Wikipedia:Sockpuppet investigations/Papa2004/Archive/1

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Looking at the page history of Kholmat Odilov explains most of this. I seriously think there's some sort of sockpuppeting going on here. There's like 7 newer accounts all editing this one article as well as canvassing on my talk page and a couple IPs heading over to my deletion discussion to stop the deletion of the article. I don't know how many of these accounts are used by a single editor. All of the accounts seem to edit the same article/drafts. See the contributions of Small.Baby.Chek for instance. It's almost as if they're tirelessly trying to get this person a Wikipedia article. If these are not sockpuppets, they're either obsessed fans or most likely paid editors. Waddles 🗩 🖉 16:02, 5 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 17:34, 5 November 2021 (UTC)
 * All the named accounts are ✅  -- RoySmith (talk) 17:42, 5 November 2021 (UTC)
 * I've blocked the IPs as almost certainly socks. Closing. Reaper Eternal (talk) 18:13, 5 November 2021 (UTC)

Suspected sockpuppets

 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Account created some time after the last SPI closed. Same interest in this Kholmat Odilov / Sád Pérson person as the other accounts, same mildly idiosyncratic use of the word "colleague" (compare this to this. Quack quack.  Angry Harpy    talk 12:00, 25 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked & tagged by . JBW (talk) 16:44, 25 January 2022 (UTC)

Suspected sockpuppets

 * ( original case name)

New account created and went directly to the puppeteer's article, Draft:DJ Peretse, which had been draftified, and moved the draft back into mainspace. Also most likely a case of COI/UPE editing.  Onel 5969  TT me 11:32, 15 November 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - there's quite a few accounts here. Give me a minute...  Girth Summit  (blether)  14:50, 15 November 2022 (UTC)
 * The following accounts are ✅ to one another:
 * On the same wide IP range as the above, there are two more accounts that are confirmed to one another, and also creating dubious UPE-looking biogs about Russian people. I'm blocking these as well, since they are unquestionably the same person using multiple accounts on the same articles, but I'm not certain they're connected to above group; I'll tag as suspected.
 * Will request locks. Closing. Girth Summit  (blether)  15:08, 15 November 2022 (UTC)
 * - it turns out Million dollars12 is tagged as a sock of of . Please would a clerk look at merging the cases, and tagging appropriately? Thanks.  Girth Summit  (blether)  15:13, 15 November 2022 (UTC)
 * - please, histmerge to Sockpuppet investigations/Papa2004. Thank you. MarioGom (talk) 08:59, 8 December 2022 (UTC)
 * MarioGom - ✅.  ~Oshwah~  (talk) (contribs)   19:05, 8 December 2022 (UTC)
 * On the same wide IP range as the above, there are two more accounts that are confirmed to one another, and also creating dubious UPE-looking biogs about Russian people. I'm blocking these as well, since they are unquestionably the same person using multiple accounts on the same articles, but I'm not certain they're connected to above group; I'll tag as suspected.
 * Will request locks. Closing. Girth Summit  (blether)  15:08, 15 November 2022 (UTC)
 * - it turns out Million dollars12 is tagged as a sock of of . Please would a clerk look at merging the cases, and tagging appropriately? Thanks.  Girth Summit  (blether)  15:13, 15 November 2022 (UTC)
 * - please, histmerge to Sockpuppet investigations/Papa2004. Thank you. MarioGom (talk) 08:59, 8 December 2022 (UTC)
 * MarioGom - ✅.  ~Oshwah~  (talk) (contribs)   19:05, 8 December 2022 (UTC)
 * On the same wide IP range as the above, there are two more accounts that are confirmed to one another, and also creating dubious UPE-looking biogs about Russian people. I'm blocking these as well, since they are unquestionably the same person using multiple accounts on the same articles, but I'm not certain they're connected to above group; I'll tag as suspected.
 * Will request locks. Closing. Girth Summit  (blether)  15:08, 15 November 2022 (UTC)
 * - it turns out Million dollars12 is tagged as a sock of of . Please would a clerk look at merging the cases, and tagging appropriately? Thanks.  Girth Summit  (blether)  15:13, 15 November 2022 (UTC)
 * - please, histmerge to Sockpuppet investigations/Papa2004. Thank you. MarioGom (talk) 08:59, 8 December 2022 (UTC)
 * MarioGom - ✅.  ~Oshwah~  (talk) (contribs)   19:05, 8 December 2022 (UTC)
 * - please, histmerge to Sockpuppet investigations/Papa2004. Thank you. MarioGom (talk) 08:59, 8 December 2022 (UTC)
 * MarioGom - ✅.  ~Oshwah~  (talk) (contribs)   19:05, 8 December 2022 (UTC)


