Wikipedia:Sockpuppet investigations/Evlekis/Archive/1

04 May 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This was suspected by User:PRODUCER at Administrators' noticeboard/IncidentArchive794 a few days ago, and I told him to write it up here, but they didn't. I wasn't initially convinced, but today I saw this edit. I find it exceedingly unlikely that an actual new user would just so happen to match Evlekis' topic area so diligently. In addition, the username means old gusle, so it sounds somewhat self-deprecating and very much on-topic. Either that's him, or they could be some other old user who's been active in the topic area, or they've wikihounded some of us others around. Or it's an actual newbie whose learning curve is apparently a very steep angle, in which case I'm ready to apologize. I hope a simple checkuser can clear this up. --Joy &#91;shallot&#93; (talk) 12:15, 4 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

The appointment of that editor coincides with my topic ban but I vehemently deny any association with the account. Many of the Yugoslav-related pages remain on my watchlist and I am poised and ready to revert by the bucketload where users have messed about while I am out of reach, so nobody is doing my bidding for me (for example, this would have provoked rollback had I been allowed). Furthermore, I am not in total agreement with every edit submitted by Staro Gusle. So to clarify, no that is not me, nor am I acquainted with the account holder. Disbelieve me of you will though I maintain this to be the case. Evlekis (Евлекис) (argue) 18:15, 4 May 2013 (UTC)
 * Comment from Evlekis

Please also note that this user has knowledge that I admit I did not know, example. Compare this related edit to what on my part is ignorance, embarrassing too. But if you want a radical inconsistency, check this comment by Staro Gusle which could not remotely be related to me in light of this comment I posted a year ago. We may have edited most of the same pages, I can see this being an editor I can work with without conflict, I have no issues with his editing and I suppose he would be all right with me too, but we are not the same. I might be able to find more proof if the admin dealing with this requests so. Evlekis (Евлекис) (argue) 18:40, 4 May 2013 (UTC)

Another: PRODUCER is pleased with himself on thinking he's caught a WP:DUCK. However he is not the disserning editor he believes himself to be. He cites this removal of "Ferizaj", Albanian name for Uroševac by Staro Gusle. Well how about this from March 2012? In it I evidently endorse the Albanian name display in dual form for precisely the fact that the entity of birth was disputed since it was World War II when international order had collapsed. See the link I produced for country of birth. Staro Gusle is even less like me than I first thought. Evlekis (Евлекис) (argue) 19:21, 4 May 2013 (UTC)

Point of interest: I was mentioned here by more than one user yet none bothered to inform me that the discussion was taking place. I never had a proper chance to defend myself and all because my supposed alter-ego has involved himself on an article I have not previously touched. So disciplinary is required there. But now I shall take this opportunity to divulge the following: I have not watched Weight of Chains therefore am not well placed to comment on what should and should not feature in the article. I do know who Malagurski is however, and I am also familiar with the now rotten and ongoing arguments between pro- and anti-Yugoslavs the world over so I know what to expect, and given Malagurski's tender age and the nature of the cast and plot, I am sure there must be flaws in the movie therefore I support the inclusion of a sourced criticism paragraph. No way would I have continuously removed it. I am furious that the matter passed and I never contributed, but somebody should have told me. Evlekis (Евлекис) (argue) 19:38, 4 May 2013 (UTC)


 * Comment from Staro Gusle
 * 1) @ Evlekis. Have you read "defending yourself against claims"? It says- 'If you are accused of puppetry, stay calm and don't take the accusations too personally. If you have not abused multiple accounts or IPs and have not breached the policy on meat-puppetry, then that will almost always be the finding. If there is a good reason for the evidence provided, point it out in your own section. Sockpuppet inquiry pages are only about account and IP misuse—nothing else. If the evidence is not there, then the case will be closed without any adverse finding of any kind.'. No need to panic now is there! :) Staro Gusle (talk) 05:48, 5 May 2013 (UTC)
 * 2) @WillianH. FTR, I located this talk because I received notifications that two users mentioned me the past 24 hours. Evlekis and Joy. Nothing further to add. Staro Gusle (talk) 05:50, 5 May 2013 (UTC)
 * 3) @Joy. Very well observed, my user name is "on-topic". Why, did you think I am trying to conceal coming from ex-Yugoslavia? Staro Gusle (talk) 05:58, 5 May 2013 (UTC)


 * To admins and assessors from Evlekis.
 * Dear all, I accept that "likely" stops short of "definite" though there is a way I can prove there are two human beings involved, provided Staro Gusle continue his daily editing in like manner to what we have witnessed since his inception. At the moment, if Producer's observation is correct then the two of us edit from Britain, then take notice that on Wednesday 8 May 2013 I am scheduled to fly to Belgrade as I shall be in the area for a few days. During that time I have no intention of editing since I focus on Balkan subjects and I cannot touch most. Upon arrival, I shall send an IP note here, then I shall log in to confirm the authentication of the IP, all within the minute. With hope, Staro Gusle will be editing from a British address and then the idea that this is not one and the same person will be unequivocal. Is that fair? Evlekis (Евлекис) (argue) 17:23, 5 May 2013 (UTC)
 * I can log in and leave a message from at least three different US cities without using an open proxy today from the comfort of my home, so from a technical perspective, it can't prove innocence. Proxies and VPN make doing this trivial, as would simply giving a distant family member or friend my login information and having them post for me.  Not saying you would do this, I'm just saying it is very easy to do, so it isn't likely to convince anyone. Dennis Brown - 2¢  © Join WER 18:51, 5 May 2013 (UTC)
 * Of course I wouldn't do it Dennis! If I'd wanted to get a friend to log in for me then I wouldn't have had to wait until the day I fly, I could just do it now. To William, I don't claim to be innocent, only a small child can be innocent, where you're concerned I am not guilty and I'll still be not guilty if I get the block, and even ten years from now I'll be not guilty then. Well I suppose if it's possible with proxies and computer magic to operate from a Norwegian IP whilst in Samoa then we have no evidence that Staro Gusle or I for that matter are geographically close-by - let alone the absurd and disturbed suggestion despite my evidence of different nature as people that we are the SAME person. Evlekis (Евлекис) (argue) 19:10, 5 May 2013 (UTC)

I would point out that Staro Gusle's editing spree started when Evlekis was blocked, and Staro Gusle has continued to advance the usual positions that got Evlekis a topic ban and 1RR &c over at WP:AE. For instance:. This even continues on quite obscure articles, for instance: ;  ; and so on. What is that, if not a sockpuppet? Evlekis has previously used socks to evade editing restrictions; this is hardly news. bobrayner (talk) 20:18, 5 May 2013 (UTC)
 * Belated comment from bobrayner
 * Evlekis mentions ARBMAC warnings. I should point out this. Evlekis tried the same rant about me a few days ago at WP:AE, and got hit by a boomerang - specifically, Evlekis got a block, a topic-ban. 1RR &c. And, whilst Evlekis was blocked, Staro Gusle suddenly started editing, pushing the same points as Evlekis. Just like and  &c in the past. I shouldn't have to point out the Arbmac result, but Evlekis promptly removed any sign of it from his talkpage. Surely we're not expected to believe that Staro Gusle is a friend or housemate of Evlekis, who coincidentally pushes the same points from the same computer, coincidentally picking up the crusade when Evlekis has to stop due to a block. How long should en.wikipedia tolerate Balkan pov-pushers who repeatedly evade sanctions? bobrayner (talk) 22:48, 5 May 2013 (UTC)
 * No, Staro Gusle does not share a house with me nor is he somebody that I can say I have met. You have decided that we are "one and the same" purely because we oppose your slanted tendentious viewpoints. I have once edited without logging in, admitted it and was warned for it. Those IPs you list are not even located in Britain where I live. If you have unequivocal evidence (ie. not "coincidence" or conjecture) that I have been abusing multiple accounts, provide it, if not - on your bike. Evlekis (Евлекис) (argue) 23:03, 5 May 2013 (UTC)
 * Meh. There's nothing to be gained from me arguing with Evlekis, but just in case any third party takes Evlekis' comments at face value, I would invite them to read the arbitration enforcement page; I presented more evidence of earlier sockpuppetry there. Then Evlekis got blocked, then a new account, Staro Gusle, suddenly appeared to continue Evlekis' edits. After the block was lifted, Staro Gusle kept on going - Evlekis is still topic-banned from that whole area. And then checkuser connects Evlekis and Staro Gusle. Why are we still here debating this? How long should enwiki tolerate pov-pushers who repeatedly evade sanctions? bobrayner (talk) 03:44, 6 May 2013 (UTC)
 * In continuation of the above comment, Rayner has presented ZERO evidence of sockpuppetry on my part either before or now and I was never blocked for that reason, it had been an alleged BLP violation coupled with an admin's view of "tendentious" editing. All he has done is whimpered that a bunch of accounts that disagree with him are all "Evlekis". Note that he has neither addressed the multitude of differences between my supposed alter-ego and me which if inspected, are more striking than the similarities, nor has he accepted the geographical location difference between the IP he alleged was mine yet so crudely screams murder when realising that an account to oppose him is British-based. His entire rhetoric is based on the presumption that Staro Gusle continues Evlekis' edits and that they are one and the same. I am not prepared either to argue with Aunt Sally but it should be noted that this user who has introduced nothing to this discussion worthwhile has much to gain from the elimination of accounts to disagree with his slanted position. Give it time, the list of "suspected socks" will get bigger and bigger since that will be his new tool for trying to rid accounts that harm his deliberate POV pushing. Evlekis (Евлекис) (argue) 05:21, 6 May 2013 (UTC)

The Zetatrans connection is hardly surprising. Compare these pairs of edits by the two: ;   ;   ;   ;   ;   ;   ;  ;  ;  ; and so on. I can provide a lot more if necessary - most of Zetatrans' edits seem to be repeating Evlekis' reverts, since Evlekis' 1RR restriction (and now topic ban) makes it very difficult to push Evlekis' preferred wording into articles. Both follow me round. bobrayner (talk) 14:37, 6 May 2013 (UTC)

Save for the first 14 words of Rayner's statement, the rest is utter nonsense. Two Checkusers have failed to prove a link between me and the other account. They just show that we have edited a handful of the same articles and we have shared habits such as starting sentences with a capital letter and finishing with a full stop/period. There are countless editors that have endorsed the versions our two accounts have provided the same revisions for. Rayner's real issue is that each time this has happened, he has been the chief architect pushing for the alternative versions (eg. "Serb military in 1999", spellings per Albanian customs) whereupon that very statement above offering nothing new to the conversation can only be taken as an extended smear campaign. Yes, five minutes he has been back on Balkan subjects and has placed himself at the centre of an altercation immediately, this after having received two ARBMAC warnings in four months. Already making tendentious edits to Climate of Kosovo with the line "revert sock" despite the admins not having ruled that the verdict and despite the fact that there is no requirement to simply revert every contribution made by an individual ruled a "sockpuppet". The admins at AE recently already confirmed that such edits are simply content dispute and there is no right and no wrong, another reason I am in no rush to get back to it. But for editors and admins that still believe the fantasy that one person could be controlling my account and Staro Gusle's, perhaps they could throw some light on the following: one of many references to Montenegrin language from me vs this removal per summary and this equivalent? Or am I schizophrenic? Evlekis (Евлекис) (argue) 22:14, 5 May 2013 (UTC)
 * Refuting Bobrayner

I'm the original editor who brought up the issue at the ANI noticeboard and I thank Joy for bringing it up here. The fact that many details of very obscure articles are edited by the two in same or similar manner is highly suspicious to me. Again this includes the editing of Serb/Montenegrin/Yugoslav perpetration of crimes in List of massacres in the Kosovo War and Ćuška massacre  and Albanian/Serbian names in Climate of Kosovo, Đakovica , and Ferizaj/Uroševac. In addition to the original evidence I note that both edited Stjepan Đureković's 1982 defection and the wikilinking of Serbian-Albanian conflict/relations in the "see also" section of Ukshin Hoti. There are just too many coincidences with the timing of the account's creation, the locations of the accounts, and their editing nature. -- ◅ PRODUCER  ( TALK ) 22:50, 5 May 2013 (UTC)
 * Comment from PRODUCER
 * Too many coincidences for whom? You personally? Are those consistencies limited to our two accounts? What about the other articles he has edited and the radical differences in our editing? For your information, I have already refuted your concerns, I will not repeat myself. The Ferizaj vs Uroševac issue has been cleared up on this page. Just read this. Evlekis (Евлекис) (argue) 23:03, 5 May 2013 (UTC)
 * You attempted to refute one point. That diff you cited was in March and there you replaced the wikilink of Ferizaj with Uroševac so to cite that as having "endorsed" the name is odd to say the least. Later in April you explicitly said "when in 1999 your marvelous BBC was reporting from Kosovo, we all heard them speak of Uroševac, nobody recalls Ferizaj" and then mocked the Albanian name. Your view on the Albanian name is clear and you evidently finished what you began with the other account. -- ◅ PRODUCER  ( TALK ) 00:12, 6 May 2013 (UTC)
 * PRODUCER, you have made your WP:POINT. I have a justified reason to feel angry. If my supposed alter-ego gets the block it will mean nothing to him; I face the prospect of seven years worth of contributions vanishing into thin air. If you cannot follow simple points, keep that mouth of yours zipped. You raised a concern, fair enough, I denied the allegation - you rather than taking the word of a veteran editor choose to disbelieve me and continue a smear campaign. This isn't Dramafest sunshine. I have replaced dozens if not hundreds of wikilinks for Ferizaj to Uroševac, and Gjilan to Gnjilane. It is to do with the article title and the most common name in English, if editors believe the opposite is correct they can start by having the pages moved. That would be the place to discuss it and for the masses to submit their opinions. The point is that with the sole exception of that no good POV pusher Rayner, the rest of the editors that push for Albanian placenames on former Yugoslav territories are IPs, short-lived disruptive accounts or new users who come and go purely to introduce their little package. The point is that we also observe historical accuracy and in 1943 when the subject was born, Kosovo's status was disputed and no international order existed to determine that one entity was legal and the other wasn't, hence the dual-name including Ferizaj. As for the rest of the edits, pure conjecture pal, locating obscure articles is not hard particularly if the editor uses the same methods for finding Albanian names scattered across the site as I had done, nor if he examined my or Bobrayner's history. As for the edits which are identical to mine, if you don't like them, bollocks to you son - I do not have to stand here and justify why other users have chosen to report the same revision as me. Bottom line, if you told the truth from the onset, all you had to do was admit that both my contributions and Staro Gusle's pose a threat to your own POV-pushing and we are not welcome by you. Because all you have done is pedal an unjustified myth that we are one and the same and you are terrified the admins might just not come down on your side. So unless you really have something new to add not already spotted after two CUs, you can sling your hook. Evlekis (Евлекис) (argue) 05:21, 6 May 2013 (UTC)

