Wikipedia:Sockpuppet investigations/LogAntiLog/Archive

30 April 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The Chiascuro–sockmaster link was noted [//en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/The_Librarian_at_Terminus&oldid=563184625 here] (where he was named as an Elance contractor) and [//en.wikipedia.org/w/index.php?title=Talk:I_Do_Now_I_Don%27t&diff=next&oldid=586281155 here] by Logical Cowboy in late 2013, after a COI issue relating the sockmaster to a certain Elance account. Soon after, he disappeared.

In 2013, Chiascuro and the sockmaster had both maintained Monika Steiner, not a well known artist: [//en.wikipedia.org/w/index.php?title=Monika_Steiner&diff=561448628&oldid=561447915], [//en.wikipedia.org/w/index.php?title=Monika_Steiner&diff=585675862&oldid=583488657]

Chiascuro's December 13, 2013 SPI case was declined or dropped. He remains apparently unsanctioned.

This year, the same Elance contractor accepted another job to remove COI tag from Lorna Taylor on March 27. The contract named Jytdog as an obstacle to removing the COI tag. On April 2, John keith 00 made this edit speaking directly to Jytdog: [//en.wikipedia.org/w/index.php?title=Talk:Lorna_Taylor&diff=prev&oldid=654662056] which appears to be answering the contract. Brianhe (talk) 01:19, 30 April 2015 (UTC)

There is a curious connection between John keith 00 and another recently blocked sockpuppet account at an article recently created by the sock: [//en.wikipedia.org/w/index.php?title=Metropolitan_School_Of_Business_Management&diff=654811908&oldid=654656622] This may be too tenuous to include in this SPI. — Preceding unsigned comment added by Brianhe (talk • contribs) 01:30, 30 April 2015 (UTC)

I replied via private email to the clerk with Elance evidence as requested. It links Wikipedia activity for The Librarian, LogAntiLog, and John keith, to a single Elance contractor. Brianhe (talk) 13:22, 30 April 2015 (UTC)


 * , the Chiascuro–sockmaster link was noted in the original 13 December 2013 SPI. I can't provide a valid diff because apparently the sandbox was deleted, but Logical Cowboy said one of them was editing in one another's sandbox. Logical Cowboy also [//en.wikipedia.org/w/index.php?title=Talk:I_Do_Now_I_Don%27t&diff=586283797&oldid=586281155 said] he had Elance link but I can't speak for him what exactly it was. — Brianhe (talk) 17:55, 30 April 2015 (UTC)


 * Several of these accounts are associated with a screenshot of David_Carter_(entrepreneur), displayed as a work sample in the Elance contractor's profile. Details sent to ckerk via email. — Brianhe (talk) 18:45, 30 April 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I was intended to do something in regard to these accounts after I returned from a trip next week, so my apologies for not raising this earlier. I can't help much, as I don't know how much internet access I'll have over the next week. Looking at edits, we have a fair amount of crossover between a small group of editors who have very few edits each - too few to expect this level of crossover in editing. In particular:


 * (created Ken Lazer; TraceMyIP)
 * (created Holly Schapker; edited TraceMyIP)
 * (edited Holly Schapker; Ken Lazer; TraceMyIP; Lorna Taylor; Kati Agócs; Metropolitan School Of Business Management)
 * (edited Lorna Taylor; TraceMyIP; Kati Agócs)
 * (created Metropolitan School Of Business Management)
 * Kati Agócs

LogAntiLog stands out as having the most edits, so I was unsure, however LogAntiLog removed the COI tag from Lorna Taylor just after someone was hired to do so on Elance, and has the additional crossover of two articles. NIM562 is currently CU blocked per this SPI.

Other suspected accounts, based on off-wiki evidence, are:



There is no on-wiki crossover with these, other than following the same pattern of promotional articles created in mainspace in a single edit. Off-wiki evidence risks outing, so I'd rather not post anything here, but I can email what I have to a CU.