 * Thanks. Closing. MarioGom (talk) 17:02, 8 December 2022 (UTC)

Suspected sockpuppets
Pro forma. --Blablubbs (talk) 10:35, 11 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Checked GlazaLubvi as a suspected UPE sock after a report on my talk; ✅ to the batch, along with the others., , closing. --Blablubbs (talk) 10:37, 11 February 2023 (UTC)
 * Two more:
 * --Blablubbs (talk) 10:57, 11 February 2023 (UTC)
 * --Blablubbs (talk) 10:57, 11 February 2023 (UTC)
 * --Blablubbs (talk) 10:57, 11 February 2023 (UTC)

Suspected sockpuppets
Reposts of Ruslan Bogatyrev, Elvira Yankovskaya, Vasily Goch, Arseniy Borodin, Moscow Social Pedagogical Institute, and Mitchel (Russian singer) as MITCHEL (rapper). The remaining accounts created versions of these articles in other languages or other spam, see m:Talk:Wikiproject:Antispam.

Special:Undelete/Khanza makes it clear who this sockmaster is: Wikibusines (Bodiadub). Please merge there. MER-C 19:05, 18 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - every account with a local attachment overlaps in article creations with previous Papa2004 or Drug15243 socks. MarioGom (talk) 21:13, 18 February 2023 (UTC)
 * . --Blablubbs (talk) 15:25, 22 February 2023 (UTC)
 * Very to the  batch (tagging as confirmed to that batch is fine):
 * I'll block the unblocked ones. There are two more technically indistinguishable accounts, but they have zero global edits and I'm not quite willing to block solely based on the technical information. I'm keeping an eye on those.
 * From a technical perspective, I'd say this group, Bodiadub, and Drug15243 are all to each other.
 * The others cannot be checked because they are not locally attached. --Blablubbs (talk) 15:42, 22 February 2023 (UTC)
 * Considering the technical dissimilarities between this case and Bodiadub, I'm going to hold off on merging the cases for now. IIRC "Bodiadub" is actually two different people so the CU data does not rule out these two cases being connected (it could also be some other kind of WP:MEAT). However, if the technical data is distinct I think it is better to keep the cases separate to avoid confusion and misleading CU results. - please indef Батька Вальтер as a suspected sock per  and the evidence at meta:Talk:Wikiproject:Antispam.  Thanks, Spicy (talk) 16:46, 25 February 2023 (UTC)
 * Done. Closing. MER-C 18:17, 25 February 2023 (UTC)
 * Thanks. I've updated the tags. Батька Вальтер is actually the oldest account, but I'll leave the case at Papa2004 because that account has no local edits. Spicy (talk) 18:45, 25 February 2023 (UTC)
 * I'll block the unblocked ones. There are two more technically indistinguishable accounts, but they have zero global edits and I'm not quite willing to block solely based on the technical information. I'm keeping an eye on those.
 * From a technical perspective, I'd say this group, Bodiadub, and Drug15243 are all to each other.
 * The others cannot be checked because they are not locally attached. --Blablubbs (talk) 15:42, 22 February 2023 (UTC)
 * Considering the technical dissimilarities between this case and Bodiadub, I'm going to hold off on merging the cases for now. IIRC "Bodiadub" is actually two different people so the CU data does not rule out these two cases being connected (it could also be some other kind of WP:MEAT). However, if the technical data is distinct I think it is better to keep the cases separate to avoid confusion and misleading CU results. - please indef Батька Вальтер as a suspected sock per  and the evidence at meta:Talk:Wikiproject:Antispam.  Thanks, Spicy (talk) 16:46, 25 February 2023 (UTC)
 * Done. Closing. MER-C 18:17, 25 February 2023 (UTC)
 * Thanks. I've updated the tags. Батька Вальтер is actually the oldest account, but I'll leave the case at Papa2004 because that account has no local edits. Spicy (talk) 18:45, 25 February 2023 (UTC)
 * Considering the technical dissimilarities between this case and Bodiadub, I'm going to hold off on merging the cases for now. IIRC "Bodiadub" is actually two different people so the CU data does not rule out these two cases being connected (it could also be some other kind of WP:MEAT). However, if the technical data is distinct I think it is better to keep the cases separate to avoid confusion and misleading CU results. - please indef Батька Вальтер as a suspected sock per  and the evidence at meta:Talk:Wikiproject:Antispam.  Thanks, Spicy (talk) 16:46, 25 February 2023 (UTC)
 * Done. Closing. MER-C 18:17, 25 February 2023 (UTC)
 * Thanks. I've updated the tags. Батька Вальтер is actually the oldest account, but I'll leave the case at Papa2004 because that account has no local edits. Spicy (talk) 18:45, 25 February 2023 (UTC)