In response to Bobrayner who has entered this discussion on alleged sockpuppetry citing 84.74.30.1, Please be aware that the account is based in Switzerland. Take it as you will. Evlekis (Евлекис) (argue) 23:26, 5 May 2013 (UTC)
 * FAO clerk/admins

Clerk, CheckUser, and/or patrolling admin comments

 * In terms of a technical match, definitely and looks . WilliamH (talk) 14:07, 4 May 2013 (UTC)
 * Evlekis has posted a note on my talk page, categorically denying any association along the lines of the above messages. I stand by my original technical assessment - that from the technical side of things, these two accounts are most likely operated by the same individual - and I'm happy for another CheckUser to review my work. Marking as relisted. WilliamH (talk) 13:07, 5 May 2013 (UTC)
 * Looked over this at WilliamH's request. I'd call this . T. Canens (talk) 15:40, 5 May 2013 (UTC)
 * I too would call this bordering on . --(ʞɿɐʇ)  ɐuɐʞsǝp 17:05, 5 May 2013 (UTC)
 * Re: to admins and assessors — this will not be considered. CheckUser is never used to prove innocence, because it cannot prove a negative. WilliamH (talk) 18:55, 5 May 2013 (UTC)

Well, this is interesting. I have just been taking another look at the data. The following are incontrovertibly ✅ socks of Evlekis: WilliamH (talk) 10:43, 6 May 2013 (UTC)
 * I've pinged User:Sandstein, as he was involved in the previous problems with Evlekis. I've been reading over the metric tonne of data here for a few days, and while some of it is contradictory and would include socks arguing with socks, I'm strongly leaning in the direction that Staro Gusle is a sock of Evlekis. Combined with the "incontrovertibly confirmed" finding by WilliamH (which is a rare and extraordinarily strong statement), I would lean towards blocks all around.  However, I would prefer to have Sandstein's opinion on the whole affair (assuming he is willing), as he is more familiar with the editor.  The totality of the evidence (combined with the current restrictions) mean this could result in a very long block or indef for Evlekis, so getting it right matters. Dennis Brown - 2¢  © Join WER 13:51, 6 May 2013 (UTC)
 * I topic-banned Evlekis from everything (ex-)Yugoslavia-related on 25 April. The checkusers above confirm that he has certainly violated that topic ban with Zetatrans (e.g. ), and likely with Staro Gusle (e.g. ). Consequently, in enforcement of the topic ban, and in application of WP:ARBMAC, I am blocking Evlekis for a year. Concurrently, under normal administrator authority, as per Dennis Brown's suggestion, I am indefinitely blocking Evlekis for severe sockpuppetry. I am also indefinitely blocking all three confirmed or likely socks.  Sandstein   16:10, 6 May 2013 (UTC)


 * I appreciate Sandstein coming in to insure we've applied the proper procedure and necessary blocks, and agree with his conclusions. I've tagged the sockpuppets.  Closing. Dennis Brown - 2¢  © Join WER 16:31, 6 May 2013 (UTC)

08 May 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Looks like another Evlekis sock; all edits are on Evlekis' preferred points... presumably 92.40.180.233 and 92.40.16.39 too, although those IPs have each only made one recent edit (at the time of writing), just adding that for background information really bobrayner (talk) 22:59, 8 May 2013 (UTC)
 * ...and another two; it appears Evlekis feels quite strongly this evening, and is using 188.29.220.62 and 188.31.91.76 too. bobrayner (talk) 23:14, 8 May 2013 (UTC)
 * Quite mobile use of different IPs; I think there's little point playing whack-a-mole by blocking individual IPs, but any rangeblock wide enough to be effective would presumably cause quite a lot of collateral damage. If the problem persists, would it be better to semiprotect affected pages instead? bobrayner (talk) 23:24, 8 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

is likely related. TDL (talk) 23:29, 8 May 2013 (UTC)
 * and are also probably related. -- ◅  PRODUCER  ( TALK ) 23:36, 8 May 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've semi-protected this page for a week. Feel free to revert if this was an error or is no longer needed.  Dennis Brown - 2¢  © Join WER 23:18, 8 May 2013 (UTC)
 * Obviously the same person, Evlekis. I would ask DoRD or another CU take a look at rangeblock possibilities, I'm going to protect a few articles.  Blocking individual IPs is pointless for these types. Dennis Brown - 2¢  © Join WER 23:30, 8 May 2013 (UTC)

09 May 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

The latest Evlekis incarnations have started following me to unrelated articles again;        &c. Our Balkan articles were always going to have NPOV problems, but this change in editing behaviour just exports the problem to the rest of enwiki, and it can hardly be addressed by page protection. See also 92.40.147.167 and various other short-term IPs... are there any practical solutions here? Or not? bobrayner (talk) 01:14, 9 May 2013 (UTC)
 * , too; lots of revert-stalking like   &c, standard Evlekis editing but the volume has increased a bit. bobrayner (talk) 01:38, 9 May 2013 (UTC)
 * Lots of revert-stalking by too. There's not much point in blocking a one-edit IP, but when there are dozens of edits... bobrayner (talk) 02:01, 9 May 2013 (UTC)
 * More revert-stalking by and . Can't somebody just click the "block" button and let me get on with normal editing? A little help would go a long way. bobrayner (talk) 02:25, 9 May 2013 (UTC)
 * ...and * . bobrayner (talk) 03:03, 9 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Do me a favor and add to that list. This is pathetic. -- ◅ PRODUCER  ( TALK ) 01:28, 9 May 2013 (UTC)

Could an admin please impose an interaction ban on Evlekis interacting with Bobrayner - for the well-evidenced revert-stalking per above diffs (and which is ongoing)? Then at least any reverts he does of Bobrayner's edits can be rolled back on sight. At the moment Evlekis only has a topic ban on ex-Yugoslavia topics, so when Bobrayner edits other articles, the edits can't be automatically rollbacked without edit summaries etc. I'm happy to stalk Bobrayner (in the nicest possible way) and help with the whack-a-mole... Peacemaker67 (send... over) 08:24, 9 May 2013 (UTC)
 * How would an interaction ban be necessary? Evlekis is already blocked, so any sockpuppet edits made to circumvent this block can already be reverted on sight. —Psychonaut (talk) 09:21, 9 May 2013 (UTC)
 * I was of the understanding that rollbacking on sight was only permitted on edits by banned editors, not blocked ones? Or am I not reading it right? Peacemaker67 (send... over) 09:47, 9 May 2013 (UTC)
 * Sorry, I missed that you were talking about rollbacks in particular and not reverts in general. WP:EVASION says that "Anyone is free to revert any edits made in defiance of a block, without giving any further reason and without regard to the three-revert rule."  I suppose the rules for rollback are stricter and may not cover this case. —Psychonaut (talk) 10:54, 9 May 2013 (UTC)
 * Thanks Dennis, I will follow your advice. There are actually a number of Evlekis-related RPPs that need attention for semis. Could you do the honours, please? Thanks, Peacemaker67 (send... over) 11:14, 9 May 2013 (UTC)
 * Already did. Can only protect those that have multiple action since the block.  Have a day job, but I will poke in from time to time to review at RFPP today. This isn't a perfect solution, but the least drama-filled and most effective I can think of.  Again, use WP:DENY when possible.   Dennis Brown - 2¢  © Join WER 11:35, 9 May 2013 (UTC)
 * Good points; thanks. Hopefully I can draw a line under an earlier point - Evlekis is already under an interaction ban, and a topic ban (which covers the Kosovo articles but not the spillover), and the edits are evading a block. If that isn't enough to justify rollback, what is? Similarly, I don't think there's much point going to AN/I and starting a dramathread asking for a community ban, or going to AE and asking for some kind of additional sanction there, or anything else in that vein; it wouldn't really change how the community responds to these edits. Even this SPI is now redundant, I think - it's not an investigation any more, nobody else needs convincing, it's just another page where we can say "this IP is editing disruptively". bobrayner (talk) 19:19, 9 May 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * There is some chatter on my talk page around this. Due to the high availability of IPs, I still recommend just seeking semi-protection for the affected pages, not responding to the IP (ie: not playing into the drama) and not bothering with blocking these mobile phone IPs, it does nothing.  Protect and WP:DENY. Feel free to ping me on my talk page if RFPP gets backed up.  As for rollbacks, if it is an obvious sock, I don't see a problem using the most effective tools to quietly deal with it.  This is also an Arb banned user, after all. Key is not rewarding bad behavior by letting it cause drama anywhere. Dennis Brown - 2¢  © Join WER 11:08, 9 May 2013 (UTC)
 * Closing as issue is being dealt with in a variety of forums, mainly RFPP. Dennis Brown - 2¢  © Join WER 20:45, 9 May 2013 (UTC)
 * I've semi'd Foreign direct investments in Kosovo and War crimes in the Kosovo War for 2 weeks. Legoktm (talk) 21:43, 9 May 2013 (UTC)

10 May 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The above are two ✅ socks of Evlekis. Filing purely for posterity so that edits can be reverted/removed in accordance with sanctions. WilliamH (talk) 12:53, 10 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I know you guys are busy, but could you please have a look at this directly-related issue? I'm just trying to follow the advice I've been given and limit the drama. Peacemaker67 (send... over) 14:26, 10 May 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * A number of rangeblocks have been set. WilliamH (talk) 13:08, 10 May 2013 (UTC)
 * edits have been rolled back. Deleting articles created by socks, will work on that aspect.  Dennis Brown - 2¢  © Join WER 14:19, 10 May 2013 (UTC)
 * Tagged, blanked, deleted and reverted. Easy peasy. Closing. Dennis Brown - 2¢  © Join WER 15:13, 10 May 2013 (UTC)

10 May 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Creation of redirects related to yesterday's redirect created by a confirmed sock (they related to redirecting names of settlements in Kosovo to the Serbian spelling, including diacritics). Also trying to get sympathetic editors to carry on his campaign at North Kosovo crisis. Peacemaker67 (send... over) 22:44, 10 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Behavior and area of interest is consistent with the sockmaster. Recommend look for sleepers.  Dennis Brown - 2¢  © Join WER 23:07, 10 May 2013 (UTC)
 * ✅, . WilliamH (talk) 23:15, 10 May 2013 (UTC)
 * Blocked/tagged/closed/archived/denied. Dennis Brown - 2¢ © Join WER 23:42, 10 May 2013 (UTC)

13 May 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

More ✅ socks of Evlekis, editing from the same public wi-fi facility as. WilliamH (talk) 13:19, 13 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged. . WilliamH (talk) 13:24, 13 May 2013 (UTC)
 * Closing, since you have already blocked and tagged all the sockpuppets. Reaper Eternal (talk) 15:01, 13 May 2013 (UTC)

16 May 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

I'm concerned that Neutral Fair Guy has been misattributed. NFG created an account at a time when Evlekis would normally be editing, and then made a series of very WP:POINTY edits about an obscure but controversial epithet, hours after Evlekis had ranted about exactly the same epithet in an obscure section of my talkpage that nobody else is likely to read. NFG then goes on to overlap a remarkable 21 pages with Evlekis - quite an unlikely feat for an account which only made 53 edits before getting blocked. bobrayner (talk) 21:17, 16 May 2013 (UTC)
 * WhiteWriter is right on one point; that Evlekis "dealt with" Neutral Fair Guy. Unfortunately, that one point is quite compatible with the appearance that Neutral Fair guy was a false-flag. Admins will presumably be able to see the deleted revisions of the page that Neutral Fair Guy created; with the same title which Evlekis mentioned, out of the blue and a complete non-sequiteur, in this rant about neutrality and fairness hours before the Neutral Fair Guy account was created. Other edits by NFG seem to mirror Evlekis' interests - for instance NFG's first (surviving) diff is switching Peja for Peć on an obscure article about Miss Kosovo 2003, and so on. bobrayner (talk) 22:23, 16 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * This request is bad faith nonscense, i will explain to admin who finds this questionable, but this is sock of DE user Sinbad Baron, per at least several reasons. Evlekis was one of the users who dealt with this vandal, he would be the last person on earth to create this account, without any relevant reason. Also, user Bob didnt presented even one diff, source or argument for this. -- WhiteWriterspeaks 22:10, 16 May 2013 (UTC)
 * Not even a slightest chance... [|self-revert]? This is ScFi, i cannot even imagine that is posible in this way. Bob, this is over the top, even for you. -- WhiteWriterspeaks 22:47, 16 May 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Already blocked, but sleepers please. King of &hearts;   &diams;   &clubs;  &spades; 21:18, 16 May 2013 (UTC)
 * If my math is correct, there have been seven checkusers run, by three different Checkusers, since this editor started, yet he never showed up in any of those sweeps. I'm thinking there has to be some diffs that would clearly show a link to check an 8th time.  Dennis Brown - 2¢  - © - @ - Join WER 23:08, 16 May 2013 (UTC)
 * Makes sense, I've retracted my endorsement. -- King of &hearts;   &diams;   &clubs;  &spades; 23:11, 16 May 2013 (UTC)
 * , . There is justification for the check, and it's in progress. WilliamH (talk) 23:22, 16 May 2013 (UTC)
 * A to  match. WilliamH (talk) 00:31, 17 May 2013 (UTC)
 * So Neutral Fair Guy does not technically match Sinbad Barron, as is currently claimed? -- King of &hearts;   &diams;   &clubs;  &spades; 00:34, 17 May 2013 (UTC)
 * There is a possible to likely technical match to Evlekis, and nothing to suggest a technical match to Sinbad Barron. WilliamH (talk) 00:43, 17 May 2013 (UTC)


