Wikipedia:Sockpuppet investigations/Ants226/Archive

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The sockmaster was blocked as vandalism-only on Feb 8, and I've already blocked the sock, but I would like the accounts tagged and any other sleepers that may have been created blocked as well. The WP:DUCK evidence is that this person is really, really amused by the name "Sneed", as you can see in the account contributions. – Muboshgu (talk) 17:43, 10 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Probably at least some usage of proxies here, but there's nothing else visible. The two accounts are ✅ to each other, though.  A clerk could move this to Ants226 if desired.  That account was created first. NinjaRobotPirate (talk) 17:57, 11 February 2021 (UTC)


 * Moved case, closing. -- RoySmith (talk) 18:58, 11 February 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The accounts and IPs appear to share similar properties with the known sockmaster, including that they have a fascination with "chuck", "sneed", and "seed and feed". They have attacked pages that include the Sam Sneed, Chuck Hutchison, Ed Sneed, Richard A. Sneed, Christine Sneed, Omar Sneed, Chuck Mangione, and Hancock County, Tennessee articles. This looks like it's becoming a WP:LTA issue, though I figured I would report it here and request a checkuser for the accounts, to confirm sockpuppetry. — Mikehawk10 (talk) 06:37, 8 April 2021 (UTC)

Just as a follow up, it looks like there is heavy use of proxies (some of the IPs are African, some are South American, some are from Colorado in the United States, etc.), so the sockmaster appears to be technically sophisticated. I am unsure if any of these IPs are known to be open proxies, but it looks like some of them might be.— Mikehawk10 (talk) 15:25, 8 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * From a proxy perspective, I can confirm that some of the recent IPs are part of a proxy network that is not feasible to block. Some of the ones that haven't edited in a while might also have been part of it at some point, but have probably since rotated to other users. I won't provide details because I don't want to cook a tasty pot of beans for anyone, but clerks and CUs can feel free to email me for details if needed. The specific brand of vandalism is a meme (perma) . Per ' comment there, this is, and I presume that the CU side has been handled; this is LTA, so I don't think a merge is needed (though I'm happy for the reviewing clerk to overrule me there if they think it's warranted). All recently active IPs are currently blocked. Closing without further action. Blablubbs&#124;talk 15:48, 8 April 2021 (UTC)
 * Just to note that TryToBeFunny has been seen getting involved, but on the whole this is probably not them. -- zzuuzz (talk) 16:34, 8 April 2021 (UTC)