Suspected sockpuppets
More reposts at MITCHEL (Musician) and Arseniy Borodin. SmartSE (talk) 14:12, 4 March 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * . MarioGom (talk) 15:11, 4 March 2023 (UTC)
 * . --Blablubbs (talk) 18:40, 4 March 2023 (UTC)
 * ✅ to the Amongusches batch:
 * I'll block the unblocked ones, further checks still in progress.
 * is technically ❌, but is ✅ to . --Blablubbs (talk) 18:52, 4 March 2023 (UTC)
 * Follow-ups complete, I think that's all for now. --Blablubbs (talk) 18:57, 4 March 2023 (UTC)
 * Case closed.  Vanjagenije  (talk)  19:29, 5 March 2023 (UTC)
 * I'll block the unblocked ones, further checks still in progress.
 * is technically ❌, but is ✅ to . --Blablubbs (talk) 18:52, 4 March 2023 (UTC)
 * Follow-ups complete, I think that's all for now. --Blablubbs (talk) 18:57, 4 March 2023 (UTC)
 * Case closed.  Vanjagenije  (talk)  19:29, 5 March 2023 (UTC)

Suspected sockpuppets
New socks overlapping with a draft I was checking, Tatiana Tour/Draft:Tatiana Tour. Ivanvector (Talk/Edits) 15:46, 17 April 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * All ✅ (to each other; see below):
 * I disagree with the previous conclusion that Giouliana was unrelated. They used a different device from the others, but user Giouliana1 did not, and they were on the same IP address within near enough time with each other and with other confirmed socks that I don't see how any finding other than confirmed is even possible, to be honest. All of these accounts are . Ivanvector (Talk/Edits) 15:46, 17 April 2023 (UTC)
 * @Ivanvector: At least at the time I checked, Giouliana1's IP range placed them in a completely different country from the other accounts I looked at (namely these and the others listed on 4 March). Same continent, but that was literally it. Having just checked that account and Remaer for comparison, that still seems to be true. --Blablubbs (talk) 15:58, 17 April 2023 (UTC)
 * that's odd, when I checked a few minutes ago I had all of these accounts on one /64, with a couple of outlier static IPv4s. I'll check again. Ivanvector (Talk/Edits) 16:01, 17 April 2023 (UTC)
 * @Ivanvector: The accounts you list here + Giouliana are on the same /64 in country A. At the time of my check, only Giouliana and Giouliana1 had used that range. Remaer et al., as well as the batch surrounding are on different IPs in a country B. --Blablubbs (talk) 16:03, 17 April 2023 (UTC)
 * I'll note that, whose edits overlap with on Draft:Tatiana Tour seems  to Papa2004/Amongusches. I don't see any technical overlap between that account and Jon2005, Giouliana etc. though. --Blablubbs (talk) 16:28, 17 April 2023 (UTC)
 * I was checking LermontovAndrey but didn't see any other accounts at all on their ranges, so I didn't list them. I did just historymerge the draft into the article, though, because LermontovAndrey reused some text in their article that Jon2005 had in their draft, but I attributed that to copy-and-paste rather than sockpuppetry. Maybe I got my tabs mixed up. Ivanvector (Talk/Edits) 16:49, 17 April 2023 (UTC)
