Wikipedia:Sockpuppet investigations/Orchomen/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Sockmaster has reportedly wikistalked several editors, including myself,, and , getting into revert wars by reinstating an edit reverted by any of us, particularly at The Thundermans on October 16. IJBall has been the most wikistalked of the editors, and can bring up more of a history concerning the sockmaster, who is indef blocked. As for User:Lochagos, their edit summary at Paradise Run here (in reverting a revert by Amaury) is similar in tone and style to this one at The Thundermans here (in reverting a revert by Callmemirela).

After the sockmaster Orchomen was blocked on October 16, they used numerous IP addresses to continue reverting at articles that IJBall, Amaury, Callmemirela or myself had recently edited, which went on for at least a day or two afterward, simply to spite their being blocked. There's more documentation about this on Amaury's talk page User talk:Amaury/2016 (and continued at User talk:Amaury) as well as in the archive of 's talk page User talk:BU Rob13/Archive 5. MPFitz1968 (talk) 17:50, 2 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

This is pretty much a WP:DUCK case, but a look at User:Lochagos' contrib. history and User:Orchomen's contrib. history shows a strong overlap: TV-related articles (esp. those related to Disney Channel or Nickelodeon shows), and historical topics (esp. Rome and Greece). I don't think it's a coincidence... --IJBall (contribs • talk) 18:48, 2 November 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Katietalk 20:09, 2 November 2016 (UTC)
 * ✅. No sleepers visible. Blocked and tagged. Katietalk 20:29, 2 November 2016 (UTC)
 * I love the smell of CU-blocks in the morning. Closing. GABgab 00:37, 3 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Behavior pattern strongly indicates that this is Orchomen evading their block and sock puppeteering once again under a different IP than usual, likely in an attempt to throw us off. Their usual IPs locate to the UAE while this one locates to the UK; however, that doesn't mean it's not them as I remember saying one of their IPs in the initial attack when everything first went down located to Australia.

The original stalkee is, who can provide a bit more background if needed, and then it all escalated from there when he requested my assistance and Michael, , and myself all got majorly involved with this serial sock puppet. has been with us from the very beginning and has been a huge help and has also been helping us and has also been a huge help. Amaury ( talk &#124; contribs ) 20:08, 20 November 2016 (UTC)
 * Their summaries are almost identical in tone, such as passive-aggressiveness like here, or they're generally pretty close to the summaries Orchomen has used when trying to be "helpful," we'll say, such as here. Amaury ( talk &#124; contribs ) 21:15, 20 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * While this IP doesn't Geolocate to UEA, the behvaioral pattern is the same as Orchomen's before: overwhelming interest on "grammar" copyedits (only some of which can probably be considered "correct"), along with contribution stalking of editors such as Amaury and myself. This to Travis Willingham is particularly telling as it is an obscure topic to edit, and was made within a hour of my reversion of another IP editor at the same article, and was made within a few hours of Amaury posting concerns about this IP to my Talk page. --IJBall (contribs • talk) 21:47, 20 November 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Could you provide a few diffs of past socking IPs or the accounts and the new socking IP emphasizing the similarities? ~ Rob 13 Talk 20:58, 20 November 2016 (UTC)
 * An editor more technically inclined than me is currently looking at this. It's a web host. There will be a solution in a bit. ~ Rob 13 Talk 22:30, 20 November 2016 (UTC)
 * Blocked for two years as a web host, along with the entire range. Thanks for the report. ~ Rob 13 Talk 22:38, 20 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Obvious Orchomen is obvious. Amaury ( talk &#124; contribs ) 06:52, 21 November 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged as obvious sock; closing. Katietalk 12:27, 21 November 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Heavy intersection at one of Orchomen's socks main topic areas (The Arabian/Persian Gulf naming dispute)  , restoring sock edits:  , stalking editors who warn them:   , and an overall edit-warrior battleground mentality very reminiscent of past socks. Sro23 (talk) 18:34, 4 December 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * This IP edited Aha's talk page and made a revert to a page where Aha was edit warring. It locates to Dubai, UAE. - BilCat (talk) 10:52, 5 December 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the potential sock for 72 hours for an unrelated reason (edit warring), so the claim of sockpuppetry still needs evaluation. I've requested CU, as there are some things that keep me from calling this a duck. Mainly, I don't see them stalking the same editors I've come to expect from an Orchomen sock. Additionally, if this one has deviated a bit behaviorally, it's possible there are other disruptive socks out there we haven't caught yet, so if this is Orchomen, I would expect CU to have a decent chance of turning up more. Note that Orchomen IPs usually geolocate to UAE or will return as a webhost with a bit of digging. ~ Rob 13 Talk 10:46, 5 December 2016 (UTC)
 * One additional bit of evidence. Note that some of this account's first edits are gibberish on their user talk and appear aimed at getting autoconfirmed status. It's odd, because they would have already met the edit total for autoconfirmed before then, but it's possible that was still their intent. Ten gibberish edits in userspace would be a hell of a coincidence. ~ Rob 13 Talk 10:48, 5 December 2016 (UTC)
 * The following accounts are ✅:
 * Blocked, tagged, closing.--Bbb23 (talk) 15:36, 5 December 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 15:36, 5 December 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 15:36, 5 December 2016 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 15:36, 5 December 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

User:Asbo23 made disruptive edits on talk page of another confirmed sock: User:Ahahahahahahahahaha, then made edits on master's favorite article: Barbarians Rising. It's editing history shows that user edited mostly on User talk:Ahahahahahahahahaha, so It looks like a duck to me Diffs:,   --Stylez995 (talk) 16:41, 10 December 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * User is edit warring against the blanking of the Talk page (an obscure destination for a new user...) of one of User:Orchomen's known socks. And has hit one of Orchomen's favorite article targets: Barbarians Rising. Pure WP:Duck. --IJBall (contribs • talk) 16:29, 10 December 2016 (UTC)
 * I've just added User:Hieverybody23 – also targeting Barbarians Rising in favor of Orchomen's preferred edits. It's another WP:DUCK... --IJBall (contribs • talk) 16:34, 10 December 2016 (UTC)
 * I've requested Indefinite Semi-protection for the User talk:Ahahahahahahahahaha. Hopefully any sleepers will awake. - BilCat (talk) 16:40, 10 December 2016 (UTC)


 * please add to this investigation, who tried to make the case closed. Per WP:DUCK, see page history. Kleuske (talk) 16:47, 10 December 2016 (UTC)

Please consider taking away talk page access for these socks. Sro23 (talk) 17:07, 10 December 2016 (UTC)
 * Agreed., talk page abuse is especially happening at User talk:Barryssister. MPFitz1968 (talk) 17:28, 10 December 2016 (UTC)
 * Might a temporary range block be possible? Otherwise, it might just be best to semi-protect any previously-targeted articles, and leave the talk pages alone per DENY. - BilCat (talk) 17:52, 10 December 2016 (UTC)


