Wikipedia:Sockpuppet investigations/Lascava/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Gerleondo, Anicolod and Tokjamak accounts have been created on 25 August between 7:33 and 7:41 on en.wikiversity, en.wikivoyage and eml.wiki respectively and after a period of dormancy reactivated all of them between 17 and 18 September, all of them did only 2 edits each and all of them related to pronounciation of italian names. Tokjamak, Mongales, Sosze and Sinedimo accounts have been created on 7 September between 13:50 and 13:59, on en.wikibooks, en.wikinews, en.wikisource and en.wikivoyage. All of them reactivated on 25 September and followed the same pattern of the previous three i.e. 2 edits each about italian names pronounciation. Timing and behavioural data suggest a common origin. Other accounts from the same author are likely. Horst Hof (talk) 12:34, 22 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - TonyBallioni (talk) 20:41, 22 October 2018 (UTC)
 * The following accounts are ✅ to each other:
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)
 * The accounts are . Could a clerk also sort out what the correct case name is here. Thanks. TonyBallioni (talk) 21:05, 22 October 2018 (UTC)


 * Tagging and closing. Sir Sputnik (talk) 04:09, 23 October 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

going against mine (see ) as in all other confirmed cases (see for example )  イヴァン スクルージ 九十八 （会話） 21:04, 24 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Please compare to previous socks and check for sleepers. Thanks, GABgab 22:22, 24 November 2018 (UTC)
 * Different device, but on the same range as all the other socks, and it's a DUCK so I'm going to go ahead and block behaviorally. . Closing. TonyBallioni (talk) 22:23, 24 November 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This edit on IPA transription is pretty identical to this  of Chraphee and to this other made by Mubessa. Both Chraphee and Mubessa are confirmed socks of Lascava. The edit on Pompeo Marchesi is also commented (see edit comment) with an aggressive sentence. This edit of Tredesdelujsmspontecingolirodench is identical to this other  made by Sosze. Again, Sosze is a confirmed sock of Lascava. A check seems appropiated. Horst Hof (talk) 10:50, 26 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * is to the following two accounts that are ✅ to one another and technically ❌ to the master:
 * appears ❌ technically to the named master and the above group.
 * appears ❌ to all of the above.
 * Finally, as to all the findings here. I've CU blocked the confirmed/likely group. A leave up to a clerk how/if to tag. TonyBallioni (talk) 01:20, 27 November 2018 (UTC)
 * appears ❌ to all of the above.
 * Finally, as to all the findings here. I've CU blocked the confirmed/likely group. A leave up to a clerk how/if to tag. TonyBallioni (talk) 01:20, 27 November 2018 (UTC)


 * Closing this for now. If the unblocked accounts start acting like this sock farm, you can refile. TonyBallioni (talk) 16:48, 25 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Obviously a sock of Sosze (confirmed sock of Lascava), same edits on the same pages. The username also suggests a close relation. Behavioural analysis would also suggest a relation to Ragaricus' case, same subject (italian IPA), same modalities, same hostinate determination to restore their preferred version without providing relevant sources. Horst Hof (talk) 10:04, 22 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are technically ✅ to one another and to the batch above. I'm calling them proven behaviorally though.
 * All accounts are . For future clerks/CUs: technically I doubt we're going to be able to confirm any future reports to this case, but CU is useful for sleepers. Closing. TonyBallioni (talk) 04:40, 23 February 2019 (UTC)
 * All accounts are . For future clerks/CUs: technically I doubt we're going to be able to confirm any future reports to this case, but CU is useful for sleepers. Closing. TonyBallioni (talk) 04:40, 23 February 2019 (UTC)
 * All accounts are . For future clerks/CUs: technically I doubt we're going to be able to confirm any future reports to this case, but CU is useful for sleepers. Closing. TonyBallioni (talk) 04:40, 23 February 2019 (UTC)
 * All accounts are . For future clerks/CUs: technically I doubt we're going to be able to confirm any future reports to this case, but CU is useful for sleepers. Closing. TonyBallioni (talk) 04:40, 23 February 2019 (UTC)
 * All accounts are . For future clerks/CUs: technically I doubt we're going to be able to confirm any future reports to this case, but CU is useful for sleepers. Closing. TonyBallioni (talk) 04:40, 23 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Yet another wave of possible socks targeting italian IPA on the same articles already object of the attention of the confirmed socks belonging to this group. Horst Hof (talk) 16:23, 25 February 2019 (UTC) Horst Hof (talk) 16:23, 25 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Yeah, all of these are socks. As I said, the technical data here isn't going to tie them all together: every batch is from a different country, though they have shared the same device of late. I've blocked all these accounts and any sleepers, but not worth listing them all since the technical data will be new next time around. TonyBallioni (talk) 16:46, 25 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