 * I disagree with the previous conclusion that Giouliana was unrelated. They used a different device from the others, but user Giouliana1 did not, and they were on the same IP address within near enough time with each other and with other confirmed socks that I don't see how any finding other than confirmed is even possible, to be honest. All of these accounts are . Ivanvector (Talk/Edits) 15:46, 17 April 2023 (UTC)
 * @Ivanvector: At least at the time I checked, Giouliana1's IP range placed them in a completely different country from the other accounts I looked at (namely these and the others listed on 4 March). Same continent, but that was literally it. Having just checked that account and Remaer for comparison, that still seems to be true. --Blablubbs (talk) 15:58, 17 April 2023 (UTC)
 * that's odd, when I checked a few minutes ago I had all of these accounts on one /64, with a couple of outlier static IPv4s. I'll check again. Ivanvector (Talk/Edits) 16:01, 17 April 2023 (UTC)
 * @Ivanvector: The accounts you list here + Giouliana are on the same /64 in country A. At the time of my check, only Giouliana and Giouliana1 had used that range. Remaer et al., as well as the batch surrounding are on different IPs in a country B. --Blablubbs (talk) 16:03, 17 April 2023 (UTC)
 * I'll note that, whose edits overlap with on Draft:Tatiana Tour seems  to Papa2004/Amongusches. I don't see any technical overlap between that account and Jon2005, Giouliana etc. though. --Blablubbs (talk) 16:28, 17 April 2023 (UTC)
 * I was checking LermontovAndrey but didn't see any other accounts at all on their ranges, so I didn't list them. I did just historymerge the draft into the article, though, because LermontovAndrey reused some text in their article that Jon2005 had in their draft, but I attributed that to copy-and-paste rather than sockpuppetry. Maybe I got my tabs mixed up. Ivanvector (Talk/Edits) 16:49, 17 April 2023 (UTC)
 * @Ivanvector: The accounts you list here + Giouliana are on the same /64 in country A. At the time of my check, only Giouliana and Giouliana1 had used that range. Remaer et al., as well as the batch surrounding are on different IPs in a country B. --Blablubbs (talk) 16:03, 17 April 2023 (UTC)
 * I'll note that, whose edits overlap with on Draft:Tatiana Tour seems  to Papa2004/Amongusches. I don't see any technical overlap between that account and Jon2005, Giouliana etc. though. --Blablubbs (talk) 16:28, 17 April 2023 (UTC)
 * I was checking LermontovAndrey but didn't see any other accounts at all on their ranges, so I didn't list them. I did just historymerge the draft into the article, though, because LermontovAndrey reused some text in their article that Jon2005 had in their draft, but I attributed that to copy-and-paste rather than sockpuppetry. Maybe I got my tabs mixed up. Ivanvector (Talk/Edits) 16:49, 17 April 2023 (UTC)