 * Added now blocked User:Jingojango23 as the user made disruptive edits on this page, and on User talk:Barryssister. Cyberduck icon.png It looks like a duck to me. --Stylez995 (talk) 18:45, 10 December 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅ from each other and to the master:
 * Blocked without tags.--Bbb23 (talk) 16:59, 10 December 2016 (UTC)
 * Looks like solid connections all around. Tagged as confirmed to Asbo23 and proven to Orchomen. Closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 04:17, 20 December 2016 (UTC)
 * Blocked without tags.--Bbb23 (talk) 16:59, 10 December 2016 (UTC)
 * Looks like solid connections all around. Tagged as confirmed to Asbo23 and proven to Orchomen. Closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 04:17, 20 December 2016 (UTC)
 * Blocked without tags.--Bbb23 (talk) 16:59, 10 December 2016 (UTC)
 * Looks like solid connections all around. Tagged as confirmed to Asbo23 and proven to Orchomen. Closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 04:17, 20 December 2016 (UTC)
 * Looks like solid connections all around. Tagged as confirmed to Asbo23 and proven to Orchomen. Closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 04:17, 20 December 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

94.205.165.179 is a fairly obvious WP:DUCK: The Thracian has been restoring this IP's edits, shares the interest in Emirati subject matter  and similar stalking of editors he's been in conflict with before. Sro23 (talk) 19:10, 18 December 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Requesting CU for The Thracian, both to confirm the sockpuppetry and because sleepers have been found frequently in the past. ~ Rob 13 Talk 19:25, 18 December 2016 (UTC)
 * ✅, , and  directly to the master. In any case, the behavior in the case is duck level. --  Amanda  (aka DQ) 07:39, 19 December 2016 (UTC)
 * Closing. Thanks for the sleeper check. ~ Rob 13 Talk 09:03, 19 December 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK First entry in talk page of User:Amaury/List of accounts and IPs used by Orchomen. MPFitz1968 (talk) 14:56, 21 December 2016 (UTC) MPFitz1968 (talk) 14:56, 21 December 2016 (UTC)
 * I also noticed it's a similar name to one reported in the December 10, 2016 report. MPFitz1968 (talk) 15:03, 21 December 2016 (UTC)
 * As Amaury is requesting speedy deletion of the aforementioned talk page, I will post the comment left by User:Hiagaineverybody23 on that page in case it becomes inaccessible: This list is really handy for keeping track of which proxies I've already used. Thanks guys! MPFitz1968 (talk) 16:03, 21 December 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
RickinBaltimore (talk) 18:55, 21 December 2016 (UTC)
 * ✅, along with and . I think it's time to start ignoring the guy, so blocking without tags. Katietalk 20:39, 21 December 2016 (UTC)
 * Great, closing. GABgab 23:13, 30 December 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Already blocked as a sockpuppet by Zzuuzz. Just wanted to see if this was indeed Orchomen or someone else who doesn't like me, haha! Amaury ( talk &#124; contribs ) 15:24, 22 December 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Nothing to be done here. A CU isn't going to be run on a duck. There was a very recent sleeper check, so another one of those seems unnecessary. It's not always important to know who the sockmaster was. Closing. ~ Rob 13 Talk 15:29, 22 December 2016 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

I was holding off on filing an SPI because nothing immediately screamed sockpuppet at first, but I believe I now have sufficient evidence that this is Orchomen simply trying a new tactic to try to throw us off their trail. See Caedite eos' latest edit summary over on List of The Thundermans episodes which is similar in tone to that of Orchomen as well as their message on my talk page accusing me of making threats, though I did not, which is also similar in tone to that of Orchomen. Also see User talk:IJBall for interaction reports between Orchomen and Caedite eos as well as between our group and Caedite eos. Amaury ( talk &#124; contribs ) 02:38, 1 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I don't know what all this is about but you were threatening me. You kept posting threatening to revoke my editing privileges repeatedly over a simple grammar correction. — Preceding unsigned comment added by Caedite eos (talk • contribs) 07:25, 1 January 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
Caedite eos is .--Bbb23 (talk) 15:53, 1 January 2017 (UTC)
 * I'm not seeing enough to make a purely behavioral block yet, but this allegation isn't totally without substance. If additional behavioral similarities emerge, please feel free to report again. ~ Rob 13 Talk 00:32, 2 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

https://en.wikipedia.org/wiki/Wikipedia:Sockpuppet_investigations/Orchomen/Archive and https://en.wikipedia.org/wiki/User:Amaury/List_of_accounts_and_IPs_used_by_Orchomen Amaury ( talk &#124; contribs ) 18:23, 8 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP isn't editing anymore, closing. GABgab 16:15, 13 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Clear case of WP:DUCK. Amaury ( talk &#124; contribs ) 20:06, 12 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

May I request checking for sleepers? MPFitz1968 (talk) 20:07, 12 January 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to already in the archive as a possible sock, . --  Amanda  (aka DQ) 15:25, 13 January 2017 (UTC)
 * Tagged, closing. GABgab 17:33, 13 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK, alluding to the list has been compiling regarding the sockmaster in this edit in Amaury's sandbox. MPFitz1968 (talk) 18:11, 15 January 2017 (UTC)
 * Used the oldest trick in the Wikipedia book of making 10 nonsense edits in their userspace to get to autoconfirmed status (see their contributions, account was already at least 4 days old). Brilliant! MPFitz1968 (talk) 18:28, 15 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - This one (created on January 9) seemed to have slipped through the cracks when a CU was conducted on January 13. Thanks very much, GABgab 18:17, 15 January 2017 (UTC)
 * ✅, blocked, closing. Katietalk 18:38, 15 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Summaries are pretty much similar in tone, it's obvious it's Orchomen. It's also pretty obvious it's them based on the fact that the only articles they've edited thus far—I expect to be reverted—are articles I'm watching. Coincidence? I don't think so. (I know you're currently no longer admin, but still pinging you, . Also pinging, , and .) Amaury ( talk &#124; contribs ) 14:18, 14 February 2017 (UTC)
 * I've now been reverted. Yup. Definitely them. Amaury ( talk &#124; contribs ) 15:09, 14 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Neil N  talk to me 18:15, 14 February 2017 (UTC)
 * Now tagged, closing. GABgab 17:30, 20 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Obvious sock. Amaury ( talk &#124; contribs ) 18:21, 14 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Username is a dead giveaway that this is a sock. See User:Amaury/List of accounts and IPs used by Orchomen Amaury ( talk &#124; contribs ) 21:32, 15 February 2017 (UTC)

Obvious case of WP:DUCK Amaury ( talk &#124; contribs ) 14:46, 17 February 2017 (UTC)

