Wikipedia:Sockpuppet investigations/123.136.107.69/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Nearly identical behavior with blocked editor: Special:Contributions/123.136.107.19. All IPs are geolocated in Malayasia. These IPs have an obsession with calling American players Malaysian, e.g. ,, --David Tornheim (talk) 16:13, 31 May 2020 (UTC)

I believe you have seen this behavior and reverted as well. --David Tornheim (talk) 16:22, 31 May 2020 (UTC)
 * Yes. https://en.wikipedia.org/wiki/Special:Contributions/2405:3800::/37
 * https://en.wikipedia.org/wiki/Special:Contributions/113.210.0.0/16
 * https://en.wikipedia.org/wiki/Special:Contributions/123.136.112.0/21
 * Most recently from 123.136.107.19 and 123.136.107.5 so that would be https://en.wikipedia.org/wiki/Special:Contributions/123.136.0.0/16
 * https://en.wikipedia.org/wiki/Special:Contributions/123.136.107.0/24 Walter Görlitz (talk) 18:36, 31 May 2020 (UTC)
 * thanks for the block on the https://en.wikipedia.org/wiki/Special:Contributions/123.136.107.0/19 range, but since it's clearly block evasion from at least two other ranges (evidence is the subjects and classes of articles edited, and they content of the edits), shouldn't this block be at least as long as those? Walter Görlitz (talk) 18:36, 31 May 2020 (UTC)

You handled the original block of 123.136.107.19. Can you take a look? --David Tornheim (talk) 16:33, 31 May 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * blocked for one month for repeated block evasion by more users than this one. I'm not comfortable blocking this large a range for longer than that. Ivanvector (Talk/Edits) 16:47, 31 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Wikipedia:Sockpuppet investigations/123.136.107.69


 * The following ranges are currently blocked
 * https://en.wikipedia.org/wiki/Special:Contributions/123.136.112.0/21
 * https://en.wikipedia.org/wiki/Special:Contributions/2001:E68:5428:E4BA:0:0:0:0/64
 * https://en.wikipedia.org/wiki/Special:Contributions/113.210.0.0/16


 * Previous blocks include
 * https://en.wikipedia.org/wiki/Special:Contributions/2405:3800::/37
 * https://en.wikipedia.org/wiki/Special:Contributions/123.136.107.0/24
 * https://en.wikipedia.org/wiki/Special:Contributions/2405:3800:8B0:2811:0:0:0:0/64


 * Current editor: 123.136.111.143
 * https://en.wikipedia.org/w/index.php?title=New_England_Revolution_II&diff=prev&oldid=972472921
 * https://en.wikipedia.org/w/index.php?title=Sporting_Kansas_City_II&diff=prev&oldid=972472965


 * Blocked editor: 123.136.112.218
 * https://en.wikipedia.org/w/index.php?title=Sporting_Kansas_City&diff=prev&oldid=965962124
 * https://en.wikipedia.org/w/index.php?title=New_England_Revolution&diff=prev&oldid=965961992


 * Blocked editor: 2001:e68:5428:e4ba:f51a:cd9e:cec8:19ff
 * https://en.wikipedia.org/w/index.php?title=Sporting_Kansas_City&diff=prev&oldid=960168857


 * Blocked editor: 123.136.112.57
 * https://en.wikipedia.org/w/index.php?title=New_England_Revolution&diff=prev&oldid=966243878