 * Having reviewed a second time and much more thoroughly given ' feedback, my conclusion now is that this group of accounts is confirmed to each other, but represents a distinct technical grouping from previously checked socks (they are in different, non-adjacent countries, and proxies don't seem to be in play). There is a gap in the data which means that this group can't be compared technically to the earliest socks, but the general location of the IPs in that report suggest that those accounts are related to the Amongusches group, in spite of the username pattern similarity with this group. However, the two groups are very clearly working together, and have been since the earliest report.
 * Second opinions requested: should this group be spun off to a new case, or should it be considered a second group under this case, given the behavioural similarity and frequent coordination? Keeping all the socks together is sensible from a behavioural perspective, but having two groups with distinct technical data could make CU confusing. I'm not sure what's the best approach. Ivanvector (Talk/Edits) 19:12, 17 April 2023 (UTC)
 * , is the technical data for this group consistent with WP:Sockpuppet investigations/Bodiadub? See the filing and my comments here. Spicy (talk) 19:16, 17 April 2023 (UTC)
 * I did look into that but no, they're not, at least as far as I can tell. Bodiadub is known to use proxies but what we believe to be their real IP is in a third country from the two groups on this page. Ivanvector (Talk/Edits) 19:21, 17 April 2023 (UTC)


 * Also I should have interjected this earlier, but given the clarifications here, the following are to the Amongusches group:
 * Both blocked but withholding tags for now. Ivanvector (Talk/Edits) 20:25, 17 April 2023 (UTC)
 * Both blocked but withholding tags for now. Ivanvector (Talk/Edits) 20:25, 17 April 2023 (UTC)
 * Both blocked but withholding tags for now. Ivanvector (Talk/Edits) 20:25, 17 April 2023 (UTC)


 * Blocked:
 * for recreating simple: Arseniy Borodin. MER-C 19:17, 27 April 2023 (UTC)
 * Dual-tagged. Confirmed to Giouliana and suspected to Papa2004. No objection to upgrading the alt tag to proven if anyone considers it better, but I think the dual-tag will be a good clarification, given the discussion above. Tagged the likely group as suspected. Closing. MarioGom (talk) 20:52, 28 June 2023 (UTC)
 * Dual-tagged. Confirmed to Giouliana and suspected to Papa2004. No objection to upgrading the alt tag to proven if anyone considers it better, but I think the dual-tag will be a good clarification, given the discussion above. Tagged the likely group as suspected. Closing. MarioGom (talk) 20:52, 28 June 2023 (UTC)

Suspected sockpuppets
Recreated Moscow Social Pedagogical Institute as Moscow Socio - Pedagogical Institute, also recreated Ruslan Bogatyrev on the Simple English Wikipedia as Ruslan Tamerlanovich Bogatyrev, for which I blocked the account. —*Fehufangą (✉ Talk · ✎ Contribs) 22:12, 28 April 2023 (UTC)


 * The interaction with on Helene3333's sandbox may also be worth some attention, as they recreated the Moscow Social Pedagogical Institute article on the Simple English Wikipedia (simple:Moscow Socio - Pedagogical Institute) —*Fehufangą (✉ Talk · ✎ Contribs) 22:16, 28 April 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


Blocked and tagged, doing some G5s... Moneytrees🏝️(Talk) 20:37, 29 April 2023 (UTC)


 * Found cross-wiki. MER-C 09:28, 30 April 2023 (UTC)
 * , closing. MER-C 19:08, 8 May 2023 (UTC)
 * pending completion of the relist above; as far as I can tell, the technical confirmation here is to the Jon2005 group above, not to Papa2004/Amongusches. --Blablubbs (talk) 13:09, 22 May 2023 (UTC)
 * Dual tagged in the same way as the previous group. Closing. MarioGom (talk) 20:54, 28 June 2023 (UTC)