More possible socks of this group. Accounts created today on wikiquote and wikisource, usernames are very similar to User:AicsAics and User:Scimaltovil, already confirmed socks of this farm. Behaviour analysis is also requested in case technical details would find no relation. Horst Hof (talk) 09:41, 4 March 2019 (UTC) Horst Hof (talk) 09:41, 4 March 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - TonyBallioni (talk) 16:27, 4 March 2019 (UTC)
 * New day, new country. Same device though. The two accounts above are ✅ to each other and to . I'll get a steward to do a check on loginwiki since they're creating xwiki to avoid CU here. TonyBallioni (talk) 16:31, 4 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Exactly the same edits as mastersock Lascava. Compare this with this and this with this. A check for more undetected socks may also prove useful. Horst Hof (talk) 10:04, 18 March 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Let's see what we get out of this.  QEDK  ( 後  ☕  桜 ) 05:54, 19 March 2019 (UTC)
 * - TonyBallioni (talk) 02:53, 20 March 2019 (UTC)
 * very little data and geolocation here is useless, but they are on a similar device to ones previously used. I've . Closing. TonyBallioni (talk) 02:56, 20 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

These three accounts have been created on 20 april 2019 between 10:33 and 10:54, all of them targeted (among a few other edits) italian IPA transcriptions, in particular at the articles Vigevano, Lamezia Terme, Peschiera del Garda and Quartu Sant'Elena. The username of the second suspected account (Tqcigyrfd) is the exact reversal of the first one (Dfrygicqt). Specifically, the target of the edits seem to be variously exchanging the symbols 'ɛ' and 'e', exactly as the sockmaster Lascava did here and some of their sockpuppets as well (see here for example). As the sockpuppeteer recently became more cautious, and made use of proxy servers, I would ask to consider behavioural data also. Checkuser may prove useful to discover dormant accounts instead. Horst Hof (talk) 09:59, 29 April 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Please confirm and check for sleepers. &#8208;&#8208;1997kB (talk) 16:14, 29 April 2019 (UTC)
 * The first two accounts are ✅ to each other. . Two web host ranges blocked. —DoRD (talk)​ 16:47, 29 April 2019 (UTC)
 * Closing. Not sure Vetjan is the same person, so not blocking. If they become active again, feel free to report. TonyBallioni (talk) 05:23, 30 April 2019 (UTC)

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Three recently-created accounts, all went directly to Codogné, where there is a requested move discussion (initiated by the undersigned). Oenibahbib is very unlikely to be a new user, given the deleted contributions.

I'm out of my depth here, but this seems to be part of a long-standing pattern of disruption on both English and Italian Wikipedias relating to Italian accents and pronunciation (please see e.g., Special:Contributions/151.64.128.0/17). Comments by experienced it.wp admins Special:Diff/1029751357 and here suggest that this may be connected with Foundation-Global-banned editor MaoMio (who has no edits here). I don't know if that editor is connected to the also office-banned sockmaster Lascava, who seems to have edited in the same area.

Check-user requested in the hope that it may cast some light. Justlettersandnumbers (talk) 12:15, 2 July 2021 (UTC)
 * ,, can you comment on any of this? Thank you, Justlettersandnumbers (talk) 09:57, 7 July 2021 (UTC)
 * Also ping, as I see on his talk-page that he too has had some interaction with this user (as Turbetuvb, and probably also as an IP). Justlettersandnumbers (talk) 14:14, 7 July 2021 (UTC)
 * Update: Tolentini has been globally locked by Vituzzu as a Maomio sock. I've indeffed Oenibahbib as an unmistakeable sock of Lascava (WP:BEANS applies). I assume he should be moved to that investigation, possibly with the rest of this. Justlettersandnumbers (talk) 12:27, 12 July 2021 (UTC)
 * Turns out Vituzzu had g-locked Oenibahbib as a Maomio sock too. Justlettersandnumbers (talk) 13:07, 12 July 2021 (UTC)
 * Update I've indeffed Lacutengoduva per WP:DUCK and per comment from . Would some kind clerk please merge this into Sockpuppet investigations/Lascava per this discussion? Thank you! Courtesy ping to . Thanks all round, Justlettersandnumbers (talk) 21:43, 24 July 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The suspected master account was renamed from "Tsistunaɡiska" to "Lacutengoduva" while this SPI case was open, so I have moved the case accordingly. Mz7 (talk) 03:58, 7 July 2021 (UTC)


 * . All three accounts edit from the same country, but other than that there appears to be no obvious technical relation. . I'm leaving the case open because I'm not familiar with that WMF-banned user mentioned above. Mz7 (talk) 04:06, 7 July 2021 (UTC)


