Wikipedia:Sockpuppet investigations/Heymid/Archive

Evidence submitted by TFOWR
(by AIK IF 2010, prior edit was by Heymid, edit summaries identical), AIK IF 2010's other edits are mostly to Heymid's talkpage.

This is currently at WP:ANI, and both editors are now indefinitely blocked. I don't feel entirely comfortable with this: the time this occurred is (slightly) outside Heymid's usual times for editing. I'd like confirmation that this was genuine socking and not "false-socking". TFOWR 23:21, 18 October 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Comments by other users

 * Could be the false flag sockmaster who has impersonated other users already in a bit of hot water, in an attempt to reach the boiling point, so I would like to see this checked. – xeno talk 23:25, 18 October 2010 (UTC)
 * I've seen "false-flagging" done at least three times before and am the one who originally suggested a CU in the ANI topic in question; it can't hurt to be sure. Half  Shadow  23:28, 18 October 2010 (UTC)

Clerk, patrolling admin and checkuser comments
. AIK IF 2010 was using an open proxy, but user agents are similar. –MuZemike 23:37, 18 October 2010 (UTC)
 * MuZemike asked me to review this case. There was a lot of variation and the two users show similarities. My opinion is that it is either a joe-job by a troll or a connection.  TN X Man  02:52, 19 October 2010 (UTC)
 * Both of the accounts are blocked, meaning there is really nothing left to do here. I am marking this for closure. Tiptoety  talk 18:25, 19 October 2010 (UTC)

The sockmaster account (Heymid) was later [ unblocked]. See the WP:ANI discussion for further discussion. Hey Mid  (contributions)
 *  Above comment edited to remove adminnote; please do not assume the role of an administrator unless you are actually one SpitfireTally-ho! 20:25, 29 November 2010 (UTC) 

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

has been making edits to Groundhog Day exclusively to the plot section, and has a userbox saying they are from Sweden. At the same time Heymid starts editing and their edits are generally reverted, a whole range of Ips, all from Sweden, start vandalizing the plot section of Groundhog Day exclusively. These include: 78.77.216.99, 217.213.84.153, 217.213.86.100, 217.213.86.43, 217.213.87.164, 78.77.218.233. Darkwarriorblake / SEXY ACTION TALK PAGE! 22:05, 13 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Yes, those edits are all by me. It's up to the CheckUsers what preventative actions shall be taken to minimize future disruption, since it’s a fairly large number of IPs overall. But I'm mentally ill and absolutely should not take part in the encyclopedia since I cannot help my actions. -- Hey mid  (contribs) 22:39, 13 May 2021 (UTC)
 * I'm sorry if you're mentally ill Heymid, please don't take anything here personally, but you do need to temper your behaviour somewhat. Darkwarriorblake / SEXY ACTION TALK PAGE! 22:42, 13 May 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Rather than do any checking in this case, where it's clear that Heymid has recognized the issue, and has requested blocking by another administrator, I will block him for one month, encourage him to seek treatment and local support for his condition, and have left the door open for him to request unblock or extension of the block. Heymid, hope you are feeling better soon. Risker (talk) 23:53, 13 May 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