Suspected sockpuppets
Created Draft:Natalya_Tolstaya which contains a file uploaded by. There are other smells of UPE too. SmartSE (talk) 20:40, 4 July 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * The following are all ✅ to each other, but to Papa2004.   RoySmith (talk) 22:24, 4 July 2023 (UTC)
 * I'll CU-block all of these, but leave it to a clerk to figure out how to tag, or if they should be split off to a new case. RoySmith (talk) 22:25, 4 July 2023 (UTC)
 * and respammed es:Legacy Music, simple:Legacy Music, sr:Legacy Music.
 * and respammed ca:Ruslan Bogatyrev, es:Ruslan Bogatyrev, uz:Ruslan Bogatyrev.
 * respammed uz:Taipan (guruh)
 * and respammed Alexey Dobrusin, simple:Alexey Dobrusin
 * New accounts:
 * There is no doubt it is them. Blocked and tagged accordingly, . MER-C 09:59, 16 July 2023 (UTC)
 * There is no doubt it is them. Blocked and tagged accordingly, . MER-C 09:59, 16 July 2023 (UTC)
 * There is no doubt it is them. Blocked and tagged accordingly, . MER-C 09:59, 16 July 2023 (UTC)
 * There is no doubt it is them. Blocked and tagged accordingly, . MER-C 09:59, 16 July 2023 (UTC)
 * There is no doubt it is them. Blocked and tagged accordingly, . MER-C 09:59, 16 July 2023 (UTC)
 * There is no doubt it is them. Blocked and tagged accordingly, . MER-C 09:59, 16 July 2023 (UTC)

Suspected sockpuppets
Pro-forma RoySmith (talk) 20:31, 9 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * The following are all ✅ RoySmith (talk) 20:33, 9 August 2023 (UTC)
 * glocks requested RoySmith (talk) 20:34, 9 August 2023 (UTC)


 * Listing the socks ✅ by Drmies (were blocked in same batch as Crefanfox):
 * Will request global locks once I trace the images and cross-wiki contributions. MER-C 16:19, 10 August 2023 (UTC)


 * New socks:
 * Noting that Sashigay created Dmitry Koshelev and Leo Solovyev, while КалымЫлы created tt:Дмитрий Кошелев and SaluerMen created es:Leo Solovyev. MER-C 17:36, 10 August 2023 (UTC)
 * MER-C 18:08, 10 August 2023 (UTC)

Suspected sockpuppets
Recreated Mr. Mattress (via Mr. Mattress (company), via Mr. Mattress (Company), and is in the process of recreating Pavel Sheff in a user subpage. Both last created by blocked sock User:PulyMul a few days ago. Checkuser seems sensible. Wikishovel (talk) 13:49, 29 August 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * I realize this SPI is closed and will be archived soon but Girth Summit, I was just wondering if you had a position on protecting these articles that this sockfarm is focused upon. I think some Checkusers don't think it's effective but when it's a branded business and the article has to use a certain name (rather than a biography with different occupational qualifiers), I think it could be useful. Thanks. Liz Read! Talk! 20:21, 29 August 2023 (UTC)
 * Be my guest if you think it would help. The problem is that they usually just come back and try to recreate the article at a slightly different title, which makes it harder for NPP/AfC reviewers to recognjse that it's a recreation of an oft deleted page. If we salted those titles, we'd just get Mr. Mattress (bed manufacturer) or whatever... Girth Summit <sub style="font-family:Segoe print;color:blue;"> (blether)  08:41, 30 August 2023 (UTC)
 * Thanks for the response, Girth Summit. What drives me crazy is that I'll protect a page title, the sock will return to recreate the article with, say, a lower case last name, and then some well-meaning, extended confirmed page patroller will move the draft to the protected page title with the correct name. This has happened more times than I can count. So, maybe it doesn't pay off. Liz <sup style="font-family: Times New Roman; color: #006400;">Read! Talk! 18:32, 5 September 2023 (UTC)
 * That is fairly ridiculous - if you can see that you're about to move it to a salted title, you should at least check with the admin who salted it to see if it's a G4 or G5 before making the move. Perhaps full protection in future cases might be warranted. Girth Summit <sub style="font-family:Segoe print;color:blue;"> (blether)  18:43, 5 September 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * New IPs, but geolocation is a match, as is the combination of UAs. Blocking, lock requested. Don't see ay others. Girth Summit <sub style="font-family:Segoe print;color:blue;"> (blether)  14:13, 29 August 2023 (UTC)

