Wikipedia:Sockpuppet investigations/EstebanJals/Archive

15 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Both have added irrelevant images to the Fontana, California article:     . Both have an interest in children's television. The IP editor began contributing today, during EstebanJals' block. &mdash; rybec   00:54, 15 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the account indef and the IP for one week. Whether they are controlled by the same person is irrelevant at this point as they're both engaging in vandalism. Closing now. Mark Arsten (talk) 05:14, 16 December 2013 (UTC)

25 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Nepal Television wasn't founded in November 2013, so this change is vandalism. EstebanJals and the previously-reported IP address vandalised articles about television. Note here how the .a17d IP adds a link to Robot Chicken; the .5483 IP inserts a mention of Robot Chicken here. &mdash; rybec   03:11, 25 December 2013 (UTC)

vandal with interest in children's television and school buses; attacks some of the same articles, in the same way, as EstebanJals &mdash; rybec   03:27, 25 December 2013 (UTC)
 * IPv4
 * IPv6
 * named account



 &mdash; rybec   06:40, 25 December 2013 (UTC)



replaced images in Rancho_Cucamonga,_California with unrelated ones  much as EstebanJals did in Fontana,_California &mdash; rybec   07:15, 25 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've semi-protected several of the main targets, blocked the IPv4 for one week, and blocked the 2605:E000:BC80:9C00:0:0:0:0/64 range for one month. Closing now. Mark Arsten (talk) 05:37, 26 December 2013 (UTC)

30 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

&mdash; rybec   05:53, 30 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * EstebanTheBuilder is EstebanJals. Indefblocked. Materialscientist (talk) 06:36, 30 December 2013 (UTC)

31 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

See. Target recently vandalized with same MO by other SPs of this master.  Dwpaul  Talk   03:07, 31 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked three days for block evasion, closing now. Mark Arsten (talk) 19:08, 3 January 2014 (UTC)

20 January 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

EstebanJals vandalised the page Fontana, California; this account contains "Fontana" in its name and added the word to an article here. EstebanJals had an interest in buses and children's television; so does this account. &mdash; rybec   18:30, 20 January 2014 (UTC)

FontanaLand also vandalised The Wiggles Movie. 05:28, 21 January 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  22:05, 22 January 2014 (UTC)
 * Indeffing and closing.

09 February 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Road Runner IP with interest in The Den ; edited Thomas Built Buses and Blue Bird Corporation which were edited by EstebanJals &mdash;  rybec   11:33, 9 February 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked three days for block evasion, closing now. Mark Arsten (talk) 03:49, 10 February 2014 (UTC)

16 February 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

has edited some of the same articles: https://tools.wmflabs.org/sigma/editorinteract.py?user1=GloveWorld&user2=EstebanJals&user3=&user4=&user5=&user6=&user7=&user8=&user9=&user10=&ns=none&startdate=&enddate=

also GloveWorld inserted an irrelevant image into [//en.wikipedia.org/w/index.php?title=Redlands,_California&oldid=594911782 this version] of the Redlands, California article, and attempted to insert one into the [//en.wikipedia.org/w/index.php?title=Fontana,_California&diff=594909230&oldid=594597118 Fontana, California] article, much as EstebanJals did to the San Bernardino, California and Fontana, California articles. &mdash; rybec   05:05, 16 February 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Suspected sock blocked indef per duck test, closing now. Mark Arsten (talk) 22:10, 16 February 2014 (UTC)

17 February 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

has only edited articles that were also edited by EstebanJals or EstebanJals' socks [//tools.wmflabs.org/sigma/editorinteract.py?user1=GloveWorld&user2=EstebanJals&user3=142.129.199.97&user4=2605:E000:BCA0:FE00:510A:1FEA:C032:70D2&ns=none]; inserted irrelevant image in Fontana,_California article (Fontana is not served by Sonoma County Transit); previous activity from 2605:e000:bc80::/42 &mdash;  rybec   00:17, 17 February 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Hasn't edited since February 7. No need to take action.--Bbb23 (talk) 09:15, 27 February 2014 (UTC)

