Wikipedia:Sockpuppet investigations/BolsaOObsequios/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation of David Diamante. Sock account got active almost after one year, making articles. Master was blocked for promotional articles, and has many socks. Might be a rare coincidence, but there is high probability of socking, hence requesting CU. —usernamekiran (talk) 05:46, 7 August 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * is there any publicly accessible info on master? The only way i connected this account to Bolsa was from article creation. I couldnt find any SPI page. —usernamekiran (talk) 12:47, 7 August 2020 (UTC)
 * Nope. I discovered this abuse pattern by accident and rolled it up myself. (I did ask for CU privately but Yunshui hasn't edited since I sent the email.) MER-C 16:09, 7 August 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * This isn't the usual BolsaOObsequios abuse pattern involving shenanigans with redirects. The recreation, however, is near verbatim. This is probably freelance meatpuppetry but please check this sockfarm. I've also blocked Nadine Dewi for spamming. MER-C 12:20, 7 August 2020 (UTC)
 * - Both are not new and could use a deep dive for a potential bigger master. -- Amanda - mobile  (aka DQ) 06:56, 8 August 2020 (UTC)
 * Technically ❌, no additional accounts or possible masters visible. ST47 (talk) 07:09, 8 August 2020 (UTC)

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Already blocked (not tagged) after conclusive CU evidence. I have posted on COIN about this as well, in case other editors know of more socks of these accounts. Drmies (talk) 14:54, 19 November 2020 (UTC)

Update--note from : related to Sockpuppet investigations/BolsaOObsequios. Drmies (talk) 23:20, 19 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * , could you expand on why you think this is BolsaOObsequios? Email is fine if you'd rather not say on-wiki. GeneralNotability (talk) 02:12, 22 November 2020 (UTC)
 * See their deleted contributions and how they think they can use redirects to bypass scrutiny. MER-C 09:38, 22 November 2020 (UTC)
 * I'll take your word for it. Merged to BolsaOObsequios, . GeneralNotability (talk) 15:48, 1 December 2020 (UTC)

Suspected sockpuppets

 * Not stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:
 * Probably stale:


