Wikipedia:Sockpuppet investigations/KC626266/Archive

Suspected sockpuppets
Block evasion. Made the same sorts of edits to Port of Spain, Flags of Africa, Flags of North America, and Valletta as KC626266 made to the same articles earlier (which were reverted) shortly before being blocked, characterized by the addition of fake flag images and inserting the word "city" after "capital" in short descriptions (the latter not being vandalism, of course, but illustrates that it's the same person). Largoplazo (talk) 11:20, 14 December 2022 (UTC)

UPDATE: Adding another 94.138.255.* sock address, 242, which now also shares with the master the characteristic of making false edits to country articles regarding the way they're identified. The master edited Netherlands to set its official name to "Republic of the Netherlands" (the Netherlands is a monarchy) and to "Federal Democratic Republic of the Netherlands" and Japan to set its official name to "Republic of Japan" (Japan is also a monarchy). The new sock (which, like the master and the other IP is also messing with flags) awarded Saint Pierre and Miquelon the abbreviation "TCSPAM", which Google finds not to exist in the context of either Saint Pierre or Miquelon.

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Changed master block to indef and blocked the two IPs for a week. Seems like all their Commons uploads are hoaxes, but I'm unsure if Commons explicitly disallows it or if it falls as 'out of scope' / vandalism. Closing. DatGuyTalkContribs 13:33, 16 December 2022 (UTC)

Suspected sockpuppets
The same edits to the same articles, adding details to short descriptions, adding fake abbreviation to Saint Pierre and Miquelon. Neighboring IP of the temporarily blocked.243 and .242 IPs. Suggesting a longer block on at least the /26 range. Largoplazo (talk) 14:06, 20 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Please have a look a this IP also: 94.140.246.27. It has been spamming unsourced flags into city articles. Notably, it's adding flags recently uploaded on Commons by KC626266 and by KC262626 (I assume the latter is surely a sockpuppet of KC626266). Some of those flags were uploaded today, so the IP adding them to articles the same day is surely indicative. It's also worth nothing that they're also adding some images uploaded by this slighly older account, Əminə Hacıyeva, who was blocked earlier this year for being a suspected sockpuppet of Hom Ling Zum. R Prazeres (talk) 18:51, 20 December 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * and are so clearly identical that I had already blocked the IP, created a local account for KC262626 and asked them to use it in the future instead. I wasn't aware that  exists; their editing focus on flags and the username clearly give the connection away. So: Their latest IP address is already blocked for 3 months; their newest account is now also blocked. I'll thus close this without looking at 94.138.255.241's contributions much; it has been used for editing over 4 days ago and only once ever. The probability of the sockpuppeteer still having access to that address is close to zero. ~ ToBeFree (talk) 13:22, 25 December 2022 (UTC)
 * , closing ~ ToBeFree (talk) 13:22, 25 December 2022 (UTC)

Suspected sockpuppets
Similar account name to blocked sockmaster. Same edit pattern of improperly adding images to pages:      &mdash; Archer1234 (talk) 10:17, 26 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, blocked, tagged. Materialscientist (talk) 10:33, 26 December 2022 (UTC)
 * Closing. Spicy (talk) 19:07, 26 December 2022 (UTC)

Suspected sockpuppets
One of the same IPs in the very small range that has engaged in this activity before, same as the master: adding unnecessary detail to short descriptions and other tags, and adding fake flags for cities and national subdivisions uploaded to Commons (in this case, a phony flag for Paramaribo; and, in this case, that flag was uploaded by a just-created user named [|CubE13546]). (The master account and one other, KC262626, have been blocked there as well as here.) Largoplazo (talk) 11:12, 3 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * blocked for 1 month. Closing. Callanecc (talk • contribs • logs) 12:18, 3 January 2023 (UTC)

Suspected sockpuppets
Same tiny IP range as the other IPs already reported, one of which was just blocked. Same edits: needlessly expanding short descriptions and other pointless and sometimes wrong changes. Some of the same articles: Lilongwe, Castries, Valletta. Can we please get a block on the IP range? Check out Special:Contributions/94.138.255.0/24 or Special:Contributions/94.138.255.240/28. Even before the recent rash of edits like these or involving phony flags, most of the edits from this range over the preceding two years were reverted. Largoplazo (talk) 11:37, 4 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the /24 for a month. Closing.  Girth Summit  (blether)  16:52, 4 January 2023 (UTC)