22 February 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * account name contains "Fontana"; Fontana, California article was vandalised by EstebanJals
 * made edits on topics concerning children's television, adding statements not supported by references
 * edited List of programs broadcast by the Arutz HaYeladim, which was also edited by 2605:E000:BCA0:FE00:510A:1FEA:C032:70D2 (reported above)
 * edited The Den (television) which had also been edited by EstebanJals
 * created User:EstebanJals &mdash; rybec   22:23, 22 February 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Also vandalized 's talk page (and then self-reverted). Blocked and tagged based on duck.--Bbb23 (talk) 09:13, 27 February 2014 (UTC)

01 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * 1) same IP range previously used by EstebanJals
 * 2) this edit by the IP user to my talk page is just like this edit by the EstebanJals sock FontanaChannel (both say I am a sock-puppet of Mark Arsten)

The address has been blocked, with a log entry saying it was used by Edgarrr. I think EstebanJals is the correct identification. &mdash; rybec   01:39, 1 March 2014 (UTC)



&mdash; rybec   05:42, 1 March 2014 (UTC)
 * 1) username contains "Fontana"
 * 2) edited [//en.wikipedia.org/w/index.php?title=The_Den_(television)&diff=prev&oldid=597596295 The Den (television)]



username resembles FontanaChannel; edited The Den (television) &mdash; rybec   22:32, 2 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've merged the two cases it make it a bit easier to read and follow. Callanecc (talk • contribs • logs) 09:20, 3 March 2014 (UTC)
 * Both suspected sock accounts blocked and tagged. Not doing anything with the IP. Closing now. Callanecc (talk • contribs • logs) 09:22, 3 March 2014 (UTC)

05 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

username resembles ; edited List of programs broadcast by the Arutz HaYeladim and The Den (television) which were edited by other accounts/IPs in this SPI &mdash; rybec   04:24, 5 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Duck. Blocked. Closing. Callanecc (talk • contribs • logs) 13:07, 5 March 2014 (UTC)

06 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Username resembles ; edited articles 2014 in home video, RTÉjr ‎and The Den (television) which were edited from other EstebanJals accounts or IP addresses. &mdash; rybec   12:07, 6 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - : I've blocked the account as a duck, but could a CU take a look and check for sleepers and the possibility of an IP block? Thanks, Callanecc (talk • contribs • logs) 03:58, 7 March 2014 (UTC)
 * Unfortunately they are on a large dynamic IPv6 connection, so duck blocks may be the best option. --Jezebel's Ponyo bons mots 18:58, 7 March 2014 (UTC)
 * Thanks for checking. Callanecc (talk • contribs • logs) 23:54, 10 March 2014 (UTC)

08 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

6125 IP is in same range as several already reported, and has edited List of BBC children's television programmes. EstebanJals edited several lists of children's television programmes.

C31A IP is in same range and edited Thomas Built Buses.

Duchh8888 account has also edited List of BBC children's television programmes; all other edits concern articles which had been edited from EstebanJals accounts or IP addresses:


 * Thomas Built Buses was edited by 2605:e000:bca0:fe00:8080:8c1b:511c:787c, 142.129.199.97, 2605:e000:bc80:9c00:b1fb:2d49:523b:c31a and EstebanJals


 * Microsoft was edited by EstebanJals


 * 9 Story Entertainment was edited by FontanaChannel and GloveWorld


 * RTÉjr was edited by King Fontana III, FontanaChannel, GloveWorld and EstebanJals &mdash; rybec   04:32, 8 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Account indef'd and tagged. IPs are stale. Closing. Callanecc (talk • contribs • logs) 23:54, 10 March 2014 (UTC)

09 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The IPv4 address was previously reported and blocked due to its use by EstebanJals. A recent edit to Thomas Built Buses shows it is again in use by EstebanJals.