 * Looking at a number of factors, including the limited number of contribs of Neutral Fair Guy, an extradinary number of common articles, similar POV, times of edits, timing between edits and styles, combined with the CU data that shows this is at least plausible, leads me to the conclusion that this is a sock of Evlekis. Reblocked and tagged as such. Dennis Brown - 2¢ - © - @ - Join WER 01:32, 17 May 2013 (UTC)

19 May 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Another Evlekis sock; used by Evlekis to evade 1RR on Cinema of Kosovo, then repeated Evlekis reverts on Hiking in Kosovo and NATO bombing of the Radio Television of Serbia headquarters then followed me to Armed Forces of Bosnia and Herzegovina to revert me factual errors into that article. Has now repeated Evlekis' trick of taking me to An/EW even though I haven't actually breached 3RR. Softblock, maybe? bobrayner (talk) 15:24, 19 May 2013 (UTC)

It's worth taking a look at 84.74.30.129's editing history. Let's break it down and compare to matching Evlekis edits: I freely admit that my desire to remove factual errors from articles makes me an easy mark for somebody who has no such qualms and who likes to set traps; but reverting a sock does not count as a revert for 3RR purposes, so it looks like the trap is broken. bobrayner (talk) 16:17, 19 May 2013 (UTC)
 * A little analysis
 * Cinema of Kosovo:   are the same as
 * NATO bombing of the Radio Television of Serbia headquarters: is the same as
 * Hiking in Kosovo:   is the same as  and  (the latter another confirmed Evlekis sock)
 * Canvassing FKPCascais to join in an edit war to reinsert factual errors, in the hope of getting me blocked at ANEW: [ versus.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * There has been a report filed by the IP at WP:ANEW. However, without an exemption, Bob has in fact breached WP:3RR on the article. I'm not an expert in IPs and how the same person may be able to edit from different locations, but in glancing at some of the IPs listed in the archive of this puppeteer, they all geolocate to the UK, whereas this IP geolocates to Switzerland.--Bbb23 (talk) 16:03, 19 May 2013 (UTC)
 * There are a great many unpublished IPs involved (privacy policy) including many I'm not privy to. The geolocation of this IP should not be used as a reason to exclude it from consideration, for a number of reasons, including that he is traveling (per his own admission) and the possible use of proxies. Dennis Brown - 2¢  - © - @ - Join WER 16:08, 19 May 2013 (UTC)
 * IP blocked two weeks. Pattern of behavior and choice of articles is a clean match to Evlekis. Dennis Brown - 2¢  - © - @ - Join WER 16:13, 19 May 2013 (UTC)
 * Thanks, Dennis, for your comments and your action. I have closed the report at WP:ANEW.--Bbb23 (talk) 16:19, 19 May 2013 (UTC)

27 May 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This is not an urgent request; all accounts involved are already blocked. I just found some interesting evidence and would like to set the record straight (like with the Neutral Fair Guy false-flag). Any CU would be stale so it's down to a good old-fashioned comparison of editing patterns.

It seemed odd that Evlekis' first edit was to praise three editors on a talkpage (then the second edit turned his userpage into a bluelink). One of those editors is Celtmist.

The Celtmist account was created before Evlekis, only has 561 edits but overlaps on an amazing 134 pages with Evlekis (plus whatever has been deleted) - mostly Balkans but some other stuff too which seems unlikely to be coincidental. Including obscure pages like DND_(disambiguation), a former dab page which is now a redirect. Celtmist and Evlekis both edited the same line, which pointed to an article on a non-notable Serb pop duo, D'n'D, that has now been deleted (so this is another one that doesn't show up with standard tools, I don't know how many others are out there).

The DnD (Serb pop duo) article was moved by Ragusan, who may have done more substantial work on it; it's deleted so I can't tell - Ragusan was notified when it got PRODded but that might have been the result of a copy-and-paste move. Ragusan was also blocked as a sock of Moroccan Spaniard, and Ragusan overlaps 85 pages with Evlekis despite only having 277 extant edits. Those 85 include the usual Balkan topics but also some obscure, unrelated pages like this TV episode which has since become a redirect.

There are more coincidences that don't appear on the Intersect Contribs tool. For instance, Evlekis created Leave to Remain, then 2 days later Ragusan redirected Leave to remain to it.

Also there's - pushing similar points to Evlekis, only made 62 edits yet overlaps 24 pages with Evlekis.

There are various similarities in individual diffs. Apart from pushing certain Balkan POVs there's a shared interest in specific music genres &c. They even share an interest in the etymology of Gord:   

All three edit human height in support of the contention that Montenegrins are the tallest people:   

Most bizarrely, despite all and sundry claiming Balkan connections, they both seem to have been from the same very small town in the UK. I am wary of outing, but I have diffs in which the Celtmist and Evlekis both mention this; would happily email those to any interested administrator. Alternatively, if folk feel that providing diffs does not count as outing, I'll add them here.

Ragusan and Celtmist were indef blocked in November 2006 as socks of Moroccan Spaniard. Requests for checkuser/Case/Ragusan cast doubt on that - and somebody else raised the possibility of Evlekis (at that time a new account) being involved too. Both accounts were created before the Evlekis account, so technically Evlekis would be the sockpuppet, but that account is much longer-lived and there's already an SPI page here. I could probably add AlfredG and 212.124.247.77 to the list too, but let's not get sidetracked... bobrayner (talk) 22:47, 27 May 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * These are from 8 years ago. Investigating seems pointless as they are already blocked.  We stay backlogged, and this just isn't a good use of the limited resources.  Also note, those were already reviewed by a CU while they were fresh.  Closing. Dennis Brown - 2¢  - © - @ - Join WER 23:02, 27 May 2013 (UTC)

30 May 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This IP, along with User:109.106.233.247, User:109.106.237.254, User:109.106.247.195, User:109.106.237.180 and User:109.106.243.133 have continued to engage in edit warring on North Kosovo crisis that Evlekis engaged in here, for example  and, on NATO bombing of Yugoslavia , , , , , on NATO bombing of the Radio Television of Serbia headquarters , on Albania–Yugoslav border incident , , , , , , , and on Battle of Kosovo , , , ,. These are all closely related dynamic IPs with BeotelNet-ISP and all have edited articles frequented by Evlekis and where they actually use edit summaries the content is similar. If not sock then meat very likely given that Evlekis claims to have left en WP for good after his indef block. Checkuser not appropriate for privacy reasons, but perhaps a range block could be considered. Peacemaker67 (send... over) 12:04, 30 May 2013 (UTC)
 * of course, a far better idea. Thanks Dennis.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Very likely him, but the better solution seems to be long term semi-protection. I've done just that. Dennis Brown / 2¢ / © / @ / Join WER 14:15, 30 May 2013 (UTC)

26 November 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * 1) Zavtek's first article edit was changing Drenasi to Glogovac. Evlekis did the same here, here, and here.
 * 2) Both Zavtek and Evlekis make up spurious reasons to remove content based on this reliable source.
 * 3) Zavtek and Evlekis share the rather odd belief that Serbian placenames in Kosovo are "English", and thus both remove Albanian placenames. For instance, they both did the same on Hiking in Kosovo:  . Zetatrans, another Evlekis sock, did the same: . This kind of editing has happened on other pages, but Hiking in Kosovo is the best example as it's so obscure - the article history basically comprises the original article creator, followed by Evlekis socks and people reverting Evlekis socks.
 * 4) Zavtek wants to reinsert badly-sourced content; FkpCascais helps on talkpages. Evlekis wants to reinsert badly-sourced content; FkpCascais helps on talkpages.
 * 5) Here, Zavtek removes content based on this reliable source - a book which Evlekis had removed from many articles and declared "POV" &c.
 * 6) Zavtek's only edit to Herceg Novi is to change language. Evlekis' only edits to herceg Novi are to change languages. Zetatrans, another Evlekis sock, only edited Herceg Novi to change languages.
 * 7) Changing a BLP of a popstar from Kosovo to emphasise that they're actually from Serbia. Evlekis did the same thing on various articles.
 * 8) Pushing similar points on Kosovo's northern border with Serbia:
 * 9) Using Hashim Thaçi as coatrack for the Kosovo problem:
 * 10) Calling me "Rayner" is hardly harmful, but it's an uncommon habit... shared by Zavtek and Evlekis.
 * 11) Renaming municipalities in Kosovo; both Zavtek and Evlekis stick to the very specific wording that Serbian names are "consistent" with English names. (This is a way of inventing "English" placenames, because the actual placenames aren't compatible with the Serb nationalist perspective).

There is more behavioural evidence but I'm wary of giving a complete list of Evlekis' tells, for WP:BEANS purposes: I do not want to make it easier for future socks to evade scrutiny.

A checkuser would be stale, because checkuser only stores information for three months. The gap between Evlekis' last edit and Zavtek's first edit is exactly three months. Previously Evlekis socks tried to evade checkuser. Nonetheless, there is at least one other sleeper account, so I think a checkuser would be prudent. bobrayner (talk) 14:29, 26 November 2013 (UTC)
 * Update: It's nice that Evlekis/Zavtek has owned up, but I would still ask for a checkuser, which may help flush out a sleeper account. bobrayner (talk) 16:12, 26 November 2013 (UTC)
 * Hi Bbb23,
 * Sorry for any ambiguity. As far as other socks are concerned, I'm fairly confident that I have found one more account used by Evlekis, but because steps have been taken to make the socking less obvious, I'm not yet 100% confident - and the last thing I'd want to do is falsely accuse somebody innocent. I am 100% confident that there is at least one sleeper in general.
 * I have also found a couple of IPs; again, going on previous editing patterns I am sure there are more IPs. Checkuser is unlikely to publically reveal those, but if somebody could block any IP socks for a little while, or revert them or whatever, that would be a net positive. bobrayner (talk) 16:59, 26 November 2013 (UTC)
 * , thanks for the explanation. Please list any IPs that are actively editing and whom you suspect of being socks, and some evidence in support of the suspicion.--Bbb23 (talk) 17:17, 26 November 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

The admin to deal with this reported matter may save himself the trouble and effort of launching the full SP/I operation. I am indeed the same person who has edited from some (not all) of the accounts linked to User:Evlekis, and that in the eyes of adjudicators would be sockpuppetry or meatpuppetry or something in between. It was never my intention to be disruptive to the project nor to cause trouble for any users. I believe every single contribution has been in good faith though no doubt all will be reverted. This account may be blocked indefinitely. Zavtek (talk) 16:05, 26 November 2013 (UTC)
 * From the accused party Zavtek

Clerk, CheckUser, and/or patrolling admin comments
I had been reviewing the edits and evidence, but based on the admission I've indeffed Zavtek. I gave little weight to his statement that he was a sock of some of the accounts, and I've tagged him as a sock of Evlekis. I find the CU request a bit confusing. says there is "at least one other sleeper account", but I'm not sure why he thinks that. At the same time he also says that a CU may find a sleeper account, which is something different. At the same time, it's possible that Zavtek intentionally admitted to socking to avoid finding a sleeper. With all that in mind, I'm cynically going to endorse the CU.--Bbb23 (talk) 16:50, 26 November 2013 (UTC)
 * I'm seeing a number of accounts and am making a behavioral comparison now. ​—DoRD (talk)​ 17:20, 26 November 2013 (UTC)
 * As far as I can tell, all earlier known socks are stale, so no direct comparison can be made. However, given the behavior, the admission by Zavtek and other technical details, there is little doubt left. These accounts are ✅:
 * ​—DoRD (talk)​ 17:39, 26 November 2013 (UTC)
 * ​—DoRD (talk)​ 17:39, 26 November 2013 (UTC)
 * ​—DoRD (talk)​ 17:39, 26 November 2013 (UTC)
 * ​—DoRD (talk)​ 17:39, 26 November 2013 (UTC)
 * ​—DoRD (talk)​ 17:39, 26 November 2013 (UTC)
 * ​—DoRD (talk)​ 17:39, 26 November 2013 (UTC)
 * ​—DoRD (talk)​ 17:39, 26 November 2013 (UTC)


 * All confirmed socks blocked indef per CU findings. Closing now. Mark Arsten (talk) 17:47, 26 November 2013 (UTC)

28 November 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Another Evlekis sock, the usual revert-stalking behaviour. bobrayner (talk) 20:47, 28 November 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Blocked for 10 days.--Bbb23 (talk) 20:58, 28 November 2013 (UTC)
 * Well, what a surprise! When I went to look at the WHOIS for, I found that it is actually a named account, so I changed the block to indef and have requested for it to be locked. Same for . These are both ✅ along with . ​—DoRD (talk)​ 14:32, 29 November 2013 (UTC)
 * Incrediible. I've tagged the two phony IP accounts.--Bbb23 (talk) 14:52, 29 November 2013 (UTC)