Added Crat the black, another good hand account. The same contribution-stalking users he's been in conflict with in the past via minor copyedits. There's also the shared interest in obscure UAE topics    Sro23 (talk) 18:51, 19 February 2017 (UTC)
 * Just making a note that Crat the Black has been blocked indefinitely by . (Thank you!) That just leaves one for the February 15 listings. Amaury ( talk &#124; contribs ) 06:45, 20 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
I have blocked User:Barrysdriver for expressive quacking. Lectonar (talk) 14:27, 17 February 2017 (UTC)
 * Tagged, closing. GABgab 17:32, 20 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Sole edit is the creation of User talk:Barryschicken with the content "Amaury Sro23." BlackcurrantTea (talk) 04:35, 19 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I just added who I am sure is another sock, based on the fact that a just-now blocked IP sock of Orchomen's came to support this brand-new account's edits. --IJBall (contribs • talk) 16:44, 19 February 2017 (UTC)
 * And now added – consider this edit to be tantamount to an admission of being a socker account. --IJBall (contribs • talk) 16:52, 19 February 2017 (UTC)
 * Weekend at burners has been added. Amaury ( talk &#124; contribs ) 17:04, 19 February 2017 (UTC)


 * Please be aware that while sock puppets are not tolerated, neither are personal attacks per WP:NPA, also a policy, and if you continue with such immature behaviour, you will be reported. Alex&#124;The&#124;Whovian ? 17:06, 19 February 2017 (UTC)
 * Please use some judgement here, . --Neil N  talk to me</i> 17:10, 19 February 2017 (UTC)
 * Judgement is not an issue. Professionalism is. Alex&#124;The&#124;Whovian ? 17:12, 19 February 2017 (UTC)
 * I disagree - and you've also unnecessarily scolded the wrong editor. --<b style="color:navy">Neil N </b> <i style="color:blue">talk to me</i> 17:14, 19 February 2017 (UTC)
 * So, because you don't like a person, it gives you the right to personally attack them? Great editing. Luckily I'm not the only person with this view. Alex&#124;The&#124;Whovian ? 17:15, 19 February 2017 (UTC)
 * Sro23 left a friendly, non-template, and non-aggressive note. You basically just went at us right from the get-go. Amaury ( talk &#124; contribs ) 17:19, 19 February 2017 (UTC)
 * Because your actions were so much sweeter. Give to others what you expect to be given back to you. Alex&#124;The&#124;Whovian ? 17:20, 19 February 2017 (UTC)
 * I said use some judgement. A mild jab at best, responded to with a chuckle. Threatening to report for this probably means you should be adjusting your sense of perspective. --<b style="color:navy">Neil N </b> <i style="color:blue">talk to me</i> 17:22, 19 February 2017 (UTC)
 * Woah, Alex. I think you need you need take a breather. You've just 180'd this conversation. We've been dealing with this user for months. A few slip-ups will come up. However, it is truly unnecessary to go on to threaten long-standing editors of reporting them. A simple friendly note would just be fine. Callmemirela  🍁  &#123;Talk&#125;   &#9809;  17:24, 19 February 2017 (UTC)
 * And they shall continue to attack every editor they disagree with, given their backing by an administrator. That's great. Great editing. Amazing teamwork. Alex&#124;The&#124;Whovian ? 17:25, 19 February 2017 (UTC)
 * Okay, I think that's enough. Please move on. This isn't helping anyone. Callmemirela  🍁  &#123;Talk&#125;   &#9809;  17:27, 19 February 2017 (UTC)
 * I realize you don't trust my judgment, Alex, and never have, but if you think I would go after a regular editor the way I'd go after a prolific harassing sockmaster like Orchomen, you really don't know me at all. But could we please get back to the matter at hand, which is an SPI report to look for sleepers? Thanks. --IJBall (contribs • talk) 17:29, 19 February 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * All blocked. --<b style="color:navy">Neil N </b> <i style="color:blue">talk to me</i> 17:25, 19 February 2017 (UTC)
 * ✅ socks of Orchomen:, , , , , , , , . No sleepers for now. - Mailer Diablo 14:39, 20 February 2017 (UTC)
 * Tagged, closing. GABgab 17:42, 20 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

And here we go again. Several new accounts all reinstating sock User:Crat the black's edits. etc. Sro23 (talk) 02:03, 21 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No unblocked sleepers found at this time.  Ks0stm  (T•C•G•E) 03:03, 21 February 2017 (UTC)
 * Tagging accounts, closing. Callanecc (talk • contribs • logs) 07:50, 21 February 2017 (UTC)
 * No unblocked sleepers found at this time.  Ks0stm  (T•C•G•E) 03:03, 21 February 2017 (UTC)
 * Tagging accounts, closing. Callanecc (talk • contribs • logs) 07:50, 21 February 2017 (UTC)
 * No unblocked sleepers found at this time.  Ks0stm  (T•C•G•E) 03:03, 21 February 2017 (UTC)
 * Tagging accounts, closing. Callanecc (talk • contribs • logs) 07:50, 21 February 2017 (UTC)
 * No unblocked sleepers found at this time.  Ks0stm  (T•C•G•E) 03:03, 21 February 2017 (UTC)
 * Tagging accounts, closing. Callanecc (talk • contribs • logs) 07:50, 21 February 2017 (UTC)
 * Tagging accounts, closing. Callanecc (talk • contribs • logs) 07:50, 21 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

re-instating sock edits  Sro23 (talk) 01:15, 22 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . GABgab 03:39, 22 February 2017 (UTC)
 * Account now blocked. ✅ as well. - Mailer Diablo 08:41, 22 February 2017 (UTC)
 * Tagged, closing. GABgab 21:47, 22 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Here's a new account complaining about how sock User:Brawlcoils's edits shouldn't have been reverted and the articles should not have been protected. WP:DUCK Sro23 (talk) 02:30, 23 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Added Huffsrowel. Clear case of WP:DUCK. Amaury ( talk &#124; contribs ) 07:52, 23 February 2017 (UTC)
 * Added Grinsopium. Amaury ( talk &#124; contribs ) 08:04, 23 February 2017 (UTC)
 * Savoysitar has been added. Amaury ( talk &#124; contribs ) 08:10, 23 February 2017 (UTC)
 * Added Cratelyons. Amaury ( talk &#124; contribs ) 08:21, 23 February 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * All blocked already. Closing. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 08:29, 23 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK. See this comment on 's talk page, with a reference to No. 2 Squadron RAF in their comment, which contains a bit of back and forth reverting involving at least one already confirmed sock. MPFitz1968 (talk) 09:51, 23 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅ from other Orchomen socks, plus behavioural evidence. Blocked and tagged. -- Euryalus (talk) 10:30, 23 February 2017 (UTC)
 * Closing as already blocked. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 17:20, 23 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Reverting deletion of messages by socks. Emir of Wikipedia (talk) 13:42, 23 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked. --<b style="color:navy">Neil N </b> <i style="color:blue">talk to me</i> 14:17, 23 February 2017 (UTC)
 * Closing as already blocked. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 17:20, 23 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Their edit pattern of making (incorrect) grammar edits is the exact same as IP socks who previously edited that article. As such, I strongly feel this is Orchomen back at it again to cause trouble. Amaury ( talk &#124; contribs ) 14:55, 6 March 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
❌.--Bbb23 (talk) 21:10, 11 March 2017 (UTC)
 * - I find it hard to discount these: . However, I would like a second opinion here. Feel free to close if you believe no action should be taken. Thanks, GABgab 19:50, 18 March 2017 (UTC)
 * Blocked <b style="color:navy">Neil N </b> <i style="color:blue">talk to me</i> 20:11, 18 March 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Noticed several new accounts restoring edits made by blocked sockpuppets. Some are obvious throwaways and others are little less obvious. Other edits are very inconsequential grammar "corrections" that seem to match previous good-hand account behavior. All that's missing is the overlap/hounding of users Orchomen has been in disputes with in the past. CU request for needed sleeper check and also to confirm these suspicions. Sro23 (talk) 05:22, 31 March 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus:
 * Blocked, tagged, closing.--Bbb23 (talk) 14:06, 31 March 2017 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:06, 31 March 2017 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:06, 31 March 2017 (UTC)
 * Blocked, tagged, closing.--Bbb23 (talk) 14:06, 31 March 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

