Wikipedia:Sockpuppet investigations/Bennet43/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I first noticed Certaislan because they recreated a nearly identical version of an article created by Freoanlsji: see the deleted history of Origin of Chronic Diseases and Origin of internal diseases. Certaislan also overlaps with Freoanlsji on the highly obscure subjects of Rodney Raanan and Edgar Pick. This is especially remarkable considering that Certaislan only has 135 edits, and strongly suggests meatpuppetry if not outright socking.

The other two accounts have little direct article overlap but share broad behavioural similarities with Freoanlsji. Bennet43, Rengrutrial and Freolansji all make extensive use of the Shortdesc helper script, create articles on UPE-prone topics (see e.g. ), and, most interestingly, have recently taken to adding negative material to articles about MENA countries - this pattern is pretty clear from looking at the accounts' contributions pages, but see for example these consecutive edits to Human rights in Saudi Arabia: and these to Foreign workers in Saudi Arabia:. The three accounts frequently cite Human Rights Watch:, ,.

Requesting Checkuser to unravel the relationships between these accounts and to uncover any potential others, as this looks like some sort of long term UPE operation. Spicy (talk) 06:46, 15 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * This sockfarm may have changed owner and is likely controlled by Radovicdarko538 (SPI) since somewhere around late 2020 or early 2021. Comparing to technical evidence from that other SPI, if any is available, might be useful. MarioGom (talk) 15:42, 10 July 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * – per filer. This may be partially meat, but I'm not sure, and the sequential edits, recreations and generally similar editing patterns noted in the filing are certainly strongly indicative of coordinated behaviour. This smells of UPE (and of a very discomforting variety at that), so CU is warranted to see how exactly these accounts are related and uncover potential others, though I suspect we may encounter proxy use. Thanks and best, Blablubbs&#124;talk 10:59, 15 April 2021 (UTC)
 * The possible users geolocate to the same area, while the others geolocate to other countries separately. They're all using the same (common) user agent.  ~Oshwah~  (talk) (contribs)   15:45, 15 April 2021 (UTC)
 * The possible users geolocate to the same area, while the others geolocate to other countries separately. They're all using the same (common) user agent.  ~Oshwah~  (talk) (contribs)   15:45, 15 April 2021 (UTC)
 * The possible users geolocate to the same area, while the others geolocate to other countries separately. They're all using the same (common) user agent.  ~Oshwah~  (talk) (contribs)   15:45, 15 April 2021 (UTC)
 * The possible users geolocate to the same area, while the others geolocate to other countries separately. They're all using the same (common) user agent.  ~Oshwah~  (talk) (contribs)   15:45, 15 April 2021 (UTC)
 * The possible users geolocate to the same area, while the others geolocate to other countries separately. They're all using the same (common) user agent.  ~Oshwah~  (talk) (contribs)   15:45, 15 April 2021 (UTC)
 * The possible users geolocate to the same area, while the others geolocate to other countries separately. They're all using the same (common) user agent.  ~Oshwah~  (talk) (contribs)   15:45, 15 April 2021 (UTC)
 * The possible users geolocate to the same area, while the others geolocate to other countries separately. They're all using the same (common) user agent.  ~Oshwah~  (talk) (contribs)   15:45, 15 April 2021 (UTC)


 * Based on certain characteristics of the data, there is a possibility that these accounts (except Freoanlsji, who has been on one static IP since April) may be engaging in a particularly sophisticated form of CU evasion (CUs, please see ). This would require a nontrivial amount of resources and energy on the part of the sockpuppeteer (resources a UPE firm, for example, might have). If we think the behavior here is particularly compelling, it may be appropriate to dismiss the CU results as . Mz7 (talk) 19:24, 9 July 2021 (UTC)
 * I concur that Certaislan, Bennet43, and Rengrutrial are likely using a form of technical obfuscation that in many (but not all) cases requires significant resources. I would report with regard to these accounts. KevinL ( aka L235 · t · c) 01:49, 10 July 2021 (UTC)
 * Based on the behavioral evidence, I think Bennet/Freo/Rengru are a group and Certa is a separate UPE (the deleted articles Spicy mentioned are extremely similar, but otherwise Certa is behaviorally distinct). first group, UPE-blocked Certa. GeneralNotability (talk) 01:30, 16 August 2021 (UTC)

Suspected sockpuppets
I'm reporting this to the Bennet43 SPI because that's where I started looking for, but note that this group is the same as the majority of accounts reported to BolsaOObsequios SPI. They are also related to some accounts reported to Bullaiytro SPI. I'm going to refer here to accounts in the three cases, and they should probably be merged. At least Bennet43 and BolsaOObsequios. Bullaiytro seems to be more noisy (mix of various groups, possibly sharing a proxy).

Accounts are often cross-wiki, especially enwiki+simplewiki, but also other languages. They are often registered sequentially, as noted below. Based on timing, It's almost certain there's more than one person using these accounts at the same time (e.g. Meriutanla and Kayerinl on 2022-04-25), but they are part of the same organized group. It's very likely that CheckUser data can't tie all of them together, although it was successful for some subgroups, so it might be worth checking.