29 November 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Admits here to wanting to end his feud with bobrayner, indicating he is Evl. Then goes on to edit the Hiking in Kosovo article, reinstating his previous sock's edits.  Ish dar  ian  05:38, 29 November 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
already indeffed. I changed tag and will close.--Bbb23 (talk) 12:51, 29 November 2013 (UTC)
 * L1P2R5A8M38 is highly to be Evlekis. ​—DoRD (talk)​ 14:32, 29 November 2013 (UTC)

02 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Another revert-stalking IP, plus some canvassing of potential allies, some fake reverts &c. - standard behaviour for Evlekis socks when he's angry. Since the IP is in a different range from other recent Evlekis IPs, I would ask for a checkuser to see if there are any other sleepers out there... bobrayner (talk) 04:54, 2 December 2013 (UTC)
 * Just by way of clarification....
 * This IP seems static enough that it was previously blocked by WilliamH during Evlekis' previous outburst in May 2013. Perhaps a slightly longer block would be a good idea. The telco is different to the one with provides Evlekis' other IPs (the other one offers much shorter leases hence there are more IPs from the other telco, but none of them are active right this moment, this is just for info). bobrayner (talk) 05:05, 2 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - a checkuser will not reveal information relating to an IP, and this is a WP:DUCK case Sh i r ik  ( Questions or Comments? ) 05:23, 2 December 2013 (UTC)
 * IP hard-blocked one year Sh i r ik  ( Questions or Comments? ) 05:24, 2 December 2013 (UTC)
 * nothing more to do; tagged and blocked; closing Sh i r ik  ( Questions or Comments? ) 05:24, 2 December 2013 (UTC)

02 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

With Evlekis, there are usually sleeper accounts, so I request a checkuser. bobrayner (talk) 06:55, 2 December 2013 (UTC)
 * Rmhermen's talkpage has recently been a focus for Evlekis socks, and for somebody else's IP socks (which are all from BeotelNet). These two have cooperated elsewhere.
 * Now Eastern Promises arrives out of the blue and starts coaching the IP, showing far more detailed knowledge of wikipedia rules & editors than you'd expect from a new account.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Eastern promises is ✅. ​—DoRD (talk)​ 04:29, 4 December 2013 (UTC)
 * Eastern promises tagged and blocked indef. Closing now. Mark Arsten (talk) 04:34, 4 December 2013 (UTC)

05 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Both impersonators of different accounts, and are pretty clearly being run by the same person - I went in and cleaned up the mess of Jrpr1966, so obviously I was their next target. I'm filing this for a couple of reasons; one being so that people are aware that we've got another one of these on the loose, and another being that I want to see if CU will turn up an existing master, or if there is a static IP that needs hardblocking for a little while. Luke no 94 (tell Luke off here) 08:36, 5 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Well, it's definitely Technoquat's MO, but then, most trolling things are. Luke no 94  (tell Luke off here) 13:30, 5 December 2013 (UTC)
 * Please also look into . -- Jprg1966  (talk)  15:19, 5 December 2013 (UTC)
 * Sorry, he'd be a meat puppet rather than a sock puppet. -- Jprg1966  (talk)  15:27, 5 December 2013 (UTC)
 * Given my recent run-in with Evlekis, I can also see it being him. Luke no 94  (tell Luke off here) 16:51, 5 December 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
I've already blocked the Luckeno94 account for harassment and username violations, however *switches admin hat for clerk hat* since it doesn't look as though this guy has any plans to stop. Yunshui 雲 &zwj; 水  08:45, 5 December 2013 (UTC)
 * ✅ To and to each other. That being said it's  that these users are technoquat, but it should be judged on a behavioral basis. NativeForeigner Talk 09:15, 5 December 2013 (UTC)
 * Hermanthebutler blocked and tagged. Yunshui 雲 &zwj; 水  13:57, 5 December 2013 (UTC)


 * This looks a lot like based on checkuser. Reaper Eternal (talk) 14:18, 5 December 2013 (UTC)
 * Evlekis is the only user who has ever impersonated me like this. Almost certainly him. -- Jprg1966  (talk)  14:20, 5 December 2013 (UTC)
 * All blocked, closing now. Mark Arsten (talk) 02:14, 6 December 2013 (UTC)

05 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Another impersonator account. I felt opening up a separate case would be better than mangling the other one that I opened this morning. Luke no 94 (tell Luke off here) 19:11, 5 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already done, and these accounts are pretty obviously all Evlekis. Reaper Eternal (talk) 19:14, 5 December 2013 (UTC)

07 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

was blocked by for "disruptive editing". An hour later, was created and proceeded to respond to Cognoscerapo's block notice and vandalize the blocking admin's userpage. tagged Cannot be detected's userpage as a suspected sock of, but it seems more likely that this is Cognoscerapo. Cannot be detected is already blocked indefinitely, but it's probably a good idea to do a CU to confirm who the master is. If it's Cognoscerapo, then they're WP:EVADEing their block so further administrative action against them might be necessary. TDL (talk) 03:24, 7 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - due to the potential of this being a LTA. Rschen7754 10:28, 8 December 2013 (UTC)
 * Interesting. Cognoscerapo is a ✅ sock of Evlekis, but Cannot be detected is to be Sinbad Barron . ​—DoRD (talk)​ 14:54, 8 December 2013 (UTC)
 * I've tagged both and extended Cognoscerapo's block to indef. Cannot be detected was already blocked indef. I've copied this section to the SPI archives of Evlekis and Sinbad Barron. I suggest this be redirected to Evlekis' SPI now. Closing. Mark Arsten (talk) 19:57, 8 December 2013 (UTC)
 * After looking back over the evidence, it appears that I was mistaken about Cannot be detected. Actually, that account is more likely to be another Evlekis sock after all. ​—DoRD (talk)​ 21:21, 9 December 2013 (UTC)
 * Note: This section merged from Sockpuppet investigations/Cognoscerapo. Mark Arsten (talk) 21:41, 9 December 2013 (UTC)

09 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

New editor turns up and starts making the same edits as Staro Gusle, an earlier Evlekis sock. Đakovica: Jakova:  bobrayner (talk) 10:45, 9 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
This diff clinches it for me; blocked and tagged. Yunshui 雲 &zwj; 水  12:29, 9 December 2013 (UTC)
 * Of course, he was ✅, along with . Note the disruptive unicode look-alike characters in the username. Closing. Reaper Eternal (talk) 12:43, 9 December 2013 (UTC)

10 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

After I made a few reverts of The Next Timelord on Đakovica and Jakova, the first two IPs set up an AN3 case. Contrived cases on the edit-warring noticeboard are standard fare for Evlekis, and they repeat his tired old arguments. The latter IP just follows me to random articles and hits the revert button; another Evlekis habit. All three IPs geolocate in much the same way as prior Evlekis socks. Evlekis usually has sleeper accounts, but I'm not going to insist on checkuser right now. bobrayner (talk) 15:32, 10 December 2013 (UTC)

Meanwhile, ممنون حسین has repeated the revert-stalking, plus tasteful Evlekis fare like this. Might be a good idea to revdel some of the impersonation-and-attack edits. bobrayner (talk) 19:47, 10 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IPs blocked one week and account blocked indef + a few posts revdeleted. Closing now. Mark Arsten (talk) 20:17, 10 December 2013 (UTC)

11 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

More IPs whose main purpose is to go through my contribs and revert everything. Plus stuff like this. bobrayner (talk) 20:47, 11 December 2013 (UTC)
 * Various other IPs from today's outbreak have already been blocked. bobrayner (talk) 21:18, 11 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the three IPs listed above for one week. The range looks fairly wide, so I don't think a rangeblock would be advisable here. Mark Arsten (talk) 21:21, 11 December 2013 (UTC)

11 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

The IPs are the usual revert-stalkers; Evlekis seems to have a lot of time to waste tonight. Create Account was created to give other other Evlekis socks something to revert; and  but regardless of socking, we don't need work like this. bobrayner (talk) 22:11, 11 December 2013 (UTC)
 * All named accounts blocked indef. Note that Create Account 10101 is now blocked as a VAO, not a sock. Mark Arsten (talk) 01:38, 13 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The two accounts have been blocked indef and the IPs have been blocked temporarily for block evasion. I've also blocked, , , , , and as socks. Mark Arsten (talk) 15:24, 12 December 2013 (UTC)
 * Starman in the Sky, the accounts listed directly above and are ✅. Except for the obvious,  is ❌ to Evlekis. ​—DoRD (talk)​ 22:58, 12 December 2013 (UTC)

12 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Given Evlekis' obsession with, the username and this revert of a bobrayner edit make this account a duck. The user usually has sleepers, so it's probably worth a check. TDL (talk) 18:43, 12 December 2013 (UTC)

Comments by other users
Just for the sake of completeness, let's add these to the list too: bobrayner (talk) 20:31, 12 December 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The following are all ✅:
 * ​—DoRD (talk)​ 23:03, 12 December 2013 (UTC)
 * ​—DoRD (talk)​ 23:03, 12 December 2013 (UTC)
 * ​—DoRD (talk)​ 23:03, 12 December 2013 (UTC)
 * ​—DoRD (talk)​ 23:03, 12 December 2013 (UTC)
 * ​—DoRD (talk)​ 23:03, 12 December 2013 (UTC)
 * ​—DoRD (talk)​ 23:03, 12 December 2013 (UTC)
 * ​—DoRD (talk)​ 23:03, 12 December 2013 (UTC)


 * All blocked indef and tagged. Closing for now.

22 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Check for sleepers, please. bobrayner (talk) 01:57, 22 December 2013 (UTC)
 * revert-stalking
 * Canvassing
 * Evlekis' usual POV - see also

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Account blocked as an obvious DUCK, but a CU would be appreciated given the history. Callanecc (talk • contribs • logs) 02:07, 22 December 2013 (UTC)
 * No sleepers found. NativeForeigner Talk 02:18, 22 December 2013 (UTC)

23 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

IP's sole purpose is revert-stalking. IP is in same range (and same ISP) as this and this &c. bobrayner (talk) 20:37, 23 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked one week for block evasion and page semi-protected for three months. Closing now. Mark Arsten (talk) 20:41, 23 December 2013 (UTC)

24 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Stormfool was in the habit of adding nonsense to articles, and then this was reverted by some of the other accounts (example), but because it looked like legit information the blanking was reverted until it was noticed to be false. User:Let me help you by blanking pages welcomed User:Budlight123 and although the three Bud accounts made no contributions, the logs show that User:Budlight123 created them. User:ΡΙΝΚ ΜΑΡ weighed in here (with their very first edit, seemingly knowledgeable about rollback) and here, and also removed an edit by Good thing of wp, in the same way the Stormfool edits were removed. All these accounts have been indef blocked but I've requested checkuser to check for sleepers. Thanks. – anemone projectors – 18:41, 24 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * User has provided disruptive ambiance via multiple accounts, and has reacted to blocks with personal attacks. My thanks to anemoneprojectors for filing this report. JNW (talk) 19:05, 24 December 2013 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
I played a small part in this by indeffing two of the accounts. Although the pattern is not subtle, I'd feel more comfortable checking for sleepers, so I'm endorsing the CU.--Bbb23 (talk) 19:01, 24 December 2013 (UTC)
 * Stormfool, Tik tok tik tok, Let me help you by blanking pages, ΡΙΝΚ ΜΑΡ and Good thing of wp are ✅ Evlekis socks.
 * Budlight123, 1982budlight123 and 1982patrick123budlight are the same, of course, but are ❌ to Evlekis.
 * Unknownuserxo is also probably ❌ to Evlekis. ​—DoRD (talk)​ 22:47, 24 December 2013 (UTC)
 * , I see you've tagged the Evlekis socks, thanks. Is Unknownuser related to the Bud accounts? If not, I'm going to tag the Bud accounts separately, with Budlight123 being the master (the oldest of the three) and not tag Unknown (remove the current tag) before closing.--Bbb23 (talk) 00:19, 25 December 2013 (UTC)
 * Just realized I'll also have to do something about this being filed in the wrong case.--Bbb23 (talk) 00:29, 25 December 2013 (UTC)
 * Oh...yeah, Unknown is unrelated to Bud. ​—DoRD (talk)​ 00:36, 25 December 2013 (UTC)
 * I had to change my Preferences to display seconds to determine that Budlight123 was the master. I've retagged that series of accounts but did not separate them out from the Evlekis SPI (the procedures don't address that kind of mix). I did use complex tags so that they pointed to this SPI. I will now close. The clerk who archives this can change the way I've done it if that's needed.--Bbb23 (talk) 01:49, 25 December 2013 (UTC)


 * Frankly, since none of the Bud accounts have even made any edits, they should be unblocked and untagged, and perhaps a note should be left for them inquiring about the multiple accounts. Unknown is also not guilty of sockpuppetry, so they should be untagged as well. SPI clerks and regulars should be aware of Evlekis's spoofing tendencies. ​—DoRD (talk)​ 04:48, 25 December 2013 (UTC)
 * I've removed the tag from Unknown. After all that trouble, I misread your note above. As for the Bud accounts, if no one does it before me, I'll take care of it tomorrow as I'm way too tired at the moment.--Bbb23 (talk) 05:26, 25 December 2013 (UTC)
 * Unfortunately, I couldn't sleep, so I untagged and unblocked the three Bud accounts. I left a message regarding the unblock only at the master account's talk page.--Bbb23 (talk) 08:43, 25 December 2013 (UTC)

