Wikipedia:Sockpuppet investigations/PHAM VIET DUNG/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

These users as well as 2001:EE0:234:D80D:B9CB:CEBA:FBF8:4780 (now blocked) have been making edits to the page American Network and creating similar pages in draftspace with strange titles and incoherent and test-edit-like contents, such as Draft:Drama, Draft:Originals, Draft:long and Draft:Tion. Original IP blocked for three months by Materialscientist for creation of patent nonsense pages.  Passenger pigeon  ( talk )  23:53, 26 March 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Master IP is subject to a rangeblock. Account is blocked. Other IP is probably not used any more by this person, as IP hopping seems to be going on (so a block seems unnecessary unless further problems occur). Close. Dreamy Jazz 🎷 talk to me &#124; my contributions 22:32, 27 March 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

First IP (since blocked) mass-created the same incoherent drafts as the previous IPs, second IP (still unblocked) is once again adding hoax list entries to American Network. This pattern of bad list entries on TV-related articles from Vietnamese IPs has been going on since November 2019; are they a long-term socker better known by another name?  Passenger pigeon  ( talk )  01:09, 29 May 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP range blocked. Closing. Callanecc (talk • contribs • logs) 00:25, 30 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The first IP created more of the same test pages in draftspace, and made more hoax edits to American Network. The other five IPs are now removing speedy deletion flags from those drafts and also adding bad list entries to American Network. Also, the original sockmaster of this IP farm appears to be, blocked in 2017, and , , and  appear to also be the same person.  Passenger pigeon  ( talk )  09:21, 30 May 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IPs range blocked and I've tagged the accounts (and moved this to the right place). Closing. Callanecc (talk • contribs • logs) 04:53, 31 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation of Draft:Option with same nonsensical content as previous socks.  Passenger pigeon  ( talk )  07:48, 4 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked 3mo. Closing, Cabayi (talk) 07:55, 4 June 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Addition of fictitious list entries to VTV2, in line with previous socks.  Passenger pigeon  ( talk )  08:25, 4 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The IP is clearly inactive at this point. Blocking it likely won't accomplish anything. Sir Sputnik (talk) 00:22, 6 June 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Insertion of the same nonsense list entries into usual targets like American Network.  Passenger pigeon  ( talk )  01:23, 24 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I was going to close this as stale...but after doing a little WHOIS work, I found that this nonsense is still going on on new IPs in the same ranges - Special:Contributions/2001:ee0:200::/40, Special:Contributions/2402:800:613b::/48 and Special:Contributions/171.236.120.0/22. This is the only activity coming out of these ranges, so I've rangeblocked all of them for a month. GeneralNotability (talk) 01:53, 30 June 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The latest source of edits to numerous TV articles characterized by the addition of bogus TV programs "Drama" and "Pham Viet Dung" to lists. Largoplazo (talk) 13:50, 13 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * for 1 week, closing Cabayi (talk) 18:58, 13 September 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same collection of edits to numerous TV network articles, adding fake shows "Drama" and "Pham Viet Dung" to their program lists. Largoplazo (talk) 23:11, 24 September 2020 (UTC)

With the latest round of edits (this is the third from this IP address), the editor is adding "Comedy Bites" along with the original two programs. There is likewise no article for "Comedy Bites"; the only real thing a Google search finds with this name is a YouTube channel. Largoplazo (talk) 11:59, 25 September 2020 (UTC)

From the archive, I see that Special:Contributions/171.236.120.0/22 has been blocked before, but this address falls outside of that range.

Are any bots running that revert any edit to an article that includes an unambiguously word or phrase unambiguously associated with vandalism? I'd want to see about getting "Pham Viet Dung" and "Phạm Việt Dũng" added to its blacklist. Largoplazo (talk) 12:12, 25 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * for 1 week, closing Cabayi (talk) 17:55, 26 September 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The usual addition of fake programs Pham Viet Dung, Drama, and Comedy Bites to numerous TV channels. I've already requested a block, this is for documentation. There's been one previous 117.0.*.* address reported. Largoplazo (talk) 02:06, 29 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Yup. Rangeblocked for six months. GeneralNotability (talk) 02:56, 29 September 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The latest mass poster of links to fake programs including "Pham Viet Dung", "Drama", and "Comedy Bites". Largoplazo (talk) 00:58, 5 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked the IP for a month. Geolocate claims it's probably static/broadband, but my gut feeling is that it's more likely to be mobile, so the block may be pointless.  Previous IPs in the archive are from the 171.236.x.x range, which geolocates to the same carrier & city. -- RoySmith (talk) 01:08, 5 October 2020 (UTC)
 * It's still possibly quite helpful. A recent vandalism campaign from a 171.236.*.* address came in four bursts over a period of 39 hours, so catching this one early might spare us a day's aggravation. Largoplazo (talk) 01:15, 5 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Characteristic edits to TV station pages adding one of the user's choice list entries, "Drama", in some cases with a new addition, "Drama (GTCT)". I Googled that, and found it only on IMDB cruft pages littered with nonsense including "pham" and "phamvietdung", as well as a couple of Pinterest hits. So Wikipedia isn't the only place where this is going on. Largoplazo (talk) 11:55, 6 October 2020 (UTC)

