Wikipedia:Sockpuppet investigations/Knightrises10/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Both new accounts that jumped way too early into maintence stuff. They've started talking each other after I warned JC... for incivility and bizarre use of reverts, and the Knightrises10 account seems to pour adulation on JC in a way that looks like it is being written as evidence to show that other people appreciate the account's contributions (See here and here).

Additionally, both accounts recently decided it'd be fun to close AfDs incorrectly using templates:, , with it looking possible that they just misinterpreted the warning they were given the other day to use the wrong archive template rather than the actual AfD template.

Requesting CU to look to see if these accounts are related. TonyBallioni (talk) 14:31, 7 September 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
❌. Closing.--Bbb23 (talk) 16:01, 7 September 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Shonku07 has same edit history as that of Kigagan. Asking questions at Teahouse about blocking users, and about how to create bots. Kigagan was found to be a sock of ThilsaTest. Knightrises10 (talk) 13:25, 22 September 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
All three accounts are ✅. — Berean Hunter   (talk)  16:24, 22 September 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Good hand/bad hand. Filing for the record. ~ Rob 13 Talk 17:06, 13 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Closing. ~ Rob 13 Talk 17:07, 13 October 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

identical user boxes as a past sock, Md.Ali25 vs Satin17. Same interest in CVU/Antivandalism but what ticked me off was their involvement here as an editor who registered only a week ago. Also overlap here. Interestingly enough, they seem to overlap a fair bit with who is a sock of  and all are a nightmare of WP:CIR. Praxidicae (talk) 15:11, 30 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Satin17 is ✅ so . The other accounts mentioned in the SPI report didn't turn up in the ranges I looked at. Closing. TonyBallioni (talk) 18:42, 31 October 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

See below. TonyBallioni (talk) 22:25, 26 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * to one another and to Knightrises10 based on historical data and behaviour is a match as well. . Closing. TonyBallioni (talk) 22:26, 26 September 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Apologies in advance for what is going to be a lengthy report. It concerns users who have no significant overlap in terms of articles edited, and is more about a common interest in behind the scenes tasks, engaging with one-to-one training courses, and gaining permissions.

Background I'm familiar with two previous socks of Knightrises10 - Andrew Base and Antila. Andrew Base went through CVUA program with me (training page), and started (but did not complete) the NPP school program with Cassiopea (training page). Andrew Base was blocked on 24 December 2019, shortly after which Antila was created and started editing. They again went through the CVUA program with me (training page), and requested NPP School training at Barkeep49 but this was declined. Antila was blocked as a sock of Knightrises10 on 26 September 2020. Another account, Tatupiplu, came to my attention recently, and I compared their contribution history to that of Antila, and I noticed a lot of overlap in terms of the chronology and interests. I'm convinced that there's too much similarity to be coincidence, but given my close involvement with the histories of the two previous socks, I'd like a second pair of eyes to go over this.

Evidence I suggest going through the contribs and looking at trends, starting with the earliest contribs. Here are the first 500 edits by each account: Tatupiplu and Antila.

I realise that the socks are all stale, but I'm requesting checkuser in hopes that the records might help, or indeed in case there are other accounts that might be active or sleeping. Girth Summit  (blether) 09:23, 4 January 2021 (UTC)
 * Tatupiplu was created on 20 Nov 2019, but only edited sporadically until 5 Jan (shortly after Andrew Base was blocked) when they become much more active.
 * Antila was created on 9 Jan 2020, and started editing immediately.
 * Antila starts using Shortdesc Helper: 14 Jan
 * Tatupiplu starts using Shortdesc Helper: 17 Jan
 * (Note: Andrew Base's editing in December included a lot of use of Shortdesc Helper, as seen here)
 * Tatupiplu starts using Twinkle on 25 January
 * Antila starts using Twinkle on 31 Jan (having not edited since 23 Jan)
 * At the same time, both accounts become very interested in deletion processes. (Antila uses the AfD process, Tatupiplu uses CSD tags.)
 * Neither edit much throughout most of February (Antila returns on 29 Feb, Tatupiplu on 3 March)
 * Antila begins the CVUA training course on 30 March; this is completed on on 27 April.
 * The same day (27 April), Tatupiplu requests NPP School training at Atsme's talk. This is accepted and the training page was set up, but it was hatted for lack of engagement.
 * Antila requests NPP school training at Barkeep49's talk 1 June (diff), but he wasn't taking on new students at the time. Antila remains active until the end of June, after which their activity tails off, with only sporadic editing until they are blocked on 26 September.
 * Tatupiplu's activity is also lower during June/July, but picks up in August. Since then they have requested NPP school training at Barkeep49's talk (diff) and at Rosguill's talk (diff, and they have made multiple requests for the NPP Reviewer (XTools).
 * One other similarity between all the accounts is that they use CluebotIII to archive their talk pages. That's not remarkable - I do too - but it seems odd that Tatupiplu's first edit to their own talk page diff was to set up CluebotIII archiving - that's not something most new users do.
 * The same day (27 April), Tatupiplu requests NPP School training at Atsme's talk. This is accepted and the training page was set up, but it was hatted for lack of engagement.
 * Antila requests NPP school training at Barkeep49's talk 1 June (diff), but he wasn't taking on new students at the time. Antila remains active until the end of June, after which their activity tails off, with only sporadic editing until they are blocked on 26 September.
 * Tatupiplu's activity is also lower during June/July, but picks up in August. Since then they have requested NPP school training at Barkeep49's talk (diff) and at Rosguill's talk (diff, and they have made multiple requests for the NPP Reviewer (XTools).
 * One other similarity between all the accounts is that they use CluebotIII to archive their talk pages. That's not remarkable - I do too - but it seems odd that Tatupiplu's first edit to their own talk page diff was to set up CluebotIII archiving - that's not something most new users do.
 * One other similarity between all the accounts is that they use CluebotIII to archive their talk pages. That's not remarkable - I do too - but it seems odd that Tatupiplu's first edit to their own talk page diff was to set up CluebotIII archiving - that's not something most new users do.
 * One other similarity between all the accounts is that they use CluebotIII to archive their talk pages. That's not remarkable - I do too - but it seems odd that Tatupiplu's first edit to their own talk page diff was to set up CluebotIII archiving - that's not something most new users do.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Hi,