25 December 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This user claims to be Evlekis. On the Mike Smith history you can see that Master of Spoof inserted false info and used a malicious sock to revert the addition, hoping someone would add it back. These new socks operate on the same MO.  Ish dar  ian  09:20, 25 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Can a CU take a look, and given the previous accounts (SPI up there) possibly a block of the underlying IP. Callanecc (talk • contribs • logs) 10:00, 25 December 2013 (UTC)
 * All ✅ and . Happy Christmas, Evlekis. ​—DoRD (talk)​ 14:55, 25 December 2013 (UTC)
 * Tagged and about to close.--Bbb23 (talk) 16:20, 25 December 2013 (UTC)

29 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Claimed to be Evlekis here ''' Flat Out   let's discuss it   09:35, 29 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Suspected sock blocked indef per impersonation, closing now. Mark Arsten (talk) 14:28, 29 December 2013 (UTC)
 * For what it's worth, ✅ and . ​—DoRD (talk)​ 14:31, 29 December 2013 (UTC)

29 December 2013

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Self-identifies as SP of Evlekis in taunting edit.  The original edit was by IP 188.31.3.73. and contains the harassing language toward another editor in the middle of the second graf.  Dwpaul  Talk   07:55, 29 December 2013 (UTC)

(I submitted this last night but it was reverted by, another Evlekis SP who engaged in a impersonation/harassment/reversion war with me in retaliation, and it seems to have gotten lost during the recovery. That SP was confirmed.)  Dwpaul  Talk    Dwpaul   Talk   16:13, 29 December 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Yes, that's him as well, plus several more accounts I'd rather not mention. ​—DoRD (talk)​ 16:19, 29 December 2013 (UTC)

26 July 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Seems to be attacking admins he's bothered before. diff1, diff2 Bagatelle 00:05, 26 July 2014 (UTC)
 * Additional diffs: ,

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
is ✅ to They are also same as

They all geolocate to Evlekis, but the computer data have changed from the last time I dealt with him. IP ranges are vast as usual, thus I can't look for sleepers without additional data. Materialscientist (talk) 02:47, 26 July 2014 (UTC)
 * All blocked. Tiptoety  talk 02:53, 26 July 2014 (UTC)

02 August 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This account has already been blocked as a duck, but I'd like a CU to look for any sleepers given the history. ♥ Solarra ♥ • T ♀ C 02:24, 2 August 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Immediate "sleepers" are already blocked. Remote sleepers are hard to trace because of the wide IP rang. Materialscientist (talk) 02:31, 2 August 2014 (UTC)
 * All done, thanks MS. Callanecc (talk • contribs • logs) 03:27, 2 August 2014 (UTC)

15 August 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Common vandalistic edits and editing behavior on Stevie May. Master was blocked on 8/12 for persistent vandalism and abuse of other editors, sock(s) evading block to repeat same vandalistic edits.  Dwpaul  Talk   05:25, 15 August 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I've added the remainder of the vandal accounts which were the original cause of the first of the recent protection periods. The master here is Puertomiller since his account was created before Bucksham Co-operative and it was Puertomiller who introduced the concept of pork scratchings and Azerbaijani currency on the article. If you look at his edits, and those of the others, you'll find a chain. I ca only guess this is (or these are) somebody with an axe to grind with Sheffield Wednesday (such as Sheffield Utd supporters). --The Old Boy In Town (talk) 13:35, 15 August 2014 (UTC)

Thanks for this. However, please note that was created on 2 August 2014 while  was created on 7 August 2014, so of these I would still propose that the former (the earliest of all of these accounts) is the master.  Dwpaul  Talk   17:41, 15 August 2014 (UTC)
 * Aha, well spotted. So Bucksham Co-operative was just "sleeping" in the meantime. I doubt it matters the ceremonial issue of naming a master, this is obviously one editor and half a dozen accounts. I suppose if any new vandals appear on Stevie May the best course of action (for admins) will be RBI. --The Old Boy In Town (talk) 18:41, 15 August 2014 (UTC)
 * Agreed, only significant since it would help determine whether this SPI should be renamed.  Dwpaul  Talk   19:03, 15 August 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
for two reasons. First because Yaknow86 and ToXiiC SH33P are not as obvious. Second for sleepers. I suspect there another earlier account than the master's, although a CU may not turn that up.--Bbb23 (talk) 23:11, 24 August 2014 (UTC)
 * I've hard blocked the IP for 48 hours, as it was making the exact same edits (1) as the master account (2) and the same edits (3) as the sock account (4). Given the vandalism on the same article, the continued use of insults towards editors (5), and using the exact phrase as the master account (6), I've blocked the Gumbor account as a sock. To prevent further disruption, I've protected the Stevie May article for a week.  Mike V  •  Talk  06:59, 15 August 2014 (UTC)

The following are ✅

The following are based on behaviour; technical information is

on the IP addresses, per usual practice; however, the IP block was appropriate. Risker (talk) 00:44, 25 August 2014 (UTC)
 * I blocked any account that wasn't already blocked. I tagged the confirmed accounts in that way. I tagged the three possible accounts as suspected because of inconclusive CU, but I'm comfortable blocking them on behavior.
 * The Old Boy In Town claims he first created before creating the account he edited with. I think he may be lying as Old Boy was created on August 3, not August 4, and Bastard Race was indeed created on August 4, which is, of course, later. You didn't mention that account in the CU, so I'm not doing anything until I hear from you. I'm also keeping this open. Thanks.--Bbb23 (talk) 01:26, 25 August 2014 (UTC)
 * ..Hmm. Bastard Race did not come up on my checks, and in fact there's something a bit weird about the way that particular CU result is rendering - but yes. Bastard Race is definitely a sock.  Risker (talk) 01:55, 25 August 2014 (UTC)
 * I've now consulted with another checkuser, and there is something a bit buggy about the results, although they don't alter the finding involved. The Old Boy In Town was originally named Bastard Race and was renamed.  Since Bastard Race was created on another project, we'll refer it for cross-wiki review.  Risker (talk) 02:45, 25 August 2014 (UTC)
 * For some reason I didn't see the rename, even though I was actually looking for it. In any event, DQ indeffed the account, so all I did was tag it. I confess I don't understand the cross-wiki part, but I can add that to my list.--Bbb23 (talk) 04:47, 25 August 2014 (UTC)


 * After reviewing the available CU and behavioral evidence, I found several connections to Evlekis, so I unarchived and renamed this case. ​—DoRD (talk)​ 14:29, 26 August 2014 (UTC)

23 September 2014

 * Suspected sockpuppets






 * User compare report Auto-generated every hour.
 * Editor interaction utility

Tagged their userpage with a sock tag indicating they're a sock of User:Evlekis:. INeverCry  02:16, 23 September 2014 (UTC)


 * Minutes after the indef block of Yoloswag420blazeitjoog (reported by me at WP:AIV), I noted an unblock request on his talk, looking like a trolling/joke. User "Unblocke" (blatant block evasion of Yoloswag) did the same kind of edit in the talk pages of ABC12340, Travelwello, BCwikiwikifresh and Poop on my nugget. All of them are indef banned for vandalism and, following the ban reason of Travelwello, I discovered this page. Well, the user reported by INeverCry (Travelwello) has been confirmed as sp of Evlekis, I added the other five per WP:DUCK. All of them have been blocked quite at the same time (today), style is the same. Sorry if my addition is a technical mistake, I didn't know where to add (date is the same). I've added "CUrequest" to case status. --Dэя-Бøяg 03:50, 23 September 2014 (UTC)
 * @Materialscientist: sorry for mistake, I was quite sure that they were the same vandal... I was surprised by the readiness of Unblocke. I've understood, he followed the block log. --Dэя-Бøяg 04:14, 23 September 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Travelwello is ✅, blocked, tagged, thanks. Materialscientist (talk) 03:08, 23 September 2014 (UTC)
 * Бøяg, you've posted a pretty much random list. None of those is related to Evlekis, and there is no obvious relation among any of those, except that Abc12340 = Hotshot950. All are blocked, and in absence of behavioral evidence I won't investigate further. Unblocke = Unblocke2 is simply a troll going after random admin's blocks. Materialscientist (talk) 04:05, 23 September 2014 (UTC)
 * Бøяg, thanks actually - you've urged me to look and find a hidden string of socks on one account (though again, unrelated to Evlekis :). Materialscientist (talk) 04:26, 23 September 2014 (UTC)
 * All accounts have been blocked one way or another and the related accounts have been tagged. Mike V  •  Talk  19:53, 24 September 2014 (UTC)

18 October 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

There was an ongoing content dispute: User_talk:Vjmlhds#"Vacationland"? <--- ***replaced previous talk page wikilink w/ direct URL link to old revision***, Template_talk:Sandusky_Radio, and Talk:Firelands. During this dispute, I was reverted three times in fourteen minutes at the Firelands article- first by User:Vjmlhds, then twice by User:Fruit is for life and for the articles also. All of "Fruit's" edits occur between two of Vjmlhds' edits:
 * 1) All of "Fruit's" edits, including at Firelands (21:25 to 21:45 utc)
 * 1) All of "Fruit's" edits, including at Firelands (21:25 to 21:45 utc)

That last edit from Vjmlhds (21:52 utc) -- his first after "Fruit" was indef blocked for a vandalism-only account (account creation at 21:40 utc & email/talk page access at 21:46 utc) -- was an assertion on my talk page that "Fruit" was not a sockpuppet (why would Vjmlhds defend himself when I hadn't accused him of anything?). This was followed by two more assertions. Two of Vjmlhds' next three edits were on the talk pages of User:Ponyo (the admin who blocked "Fruit") and the "Fruit" user himself.

Probably not enough for CheckUser, but enough to suspect there might be some WP:GHBH going on here. Vjmlhds may or may not have done this once before at Media in Cleveland, possibly using an anon IP alongside his actual account and then blaming it on a relative (see User talk:Levdr1lostpassword). This recent encounter at Firelands felt similar to that past episode. Levdr1 lp /  talk  14:39, 18 October 2014 (UTC)


 * Wikilink to Vjmlhds' talk page was replaced w/ direct link URL as that page has since been blanked.  Levdr1 lp  /  talk  02:41, 22 October 2014 (UTC)


 * Adding second suspected account. No apparent direct connection to Vjmlhds, but clearly very similar to User:Fruit is for life and for the articles also (in name and edit history).  This second "Fruit" account was created only weeks ago, and, like the first "Fruit", has been blocked indefinitely for being vandalism-only.   Levdr1 lp  /  talk  02:57, 22 October 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I can say with 100% clarity, sincerity, and honesty, that I am not the sock in question. I approached Levdr because I saw the comments made in Fruit's edit summary on the Firelands article, and (because Levdr and I have past history), I figured he'd assume it was me, so I wanted to try to reassure him before anything got out of hand. If you look at Fruit's edits, you'll see that he was just going to random pages, adding in nonsense.

I have only used 2 user names since joining Wikipedia in 2007 - Ohgltxg and Vjmlhds. Levdr and I had a dispute about the Firelands article over content, and you'll see all my edits were about adding information and trying to find sources to back up said information. What Fruit did was just go off the rails and add in nonsensical charts that had NOTHING to do with the article, and he made the same kind of edits on numerous other articles. I was trying to find sources to back up claims I had made about the Firleands region that in modern times, the area is called Vacationland. I had earlier come up with about 10 or 12 different references (all rejected by Levdr), and I was just trying to find more.

By all means use CheckUser, as that will verify that I am not Fruit. Ask yourself this...why would I spend all this time going through the effort to try to find sources and references to add legitimate information to an article, and then turn around and just add nonsense that had nothing to do with the article, and ON TOP OF THAT seemingly pick random articles out of a hat and do the same thing?

I knew Levdr would blame me for this, which is why I tried to head it off at the pass...obviously to no avail, as here we are. User:Vjmlhds (talk) 15:10, 18 October 2014 (UTC)


 * I would hope that this will put an end to these accusations. It's become apparent that "Fruit" has been at it for awhile now, and that his sole purpose was to add nonsense to articles for his own amusement.  As  knows, I periodically blank my talk page when it gets too big.  Nothing sinister afoot, and this isn't anything new...not trying to hide anything (all anyone has to do is go through the edit history if they want to find something).  Through sheer luck of the draw, "Fruit" happened to find his way onto an article that Levdr and I were having a dispute over.  So once again, there's no connection between me and "Fruit", and the sooner this gets put to bed, the better.  Vjmlhds (talk) 13:54, 22 October 2014 (UTC)


 * Can we PLEASE wrap this up already? I think it's obvious by now that I'm in no way "Fruit"...never have been, never will be.  Also, I'm becoming more convinced that  just did this out of personal spite, rather than actually thinking I was the vandal.  Wouldn't that be considered a personal attack?  I do believe that is frowned upon around here - just saying. Vjmlhds (talk) 01:30, 25 October 2014 (UTC)


 * I can end this right now...compare my edit history with Fruit's on Oct 3 (where he used the name "Fruit is good for life...") We made simultaneous edits on Oct 3 at 16:02 (UTC).  He was vandalizing other editor's user pages, I was working on the article for Cleveland radio station WTAM.  Oct 3 was Fruit's first go-around, he got blocked, came back under a new name, and raised hell again until he got blocked for a second time.  Just my rotten luck he stumbled across the Firelands article which Levdr and I were in dispute.  Fruit is clearly like the Joker from The Dark Knight - he just wanted to see the (Wiki) world burn. Vjmlhds (talk) 04:59, 25 October 2014 (UTC)


 * For Pete's sake...it doesn't take this long to diagnose Ebola. I gave you clear evidence that I'm not "Fruit", so let's wrap this thing up already.  All this was much ado about nothing (at least on my end) because some clown stuck his face in an article for the sole purpose of causing trouble, and I'm getting blamed for it, and having undo accusations cast my way.  C'mon...let's go. Vjmlhds (talk) 16:45, 27 October 2014 (UTC)


