Wikipedia:Sockpuppet investigations/JesusJohnson7/Archive

Suspected sockpuppets

 * Original case name


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Using Geolocate provided under their Special Contributions, most of these IP addresses are connected to the same place in Australia, clearly they are connected and are used to add unconstructive and unsourced edits, and for framing other editors. Adding to that the IP with the long string of characters was mainly used just to deface my account by framing me of sockpuppetry to an administrator. All of their contributions are also in editing geopolitical and historical articles, in which Kanto7 has a clear interest in. Kanto7 has also engaged in many edit wars due to adding unconstructive edits and has been warned many times on his talk page.

The time where the IP addresses and Kanto7 become inactive match up at hours 12:00 to 20:00: https://xtools.wmflabs.org/ec/en.wikipedia/Kanto7 https://xtools.wmflabs.org/ec/en.wikipedia/49.2.2.238 https://xtools.wmflabs.org/ec/en.wikipedia/114.75.163.185 https://xtools.wmflabs.org/ec/en.wikipedia/49.2.59.31 https://xtools.wmflabs.org/ec/en.wikipedia/49.2.81.139 https://xtools.wmflabs.org/ec/en.wikipedia/120.17.201.63 https://xtools.wmflabs.org/ec/en.wikipedia/2601:4C4:4000:C420:C01:E756:7A83:9DF5
 * Inactivity patterns
 * Top 3 accounts that have edited:
 * Other used accounts:

Kanto7 is trying to deface my account by adding these edits then reverting it to make it seem like he is undoing vandalism:
 * Behavior


 * French India []


 * Bengal Subah []


 * And here is the most compelling evidence: Trying to trick an administrator into blocking his account but arguing against it so it appears that he is against "vandalism" and steering the sockpuppetry into me: User_talk:Materialscientist (Diff since it has been archived: )

In case in need of more evidences, please notify me, he has now since gone to my talk page accusing me of sockpuppetry just because I reverted their edits and it seems like he wants vengeance especially since we argued in Talk:Insular Government of the Philippines. One final note, Kanto7 is somewhat WP:NOTHERE. PyroFloe (talk) 11:22, 13 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Yes I admit I have been using an IP adress to vandalize some articles. However, using that same IP adress I also made many constructive edits such as the one on French Congo. I'm sure that the IP that attempted to report me to Materialscientist is PyroFloe himself, in a attempt to get me banned. I hope you give me some leniency such as a temporary block. However I deserve to get banned. I have also been using only 1 IP adress, the used to deface Bengal Subah and French India. The rest of those aren't mine. — Preceding unsigned comment added by Kanto7 (talk • contribs) 22:00, 13 February 2021 (UTC)

@Kanto7, Excuse me, but it seems that you don’t know how many accounts PyroFloe has. And you’re right, you do deserve to get banned, because you were vandalizing with unconstructive edits and accusing PyroFloe of sockpuppetry even though you’re the one doing sockpuppetry. 2601:4C4:4000:C420:5073:A3CA:662F:134F (talk) 03:07, 14 February 2021 (UTC)


 * Making it seem like I was the one that put this message by using a new IP address directly similar to the other one I just reported? That is just rude behavior and an attempted impersonation to frame me for your own behaviour by your own IP addresses. PyroFloe (talk) 09:59, 14 February 2021 (UTC)

The IP adress above isn't me. Check the times this adress and PyroFloe are active. This looks a lot like PyroFloe themselves