Here's individual notes for each account. I have omitted some common traits such as the obvious similar naming, the general gnoming pattern present in many, or a characteristic usage of templates in user and user talk pages:


 * Not stale


 * 1)  signed up on 2020-05-13T18:14:41Z, close to Bretalins (2020-05-13T18:16:04Z), and Retanilan (2020-05-13T18:17:05Z). Edited  together with Laiytera. Also edited  which is related to Markus Kramer.
 * 2)  does pro-Qatar shilling (by extension, anti-UAE, anti-Saudi, etc)  similar to that done by Bennet43 , Rengrutrial , Freoanlsji , Maijeurin , and Meriutanla and Kayerinl (see below for diffs). Nerilanik signed up on 2020-05-16T10:37:28Z, close to Arratioan (2020-05-16T09:35:47Z), Kerianshil (2020-05-16T10:36:17Z), Laiytera (2020-05-16T10:38:42Z), Gretainis (2020-05-16T10:39:23Z), and Berantral (2020-05-16T10:40:26Z). Add the creation of  as a more general UPE red flag.
 * 3)  signed up on 2020-05-16T10:38:39Z, close to many others (see Nerilanik notes). Created, which was created on simplewiki by Traiantal as . Edited  together with Feriautan.
 * 4)  signed up on 2020-05-16T14:48:15Z, close to Rentrickan (2020-05-16T14:50:08Z), Lkinartain (2020-05-16T15:38:41Z), Mearitas (2020-05-16T15:40:22Z), Xreyain (2020-05-16T15:43:52Z), and Meriutanla (2020-05-16T15:52:51Z). Created, which was created on simplewiki by Neiahlan as.
 * 5)  also does pro-Qatar shilling . Signed up on 2020-05-16T15:52:51Z, close to many others (see Freaintanl notes). Compare name to Meritanutan and Feriautan. Overlap on  with Neriahins. See Meriutanla/Rengrutrial/Traiantal and /.
 * 6)  signed up on 2020-05-16T18:07:24Z, close to Irnaghyt (2020-05-16T17:09:43Z), and Uarsntiak (2020-05-16T18:27:29Z). See Brenkiald/Kaihsnual and.
 * 7)  signed up on 2020-05-21T01:27:21Z, close to Brattal (2020-05-21T01:15:23Z), Fretansil (2020-05-21T01:20:40Z), Derinkalo (2020-05-21T01:29:06Z), Meritanyti (2020-05-21T01:30:12Z), Hiretianji (2020-05-21T01:35:07Z), Nertianlins (2020-05-21T01:36:04Z), Berytanik (2020-05-21T01:36:47Z), Taunilak (2020-05-21T01:40:51Z ), Meritanutan (2020-05-21T01:52:51Z), Ghirnatean (2020-05-21T02:05:05Z), Vertinagin (2020-05-21T02:05:39Z), Derainyal (2020-05-21T02:20:10Z), and Getrainlsik (2020-05-21T02:36:08Z). See Bertainia and /.
 * 8)  signed up on 2020-05-21T02:20:10Z, close to many others (see Fretianski notes). Created, which was created on eswiki by Aydinean as
 * 9) . See Cretianlsin/Meritansil and /.
 * 10)  also does pro-Qatar shilling . Signed up on 2020-12-13T19:52:23Z, close to Fretaoan (2020-12-13T19:22:46Z), Proanski (2020-12-13T19:23:26Z), Raenilakis (2020-12-13T19:30:46Z), Einterhal (2020-12-13T19:38:15Z), Nirkaten (2020-12-13T19:40:00Z), Reanital (2020-12-13T19:41:27Z), Maijeurin (2020-12-13T19:43:04Z), Berinlatin (2020-12-13T19:49:30Z), Kaijilarn (2020-12-13T19:51:19Z), Drioinstan (2020-12-13T19:53:45Z), Trabistan (2020-12-13T19:58:03Z), Hartsinner (2020-12-13T19:59:26Z), and Aerinsin (2020-12-13T20:01:53Z).
 * 11)  edited  which was created by Tumensik.


 * Possibly stale

These accounts are possibly stale on enwiki, but could still be blocked given that this sockfarm is known to re-use old accounts after years. Also including them because they are relevant to cross-check evidence for the non-stale accounts.