Finally, I am not aware of any connection between these accounts and The Librarian at Terminus, other than both doing paid editing. There may be one, but it isn't something I can comment on. - Bilby (talk) 12:07, 30 April 2015 (UTC)
 * I have emailed the link of the Elance Ad which requests that the COI tag on the Lorna Taylor be removed and evidence that connects User:LogAntiLog to this.Socking has indisputably taken place and further added Djamourou.Pharaoh of the Wizards (talk) 04:35, 3 May 2015 (UTC)


 * Just to clarify the David Carter connection - the same client on Elance has hired about six different editors to work on the David Carter page. The Librarian at Terminus was one of them, but that job was some time back. I wouldn't be inclined to draw a connection based on that particular article, given the number of different paid editors who have worked on it. - Bilby (talk) 12:58, 3 May 2015 (UTC)

I got the notification that I am being suspected of some sock puppetry, I don't understand I didn't have any account other than my this account, I have been using this for years now, and I am well aware of sock puppetry consequences why would I risk my contributions and hundreds of hours of my work here. I am honestly telling you sir I have no other account. @ntiLog (talk) 19:41, 3 May 2015 (UTC)
 * We know that you advertise yourself at elance.com as editor who creates Wikipedia pages. Are you aware that undisclosed paid editing is contrary to the Wikipedia terms of use?  Vanjagenije  (talk)  20:15, 3 May 2015 (UTC)
 * I spent the last night searching over this issue as to why I am being suspected of both sock puppetry and paid editing, and I know now well what has happened. The account that you are mentioning has been registered in my name, the picture is mine, name is mine but I don't operate it in any way whatsoever. Now that I have asked my office colleagues that I came to know what has been happening, My colleagues (two of them) are operating that account as well as multiple mentioned accounts on Wikipedia. In early January this year we decided to write article through Elance (not Wikipedia article) but general articles, technical documents etc, since they had other accounts registered by their name on Elance so I have to create that account under my name, if you can somehow check the history of that account it was made only for technical documentation and general article writing. But since we didn't get much out of it so I left it also for some personal reasons. Since then I don't know anything about that account and now that I am trying to log in elance account the password has been changed by them. My second mistake is that I tend to not logout from my wiki account on my PC, as I feel it cumbersome to log in again and again, now that I see it has been misused by my colleagues e.g. I never made this edit myself, just check my history I never indulged in this area of Wikipedia of commenting on article for deletion, never did I removed any tag let alone COI(as in Lorna taylor case)  as on personal note I feel that thing too controversial to indulge in, I personally prefer to work on stopping vandalism rather indulging in long discussions and controversial edits and removal this has been my goal to avoid unnecessary edits and to concentrate only on fighting vandalism that is what is reflected in my 4000+ contributions.My this edit was done by me in early 2014, I don't know if some one inserted a wiki-link after that than what it has to do with me, same goes for this which is a vandalism revert, the last remaining this one I did that myself, my colleague asked me to fix that which I did because it seemed legit without knowing that they have any financial reward for that. I think I explained my edits crossover and Elance account. My mistake is that I asked a lot of people around myself to contribute to Wikipedia especially to Pakistan related articles which I do myself, not knowing they would be using that skill for any financial benefit. My second mistake was that I was not careful with my account on Wikipedia so that it was used unauthorized by people when I was not on my seat. Beyond that I have nothing on my side, the concern you people show is legit I appreciate that but believe me sir I have no part in paid editing plus sock puppetry, my edits record show that I have upheld Wiki principle or at least tried to, none of the page I created is promotional, major chunk of my edits are reverting vandalism and reviewing articles that wait review. I have contacted Elance for that account closure hoping to get a proper response from them, rest I have no idea of how many accounts has been created by them. I don't wan't to get blocked for the mistake that I didn't do, surely I showed irresponsibility by not logging out when not using. Let me know if I can be of any help in this regard.  @ntiLog (talk) 09:10, 4 May 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Can you, plese, provide links to those Elance pages?
 * Can you, please, explain the link between NIM562 and the others? I really do not understand what does this prove.  Vanjagenije  (talk)  09:31, 30 April 2015 (UTC)
 * I received an e-mail from you with a links to Elance pages. Those links prove connection between and . I don't see any evidence that he is  the same as . How do you know that  is the same Elance user as ? Also, you cited this comment by  as evidence that  is connected to, but I can't find a job titled "Fix Wikipedia Page" at Elance . Please, try to explain those connections.  Vanjagenije   (talk)  17:18, 30 April 2015 (UTC)