These sockpuppets keep removing the same information from Ed Jones (racing driver). Sro23 (talk) 14:18, 2 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 15:06, 2 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same edit behavior as others on Ed Jones (racing driver). I'm thinking extended confirmed protection may be in order for that article. Amaury ( talk &#124; contribs ) 17:10, 2 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Sock blocked along with quacking companion . -- zzuuzz (talk) 17:21, 2 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK. Amaury ( talk &#124; contribs ) 05:22, 3 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Already blocked by . --IJBall (contribs • talk) 12:26, 3 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK on Ed Jones (racing driver):   Please check for sleepers as this one is autoconfirmed already. Sro23 (talk) 02:37, 26 April 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Katietalk 00:02, 27 April 2017 (UTC)
 * ✅ along with . Blocked/tagged/closed. Katietalk 00:15, 27 April 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Call it a hunch. The editor seems to like racing drivers and we know from the history of Ed Jones (racing driver) that Orchomen is also probably a fan. Most of their edits appear to be grammar "fixes" just like Orchomen socks. In addition, the user randomly made this edit before self reverting. A look through that talk page's history reveals an Orchomen sock talking to another disruptive IP about the usual users Orchomen dislikes. Sro23 (talk) 01:27, 11 May 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Katietalk 12:26, 11 May 2017 (UTC)
 * ✅ along with and . Blocked, tagged, closed. Katietalk 12:34, 11 May 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK. Amaury ( talk &#124; contribs ) 14:48, 13 May 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  15:31, 16 May 2017 (UTC)
 * ✅, blocked, . ​—DoRD (talk)​ 14:08, 16 May 2017 (UTC)
 * Closing.

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Noticed this user on Ed Jones (racing driver); it's been demonstrated in the past that Orchomen seems to be a fan. Then I saw they were doing Orchomen's favorite typo-fixes ("compliment"→‎"complement"), compare to, as well as other various grammar "fixes". Unfortunately this sock is going to require quite a bit of cleanup. Sro23 (talk) 11:35, 7 June 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 15:53, 7 June 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

I was notified that the IP had reverted me, which consists of Orchomen's MO. Also, the IP geolocates to UAE, where most of Orchomen's IPs come from. Callmemirela 🍁  &#123;Talk&#125;   &#9809;  03:45, 8 June 2017 (UTC)

Please see their message posted on my talk page and later reverted by Amaury. Callmemirela 🍁  &#123;Talk&#125;   &#9809;  11:37, 8 June 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
CU declined.--Bbb23 (talk) 14:07, 8 June 2017 (UTC)
 * IP edits too old. Closing. Bbb23 (talk) 12:50, 11 June 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The IP reverted me, consist with Orchomen's MO, and the IP geolocates to UAE. Callmemirela 🍁  &#123;Talk&#125;   &#9809;  15:05, 11 June 2017 (UTC)

No doubt this is Orchomen. . Amaury ( talk &#124; contribs ) 18:03, 11 June 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked, closing. ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 18:05, 11 June 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Here we go once again. It's another user intent on enforcing their interpretation of MOS:NICKNAME and being randomly hostile to other editors. Sro23 (talk) 23:00, 18 July 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  00:02, 19 July 2017 (UTC)
 * Blocked with tp revoked, tagged and closing.

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The user's contributions are all consistent with Orchomen's MO. Callmemirela  &#127809; talk 19:02, 19 July 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This account has already been blocked indefinitely. Marking closed. Mz7 (talk) 22:20, 19 July 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Again consistent with Orchomen's MO. Callmemirela  &#127809; talk 11:15, 20 July 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Is it possible for an edit filter be set up? I'm tired of getting pinged by this guy but don't want to disable the ability to mention me altogether. Sro23 (talk) 11:53, 20 July 2017 (UTC)
 * Ditto.  Callmemirela   &#127809; talk 11:54, 20 July 2017 (UTC)
 * You'll have a better chance of getting a knowledgeable answer at WP:EF/R. ​—DoRD (talk)​ 11:58, 20 July 2017 (UTC)

Could someone at SPI with knowledge of Orchomen please take a look at Sockpuppet investigations/Barryispuzzled? Orchomen is known for socks such as and  (see User:Amaury/List of accounts and IPs used by Orchomen), and considering a likely IP sock of Orchomen just reverted Drmies at the other SPI, I can't think that this is a coincidence... --IJBall (contribs • talk) 19:03, 22 July 2017 (UTC)
 * Agreed. Pinging and . Amaury ( talk &#124; contribs ) 19:08, 22 July 2017 (UTC)
 * It does seem rather odd that Orchomen found that SPI page minus the main SPI page. Perhaps they are the true sockmaster? I believe it was you IJBall who thought Orchomen was a sock of somebody?  Callmemirela   &#127809; talk 20:08, 22 July 2017 (UTC)s
 * Well, Barryispuzzled reportedly edited articles related to Shakespeare and astrophysics, and that's not exactly Orchomen's cup of tea. I agree that the sock names are similar and all, but the behavior doesn't quite match up. Katietalk 02:52, 23 July 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  14:35, 20 July 2017 (UTC)
 * Bubersauna is a ✅ match to Themjibes, and both are almost certainly Orchomen. ​—DoRD (talk)​ 11:53, 20 July 2017 (UTC)
 * Could a CU check on and if possible, determine whether a range block could be put into place. Thanks. Nick (talk) 13:50, 20 July 2017 (UTC)
 * Arubangle is ✅, is highly  and blocked as well. . ​—DoRD (talk)​ 14:03, 20 July 2017 (UTC)
 * Tagging and closing.
 * Hold on, SPIers., I just CU-blocked User:Loftybeach; they came out from under an IP reported by recently. The geolocation is quite different but the underlying data matches; please do feel free to check me since you know this stuff better than me. But I also see behavioral matches. Thanks! Drmies (talk) 17:47, 22 July 2017 (UTC)
 * is ✅. ​—DoRD (talk)​ 17:56, 22 July 2017 (UTC)
 * My thoughts on the other SPI match with Katie's. I think Orchomen noticed "Barry" in the SPI list and said "Hey, let's mess with it". ~ Rob 13 <sup style="margin-left:-1.0ex;">Talk 03:29, 23 July 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