Suspected sockpuppets
User:PizzaGuchi was blocked on Oct. 28th as a sockpuppet of Papa2004 and one of their activities was creating Vladimir Drevs. The article was deleted as a CSD G5 but was recently recreated so I'm checking to see if the new editor is also a sockpuppet of Papa2004. Liz <sup style="font-family: Times New Roman; color: #006400;">Read! Talk! 02:11, 15 November 2023 (UTC)


 * Well, that was quick. Liz <sup style="font-family: Times New Roman; color: #006400;">Read! Talk! 03:49, 15 November 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked, tagged, global lock requested, closing. Bbb23 (talk) 02:30, 15 November 2023 (UTC)

Suspected sockpuppets
Usual spam from this spammer: J. Becker, Pavel Romanov (musician), Russtone (guitar brand), Becker (brand), simple:Becker (factory), ru:J. Becker (see m:Wikiproject:Antispam/Archives/2023/Papa2004). I'm sure there are more accounts. MER-C 04:57, 10 December 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * All those accounts are already blocked. Closing.  Vanjagenije  (talk)  22:36, 10 December 2023 (UTC)
 * - MER-C was asking for a sleeper check, which seems sensible. --Blablubbs (talk) 15:53, 7 January 2024 (UTC)
 * These are all close to indistinguishable and also match behaviourally, either on en or on other wikis:


 * is also a good match but I can't see their commons uploads or the history of the associated ruwiki page, so I'm hesitant to block.
 * is the same deal, but on simple
 * Not done yet. --Blablubbs (talk) 16:26, 7 January 2024 (UTC)
 * More:
 * As w/ Valentin Olegov and Varigaggi9 above.
 * Still not done. I'd like some coffee.
 * --Blablubbs (talk) 16:50, 7 January 2024 (UTC)
 * That's it, I think. --Blablubbs (talk) 16:58, 7 January 2024 (UTC)
 * Everyone . I'm going to hold off on the lock request in case or anyone else (a second CU might feel differently about some of the accounts I omitted, or spot some that I didn't) finds additional ones over the next few days. I think this check should also cover the ones below; follow-ups might be able to turn up one or two others, but I've been at it for over an hour now and am probably not the right person to run these. --Blablubbs (talk) 17:01, 7 January 2024 (UTC)
 * One more: = BakalVina/Kontaktkonne. --Blablubbs (talk) 17:10, 7 January 2024 (UTC)
 * There's one more thing I want a 2O for, but I think that's it otherwise. --Blablubbs (talk) 17:37, 7 January 2024 (UTC)
 * Perhaps it's also helpful to clarify what I mean by "close to indistinguishable": These accounts can be grouped into overlapping clusters of relatively distinctive, but not entirely probative shared technical signatures. Most, but not all accounts with those signatures are Papa2004, but usually not to the extent where technical data alone was enough for me to block these. There are a few editors that fit the same profiles but are clearly different people judging by behaviour, and a few zero-edit matches that I can't assess (yet). --Blablubbs (talk) 17:45, 7 January 2024 (UTC)
 * Sigh. Couple more after all: Cf. Oleg Prodan for Zimbabma. --Blablubbs (talk) 17:58, 7 January 2024 (UTC)
 * Perhaps it's also helpful to clarify what I mean by "close to indistinguishable": These accounts can be grouped into overlapping clusters of relatively distinctive, but not entirely probative shared technical signatures. Most, but not all accounts with those signatures are Papa2004, but usually not to the extent where technical data alone was enough for me to block these. There are a few editors that fit the same profiles but are clearly different people judging by behaviour, and a few zero-edit matches that I can't assess (yet). --Blablubbs (talk) 17:45, 7 January 2024 (UTC)
 * Sigh. Couple more after all: Cf. Oleg Prodan for Zimbabma. --Blablubbs (talk) 17:58, 7 January 2024 (UTC)

Blocked:

Accounts elsewhere

Still processing. MER-C 17:58, 7 January 2024 (UTC)