This is a long-term problem. The editor either knows how to get a new IP or is on a device that acquires a new address somewhat frequently and so range blocks seem to be required. The one-month block on the previous range does not seem to be adequate. Walter Görlitz (talk) 17:54, 12 August 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * - No named accounts, but CU would be useful for tailoring the rangeblocks. —Mdaniels5757 (talk &bull;&#32;contribs) 18:19, 12 August 2020 (UTC)
 * Agree that a /19 block is a bit too broad, but would like to see any block that is applied here applied to the other ranges as well. Walter Görlitz (talk) 19:42, 12 August 2020 (UTC)
 * The editor doesn't seem to be shifting IPs. Walter Görlitz (talk) 05:49, 13 August 2020 (UTC)
 * Editor has switched to Walter Görlitz (talk) 17:17, 13 August 2020 (UTC)
 * Now at Walter Görlitz (talk) 16:44, 14 August 2020 (UTC)
 * Two recent edits from Walter Görlitz (talk) 05:07, 16 August 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - CU won't change anything since this only needs to be an anon-only block. The block they're operating from appears to be Special:Contributions/123.136.96.0/19, but there's a fair amount of activity on that range that doesn't appear to be this editor so I'm hesitant to widen the block that far. Leaving open for another clerk to have a look. GeneralNotability (talk) 19:33, 12 August 2020 (UTC)
 * Range blocked for three months, anon-only. ST47 (talk) 05:58, 16 August 2020 (UTC)
 * Noting that previous blocks of shorter durations have been unsuccessful. Users with accounts will not be affected, and ACC is available for new users. ST47 (talk) 06:02, 16 August 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * https://en.wikipedia.org/w/index.php?title=Wan_Kuzain&diff=prev&oldid=980255406
 * https://en.wikipedia.org/w/index.php?title=Wan_Kuzain&diff=prev&oldid=980357174
 * https://en.wikipedia.org/w/index.php?title=Wan_Kuzain&diff=prev&oldid=980328172
 * https://en.wikipedia.org/w/index.php?title=New_England_Revolution_II&diff=prev&oldid=980338712
 * https://en.wikipedia.org/w/index.php?title=Wan_Kuzain&diff=980226812&oldid=979306932
 * I'm suggesting that the editor has access to all of
 * protected Wan Kuzain until 2020-09-11 and 27.125.248.212 made the subject an American-born Malaysian on 2020-09-25, and an editor from that ISP has not backed-off the article since.
 * https://en.wikipedia.org/w/index.php?title=New_England_Revolution_II&diff=prev&oldid=980338712
 * https://en.wikipedia.org/w/index.php?title=Wan_Kuzain&diff=980226812&oldid=979306932
 * I'm suggesting that the editor has access to all of
 * protected Wan Kuzain until 2020-09-11 and 27.125.248.212 made the subject an American-born Malaysian on 2020-09-25, and an editor from that ISP has not backed-off the article since.
 * protected Wan Kuzain until 2020-09-11 and 27.125.248.212 made the subject an American-born Malaysian on 2020-09-25, and an editor from that ISP has not backed-off the article since.

Range blocks exhibiting this behaviour
 * U Mobile Sdn Bhd
 * https://en.wikipedia.org/w/index.php?title=Sporting_Kansas_City&diff=prev&oldid=965962124
 * https://en.wikipedia.org/w/index.php?title=New_England_Revolution&diff=prev&oldid=966243878
 * U Mobile Sdn Bhd
 * https://en.wikipedia.org/w/index.php?title=Sporting_Kansas_City_II&diff=prev&oldid=973240094
 * https://en.wikipedia.org/w/index.php?title=New_England_Revolution_II&diff=prev&oldid=973239808
 * U Mobile Sdn Bhd
 * https://en.wikipedia.org/w/index.php?title=Wan_Kuzain&diff=prev&oldid=959975870