It's been firmly established Orchomen is a big Ed Jones (racing driver) fan, which is where I first noticed this account. One of Orchomen's favorite tasks was to remove hypocorisms from article ledes, so when I saw this user doing the exact same thing  , I knew it was him. Sro23 (talk) 04:10, 30 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Not the foggiest what you're on about.Craic Den (talk) 05:36, 30 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * . NinjaRobotPirate (talk) 12:03, 4 November 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This account has been supporting or restoring the last sock (Craic Den)'s edits on more than one occasion. Like many previous sockpuppets, there is a noticeable focus on removing hypocorisms. Sro23 (talk) 08:50, 12 November 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing own request, please compare to Craic Den and look for undetected accounts. Sro23 (talk) 08:51, 12 November 2017 (UTC)
 * ✅ to each other:
 * There were also a bunch of technically socks that were already blocked for obvious trolling.  It's not a small ISP, and there could be more hidden in places where I don't know where to look. NinjaRobotPirate (talk) 14:53, 12 November 2017 (UTC)
 * There were also a bunch of technically socks that were already blocked for obvious trolling.  It's not a small ISP, and there could be more hidden in places where I don't know where to look. NinjaRobotPirate (talk) 14:53, 12 November 2017 (UTC)
 * There were also a bunch of technically socks that were already blocked for obvious trolling.  It's not a small ISP, and there could be more hidden in places where I don't know where to look. NinjaRobotPirate (talk) 14:53, 12 November 2017 (UTC)
 * There were also a bunch of technically socks that were already blocked for obvious trolling.  It's not a small ISP, and there could be more hidden in places where I don't know where to look. NinjaRobotPirate (talk) 14:53, 12 November 2017 (UTC)
 * There were also a bunch of technically socks that were already blocked for obvious trolling.  It's not a small ISP, and there could be more hidden in places where I don't know where to look. NinjaRobotPirate (talk) 14:53, 12 November 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK -  Sro23 (talk) 18:02, 12 November 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * NinjaRobotPirate (talk) 20:30, 12 November 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK. Typical "undo" Orchomen behavior and restored an edit on I Am Frankie made by one of Orchomen's previous, but now blocked, socks: Craic Den Amaury ( talk &#124; contribs ) 02:25, 23 November 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . NinjaRobotPirate (talk) 05:50, 23 November 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

It's long been established Orchomen's a fan of Ed Jones (racing driver). Noticed a new user trying and failing to copyedit that article, so I took a look at their contribs and saw them doing one of Orchomen's favorite maintenance tasks-removing hypocorisms from leads:  Sro23 (talk) 18:04, 21 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Per sockmaster's history of operating multiple sleepers. Sro23 (talk) 18:05, 21 December 2017 (UTC)
 * ✅, blocked and tagged. No other accounts seen. Closing.--Bbb23 (talk) 18:56, 21 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

WP:DUCK. Barry family. See User:Amaury/List of accounts and IPs used by Orchomen. Amaury ( talk &#124; contribs ) 07:49, 22 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Account is blocked. Closing. Sro23 (talk) 08:05, 22 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

I believe this is Orchomen's static IP. Geolocation and behavior match up.
 * Preoccupation with this article. It's long been established Orchomen is a fan of Ed Jones (racing driver).
 * Here he's trying to enforce his (often flawed) interpretation of MOS:NICKNAME, apparently his favorite maintenance task.
 * More overlap here. Sro23 (talk) 21:15, 26 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Since the IP is so sticky, please block for at least a month. Sro23 (talk) 21:15, 26 January 2018 (UTC)
 * Blocked for a month. NinjaRobotPirate (talk) 01:35, 27 January 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Noticed a new user (who previously had made zero edits to Victor Menezes) file Sockpuppet investigations/Goodsearchlight, which I thought was odd. In the past Orchomen sockpuppets had revert warred with the Goodsearchlight sockfarm on that article. Also noticed that they edited an obscure article creation by an Orchomen sock. It's been established that removing hypocorisms from article ledes is one of Orchomen's favorite maintenance tasks, and this account engages in that too. When I saw the user showing interest in the Persian Gulf naming dispute, it basically confirmed my suspicions. Quack quack. Sro23 (talk) 16:22, 2 July 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Good point. I’ll make sure to use IPs to file sock reports in the future. xxHeliotom (talk) 18:07, 2 July 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Could an admin please indef given the above admission? Thanks, Sro23 (talk) 19:31, 2 July 2018 (UTC)
 * Blocked <b style="color:navy">Neil N </b> <i style="color:blue">talk to me</i> 19:33, 2 July 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Clear WP:DUCK case here. Notice on Becky G they replaced American with Emirari, and we all know Orchomen and their IPs originate in the UAE. Ping as he is very familiar with this sock. Amaury ( talk &#124; contribs ) 19:49, 27 March 2019 (UTC)
 * Messed up the ping above. Amaury ( talk &#124; contribs ) 19:49, 27 March 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * Definitely WP:DUCK, based on the username and the editing pattern. The only big difference this time is that Orchomen is now engaging in actual vandalism at articles, whereas before his MO was just WP:DE. --IJBall (contribs • talk) 19:51, 27 March 2019 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Account now CU-blocked by . Closing. Bbb23 (talk) 21:46, 27 March 2019 (UTC)
 * There was also and the sleepers  and  which I blocked as the same group. I intuited that there was likely an older master, but wasn't familiar with this one so I didn't make the connection.--  Jezebel's Ponyo bons mots 22:10, 27 March 2019 (UTC)


 * had TPA restored prior to being attached to this case. Admin note asks for TPA to be revoked. Cabayi (talk) 11:20, 28 March 2019 (UTC)
 * Done. If I remember correctly, he went through a phase where he pinged people incessantly. NinjaRobotPirate (talk) 12:17, 28 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

If their edits weren't enough, they've now self-admitted here. Amaury • 18:43, 21 November 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked by Materialscientist. ST47 (talk) 19:16, 21 November 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Quacking on Haya bint Hussein, Claire Lehmann , and attempting to delete First Lady of Dubai for the second time. Will block/tag in a moment, filing only for record. Sro23 (talk) 22:12, 19 February 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This is about the fourth sockpuppet of Orchomen's to pop up today. It would be appreciated if a check for other sleepers could be performed. Thanks. Amaury • 05:05, 2 April 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Confirmed. There's a few other socks already blocked today, which I'm not going to bother listing or tagging. There's also a few IP blocks currently in place. More might be possible, but for now. -- zzuuzz (talk) 07:09, 2 April 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Sigh. Here we have another sock with an interest in Ancient Rome, battleships , and of course, racing drivers. Already blocked, requesting CU for any missed accounts. Sro23 (talk) 20:49, 27 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing own request. Please compare against the non-stale socks in the archive to check for sleepers. Sro23 (talk) 20:50, 27 June 2020 (UTC)
 * ✅ but no other accounts immediately visible. NinjaRobotPirate (talk) 03:17, 28 June 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Familiar interest in ancient Greece/Rome. Same fixation on MOS:BCE as the last sockpuppet blocked (see and ). "New user" referencing a discussion started by the last sockpuppet and supporting its view (e.g. vs ). Pretty obviously a sock, so I have blocked. Given this account has been around since June, it would be a good idea to check for any other missed accounts. Sro23 (talk) 08:01, 14 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing own request. Please compare to User:FlaccusVarus to check for sleepers. Sro23 (talk) 08:02, 14 November 2020 (UTC)
 * - Mz7 (talk) 19:47, 14 November 2020 (UTC)
 * Perdikos is ✅ to the following accounts:
 * , closing. Mz7 (talk) 19:52, 14 November 2020 (UTC)
 * , closing. Mz7 (talk) 19:52, 14 November 2020 (UTC)
 * , closing. Mz7 (talk) 19:52, 14 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Just for the record. I'd rather not say the evidence here because I'm concerned he's changing up his editing patterns based on the SPI archive. Admins are free to email me if he appeals. I'm sure there are various hidden accounts sleeping right now too, but whatever. Sro23 (talk) 17:20, 8 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged, closing. Sro23 (talk) 17:21, 8 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

