to be related to the annexation of Crimea by the Russian Federation and edit warring over whether infoboxes for entities within Crimea should say they're in the Ukraine or the Donetsk People's Republic. I get the feeling that a lot of the apparent socks are dopplegangers, particularly given the edit warring at Meadow Mari Wikipedia. I feel pretty confident that, if this is the case, the IP is the sockmaster of the doppleganger accounts and that this report is part of a campaign of harassment. I can't tell much more than that, though. —/M endaliv /2¢/Δ's/ 19:48, 9 September 2017 (UTC)


 * I'm also curiosity on this user, but for me, I don't think he is the sock of Gabucho181 as the IP had make the accusation at here. User:Gabucho181 didn't seem any attached accounts record on Russian Wikipedia at all.  S A 1 3 B r o  (talk) 17:11, 9 September 2017 (UTC)
 * The harassment report by this IP range is currently globally blocked by RadiX due to cross-wiki abuse as leaky webhost, I believe that this IP was use by Gabucho181 in the past on campaign.  S A 1 3 B r o  (talk) 21:07, 9 September 2017 (UTC)


 * Very interesting. I just blocked this specimen: . Can't help wondering if it's related. Favonian (talk) 17:21, 9 September 2017 (UTC)


 * I swear the IP making this report is . See Long-term abuse/Gabucho181, where I've added related info. jd22292 (Jalen D. Folf) (talk) 18:45, 9 September 2017 (UTC)
 * There is such a collection of IPs and sock accounts reporting other socks both here and on Meta these days that it's hard to keep track of who is who anymore. You may be right about this specific IP though... now to figure out the other 20. -- Ajraddatz (talk) 03:55, 12 September 2017 (UTC)
 * Yes, the reporter is definitely Gabucho based on the IPs grammar. Gabucho had a similar problem with using English, and has had a recent history of attacking Pugachov Ivan Petrovich with sockpuppet accusations. jd22292 (Jalen D. Folf) (talk) 02:22, 16 September 2017 (UTC)
 * As to the subject of the report, I asked Пугачов Иван Петрович on Meta and he explained to me that he is blocked for using multiple accounts to edit war, but he is not the user that he is reporting. Пугачов Иван Петрович is editing fine on xalwp, and doesn't match the editing pattern of Никита-Родин's socks. Пугачов Иван Петрович is also unrelated to the IP that reported him here; I can't tell if that was a concern or not. -- Ajraddatz (talk) 07:30, 17 September 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - I don't see how this is a sockpuppet of Никита-Родин-2002. Diffs? GABgab 15:17, 8 September 2017 (UTC)
 * - Pinging, , . GABgab 14:12, 9 September 2017 (UTC)
 * I personally don't think Пугачов Иван Петрович is related to Никита-Родин-2002. Albeit they are currently blocked on three Wikimedia projects, they have been harassed by this long-term vandal. R adi X  ∞  23:17, 9 September 2017 (UTC)


 * On the subject of the initial report, that definitely isn't Nikita. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 19:58, 9 September 2017 (UTC)
 * I'm closing it because it's clear the original report is false. If the filer is a sock themselves, file an SPI under the appropriate master. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 14:45, 17 September 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

More unsupported edit requests on Talk:Boulevard of Broken Dreams (Green Day song), Talk: The Who discography, and Talk:Wake Me Up When September Ends. jd22292 (Jalen D. Folf) (talk) 00:45, 17 September 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked three of the IPs (other two are stale) and the account. Very obvious socks. Closing. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 14:45, 17 September 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Skycorganbilly has added unsourced content to biographies. First for neo-Nazi website maintainer Alex Linder, and then again for alt-right figure Charles C. Johnson. In both cases the editor simply copied existing refs which did not support the added content. This behavior is aggressively deceptive.

Between those edits, Threeeleven also added unsourced content with a false ref to the Johnson article. Threeeleven's user page is just "lk", which suggests the least amount of effort possible to remove a username redlink. This suggests past Wikipedia experience or something similar, such as off-wiki 'guidance'.

