Wikipedia:Sockpuppet investigations/FredrickHarrison33/Archive

08 October 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

If you look at the log for edit filter 527, you will see that somebody (or more likely, some bot) has been pumping out sockpuppet accounts all day today. It gets in 6 at a time and then keeps trying unsuccessfully until someone (presumably) resets its IP and it does 6 more. I've blocked over 50 today - not listing them all here, but see my block log. The naming pattern is obvious. Please see if there's a possible range block that would stop this. Thanks! NawlinWiki (talk) 02:24, 8 October 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  14:14, 8 October 2015 (UTC)
 * - to assist in making sure that all accounts are found and presumably blocked. Is this a test gone wrong somewhere?
 * There are scores of accounts as can be seen here. A range block should be considered to stop it., it may be easier to list the accounts here as we can use a script to block en masse rather than doing them discretely.

(List crushed, accounts not created) ...for starters. Feel free anyone to add to the list. I'll be back shortly. — Berean Hunter   (talk)  14:39, 8 October 2015 (UTC)

— Berean Hunter   (talk)  14:52, 8 October 2015 (UTC)
 * Well, there are probably several hundred accounts in the filter log, most of which did not actually get created. I'm blocking all the ones that did, which seem to come in groups of 6. So the CU should probably just look at my block log. NawlinWiki (talk) 14:42, 8 October 2015 (UTC)
 * Thank you for catching this by the way.

— Berean Hunter   (talk)  15:25, 8 October 2015 (UTC)
 * This is a bear. The problem is that these accounts, although all editing from the same country, are using a large ISP and multiple ranges. And those are just the ones I found by going through NW's block log. I have little doubt there are more, and it would take an enormous amount of time to find them all. Of the ranges I've found thus far, after a lot of checking, I've issued one hard range block for one month, but that is hardly going to put a dent in the flow (mixing metaphors), which continues into today. So, I'm stopping for the moment and seeking guidance/help from, who is more experienced with range blocks than I am. There are probably other expert range blockers among the CheckUsers, but I'm not sure who they all are, frankly. Feel free to ping them too if you know who they are. BTW, blocking all the accounts would be a large task. Frankly, I'd be more interested in stopping the creations than blocking, although of course it's not clear if these accounts intend to edit anything.--Bbb23 (talk) 15:08, 8 October 2015 (UTC)
 * So many seem so inactive. Maybe or  could help advise you on the rangeblocking?
 * I can see in the CU logs that was checking the accounts as well. They may have some input with regard to possible range blocks.-- Jezebel's Ponyo bons mots  15:35, 8 October 2015 (UTC)
 * Thanks all for investigating this. Looking at the filter log, the bot has been running since the afternoon of October 5 (US time). The first account that actually got created seems to be User:PrestonFletcher50. NawlinWiki (talk) 16:01, 8 October 2015 (UTC)
 * I'm not sure who this is, but I'm fairly convinced that this is not an edit-a-thon or a school project. I am taking a look at this though. Elockid( Boo! ) 22:39, 8 October 2015 (UTC)
 * There hasn't been much activity for a few days now. It looks like all the blocks put in place has stopped this for now. Marking for close. Elockid ( BOO! ) 23:43, 23 October 2015 (UTC)