Suspected sockpuppets
All of this user's current edits involve unnecessarily lengthening the short description for cities in exactly the same way as the master and other socks: changing "capital" to "capital city"; adding "and largest city", and unnecessary qualifying country names with "Republic of" and "union of". Largoplazo (talk) 15:07, 8 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - same behavior, similar geolocation as previous blocked IPs. Please, consider a short, anon. only block. Thank you. MarioGom (talk) 19:02, 8 January 2023 (UTC)
 * one week. Closing. The SandDoctor  Talk 23:12, 8 January 2023 (UTC)

Suspected sockpuppets
Same activity regarding inserting "city" after "Capital" in short descriptions and adding "and largest" in front of "city" where applicable. Largoplazo (talk) 11:37, 19 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked for 1 week. Closing. Callanecc (talk • contribs • logs) 11:53, 19 January 2023 (UTC)

Suspected sockpuppets
The same activity involving unnecessary levels of detail in short descriptions and leads, focus on using the full, formal names of countries, and inappropriate use of hatnotes in the process. Largoplazo (talk) 19:39, 27 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. No further action required. Closing. Callanecc (talk • contribs • logs) 10:12, 4 February 2023 (UTC)

Suspected sockpuppets
One of the same IPs as before, same types of edits: short descriptions of capitals, flags. Largoplazo (talk) 15:48, 25 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * IP has been blocked. Callanecc (talk • contribs • logs) 11:15, 28 February 2023 (UTC)

Suspected sockpuppets
Same focuses on flags and coats of arms and capital cities, several of the same articles, picked up right where the above IP left off with Hanoi and Concord, New Hampshire. Largoplazo (talk) 18:45, 25 February 2023 (UTC)

The user was committing outright vandalism as well and has now been blocked. Largoplazo (talk) 11:35, 26 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I'm going to request global lock on this user, since the master is globally locked. MarioJump83 (talk) 12:50, 28 February 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to KC626266. I've adjusted the tag. Closing. Callanecc (talk • contribs • logs) 11:15, 28 February 2023 (UTC)

Suspected sockpuppets
The usual:
 * Unnecessary short descriptions of capitals
 * flags, including wrong flags and nonexistent flags
 * bogus page protection templates

This is the most prolific IP range for this user. Edits from the 192 /26 range have routinely been reverted for over a year, even edits of types not described above. (Edits in the 0 /26 range don't seem related, and there are no edits in the 64 and 128 /26 ranges.) Can we please get a much longer block on this range now? Largoplazo (talk) 10:18, 28 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * blocked for 6 months. Closing. Callanecc (talk • contribs • logs) 04:16, 1 March 2023 (UTC)

Suspected sockpuppets
creation of same draft article Draft:Flag of Rockville, Maryland with same wording as another KC626266 sock (User:Ericka rocking a girl). Similar editing habits e.g. creation of nonsense user pages, poor spelling. Nthep (talk) 15:46, 26 May 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Cssq didn't create the same draft article. Cssq merely added six words (with "Friesland" badly mangled) to the article the earlier account had created and submitted it for approval.
 * Further, hasn't been flagged as a sockpuppet of KC626266, so I'm not seeing why, in associating Cssq with that account, Nthep ended up on this investigation page. In addition to the the Rockville flag draft, I looked into the one "Ericka" put together for Westchester County, New York. Both are real flags, in contrast to the imaginary flags KC626266 was creating. Largoplazo (talk) 16:28, 26 May 2023 (UTC)
 * see the block log entry at User:Ericka rocking a girl - . I stand corrected over Cssq creating Draft:Flag of Rockville, Maryland but it's too much of a coincidence that Cssq picks up that draft when they both edit articles/talk pages on Hotel Transylvania characters as well as creating user pages making false claims. Nthep (talk) 16:48, 26 May 2023 (UTC)
 * I hadn't noticed the sock comment, but, then, it's also stated flatly with no rationale given. I mean, it says "via User:Shhgy44, but doesn't say why that connection was made. My quick scan missed any overlap in their contribution histories. And the Ericka account has never been brought here for investigation. User:Blablubbs, can you shed some light on this? Largoplazo (talk) 16:58, 26 May 2023 (UTC)
 * This odd parameter, " ", in the Userpage tag on Cssq's home page does seal the conclusion that Cssq and Ericka are the same person or working together. But that's separate from whether they're KC626266. Largoplazo (talk) 19:50, 26 May 2023 (UTC)