 * From what and how they write, the duck test seems clear. As a side note, the range 151.64.** has been used in the past by Lascava/MaoMio ( data from CUs on it.wiki ). -- Ruthven ( msg ) 10:28, 7 July 2021 (UTC)
 * Merged to Lascava based on the locks that were applied here. Closing. GeneralNotability (talk) 01:34, 22 September 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

In May 2021, account ARoseWolf was created on *Commons* by renaming the existing account Tsistunagiska. In July 2021, User:Tsistunaɡiska on enwiki was renamed to User:Lacutengoduva, which was soon globally locked as a sockpuppet of WMF banned Maomio. ♟♙ (talk) 17:49, 21 September 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I am most definitely not a sockpuppet of anyone. I created an account in August of 2020 under then name of Tsistunagiska on both the Cherokee Wikipedia and on English Wikipedia. For reason's that are personal but detailed on my user page I changed my account to ARoseWolf in May of 2021. The change user name was done by on May 27th. The very next day month a new account was created using Tsistunagiska. Someone brought it to my attention and I made mention of it on 's talk page (link to conversation). I did not comment during the sockpuppet investigation because it made no sense to do so as I was certain it would be worked out. I am only commenting here to set the record straight and because my user name was specifically implicated. I have never had any other account on Wikipedia other than this account and I will never have another account. I celebrated my user name change with those on my talk page in late May (link to conversation). -- A Rose Wolf  19:00, 21 September 2021 (UTC)
 * blocked the user above because they used my former user name and that is when they changed it . -- A Rose Wolf  18:56, 21 September 2021 (UTC)
 * This is most likely just purely coincidence. ARoseWolf gave a very good explanation above. I'm also fairly sure that if a user gets their username changed, it can then be used for a new account again. Just because they changed their username from Tsistunagiska to ARoseWolf and then another user made the account Tsistunagiska, got their username changed, and vandalized doesn't mean ARoseWolf is automatically a sock. ― Blaze The WolfTalkBlaze Wolf#0001 19:12, 21 September 2021 (UTC)
 * Also I just thought of this but, if Tsistunagiska was renamed to ARoseWolf, it's impossible for Tsistunagiska to have the name changed to Lacutengoduva because the name was already changed, most likely meaning that it's a completely different account. Also, are we sure the user is actually Tsistunagiska and not somehow a very similar looking username with different characters that look similar? ― Blaze The WolfTalkBlaze Wolf#0001 19:15, 21 September 2021 (UTC)

Upon looking closer, they are completely different users, as evidenced by User talk:Lacutengoduva. ― Blaze The WolfTalkBlaze Wolf#0001 19:19, 21 September 2021 (UTC)


 * Figured I'd elaborate a bit further. In the arial font (or whatever font is used basically everywhere on Wikipedia) the g Tsistunaɡiska appears exactly the same as the g in Tsistunagiska. However, the g in Tsistunaɡiska is not actually a g, identified by a character identifier as  (ɡ). This proves they are different users further. ― Blaze The WolfTalkBlaze Wolf#0001 19:54, 21 September 2021 (UTC)
 * Since it was removed from the nominators talk page, where I had hoped to get the answer quietly, with an edit summary saying to keep discussion here I would like to know., why wasn't I notified about this after it was filed? Thank you Blaze for trying to help determine what happened with the user names. I am sure a clerk or admin will be able to clear this up. I didn't want to turn it into any more of a deal than it had to be. I laid out the events from my perspective above. -- A Rose Wolf  20:01, 21 September 2021 (UTC)
 * EnPassant stated the reason why you weren't notified and this is because it isn't actually required. ― Blaze The WolfTalkBlaze Wolf#0001 20:07, 21 September 2021 (UTC)
 * A simple look at my talk page, contributions and history would reveal all that I have brought up above and one could clearly see we are not the same person. I just think it would have been a kind gesture in good faith to notify me. Regardless it isn't mandatory, somehow I missed that, so whatever. It will get cleared up. I'll leave it to an authority. -- A Rose Wolf  — Preceding undated comment added 20:15, 21 September 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * , got any evidence other than the username? Based on the talk page of Lacutengoduva, I suspect the other Tsistunaɡiska (the one that isn't ARoseWolf with the funny unicode g) was intentional impersonation/trolling/what-have-you on the part of an LTA. GeneralNotability (talk) 01:38, 22 September 2021 (UTC)
 * this obviously isn't Lascava/Maomio. I'm closing the case without action. (GN, don't mean to step on your toes, but there's just no way this is the LTA in question, without even looking at CU.) TonyBallioni (talk) 01:44, 22 September 2021 (UTC)