The IPv6 address was used to insert a link to Fontana Distribution into Template:Cerberus Capital Management , a page which was also edited by 142.129.199.97. EstebanJals vandalised the Fontana, California article and several of his alternate accounts have had "Fontana "in the account name. &mdash; rybec   04:49, 9 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * 142.129.199.97 anonblocked for 3 months. Other IP is stale. Closing. Callanecc (talk • contribs • logs) 23:56, 10 March 2014 (UTC)

11 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * about 4 hours after Duchh8888 was blocked, I Am SBX-335 edited Template:Cerberus_Capital_Management which had been edited by Duchh8888 and 142.129.199.97

FontanaLand, 2605:e000:bc80:9c00:4843:9cbc:6dca:8ef0, 2605:e000:bc80:9c00:2d3c:ac40:5662:a17e and EstebanJals
 * I Am SBX-335 edited BabyFirstTV which had been edited by


 * Peg Plus Cat is a children's television show [//en.wikipedia.org/w/index.php?title=BBC_America&diff=prev&oldid=599084787]

EstebanJals has an affinity for children's television and for editing "List of programs broadcast by" articles; it was edited both from the I Am SBX-335 account and from the IP address, with about 3 minutes between the edits &mdash; rybec   04:49, 11 March 2014 (UTC)
 * no EstebanJals activity had been reported before on List of programs broadcast by BBC Canada but
 * the account name Wwwestebancom is similar to EstabanJals
 * the Wwwestebancom account was used to edit the previously edited pabes Template:Cerberus Capital Management and Thomas Built Buses

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Accounts indef'd and tagged. IP blocked for 3 days. Closing now. Callanecc (talk • contribs • logs) 05:57, 11 March 2014 (UTC)

14 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * edited Template:Cerberus Capital Management, List of programs broadcast by the Arutz HaYeladim, RTÉjr and The Den (television) which were edited by EstebanJals or EstebanJals' alternates


 * edited Gillig Corporation (former maker of school buses), adding unreferenced claim that it is owned by Cerberus Capital Management [//en.wikipedia.org/w/index.php?title=Gillig_Corporation&diff=599378418&oldid=597502714]


 * other pages created or edited concern children's television: List of programs broadcast by Cartoon Network (Netherlands), List of programs broadcast by Nickelodeon Philippines, List of programmes broadcast by Cartoon Network (Australia and New Zealand), Disney Junior (France) and new redirect Charles says


 * recreated the hoax page Omnitrans Channel about a television channel run by the transit company Omnitrans (Omnitrans article was vandalised by EstebanJals)

There was an earlier version of Omnitrans Channel which had been deleted in February. Whichever account or IP address created it was doubtless in use by EstebanJals, and may not have been detected before. Could an administrator please check that earlier, deleted version? &mdash; rybec   06:45, 15 March 2014 (UTC)

I had requested that an administrator look at the first version of Omnitrans Channel, the one that was deleted on 20 February. It would have been created by an EstebanJals account, possibly one that has not been detected. &mdash; rybec   13:01, 18 March 2014 (UTC)
 * Callanec has written "The account was already blocked, and now tagged." &mdash; rybec   15:01, 19 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * This user is also currently repeating earlier reverted edits to Template:Cerberus Capital Management which were initially made by previously-blocked socks of EstebanJals. Bonusballs (talk) 12:10, 16 March 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Wiki Channel Neteork blocked as a suspected sock based on the behavioural evidence presented. Closing. Callanecc (talk • contribs • logs) 06:53, 18 March 2014 (UTC)

20 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * username resembles and, previously blocked as EstebanJals socks


 * edited which had been edited by EstebanJals and FontanaLand


 * edited  and  which had been edited by EstebanJals accounts and/or IPs


 * edited a Microsoft-related article,


 * in King (company) made an unsupported change to the owner parameter in the infobox, adding the name of a manufacturer of school buses [//en.wikipedia.org/w/index.php?title=King_(company)&diff=prev&oldid=600327944]], similar to an edit by an EstebanJals sock, putting a different bus company on the same line of the same article [//en.wikipedia.org/w/index.php?title=King_%28company%29&diff=599065547&oldid=598873458]

