Wikipedia:Sockpuppet investigations/Lowlihao/Archive

11 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Repeatedly restored unconstructive edits of original, blocked account that were undone. Amccann421 &#160; (talk) 07:25, 11 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Same/very similar edits as the following, already blocked, users (sometimes called "Astro-spammers" as they concentrate on Astro (television) and other Hong Kong, Malaysia and Singapore related TV articles, such as TVB Jade and Mediacorp) The list of IPs would be enormous - Arjayay (talk) 16:18, 11 May 2016 (UTC)
 * User:Revenge Of The Ghost - (what a coincidence)
 * User:Revenge Of The Ghost 002
 * User:Jack Low Siew King
 * User:Le nam nam le 1971
 * User:Mighty Joker Revenge Game
 * User:Max Li Hao
 * User:Low Xin Ying
 * User:Lowlihao
 * User:Albert20118 and numerous other Albert XXXX accounts
 * User:Super Chocolate XXL

Clerk, CheckUser, and/or patrolling admin comments
It looks like this case should be moved to one with as the master. There are several puppets already blocked belonging to DDV but no case was ever opened.--Bbb23 (talk) 12:11, 11 May 2016 (UTC)

the DDV master looks to be, the oldest account by a few years. The Albertxxxxx accounts are not this master, see Sockpuppet investigations/Albert20009. I'll move and clean up. Ivanvector 🍁 (talk) 03:24, 18 May 2016 (UTC)
 * All tags updated for accounts listed here. Ivanvector 🍁 (talk) 03:45, 18 May 2016 (UTC)

to check for sleepers. This user's made a lot of accounts in the last couple of weeks. Ivanvector 🍁 (talk) 03:45, 18 May 2016 (UTC)
 * All of the non-stale accounts listed are ✅ to except for  which is a technical outlier and appears ❌. A behavioural comparison should be made to ensure it's not collateral (pinging  as the blocking admin).  and no rangeblock possible.-- Jezebel's Ponyo bons mots  17:31, 18 May 2016 (UTC)

I've updated the tags to confirmed for all accounts, except Le nam nam le 1971 which has been untagged, and Albert20118. just to clarify, was Albert20118 confirmed to this master as well? If so, I think this case should be merged with Sockpuppet investigations/Albert20009 and I think that's an admin job. Ivanvector 🍁 (talk) 15:35, 19 May 2016 (UTC)
 * Suspicion of sockpuppetry took no part in the decision to block, as I had already been made the block before I came to suspect sockpuppetry. The block was for "Persistent disruptive editing", which was true irrespective of whether the account was a sockpuppet, so no, I don't think there is any need to fear that it might be collateral damage. I made the block over two months ago, and this much later I don't remember what other account(s) I thought might have used, but looking at the editing history I think it very probably was not the ones which are the subject of this investigation. Although there are some similarities to editing by other accounts, there are also striking differences, which make this a behavioural outlier, as well as being a technical outlier according to Ponyo, so I think we can reasonably conclude that it is not another part of the same sock farm, and I shall remove the sockpuppet tag which an editor has placed on 's user page. The editor who uses the pseudonym "JamesBWatson" (talk) 19:13, 18 May 2016 (UTC)
 * The accounts were only compared to Lowlihao as the master. The socks at Sockpuppet investigations/Albert20009/Archive are, as is the Albert20118 account listed above, so I have nothing to compare them to.-- Jezebel's Ponyo bons mots 15:45, 19 May 2016 (UTC)
 * Thanks, I'll leave that account tagged as is. Case closed. Ivanvector 🍁 (talk) 15:48, 19 May 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The page MYTV Broadcasting have long been under attack by different various IPs range from 175 and 200. Based on the article history, there is sock master account "Lowlihao" that have been blocked before due to abusing the additional account policy. Could the blocked user are related to all these IPs and some other hidden accounts? If checkuser proved it is yes, could all the accounts been blocked and the page should be protected for a very indefinite of time? Molecule Extraction (talk) 11:51, 31 October 2016 (UTC)
 * Alright, thanks! Molecule Extraction (talk) 16:58, 31 October 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
because CheckUser cannot be used to publicly connect an IP address to a named account. Some of the recent IP edits to the article are clear petty vandalism, others less clearly so, but there's no indication of a pattern nor a link to this master. I suggest semiprotection for a week. if disruption resumes after semiprotection expires, please make a new request at WP:RFPP, there's not much we can do here with targeted vandalism from this wide a range of IPs. Ivanvector (Talk/Edits) 13:20, 31 October 2016 (UTC)
 * Another administrator has put in place pending changes on the article. Closing. Bbb23 (talk) 17:14, 31 October 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

I believe that this Harimua Thailand is the sockpuppets of Lowlihao. He is again adding unverified "upcoming channels" in Senarai saluran Astro(malay wikipedia) Daftar Saluran Astro (indonesian wikipedia) and Astro頻道 (chinese wikipedia).

Please refer to https://en.wikipedia.org/wiki/Wikipedia:Sockpuppet_investigations/Lowlihao/Archive Thank you. +可愛+天使 (talk) 16:34, 22 July 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * .&#32;In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
 * 1) At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
 * 2) At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
 * 3) In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this. Callanecc (talk • contribs • logs) 07:51, 27 August 2017 (UTC)
 * Closing without action. GABgab 15:38, 6 October 2017 (UTC)