Wikipedia:Sockpuppet investigations/CHEEIZY/Archive

Suspected sockpuppets
Repeated crosswiki vandalism with several accounts. This was already checked in svwiki (see w:sv:Wikipedia:Begäran_om_IP-kontroll) but since most accounts seem to be registrered first here at enwiki, I'm requesting a checkuser here as well. I'm almost 100% certain there are more accounts than reported, I recognize the editing pattern too well. Check requested both to see if there are more, not yet blocked accounts, and also to see if there is an IP that can be isolated and globally blocked. For example this editing history on svwiki make it entirely obvious that at least two of the accounts are the same and the rest of them fit the same editing pattern. EstrellaSuecia (talk) 09:53, 17 July 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
 * Thanks for the fast check. I'm still convinced Group 1 and 2 are the same user based on behavior. Users from both groups vandalized the article Häst in identical fashion. Perhaps Group 3 is unrelated. Should locks be requested for the unlocked accounts? All of them are editing cross-wiki. EstrellaSuecia (talk) 13:20, 17 July 2023 (UTC)
 * Sorry, I thought they were all locked - yes, a lock should probably be requested for, in line with the other accounts on that IP - can you do that? They may very well be the same person (most people have access to more than one IP!), I just can't confirm that with the checkuser tool. Girth Summit  (blether)  13:51, 17 July 2023 (UTC)
 * ✅ Thanks for the help, if nothing else it's great to refer to this CU when they inevitably show up again with a new account. EstrellaSuecia (talk) 14:01, 17 July 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I see three groups - members of each group are ✅ to one another, but each group is using a different IP. Groups 1 and 2 gelocate to the same country (but not particularly close together), group 3 geolocates to a different country. None are using proxies as far as I am able to tell.
 * Group 1:
 * Group 2:
 * Group 3:
 * This last group might well be . Blocking any unblocked accounts without tags. Girth Summit  (blether)  13:13, 17 July 2023 (UTC)
 * Addding the following, ✅ to one another, claiming that they are connected to DeepFriedTwinky (and technically fairly likely to them):
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * Group 2:
 * Group 3:
 * This last group might well be . Blocking any unblocked accounts without tags. Girth Summit  (blether)  13:13, 17 July 2023 (UTC)
 * Addding the following, ✅ to one another, claiming that they are connected to DeepFriedTwinky (and technically fairly likely to them):
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * Group 3:
 * This last group might well be . Blocking any unblocked accounts without tags. Girth Summit  (blether)  13:13, 17 July 2023 (UTC)
 * Addding the following, ✅ to one another, claiming that they are connected to DeepFriedTwinky (and technically fairly likely to them):
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * This last group might well be . Blocking any unblocked accounts without tags. Girth Summit  (blether)  13:13, 17 July 2023 (UTC)
 * Addding the following, ✅ to one another, claiming that they are connected to DeepFriedTwinky (and technically fairly likely to them):
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)
 * Will request more locks. Girth Summit  (blether)  12:02, 19 July 2023 (UTC)

Suspected sockpuppets
Vast majority of contribs are claims that they are a sock of deepfriedtwinky PriusGod (talk) 17:09, 20 July 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * User is now CU blocked., closing. Not going to bother tagging these as they're obviously seeking attention. Spicy (talk) 00:28, 21 July 2023 (UTC)

Suspected sockpuppets
Same behaviour in Häst for example. 100% this is the same person. I only request checkuser because I would like to ask for another sleepercheck since the user appears to reuse accounts for crosswiki-vandalism. EstrellaSuecia (talk) 06:02, 30 July 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Thanks. I think it is fairly likely they are the same as. EstrellaSuecia (talk) 07:28, 31 July 2023 (UTC)
 * It's an interesting idea that I'll keep in mind. From what I've seen Heymid is certainly a possibility, but I'd have expected a bit more crossover. -- zzuuzz (talk) 09:55, 31 July 2023 (UTC)
 * @Zzuuzz There are only so many Swedish language LTAs and the sexual obsession and crosswiki activity fit very well into his behavioural pattern., are two other socks. EstrellaSuecia (talk) 13:13, 31 July 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
No obvious sleepers and confirmed to group 2 from the archives (I agree groups 1 and 2 are probably the same). I'd just make an additional observation that this vandal has quite a non-documented history here - two of their older and easier located accounts (but certainly not their first) are and. -- zzuuzz (talk) 07:09, 30 July 2023 (UTC)

Suspected sockpuppets
Proforma report. Courcelles (talk) 23:02, 3 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Already blocked. Filed to use the script to document for global lock. Courcelles (talk) 23:03, 3 August 2023 (UTC)

Suspected sockpuppets

 * ( original case name)

Confirmed. Need the scripts to file a lock Courcelles (talk) 19:01, 20 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Filed lock request. Since I’ve hacked SPI scripts to do this, maybe someone knows who this all is? Courcelles (talk) 19:05, 20 August 2023 (UTC)
 * Its CHEEIZY. Sockpuppet investigations/CHEEIZY. EstrellaSuecia (talk) 19:20, 20 August 2023 (UTC)
 * @Courcelles EstrellaSuecia (talk) 19:22, 20 August 2023 (UTC)
 * @EstrellaSuecia Thanks. Knew it was someone, drew a blank, needed the “file lock” script. I’ll merge and archive since the glock is now done. Courcelles (talk) 19:25, 20 August 2023 (UTC)

Suspected sockpuppets
I'm convinced all of these are the same. I believe most of them have been checked as well, either on here or on simplewiki or by a locking steward. Same behaviour across enwiki, simplewiki and sometimes svwiki, clearly developing from Group 1 and 2 in the earlier reports. I'm not requesting checkuser, I'm just documenting but feel free to run some sleeper checks in case there are sleepers. CHEEIZY is using proxies so probably no hope for IP-ban. EstrellaSuecia (talk) 19:47, 20 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * All of these accounts are globally locked already - there's nothing more needing done, closing.  Girth Summit  (blether)  11:02, 21 August 2023 (UTC)

Suspected sockpuppets
The edit summary on this diff is pretty explicit as to their identity. Sincerely, Novo Tape (She/Her)My Talk Page 16:48, 24 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments
Blocked, glocked. -- zzuuzz (talk) 20:09, 24 August 2023 (UTC)

Suspected sockpuppets
Yesterday(see CHEEIZY archives) I found a sock for CHEEIZY with near identical behaviour, entered same images into articles, and also messed with temps. Sincerely, Novo Tape (She/Her)My Talk Page 16:17, 25 August 2023 (UTC) Edit: See this diff when compared to this diff. Sincerely, Novo Tape (She/Her)My Talk Page 16:24, 25 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked and locked. Case closed. Courcelles (talk) 17:43, 25 August 2023 (UTC)