Does anyone think there's any chance of getting these articles all semi-protected for maybe three months? This user has been relentless for over six months now, IP range blocks notwithstanding. Largoplazo (talk) 12:55, 6 October 2020 (UTC)
 * , My initial impression is that it'll be a very long list, and it would probably not be feasible to do that kind of mass protection.  If you could put together a list of specific articles, I'll be happy to take a look at them and see what's possible. -- RoySmith (talk) 13:13, 6 October 2020 (UTC)


 * A rather long list. Here's what I've compiled:
 * 10 Bold
 * 10 Peach
 * 7 Gold
 * 7flix
 * 7mate
 * 7two
 * 9Gem
 * 9Go!
 * Ariane 6
 * Focus (TV channel)
 * Giallo (TV channel)
 * Iris (TV channel)
 * Italia 1
 * Italia 2
 * La5
 * La7
 * Nick & You
 * Rete 4
 * Super!
 * TV8 (Italian TV channel)
 * TV8 (Turkish TV channel)
 * Tele 5
 * Top Crime (TV channel)
 * VH1 (Italian TV channel)
 * VTV2
 * VTV3
 * VTV6


 * Interestingly, one of these, Ariane 6, isn't a television station, and the edits are unrelated, but the IP address 27.73.40.44 behind those edits is responsible only for edits made during the last day. I would be a coincidence if it were the address of a proxy through which no one ever made edits before yesterday but through which two people made edits today. And, after the first pair of edits to Ariane 6, the rest occurred during the same bursts of activity as the edits to other articles. Largoplazo (talk) 13:57, 6 October 2020 (UTC)
 * , Unclear what to do here. I looked at the first one, 10 Bold.  I see two IP edits on 2020-10-02 which look reasonable, or at least don't fit the pattern you describe above.  You've been following this for a while so you may be tuned into patterns that I'm not seeing, but from that one example, I'm hesitant to do a mass protect. -- RoySmith (talk) 14:09, 6 October 2020 (UTC)
 * This is a list of articles to which the same user, under a large variety of IP addresses, has been adding fake content over the last month or more. The user has been doing this for months. With IP blocks not turning out to be very effective, I thought if the articles were semiprotected for a few months then we wouldn't have to go through this all over again every two or three days, and the user would hopefully have found something else to do by the time the protection ended.
 * The pertinent edits to 10 Bold were and . Largoplazo (talk) 14:20, 6 October 2020 (UTC)
 * , I'm not debating that abuse has to be stopped. I'm just trying to make sure in our haste to do that, we don't block legitimate anonymous users from editing.  I'll keep looking at the list, but since you are more familiar with the subject matter than I am, what's your opinion on  and  (i.e. the two IP edits I referred to above).  Are they likely to be this same person, or are they good edits from somebody else? -- RoySmith (talk) 15:12, 6 October 2020 (UTC)
 * The latter edit is from an IP address that is responsible for numerous legitimate edits made over a period of many days. So, I assume your goal was to determine not just whether any edits from an IP address might be blocked temporarily, but whether protection might throw a great big wall in the way of ongoing productive users, and I see that's the case, making semi-protection undesirable. I'd ask whether Pending Revisions protection might help, but I guess even that's undesirable given that these articles are edited so often by such a diversity of IP users. Largoplazo (talk) 16:37, 6 October 2020 (UTC)
 * , I don't think WP:PCPP is going to be the right tool here. The instructions to pending change reviewers say, catch and filter out obvious inappropriate edits and vandalism.  That means inserting obscenities, gibberish, personal attacks, random deletions of text, that sort of thing.  It would catch edits like, "10 Bold sucks", but I suspect inserting a link to Pham Viet Dung would get past most pending change reviewers. -- RoySmith (talk) 16:50, 6 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Closing. Socks are blocked, the disruption is probably too wide to use page protection. I've created an edit filter which should report these socks to AIV in the future. GeneralNotability (talk) 13:02, 14 October 2020 (UTC)

Suspected sockpuppets
He's back, with another IP address geolocating to Vietnam and adding the familiar mention of "Drama" to his favorite target American Network along with the new show names Chicago Fire, Chicago Med and Chicago PD, all of which were introduced after American Network went off air.  Passenger pigeon  ( talk )  21:06, 27 November 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * The IP hasn't edited in two weeks. Closing. Bbb23 (talk) 13:45, 28 November 2022 (UTC)