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

A massive haul of 136 spam accounts was uncovered on Simple English Wikipedia:. At least two of them - and  - are extended confirmed here. I'm sure this sockmaster hasn't given up on en.wp so lodging here. All blocked, most without tags. MER-C 19:10, 8 November 2021 (UTC)
 * Ping who did the CU on simple.wp. MER-C 19:34, 8 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * GeneralNotability (talk) 22:10, 8 November 2021 (UTC)
 * and are ✅ to Hamiltson, not mentioned here but CU-blocked on simple.
 * The following are...let's go with likely-ish? to Berinlatin (all have edits on the same narrow range, multiple browsers, could be a proxy/VPN exit?):
 * (currently part of a separate SPI)
 * I also see a couple Uptoniter socks and a few of the socks mentioned below in this range. I feel pretty confident that everyone in this list is engaged in UPE of some sort based on their page creations and edits, and I see some of them sharing behavior with Berinlatin (particularly racking up edit counts via semi-automated gnoming, skipping precise details per BEANS). on those, please - I'm inclined to block all as UPE and block the gnomes as BolsaOObsequios, but would appreciate a second opinion. Not seeing activity by any of those folks on simplewiki, so don't think action is needed. Probably should also get locks for this farm - xwiki spam and blocks on multiple content wikis. GeneralNotability (talk) 22:57, 8 November 2021 (UTC)
 * That would be fair. Reanital, Nirkaten, Maijeurin are all behavioral matches to Hartsinner and Berinlatin, while Kaijilarn, Drioinstan and Einterhal are going down the same route. The rest are likely UPEs and have been blocked. Leaving for a clerk to tag and report everyone (including in the suspected category) to SRG. MER-C 19:20, 9 November 2021 (UTC)
 * I tried to mass-tag here and got ratelimited. Could an admin-clerk (or account-creator-clerk, or bot-op-who-is-braver-than-me-at-testing-the-limits-of-IAR-clerk) please finish the job? I've done the two complicated bits, with Hamiltson, Ytarstan, and Dreusan, and with the double-tag situation for Franca Eneide, and have also handled the SRG report, so all that's left is selecting "all users" → "Suspected sock", unchecking the master and those four, and letting 'er rip. --  Tamzin  [ cetacean needed ] (she/they) 03:21, 20 November 2021 (UTC)
 * I'm on it. If I don't come back in an hour, send out a search party. -- RoySmith (talk) 20:19, 20 November 2021 (UTC)
 * @Tamzin Well, that seemed to have worked. Back to you. -- RoySmith (talk) 20:23, 20 November 2021 (UTC)
 * Thanks, Roy. Think we're done here for now, then. Closing. --  Tamzin  [ cetacean needed ] (she/they) 21:01, 20 November 2021 (UTC)
 * I see you reverted some of these. I think I know what probably happened.  I remember un-checking the ones you specified, but literally in the sense of "undo the checkbox" which is the checkbox for blocking.  And then I went back and mass-unchecked everybody for blocking since I knew were weren't doing that, but must have left them selected in the tag column.  Oh well.  Looks like you got it fixed up, through.  Sorry about that. -- RoySmith (talk) 21:32, 20 November 2021 (UTC)
 * I also see a couple Uptoniter socks and a few of the socks mentioned below in this range. I feel pretty confident that everyone in this list is engaged in UPE of some sort based on their page creations and edits, and I see some of them sharing behavior with Berinlatin (particularly racking up edit counts via semi-automated gnoming, skipping precise details per BEANS). on those, please - I'm inclined to block all as UPE and block the gnomes as BolsaOObsequios, but would appreciate a second opinion. Not seeing activity by any of those folks on simplewiki, so don't think action is needed. Probably should also get locks for this farm - xwiki spam and blocks on multiple content wikis. GeneralNotability (talk) 22:57, 8 November 2021 (UTC)
 * That would be fair. Reanital, Nirkaten, Maijeurin are all behavioral matches to Hartsinner and Berinlatin, while Kaijilarn, Drioinstan and Einterhal are going down the same route. The rest are likely UPEs and have been blocked. Leaving for a clerk to tag and report everyone (including in the suspected category) to SRG. MER-C 19:20, 9 November 2021 (UTC)
 * I tried to mass-tag here and got ratelimited. Could an admin-clerk (or account-creator-clerk, or bot-op-who-is-braver-than-me-at-testing-the-limits-of-IAR-clerk) please finish the job? I've done the two complicated bits, with Hamiltson, Ytarstan, and Dreusan, and with the double-tag situation for Franca Eneide, and have also handled the SRG report, so all that's left is selecting "all users" → "Suspected sock", unchecking the master and those four, and letting 'er rip. --  Tamzin  [ cetacean needed ] (she/they) 03:21, 20 November 2021 (UTC)
 * I'm on it. If I don't come back in an hour, send out a search party. -- RoySmith (talk) 20:19, 20 November 2021 (UTC)
 * @Tamzin Well, that seemed to have worked. Back to you. -- RoySmith (talk) 20:23, 20 November 2021 (UTC)
 * Thanks, Roy. Think we're done here for now, then. Closing. --  Tamzin  [ cetacean needed ] (she/they) 21:01, 20 November 2021 (UTC)
 * I see you reverted some of these. I think I know what probably happened.  I remember un-checking the ones you specified, but literally in the sense of "undo the checkbox" which is the checkbox for blocking.  And then I went back and mass-unchecked everybody for blocking since I knew were weren't doing that, but must have left them selected in the tag column.  Oh well.  Looks like you got it fixed up, through.  Sorry about that. -- RoySmith (talk) 21:32, 20 November 2021 (UTC)
 * Thanks, Roy. Think we're done here for now, then. Closing. --  Tamzin  [ cetacean needed ] (she/they) 21:01, 20 November 2021 (UTC)
 * I see you reverted some of these. I think I know what probably happened.  I remember un-checking the ones you specified, but literally in the sense of "undo the checkbox" which is the checkbox for blocking.  And then I went back and mass-unchecked everybody for blocking since I knew were weren't doing that, but must have left them selected in the tag column.  Oh well.  Looks like you got it fixed up, through.  Sorry about that. -- RoySmith (talk) 21:32, 20 November 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Found three more of the gnome type accounts - behavioural match to Reanital, Nirkaten, Hartsinner, Berinlatin, etc. How many more of these are there?

Also update with more socks found on simple.wp. MER-C 18:16, 13 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - agree that the behaviour matches previous accounts, and it's worth another run of CU to fish out any sleepers. Thanks, Spicy (talk) 16:02, 20 November 2021 (UTC)
 * - ~TheresNoTime (to explain!) 18:48, 24 November 2021 (UTC)
 * Listed accounts are a mix of very likely & confirmed to each other and other locked accounts, ∴ calling the group to the master., but I note what could be evidence of evasion.  clerk to tag please if required ~TheresNoTime (to explain!) 18:58, 24 November 2021 (UTC)
 * Thanks. Tagged accounts, closing. Spicy (talk) 19:03, 24 November 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recently created account, after the last sock of the puppeteer was blocked (Raeutriam), which went directly to a page created by the other puppet.  Onel 5969  TT me 12:48, 20 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This doesn't strike me as a Bolsa sock (different UPE contractor?), but could be a sock of:
 * whom I've just blocked for spamming. MER-C 12:59, 20 December 2021 (UTC)
 * As far as I can tell, RawMarketer and YouJay are ❌ to each other and Bolsa, but I see past evidence of proxy use so take that with a grain of salt. GeneralNotability (talk) 00:56, 21 December 2021 (UTC)
 * - This isn't a BolsaOObsequious sock and I'm not convinced it's a sock of Youjay, but they should be indeffed for spamming and having a promotional username - they're spamming links to rawmarketer.com. Thanks, Spicy (talk) 23:13, 21 December 2021 (UTC)
 * : blocked for spamming, per Spicy. clpo13(talk) 00:00, 22 December 2021 (UTC)
 * : blocked for spamming, per Spicy. clpo13(talk) 00:00, 22 December 2021 (UTC)