Clerk, CheckUser, and/or patrolling admin comments

 * - --  Amanda  (aka DQ) 07:10, 14 February 2021 (UTC)
 * Based on extensive overlap, often editing the same articles within 30 seconds of each other, plus extensive use by both users of unusual editing modes like "advanced mobile edit", I'm pretty sure Kanto7 and PyroFloe are the same person, just yanking our chains. So, tossing this back on the CU queue for another look at those two accounts.  -- RoySmith (talk) 16:49, 10 March 2021 (UTC)
 * - -- RoySmith (talk) 16:49, 10 March 2021 (UTC)
 * The users are ❌ as far as checkuser evidence goes. .  ~Oshwah~  (talk) (contribs)   02:52, 12 March 2021 (UTC)
 * I'm not really sure what's going on here, but I've scraped up as much AGF as I could from the bottom of the jar and just left Kanto7 a stern warning. Closing with no action taken other than the warning. -- RoySmith (talk) 15:35, 12 March 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Kanto7 was recently indef blocked. The two editors have the same interest in "history" ,; the same interest in adding unsourced information to Spanish Guinea ; they pretty much edit the same articles (here, and here they were helping each other). Given that the new editor is a sleeper and became active only after kanto7 was indef blocked, a checkuser would be useful. --RegentsPark (comment) 23:47, 20 July 2021 (UTC) RegentsPark (comment) 23:47, 20 July 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Either the same user or someone who has started the exact same bizarre editing method. See this recent edit, another totally unchecked and unattributed machine translation. I have activated the CU request in case there are other accounts. CMD (talk) 15:25, 23 July 2021 (UTC)
 * User now blocked due to quacking, a CU may be useful for sleepers but otherwise this can be closed. CMD (talk) 10:41, 29 July 2021 (UTC)


 * User:Andrew White was created before the SUL finalisation in 2015, so creation records may be murky or different. If all you have is a failed login attempt into the account, this might be the sockmaster trying to hack into the account, though it does not matter much given the account is inactive 8 years and never did anything.-- Eostrix  (&#x1F989; hoot hoot&#x1F989;) 14:31, 29 July 2021 (UTC)
 * thanks. That makes sense, and of course the sockmaster tried to log into another old account as well. Doug Weller  talk 14:39, 29 July 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
Ok. Kanto7 is confirmed as the sockmaster of several socks. User:PhallicMohan was created shortly after Kanto7 and blocked more or less immediately, but logged in today, presumably hoping they could edit. Shri Somavarma Pahima and ColonialMan89 are also socks, as is ColonialMan89 and User:Andrew White. I don't understand about White, they have no contributions but are a registered user but the user log has no creation information, and they failed to login today from the same IP address as PhallicMohan. Can someone explain this please? Doug Weller talk 13:43, 29 July 2021 (UTC)

Hello, I put two checkuser templates here for ease of reference. Doug, I confirm your finding that there was an attempted login to Andrew White's account from the IP used by Phallic, but this doesn't require any participation by the real Andrew White. Whoever attempted this login must *not* have had Andrew White's password. The person attempting this login is evidently the same person as PhallicMohan. If you look at Special:CentralAuth/Andrew White, it shows an 'attached' date at 22:39, 12 April 2013. On the same date and time, another account called was also attached, but it also has no edits. I agree with Doug that Kanto7 is ✅ to PhallicMohan, Shri Somavarma Pahima and ColonialMan89. EdJohnston (talk) 17:39, 29 July 2021 (UTC)

Thanks, I should have place the template. Good point about failing to login, shall I unblock? Please ping me if you reply. Doug Weller talk 14:25, 30 July 2021 (UTC)
 * User:Doug Weller, I wouldn't object if you want to lift the block on User:Andrew White. Certainly if someone attempts unsuccessfully to log in to Andrew White from an IP associated with socking, it doesn't put any stigma on Andrew himself. EdJohnston (talk) 15:28, 30 July 2021 (UTC)


 * Andrew White has been unblocked. Looks like there's nothing left to do here. Closing. --Blablubbs (talk) 10:04, 3 September 2021 (UTC)