 * 1)  created  which was edited by Atrstin.
 * 2)  signed up on 2019-07-03T06:57:29Z, close to Kirlsona (2019-07-03T06:58:34Z). Edited  which was also edited by Rubelantri and created on simplewiki by Ferainakl as.
 * 3)  edited, see Rubelantri and.
 * 4)  signed up on 2020-05-13T17:39:47Z, close to Nareialneish (2020-05-13T17:36:01Z), Renaglain (2020-05-13T17:38:15Z), Aurganteila (2020-05-13T17:38:53Z), Retainali (2020-05-13T17:50:00Z), Maerinali (2020-05-13T17:51:09Z), Kaileian (2020-05-13T17:51:50Z), and Nreatian (2020-05-13T17:57:55Z). See  which is related to Markus Kramer (see Feriautan notes). See Brenkiald/Kaihsnual and.
 * 5)  signed up on 2020-05-13T17:51:50Z, close to many (see Brenkiald notes). Created, also created/edited by Raefsyin and Merinalsi as.
 * 6)  signed up on 2020-05-13T18:17:05Z, close to others (see Feriautan notes). Created, also created in eswiki by Okalkasinas , and on simplewiki by Reatnsin and Eroaisn as.
 * 7)  signed up on 2020-05-13T21:15:13Z, close to Freoanlsji (2020-05-13T21:13:40Z), Certaislan (2020-05-13T21:14:11Z), and Ferainakl (2020-05-13T22:29:38Z). Overlap on  with Meriutanla.
 * 8)  signed up on 2020-05-13T22:29:38Z, close to others (see Neriahins notes). Edited, also by Brianglsui and Rubelantri  on enwiki as.
 * 9)  signed up on 2020-05-15T21:40:27Z, close to Vreailaksn (2020-05-15T21:36:52Z), Neiahlan (2020-05-15T21:41:49Z), Viratnslin (2020-05-15T21:43:46Z), Meritansil (2020-05-15T21:46:33Z), Cretialks (2020-05-15T21:47:46Z), Merinalsi (2020-05-15T21:50:04Z), Treianslian (2020-05-15T21:50:42Z), Tenmthal (2020-05-15T21:51:09Z), Wastinajs (2020-05-15T21:51:41Z), Lakeiahsi (2020-05-15T21:58:15Z), Kaijurtal (2020-05-15T21:58:53Z), and Bertainia (2020-05-15T22:46:05Z). See Kaiunit/Creainnia/Garestain and . Created, also created on enwiki by Tycovob5 as.
 * 10)  signed up on 2020-05-15T21:41:49Z, close to many others (see Creainnia notes). Created, also on enwiki by Freaintanl as.
 * 11)  signed up on 2020-05-15T21:46:33Z, close to many others (see Creainnia notes). Likely advertising article at . See Mearitas/Meritansil/Vreailaksn and /. See Cretianlsin/Meritansil and /.
 * 12)  signed up on 2020-05-15T21:50:04Z, close to many others (see Creainnia notes). See Kaileian/Raefsyin and /.
 * 13)  signed up on 2020-05-15T21:51:41Z, close to many others (see Creainnia notes). See Fretansil/Berytanik and /. See Wastinajs/Irnaghyt and /.
 * 14)  signed up on 2020-05-15T21:58:15Z, close to many others (see Creainnia notes). See Meritanutan and /.
 * 15)  signed up on 2020-05-15T21:58:53Z, close to many others (see Creainnia notes). See Nreatian/Retainali/Doeiani/Jaineutral and //.
 * 16)  signed up on 2020-05-15T22:46:05Z, close to many others (see Creainnia notes). See Fretianski and /. See Derinkalo and /.
 * 17)  signed up on 2020-05-16T10:40:26Z, close to many others (see Nerilanik notes). See Getrainlsik/Kaileian/Irnaghyt and /
 * 18)  signed up on 2020-05-21T01:30:12Z, close to many others (see Fretianski notes). See Fretaoan/Meritanyti and /.
 * 19)  signed up on 2020-05-21T02:36:08Z, close to many others (see Fretianski notes). See Berantral/Kaileian/Irnaghyt and /
 * 20)  signed up on 2020-12-13T09:20:22Z, same day as many others. See Readrint/Eaentany and /.
 * 21)  signed up on 2020-12-13T19:22:46Z, close to many others (see Kayerinl notes). See Fretaoan/Meritanyti and /.
 * 22)  signed up on 2020-12-13T19:23:26Z, close to many others (see Kayerinl notes). See Traiantal/Bayetisn/Amonthis/Proanski and.
 * 23)  signed up on 2020-12-13T19:30:46Z, close to many others (see Kayerinl notes).
 * 24)  signed up on 2020-12-13T19:58:03Z, close to many others (see Kayerinl notes). See Rengrutrial/Trabistan and /. Shares an interest with Rengrutrial on Canadian businesspeople }.
 * 25)  signed up on 2020-05-16T14:48:15Z, close to Rentrickan (2020-05-16T14:50:08Z). Co-spammed / with Laiytera. See Meriutanla/Rengrutrial/Traiantal and /. See Traiantal/Bayetisn/Amonthis/Proanski and.
 * 26)  signed up on 2020-12-17T19:37:00Z, close to Raefsyin (2020-12-17T19:14:47Z). See Kainein/Meriayn and . Both Kainein/Kaiunit place similar software inboxes.
 * 27)  signed up on 2020-12-17T20:33:15Z, close to Amonthis (2020-12-17T20:31:13Z). See Kaiunit/Creainnia/Garestain and . Both Kainein/Kaiunit place similar software inboxes.
 * 28)  signed up on 2020-12-28T19:32:02Z, close to Raeutriam (2020-12-28T19:39:23Z), and Bretain (2020-12-28T19:46:02Z).
 * 29)  signed up on 2020-12-28T19:46:02Z, close to others (see Treinakis notes).
 * , already blocked on simplewiki for sockpuppetry (I'm not sure which case). See Traiantal/Bayetisn/Amonthis/Proanski and.
 * 1)  signed up on 2021-02-23T19:37:43Z, close to Bartsinak (2021-02-23T19:56:17Z).
 * 2) . Already blocked on simplewiki and glocked, not tagged on eswiki. See Fresoan/Maurtstin/Ratinsu/Okalkasin and //. See Ratinsu/Ghusytal and . See Ratinsu/Maijeurin and ///.
 * 3) . Already blocked on simplewiki.
 * 4) . Already blocked on simplewiki and itwiki. See Okalkasin/Guatrsan and /. See Fresoan/Maurtstin/Ratinsu/Okalkasin and //.
 * 5) . See Fresoan/Maurtstin/Ratinsu/Okalkasin and //.
 * 6) . Created, which was created on enwiki by Derainyal as.


