Wikipedia:Sockpuppet investigations/Punkox/Archive

Report date April 13 2009, 23:22 (UTC)

 * Suspected sockpuppets

Fkng and 190.232.90.22 are the most recent socks. All other reported accounts are known socks that were handled without checkuser requests.
 * Evidence submitted by &mdash;Kww(talk)

This report is partially to create a better historical record, as this sockpuppeting was primarily handled at ANI during the interval where SSP was so backlogged as to be useless. Historical reports are at, , and here.

Punkox edit-warred so hard that nearly all Jessica Simpson articles wound up protected, bouncing back and forth between his named accounts and anonymous accounts, usually in 190.43.0.0/16 and 200.121.0.0/16, and always traceable to Peruvian ISPs. I recently noticed, who has a similar fixation on Jessica Simpson articles. 190.232.90.22, another anonymous Peruvian editor, began inserting false information into, and Fkng has protected those edits against reversion.


 * Comments by accused parties    See Defending yourself against claims.


 * Comments by other users

Requested by &mdash;Kww(talk) 23:22, 13 April 2009 (UTC)
 * CheckUser requests


 * - Though will be stale.  Tiptoety  talk 05:04, 14 April 2009 (UTC)


 * Clerk, patrolling admin and checkuser comments

All users except are. Fkng matches the IPs listed in the suspected socks of Punkox category. Nishkid64 (Make articles, not wikidrama) 23:24, 16 April 2009 (UTC)
 * Conclusions

indef blocked, was already blocked. All the IPs have been left unblocked as they are inactive and stale. Tiptoety talk 00:27, 17 April 2009 (UTC)

Evidence submitted by Kww
Punkox is stale, but his IP range is pretty well documented and recorded: there aren't many editors that generally edit Jessica Simpson articles from anonymous Peruvian accounts. Today, I reverted a group of edits from, and Zlipz immediately restored them all. It's remotely possible that Zlipz simply believes the edits to be valid, so I'm requesting checkuser, as I suspect it's just a Punkox sock.&mdash;Kww(talk) 23:25, 27 February 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments
Requested by &mdash;Kww(talk) 23:25, 27 February 2010 (UTC)

– Behavioral evidence clearly indicates that this is Punkox. No CU necessary. –MuZemike 00:33, 1 March 2010 (UTC)

Blocked and tagged. –MuZemike 00:33, 1 March 2010 (UTC)

Evidence submitted by Kww
Punkox has been pretty active recently, as a look at some article histories will show:

Focus on the number of edits made by his most recent IP sock. After a large burst of anonymous edits, I requested semi-protection on most of his targets to slow him down.

On, Vanstoo suddenly appeared to repeat Punkox's edits. Every article Vanstoo has edited has been edited by Punkox in the past. Vanstoo and 190.43.92.125. Vanstoo and 190.43.74.127.&mdash;Kww(talk) 18:00, 21 March 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments

 * Another DUCKy case - this one is ✅ - A l is o n  ❤ 20:38, 21 March 2010 (UTC)
 * Bagged and tagged. TN X Man  15:15, 22 March 2010 (UTC)

Evidence submitted by Kww
WP:DUCK case. Peruvian IP address editing nothing but Jessica and Ashley Simpson articles. I've requested semi-protection of his targets at RFPP] as well.&mdash;Kww(talk) 22:48, 25 March 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments
IP blocked 1 week. –MuZemike 21:21, 27 March 2010 (UTC)

07 March 2011

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

''Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters " ~ "''

Almost same editing pattern as Punkox. No reference formatting, adding Bad charts like Portugal Charts, and digging up bad or unsourced information from article's history and adding them to articles. —Novice7 (talk) 09:24, 7 March 2011 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
All of the accounts in the archive are - there's nothing to which I can compare this account. TN X Man 12:24, 7 March 2011 (UTC)
 * Novice7, can you provide specific diffs as to why you think these two accounts are the same? I'm having a bit of a hard time justifying a block on a sockpuppet case this old. —  Hello Annyong  (say whaaat?!) 23:40, 8 March 2011 (UTC)
 * Well, I can provide diffs of edits by and . Here's what Drink1 made . After few months, Rayos19 digs up the same references from the history (most of which are unreliable) and adds it to the article . I'm very sure Drink1 is a sockpuppet too ( and using an IP ). Novice7 (talk) 09:58, 9 March 2011 (UTC)


 * 200.121.181.181 is a proxy (webhost). The two diffs connecting those accounts (even though not exact) tell me it's likely the same user. The IP proxy and user are definitely behavoirally confirmed. DQ.alt (t)  (e)    18:24, 11 March 2011 (UTC)
 * IP blocked as an open proxy, account blocked as a suspected sock. —  Hello Annyong  (say whaaat?!) 04:35, 12 March 2011 (UTC)

Just commenting for the record: Punkox is pretty easy to detect. Jessica Simpson and Ashlee Simpson articles, editing out of Telefonica de Peru.&mdash;Kww(talk) 05:13, 12 March 2011 (UTC)