Wikipedia:Sockpuppet investigations/Kamen rider saber/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I was patrolling the new user log when I saw that username was created. After blocking them for and after looking at the edit history for One Entertainment and Eastern gorilla that this user vandalized, I noticed many other accounts adding the exact same vandalism to the same article and over the last few days. After digging deeper, running CU checks on the involved accounts, and looking through IP ranges, I was able to find many more accounts that are connected to these ones. They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same user agents between them. Creating this SPI retroactively for history and record-keeping purposes. These accounts will all be checkuser blocked and tagged.  ~Oshwah~  (talk) (contribs)   03:10, 12 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * For the record, the "mike hock" usernames clearly connect this case to . Behavioural evidence from simplewiktionary further show this account's connection to
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)
 * These accounts are all locked. User:1234qwer1234qwer4 (talk)  00:30, 13 December 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Checkuser evidence:
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)
 * They all geolocate to the same area, are all under the same ISP or same wide parent range, and are all using the same (two) user agents between them. Blocking and tagging all accounts, and closing this SPI.  ~Oshwah~  (talk) (contribs)   03:19, 12 December 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar username pattern; continued behaviour on Wikispecies. Already blocked, but suggesting a sleeper check. User:1234qwer1234qwer4 (talk) 21:55, 17 December 2021 (UTC)
 * Added another two accounts. User:1234qwer1234qwer4 (talk)  22:05, 17 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Noting more abuse on other projects:
 * Locks have been requested. User:1234qwer1234qwer4 (talk)  17:01, 20 December 2021 (UTC)
 * Locks have been requested. User:1234qwer1234qwer4 (talk)  17:01, 20 December 2021 (UTC)
 * Locks have been requested. User:1234qwer1234qwer4 (talk)  17:01, 20 December 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - OP asked for a sleeper check, but didn't set the state correctly, so fixing that for them. -- RoySmith (talk) 02:27, 19 December 2021 (UTC)
 * These are ✅; I don't see anything else, but they're operating across some wide ranges. I'm not going to bother tagging them at this point. Closing.  Girth Summit  (blether)  11:24, 20 December 2021 (UTC)

Suspected sockpuppets

 * ( original case name)
 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I don't even think I need to explain this one. This LTA created a page admitting to being a blocked vandal. Scorpions13256 (talk) 02:23, 21 January 2022 (UTC) I read a little deeper. It now seems that this needs to be merged with the Jungkook420 SPI. This need a CU. Scorpions13256 (talk) 02:27, 21 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Thanks for noting the relationship; I was going to note it (and had both SPIs on my watchlist) but was not sure it was worth it for a stale master. User:1234qwer1234qwer4 (talk)  21:25, 22 January 2022 (UTC)
 * Also observing recent activity on simplewiki. User:1234qwer1234qwer4 (talk)  20:55, 23 January 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - can an admin clerk please histmerge to WP:Sockpuppet investigations/Jungkook420? Thanks, Spicy (talk) 14:41, 21 January 2022 (UTC)
 * ✅. Sro23 (talk) 16:46, 21 January 2022 (UTC)
 * Thanks. - worth a check for other accounts given the history.  Spicy (talk) 16:59, 21 January 2022 (UTC)
 * The geolocation is the same; that's all I can say with confidence from the CU, but the self-admission and username are something of a giveaway. also came up in the check - given the editing, that looks like an obvious throwaway. Blocking, will request locks, closing.   Girth Summit  (blether)  17:43, 21 January 2022 (UTC)
 * maybe I'm just not following the history correctly, but shouldn't this be filed under since they're the oldest account? -- RoySmith (talk) 04:23, 23 January 2022 (UTC)
 * - thanks, I missed that. Will move the case. Spicy (talk) 12:41, 23 January 2022 (UTC)
 * Moved case to oldest account, retagged the ones that were already tagged, closing. I recommend not tagging these in the future as they're obvious throwaway vandalism accounts. Spicy (talk) 14:35, 23 January 2022 (UTC)

Suspected sockpuppets
See, similar username as well as being a VOA like previous socks. EDM fan 2 (talk) 03:17, 15 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked and locked. Closing, no tags per WP:DENY. Thanks, Spicy (talk) 06:51, 15 March 2022 (UTC)

Suspected sockpuppets
Vandalizing similar articles like Long-term abuse/Mikemikev, articles on gorillas and they created the now deleted Long-term abuse/Kamèn rider saber. I have blocked them but they need to be globally locked. Liz Read! Talk! 03:11, 11 September 2022 (UTC) Liz Read! Talk! 03:11, 11 September 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked and locked. . Closing. --Jack Frost (talk) 11:46, 11 September 2022 (UTC)

Suspected sockpuppets
https://en.wikipedia.org/w/index.php?title=Midwest_FurFest&action=history&offset=&limit=500 https://en.wikipedia.org/w/index.php?title=Furry_fandom&action=history https://en.wikipedia.org/w/index.php?title=Furry_convention&action=history

Same obvious targets. Socks aged a few months, could be more sleepers that a CU may be able to find. 195.74.85.160 (talk) 20:25, 6 March 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
 * How is that close compatible with the CU being requested? 1234qwer1234qwer4 20:42, 6 March 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * All accounts blocked, closing. Bbb23 (talk) 20:41, 6 March 2023 (UTC)

Suspected sockpuppets
He literally said it himself. Also and  you guys were involved. Martin talk  05:38, 29 June 2024 (UTC)


 * User has been blocked just now and yes, the user did said that. I request any admin with the CheckUser for sockpuppet confirmation. 🛧 Midori No Sora♪ 🛪 ( ☁＝☁＝✈  ) 05:47, 29 June 2024 (UTC)
 * do we really need CU? Martin  talk  05:52, 29 June 2024 (UTC)
 * I don't think so. It's extremely blatant. Might be worth it in case of sleepers.  Liliana UwU  (talk / contributions) 06:02, 29 June 2024 (UTC)
 * The only evidence I could find was the user admitting that they are a sockpuppet. I only suggested it but I guess it might be necessary just in case. 🛧 Midori No Sora♪ 🛪 (  ☁＝☁＝✈  ) 06:04, 29 June 2024 (UTC)
 * let's wait for a clerk or an admin Martin  talk  06:06, 29 June 2024 (UTC)
 * also request for a WP:LTA-- Martin talk  06:11, 29 June 2024 (UTC)
 * An LTA page isn't necessary, unless Kamen rider saber has a history of subtle vandalism on socks that even experienced editors would have mistaken to be in good-faith. Their vandalism is more on the blatant side and most likely done just for the purpose of bringing attention to themselves. Cyclonical (talk) 06:40, 29 June 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Account is locally blocked and globally locked, closing. Bbb23 (talk) 12:50, 29 June 2024 (UTC)