 * - - To compare  with . Evidence was e-mailed to me by Brianhe (it is private in nature, but I can send it to Checkuser if needed).  Vanjagenije   (talk)  20:20, 2 May 2015 (UTC)
 * Technical evidence :
 * I don't know
 * Stale:
 * I don't know
 * Stale:
 * I don't know
 * Stale:
 * I don't know
 * Stale:
 * I don't know
 * Stale:
 * I don't know
 * Stale:
 * Stale:

I advise following blocking policy accordingly. There's a couple other accounts that are on the same IP as one of the accounts, and the technical data lines up, but not the behavior, so I'm not listing them here. Keegan (talk) 07:44, 4 May 2015 (UTC)


 * I've blocked the above accounts based on the SPI findings and the comments by LogAntiLog. In the case of the LogAntiLog account, it seems that either the account has been compromised or the user has used sockpuppets to engaged in undisclosed paid editing. I've blocked on the SPI basis, but I think it would need to be shown that LogAntiLog has control of the account in order to unblock. In regard to archiving, LogAntiLog is the oldest account here if we ignore the stale ones, so perhaps this case is best archived under that account. - Bilby (talk) 05:07, 8 May 2015 (UTC)


 * An admin is needed to split this case to WP:SPI/LogAntiLog.  Vanjagenije  (talk)  17:43, 15 May 2015 (UTC)


 * It is moved now. Closing the case.  Vanjagenije  (talk)  00:07, 16 May 2015 (UTC)

16 May 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

User:Ameyoko is blocked here but uploaded two images on commons that are used in the recently created Christopher O'Malley (created by Estacion.72) and Aleratec (created by Decrecementofeliz). SmartSE (talk) 18:13, 16 May 2015 (UTC)


 * Both of these users are also interested in Grupo Vidanta - and   (admins only). SmartSE (talk) 18:16, 16 May 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * CheckUser says that the two accounts are ❌ to each other and Ameyoko but something doesn't smell right. This is going to be better resolved with behavioural evidence than relying on CU. — Preceding unsigned comment added by Callanecc (talk • contribs) 06:52, 18 May 2015 (UTC)
 * Closing the case with the two listed accounts blocked indefinitely as socks of LogAntiLog. This is based purely on behavioral evidence that I will share in private with clerks or checkusers who ask. Someguy1221 (talk) 04:29, 27 May 2015 (UTC)

24 July 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same Elance account has created Woodland Meadows. Details are at WP:COIN ([//en.wikipedia.org/w/index.php?title=Wikipedia:Conflict_of_interest/Noticeboard&diff=672925545&oldid=672921836 diff]). Please note earlier investigator stated "either the account has been compromised or the user has used sockpuppets to engaged in undisclosed paid editing" — it should be obvious at this point that the Elancer is in fact engaging in undisclosed paid editing on Wikipedia.

Added SPA USAABS. Brianhe (talk) 20:42, 24 July 2015 (UTC)

Added Boosbudge345. See [//en.wikipedia.org/w/index.php?title=User_talk:Micojack&diff=prev&oldid=665288052] and weird comment [//en.wikipedia.org/w/index.php?title=User_talk:Boosbudge345&action=history here]. Outing by other editor? Brianhe (talk) 22:26, 24 July 2015 (UTC)
 * Now I see, Boosbudge345 created Woodland Meadows and you deleted it on June 5. Then ShaheenPIA recreated on July 11. Brianhe (talk) 22:59, 24 July 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - to compare with LogAntiLog socks.  Vanjagenije   (talk)  00:45, 25 July 2015 (UTC)
 * - L Faraone  00:52, 26 July 2015 (UTC)
 * Boosbudge345, ShaheenPIA ✅. USAABS technically ❌. L Faraone  01:13, 26 July 2015 (UTC)
 * I've changed the status of this SPI because I think it was a simple omission by .--Bbb23 (talk) 13:56, 26 July 2015 (UTC)


 * ShaheenPIA and Boosbudge345 are blocked. No evidence is presented for USAABS anyway, so I'm closing this now.  Vanjagenije  (talk)  15:21, 26 July 2015 (UTC)

27 October 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

a confirmed sockpuppet was adding bfwa.in links.

https://en.wikipedia.org/wiki/User_talk:Arjayay/Archive_6#Help_understanding_External_link

https://en.wikipedia.org/wiki/User_talk:Krimuk90/Archive_16#Help_understanding_External_Link

I came across these pages after Liz did a search after my ANI report.

https://en.wikipedia.org/w/index.php?target=www.bfwa.in&title=Special%3ALinkSearch

Today i checked the details.

