Wikipedia:Sockpuppet investigations/Maira ich/Archive

21 August 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

The three socks have been active in adding unverifiable content to the page Deepak Kumar Dwivedi and removing AfD tags see,  , and

The page history may be viewed here

The image in the article at is a morphed image of Steve Jobs Sesamevoila (talk) 11:16, 21 August 2012 (UTC)

The ongoing AfD discussion on the article may be found here

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * 2012082110008541 is from a user claiming not to be involved in this. The user has a confirmed email address, however, meaning whoever created the account had to have access to the email address. A checkuser admin may want to follow up to see if a) they are lying or b) the disruptive person is personally known to the sender. It might be a good way to get the abuse to stop to personally have a word with the offender. -Nard ( Hablemonos ) ( Let's talk ) 20:10, 21 August 2012 (UTC)
 * There has been quite a bit of history of these hoax articles, although until recently they were being deleted without much further attention. In addition to those already mentioned here, GCW World Championship, Webotica, Gamotica, and Iiccd Iiccrd † (the first iteration of one of the articles at AFD now, deleted 5 September 2011).  All of these were created by User:Samargurjar; I cannot see deleted histories, but if any other accounts substantively to them, they should probably join the list of ducks despite their age. Similarly, I've added another IP, from the history of GCW, adding text related to the Gamotica hoax, although I suspect those contributions are stale. Squeamish Ossifrage (talk) 14:09, 22 August 2012 (UTC)
 * Tracing the deleted histories of those articles, I added User:Redemperor11 (indef'ed for spam-only, presumably stale for CU) to the SPI list. Tracing the deleted edits of that account finds us the deleted article NrazS (which finds us User:Rajeewkv, whose only edit was to that article and the edit is only tentatively DUCK)) and the deleted articles Deepak dwivedi, Freaquer, and Freaquer Corporation, all of whose content ties them to the same walled garden that started us here (no other editors are implicated via the histories of those three). DMacks (talk) 19:28, 22 August 2012 (UTC)
 * † I corrected the page-name (without the "r" there is no history; with it its content and editor-involvement are on-target. Hope SO doesn't mind the third-party edit:) DMacks (talk) 19:31, 22 August 2012 (UTC)
 * All good! Sorry about the dropped R in that link.  And thanks for digging through the histories there. Squeamish Ossifrage (talk) 19:43, 22 August 2012 (UTC)
 * For what it's worth to the investigation, the a similar bio of Deepak Kumar Dwivedi has been posted at on August 21. The blog is owned by a  Snehal Masne,  who, according to his linkedin profile  is based in Hyderabad. Sesamevoila (talk) 06:09, 23 August 2012 (UTC)
 * User:Red G Mora had already added a link to that blog-item to the wikipedia page about Dwivedi. Astroturfing? Not sure how far this line of should be discussed here though but CU are welcome to contact me for some on-wiki data that the blog post let me find. DMacks (talk) 06:37, 23 August 2012 (UTC)
 * Oops, got a bit overenthusiastic and didn't realise that I was walking into a minefield ..I'm new to all this stuff. I should just stick to reading wikipedia:-| Sesamevoila (talk) 06:49, 23 August 2012 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
Added User:PucHKar (already blocked for disruptive editing). Kudpung กุดผึ้ง (talk) 18:14, 21 August 2012 (UTC)

Added an IP (DUCK behavior of removing AfD tag). DMacks (talk) 18:36, 21 August 2012 (UTC)


 * Requesting check user please - we now have 6 users and an IP. Kudpung กุดผึ้ง (talk) 19:29, 21 August 2012 (UTC)

The article in question appears to be part of a walled garden or similar set of associated articles that also includes IICCRD (now at AfD). The creator of that also created Gcw (long since replaced by a redirect for a different meaning of that acronym). All three articles appear to be cut'n'pastes of other articles with a few names changed and in ways that contradict the cited refs, so I have added User:Samargurjar as another DUCK (too stale for CU though). DMacks (talk) 23:14, 21 August 2012 (UTC)

— Berean Hunter   (talk)  13:48, 22 August 2012 (UTC)
 * to determine extent of socking.

User:Red G Mora now indef'ed for disuption after today's continuation of his pattern of AfD removal. That is both a behavior and an edit-summary that matches PucHKar's. DMacks (talk) 19:11, 22 August 2012 (UTC)

User:183.83.29.204, ISP :beam telecom, Static IP, Geolocates to Omekhan Daira, Hyderabad, near National Highway 65. User:117.224.37.245, ISP: BSNL Static IP, Geolocates to Mata Rd., Adersh Negar, Gurgaon, Haryana. These two are 1,700 km  apart and unlikely  to  be the same user unless they move 1,000s of km  around India. Kudpung กุดผึ้ง (talk) 00:54, 23 August 2012 (UTC)


 * Actually that split geolocation is completely consistent with this situation. Hyderabad and Gurgaon are mentioned in the various articles as the two sites for the company/person central to the articles being edited. So "Hey Checkuser! Beware that there may be two disjoint network chunks involved." DMacks (talk) 01:01, 23 August 2012 (UTC)

✅ the same are Account Samargurjar and IP 117.224.37.245 are stale. The last page that needs cleanup is already at AfD. Amalthea 11:49, 23 August 2012 (UTC)


 * All the above named accounts have now been blocked. Kudpung กุดผึ้ง (talk) 12:10, 23 August 2012 (UTC)
 * User:117.224.37.245, and User:Samargurjar are clearly the same. Although stale, vigilance is required. Kudpung กุดผึ้ง (talk) 12:20, 23 August 2012 (UTC)