Wikipedia:Sockpuppet investigations/Mauryabhi7715/Archive

Suspected sockpuppets


On their User page the user mentioned the alternative account which was blocked for disruptive editing on Ullu page. User is editing on same page thus using their second account to edit in violation of that block. Sid95Q (talk) 07:07, 23 February 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Userpage confirms the connection (I think it incredibly unlikely that they were unlucky enough to copy the userpage from one unrelated account to the other). This unblock request shows where they were clearly informed not to edit Ullu, which they are partially blocked from, until they are unblocked. This is one of many examples of them editing that page from their second account and continuing the behaviour for which they were originally blocked, which is clearly block evasion. - Please siteblock  indefinitely and  for 14 days for block evasion. --Jack Frost (talk) 11:07, 23 February 2022 (UTC)
 * I think two weeks is reasonable, but I've indeffed them both; partially because of the blatant socking, partially because the behaviour is pretty much NOTHERE, and partially because resetting the indefinite partial block after a two-week full block is a massive pain. Closing. --Blablubbs (talk) 12:30, 23 February 2022 (UTC)

Suspected sockpuppets


similar editing pattern with sock Danguism, see Sandymark11 Danguism. Also this User talk:Sandymark11 is quite bizzare as it was Sandymark11 whose account was created a week ago, not Dangusim Sid95Q (talk) 06:28, 25 February 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Check out the interaction, and in particular their tendentious editing on ALTBalaji and Over-the-top media services in India. Further evidence emailed to as the original blocking admin per WP:BEANS.   SN54129  14:33, 26 February 2022 (UTC)


 * Given the timeline of when the account was created, the complete overlap in articles edited, the particular content edited in those articles, similarly limited command of English and idiosyncratic (over)capitalization, the bizarre interaction at userpage etc, I'll be shocked if these accounts are not operated by the same person. The main question IMO is whether to bother with a CU etc or block simply based upon the equally glaring WP:CIR issues. PS: I came across the user's contributions while editing Over-the-top media services in India (see talkpage) and am thus WP:INVOLVED. Abecedare (talk) 20:35, 26 February 2022 (UTC)
 * Well that's just great. Don't you know what BEANS is for? *facepalm*  SN54129  20:42, 26 February 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
I've taken a look but am handing this over to someone more experienced. I do note the use of about 20 IPV6 addresses, most on the same range and many already blocked. But this needs a CU with more knowledge of IP addresses. I can confirm that Sandymark11 is a sock of Mauryabhi7715 but haven't gone far enough to confirm any other account. — Preceding unsigned comment added by Doug Weller (talk • contribs) 07:54, 27 February 2022 (UTC)
 * Thanks for the email, ., closing. --Blablubbs (talk) 11:46, 27 February 2022 (UTC)
 * Ugh, I skipped over Doug's comment above somehow. per his request for another CU to have a look. --Blablubbs (talk) 11:49, 27 February 2022 (UTC)
 * - -- RoySmith (talk) 16:31, 27 February 2022 (UTC)
 * Mauryabhi7715, Sandymark11, and Dangusim are all ✅ to each other. I've re-blocked and tagged them as such.   the only thing I'm seeing that's a bit confusing about the IPs is that the carrier seems to have listed their IP range(s) oddly/incompletely in WHOIS.  So, tracking down which IPs belong to which ranges can give some unexpected results. -- RoySmith (talk) 17:04, 27 February 2022 (UTC)
 * Thanks. Doug Weller  talk 17:05, 27 February 2022 (UTC)
 * -- RoySmith (talk) 17:09, 27 February 2022 (UTC)

Suspected sockpuppets
VishavGuru1 displays the same tendentious editing style at Over-the-top media services in India and Ullu.

Interaction with master and socks is quite strong.

A similar fixation on censorship of porn: Mauryabhi7715, Sandymark11, VishvaGuru1, VishavGuru1. 2A01:4C8:47:ADC4:6CEE:D6FF:FE10:823A (talk) 16:12, 4 March 2023 (UTC)

A similar habit of inappropriately random bolding: Dangusim, Sandymark11, VishvaGuru1. 2A01:4C8:47:ADC4:6CEE:D6FF:FE10:823A. (talk) 16:23, 4 March 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * I'm utterly convinced this is the sockmaster's newest account; the page overlap is considerable, the style is the same, the chronology is highly suggestive. In the course of investigatin, however, I found the sock (whose name I did not recall) has edited pages and topics I'm considerably involved in, and preferring to operate with an abundance of caution I'll leave my observations for someone else. Vanamonde (Talk) 20:43, 5 March 2023 (UTC)
 * - the behavioural evidence is convincing. Please indef VishvaGuru1 as a suspected sock. Thanks, Spicy (talk) 22:16, 6 March 2023 (UTC)
 * --Blablubbs (talk) 14:13, 7 March 2023 (UTC)

Suspected sockpuppets
Created user page with content that was removed from Over-the-top media services in India, Leonidlednev (talk) 15:21, 8 March 2023 (UTC)


 * As well as interest in the same pages as the sockmaster. Leonidlednev (talk) 15:35, 8 March 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Some comments on Sandyte: the overlap between Sandyte and prev socks VishvaGuru1 and Dangusim is pretty substantial, with 33 of Sandyte's 43 edits being to 7 pages also edited by VishvaGuru1 and Dangusim. Ullu is a main topic of interest, like it has been for all previous accounts, from the sockmaster onwards. The style and content of the edits is suggestive enough to my mind, though perhaps not smoking-gun stuff:
 * edits by Dangusim, Sandymark11 (also a blocked sock), and Sandyte
 * edits by Dangusim (including the edit summary) and Sandyte
 * edits by VishvaGuru1 and Sandyte.
 * edits by Dangusim and Sandyte. --bonadea contributions talk 14:10, 31 March 2023 (UTC)

As for Millerkhandhar, that is surely the same user who was username blocked as, though Atrangii was only created after Millerkhandhar had received a warning for edit warring. Both accounts made 10 or 11 minor "copyedits" (some constructive, some not so much) and then started removing content from Ullu. The content removal was in fact not inappropriate, it was an OR/SYNTH violation added by VishvaGuru1 and other Mauryabhi7715 socks, so I also don't think it is Mauryabhi7715. They obviously shouldn't be edit warring, but that's not an issue for this board (and they seem to have stopped editing when the section was finally removed). --bonadea contributions talk 14:31, 31 March 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I can't see the full history of Sandyte's userpage, so I won't comment on that, but I don't believe that Millerkhandhar is a sock of Mauryabhi7715. The page history shows them removing content that Mauryabhi's socks tried to add. Spicy (talk) 20:16, 24 March 2023 (UTC)
 * Sandyte is ✅ to VishvaGuru1 which is blocked as a proven sock of Mauryabhi7715. . I don't believe there's adequate evidence of sockpuppetry to support a check. Note that if Millerkhandhar is Atrangii there isn't a breach of policy as Atrangii's block allows them to create a new account. Callanecc (talk • contribs • logs) 04:20, 2 April 2023 (UTC)
 * - please indef Sandyte as a proven sock per the CU results. No action with respect to Millerkhandhar. Thanks, Spicy (talk) 21:41, 3 April 2023 (UTC)
 * . Callanecc (talk • contribs • logs) 00:20, 4 April 2023 (UTC)