 * DalekoOtetc I apparently forgot to list, but that one's also a match. Gosudary/XXLUKa both stale on en. --Blablubbs (talk) 18:04, 7 January 2024 (UTC)
 * One more account found: GulalyVesna. I think I am done for now. MER-C 18:35, 7 January 2024 (UTC)
 * Thanks. Also on en. I'll request locks for all blocked accounts here and close. Will follow up concerning the thing I need a 2O on if it turns out to amount to something. --Blablubbs (talk) 18:39, 7 January 2024 (UTC)

Suspected sockpuppets
See m:Wikiproject:Antispam/Archives/2023/Papa2004. Acidification and JordjAver reposted J. Becker (piano factory) and Vladimir Drevs (writer).

The other users posted Ilya Kolunov, Sergey Sheikin, simple:Iskander Jin, simple:Ilya Kolunov. They share a similar obsession with Russian musicians and have similar behavior (not saying what that is here). Reiterating my request last time for a check - I am sure there is other spam that I have missed. MER-C 15:44, 7 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Wow, this case looks exhausting. Some folks need to find another hobby after they have been shown the door. Liz <sup style="font-family: Times New Roman; color: #006400;">Read! Talk! 18:01, 7 January 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * is on enwiki; everyone else is already listed above. Closing this one.   --Blablubbs (talk) 17:46, 7 January 2024 (UTC)

Suspected sockpuppets
Pro forma. Checked Favorite girl68 due to this ANI report and behavioural similarities to this sockfarm. Spicy (talk) 15:09, 16 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Favorite girl68 is very to past accounts and ✅ to:


 * Marking as in progress because I want to run a few more checks. Spicy (talk) 15:11, 16 January 2024 (UTC)
 * to the above:
 * Spicy (talk) 16:15, 16 January 2024 (UTC)


 * , : Spicy (talk) 16:23, 16 January 2024 (UTC)
 * ✅ to the archive:
 * Also ✅ to the archive, and to Favorite girl68, and overlapping on another range used by these socks, is . This account has never edited enwiki but has edited very extensively on other projects. I'm fairly convinced they are related but because of the tenure of the account and the fact that I do not speak any of the languages they edit in, I would like a behavioural 2O from someone more familiar with this sockfarm. Spicy (talk) 16:32, 16 January 2024 (UTC)
 * Blocking confirmed and likely, requesting locks, leaving others for behavioural and/or technical reevaluation. Thanks, Spicy (talk) 16:36, 16 January 2024 (UTC)
 * Additional spammers found and blocked:
 * - simple.wp
 * - ru.wp
 * Alibek Attamonov is creating articles on the Belarusian Wikipedia about Russian musicians translated from Russian. I don't recognise any names. Nor do I recognise any names of articles created by Skittle-chan1986. MER-C 18:02, 16 January 2024 (UTC)
 * Those two are very and Дмитрий Валинов is also:
 * Blocking and requesting locks. I will leave Skittles-chan and Alibek alone for now, but I do want to emphasize that Alibek is very closely linked technically. Spicy (talk) 18:49, 16 January 2024 (UTC)
 * Blocking and requesting locks. I will leave Skittles-chan and Alibek alone for now, but I do want to emphasize that Alibek is very closely linked technically. Spicy (talk) 18:49, 16 January 2024 (UTC)

Suspected sockpuppets
Recreated DaLi previously created by blocked sock Favorite girl68 as DaLi (singer) * Pppery * <sub style="color:#800000">it has begun...  16:26, 22 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Based on behaviours in common along with technical data, the following are very :
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)
 * All ; mass-deletion of their spam in progress. Ivanvector (Talk/Edits) 17:03, 22 January 2024 (UTC)

Suspected sockpuppets
See below. --Blablubbs (talk) 12:32, 24 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Somewhat unusual behaviour for this farm (see x-wiki contribs), but unambiguously ✅ to past proven socks (CUs see data here). No edits to en, mostly recording this here for the lock request., , closing. --Blablubbs (talk) 12:35, 24 January 2024 (UTC)