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The 114 IP is an IP that originally appeared in early August shortly after the previous SPI of the Shri Somavarma Pahima account, to continue their edits (eg. Kanto7, SSP, 114. After a couple of weeks of inactivity, it is back with the typical focus on infoboxes, date ranges, and territory names (other sample IP edits: ).Also straight after the last SPI case and block, CarrotandParrot was created. C&P opened with a typical infobox date edit, and continued the pattern of usual infobox stuff throughout basically all their edits until 28 August (just see contribution list, it's all former country edits). Something happened and the account went bizarrely off the deep end on with its last five edits (see this on my talkpage for example which self-ids among other things, and admins will be able to see the revdelled edits), and the account was blocked for vandalism.The editor interaction analyser further shows the clear overlap between Kanto7/114/C&P.Shortly after the C&P block the Trump Gang account was created, opening with another typical former country infobox edit and then going back to Spanish Guinea. Minutes after they were blocked for UAA reasons, Mogamoga88 appeared to continue work on Spanish Guinea. CMD (talk) 09:52, 31 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - all the accounts have been blocked for various reasons already; I've just blocked the ducky IP for a month. CU might flush out any other accounts they've created recently.  Girth Summit  (blether)  15:21, 4 September 2021 (UTC)
 * All three accounts ✅ to Kanto7 plus the following accounts:
 * (CU data exists due to logins)
 * . . I would move this case under JesusJohnson7 (the oldest account), then (re)tag all accounts from this case and the archive as socks of that account. Thanks, Mz7 (talk) 07:48, 5 September 2021 (UTC)
 * ✅, closing. --Blablubbs (talk) 08:33, 5 September 2021 (UTC)
 * . . I would move this case under JesusJohnson7 (the oldest account), then (re)tag all accounts from this case and the archive as socks of that account. Thanks, Mz7 (talk) 07:48, 5 September 2021 (UTC)
 * ✅, closing. --Blablubbs (talk) 08:33, 5 September 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

A new account, straight to geopolicial infoboxes on their third edit, and even back to machine translated edits, which is what got the Kanto7 account blocked. CMD (talk) 10:22, 9 September 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
 
 * - There's a suspicious amount of overlap with previous socks for an account with only a handful of edits, and I note instances where they are restoring the edits of a previous sock:, . Pretty sure it's them, but please compare to the archive and check for sleepers. Thanks, Spicy (talk) 00:51, 27 September 2021 (UTC)
 * ✅ = . Now blocked. Now other sleepers uncovered for now. - Mailer Diablo 01:32, 27 September 2021 (UTC)
 * Thanks, closing. Spicy (talk) 01:54, 27 September 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Menninte reintroduced the exact same edit that was previously added by 114.73.189.169. M.Bitton (talk) 22:52, 19 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

FWIW regarding the inconclusive technical check, based on the three edits this account hitting different sockfarm topics, there are two other potential farms that come to my mind regarding this account. That said, clear NOTHERE block. CMD (talk) 09:36, 20 October 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Duck blocked. --RegentsPark (comment) 22:59, 19 October 2021 (UTC)
 * Tagged, closing. Mz7 (talk) 08:33, 20 October 2021 (UTC)
 * I ran a sleeper check and Menninte is, but the account is ✅ to previous JesusJohnson7 socks. . Mz7 (talk) 08:38, 20 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

New obvious duck, restoring past sock edits to Hong Kong New Wave, Free Legal Assistance Group , and Commission on Human Rights (Philippines). Requesting CU for other account check. CMD (talk) 03:00, 29 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The edits are ducky, but CU is . Blocking, tagging as suspected, closing.  Girth Summit  (blether)  09:00, 29 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Reinstated reverted edits by last-known sock account 10mmsocket (talk) 16:00, 29 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Duck blocked. --RegentsPark (comment) 16:21, 29 October 2021 (UTC)
 * Closing. Bbb23 (talk) 20:12, 29 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

New account with exactly the same focus on historical entities, most especially their infoboxes. Its first edits at the end of last year were a series of infobox reverts all on pages the user has edited before. The first edits in January were also on previous pages. This editor interaction shows the clear return to Kanto7 pages, and all edits are the usual unsourced messing about with infoboxes. CMD (talk) 04:13, 17 February 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * -  Girth Summit  (blether)  10:08, 18 February 2022 (UTC)
 * The following accounts are ✅ to suspected sock :
 * I don't see any other socks. Blocking, taggin etc. Girth Summit  (blether)  10:11, 18 February 2022 (UTC)
 * I don't see any other socks. Blocking, taggin etc. Girth Summit  (blether)  10:11, 18 February 2022 (UTC)
 * I don't see any other socks. Blocking, taggin etc. Girth Summit  (blether)  10:11, 18 February 2022 (UTC)
 * I don't see any other socks. Blocking, taggin etc. Girth Summit  (blether)  10:11, 18 February 2022 (UTC)
 * I don't see any other socks. Blocking, taggin etc. Girth Summit  (blether)  10:11, 18 February 2022 (UTC)