 * Already blocked

I'm including some blocked but untagged accounts for bookkeeping.


 * 1)  signed up on 2020-05-16T15:40:22Z, close to many others (see Freaintanl notes). See Mearitas/Meritansil/Vreailaksn and /.
 * 2)  signed up on 2020-05-16T10:39:23Z, close to many others (see Nerilanik notes).
 * 3)  signed up on 2020-05-16T17:09:43Z, close to others (see Kaihsnual notes). See Wastinajs/Irnaghyt and /. See Getrainlsik/Kaileian/Irnaghyt and /
 * 4)  signed up on 2020-05-16T18:27:29Z, close to others (see Kaihsnual notes). See Uarsntiak/Rtatinsia and /.
 * 5) . See Rubelantri/Ferainakl/Brianglsui and {{w|:simple:LCM Partners}/. See Rubelantri/Sringneri and /.
 * 6)  signed up on 2019-07-03T06:58:34Z, close to Brianglsui (2019-07-03T06:57:29Z). Already blocked in Bullaiytro SPI, confirmed to other accounts there (unnamed in the casepage, but presumable some of the other accounts named here).
 * 7)  signed up on 2020-05-13T17:57:55Z, close to many (see Brenkiald notes). See Nreatian/Retainali/Doeiani/Jaineutral and //.
 * 8)  signed up on 2020-05-21T01:29:06Z, close to many others (see Fretianski notes). See Bertainia/Derinkalo and /.
 * 9)  signed up on 2020-05-16T15:38:41Z, close to many (see Freaintanl notes). See Lkinartain/Retainali.
 * 10)  signed up on 2020-05-13T17:36:01Z, close to many (see Brenkiald notes). Already confirmed to Renaglain/Aurganteila/Nareialneish/SimonChapple.
 * 11)  signed up on 2020-05-13T17:38:15Z, close to many (see Brenkiald notes). Already confirmed to Renaglain/Aurganteila/Nareialneish/SimonChapple.
 * 12)  signed up on 2020-05-13T17:38:53Z, close to many (see Brenkiald notes). Already confirmed to Renaglain/Aurganteila/Nareialneish/SimonChapple.
 * , an account used on behalf of a customer with real name for a commons upload, see Lkinartain/Retainali . Already confirmed to Renaglain/Aurganteila/Nareialneish/SimonChapple.
 * 1)  blocked as UPE before. Signed up on 2020-05-13T17:50:00Z, close to many others (see Brenkiald notes). See Nreatian/Retainali/Doeiani/Jaineutral and //. See Lkinartain/Retainali . See Retainali/Doeiani amd.

--MarioGom (talk) 21:25, 26 April 2022 (UTC)


 * Some are already blocked in simplewiki for socking, like Ratinsu, Bayetisn, or Reahsina, presumably already linked by CU there. MarioGom (talk) 21:43, 27 April 2022 (UTC)
 * Thanks everyone for handling this. Just for the record, G5 date predates Bennet43's block by far. See for example Tycovob5 block on 13 January 2020. MarioGom (talk) 12:38, 14 May 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I've done most of the checks, but have to hop back to work. Will write up tonight. Short version: heavy proxy use, but I might be able to tie a few together. GeneralNotability (talk) 19:12, 27 April 2022 (UTC)
 * Of the 11 non-stale accounts, I would consider all but Meriutanla, Kayerinl, and Atrstin to one another; those last three are inconclusive to each other and the main batch. Again, heavy proxy use, take CU findings with a grain of salt here. GeneralNotability (talk) 01:42, 28 April 2022 (UTC)
 * In progress. --Jack Frost (talk) 02:01, 11 May 2022 (UTC)
 * In summary, there's an overall pattern of similarity in naming convention, account creation, page creation, point of view, behaviour, promotional editing, and a number of other factors which I will not mention for reasons of beans which makes me comfortable that the following accounts are related and editing in breach of the Sockpuppetry Policy. If not operated by the same person, they are certainly working together in breach of policy. I have listed (crosswiki) articles on which the accounts have crossed over below, however I have also factored broader contributions and editing patterns as noted above into my assessment.