This case is older.

https://en.wikipedia.org/wiki/Wikipedia:Sockpuppet_investigations/Rikki233752/Archive The Avengers (talk) 16:02, 27 October 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This was already taken care of at Sockpuppet investigations/Rikki233752/Archive. Unless a merge of histories is being requested then this should be closed. Mkdw talk 20:32, 19 December 2015 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Alhamra912 and Dornepasso2 were both created on the same day, and followed the same editing path - first edits were to create one line user pages, followed by enough edits to get autoconfirmed, and then straight to creating promotional articles in sandboxes. Boondrubs12 came later, but otherwise followed the same path of removing the redlink on the userpage, and then promotional articles in the sandbox. All three have seemingly identical editing styles, down to near identical edit descriptions, and Boondrubs12 copied a page from Dornepasso2s sandbox to make it live (JustJunk - which has come up before as a paid editing job). The connections to LogAntiLog go back a bit further, but the behaviour and style matches other LogAntiLog socks. Bilby (talk) 23:41, 24 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . PLease, compare those three accounts.  Vanjagenije  (talk)  19:44, 18 March 2017 (UTC)
 * The following accounts are ✅ to each other:
 * Blocked.--Bbb23 (talk) 22:13, 18 March 2017 (UTC)
 * Tagged and closed.  Vanjagenije  (talk)  10:18, 19 March 2017 (UTC)
 * Blocked.--Bbb23 (talk) 22:13, 18 March 2017 (UTC)
 * Tagged and closed.  Vanjagenije  (talk)  10:18, 19 March 2017 (UTC)
 * Blocked.--Bbb23 (talk) 22:13, 18 March 2017 (UTC)
 * Tagged and closed.  Vanjagenije  (talk)  10:18, 19 March 2017 (UTC)
 * Blocked.--Bbb23 (talk) 22:13, 18 March 2017 (UTC)
 * Tagged and closed.  Vanjagenije  (talk)  10:18, 19 March 2017 (UTC)
 * Blocked.--Bbb23 (talk) 22:13, 18 March 2017 (UTC)
 * Tagged and closed.  Vanjagenije  (talk)  10:18, 19 March 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

First edit was to, which was previously edited by. Second edit was a creation of AND CO, which started as a sandbox creation of Berylenrol. Add to that the naming convention and I think we've got a sock. CHRISSY MAD ❯❯❯  ¯\_(ツ)_/¯  16:58, 1 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * See results below. Katietalk 19:30, 24 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Created article Eric Brass from sandbox of LogAntiLog sock OzarkCurt; compare and. Also appears to fit naming convention e.g. User:Ryratheon12, User:Boondrubs12, User:Clemgory12, and User:Servejoint12 most recently. Bri (talk) 03:21, 8 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * See results below. Katietalk 19:30, 24 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This account created ZipRecruiter.com which is listed on upwork as being taken by the same account of previous LAL socks. SmartSE (talk) 12:04, 12 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Sockpuppet investigations/DreamFactory/Archive might be relevant as well. They claimed to be a ZipRecruiter employee, but who knows. - Bri (talk) 21:38, 12 April 2017 (UTC)
 * Case closed.  Vanjagenije  (talk)  20:24, 24 April 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ along with Textsopal12 and Servejoint12 from the other two open SPIs. Blocked and tagged. Katietalk 19:27, 24 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Moved Stephen_Robert_Morse back to mainspace. Previously created by Dornepasso2. SmartSE (talk) 12:59, 21 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  19:36, 5 May 2017 (UTC)
 * . Katietalk 19:29, 24 April 2017 (UTC)
 * Closing.

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Recreated Eric Brass previously created by Textsopal12. SmartSE (talk) 07:19, 16 May 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  13:34, 16 May 2017 (UTC) — Berean Hunter   (talk)  17:54, 16 May 2017 (UTC)
 * - not only to compare the current sock to the others in the archive but also to compare to this case. Confirmed sock, Textsopal12's first edit was to create his sandbox with a draft for Pinar Yoldas. That is an article that was created by a confirmed sock (Kki8876) from the Alechkoist case.
 * ❌ to both cases.--Bbb23 (talk) 15:13, 16 May 2017 (UTC)
 * Indeffing based on behavior with suspect tag and closing.

