Wikipedia:Sockpuppet investigations/Martinvito/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Both registered user names are of the format Firstnamelastname, with Norwegian-sounding names. Both edit Terrorism in Norway, Terrorism in Sweden and List of terrorist incidents in Denmark by adding unsourced information. Neither responds to questions or warnings on their talk page. On Al-Qaeda in the Islamic Maghreb they made two edits after each other, each changing a lower-case letter in an url to upper-case. Emilstensrud was created after Martinnorheim was blocked for adding unsourced content. Sjö (talk) 13:39, 19 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅ + . . Please move the case to Martinvito.--Bbb23 (talk) 19:05, 19 January 2018 (UTC)
 * ✅. Closing. Sir Sputnik (talk) 22:23, 19 January 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

User edits about terrorism, among other things terrorism in Denmark, Sweden and Norway, by adding unsourced/incorrect information. Username is format firtstnamelastname. Doesn´t communicate on his talk page even when warned or blocked. Account created 13 days after last confirmed sockpupper was blocked. Sjö (talk) 18:37, 30 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The archive is stale, but I still believe the accusation is correct based on behaviour and article overlap. Blocked and tagged.  Case closed. Courcelles (talk) 20:34, 2 December 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour. Added: instances of unsourced information perp, Germany.Sjö (talk) 08:35, 26 December 2018 (UTC)

User edits about terrorism by adding unsourced/incorrect information. Username is format Firstnamelastname. First edits about two weeks after Sundeepnor was blocked. Same pattern of changing al-Qaeda to Al-Qaeda (see below). Sjö (talk) 07:36, 24 December 2018 (UTC)


 * Same areas of interest as the other socks. Restored an unsourced perpetrator added by Mikkokoxs that was removed by me . Changed first letter in Al-Qaeda to capital A like the other socks. Sjö (talk) 07:51, 24 December 2018 (UTC) Adding: Blocked sock Sundeepnor edit Moroccan Islamic Combatant Group  as did Mikkokoxs . That's a pretty specific area of interest and unlikely to be two different persons editing the same article by coincidence. Sjö (talk) 16:00, 24 December 2018 (UTC)


 * Same areas of interest as the other socks. Adds unsourced/incorrect information often about alleged perpetrators like the other socks. Geolocates to Oslo, Norway like . Same pattern of changing al-Qaeda to Al-Qaeda . Sjö (talk) 08:00, 24 December 2018 (UTC) Adding: This IP also edited Moroccan Islamic Combatant Group  which shows a connection to Sundeepnor and Mikkokoxs. Sjö (talk) 16:00, 24 December 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, blocked, tagged. Materialscientist (talk) 09:06, 1 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar to sockmaster and socks: User name format Firstnamelastname. Quickly starts editing terrorism-related articles, including terrorism in Norway. Adds unsourced perpetrators, example, example. Comments their edits with "Info" like the latest sock.

The same sockmaster has used four IPs, but it looks like they only use the same IP a couple of days so maybe it's no use to block them. All of them geolocate to the Oslo area and they make similar edits. Is it possible to use a range block?

example example removing cn tags, also a sign of sockpuppetry example example This edit to Allied Democratic Forces insurgency changed al-Shaabaab to Al-Shaabaab, similar to how earlier socks have changed al-Qaida to Al-Qaida. Sjö (talk) 20:05, 20 January 2019 (UTC)

I added some examples where the IPs made unsourced changes. Sjö (talk) 06:12, 22 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the suspected account listed due to similar edits and behavior compared to the and  user accounts. The network range comes back as 2a02:2121:200::/39 when I run only the IP users listed here, and as a network range of 2a02:2120::/30 in the WHOIS when I run it. The /30 range is out of the question; it's too wide and with too many unrelated edits to consider blocking due to collateral damage. However, I'm not opposed to blocking the 2a02:2121:200::/39 range if such related disruption continues. I decided to hold off, since no edits have been made by this range since January 19 of this year. If things do pick up and if disruption continues from that range, I've informed the users involved in the related ANI discussion (a link to it is here) to file another ANI report. This SPI case can be closed; going to go ahead and do so.  ~Oshwah~  (talk)  (contribs)   05:25, 7 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same type of edits: adds unsourced perpetrators to terrorism attacks, even when sources say the assailants are unknown or when it's obvious from the sources that what happened isn't terrorism example example. IP geolocates to Oslo area. Edit comment is "info" like the most recent socks. Changes capitalisation of al-/Al- like other socks. Sjö (talk) 20:12, 24 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
IP edits too old. Closing.--Bbb23 (talk) 19:31, 5 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same as above. Sjö (talk) 20:16, 24 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
IP edits too old. Closing.--Bbb23 (talk) 19:31, 5 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar edits as sockpuppeteer and other socks. IP geolocates to Oslo, like other IP socks. Adds unsourced perpetrators. Adds incident which is not considered terrorism by source, but still writes that it's treated as a terror incident. Sjö (talk) 05:02, 14 March 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . GABgab 09:30, 14 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar edits as sockpuppeteer and other socks. IP geolocates to Oslo, like other IP socks. "Info" as edit comment, like other socks. Adds incidents not considered terrorism by source, but still writes that it's a terror incident, also like other socks. Sjö (talk) 13:26, 21 December 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked for a week, but this is really just whack-a-mole. You might want to consider aggressively semi-protecting the affected pages.  SPI isn't a fast process.  WP:RFPP might be able to react faster, especially if asking for limited-scope actions such as semi-protection for a couple of days.  -- RoySmith (talk) 15:30, 21 December 2019 (UTC)

Suspected sockpuppets
Geolocates to Oslo, Norway like earlier IP socks. Adds "suspected perpetrators" that are not in the sources, and events that are not terrorist attacks. . Edits Norwegian Wikipedia, changes first letter of al-Qaida to capital A. Sjö (talk) 18:03, 14 October 2022 (UTC)


 * 193.212.78.158

Geolocates to Oslo, Norway. Adds a "terrorist" incident that is not called that in the source. Edits Violent Night, like 81.0.172.208. Sjö (talk) 18:13, 14 October 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * 193.212.78.158 is a residential connection and has not edited in two weeks. 81.0.172.208 is still active and looks like a duck. I recommend soft-blocking for a short period of time. Thank you. MarioGom (talk) 19:52, 14 October 2022 (UTC)
 * Done! Closing. firefly  ( t · c ) 16:11, 15 October 2022 (UTC)

Suspected sockpuppets
Geolocates to Oslo, Norway and adds incidents that he describes as terrorism even when the sources say nothing of the sort. Sjö (talk) 22:02, 10 November 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * for three months. Closing. DatGuyTalkContribs 14:48, 11 November 2022 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

Similar user name. Similar edits, like adding unsourced statements about perpetrators in List of terrorist incidents in 2023. Edits in en. and no. Wikipedia like the sockmaster and other socks. Sjö (talk) 10:58, 11 October 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - This report was misfiled; please fix. Bbb23 (talk) 13:17, 11 October 2023 (UTC)
 * Done, reset case status. Thanks, Spicy (talk) 11:54, 13 October 2023 (UTC)
 * Username and editing similarities seem obvious enough., closing. Thanks, Spicy (talk) 23:38, 14 October 2023 (UTC)