 * I noticed their first couple of edits were about being a sock and being blocked and other edits showing awareness of templates and Editnotices that suggest they have prior knowledge and I've suspected them of being a sock. Maybe a check-user check is warranted? KylieTastic (talk) 10:00, 27 May 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The connection was made with CheckUser, hence the checkuserblock-account. --Blablubbs (talk) 13:42, 27 May 2023 (UTC)
 * Tagged, closing. Spicy (talk) 16:43, 27 May 2023 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

Both names contain "Ericka", and this one picked up shortly after the other was blocked and both focused on edits related to flags, cities, and Hotel Transylvania. The sock is already blocked but let's make a record of this. Largoplazo (talk) 11:01, 27 May 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - I believe this should be merged into Sockpuppet investigations/KC626266. Bbb23 (talk) 13:43, 27 May 2023 (UTC)
 * Merged case from Sockpuppet investigations/Ericka rocking a girl. Spicy (talk) 16:42, 27 May 2023 (UTC)
 * Tagged, closing. Spicy (talk) 16:43, 27 May 2023 (UTC)

Suspected sockpuppets
similar crosswiki pattern, already CU blocked at Commons, reinstating edits of previous sockpuppets Johannnes89 (talk) 14:58, 16 June 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Theres the already blocked/ locked, but nothing else interesting. Courcelles (talk) 20:03, 17 June 2023 (UTC)
 * Everyone's locked. Tagged, closing. Spicy (talk) 23:59, 17 June 2023 (UTC)

Suspected sockpuppets
Possible global lock evasion by restoring a locked user's edits on a template. See here: https://en.wikipedia.org/w/index.php?title=Template:R_from_Wade–Giles_romanization&diff=prev&oldid=1162293614 (June 28) https://en.wikipedia.org/w/index.php?title=Template:R_from_Wade–Giles_romanization&diff=prev&oldid=1160450124 (June 16)

The sockpuppet has history of disruptive editing similar to DC Comics Hero. No cross-wiki abuse involved yet. 64andtim  (chat)  06:20, 28 June 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
 * They also created User:MusikManes/dccomicsmhero.json, a clear reference to User:DC Comics Hero. Nobody  ( talk ) 06:39, 28 June 2023 (UTC)
 * I also came to the same conclusion given this makes a direct link to &#8211; MJL &thinsp;‐Talk‐☖ 06:51, 28 June 2023 (UTC)
 * Also, this Base64 data is an image of the flag of England, and the user is a flag enthusiast. Largoplazo (talk) 11:19, 28 June 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * -- Tamzin  [ cetacean needed ] (she&#124;they&#124;xe) 06:58, 28 June 2023 (UTC)

Suspected sockpuppets
Is restoring the edits of some other socks without explanation Nobody  ( talk ) 14:31, 28 June 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Courcelles (talk) 15:13, 28 June 2023 (UTC)

Suspected sockpuppets
The user has copied the block template from one of his sockpuppet which I can assume: User:Cssq. Kaseng55 (talk) 18:28, 29 June 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * And added "DC COMICS HERO" to somone's talk page (it's been reverted), the same as another name of the sock. And maybe KingCroc is KC(626266). Largoplazo (talk) 18:35, 29 June 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ Already blocked, no sleepers. Courcelles (talk) 18:36, 29 June 2023 (UTC)
 * - UtherSRG (talk) 14:52, 1 July 2023 (UTC)

Suspected sockpuppets
Pro forma filing, already blocked, I'm assuming Oshwah did a CU already based on the block notice. Nobody ( talk ) 11:00, 6 July 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Indeed I did! :-)  ~Oshwah~  (talk) (contribs)   11:50, 6 July 2023 (UTC)
 * , closing. Thanks, Spicy (talk) 18:50, 14 July 2023 (UTC)