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Apparent UPE on BLPs and companies.

Antenoels and Thepeacebone overlap on a clearly commissioned work: ,

Roland H Lester and Antenoels on another likely commissioned worj:,.

The filter logs here are also worth examining for UPE evidence.

Requesting CU to look for sleepers. TonyBallioni (talk) 17:41, 4 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

See also WP:COIN. ~Anachronist (talk) 19:03, 4 December 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Roland H Lester and Thepeacebone are ❌ to each other and to the master.
 * The following accounts are ✅ to each other, technically to the master, and behaviorally very likely:
 * Blocked and tagged the confirmed accounts.--Bbb23 (talk) 19:45, 4 December 2017 (UTC)
 * Closing. Sir Sputnik (talk) 18:00, 5 December 2017 (UTC)
 * Blocked and tagged the confirmed accounts.--Bbb23 (talk) 19:45, 4 December 2017 (UTC)
 * Closing. Sir Sputnik (talk) 18:00, 5 December 2017 (UTC)
 * Blocked and tagged the confirmed accounts.--Bbb23 (talk) 19:45, 4 December 2017 (UTC)
 * Closing. Sir Sputnik (talk) 18:00, 5 December 2017 (UTC)
 * Blocked and tagged the confirmed accounts.--Bbb23 (talk) 19:45, 4 December 2017 (UTC)
 * Closing. Sir Sputnik (talk) 18:00, 5 December 2017 (UTC)
 * Blocked and tagged the confirmed accounts.--Bbb23 (talk) 19:45, 4 December 2017 (UTC)
 * Closing. Sir Sputnik (talk) 18:00, 5 December 2017 (UTC)
 * Closing. Sir Sputnik (talk) 18:00, 5 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

ACTRIAL gaming and recreation of a nearly identical copy of Indoo.rs, which was originally created by the CU confirmed.

Its definitely good for a spam or TOU block regardless of the outcome, but asking for a check to determine if there are other accounts given the history of this farm. TonyBallioni (talk) 15:48, 18 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅ to the last batch in the archive blocked on December 4. No other accounts seen. Blocked and tagged. Closing.--Bbb23 (talk) 17:51, 18 December 2017 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

At least a UPE, but off-wiki evidence suggests a possible connection to this sockmaster. AC gaming with exactly ten edits to their sandbox before creating the mainspace article is also indicative that this isn't the account's first time here. Please email me for more details. Pahunkat (talk) 13:03, 16 October 2021 (UTC)


 * , please send the email to the paid queue and I'll take a look. GeneralNotability (talk) 17:43, 17 October 2021 (UTC)
 * Thanks, I've sent the email to the paid-en queue. emailed me earlier asking about this as well, so has the same information. Pahunkat (talk) 19:35, 17 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Ticket received (for future reference: 2021101710005351, paid queue), agreed that this appears to be LogAntiLog. Since CU has turned up sleepers in the past, check . GeneralNotability (talk) 01:05, 18 October 2021 (UTC)
 * to Timidpatch and each other:
 * (this one is lower-confidence due to a lack of contributions)
 * Timidpatch based on the paid-en email. All of the accounts found via CU show similar UPE-like behavior to Timidpatch, but I'd appreciate a second pair of eyes. . GeneralNotability (talk) 01:16, 18 October 2021 (UTC)
 * Oh, and courtesy ping since you blocked Ibrakinza. GeneralNotability (talk) 01:27, 18 October 2021 (UTC)
 * Blocked and tagged all except Liftwave. MER-C 08:21, 18 October 2021 (UTC)
 * I don't think Liftwave is actionable at this point in time. Closing. --Blablubbs (talk) 10:00, 18 October 2021 (UTC)
 * (this one is lower-confidence due to a lack of contributions)
 * Timidpatch based on the paid-en email. All of the accounts found via CU show similar UPE-like behavior to Timidpatch, but I'd appreciate a second pair of eyes. . GeneralNotability (talk) 01:16, 18 October 2021 (UTC)
 * Oh, and courtesy ping since you blocked Ibrakinza. GeneralNotability (talk) 01:27, 18 October 2021 (UTC)
 * Blocked and tagged all except Liftwave. MER-C 08:21, 18 October 2021 (UTC)
 * I don't think Liftwave is actionable at this point in time. Closing. --Blablubbs (talk) 10:00, 18 October 2021 (UTC)