As explained in the LTA case: Long-term abuse/Heymid. All of these other accounts have strong behavioural and naming patterns and there is many reasons to believe they all belong to Heymid. The socks are all locked with the exception of Yamacyan, but Heymids account is not, and he is not (yet) indefinitely blocked on enwiki, just for one month. A frwiki checkuser has confirmed Heymid to be socking on frwiki with accounts with striking similarities to the suspected enwiki socks in both names and behaviour. In this message on svwiki, Heymid admits to having abused multiple accounts on enwiki since 2010. The socks have been more or less confirmed to be identical to eachother, since a lot of them were gblocked at exactly the same time by the same steward after I reported one of them to Meta:Steward requests/Global. Heymid has more or less admitted to all of this on svwiki, but tying the specific accounts to his account officially will make it easier to block and get rid of his sockpuppets in the future, as there is a clear case to refer to. And also, obviously block him permanently if this checks out. EstrellaSuecia (talk) 18:16, 30 May 2021 (UTC)
 * Thanks for the check, . I would disagree that he's not an LTA but that's perhaps only if his own statements are true. Eribal0224 might not be related to Heymid, but the user is a troll regardless. The account has not been checked on svwiki, it was blocked for trolling based on behavioural evidence and nothing else. I thought the behaviour in svwiki was similar to some Heymid-socks, especially the tone on his user talk as well as editing other users userspace. EstrellaSuecia (talk) 09:17, 3 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This will take a while, but I have started work on this. Risker (talk) 19:32, 30 May 2021 (UTC)
 * Appreciate it. EstrellaSuecia (talk) 21:24, 30 May 2021 (UTC)
 * Hi, thank you for the report. I noticed that you tagged a bunch of accounts (and a few dynamic IPs) with and  templates; while I appreciate the sentiment, I would like to ask you to not do so in the future. While a non-admin/non-clerk option exists for both of those templates, it has been removed from the documentation for  because it's problematic with regard to AGF and can contribute to confusion because it adds accounts that were never determined to be socks through appropriate administrative channels to sockpuppet categories. Even if you are absolutely confident that an account is a sock, there are sometimes procedural reasons that we elect not to tag, or to tag in certain ways.  The IP sock template is mostly a relic from the past; the only plausible use case is for IPs that we can expect to remain static for an extremely long time, and I have never seen it used at SPI or used it myself. It's generally enough to just note IPs in the relevant SPI. Thanks. --Blablubbs&#124;talk 06:54, 31 May 2021 (UTC)
 * I see. Well, I just looked at what had been done in previous LTA-cases but I obviously got inspired from something a bit too ancient. I thought that tagging accounts like that was the preferred method of listing suspected accounts at LTA, and really it's the only option given in the instructions. EstrellaSuecia (talk) 08:44, 31 May 2021 (UTC)


 * Checkuser findings: First off, let's just understand that per our usual practice, . I did not receive responses from the SVwiki or FRwiki checkusers so it is difficult to say why they have linked some socks there that are not linked here.


 * is completely ❌ and any tags attached to that account should be removed.
 * is very, as the editing pattern is completely different. Any tags linking this account to Heymid should be removed. (As an aside, just because an account is behaving unacceptably means that it's a sock of this user. I genuinely cannot understand why the Swedish checkusers have blocked this account as a Heymid sock.)

The following accounts are ✅ socks of Heymid:
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.
 * There are also a few other accounts that have been globally locked, whose usernames I won't repeat as they're clearly personal attacks.

The following account is a sock of Heymid, based on CU data and/or behavioural data:


 * Additional comment: I am not persuaded that Heymid is an LTA. Yes, there was a bit of socking in 2010, but no indication of any further socking again until his current health crisis in 2021. None of the other wikis have indicated that this user is considered an LTA either. The socking has been prolific this year, and highly inappropriate in many cases.  I will be indefinitely blocking these accounts for socking, and will ask the clerk to tag as appropriate, and to remove the tags on the two accounts indicated above.  Risker (talk) 05:09, 3 June 2021 (UTC)
 * everyone, untagged the other two, for the lot given the very extensive cross-wiki activity. The ranges are already dealt with, except for ; no action on that one at this time. I don't have any objections to a rangeblock, but I won't ask for one either – they don't appear to have been on it for long and the most recent edit that I can clearly attribute to them is from a few days ago. Closing. --Blablubbs&#124;talk 08:29, 3 June 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This touching thank you note at AN amounts to a "please catch me", and the reference to blocked IP ranges fits recent efforts to block them. On top of that, some OR at Chronic fatigue syndrome, an old favorite. Already blocked, but requesting CU in view of previous cases. Favonian (talk) 20:26, 17 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. No other accounts immediately visible. NinjaRobotPirate (talk) 21:15, 17 June 2021 (UTC)


 * Adding tag -- RoySmith (talk) 13:22, 18 June 2021 (UTC)