This account has already received a one-month block but has not been confirmed as belonging to EstebanJals. &mdash; rybec   13:49, 20 March 2014 (UTC)


 * Added further blocked username, KingFontana X - same pattern of behaviour, focus on particular company names and television programmes (Sonic X and Peg+Cat being particularly obvious stand-outs at present). Also currently blocked for vandalism. Bonusballs (talk) 00:29, 21 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Both indef'd and tagged. Closing. Callanecc (talk • contribs • logs) 05:49, 22 March 2014 (UTC)

29 March 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Repeating past vandalism against same focus articles including Cerberus Capital Management template, Omnitrans, Gillig, etc. Interacting with and posting fake notices on talk pages of accounts already blocked for socking. Bonusballs (talk) 18:48, 29 March 2014 (UTC) Bonusballs (talk) 18:48, 29 March 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged per username and editing area. Callanecc (talk • contribs • logs) 05:59, 31 March 2014 (UTC)

05 April 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Omnitrans channel previous version was created by another proven sock of EstebanJals Geraldo Perez (talk) 02:24, 5 April 2014 (UTC)

Also this was added to my page and matches warning message at User talk:FontanaLand, another sock. Geraldo Perez (talk) 02:40, 5 April 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, blocked. Materialscientist (talk) 03:52, 5 April 2014 (UTC)

07 April 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Common article focus as per other socks Geraldo Perez (talk) 03:14, 7 April 2014 (UTC)

This edit by  and this edit by   --Geraldo Perez (talk) 00:24, 8 April 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - - Looks pretty likely. Is there any chance of an IP block? Callanecc (talk • contribs • logs) 10:12, 10 April 2014 (UTC)
 * ✅ and . ​—DoRD (talk)​ 11:33, 10 April 2014 (UTC)
 * Account blocked, marking for close. Jafeluv (talk) 07:06, 11 April 2014 (UTC)

20 April 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same edits as on New Flyer,  on Template:Corus Entertainment & Corus Entertainment Geraldo Perez (talk) 21:50, 20 April 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Technically, 2WIRE771 is, but their behavior is telling. is ✅ from 2WIRE771. ​—DoRD (talk)​ 21:23, 23 April 2014 (UTC)
 * Based on the CU result and contribs I've blocked 2WIRE771 and Esteban Channel. Closing. Callanecc (talk • contribs • logs) 07:53, 24 April 2014 (UTC)

20 May 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Editing pattern and preference matches previous socks of this master.  Dwpaul  Talk   01:53, 20 May 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ Salvio Let's talk about it! 11:06, 20 May 2014 (UTC)
 * Blocked and tagged. AGK  [•] 18:26, 20 May 2014 (UTC)

20 August 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Simultaneous editing of Omnitrans, Sonoma County Transit, others; behavioral evidence (WP:DUCK)  Dwpaul  Talk   02:24, 20 August 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - - Looks pretty likely that they're related but it'd be worth checking that they aren't copycats and for sleepers. The edit histories of those two pages is very compelling. Callanecc (talk • contribs • logs) 13:54, 20 August 2014 (UTC)
 * I blocked them as ducks prior to the check given the related names and the odd combo of bus articles and cartoons/animation articles. A check found the following ✅ socks:


 * Everything should already be blocked and tagged. Note that I yanked talk page access for the master as they were using the page as a web host. --Jezebel's Ponyo bons mots 20:17, 20 August 2014 (UTC)

16 September 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Correcting malformed report added here Jezebel's Ponyo bons mots 21:30, 16 September 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, blocked and tagged.--Jezebel's Ponyo bons mots 21:31, 16 September 2014 (UTC)