Nearly identical behavior with blocked editor ranges: all IPs are on the U Mobile Sdn Bhd network, geolocated in Malayasia. Behaviourly, the editors are all changing the nationality of assoication football players to Malasian, even though they have never played for the nation (or are not naturalized) and associated nationalistic focus on Malasian association football. Walter Görlitz (talk) 05:29, 26 September 2020 (UTC)
 * I'm requesting that all blocks be extended to end at the same time please. I'll let the administering admin determine how long that is to be. Thanks. Walter Görlitz (talk) 05:34, 26 September 2020 (UTC)
 * 27.125.248.0/24 is now blocked by, but for adding unsourced content, however, the SPI is still open and we are dealing with block evasion. Walter Görlitz (talk) 21:20, 27 September 2020 (UTC)
 * Not block evasion? OK. Is it OK to ping you the next time the range changes. Walter Görlitz (talk) 00:58, 29 September 2020 (UTC)
 * , sure. I say it's not block evasion because I don't think it's intentional - it's just a dynamic IP being a dynamic IP. GeneralNotability (talk) 12:55, 29 September 2020 (UTC)
 * You're wrong. When one particular editor from a region continues to go back to the same articles time and again, and in a pattern to make the same changes, we have WP:QUACK. If you don't understand that, you should resign your adminship. Walter Görlitz (talk) 17:01, 29 September 2020 (UTC)
 * the behaviour you're describing may be disruptive but it is not sockpuppetry. The next time you personally attack a clerk you will be blocked from editing. Ivanvector (Talk/Edits) 17:29, 29 September 2020 (UTC)
 * So, when a blocked editor is doing this, is it sockpuppetry then? Yes, it is. I'm not personally attacking the clerk, I'm questioning why the clerk isn't doing their job. Walter Görlitz (talk) 21:35, 29 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * Comments I just like to point out to the admins to be careful here as you appear to be blocking the user mobile pool of U Mobile which has around 7 million subscribers. Govvy (talk) 10:34, 30 September 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * This isn't block evasion in my opinion so much as them being on an IP that changes a lot. Extended MaterialScientist's block to 3 months, don't think there's much else to do here. GeneralNotability (talk) 15:00, 28 September 2020 (UTC)
 * Two IP ranges cover all of the addresses reported here:
 * , which covers all addresses from 27.125.248.0 - 27.125.248.255
 * , which covers all addresses from 123.136.96.0 - 123.136.127.255
 * The target edits on both ranges are ; essentially confirmed to the extent we're able to do so for logged-out editors. There's a smorgasbord of partial rangeblocks on both ranges (one is very long), and the editor has been evading them but it's not clear whether they're evading intentionally or just because the blocks don't cover their actual IP space. GeneralNotability's blocks will help, and I'm going to do some cleanup on the rest. And yes,, if you notice that the user continues editing on IPs that are not within the two ranges here, please file a new report. You don't need to report each IP individually if you can determine they are part of a narrow range, and if you're not sure there's a tool here which will take a list of IPs and calculate the range for you. Ivanvector (Talk/Edits) 17:49, 29 September 2020 (UTC)

Suspected sockpuppets
They're back, see here for example:
 * https://en.wikipedia.org/wiki/Special:Contributions/27.125.240.207
 * https://en.wikipedia.org/wiki/Special:Contributions/27.125.240.159
 * https://en.wikipedia.org/wiki/Special:Contributions/2405:3800:81A:C3A4:2848:36B8:8059:B44#
 * https://en.wikipedia.org/wiki/Special:Contributions/2405:3800:805:225F:C93F:E124:AD12:1D16


 * Again randomly changing nationalities to Malaysian: https://en.wikipedia.org/w/index.php?title=Kei_Hirose&diff=987548711&oldid=987467342
 * https://en.wikipedia.org/w/index.php?title=Park_Tae-soo&diff=987504951&oldid=987254209

