Wikipedia:Sockpuppet investigations/Darmahjgari/Archive

01 March 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Need a CU magic wand to pull out the whole series, and hopefully rangeblock (yes, some collateral damage is likely). I suspect there are dozens, and I have no idea who is the master - start from top and see for yourself. This is an LTA case on mass-tweaking arms infobox images, using throwaway accounts and IPs (I've tried a narrow rangeblock 121.54.44.128/26, but apparently failed). Materialscientist (talk) 03:58, 1 March 2013 (UTC) Materialscientist (talk) 03:58, 1 March 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I assume you meant to file this as a CUrequest. Endorsed, in any case, for a sleeper check. Probably won't be able to get a rangeblock on this guy, range is most likely to be which is a bit wide. SpitfireTally-ho! 12:45, 1 March 2013 (UTC)
 * The /26 rangeblock would have been effective, except that they are also using a dialup IP. The following are all ✅:
 * It wouldn't surprise me if there were older accounts, but CU data only goes back so far. ​—DoRD (talk)​ 14:42, 1 March 2013 (UTC)
 * Thanks. Yes,
 * and
 * , and there might be older ones, thus the master is likely unknown and is to be chosen arbitrarily.
 * This thread also mentions
 * , which generally looks different, but has two suspicious edits. Could you please comment? (if related, this might bring extra IPs). Materialscientist (talk) 01:43, 2 March 2013 (UTC)
 * It wouldn't surprise me if there were older accounts, but CU data only goes back so far. ​—DoRD (talk)​ 14:42, 1 March 2013 (UTC)
 * Thanks. Yes,
 * and
 * , and there might be older ones, thus the master is likely unknown and is to be chosen arbitrarily.
 * This thread also mentions
 * , which generally looks different, but has two suspicious edits. Could you please comment? (if related, this might bring extra IPs). Materialscientist (talk) 01:43, 2 March 2013 (UTC)
 * It wouldn't surprise me if there were older accounts, but CU data only goes back so far. ​—DoRD (talk)​ 14:42, 1 March 2013 (UTC)
 * Thanks. Yes,
 * and
 * , and there might be older ones, thus the master is likely unknown and is to be chosen arbitrarily.
 * This thread also mentions
 * , which generally looks different, but has two suspicious edits. Could you please comment? (if related, this might bring extra IPs). Materialscientist (talk) 01:43, 2 March 2013 (UTC)
 * It wouldn't surprise me if there were older accounts, but CU data only goes back so far. ​—DoRD (talk)​ 14:42, 1 March 2013 (UTC)
 * Thanks. Yes,
 * and
 * , and there might be older ones, thus the master is likely unknown and is to be chosen arbitrarily.
 * This thread also mentions
 * , which generally looks different, but has two suspicious edits. Could you please comment? (if related, this might bring extra IPs). Materialscientist (talk) 01:43, 2 March 2013 (UTC)
 * It wouldn't surprise me if there were older accounts, but CU data only goes back so far. ​—DoRD (talk)​ 14:42, 1 March 2013 (UTC)
 * Thanks. Yes,
 * and
 * , and there might be older ones, thus the master is likely unknown and is to be chosen arbitrarily.
 * This thread also mentions
 * , which generally looks different, but has two suspicious edits. Could you please comment? (if related, this might bring extra IPs). Materialscientist (talk) 01:43, 2 March 2013 (UTC)
 * Thanks. Yes,
 * and
 * , and there might be older ones, thus the master is likely unknown and is to be chosen arbitrarily.
 * This thread also mentions
 * , which generally looks different, but has two suspicious edits. Could you please comment? (if related, this might bring extra IPs). Materialscientist (talk) 01:43, 2 March 2013 (UTC)
 * , which generally looks different, but has two suspicious edits. Could you please comment? (if related, this might bring extra IPs). Materialscientist (talk) 01:43, 2 March 2013 (UTC)

01 March 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

User:Fangoh was recently blocked for disruptive editing for among other things repeatedly making changes contrary to MOS, specifically increasing the size of the image and adding image attributes that the template isn't made to handle, in the infobox of a large number of weapons related articles. Just like the IPs, which geolocate to the same geographic area. The other named accounts have all showed up in the past 24h and show the exact same behaviour, and seem to be an attempt to avoid the warnings for disruptive editing that are being issued by a number of different editors. Thomas.W (talk) 09:38, 1 March 2013 (UTC)