23 September 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Suspected based on behavior, article focus Trivialist (talk) 21:37, 23 September 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I caught this one a bit earlier today. Blocked and closing.--Jezebel's</b> Ponyo <sup style="color:Navy;">bons mots 22:43, 23 September 2014 (UTC)

28 October 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

I have a COI with BabyFirst, which I brought up to GA. I previously noticed that user:My Little Minecraft modified the "owners" parameter in the infobox to list companies incorrectly without a source. This user was later blocked as a result of an SPI investigation led by user:Rybec and user:Coretheapple reverted the unsourced edit; I presumed the edit was some kind of spam for the companies listed. Now a new user user:Spider Manchester United States made the same exact edits just a few weeks after the prior account was blocked. It seems extremely unlikely that two accounts operated by different people, who happened to make the same edit just a few weeks after the first one was blocked.

Other than a minor nuisance, they are not bothering me much, but figured I would report it to make things easier for those hunting down the socks of this user. CorporateM (Talk) 14:58, 28 October 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked and tagged along with  who is ✅.-- Jezebel's Ponyo bons mots  17:43, 28 October 2014 (UTC)

11 November 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Usual pattern of edits to film and transport articles, same focus articles including Thomas Built Buses and Gillig Corporation, and references to Cerberus Capital Management. [] [] Bonusballs (talk) 19:35, 11 November 2014 (UTC) Bonusballs (talk) 19:35, 11 November 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - - I've blocked the account per DUCK, but given that the user has been known to have sleepers I think a check would be helpful.  Mike V  •  Talk  22:36, 11 November 2014 (UTC)
 * ✅. .-- Jezebel's Ponyo bons mots 17:02, 12 November 2014 (UTC)

19 December 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Usual behaviour pattern of edits to same children's transportation-and-television focus articles including Template:Cerberus_Capital_Management, same cross-listing of this editor's favoured companies (e.g. Gillig Corporation, Thomas Built Buses, 9 Story Entertainment, BabyFirst TV - e.g. [], [] Bonusballs (talk) 12:46, 19 December 2014 (UTC) Bonusballs (talk) 12:46, 19 December 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Sock blocked and tagged.-- Jezebel's Ponyo bons mots 21:51, 19 December 2014 (UTC)

10 February 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same evidence as last report on 19Dec. Eg interest in Cerberus Capital Management, just like a. Stickee (talk) 10:15, 10 February 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Thanks. Sockpuppet investigations/London Transportation Commissioned appears to be a duplicate. Does that one need dealing with? Stickee (talk) 03:27, 11 February 2015 (UTC)

These have already been blocked, mostly for violating the username policy, but based on the username styles and the articles edited, I think these have the same puppeteer: Trivialist (talk) 00:01, 12 February 2015 (UTC)
 * User:Carpenter Body Company
 * User:Horizon Coach Lines of Los Angeles
 * User:Mitsubishi Group of Companies
 * User:Strathmore Chestermere Commuter Bus Service

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:


 * Some of them were already blocked for username violations, so I switched the block with a pointer back to this report.-- Jezebel's Ponyo bons mots 01:43, 11 February 2015 (UTC)
 * Accounts tagged. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 16:09, 11 February 2015 (UTC)

07 February 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

All accounts share similar names: they are all the names (or come close to the names) of actual organizations and three of the four share (or come close to) the names of public transit authorities. Two accounts have been blocked because of their names: see here and here. London Transportation Commissioned has vandalized pages that all of the suspected socks have edited:
 * It made this edit to Legendary Pictures, which is similar to this edit made by Bella Coola Valley Transit System.
 * It made this edit to Morongo Casino, Resort & Spa shortly after this edit was made by Yosemite Area Regional Transit System to the same article.
 * It made this edit to List of programs broadcast by ABC Family, which is very similar to this one made by GMC Division of General Motors LLC. – Zntrip 05:49, 7 February 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Just noticed this report after I made mine. The sockmaster appears to be (SPI link). Stickee (talk) 10:25, 10 February 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * , can this be merged to Sockpuppet investigations/EstebanJals? He's the obvious master here.-- Jezebel's Ponyo bons mots 20:30, 11 February 2015 (UTC)
 * Case merged and I've tagged the other new accounts posted above. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 03:55, 12 February 2015 (UTC)