An SPA that has targeted the same victim as every other one of his socks [].Slatersteven (talk) 18:07, 10 August 2021 (UTC) Slatersteven (talk) 18:07, 10 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP rangeblocked. Closing case. Sro23 (talk) 18:15, 10 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This account caught my attention because it reverted to a version previously instated by Pipsally. Like previous socks (Pipsally, Perdikos, Blackumbra, etc.), Owlof has an interest in Ancient Rome. Both Pipsally and Owlof use the phrase "change to" in their edit summaries. Amanuensis Balkanicus (talk) 15:50, 12 September 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Sleeper check please. Sro23 (talk) 17:18, 12 September 2021 (UTC)
 * Same IP range as some older socks. I don't see anything really obvious.  . NinjaRobotPirate (talk) 17:48, 12 September 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Outed by their rival sockmaster; see Sockpuppet investigations/JohnGotten (permalink). Continuing their long-running sock edit-war at this ES is duckily similar to those by Orchomen sox' in the article's history (ctrl+f "consensus").

CU requested to be sure and due to history of sleepers. -- Tamzin  [ cetacean needed ] (she/they) 04:42, 24 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
'''This case is being reviewed by Tamzin as part of their training as a clerk. Please allow them to process the entire case without interference. You may pose any questions or concerns either on their talk page or on this page.'''
 * . --  Tamzin  [ cetacean needed ] (she/they) 04:43, 24 October 2021 (UTC)
 * Confirmed. Another confirmed sock: -- zzuuzz (talk) 06:12, 24 October 2021 (UTC)
 * Thanks, zzuuzz. Tagged. --  Tamzin  [ cetacean needed ] (she/they) 07:23, 24 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * 1) 2021/11/25 edit by Lirae22 adding 'sexist' to Karen (slang)
 * 2) 2021/10/11 edit by Ingvario adding the same
 * 3) 2022/11/24 edit by Lirae 22 to the infobox of Sweden, placing the Speaker of Riksdag above the Prime Minister
 * 4) 2021/06/28 edit by Pipsally making the same infobox change

I think it's unlikely that this account, created a week after Ingvario's block, would coincidentally restore Orchomen-sock edits on two such disparate articles. Pinging, who has accused Lirae22 of being an Ingvario sock. Firefangledfeathers 18:46, 29 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Please compare to socks in archive. Thanks. Sro23 (talk) 22:50, 29 November 2021 (UTC)
 * ✅ -- RoySmith (talk) 23:18, 29 November 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * 1) reverting to a Lirae22 edit
 * 2) reverting to a Lirae22 edit
 * 3) restoring talk page comments by Ingvario
 * 4) A bunch of edits hounding Comradeka, who was in a dispute with Ingvario and publicly called out Lirae22 as a sock:, , , , , , and

Orchomen appears to back editing from one IPv4 (Special:Contributions/31.219.85.253) and a dynamic set of IPv6s in the Special:Contributions/2001:8F8:1F33:3909:2:1:14D:66DC/32 range. There are definitely some recent edits by unrelated users in that 32 range, but I don't know if it's possible to capture the problematic edits in any tighter range. Firefangledfeathers 04:14, 1 December 2021 (UTC)
 * Pinging User:Comradeka, who's getting the worst of it right now. Firefangledfeathers 04:26, 1 December 2021 (UTC)
 * understood. What can I do to help whac? Is it worth it to list individual IPv6s or /64s here? Firefangledfeathers 03:13, 2 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I have a feeling you're going to have a difficult time finding an admin comfortable with blocking that wide a range. We usually just end up playing whac a mole with this one. Sro23 (talk) 03:09, 2 December 2021 (UTC)
 * /32 is excessive. The /38 had a history of harassment and two previous blocks. Re-blocked; see below. ~ ToBeFree (talk) 18:42, 6 December 2021 (UTC)
 * At this point, you'll get more of an immediate response at AIV. Next time he shows up you can report straight to AIV along with a link to this SPI. Sro23 (talk) 03:17, 2 December 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

IPs geolocate to the UAE, Orchomen's favorite place. Amaury • 18:01, 6 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

The IPs are obvious Orchomen socks. Their sudden appearance at CreecregofLife's edit war at Gabby Duran & the Unsittables is peculiar. Firefangledfeathers 18:17, 6 December 2021 (UTC)
 * They came in just as the communications were clearer and getting calmer. Admittedly I nearly reverted them (which probably wouldn't have leaned favorably about edit warring) as their edits were only making things worse.--CreecregofLife (talk) 18:22, 6 December 2021 (UTC)
 * Reasonable. On a deeper look, it's possible the Orchomen sock IPs were following to the conflict, who was recently involved in reverting some sock edits. Firefangledfeathers 18:45, 6 December 2021 (UTC)
 * Interesting. I registered about a week ago after about 2 months of anonymous editing (got over 1000 edits. I still use those edits as a resource because I jump around so much on what to tackle. I know I’m certainly not in the UAE--CreecregofLife (talk) 19:17, 6 December 2021 (UTC)
 * Agreed. It could well be this and CreecregofLife simply has got caught up in it. Their edits don't appear to be in any way similar.  -- Escape Orbit  (Talk) 10:09, 7 December 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * blocked from the User Talk namespace for a year, and (through and ) sitewide for a month. No comment regarding the sock puppetry concerns. ~ ToBeFree (talk) 18:41, 6 December 2021 (UTC)
 * I'm inclined to believe CreecregofLife's explanation of being an IP editor in the past and I don't think CU is necessary. Closing. Sro23 (talk) 00:43, 8 December 2021 (UTC)

Suspected sockpuppets
This one is pretty obvious, with the account making the same edits as a previous blocked sock, etc. CU is requested in case there are any other missed accounts. Sro23 (talk) 23:41, 16 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing own request. Thank you, Sro23 (talk) 23:41, 16 January 2023 (UTC)
 * Same IP range as Wotanluzo and some other socks. There's also some logged-out edit warring over hypocorisms.  .  There's a surprising number of people editing a lot of random articles.  I don't see anything obvious, though. NinjaRobotPirate (talk) 04:18, 17 January 2023 (UTC)

