Wikipedia:Sockpuppet investigations/Nooth57/Archive

17 September 2013

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Edits consist of mainly adding non-breaking spaces/persondata / in order to flood their contributions and disguise the real reason for editing -- blatant spam /. Two of the sites spammed -- weight-loss.org.za and bodybuildingsa.co.za  have similar layouts and the same footer. Edit timing is also suspicious e.g. these edits are only 50 minutes apart.

I've got the feeling that there are more of these accounts. MER-C 12:33, 17 September 2013 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I have a bad feeling about this... Rschen7754 19:43, 17 September 2013 (UTC)
 * The following are ✅:
 * - no edits
 * - please inspect edits closely
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits
 * - no edits


 * There are static IPs, dynamic IPs, mobile IPs, as well as open proxies and webhosts at play here. There are hundreds of accounts on a small /26 range. So many that I can not go through each one by hand to look at the contributions (many of which are legitimate). I have posted the most blatant accounts above based on the technical evidence provided. Tiptoety  talk 20:15, 17 September 2013 (UTC)
 * Some of the accounts have crosswiki contributions. Rschen7754 22:57, 17 September 2013 (UTC)
 * Blocked the original 2 listed accounts, since those are for certain. Rschen7754 05:30, 18 September 2013 (UTC)
 * These accounts are also definite -- GeoffHoeber:, Dethranity: , Kilternom: , Henry1792: , John184: , Fractal91: . I'll check the rest later. MER-C 09:17, 18 September 2013 (UTC)
 * Blocked those accounts. --Rschen7754 01:02, 19 September 2013 (UTC)
 * Huyawayu: no spam yet, but behaviourly very similar: persondata 1persondata 2, found user JS on 5th edit, listas (compare ), going through alphabetical subsections of persondata/listas backlogs.
 * Awesome2013: restoring spam, mass welcoming users (compare Huyawayu), persondatanbsp.
 * Kwisha: spam nbsp/persondata listas. Maybe. Looking at his userspace, I'd say this user is a paid advocate.
 * Eragon.raju: paid advocate, see Sockpuppet investigations/Eragon.raju.
 * ElaineF423: no spam yet, but recentmost 50 edits (yesterday) are going alphabetically through a listas backlog.
 * Users not editing still haven't made substantial edits. MER-C 13:10, 19 September 2013 (UTC)
 * Users not editing still haven't made substantial edits. MER-C 13:10, 19 September 2013 (UTC)


 * I think I've blocked all the definite matches. But definitely keep an eye on the rest. Rschen7754 21:48, 24 September 2013 (UTC)