 * TIME TO JUST COME RIGHT OUT WITH IT - THIS ACCUSATION IS NOTHING BUT BS! LEVDR HAS LONG HAD PERSONAL ISSUES WITH ME, AND THIS IS TAKING IT OVER THE LINE.  HIS BULLYING HAS GOT TO STOP.  IF HE TAKES IT AS A PERSONAL ATTACK - TOO BAD, BECAUSE THIS IS JUST AS MUCH A PERSONAL ATTACK IF NOT MORE SO.  I'M THE ONE WHO NEEDS TO CALM DOWN?  WHY?  I'M THE ACCUSED FOR GOD'S SAKE!  WHY CAN'T THIS THING GET DONE ONCE AND FOR ALL TO SHOW THAT I'M INNOCENT AND THAT LEVDR MADE A BOGUS CLAIM? Vjmlhds (talk) 19:30, 29 October 2014 (UTC)

'''LET'S GO...WHILE WE'RE YOUNG! IS EVERYBODY OUT FOR A SMOKE, OR WHAT?!''' Vjmlhds (talk) 23:12, 29 October 2014 (UTC)
 * Woah, stay cool my friend. Calm down please. - Mailer Diablo 02:40, 30 October 2014 (UTC)
 * I told you I had nothing to so with the socks. I'm sorry I went overboard earlier on, but sometimes you just have to rattle some cages to get things done.  It was nearly 2 weeks, I just wanted this over and done with so my name would be cleared.  Vjmlhds (talk) 03:41, 30 October 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Ignoring all the ranting above, I noticed the interleaved edits. Looking at these two diffs  and  give us a strong indication that this is the same person, but a CU to link the accounts would be beneficial. Dennis - 2&cent; 02:08, 30 October 2014 (UTC)
 * I've been looking over the case the past few days and have been thinking things over. I think that a checkuser would be helpful in determining if we have a good hand/bad hand situation here. The Firelands article does not receive much editing traffic aside from Vjmlhds and Levdr1lostpassword, so it strikes me as very unlikely for a random vandal to stop by and vandalize the article. In addition, the timeline presented above makes the GH/BH scenario quite plausible. Finally, the recent comments made by Vjmlhds above seem to mirror the edit summary here. In both situations, the user seems to demonstrate an inability to keep cool when met with frustration. Mike V  •  Talk  02:38, 30 October 2014 (UTC)
 * Let's first get the easy part out of the way: is ❌ to any socks. - Mailer Diablo 02:50, 30 October 2014 (UTC)
 * The tougher part: The sock themselves have a lot more to uncover. Let me check. - Mailer Diablo 02:50, 30 October 2014 (UTC)
 * pending a second opinion. - Mailer Diablo 03:41, 30 October 2014 (UTC)
 * The case name will need to be renamed to reflect the correct sock master, as Vjmlhds is ❌ to any sock puppetry. - Mailer Diablo 01:49, 1 November 2014 (UTC)
 * Highly that the following users are linked to each other:
 * There may be possibly more but I will leave that to my colleagues to make a firm opinion.
 * - Mailer Diablo 01:49, 1 November 2014 (UTC)
 * - Mailer Diablo 01:49, 1 November 2014 (UTC)


 * marked some of the above accounts as being socks of about a week ago.  I've asked Materialscientist to come here and comment on this connection — which should presumably lead to this SPI being refiled under Evlekis.  —  Rich wales (no relation to Jimbo) 04:37, 15 November 2014 (UTC)
 * I also first thought that the master is Stars of 85 or even some other prolific socker (forgot the name, doesn't matter now), but Stars of 85 left unambiguous technical evidence of Evlekis in some edits. Combined with some behavioral hints, geolocation and hopping pattern, I'm certain the group above is Evlekis. Materialscientist (talk) 05:00, 15 November 2014 (UTC)

15 November 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

These accounts are all obviously the same person, but this needs to be documented somewhere because it took me a while to find the context from last month, so another admin would have no hope. I'd like a CU to flush out any sleepers (I'd be surprised if there weren't any, as they've been using autoconfirmed accounts to get round the semi-protection on the affected articles) and to assess whether there are any other rangeblocks that could be made. Note that I've hard-blocked 188.29.96.0/20, which I calculated based on a series of IP addresses this person used while logged out during their spree last month (I blocked it for a fortnight then and it seemed to have the desired effect, but I had to grant two IP block exemptions). 3АМ ХХХ is not the oldest, but I suspect the true master goes further back than these account; I'll leave it to the clerks to rename the case as appropriate. HJ Mitchell &#124;  Penny for your thoughts?  20:16, 15 November 2014 (UTC)
 * I've added one more sock, which looks like it's the same user as the sockmaster but isn't, because if you check their contributions you'll find that the sockmaster has made 30 edits while the sock I added has made 19. I haven't looked into why they seem to have the same name but don't, but it's probably a case of having two different Unicode codes for the blank space between "3AM" and "XXX", making the system treat them as different names. Thomas.W talk 20:40, 15 November 2014 (UTC) (Adding ping to ). Thomas.W talk 21:00, 15 November 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * can you add anything here? I see you blocked and tagged at least one of the accounts. I don't know if it was a drive-by block of obvious socks or you looked into it on more detail. Also, courtesy pings for User:Thomas.W and User:This is Paul, who dealt with today's spree before it came to my attention. HJ Mitchell  &#124;  Penny for your thoughts?  20:24, 15 November 2014 (UTC)
 * - I've taken a preliminary look and everything that needs to be blocked seems to be blocked. It appears at glance that they are operating from two different ranges. with the two ranges blocked (softly, but with account creation blocked) we can easily target the sock and nuke him with CU. I don't see him operating from any other ranges at this point. Therefore I reduced the hardblock to a soft one due to a fair amount of legitmate editors, and the fact that an account creation block should do the job for now. --  DQ   (ʞlɐʇ)  05:40, 16 November 2014 (UTC)
 * Thanks, DQ. Much obliged. Do I take it then that you didn't find any accounts older than the ones listed above? I went for a hard block despite the potential for collateral damage (I believe the range I blocked is used by 3 dongles in the UK) because of the use of sleepers; it seemed to have the desired effect last time and only two or three people had problems (at least one of whom was able to edit via other means to alert me to the problem), but if you think AO/ACB will do, we'll see how that goes. Btw, Template:Checkuserblock-wide was a brilliant idea and ideal for this sort of thing. HJ Mitchell  &#124;  Penny for your thoughts?  12:39, 16 November 2014 (UTC)


 * Closing as I don't think there's anything more which needs to be done here. Callanecc (talk • contribs • logs) 09:01, 20 November 2014 (UTC)


 * Just noting for record-keeping (and for the benefit of others cleaning up after this guy next time) that this sockfarm appears to belong to . This case should perhaps be archived to Sockpuppet investigations/Evlekis/Archive; if that's the case, it would be lovely if something could be left here to explain the context for the benefit of anyone who comes here looking for information, even if it's just an edit summary. Thanks, HJ Mitchell  &#124;  Penny for your thoughts?  01:17, 21 November 2014 (UTC)

18 January 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Just to clarify - when I say "the same ISP", I mean that both Evlekis and Rasztvan use the same obscure English ISP. bobrayner (talk) 16:52, 18 January 2015 (UTC)
 * If Rasztvan is now blocked, presumably I can stop collecting diffs? :-) bobrayner (talk) 17:03, 18 January 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Yep, that's him. There are other dead giveaways besides the edits (I'm more familiar with his vandalism sprees than his Balkan disruption), but WP:BEANS. Account indef'd, and I've made a rangeblock. Not that I expect that will keep him away for long. HJ Mitchell &#124;  Penny for your thoughts?  17:02, 18 January 2015 (UTC)

22 May 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

I'm not familiar with David Beals, but this seems to be a successor to the recently-blocked Hash Tag 444: Similar interest in "future memory" (check Hash Tag's deleted contribs). Also, repeating a Hash Tag 444 revert on a completely different article:. This new account was created shortly before Hash Tag got permablocked. bobrayner (talk) 22:24, 22 May 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * It is definitely Hash Tag 444, but I'd have to deny any relation to Beals if it wasn't the CU that got Hash Tag 444 blocked. Even now, I find it hard to believe.  Beals is just obsessed with anything with the initials D and B, ceiling fans, and imitating certain users -- he isn't high functioning enough to edit political articles.  Ian.thomson (talk) 22:36, 22 May 2015 (UTC)
 * Since Evlekis likes to revert-stalk my edits, Evlekis is a very good explanation for the behaviour of these two socks. I had only mentioned David Beals because that's how Hash Tag was written up... bobrayner (talk) 15:36, 23 May 2015 (UTC)
 * I saw. Not blaming you, just pointing out the... differences in capacity... between Evlekis and Beals. Ian.thomson (talk) 16:45, 23 May 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * inprogress - Mister Wikkipedia 2015 and Hash Tag 444 aren't Beals. Tiptoety and I have already discussed this, and there are a number of other misidentified socks that I'm adding to a list, but I have some real life things that need doing before completing this case. ​—DoRD (talk)​ 23:27, 22 May 2015 (UTC)
 * Okay, that took less time than expected. These are ✅ to each other and to several accounts tagged as Evlekis:
 * Evlekis is my best guess at this point, but there are a few other possibilities as well. At any rate, they are on the wrong continent, and using the wrong device, to be Beals, and I don't see anything here about his favorite subject. ​—DoRD (talk)​ 23:54, 22 May 2015 (UTC)
 * Evlekis is my best guess at this point, but there are a few other possibilities as well. At any rate, they are on the wrong continent, and using the wrong device, to be Beals, and I don't see anything here about his favorite subject. ​—DoRD (talk)​ 23:54, 22 May 2015 (UTC)
 * Evlekis is my best guess at this point, but there are a few other possibilities as well. At any rate, they are on the wrong continent, and using the wrong device, to be Beals, and I don't see anything here about his favorite subject. ​—DoRD (talk)​ 23:54, 22 May 2015 (UTC)
 * Evlekis is my best guess at this point, but there are a few other possibilities as well. At any rate, they are on the wrong continent, and using the wrong device, to be Beals, and I don't see anything here about his favorite subject. ​—DoRD (talk)​ 23:54, 22 May 2015 (UTC)
 * Evlekis is my best guess at this point, but there are a few other possibilities as well. At any rate, they are on the wrong continent, and using the wrong device, to be Beals, and I don't see anything here about his favorite subject. ​—DoRD (talk)​ 23:54, 22 May 2015 (UTC)


 * As the CheckUser who miss-tagged a number of Evlekis accounts as Beals', I can say that Evlekis is making a significant effort to impersonate Beals. Specifically, by making statements like this. Tiptoety  talk 02:28, 23 May 2015 (UTC)
 * I've re-tagged them as Evlekis socks. We need an admin to do a history split and move this to WP:Sockpuppet_investigations/Evlekis.  Vanjagenije  (talk)  12:01, 23 May 2015 (UTC)
 * ✅. Closing. Callanecc (talk • contribs • logs) 14:39, 28 May 2015 (UTC)

05 June 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Behavioural evidence in account name chosen straight onto mass reverting my contributions once he was aware i'd clocked him. [] Amortias (T)(C) 17:36, 5 June 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The technical evidence matches socks from the archive and the account has already been blocked by . I've also blocked the ✅ sleeper.-- Jezebel's Ponyo bons mots  17:52, 5 June 2015 (UTC)

27 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Multiple new nonsense articles and large pastes from single purpose accounts, attempting to disguise disruption. Such as
 * Cognitive memory concept
 * Steven Robello
 * Morphological structure (linguistics)
 * diff Hroðulf (or Hrothulf) (Talk) 20:51, 27 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I haven't looked at the others but, who has just been indeffed by , is an obvious sock, not Evlekis. Thomas.W talk 21:42, 29 July 2015 (UTC)
 * He even said so in his now deleted article Memory for a future: "this represents one more victory for the Bucksham Co-operative and its CEO Max Pumpkin over the administators and donkeys such as Thomas W". Getting attention and bragging about what he's done is what he lives for, so to deny him attention no SPI has been filed. Thomas.W talk 21:48, 29 July 2015 (UTC)
 * According to this redirect, (linked at Sockpuppet investigations/Bucksham Co-operative), Max Pumpkin and Elvekis have the same puppet master. --Hroðulf (or Hrothulf) (Talk) 09:13, 30 July 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Indeed, articles created by those accounts are similar to those created by Evlekis. Cognitive memory concept and Morphological structure (linguistics) similar to Future Memory Structure created by an Evlekis sock. I'm not sure about the other two, so I'm just endorsing the CU to compare RRdworth and Blowragga with previous socks.  Vanjagenije  (talk)  11:05, 29 July 2015 (UTC)
 * . This is going to take some time as the number of "sleepers" is significant and it takes a lot of checking and cross-checking before I can post the complete results.--Bbb23 (talk) 04:53, 31 July 2015 (UTC)
 * is ✅ to Evlekis. That means that (1) Sockpuppet investigations/Max Pumpkin needs to be merged into this one (I will take care of that when it’s the best procedural point to do so); (2) Max Pumpkin and all of his socks need to be retagged with the correct master. The tag itself should remain the same, just a change to the master, unless I've now confirmed an account below that was not confirmed before, in which case it should be retagged as CU-confirmed.
 * The accounts below were mostly already blocked and need only to be tagged. I blocked the unblocked accounts myself but not always tagging them, so they need to be tagged.
 * The following accounts are ✅:
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)
 * --Bbb23 (talk) 22:06, 31 July 2015 (UTC)


 * Following up on the tagging above., could you check the accounts below - seems there's another run.  Kuru   (talk)  14:13, 1 August 2015 (UTC)


