Wikipedia:Sockpuppet investigations/LittleMemories/Archive

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Tognella99 was blocked a couple days ago after getting into an edit war over David Prowse's cause of death, insisting contrary to policy that the article must retain (rather than remove) contentious material. See edit summaries of both Tognella99 and the IP insisting on restoring the material. Note also that one-week-old user Tognella99 seems to have a vendetta against and myself (see their edit summaries on the article and contribs at ANEW, for example) and that the IP's edit summary here is clearly imitating mine. Ivanvector (Talk/Edits) 12:42, 2 January 2021 (UTC)

Also note the common interest between the account and the IP range in biographies of individuals who died this year, and COVID-19 in general. Ivanvector (Talk/Edits) 12:48, 2 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Note: IP 2001:b07:646c:244e:45fc:9ebd:7c9f:ea7d self-confirmed identiy. Victor Schmidt (talk) 14:40, 2 January 2021 (UTC)
 * The IP has not only self-confirmed their IP socking, but The 2001:B07:646C:244E:0:0:0:0/64 range shows no edits that are not directly reflective of Tognella99's editing so a rangeblock on the /64 would appear to have no collateral damage. Given their professed intention to keep socking, a long-term rangeblock with account creation prevented would seem in order. [[User:Eggishorn|Eggishorn ]] (talk) (contrib) 16:53, 2 January 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * per : please check Tognella99 for past accounts. I'm involved or I would check myself. I know we can't reveal any details about the IP. Ivanvector (Talk/Edits) 19:02, 2 January 2021 (UTC)
 * No other accounts that I could find.  ~Oshwah~  (talk) (contribs)   20:21, 2 January 2021 (UTC)
 * Well then it seems we're done here. Closing. Ivanvector (Talk/Edits) 21:05, 2 January 2021 (UTC)

Suspected sockpuppets

 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Immediately returns to make identical changes to David Prowse. Contributions show same pattern of obsession with labeling deaths as Covid-19 with poor or absent evidence. [[User:Eggishorn|Eggishorn ]] (talk) (contrib) 16:59, 3 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Also found and ✅:
 * Both socks will be bagged and tagged. Renaming SPI report to be under the correct master account...  ~Oshwah~  (talk) (contribs)   17:07, 3 January 2021 (UTC)
 * All accounts are indefinitely blocked. This SPI can be closed...  ~Oshwah~  (talk) (contribs)   17:12, 3 January 2021 (UTC)
 * Both socks will be bagged and tagged. Renaming SPI report to be under the correct master account...  ~Oshwah~  (talk) (contribs)   17:07, 3 January 2021 (UTC)
 * All accounts are indefinitely blocked. This SPI can be closed...  ~Oshwah~  (talk) (contribs)   17:12, 3 January 2021 (UTC)


 * The list of sockpuppets above originally included LittleMemories, and this case was filed under Tognella99. It has since been moved under LittleMemories, which is why the list is empty. Mz7 (talk) 02:03, 7 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

on David Prowse complete with an edit summary of "QUACK!" [[User:Eggishorn|Eggishorn ]] (talk) (contrib) 17:53, 8 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. This SPI can be closed; already blocked...  ~Oshwah~  (talk) (contribs)   01:42, 9 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

to David Prowse. Requesting Checkuser since there's sometimes a second or third one that they're building up to autoconfirmed when they reveal one. [[User:Eggishorn|Eggishorn ]] (talk) (contrib) 16:30, 10 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus:
 * , closing. Mz7 (talk) 07:09, 12 January 2021 (UTC)
 * , closing. Mz7 (talk) 07:09, 12 January 2021 (UTC)
 * , closing. Mz7 (talk) 07:09, 12 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

, same sock channel [[User:Eggishorn|Eggishorn ]] (talk) (contrib) 23:18, 11 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * See above. Closing. Mz7 (talk) 07:09, 12 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