Suspected sockpuppets
New quacking account that popped up following the recent blocks. Still doing the machine translations that got them blocked. Sigh. CMD (talk) 10:40, 24 February 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Was about to create a report here for the user as well based on their revert to a sock version of Kingdom of Illyria. – NJD-DE (talk) 11:32, 24 February 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - restoring sock edits is pretty obvious. Please check for sleepers. Thanks, Spicy (talk) 13:09, 24 February 2022 (UTC)
 * ✅ to . Blocked, didn't see any other accounts. Closing.  Girth Summit  (blether)  13:42, 24 February 2022 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

User keeps adding large amounts of unsourced text to articles about Russian Empire subdivisions, likely the text is auto-translated from Russian Wikipedia since it is generally poorly written and contains "[1]" in text form instead of actual citations. Also, their unsourced text pasting of is consistent across their SPAs and the user seems to be consistently ban evading to attempt the same edits across many such articles, especially the Terek Oblast: Edit diff by Peak Level Intellectual Edit diff by Austro-Hungarophile 𝑵𝒖𝒏𝒖𝒙𝒙𝒙 ✪ 𝑇𝑎𝑙𝑘 05:21, 5 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Moving to correct case., when raising SPI reports, please raise the case under the name of the proposed master; there is no need to list other socks of that master when they're already blocked (although it's good to mention them in your evidence to help us compare them).  Girth Summit  (blether)  15:13, 5 March 2022 (UTC)
 * Austro-Hungarophile is ✅ to . Will block and tag. Girth Summit  (blether)  15:15, 5 March 2022 (UTC)

Suspected sockpuppets
IP 114.73.189.169 was in October 2021 as a JesusJohnson7 sockpuppet. This IP has been at it since January 2022, continuing the pattern of unsourced and weirdly formatted additions to Russian Empire articles and this redacted edit summary makes it clear they're evading a block. DanCherek (talk) 06:19, 15 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked 3 months. Obvious block evasion, and I'd have blocked for that edit summary alone even if they weren't evading a block. Closing.  Girth Summit  (blether)  06:53, 15 March 2022 (UTC)

Suspected sockpuppets
The latest IP for this user, pulling the usual date change on Spanish Guinea. Previous IPs include 81.0.37.152, 81.0.32.152, and 81.0.34.155. Would a range-block be possible, or is this too wide a variation? CMD (talk) 15:11, 21 March 2022 (UTC)


 * Diffs: CMD (talk) 15:19, 23 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * The range is  wizzito  &#124;  say hello!  05:04, 23 March 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Please move this report to Sockpuppet investigations/JesusJohnson7. Bbb23 (talk) 00:35, 22 March 2022 (UTC)
 * Merged as requested. --Blablubbs (talk) 10:21, 23 March 2022 (UTC)
 * - Please provide diffs demonstrating confirmed socks making "the usual date change". -- RoySmith (talk) 14:59, 23 March 2022 (UTC)
 * Hmmm, looks like this has been going on for a while, under various IP ranges, so blocking the /21 would just be whack-a-mole. I semi-protected Spanish Guinea for 3 months. -- RoySmith (talk) 15:27, 23 March 2022 (UTC)

Suspected sockpuppets
Blatantly quacking new account covering some of the usual articles of previous socks. Draft:British Fernando Po and Colony of Fernando Poo are the usual machine translated stuff. Note this comes after recent evasion on 114.73.182.221 and 139.47.74.156. CMD (talk) 15:08, 28 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 16:06, 31 December 2022 (UTC)
 * I see LarryJenks778 is already blocked, but I ran some checks anyway. They are  to the group of accounts blocked on 17 February 2022.  .  I also see a note saying that this case has sometimes been mixed up with Sockpuppet investigations/Betteruser. -- RoySmith (talk) 16:16, 31 December 2022 (UTC)
 * Tagged as suspected. Closing. Callanecc (talk • contribs • logs) 00:17, 1 January 2023 (UTC)

Suspected sockpuppets
Blatant duck. Same topic area of former entities, same articles as previous socks, same machine translations, and even the same content. CMD (talk) 05:21, 24 April 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * They're technically pretty very - given behaviour, blocking and tagging as proven. Don't see any others, closing.  Girth Summit  (blether)  09:45, 29 April 2024 (UTC)