I learned about this SPI report today. I'll try to clear most of the misunderstandings written above.


 * I joined Wikipedia after learning about a subject from my city through one of the news articles. I started editing a few mentions in wiki articles and tried creating a page, but I did not know any of the Wikipedia guidelines. And after learning the basics, I realized that the subject does not qualify yet.


 * As a newcomer, I was very excited about having a Wikipedia account, and the first month, I spent a lot of time and made many edits. After learning how Wikipedia works, I stopped making edits aggressively and contributed the smallest. And I wanted to contribute and help around. I usually monitor for spammy articles in the AFC, mark pages for CSD, and rarely vote in AFD. Sometimes, I click on the random article button and look for pages with missing shortdesc and try adding it to make it complete

And I think I learned about Twinkle from ToBeFree, but I was still unsure of how to use it for tagging CSD. Initially, I made mistakes like writing CSD logs manually, resulting in getting my NPP and other permissions revoked. But I clarified it on my talk page, and since then, I have tried to enroll in the NPP school, but I was not getting enough time. I was also later infected with COVID, and even now, I'm not getting much time to edit or contribute. But I try my best, and you can see me active in AFC and other places like IRC, helping people every day.
 * I learned about all these tools from other editors but mainly through the IRC chat room. I'm most active there. If you ask people like ToBeFree, you will know better


 * After getting my permissions revoked, I tried hard to learn from the guidelines and simultaneously approached every teacher listed on the NPPSchool page as nobody was available to train. I'm continually trying to learn things.

Refer for my interactions with Atsme and Rosguill: User talk:Tatupiplu/Archive 1#Rescinding reviewer permissions (16 April 2020)

Also, there was very little internet availability here, and we had multiple lockdowns and sealed down in my city. I also had notified Astme about my problem
 * I had not been active much during April - July because I was infected with COVID. I had also updated this on my talk page.

-

I'm not related to this user, and I don't have any other account on Wikipedia. I have never violated any other rule, and I'm regularly trying to help. The reason why I wanted more rights is to expand my help on different parts of Wikipedia. I'm an AFC reviewer, and I contribute at least two times a week. And using permission, I take responsible decisions, and if I have other roles, I'd still do the same.

And if you feel there is a need to verify my identity, I can do that to any one of the admins here if required.

If you have any questions, please post them below. I'll answer them :) - Tatupiplu'talk 10:31, 9 January 2021 (UTC)

Tagging everyone, sorry for the late response :,  ,

Clerk, CheckUser, and/or patrolling admin comments

 * All accounts I can compare to are . This will need a behavioral investigation...  ~Oshwah~  (talk) (contribs)   17:34, 4 January 2021 (UTC)
 * , I’d already ran a check on this previously when someone else reached out to me. KR10 has a cu-wiki page and is probably one of the more well documented socks for a few reasons. I’m also familiar with him based on memory so can talk on that.This account has been checked multiple times, and based on the CU log has been in a different country each time. I’d agree likely a sock of someone, but I haven’t been convinced on KR10 as there are some differences, but I’m also not opposed to a block if someone feels it’s justified. The UA data for this case is all over the place, so we don’t get much there, and the IP data is suspect based on my comments above. KR10 has not previously used proxies. Use your judgement, but I thought the CU findings could provide context. TonyBallioni (talk) 21:52, 4 January 2021 (UTC)
 * After reviewing the technical evidence, I'm prepared to say Tatupiplu is probably ❌ to Knightrises10. While I understand the suspicion, it looks to me like the behavioral similarities are coincidental. Absent additional evidence that Tatupiplu is the sock of some other master, I don't think there is sufficient evidence to block at this time. Closing without action. Mz7 (talk) 17:51, 27 January 2021 (UTC)