 * 1)  - Patricia Gloria Contreras
 * 2)  -  simple:Faisal Ahmed Aldeleigan / Draft:Draft:Faisal Ahmed Aldeleigan / simple:Popular.reviews / Popular.Reviews
 * 3)  - File:Uphold.png / Draft:Uphold.com
 * 4)  -  simple:D-Back / simple:Motoreasy / Draft:Motoreasy
 * 5)  - OneConnect Financial Technology / wikidata:Q85884912
 * 6)  - simple:JPEGmini / JPEGmini / Draft:Michele Massari / simple:Michele Casadei Massari
 * 7)  - Mark Rios / es:Mark Rios
 * 8)  - Markus Kramer / The Guiding Purpose Strategy / Responsible Investment Brand Index (RIBI)
 * 9)  - Cryptopolitan / simple:Cryptopolitan
 * 10)  - Draft:LCM Partners / simple:LCM Partners
 * 11)  - Nemat Sadat
 * 12)  - Commbox / simple:Commbox
 * 13)  - Alina Rai / simple:Alina Rai
 * 14)  - simple:Todd Stephenson / Todd Stephenson
 * 15)  -  simple:Dj 4Rain / Draft:DJ 4Rain
 * 16)  - Zulfiqar Ali (mayor) / simple:Zulfiqar Ali
 * 17)  - OMONO
 * 18)  - Lee Chambers (psychologist) / simple:Lee Chambers
 * 19)  - simple:AnyTo
 * 20)  - simple:Antonio Roulet Magides / Antonio Roulet
 * 21)  - Randi Cogan-Shinder / Randi Shinder
 * 22)  - fr:Tom Moyal / es:Tom Moyal / simple:Tom Moyal
 * 23)  - Portia Antonia Alexis / wikidata:Q75680628
 * 24)  - simple:Stefano Cicchini / Stefano Cicchini / simple:Touchstone Lofts / Touchstone Lofts


 * Whilst a number of these accounts are stale, or have not edited on enwiki at all, there is a pattern of dormant accounts being activated and re-used after a period of time. Given this, I am requesting that all of the accounts which I have listed above be blocked.
 * I note that there are a number of accounts reported which I have not listed, this is because they have already been blocked, or I was otherwise not sufficiently satisfied to request a block.
 * - Please block the accounts I have listed above indefinitely. --Jack Frost (talk) 09:43, 12 May 2022 (UTC)
 * @Jack Frost: done, with one caveat - there's no user by "Okalkasinas", did you mean ? firefly  ( t · c ) 14:01, 12 May 2022 (UTC)


 * Kayerinl and Nerilanik are obviously part of this group. Blocked both. --Blablubbs (talk) 10:54, 14 May 2022 (UTC)
 * , apologies, is indeed who I meant. Whilst you are there,  all appear to display similar spammy tendencies and I'd also recommend blocks.  I am still leaning toward giving the benefit of the doubt to. Thanks, --Jack Frost (talk) 14:46, 14 May 2022 (UTC)
 * @Jack Frost: done! firefly  ( t · c ) 11:45, 15 May 2022 (UTC)
 * all blocked accounts as suspected. Closing. --Jack Frost (talk) 12:00, 15 May 2022 (UTC)

Suspected sockpuppets
After the round of blocks in May 2022, a bunch of Bennet43 sleepers started to edit. There's the usual behavioral hints (user pages, gnoming style, timecards), as well as the following:


 * 1) . Created, related to  edited by Jaritensi. Very unusual edit summary  shared with Meriutanla , and Kayerinl . Used journal link added  as an edit summary in February 2022, together with Jaritensi  (nobody else used that exact edit summary since 1st January 2020 to present).
 * 2) . Signed up on 2020-05-16T15:56:32Z, close to many others (see Freaintanl notes in previous report). Link spam for designbro.com, internationalhighlife.com , leatherskinshop.com . DesignBro was spammed by other Bennet43 sockpuppets (Kaileian, Kaurrsti), see.
 * 3) . Signed up on 2020-06-20T14:54:14Z, close to Cretianlsin (2020-06-20T14:33:50Z), Kaberikuli (2020-06-20T14:58:46Z), Gartineial (2020-06-20T15:04:09Z), Jaritensi (2020-06-20T15:16:47Z), Weanlitar (2020-06-20T15:20:59Z), and Dearrsinlan (2020-06-20T15:49:37Z). First edit on 22 June 2022 (see Dreksinal/Kaberikuli/Gartineial).
 * 4) . See Dreksinal notes for sign up. First edit on 13 June 2022 (see Dreksinal/Kaberikuli/Gartineial).
 * 5) . See Dreksinal notes for sign up. First edit on 28 June 2022 (see Dreksinal/Kaberikuli/Gartineial).
 * 6) . See Dreksinal notes for sign up. Edited, which is related to  created by Reilskamin. Unusual interest in Scholia shared with Tratinsol (see Tratinsol notes). See Reilskamin notes about edit summaries.
 * 7) . See Dreksinal notes for sign up. Already blocked, including for the record and possibly CheckUser.
 * 8) . See Dreksinal notes for sign up. Reactivated on 2 June 2022 after long period of inactivity (see Dreksinal/Kaberikuli/Gartineial).
 * 9) . Signed up on 2020-12-13T20:00:51Z, close to many others (see Kayerinl notes in previous report). Removing a mainteinance tag with edit summary not applicable now, like Fretianski , Ghirnatean , Kaihsnual , and Kerianshil  (this edit summary has not been used by anyone else since 1st January 2020 to present, except for Riteboke - another UPE sock which may be related to this sockfarm).
 * 10) . Singed up on 2020-12-28T19:49:12Z, close to others (see Treinakis notes in previous report). Unusual interest in Scholia  shared with Jaritensi.