 * This is endless. The above three accounts plus the ones below are ✅:
 * Blocked and tagged.--Bbb23 (talk) 15:02, 1 August 2015 (UTC)
 * We're done, at least for a few minutes. Closing. Bbb23 (talk) 15:02, 1 August 2015 (UTC)
 * Blocked and tagged.--Bbb23 (talk) 15:02, 1 August 2015 (UTC)
 * We're done, at least for a few minutes. Closing. Bbb23 (talk) 15:02, 1 August 2015 (UTC)
 * We're done, at least for a few minutes. Closing. Bbb23 (talk) 15:02, 1 August 2015 (UTC)

29 July 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

All added volumes iof text around the same time as well as copy and paste whole articles all including references to a non-existent Bucksham Cooperative together with nonsense text. Created articles are mostly re-named existing articles with junk text inserted. Several articles have already been deleted but other similar socks may exist  Velella  Velella Talk 22:48, 29 July 2015 (UTC) Diffes demonstrating this include this for Humble the Bumble], this page creation by Chad the Monkey, this talk page addition by .winterbritting. Apologies for delay in posting, The SPI was virtually the last edit yesterday - it was after midnight and today has been busy.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I am unaffiliated to the above, but I welcome the prospect of a checkuser to clear my good name. Decent Dan Moore (talk) 23:27, 29 July 2015 (UTC)


 * is the CU to ping when it comes to Max Pumpkin since he's done a number of checks on them and blocked a considerable number of socks. is per WP:DUCK a definite sock of Max Pumpkin, adding Pumpkin's signature nonsense, as is . I'll check the others too later today, and will post some diffs then. Thomas.W talk 07:02, 30 July 2015 (UTC)
 * I've asked to take a look at this SPI, and check for sleepers, because all three of them are obvious socks of, not only per WP:DUCK but also because all three of them even admit being Pumpkin socks in their edits. Since Decent Dan seems to believe that a CU won't be able to connect that account to previous socks they might have used a proxy for that one, but the behavioural evidence and what they say in their edits is more than enough to block them as Pumpkin-socks anyway... Thomas.W talk 10:18, 30 July 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
 * 1) At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
 * 2) At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
 * 3) In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this.  Vanjagenije   (talk)  00:18, 30 July 2015 (UTC)
 * According to (here), the real master is ., do you agree?  Vanjagenije   (talk)  00:23, 30 July 2015 (UTC)
 * All listed socks have been blocked. --Neil N  talk to me 14:30, 30 July 2015 (UTC)
 * I moved the case to Max Pumpkin, as suggested. Closing.  Vanjagenije  (talk)  15:28, 30 July 2015 (UTC)


 * Merged and done. Closing. Bbb23 (talk) 15:06, 1 August 2015 (UTC)

30 August 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

adding hoax article which reference the bucksham cooperative, etc. Diffs include  Velella  Velella Talk  13:20, 30 August 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Blocked, tagged, closing.--Bbb23 (talk) 14:59, 30 August 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:59, 30 August 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:59, 30 August 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:59, 30 August 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:59, 30 August 2015 (UTC)

30 August 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Typical nonsense additions and refs to Bucksham etc. See  Velella  Velella Talk  13:24, 30 August 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked 72 hours, closing.--Bbb23 (talk) 15:01, 30 August 2015 (UTC)

01 September 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Brand new user whose first ever edit to Wikipedia was to jump directly into Categories for discussion/Log/2015 August 29 to continue propagating a tendentiously POV keep argument first advanced by User:10-9-8 Up-we-go! (a confirmed and blocked sockpuppet named in an earlier subsection of this same investigation.) I'm definitely hearing something that sounds like the quack of a WP:DUCK. Bearcat (talk) 17:29, 1 September 2015 (UTC) Bearcat (talk) 17:29, 1 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  17:47, 1 September 2015 (UTC)
 * ✅. Courcelles (talk) 17:34, 1 September 2015 (UTC)
 * Tagging and closing.

06 September 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Standard evidence here - as loud as a duck can quack  Velella  Velella Talk 12:50, 6 September 2015 (UTC)

Another from the end of August quacking loudly here  Velella  Velella Talk 12:53, 6 September 2015 (UTC)

And another here  Velella  Velella Talk 21:44, 6 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Those IPs have been inactive for the last 4 days, so I'm closing the investigation.  Vanjagenije  (talk)  14:16, 11 September 2015 (UTC)

11 September 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

A "new" editor that immediately started reverting me on articles that I had edited a few hours earlier, as several other "new" users that have been blocked as Evlekis socks have done lately. Their very first edit replaced the official 2011 Indian census data I had added, the most official data there is for demographics in India (as every Indian well knows), on Uttar Pradesh with older data, with the bogus reason "unsourced, unfounded", and after doing that and some gnoming on the same article they then continued to Demographics of Uttar Pradesh to do the same thing there. Continuing to revert me with similar bogus reasons even after I told them not to replace newer data with older data. The comments on their own talk page and on my talk page are also in typical Evlekis style. As for possibly being good faith edits, or at least edits by someone other than Evlekis, the two articles I was reverted on, like all other articles about Indian states, districts and cities, often see Indian editors trying to add fake data for religions, with Muslims inflating the number of Muslims at the expense of Hindus, and Hindus inflating the number of Hindus at the expense of everyone else, but since all Indians know that the official census data trump every other source they only change the numbers, leaving the reference alone, unlike this "new editor" who has repeatedly replaced the census reference with older and/or less reliable sources. In addition to that the only ones who would object to the new census data are Hindu activists, since the new data show that the number of Muslims in Uttar Pradesh increase faster than the number of Hindus, resulting in a higher percentage of Muslims and lower prcentage of Hindus in the 2011 data compared to the 2001 data. But a devout Hindu would never choose a user name like Chewers Meat, since devout Hindus are vegetarians for religious reasons, just like a devout Muslim never would choose a user name that includes the word "pork". And when you combine all of that the chance/risk of this being a new Evlekis sock is, IMHO, well over 50%. Thomas.W talk 10:21, 11 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Please go ahead with the SPI, I am having nothing to hide from this false accusation. Furthermore I am not a Hindi or a follower of Hinduism, we are Christians, and no I am not vegetarian. Chewers Meat (talk) 10:25, 11 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 13:08, 11 September 2015 (UTC)

14 September 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same old same old as at here  Velella  Velella Talk 03:21, 14 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Blocks and tags where needed. Closing.--Bbb23 (talk) 04:27, 14 September 2015 (UTC)
 * Blocks and tags where needed. Closing.--Bbb23 (talk) 04:27, 14 September 2015 (UTC)
 * Blocks and tags where needed. Closing.--Bbb23 (talk) 04:27, 14 September 2015 (UTC)
 * Blocks and tags where needed. Closing.--Bbb23 (talk) 04:27, 14 September 2015 (UTC)
 * Blocks and tags where needed. Closing.--Bbb23 (talk) 04:27, 14 September 2015 (UTC)

18 September 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

See edit history, name Stephenb (Talk) 18:09, 18 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked a handful of accounts and took care of the underlying IP. No need to give recognition of the accounts with this user. Mike V • Talk</b> 18:25, 18 September 2015 (UTC)

21 September 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Obvious sock, see this and this edit. A CU-check for sleepers is needed, as usual. Thomas.W talk 10:28, 21 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Blocks, tags, closing.--Bbb23 (talk) 12:52, 21 September 2015 (UTC)
 * Blocks, tags, closing.--Bbb23 (talk) 12:52, 21 September 2015 (UTC)
 * Blocks, tags, closing.--Bbb23 (talk) 12:52, 21 September 2015 (UTC)
 * Blocks, tags, closing.--Bbb23 (talk) 12:52, 21 September 2015 (UTC)
 * Blocks, tags, closing.--Bbb23 (talk) 12:52, 21 September 2015 (UTC)
 * Blocks, tags, closing.--Bbb23 (talk) 12:52, 21 September 2015 (UTC)
 * Blocks, tags, closing.--Bbb23 (talk) 12:52, 21 September 2015 (UTC)

24 September 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This looks a lot like Evlekis, especially the bragging about how he "whips you all again" hidden down in the text of the articles that the sockpuppets reposted. This was originally listed under sockmaster Mendezes Cousins without CU, but I think a CU is in order. Thanks! NawlinWiki (talk) 21:55, 24 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The four listed accounts are ✅, as well as . I've adjusted the tags on all accounts. I've also deleted Sockpuppet investigations/Mendezes Cousins and its archives, both of which were created today and have no value as everything has been covered here. Closing.--Bbb23 (talk) 00:27, 25 September 2015 (UTC)

28 December 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Please, compare User:Wellcome R5 with this sock (see, very suspicious).  Vanjagenije  (talk)  02:03, 28 December 2015 (UTC)


 * The following accounts are ✅ to :
 * I blocked and tagged the Evlekis socks, although a clerk might want to copy them over to the Evlekis SPI for the record.--Bbb23 (talk) 14:56, 28 December 2015 (UTC)
 * Copied from Sockpuppet investigations/Starship9000. Closing.  Vanjagenije  (talk)  19:41, 28 December 2015 (UTC)
 * I blocked and tagged the Evlekis socks, although a clerk might want to copy them over to the Evlekis SPI for the record.--Bbb23 (talk) 14:56, 28 December 2015 (UTC)
 * Copied from Sockpuppet investigations/Starship9000. Closing.  Vanjagenije  (talk)  19:41, 28 December 2015 (UTC)
 * I blocked and tagged the Evlekis socks, although a clerk might want to copy them over to the Evlekis SPI for the record.--Bbb23 (talk) 14:56, 28 December 2015 (UTC)
 * Copied from Sockpuppet investigations/Starship9000. Closing.  Vanjagenije  (talk)  19:41, 28 December 2015 (UTC)
 * I blocked and tagged the Evlekis socks, although a clerk might want to copy them over to the Evlekis SPI for the record.--Bbb23 (talk) 14:56, 28 December 2015 (UTC)
 * Copied from Sockpuppet investigations/Starship9000. Closing.  Vanjagenije  (talk)  19:41, 28 December 2015 (UTC)
 * I blocked and tagged the Evlekis socks, although a clerk might want to copy them over to the Evlekis SPI for the record.--Bbb23 (talk) 14:56, 28 December 2015 (UTC)
 * Copied from Sockpuppet investigations/Starship9000. Closing.  Vanjagenije  (talk)  19:41, 28 December 2015 (UTC)

18 April 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Three accounts which were created at roughly the same time (3rd, 7th, and 8th of this month). All have participated in a discussion about changing the spelling of "email" to "e-mail".

The behavioral evidence seems fairly clear to me. The writing style is mostly the same, with changes needed as a thesaurus allows; the easiest way to ascertain that is perusing the move discussion where all three appear. Each account serves an almost cliche role in the discussion. one to propose (Henry Mazzer); one to support (The 321 kiddo) with a sufficiently distinct argument to avoid immediate suspicion, though I begin to feel The 321 kiddo shares Mazzers's unique (in that discussion) opinion that email is a linguistic abomination; one (Reggie Wisecrack) to make the opposition look silly.

It's possible that the above could happen randomly, but I find it hard to believe that the activity/inactivty of these accounts lines up as it does unless there is one person operating them.


 * Timing
 * Henry Mazzer moves the page on the 16th, is reverted a few times and proposes the move on the talk page at 18:02. They make a few changes to their user page and stop editing at 18:10. They won't edit again until 19:24.
 * At 18:16, Reggie Wisecrack starts editing the Hillary Clinton email controversy article. It's their first edit of the day and their first on that article ever. At 18:25 RW posts a comment to the talk page supporting the current title, adding "down with the hyphen (everywhere I mean)". They won't edit again until 19:11.
 * Starting at 18:33 by supporting the move, The 321 kiddo edits six times on the subject (last before RW's post at 19:11 is 18:59, stopping at 19:14. That account won't edit for another hour.
 * At 19:24 starts Henry Mazzer editing again, leaving talk page messages, moving the page, etc., last editing at 19:49.