 * Request check for sleepers. Thomas.W (talk) 10:22, 1 March 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - noting that CU will not do anything to the IP addresses. Rschen7754 10:25, 1 March 2013 (UTC)
 * Please see my results at Sockpuppet investigations/Darmahjgari. ​—DoRD (talk)​ 15:02, 1 March 2013 (UTC)
 * Not blocking the IPs that aren't blocked. --Rschen7754 00:44, 3 March 2013 (UTC)

25 March 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Changes image size and image attributes on a large number of weapons related articles just like previous socks (sample edit ). Request check for sleepers since the socket master is known for creating large numbers of disposable accounts. Thomas.W (talk) 08:21, 25 March 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ - no other accounts at this time. ​—DoRD (talk)​ 11:48, 25 March 2013 (UTC)
 * Closing. Rschen7754 19:53, 25 March 2013 (UTC)

09 April 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Makes edits contrary to MOS in the infobox of weapons-related articles. Also changes image in infobox to own uploads, images that have been ripped from various forums on the 'Net but are uploaded as own work. Example diffs: Shambalaya, IP 121.54.44.149. The IP is also in the same IP-range as Darmahjgari and his numerous socks have operated from. Thomas.W (talk) 07:27, 9 April 2013 (UTC)


 * Still going at it, in spite of warnings. Thomas.W (talk) 07:58, 9 April 2013 (UTC)
 * Added three more socks, Bujawarat, Barkanaya and IP 121.54.44.171, that walk like ducks and quack like ducks: Bujawarat, Barkanaya and IP 121.54.44.171. And in the case of the IP is in the same range of IP-addresses that the sockmaster has previously used. This is escalating by the hour, so I request check for sleepers as the sock master is known for creating and using numerous throw away accounts, and would have had time to make a few dozen of them by now. Thomas.W (talk) 07:29, 10 April 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Named users ✅ and blocked. Expired rangeblock has been renewed. ​—DoRD (talk)​ 17:20, 10 April 2013 (UTC)
 * Tagged and closing. Rschen7754 09:44, 11 April 2013 (UTC)

22 April 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Makes the exact same changes to the infobox of weapons related articles as the sockmaster and its dozens of previous socks. After a discussion with the sock master on the talk page of previously banned sock Bujawarat, where a reason for his/her behaviour was given, he/she now selfreverts the changes after creating a PDF of the article with the desired images in it. His/her behaviour is nevertheless disruptive, and the images he/she uploads to Commons for inclusion in the PDFs are clear copyvios. Peachesapplegate was apparently discarded after all of its uploads to Commons were deleted as copyvios, but 吃老里 is active as we speak/write. Request search for sleepers as the sock master has a habit of creating multiple throw away user accounts. Thomas.W (talk) 09:18, 22 April 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Named users are ✅, bagged and tagged. ​—DoRD (talk)​ 11:32, 22 April 2013 (UTC)
 * Closing. Rschen7754 11:35, 22 April 2013 (UTC)

24 April 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

The aforementioned newly registered (created barely 3 days after the latter was blocked) has the same exact MO as the earlier blocked sock (User:吃老里) of User:Darmahjgari. Request also to flush out sleepers. Dave ♠♣♥♦™№1185©♪♫® 03:09, 24 April 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - MO is definitely the same. A check for sleepers may be worthwhile given the fact this is the fourth incident in a month. Steven   Zhang  Help resolve disputes! 06:15, 24 April 2013 (UTC)
 * ✅, no sleepers at this time, and I don't think that a rangeblock would be feasible. ​—DoRD (talk)​ 12:45, 24 April 2013 (UTC)
 * Non-admin comment: I took a look at it a while ago (looking at edits matching the MO made by IP-users) and found that edits matching the MO of the sock master were spread over a full /16-net, and blocking 65,536 IP-addresses just to stop one irritating but not really harmful vandal would IMHO be a bit excessive... Thomas.W (talk) 12:56, 24 April 2013 (UTC)


 * Blocked and tagged. Jafeluv (talk) 13:05, 24 April 2013 (UTC)