-- MarioGom (talk) 16:00, 24 August 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * From a technical perspective, pretty sure everyone here is using a proxy service consistent with known major UPE farms. Can't give much more than that. GeneralNotability (talk) 02:38, 27 August 2022 (UTC)
 * "Same proxy" is good enough for me given the clear behavioural link., , closing. Thank you for the excellent work, . --Blablubbs (talk) 11:22, 27 August 2022 (UTC)

Suspected sockpuppets
Signup on 2020-12-13T20:08:36Z, close to many others (see Kayerinl notes in the 26 April 2022 report, and Jaysgrian in the 24 August 2022 report). Reactivated after some inactivity, shortly after the last round of blocks, to do the same Qatarposting, similar to other previously reported socks. MarioGom (talk) 21:24, 1 September 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Seems obvious enough to me given evidence presented and timecards.   firefly  ( t · c ) 21:38, 1 September 2022 (UTC)
 * For the record, CU evidence has one of their IPs trying and failing to log into, another Bennet43 sock, a couple months ago. Not especially strong proof, especially since the IP appears to belong to a colo, but interesting. GeneralNotability (talk) 00:21, 2 September 2022 (UTC)

Suspected sockpuppets
Registered in May 2020 and then did absolutely nothing until 31 August this year when in the space of just over 10 minutes they edited a bunch of articles about construction software. Their 12th edit was to create Bridgit (software) as a redirect with the edit summary "redirect the deleted page about the construction software". The page was speedily deleted under G5 as being created by a sock of Bennet43 the previous day. This all feels mighty suspicious to me, and I'm pretty sure this is sock of somebody and Bennet43 seems the most likely. Requesting checkuser as if this is a sock then it was a sleeper account and there are probably more out there. Thryduulf (talk) 18:10, 28 September 2022 (UTC) Thryduulf (talk) 18:10, 28 September 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - Spammy, similar user name, part of the following signup batch on 2020-05-21: Brattal 01:15:23, Fretansil 01:20:40, Fretianski 01:27:23, Derinkalo 01:29:06, Meritanyti 01:30:12, Certauil 01:31:45, Hiretianji 01:35:07, Nertianlins 01:36:04, Berytanik 01:36:47, Taunilak 01:40:51, Meritanutan 01:52:51, Ghirnatean 02:05:05, Vertinagin 02:05:39, Derainyal 02:20:10, Crteianlian 02:21:17, Getrainlsik 02:36:08. I'm sure there're more active accounts. Please, perform that sleeper check. Thank you. MarioGom (talk) 17:56, 29 September 2022 (UTC)
 * ...  ~Oshwah~  (talk) (contribs)   00:31, 30 September 2022 (UTC)
 * . The location and network that this user is editing from has not crossed into any other location or network by the handful of previous socks that I was able to run. The tools I used didn't return any evidence of proxy or VPN usage through the IP, as compared to many previous socks that were found to be doing so. User agent is relatively common, and didn't match anything when compared to the other socks that I ran. Sorry, but I feel like I've done a fairly good amount of searching, but I don't see any "smoking gun", or even a close resemblance or possible connection with others. This is a lonely range too; very little activity outside the edits made by this user (again, as compared to previous socks that we've uncovered before). Resetting status as completed; .  ~Oshwah~  (talk) (contribs)   00:56, 30 September 2022 (UTC)


 * - The signup batch I described above, the lack of activity since signup (aged account farming), its comeback to overlap on Bridgit (software) with, and the user name, make it quite clear. Please, block the account as suspected sock of Bennet43. Thank you. MarioGom (talk) 18:12, 2 October 2022 (UTC)
 * MarioGom - ✅. Closing SPI...  ~Oshwah~  (talk) (contribs)   23:25, 2 October 2022 (UTC)
 * The SandDoctor Talk 11:52, 4 October 2022 (UTC)

Suspected sockpuppets
See below. --Blablubbs (talk) 14:13, 29 October 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Checked because the behaviour reminded me of Bennet43. Dabriaer3 is to suspected sock, and also ✅ to , who looks like they might be in the process of gaming edit count. , , closing.  --Blablubbs (talk) 14:16, 29 October 2022 (UTC)
 * Oh, I see Dabriaer is older than Bennet43. I don't think this urgently needs moving (neither of them was the actual first account, the time difference isn't huge, and I've gotten sort of used to "Bennet43"), but no objections if someone wants to. --Blablubbs (talk) 14:18, 29 October 2022 (UTC)
 * I'm not opposed to moving, but I'll pass at the moment. Dabriaer3 is one of the oldest accounts, but I think there are socks dating back to, at least, 2014. MarioGom (talk) 14:53, 29 October 2022 (UTC)