BlueJag (talk) 19:27, 7 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * you must use the proper format for filing sockpuppet investigation requests, otherwise nobody will see them. There is a form at WP:SPI that you can and should use. I've fixed this one for you. I'm also closing it because it's almost two months stale. Ivanvector (Talk/Edits) 22:52, 20 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Disruptive editing on association football articles, including changing the flag icon of players to the flag of Malaysia, e.g. Special:Diff/1005551076 and Special:Diff/1005551010. Already blocked, just filing for the record. —  Newslinger  talk   08:08, 9 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * for 3 months. —  Newslinger  talk   08:08, 9 February 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Previous behaviour that has been demonstrated by 123.136.107.69 is being repeated by 27.125.250.245. Notably and other South East Asian association football related changes.
 * changing Wan Kuzain nationality to Malaysian https://en.wikipedia.org/w/index.php?title=Wan_Kuzain&diff=prev&oldid=1009688777
 * changing Khair Jones nationality to Malaysian https://en.wikipedia.org/w/index.php?title=Khair_Jones&diff=prev&oldid=1009691150
 * modifying or updating List of Malaysia footballers born outside Malaysia with subjects who are tenuously Malaysian at best https://en.wikipedia.org/w/index.php?title=List_of_Malaysia_footballers_born_outside_Malaysia&type=revision&diff=1009691953&oldid=1009655628

ISP is once again U Mobile Sdn Bhd in Malaysia. I checked the range here and this is the only IP that has had any recent related activity.

The blocks on two of the ranges expire 2021-07-07. Please extend those blocks to 2021-08-08, the third range to match those first two, and this new address should match those blocks. Walter Görlitz (talk) 21:48, 1 March 2021 (UTC)
 * https://en.wikipedia.org/wiki/Special:Contributions/123.136.112.0/21
 * https://en.wikipedia.org/wiki/Special:Contributions/123.136.96.0/19
 * https://en.wikipedia.org/wiki/Special:Contributions/27.125.249.0/24
 * It has now spread to include and  and possibly, although this fourth IP has not exhibited the edits making subjects Malaysian the way the others have. Walter Görlitz (talk) 06:26, 2 March 2021 (UTC)
 * 27.125.250.0/24 has now been blocked for a week. Is there something missing from this SPI that no admins have commented? Walter Görlitz (talk) 17:29, 2 March 2021 (UTC)
 * 27.125.250.0/24 is partial blocked (for a particular page) and not a full block. --Justanothersgwikieditor (talk) 01:54, 3 March 2021 (UTC)
 * I saw a short block, but this is block evasion and should be treated as such. Walter Görlitz (talk) 05:00, 3 March 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked 27.125.250.0/24 until 2021-08-08. I don't see a pressing need to add a month to the other rangeblocks, especially since they are checkuser blocks. Closing. GeneralNotability (talk) 02:48, 5 March 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Falsely adding Malaysian players into overseas clubs as usual. Also using U Mobile Sdn Bhd. Flix11 (talk) 05:32, 19 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * It seems similar, but the edits to actors does not fit the M.O., but there has been activity at 27.125.242.0/24 lately This started after https://en.wikipedia.org/wiki/Special:Contributions/27.125.240.0/24 got a three-month block. Not sure how quickly the editor can refresh their IP. Other blocks at https://en.wikipedia.org/wiki/Special:Contributions/123.136.112.0/21 https://en.wikipedia.org/wiki/Special:Contributions/123.136.96.0/19 https://en.wikipedia.org/wiki/Special:Contributions/27.125.249.0/24 and https://en.wikipedia.org/wiki/Special:Contributions/27.125.250.0/24 Walter Görlitz (talk) 06:42, 19 June 2021 (UTC)
 * Which account are you declining to link this block of IPs to? These are all IPs! Walter Görlitz (talk) 18:57, 19 June 2021 (UTC)
 * Thanks for the clarification. Walter Görlitz (talk) 19:27, 19 June 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * --Blablubbs&#124;talk 10:12, 19 June 2021 (UTC)
 * @Walter Görlitz, I'm not declining a block: I'm declining the Checkuser request in the initial filing since we may not link IPs to registered accounts barring highly exceptional circumstances. --Blablubbs&#124;talk 19:26, 19 June 2021 (UTC)
 * The edits around 19 Jun look like them, but they haven't been active on the range in question since then so I don't see much value in blocking. Closing. GeneralNotability (talk) 19:17, 1 July 2021 (UTC)