06 May 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The same behaviour as the sock master and all previous socks, changes image size in the infobox of weapons related articles, uploads images that are clear copyright violations (images found on various forums on the web) and then adds those images to the infobox of various articles here on en-wiki , or in other words walks like a duck and quacks like a duck. Thomas.W (talk) 10:30, 6 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * WP:DUCK indeed. Blocked and tagged. Jafeluv (talk) 11:38, 6 May 2013 (UTC)

10 May 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

A new user who walks like a duck and quacks like a duck, making edits contrary to MOS in the infobox of weapons related articles, just like Darmahjgari and all previous socks:, , ,. Thomas.W (talk) 11:13, 10 May 2013 (UTC)
 * He's still going at it, so here's one more diff: . Thomas.W (talk) 11:38, 10 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked per WP:DUCK, closing. King of &hearts;   &diams;   &clubs;  &spades; 11:48, 10 May 2013 (UTC)

29 May 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Exhibits the exact same behaviour as Darmahjgari and his/her numerous socks, making edits contrary to MOS on weapons related pages (diff 1, diff 2). Meaning that he/she/it walks like a duck and quacks like a duck. Thomas.W (talk) 13:08, 29 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I concur, it has the same exact modus operandi as User:Darmahjgari for which I have reported once or twice to SPI for further investigations. -- Dave ♠♣♥♦™№1185©♪♫® 16:31, 29 May 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ - no sleepers. ​—DoRD (talk)​ 20:14, 29 May 2013 (UTC)
 * Blocked, closing. King of &hearts;   &diams;   &clubs;  &spades; 21:01, 29 May 2013 (UTC)

01 June 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Another Darmahjgari sock, exhibiting the exact same behaviour (diff 1, diff 2) as previous socks, making changes contrary to MOS on weapons related articles. Quacking loudly while doing so. Thomas.W (talk) 13:37, 1 June 2013 (UTC)


 * We've got ourselves a new one. Same MO as the others. Thomas.W (talk) 14:10, 1 June 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus . ​—DoRD (talk)​ 13:51, 1 June 2013 (UTC)
 * ✅ Kjabari and as well. Unfortunately, the range they're now using is too busy to block. ​—DoRD (talk)​ 16:02, 1 June 2013 (UTC)
 * Tagged and closing. Rschen7754 19:36, 1 June 2013 (UTC)

02 June 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

A new account that walks like a duck and quacks like a duck, making changes contrary to MOS on weapons related articles (diff 1, diff 2, diff 3), in addition to uploading blatant copyvios on Commons. Four new socks were blocked yesterday (two active, two sleepers), so there will probably be a few today too. Thomas.W (talk) 07:18, 2 June 2013 (UTC)


 * And here come two more:
 * With the exact same behaviour as the others (diff 1, diff 2).
 * Quacking as loudly as the others (diff 1). Thomas.W (talk) 10:42, 2 June 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Exact same MO again, if it walks like a duck and swims like a duck then it must be a duck. School holidays are always the worse time for us regular editors on Wikipedia... sigh~! -- Dave ♠♣♥♦™№1185©♪♫® 10:22, 2 June 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, , and . ​—DoRD (talk)​ 14:11, 2 June 2013 (UTC)
 * Tagged and closed. Dennis Brown / 2¢ / © / @ 14:15, 2 June 2013 (UTC)

22 June 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Two brand new user accounts that both make Darmahjgari's signature edits contrary to MOS on weapons related articles (diff 1, diff 2; both of them accompanied by very loud quacking). Unfortunately for them their first edits were made on a page that is on my watchlist, so they were both detected, reverted and warned within minutes of their first edit (attention that seems to have made the person behind the accounts abandon them, probably creating new ones instead...). I would appreciate a search for sleepers, and since there AFAIK have been no socks for a while I assume that there has been a now expired range block in place, so a renewal of that range block would be welcome. Thomas.W (talk) 14:30, 22 June 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Both are ✅. There are a couple of possible sleepers, but since they are older than these accounts, and since they haven't edited, I'll AGF. ​—DoRD (talk)​ 15:58, 22 June 2013 (UTC)
 * Blocked, tagged, closing. Dennis Brown &#124; 2¢ &#124; © &#124; WER  22:29, 22 June 2013 (UTC)