Suspected sockpuppets
Signed up in the same batch as many others (see Renbunreita, Areunlukta, Erunleria, Ruitroluk... ). Same behavior, account aging, twinkle gaming, long inactivity period. Created Munnycat, where a previous Bennet43 sock removed an Undisclosed paid tag. MarioGom (talk) 07:28, 25 November 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Relatively to past socks based on the way they're using proxies. ., , closing.  --Blablubbs (talk) 12:16, 26 November 2022 (UTC)

Suspected sockpuppets
Signed up on 2020-05-21T02:59:16, just minutes after ~18 other socks, closest being Getrainlsik. Then continued with the same type of gnoming, sleep period, and came back with pro-Qatar shilling like most of other recently active socks. Also has the usual user/talk page tells. MarioGom (talk) 21:07, 23 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Looks like them. There's also the sleeper . --Blablubbs (talk) 14:42, 28 December 2022 (UTC)

Suspected sockpuppets
Both signed up 2021-01-04T05 (~3 minutes between each signup). Same day as a bunch of others from the BolsaOObsequios SPI (which is the same master). They did little or no edits back then. Both came back in May/June 2022 and started doing pro-Qatar edits that are characteristic of this sockfarm. MarioGom (talk) 17:50, 3 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Zanaika certainly looks like them, blocked. CUs can find some notes at . Haven't had time to look closely enough at the other one yet. --Blablubbs (talk) 20:12, 3 January 2023 (UTC)
 * Unlike the others, isn't on proxy. Behaviour seems convincing, especially given the signup timing., , closing.  --Blablubbs (talk) 12:15, 6 January 2023 (UTC)

Suspected sockpuppets
All signed up in the same batch as others: Crteianlian/2020-05-21T02:21:17Z, Elysiumnei/2020-05-21T02:36:44Z, Zincannam/2020-05-21T02:39:30Z, Agogensue/2020-05-21T02:46:45Z. Compare that to Derainyal, Getrainlsik, Queenbyte, etc. While they all signed up in 2020-06-21, they remained as sleepers until 2022 (farming accounts is common for Bennet64). With the exception of Crteianlian in January, they all went active during November/December 2022. Note Crteianlian username similarity to Certaislan, as well as some other tells. Elysiumnei removed a UDP tag from Jacqueline Hurst, which was created by blocked sock Meriutanla. Requesting CU for a sleeper check, as maybe some comparison to previous socks technical fingerprint. MarioGom (talk) 21:08, 16 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * . --Blablubbs (talk) 21:20, 16 January 2023 (UTC)
 * Looks consistent with known Bennet43 signatures, no obvious others. --Blablubbs (talk) 21:39, 16 January 2023 (UTC)
 * The SandDoctor Talk 22:14, 16 January 2023 (UTC)

Suspected sockpuppets
Same naming style. Same user page tells. Breatijian signed up on 2020-05-16T15:41:46, very close (minutes) to Lkinartain, Mearitas, Xreyain, Meriutanla, etc. Haueirlan signed up on 2020-06-20T15:21:42, close to Jaritensi, Weanlitar, etc. Xerauan signed up on 2020-12-28T19:40:47, close to Raeutriam, Treinakis, Bretain, etc. There's some page article overlap (see deleted contribs) with others. All of them reactivated recently after long periods of inactivity. Similar editing style. Requesting checkusers for a sleeper check.Note for checkusers: this sockfarm is related to some pro-Qatar UPEs using residential proxies. A list of IPs I know to be part of this operation are listed at m:Wikiproject:Antispam/Qatar tracker, which might be useful to you while checking (I know you cannot disclose connection to IPs, of course). MarioGom (talk) 09:09, 1 April 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 14:41, 1 April 2023 (UTC)
 * Based on the CU data, I'd say these are all . I'll leave it for somebody else to make a final call. -- RoySmith (talk) 15:23, 1 April 2023 (UTC)
 * Blocked, tagged, locks requested. I see a couple other suspicious accounts on their IPs, but nothing good enough to block. Closing. --Blablubbs (talk) 20:39, 1 April 2023 (UTC)

Suspected sockpuppets

 * Usernames: Khausnal ~ Kaihsnual (previous sock).
 * Both Berialla and Khausnal added links to angelspartners.com
 * Berialla overlaps with Milansgedi and Kaihsnual on 10bet.
 * Khausnal uploads company logos like various previous socks (e.g. Pinedli).
 * Off-wiki evidence available. MarioGom (talk) 18:53, 4 September 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - this sockfarm uses residential proxies, but CU has been occasionally useful. I would suggest also checking blocked sock, which might have non-stale data (see CA). MarioGom (talk) 18:56, 4 September 2023 (UTC)
 * - RoySmith (talk) 17:05, 5 September 2023 (UTC)
 * I'm running some stuff down, so this might be in progress a while. RoySmith (talk) 17:28, 5 September 2023 (UTC)
 * It's complicated, but there's enough to block Khausnal as proven. RoySmith (talk) 18:11, 5 September 2023 (UTC)
 * PS Berialla is stale. I see they've declared a COI.  If somebody wants to chase that one on behavioral evidence, they can do that without needed to keep this open. RoySmith (talk) 18:14, 5 September 2023 (UTC)