Joneswars made one minor edit to Charles C. Johnson. Joneswars' userpage is likewise a single letter.

Joneswars' only other article edit was to Green Day discography. Green Day is commonly grouped as part of the 'alternative rock' movement of the 1990s, along with Billy Corgan and 311 (band), linking all three through their usernames.

Requesting CheckUser: all suggest likely past Wikipedia experience or more sleepers.
 * The deceptive use of multiple accounts before any warning was issued
 * Skycorganbilly was created over a month ago but activated only to repeat this deceptive edit
 * The use of meaningless userpages

Recent IP edits to the Johnson article also seem to be from unusually varied International locations for an obscure American figure. I don't know if that means anything. Grayfell (talk) 23:36, 24 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
The following are ✅: Need a couple of minutes to work out who's the oldest, and I have my suspicions that these may belong to an existing master as well. Yunshui <sup style="font-size:90%">雲 <sub style="font-size:90%">水 14:43, 25 October 2017 (UTC)
 * Fizzberjin is the oldest account, please can we move this to Sockpuppet investigations/Fizzberjin? Yunshui <sup style="font-size:90%">雲 <sub style="font-size:90%">水 14:50, 25 October 2017 (UTC)
 * Actually - the master could be Никита-Родин-2002 instead... Yunshui <sup style="font-size:90%">雲 <sub style="font-size:90%">水 14:53, 25 October 2017 (UTC)
 * Yes - I reckon it is. This should migrate to Sockpuppet investigations/Никита-Родин-2002. Yunshui <sup style="font-size:90%">雲 <sub style="font-size:90%">水 14:58, 25 October 2017 (UTC)


 * - This is copied from Sockpuppet investigations/Skycorganbilly. Sro23 (talk) 17:16, 25 October 2017 (UTC)
 * - Please indef Skycorganbilly. Thank you. Sro23 (talk) 17:18, 25 October 2017 (UTC)
 * Done. Favonian (talk) 17:21, 25 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Hoaxing certifications on the same articles. Fits in with the master's common MO. Sro23 (talk) 08:58, 9 November 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to each other and Nikita:
 * ✅ to each other but to the others:
 * Go on behavior as to whether the latter two socks are Nikita. I think they are. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 15:34, 10 November 2017 (UTC)
 * Tagged the last two as suspected socks. Closing. Sro23 (talk) 17:15, 10 November 2017 (UTC)
 * ✅ to each other but to the others:
 * Go on behavior as to whether the latter two socks are Nikita. I think they are. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 15:34, 10 November 2017 (UTC)
 * Tagged the last two as suspected socks. Closing. Sro23 (talk) 17:15, 10 November 2017 (UTC)
 * Go on behavior as to whether the latter two socks are Nikita. I think they are. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 15:34, 10 November 2017 (UTC)
 * Tagged the last two as suspected socks. Closing. Sro23 (talk) 17:15, 10 November 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

User is blocked at ruwiki as a sockpuppet of ZOKIDIN (see CentralAuth, ruwiki contribs). ZOKIDIN is globally locked with reason being Cross-wiki abuse: Никита-Родин-2002 (see CentralAuth at meta for lock reason). -★- PlyrStar93. → Message me. ← 17:17, 14 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This is basically a repeat of what another editor said on my Talk page. My response to that editor still stands. UzbekRU appears to be ❌. Behavioral evidence is needed.--Bbb23 (talk) 18:15, 14 December 2017 (UTC)
 * Already globally locked. Closing. Sro23 (talk) 19:01, 14 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Identical userpages to User:Somehouse1250 and User:MarkSewath. Could use a check for sleepers. Primefac (talk) 17:42, 20 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  22:25, 20 December 2017 (UTC)
 * I based on the megaphone-duck level quacking going on. Primefac (talk) 17:42, 20 December 2017 (UTC)
 * - A sleeper check is a good idea. Thanks, GABgab 18:38, 20 December 2017 (UTC)
 * ✅ to and
 * All accounts so I think this is good to go. Primefac (talk) 14:08, 21 December 2017 (UTC)