13 February 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This edit by Interiordesigner210 is very similar to this edit by confirmed sock. – Zntrip 02:21, 13 February 2015 (UTC)

Additionally, Mkrgolf's contribution history shares similarities to known sock puppet accounts, specifically list articles involving animated television programs. For example, see this edit where Mkrgolf and a known sock consecutively edited an article. It is worth noting that an SPI of Mkrgolf occurred in May 2014 (additionally, this comment on that SPI's archive is worth noting). – Zntrip 04:19, 13 February 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
I have asked Ponyo to take a look at this, as she is obviously very familiar with the background here. Risker (talk) 05:29, 16 February 2015 (UTC)
 * Both accounts are ❌ to EstebanJals. I've created a page on CU-wiki under the sockmaster's name. -- Jezebel's Ponyo bons mots  23:30, 16 February 2015 (UTC)

02 June 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

I came across this person via the hoax article House of Smokey Bear. There was something about the username and the editing patterns that felt extremely familiar, so I did an SPI search and voila. (I can't remember how I came across the other socks, but I remembered this name.) Like the other accounts this user has created a page for a fake animated show and has tried to insert other hoaxes into Wikipedia with this edit, which linked to a fake source. The username is also similar to other EstebanJals names in that other accounts have had "Esteban Felix" in it to some extent and/or has had Minecraft in the name. I've already blocked the editor for the hoax articles and I've voiced concern about the possible sockpuppetry on the same page, although I haven't tagged them yet. I'm also going to ping Ponyo since she's familiar with this whole shebang. This looks to be a fairly obvious WP:DUCK, though. I don't know that we need a sweep for sleepers. Tokyogirl79 (｡◕‿◕｡)  06:02, 2 June 2015 (UTC)
 * Mostly I'm opening this just to have a record of this, so if anyone wants to just go "yup" and close it, I have no true issue with that. Tokyogirl79 (｡◕‿◕｡)  06:02, 2 June 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I didn't receive your ping, but I do watch this page so I saw your comment regardless. I checked for sleepers as they are known to use them, but didn't see anything obvious, and I updated the tag to ✅.-- Jezebel's Ponyo bons mots 18:34, 2 June 2015 (UTC)

04 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK, similar username, similar edits to articles about media, especially for kids. Trivialist (talk) 20:44, 4 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * is ✅. Blocked, tagged, closing.--Bbb23 (talk) 23:27, 4 July 2015 (UTC)

07 July 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same behaviour as the 10 February invetigation. Stickee (talk) 12:41, 7 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * is ❌.--Bbb23 (talk) 13:52, 7 July 2015 (UTC)

16 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK: Similar username, same article targets, same dubious edits (for example, adding "New Flyer Industries, a bus company, as owner of The Big Cartoon DataBase). Trivialist (talk) 21:15, 16 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged.-- Jezebel's Ponyo bons mots 21:22, 16 July 2015 (UTC)

18 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK; same username style, editing targets, and questionable/unsourced edits. Trivialist (talk) 15:09, 18 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged.-- Jezebel's Ponyo bons mots 20:32, 18 July 2015 (UTC)

26 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK; adding unsourced/false information to articles about children's movies/TV and busses. Trivialist (talk) 03:23, 26 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged.-- Jezebel's Ponyo bons mots 22:46, 27 July 2015 (UTC)

25 October 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK: Interests in children's television and bus transit, creating hoax article Oliver & Jenny. Trivialist (talk) 06:32, 25 October 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
 * 1) At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
 * 2) At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
 * 3) In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this.  Vanjagenije   (talk)  10:05, 25 October 2015 (UTC)
 * and are ✅, blocked and tagged.