Suspected sockpuppets

 * Except Matteoben, which comes from an older cohort, the others have similar names to previous socks.
 * Characteristic user pages: Matteoben, Ratinsu.
 * Matteoben sent a barnstar to Keriansial.
 * Ratinsu created es:Usuario:Ratinsu/Taller (sandbox about Tourism BiH), de:Benutzer:Ratinsu/Tourism BiH. Also edited Tourism BiH, it:Tourism BiH, es:Tourism BiH, bs:Tourism BiH, overlapping with blocked BolsaOObsequios (AKA Bennet43) sock Maijeurin. Overlaps on Ryan Chaffin and Dan Price with others like Ghusytal.
 * Matteoben overlaps with other socks in a lot of pages: Matthew E. May, Besomebody, Scott Albert (writer), Jean Beaudry, Andrew Aziz, John Asfour, Todd Babiak, (let me know if you'd prefer me to dig the diffs here).
 * Nakurtan signed up on 2020-05-16T10:41:47, preceded by blocked socks Berantral (2020-05-16T10:40:26), Gretainis (2020-05-16T10:39:23), Laiytera (2020-05-16T10:38:42), Nerilanik (2020-05-16T10:37:28), Kerianshil ( 	2020-05-16T10:36:17).
 * Keriansial signed up on 2020-06-20T14:55:34, preced by Dreksinal (2020-06-20T14:54:14), Cretianlsin (2020-06-20T14:33:50), and followed by Kaberikuli (2020-06-20T14:58:46), Gartineial (2020-06-20T15:04:09), Jaritensi (2020-06-20T15:16:47), Weanlitar (2020-06-20T15:20:59), Haueirlan (2020-06-20T15:21:42), etc. MarioGom (talk) 19:35, 1 October 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * CU is inconclusive - they are all using proxies. As is typical for Bennet43 socks, each different account is editing from proxies that geolocate to a distinct location. Blocking based on MarioGom's convincing evidence, and requesting locks.  Girth Summit  (blether)  15:33, 2 October 2023 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

Look, I wouldn't describe myself as incredibly sure about this, but this account has recreated the article Draft:UAE corruption in the European Union with what appears to be precisely the same text used in June by confirmed sock User:Soheelmoon (the page was subsequently deleted in August because it was the creation of a block-evading user). That's certainly strange. I've requested CheckUser because this looks like very clear sock behaviour, but this is an account that has existed since 2017. It did become active for the first time in four years a month after the banning of User:Soheelmoon. -- AntiDionysius (talk) 12:55, 22 November 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Also, Herilakeri recreated Lee Burkhill, now moved to Draft:Lee Burkhill, which was previously created by sockpuppet Haueirlan. Liz Read! Talk! 21:34, 22 November 2023 (UTC)
 * Oh, I just noted that this was already stated. Well, count me as one more suspicious editor. Liz Read! Talk! 21:35, 22 November 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - I think this is Bennet43, so I moved the report. Same username style. Signed up on 2017-05-29T10:25:54, compare to Beritagsier who signed up on 2017-05-29T10:23:53. Large overlap in edit summaries. Overlap on Beacon UK with Berantral, Hamadou Djibo Issaka and Lee Burkhill with Haueirlan. To the best of my knowledge, Bennet43 and Ugbedeg are different editors, but both work for the same Qatari influence operation, which explains the re-creation of UAE corruption in the European Union. Please, indef the account. This editor makes extensive use of proxies, but I'm endorsing a check for sleepers. MarioGom (talk) 18:50, 22 November 2023 (UTC)
 * Agree this looks like Bennett43. I've indeffed the user per request, pending CU. Thanks, Spicy (talk) 21:49, 22 November 2023 (UTC)
 * due to proxy use. I've indeffed a couple spambots on the IP, though. Closing. Reaper Eternal (talk) 21:59, 22 November 2023 (UTC)
 * Tagged, . Thanks, Spicy (talk) 22:01, 22 November 2023 (UTC)

Suspected sockpuppets
See Special:Permalink/1196329066 where I have given a lengthy go-off in re this editor. jp×g🗯️ 03:50, 17 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Here's a non-perma link to the ANI thread (to see subsequent comments). WP:ANI. SilverLocust 💬 06:30, 17 January 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ❌ in relation to Bennet43, and for there to be separate sockpuppetry which I also considered possible. Kicking this back to AN/I. DatGuyTalkContribs 14:32, 17 January 2024 (UTC)

Suspected sockpuppets
Already blocked on French Wikipedia. They do the usual pro-Qatar edits (see also Contributor00001 SPI. Also overlaps with Feriautan on Luca Gallone. Edit summaries are very similar to past socks. MarioGom (talk) 14:57, 17 February 2024 (UTC)
 * There are also some similarities to Botti12 from Ugbedeg SPI. MarioGom (talk) 15:03, 17 February 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * . The pattern of IP use strongly suggests use of residential proxies.  The similarity between Bennet43 and Ugbedeg has been noted before and there's a suggestion in cuwiki that these farms may be part of a disinformation campaign.  I'll block as suspected.  My guess is that aggressive page protection is going to be our most effective tool in this case. RoySmith (talk) 15:36, 17 February 2024 (UTC)
 * RoySmith (talk) 15:37, 17 February 2024 (UTC)