Suspected sockpuppets
Respelling of Gugrak, an already tagged suspected sock. At the very least, should be able to CU against Gugrak, if not against the master. UtherSRG (talk) 18:44, 7 June 2023 (UTC)


 * Also, this latest sock claims there are other socks out there. UtherSRG (talk) 18:44, 7 June 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * From a CU point of view, comparing to, take your pick between ❌ or  due to proxy use. -- RoySmith (talk) 22:55, 7 June 2023 (UTC)
 * Close. Sro23 (talk) 23:15, 7 June 2023 (UTC)
 * Can you check, an account created a couple of days before your last check? The first edits of the user are obviously to become auto-confirmed so they can edit Ben Roberts-Smith. There's not enough for me to block behaviorally, but I think there is to justify a check.--Bbb23 (talk) 14:36, 13 June 2023 (UTC)
 * I'm still not sure how this ties back to Orchomen, but is definitely ✅ to .  I let you figure out the tagging, etc. -- RoySmith (talk) 14:48, 13 June 2023 (UTC)
 * I also bumped up the protection on Ben Roberts-Smith to ECP. -- RoySmith (talk) 14:51, 13 June 2023 (UTC)
 * I've blocked Baseboom without tags. I'll let decide how to tag. Bbb23 (talk) 14:55, 13 June 2023 (UTC)
 * I just wanted to note that two IPs, both of which are obvious Orchomen socks, have edited this page, which, if there was any doubt as to Sro23's prodigious ability to identify socks behaviorally, removed it. I'm inclined now to tag Baseboom as a suspected sock, but I'll wait a little longer to see if Sro23 returns.--Bbb23 (talk) 18:04, 13 June 2023 (UTC)

Suspected sockpuppets
It tends to revert edits and give negative ratings and here from Gugrak, particularly when directed at a specific IP address. Furthermore, it was observed supporting the deletion of the Anglo-American Invasion of Communist Albania page in a discussion. Interestingly, the IP address also suddenly engaged with the user User:StephenMacky, advocating for the page's deletion. Notably, the same users ("User Based Shqiptar from pirok" and "NormalguyfromUK") are consistently involved in conflicts. This behavior suggests the possibility of sockpuppetry tactics being employed to manipulate the discourse. Shqipodrilo (talk) 15:32, 15 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Both the individual identified as 123.243.216.213 and Gugrak exhibit identical interests, editing patterns, and linguistic styles. It's worth noting that Gugrak has gained notoriety for creating multiple accounts, despite being permanently banned, and has started investigations into sockpuppetry aimed at me, although all these allegations have been proven false. Evidently, this new account appears to have been established with the intention of securing my banning. In fact, during a conversation with StephenMacky1, he remarked, "Thier refusal to do anything about BSfP is mind boggling." signifying his active engagement in efforts aimed against me. Based.shqiptar.frompirok (talk) 16:31, 15 August 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The IP edits are now old. Closing. Bbb23 (talk) 11:45, 19 August 2023 (UTC)

Suspected sockpuppets

 * The editors User:2.48.102.82 and User:37.245.43.126 are exhibiting similar interests and editing behavior to the accounts below, at least one of which was previously banned as a suspected sockpuppet of User:Orchomen. User:2.48.102.82 blanked that page multiple times and also blanked the page at User:37.245.43.126 multiple times. These two IP addresses also returned to editing some of the same articles edited by the other addresses listed, including Posy (given name). These addresses also all appear to be based in the United Arab Emirates. While this editor's or editors' editing of articles in the past day or so appears to be unobjectionable, the blanking of pages is problematic and there was apparently previous behavior that led to the User:Orchomen account and subsequent sockpuppets being suspended. The User:Gugrak account was banned as a suspected sockpuppet a couple of months ago. If this editor is the same individual, it would seem to be be more appropriate to ask to have the original account unblocked and acknowledge edits made using the other account and IP addresses. Bookworm857158367 (talk) 07:35, 14 September 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Additionally, checkusers will not publicly connect an account with an IP address per the privacy policy except in extremely rare circumstances.

I don't see anything exceptional here. The blanking of talkpages isn't what's problematic, what's problematic is publicly tagging linking multiple IPs  including extremely stale ones to an account without being a CU or an admin, or an SPI or CU having taken place.31.219.136.224 (talk) 10:42, 14 September 2023 (UTC)91.72.187.50 (talk) 10:07, 14 September 2023 (UTC)2.48.51.30 (talk) 11:49, 14 September 2023 (UTC) UTC)
 * It's only problematic if it is done to avoid a block or scrutiny of one's edits, which the pattern of editing made me think it might be. I'm not saying the editing by these addresses on their own is a problem, even if I disagree with some. That's a fairly normal content dispute that helps make an article better when editors can collaborate. After that length of time, I think it might well be time to lift the ban on the original identity if there actually is a connection between these accounts, though it would have to be requested. Bookworm857158367 (talk) 11:52, 14 September 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Two IPs now blocked, others haven't edited in a long time, closing. Bbb23 (talk) 12:35, 14 September 2023 (UTC)

Suspected sockpuppets
Recreated Tarleton helmet as Tarleton Cap. Quack. CU request for any missed accounts, as this one has been inactive for over a month. Sro23 (talk) 04:29, 16 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - Endorsing own request. I've already blocked Humok. Sro23 (talk) 04:31, 16 January 2024 (UTC)
 * Bit of a rabbit hole but ✅ to master plus, as well as a pair you blocked as suspected two months ago. Also a lot of loutsocking. the named accounts, closing. DatGuyTalkContribs 07:02, 16 January 2024 (UTC)

Suspected sockpuppets
The account 94.200.83.10 exhibits similar behaviour to User:Gugrak and User:Baseboom returning today to an article that both accounts previously edit warred over at Ben Roberts-Smith. Both User:Gugrak and User:Baseboom are confirmed sockpuppets of User:Orchomen. Editor interaction analyser shows that 94.200.83.10 has shared editing interest on three articles with User:Gugrak. 94.200.83.10 has admitted here and here that the other IPs are them. All three IPs geolocate to United Arab Emirates in line with previous use of IP addresses by this editor. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 11:33, 8 May 2024 (UTC) <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 11:33, 8 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the IPs for varying lengths. Please don't request CU when alleging sock puppetry by IPs. Closing. Bbb23 (talk) 12:28, 8 May 2024 (UTC)