Also worth noting. 3 minutes after Henry Mazzer edited the article for the first/last time on the 10th, The 321 kiddo makes a minor edit. This is their first edit of the day and their first edit to that article ever. Protonk (talk) 00:40, 18 April 2016 (UTC)

Adding a request for a CU to look for other potential socks, now that they've been blocked independently. Protonk (talk) 18:51, 18 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Investigators may wish to review this discussion on my user talk page with "The 321 kiddo" concerning this matter, and note the similar combative manner of "Henry Mazzer" in this discussion at WP:ANI that followed. -- Scjessey (talk) 15:49, 18 April 2016 (UTC)
 * They may also want to review this discussion on my talkpage, and at this overlap matrix. &#8209; Iridescent 15:56, 18 April 2016 (UTC)
 * Ooh! Thank you for drawing my attention to this cool widget. Bookmarked. -- Scjessey (talk) 18:10, 18 April 2016 (UTC)
 * I have long had my suspicions on all three of them, but are you sure it isn't Reggie Wisecrack who is the "master" and the other two making ridiculous arguments to push Wisecrack's point? After all, the email argument for hyphen was a bit pathetic to say the least, although I remained neutral (the best way I find). Anyhow, User:Lugnuts knows User:The 321 kiddo rather well and will be over soon to shed more light. I alerted him and he has notified me of his acknowledgement. Roy Howard Mills (talk) 18:01, 18 April 2016 (UTC)
 * I've had my suspicions about 321 for a while. First edits date from 7th April. Within a few minutes of registering, there was this odd revert. Odd because it's a fairly obscure article, with no real rationale to revert that edit. Within a few days of editing, their edit summary states that I should start an SPI. I'd like to assume good faith on all new editors (really, I do mean that), but someone who's been here 5 minutes and knows about the SPI process doesn't feel right to me. Apologise if that's too vague, but sometimes a gut feeling is so often right.  Lugnuts  Dick Laurent is dead 18:06, 18 April 2016 (UTC)
 * I recommend you all WP:DROP the stick. This is absurd. I have NEVER operated another account. Henry Mazzer (talk) 18:09, 18 April 2016 (UTC)
 * Note that Henry Mazzer has just been blocked. Ouch.  Lugnuts  Dick Laurent is dead 18:17, 18 April 2016 (UTC)
 * No need to do a check user on "The 321 kiddo". Some serious duck quackage right here, mimicking the actions for which "Henry Mazzer" was just blocked. -- Scjessey (talk) 18:21, 18 April 2016 (UTC)


 * Reggie Wisecrack is obviously not a new user - see their comment at my talk page - but it hadn't occurred to me that they might be Henry Mazzer in disguise, because Reggie keeps urging that HM be blocked. --MelanieN (talk) 18:26, 18 April 2016 (UTC)
 * This is it Melanie, one reason I still think Reggie had the true intention and the other two were plain morons. But either way, I think someone "intended" to deceive you. This is one major scam artist which we now know by the "quacking". Roy Howard Mills (talk) 18:33, 18 April 2016 (UTC)


 * Question. How did we know about User:Goldfish 4 finger? I mean from what I can see this editor came and never made a single edit. Roy Howard Mills (talk) 18:34, 18 April 2016 (UTC)
 * Uploaded the same graphic Mazzer and Kiddo used to deface user pages. -- Scjessey (talk) 18:36, 18 April 2016 (UTC)
 * Oh is that what the empty box is all over the place? Got it now. Curiously what was the image and why was it deleted? Roy Howard Mills (talk) 18:38, 18 April 2016 (UTC)
 * And also edited the same now-deleted page as Mazzer, along with some other accounts I'll keep an eye on in case they're part of the same tag-team. &#8209; Iridescent 18:40, 18 April 2016 (UTC)
 * I can't remember exactly. It looked like a ransom note with some juvenile bullshit saying "You have been owned by the blah blah blah whatever collective." -- Scjessey (talk) 18:41, 18 April 2016 (UTC)


 * User:Bemorang., coincidence? Roy Howard Mills (talk) 18:42, 18 April 2016 (UTC)
 * I'd need considerably better evidence than that. Roy Howard Mills, I'm about to leave you a note at your talkpage; please read it before you make any more comments at SPI. &#8209; Iridescent 18:46, 18 April 2016 (UTC)
 * Absolutely. Other edits too, such as this matching this. -- Scjessey (talk) 18:47, 18 April 2016 (UTC)
 * No? How about this then? Roy Howard Mills (talk) 18:49, 18 April 2016 (UTC)
 * Those are all Mazzer reverting to Bemorang as far as I can see. By all means keep an eye on him, but if I blocked someone on the basis of evidence that shaky in the absence of CU data or a behavioural link, I'd quite rightly be desysopped. &#8209; Iridescent 18:54, 18 April 2016 (UTC)


 * @Iridescent. Sorry to ask (I am still new to it). What exactly are we waiting for? As a sysop, do you not have access to IP address and all that this brings up such as geolocation? Roy Howard Mills (talk) 18:57, 18 April 2016 (UTC)
 * It's still an extraordinary coincidence that Henry Mazzer and Reggie Wisecrack are following Bemorang around, especially when Bomorang's account was also created within a week of the others discussed here. Certainly warrants a CU. -- Scjessey (talk) 19:02, 18 April 2016 (UTC)

See. Evlekis? —S MALL JIM   19:26, 18 April 2016 (UTC)
 * Ladies and gentlement I think we have a self-confession here, looks like User:David Beals. Can't see any other master now. Roy Howard Mills (talk) 19:35, 18 April 2016 (UTC)
 * That would suggest that Reggie is part of an entirely different sockfarm, unrelated to Henry Mazzer. At least that's my bet. --MelanieN (talk) 20:37, 18 April 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've just blocked Henry Mazzer on an unrelated matter. Leaving this open, as this probably needs a CU to confirm the other accounts are related and to clear up any other socks. &#8209; Iridescent 18:19, 18 April 2016 (UTC)
 * User:Goldfish 4 finger and User:The 321 kiddo also sent on their way—I assume some more will come out of the woodwork shortly. &#8209; Iridescent 18:25, 18 April 2016 (UTC)
 * And User:Reggie Wisecrack now as well—pending a CU run to flush out any further socks, I think we're done here. &#8209; Iridescent 18:28, 18 April 2016 (UTC)


 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)
 * For some reason, it's always a little amusing when a sockpuppet participates in his or her own SPI. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 19:16, 21 April 2016 (UTC)

21 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Based on the edit on MelanieN's talk page, this is an obvious sock. Creating a new SPI event as the previous was closed. RickinBaltimore (talk) 20:10, 21 April 2016 (UTC)
 * The user is now blocked. Interesting edit summary though: this is not the first time that a Henry Mazzer sock has made reference to David Beals.  David Beals has been banned since 2014 but was still socking as recently as last month. Could all these Henry Mazzer accounts be part of the David Beals sockfarm? --MelanieN (talk) 20:17, 21 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ and blocked:
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)
 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 20:20, 21 April 2016 (UTC)

28 April 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This account was banned 3 weeks ago - not by me. Crops up tonight to attack me on talk page, I had removed TPA from a couple of Evlekis socks just previously. Nthep (talk) 21:35, 28 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
When you request a CU, please explain why. I assumed you wanted a sleeper check. I found no unblocked accounts. Closing.--Bbb23 (talk) 22:05, 28 April 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Re creation of SENSEI MARIOS CONSTANTINOU very rapidly after deleted User:SENSEI MARIOS CONSTANTINOU and blocked the master. for (talk)  05:46, 15 August 2016 (UTC)


 * Knilpertron, new user, first 2 contributions are playing with the csd on SENSEI MARIOS CONSTANTINOU. for (talk)  05:49, 15 August 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * Blocked the unblocked accounts and tagged all.
 * SENSEI MARIOS CONSTANTINOU is ❌. Closing.--Bbb23 (talk) 14:17, 15 August 2016 (UTC)
 * Blocked the unblocked accounts and tagged all.
 * SENSEI MARIOS CONSTANTINOU is ❌. Closing.--Bbb23 (talk) 14:17, 15 August 2016 (UTC)
 * SENSEI MARIOS CONSTANTINOU is ❌. Closing.--Bbb23 (talk) 14:17, 15 August 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Very similar usernames. Only contributions are creation of promotional pages and vandalism. Passengerpigeon (talk) 20:32, 7 October 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Please merge this case with Sockpuppet investigations/David Beals as he has admitted to being a sock of David Beals in a previous edit. Passengerpigeon (talk) 20:36, 7 October 2016 (UTC)


 * Actually, I'm pretty sure this is User:Evlekis. I've been seeing a lot of these socks lately, just yesterday there was User:Quack Jerk and User:87543blablabla. Sro23 (talk) 23:10, 7 October 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
✅, closing.--Bbb23 (talk) 19:36, 8 October 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Created Andrea Lambert, which randomly gives mention to recent sock Thomas Brownfingers W. Sro23 (talk) 20:12, 6 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I am not a sockpuppet of any editor, the person you want to question is User:Thomas.W since he is the subject who commonly known as Brownfingers. I can imagine it is one of his alternative accounts. I am a legit editor. Man Wednesday (talk) 20:55, 6 November 2016 (UTC)
 * Obvious sock is obvious. And a CU-check would be nice since E has a habit of having a whole drawer full of socks (he lost a few yesterday, though). - Tom &#124; Thomas.W talk 21:11, 6 November 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * per provided evidence.  Vanjagenije  (talk)  20:26, 6 November 2016 (UTC)
 * ✅ + . Blocked, tagged, closing.--Bbb23 (talk) 21:23, 6 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Re-created Charlotte Nast, which was first created by past sock User:Man Wednesday. this sentence, also "Maxwell Pumpkin" is mentioned on Maria Arpa, which they also created. Sro23 (talk) 00:17, 14 November 2016 (UTC)
 * What is the relevance of Maxwell Pumpkin? Doesn't it say this in the source? McFaddon (talk) 00:19, 14 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 00:32, 14 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Behavior very similar to other Evlekis socks, talk page likely to be abused after block (which just occured) WNYY98 (talk) 21:33, 31 December 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I'd suggest that all future Evlekis socks are not only blocked but instantly have TPA revoked as the inevitable behaviour, as demonstrated by this one, is to abuse various people on the sock talk page. Nthep (talk) 21:56, 31 December 2016 (UTC)
 * Wash_Bosch just got blocked for writing User X and User Y "Blank" each others "Blank" (I'm not going to repeat the text verbatim, as the text constitutes an attach on two editors, actually 3, one's an admin ). Wash Bosch just lost editing privelleges on his page, and now Bazsorc's page is showing up with exactly the same text, 1 minute later, same users.  Obvious sock is obvious  Kosh  Vorlon '''  21:48, 31 December 2016 (UTC) Moved from Sockpuppet investigations/Bazsorc. GABgab 23:18, 31 December 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * What are you looking to have happen here? The account is already blocked with TPA revoked. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 22:01, 31 December 2016 (UTC)
 * - For a sleeper check - also, please refrain from tagging these socks. Thanks, GABgab 23:20, 31 December 2016 (UTC)
 * Also, I fully agree with that TPA must go immediately, before the vile comments start. GABgab 23:24, 31 December 2016 (UTC)
 * . I'll check but it gets a bit tedious doing so many checks on this master. I came close to declining.--Bbb23 (talk) 01:28, 1 January 2017 (UTC)
 * No other accounts seen. Closing.--Bbb23 (talk) 01:43, 1 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The contributions for each of these accounts matches the history of Evlekis' prior actions using socks (mainly, calling out specific users in harassment on their user talk page while block). --  Dane talk  06:56, 6 January 2017 (UTC)
 * Adding CU Request to scan for sleepers. --  Dane talk  07:15, 6 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Accounts' diffs have been supposedly revdel'ed. However, diffs did seem similar across those accounts. --JustBerry (talk) 07:30, 6 January 2017 (UTC)
 * Accounts' diffs contain content associated with WP:NSFW. --JustBerry (talk) 07:36, 6 January 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * All ✅, no unblocked accounts found. ​—DoRD (talk)​ 13:15, 6 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Claimed "Bucksham Operative" calling out various Wikipedia Admins and Vandal Fighters similarly to previous accounts as reported above. --  Dane talk  20:30, 6 January 2017 (UTC)
 * May need another check for sleepers as these become active again. --  Dane talk  20:32, 6 January 2017 (UTC)
 * Thank you, I will not request CU on the future ones. I wasn't sure on the helpfulness of CU in these cases for that reason of him using older already blocked accounts. --  Dane  talk  21:20, 6 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've checked a couple of those, and yes, they're Evlekis, but CU isn't going to be helpful in finding others because he's taken to reactivating old, already blocked socks, and CU can't see them until after they edit. ​—DoRD (talk)​ 21:15, 6 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Its edit summary on this edit claims that "nobody stops Max Pumpkin from editing" and suggests that it's connected to the "Bucksham Co-operative". The account is blocked and talk page access was revoked. Stylez995 (talk) 21:49, 19 February 2017 (UTC)
 * Added two more, from Jan. Please check for sleepers? Sro23 (talk) 21:52, 19 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Checks have been ran. -- Amanda  (aka DQ) 00:07, 20 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Concerns were mentioned to regarding similar edits, who determined they were indeed related. Primefac (talk) 00:04, 20 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Blocked. Primefac (talk) 00:04, 20 February 2017 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Their edits on User talk:Thomas.W and the user name (compare User:Max Pumpkin) makes them an obvious sock. CU requested to check for sleepers (and a renewed range block, since the previous one seems to have expired...). - Tom &#124; Thomas.W talk 11:52, 16 April 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
No other accounts seen.--Bbb23 (talk) 19:39, 16 April 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Yet another obvious Evlekis sock (see contributions). There might be sleepers, even though I don't think there are, but the IP-range might be a candidate for a range block, or, more probably, be an open proxy... - Tom &#124; Thomas.W talk 11:58, 18 April 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No further action is needed. Closing. Bbb23 (talk) 12:33, 18 April 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Obvious sock is obvious. Referring to me as "Brownfingers", as many previous socks have done, here, referring to User:Max Pumpkin, a previous Evlekis sock, in the edit summary here, and referring to "Bucksham Cooperative" (see archived reports) here. Plus the usual trolling, personal attacks etc. - Tom &#124; Thomas.W talk 15:16, 16 November 2018 (UTC)
 * A sweep for sleepers would be good, too, since it's quite probable that he spent the first hour after getting unblocked creating spare accounts... - Tom &#124; Thomas.W talk 15:20, 16 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * In terms of "A sweep for sleepers would be good, too, since it's quite probable that he spent the first hour after getting unblocked creating spare accounts": He's already admitted he has (hundreds of) spare accounts on the ready: "Very soon this account will be closed but fear not, there are literally hundreds of other untouchables created yonks back never to have hit the edit button!". -- Softlavender (talk) 15:25, 16 November 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Technically . . I found no other unblocked accounts. For the record, the following blocked accounts are technical matches and behaviorally between possible and obvious:
 * Closing.--Bbb23 (talk) 16:03, 16 November 2018 (UTC)
 * Closing.--Bbb23 (talk) 16:03, 16 November 2018 (UTC)
 * Closing.--Bbb23 (talk) 16:03, 16 November 2018 (UTC)
 * Closing.--Bbb23 (talk) 16:03, 16 November 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

. —— SerialNumber  54129  11:06, 30 November 2018 (UTC)  ——  SerialNumber  54129  11:06, 30 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''