LittleMemories (as Tognella99) admitted back in January that they were at the time on this IP range. They clearly still are, as they've come back again to disrupt the David Prowse article over his cause of death. I'm involved, but see below. Ivanvector (Talk/Edits) 01:23, 4 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * to check the /64 range for collateral, and block for a good long while.
 * Also,, you blocked one discrete IP in this range indefinitely . Did you mean to do that? Ivanvector (Talk/Edits) 01:23, 4 April 2021 (UTC)
 * Yes, for flagrant, defiant abuse per . &mdash;  JGHowes   talk  02:11, 4 April 2021 (UTC)
 * understood, and thanks for the block (your link is to my talk page), but IPs shouldn't be blocked indefinitely (WP:IPBLENGTH), and blocking a discrete IPv6 address instead of the /64 range is generally completely ineffective because of how ISPs assign IPv6 addresses to customers (see WP:/64 for a good explainer). Ivanvector (Talk/Edits) 03:37, 4 April 2021 (UTC)


 * IP range blocked, no further action required. ST47 (talk) 00:15, 5 April 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Back again (see all three contribs, or history at David Prowse). Semiprotection would be welcome. Ivanvector's squirrel (trees/nuts) 12:15, 7 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Stale IP. Cabayi (talk) 17:46, 26 April 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Back again, compare the last reported IP with this one. Please semiprotect this time. Ivanvector's squirrel (trees/nuts) 14:21, 10 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I agree that this is them. Please block the IP for two weeks and semiprotect the page because of the persistent socking and BLP violations. I'll leave the protection duration up to you, but given that this has been going on for about half a year, a few months seem warranted. --Blablubbs&#124;talk 18:01, 10 June 2021 (UTC)
 * Blocked, page protected. Closing. GeneralNotability (talk) 00:01, 11 June 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

User created in March but no edits until today when a series of innocuous but unnecessary one-word edits made to Italian destroyer Bersagliere (1938) to WP:GAME autoconfirmed status and immediately  for David Prowse  with a misleading edit summary. This has been the sockpuppeteers's hobby-horse. Request checkuser to look for dormant socks, which are usually a problem with this case. Eggishorn (talk) (contrib) 19:11, 25 July 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This seems highly anatine, and I don't see anything useful in the archives to compare to, so blocking on behavior without need of CU. Also,, I'm upgrading your page protection on David Prowse to ECP. -- RoySmith (talk) 19:24, 25 July 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

See Sockpuppet_investigations/LittleMemories/Archive Exactly the same editing history to Italian destroyer Lanciere (1938) in order to WP:GAME autoconfirmed status before vandalising my RfC closure log and the last edit I made to made to Cow urine, both with the edit summary: "Rollbacked edit by blocked or banned user". (FTR, I am not blocked or banned.) Requesting Checkuser because this puppeteer has a history of multiple socks. Eggishorn (talk) (contrib) 19:52, 4 August 2021 (UTC)
 * This puppet has now been blocked by (Thanks!) but as mentioned, they are persistent and there is a possibility of others waiting. Thanks in advance.  Eggishorn  (talk) (contrib) 20:17, 4 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Ammorennau and are both  based on data from past checks, as well as being bloody obvious. Both are already blocked, and no other accounts seen at this time. Ivanvector (Talk/Edits) 21:24, 4 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Page protection expired two days ago and another new IP is restoring the same false cause of death on David Prowse again, with the same edit summary (Rollback, reverted vandalism) as past socks have used. IP appears to be a webhost on the /27 though WHOIS gives /23. Ivanvector's squirrel (trees/nuts) 11:57, 13 September 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I gave the IP a week off for evasion. This makes me think that the provider (xstream) also does B2B and residential connections, so I'm not comfortable placing a webhostblock; I haven't run a very deep proxy check at this time though, so no objections to someone else rangeblocking if they're confident it's a webhost – I'll leave this open for a day or two. --Blablubbs (talk) 12:14, 13 September 2021 (UTC)
 * My evidence for webhost is Robtex: there are a series of DNS records here for unrelated domains, although I see now that I'm looking again that they're all subdomains of the same one or two. Ivanvector's squirrel (trees/nuts) 12:19, 13 September 2021 (UTC)
 * I agree that it's not a normal residential range or IP (cf. ) – my best guess is that it's a workplace connection, maybe on a mixed range. For what it's worth, I've semi'd the page for 6 months given the long history of disruption and immediate resumption after ECP had expired. Will raise to ECP if autoconfirmed socks start showing up again. --Blablubbs (talk) 14:08, 13 September 2021 (UTC)
 * Looks like everything's done here, closing. -- RoySmith (talk) 14:14, 24 September 2021 (UTC)