Suspected sockpuppets
Refer to Special:Diff/1223139631 where 2001:8F8:1B69:1AFD:B867:D644:BDE9:4E10 replies to comments I made in reference to the blocked sock IPs using the words "I have never ...". 2001:8F8:1B69:1AFD:B867:D644:BDE9:4E10 appears to be on the 2001:8F8:1B69:0:0:0:0:0/49 subnet and IPs from that subnet have already received blocks as part of last report. Block log from above subnet shows that it has received a recent block for edit warring on multiple articles (there seems to be cross over with those articles and Orchomen/Gugrak's known interests). An editor at Special:Diff/1219611773 notes that 92.97.74.100 (recently blocked as a sock of Orchoment) is also operating on the 2001:8F8:1B69:0:0:0:0:0/49 subnet. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 06:10, 10 May 2024 (UTC) 31.219.94.144 has just outed themselves on my user talk with the edit at Special:Diff/1223164767. Like many previous IPs this geolocates to UAE. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 09:11, 10 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * @Bbb23, I just came across an historical block log. They've been operating on that subnet for a long time. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 13:43, 10 May 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've converted the IPv6 to /64 and blocked the range for one month. The 31. IP is already blocked for one week. Closing. Bbb23 (talk) 13:29, 10 May 2024 (UTC)
 * With the exception of a very short block in 2020, the other blocks were all pblocks. Looking at the range now, there's too much collateral damage to block it sitewide.--Bbb23 (talk) 13:46, 10 May 2024 (UTC)

Suspected sockpuppets
They've recently edited Talk:Ben Roberts-Smith at Special:Diff/1226063608. The article is known to be one that Orchomen goes back to and the first IP geolcates to UAE which is known to be where IP edits by Orchomen generally geolocate to. Second IP they've just edited from geolocates to Sweden but was used to restore a comment by the first IP (refer to Special:Diff/1226065517). <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 10:40, 28 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Talk:Ben Roberts-Smith has been protected, and there've been no edits by the IPs since. Closing. Bbb23 (talk) 10:05, 29 May 2024 (UTC)

Suspected sockpuppets
They've recently edited Talk:Ben Roberts-Smith at Special:Diff/1226063608. The article is known to be one that Orchomen goes back to and the first IP geolcates to UAE which is known to be where IP edits by Orchomen generally geolocate to. Second IP they've just edited from geolocates to Sweden but was used to restore a comment by the first IP (refer to Special:Diff/1226065517). <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 10:40, 28 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Talk:Ben Roberts-Smith has been protected, and there've been no edits by the IPs since. Closing. Bbb23 (talk) 10:05, 29 May 2024 (UTC)

Suspected sockpuppets
2.49.38.187 has disruptively commented on my user talk at Special:Diff/1226940783 (reverting conversations that I had previously archived) and Special:Diff/1226941211 (casting WP:ASPERSIONS without evidence. Sockmaster has been known to disruptively edit user talks of other editors in the past. IP geolocates to UAE like many of the IPs that the sockmaster has been known to use. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 00:31, 3 June 2024 (UTC)
 * Update: 31.219.133.189 has recently commented on a CTOP notice I left for another editor at Special:Diff/1227055135. Again this IP geolocates to UEA and the behaviour of following edits around to harass them is known to the sockmaster. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 12:13, 3 June 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked for harassment. Consider reporting IPs to AIV instead if you want quick relief. Izno (talk) 17:32, 3 June 2024 (UTC)

Suspected sockpuppets
Clearly a returning user. Despite being less than a month old, user is fully cognisant of a wide range of Wikipedia policies and how to wield them, and not afraid to revert first and ask questions later. Account created 28 May. Their first 22 edits deleted content from pages, trolling for a bite. On Bagoas (courtier) I reverted their deletion of a whole section, but actually agreed some was undue and deleted that. They continued to attempt to delete content, and now disruptively insisting on more sources for a fully sourced sentence. They only engage in talk when reverting, but are clearly watching the page waiting to revert, whilst ignoring the talk. This is clearly disruptive and typical of this LTA sock who moves from page to page, and trolls editors (sometimes leaving messages on their talk pages telling them they are going to have fun with them). They equally clearly have little to no knowledge of the page subject. Also typical of this sock is accidental logged out editing. The LTA clearly runs multiple accounts simultaenously and presumably logs out between usages, sometimes failing to log in again. The Logged out editing is from IP address ranges that geolocate to this sock, and have been used by this sock in the past. It was evident from first engagement that this was a returned user. The particular pattern of trolling behaviour, wrapped around of - on the face of it - semi reasonable edits are what show this to be this LTA troll. Sirfurboy🏄 (talk) 13:33, 17 June 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Very, technically - blocking etc. Don't see any other accounts.  Girth Summit <sub style="font-family:Segoe print;color:blue;"> (blether)  14:27, 17 June 2024 (UTC)

Suspected sockpuppets
Sock has again returned to edit Ben Roberts-Smith (a known interest of theirs) at Special:Diff/1229570105 and Special:Diff/1229570749 on 18/06/2024. The IP 2001:8f8:1b69:a57:5fcc:9f60:e4e3:16bd forms part of the 2001:8F8:1B69:0:0:0:0:0/49 subnet and geolocates to UAE. As noted previously 2001:8F8:1B69:0:0:0:0:0/49 is a subnet that the sock is known to edit from as well as them being known to generally edit from IPs geolocating to UAE. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 09:30, 20 June 2024 (UTC)


 * @Sirfurboy, that 2001:8f8:1b69:a57:f8df:fe45:8aef:aa7e IP that you mention also falls in the 2001:8F8:1B69:0:0:0:0:0/49 subnet. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 10:57, 20 June 2024 (UTC)
 * Given this SPI I've identified a few subnets that they operate on. Not saying every edit on those subnets is theirs, but it wouldn't surprise me if almost all are. Subnets are 2001:8F8:1B69:0:0:0:0:0/49, 37.245.0.0/16, 31.219.0.0/16 and 176.204.0.0/16. The last two @Black Kite and @Ad Orientem have recently put blocks on for one year and three years respectively. <b style="color:#ff0000;">Tar</b><b style="color:#ff7070;">nis</b><b style="color:#ffa0a0;">hed</b><b style="color:#420000;">Path</b><b style="color:#bd4004;">talk</b> 09:38, 29 June 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Indeed, the sock has been prolific with multiple IPs all geolocating to the same location since Mizzion was blocked a few days ago. Largely trolling my edits. They are having a major pwdi, bless. I have been diligently reporting at AIV though, because I don't think SPI can do anything with reports of IP socking. Checkusers will not confirm information about an IP (despite the fact it is blinking obvious in this case). For the record, these are the additional IPs I have reported in the last 3 days: Ben Roberts-Smith is now EC protected for a year, which will prevent further abuse there. Sirfurboy🏄 (talk) 09:44, 20 June 2024 (UTC)
 * 31.218.130.249
 * 31.218.139.25
 * 31.219.122.106
 * 31.219.130.138
 * 37.245.210.253
 * 37.245.152.231
 * 176.204.81.94
 * 176.204.112.15
 * 2.48.197.48
 * 2001:8f8:1b69:a57:f8df:fe45:8aef:aa7e
 * 176.204.159.219
 * 176.204.195.93
 * 176.204.198.139
 * 5.38.69.196

Clerk, CheckUser, and/or patrolling admin comments

 * The IP edits are already old. Closing. Bbb23 (talk) 13:43, 20 June 2024 (UTC)