Wikipedia:Sockpuppet investigations/Andrew D. Roper/Archive

24 October 2014

 * Suspected sockpuppets

Maybe:


 * User compare report Auto-generated every hour.
 * Editor interaction utility

These two accounts are part of what I suspect is a larger sockfarm dedicated adding spam links to "what-to-get-your-mom-for-christmas.com" and closely related sites. The IPs both geolocate to Vietnam so I suspect they're proxies. I know there's at least one more account that I blocked recently, so I'd appreciate a CU so that we can tie all the accounts together and document this to aid in dealing with it in future. HJ Mitchell &#124;  Penny for your thoughts?  17:49, 24 October 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Ah, I've been back through my block log and found the other account,, and added it to the list. HJ Mitchell  &#124;  Penny for your thoughts?  17:55, 24 October 2014 (UTC)
 * Okay, this seems to go back to . If that turns out to be the fist account, this page will probably need moving, but I wouldn't be surprised if there were earlier accounts. HJ Mitchell  &#124;  Penny for your thoughts?  18:02, 24 October 2014 (UTC)
 * Oh look, more Vietnamese IPs. And several more accounts. HJ Mitchell  &#124;  Penny for your thoughts?  18:29, 24 October 2014 (UTC)
 * And another one, blocked by . HJ Mitchell  &#124;  Penny for your thoughts?  18:39, 24 October 2014 (UTC)
 * Found more stuff through the link addition database. This SPI has a cross-wiki aspect. MER-C 03:33, 25 October 2014 (UTC)

— Berean Hunter   (talk)  21:46, 25 October 2014 (UTC)
 * since this involves cross-wiki abuse.
 * Spam report on WP
 * Spam report at Meta
 * Request CU to flush out remaining accounts.
 * It is to  the following accounts are related.
 * Already blocked.
 * Already blocked.
 * Already blocked.
 * Already blocked.
 * Already blocked.
 * Already blocked.
 * Already blocked.
 * Already blocked.


 * Otherwise, the other accounts are technically ❌, apart from, which isn't registered. PhilKnight (talk) 07:56, 27 October 2014 (UTC)
 * I've moved this page to 'Andrew D. Roper' per HJ Mitchell's comment. I'll tag 'Andrew D. Roper' as the sockmaster, and the others as his socks. PhilKnight (talk) 09:18, 27 October 2014 (UTC)

13 November 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The user adds and links to promotional material, which is the same behavior as the sock accounts. (1) The linked website is set up in the same format with the same Amazon referral links as the past websites. I'm requesting a checkuser as the previous instance involved cross-wiki abuse. Mike V •  Talk  05:31, 13 November 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Mike V •  Talk  05:32, 13 November 2014 (UTC)
 * Technical evidence suggests they aren't socks, but I would say that the other evidence is too strong to ignore. It could be that this new spammer just took the same 'work at home' job . The new spammer has no sleepers at this time. -- Versa geek  05:59, 13 November 2014 (UTC)
 * Thanks for the check. I've blocked the account, closing now. Mike V  •  Talk  06:19, 13 November 2014 (UTC)