Wikipedia:Sockpuppet investigations/Ridryman/Archive

06 December 2014

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

I recently left a warning for the IP 187.109.228.42 who repeatedly has removed content at David Guetta discography without explaining his/her removals in edit summaries. I noticed that the IP 187.109.228.42 has removed all of his/her warnings received in the past from other editors. Similarly the user Ridryman came into the talk page of the IP 187.109.228.42 and removed my warning. I suspect that it is the same person editing both with the IP address and also the user name Ridryman. Note that the user Ridryman has edited the same articles as the IP has. Harout72 (talk) 00:00, 6 December 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * While I do agree that the user is most likely the IP, I don't see any abuse. There isn't any edit warring or any attempt to avoid scrutiny. To me, it just seems like the user is editing while logged out. You're welcome to leave a message to the user to raise your concerns and ask if they could refrain from logging out. Mike V  •  Talk  05:25, 10 December 2014 (UTC)

09 October 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This is a complicated case, quite possibly two different sock groups edit warring with each other. Checkuser requested to help sort out the connections. Binksternet (talk) 19:22, 9 October 2015 (UTC)


 * Note that the previous case concluded that there was a connection between Ridryman and the Brazil IP.
 * I think these two were actually editing in opposition to each other. The Brazil IP and Ridryman often reverted each other, for instance at 76 (album) where the IP changed the date of the second single, then Ridryman swapped the order of the first and second singles, then the IP reverted that. Today, the new account Switzil restored Ridryman's edit.


 * The newer Brazil IP 187.109.232.3 is from the same area as the older 187.109.228.42, and is interested in the same techno and EDM articles. When DJ Dryki started his account, he said "Hello, my name is DJ Dryki, I'm from Brazil and I have 20 years old." Many of DJ Dryki's edits follow immediately after an edit by 187.109.232.3: LlPunisherll also started his account by saying "...I'm from Brazil and I have 20 years old." This account also has many edits which directly follow the Brazil IP. The Brazil IP changed an album name to True but after this was reverted, LlPunisherll repeated this action.


 * Ridryman and the IP 187.109.232.3 have reverted each other many times. For instance, at Hardwell discography, the IP removes the song "Off the Hook" which is restored by Ridryman. Then when the IP removed two songs and changed chart positions the new account Switzil reverted part of that followed by a Florida IP reverting all of the Brazil IP. At Hardwell Ridryman removed a bit about DJ Wiwek and track called "Chameleon", but within an hour the Brazil IP restored it. This is followed by an uncharacteristic sequence in which the new account Switzil makes a change which is reverted, then the Brazil IP restores the Switzil bit. So they don't always revert each other. Another example of collegial editing is at Tiësto discography where Ridryman trims a review list with the edit summary "Corrected to recommended 10" and this is followed by a similar edit from the Brazil IP saying "Corrected to recommended 10".


 * The 166.172.1xx IPs from Florida have reverted the Brazil IP.


 * It looks to me as if Switzil is a sock account formed to help Ridryman counteract the sock team of Brazil IPs, LlPunisherll and DJ Dryki. It's possible that both Ridryman and Switzil are connected to the Florida IPs. Binksternet (talk) 20:43, 9 October 2015 (UTC)


 * Adding Felipeedit, because of the general music interests, but especially because of the same user statements:
 * Felipeedit: "Hello, my name is Felipe, I'm from Brazil and I have 20 years. I'm a fan of singers Britney Spears and Kylie Minogue and my goal in Wikipedia is complementary with music information, especially the artists I like."
 * DJ Dryki: "Hello, my name is DJ Dryki, I'm from Brazil and I have 20 years old. My goal in Wikipedia is complementary with music information, especially artists I like."
 * LlPunisherll: "Hello, my name is LlPunisherll, I'm from Brazil and I have 20 years old. My goal in Wikipedia is complementary with music information, especially artists I like."
 * Felipeedit's user page may simply have served as the model for DJ Dryki and LlPunisherll. If Felipeedit is confirmed as a sock then the information should be added to or moved to Sockpuppet investigations/Felipeedit. Binksternet (talk) 21:15, 9 October 2015 (UTC)


 * Adding LlStatxeRll because of two similar edits and because the name is in the same format as LlPunisherll. Binksternet (talk) 00:36, 10 October 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅:
 * is.
 * The master and confirmed accounts have been blocked/tagged. Closing with no other action although if editing without logging in resumes, the case may be reopened.--Bbb23 (talk) 15:07, 11 October 2015 (UTC)
 * is.
 * The master and confirmed accounts have been blocked/tagged. Closing with no other action although if editing without logging in resumes, the case may be reopened.--Bbb23 (talk) 15:07, 11 October 2015 (UTC)
 * is.
 * The master and confirmed accounts have been blocked/tagged. Closing with no other action although if editing without logging in resumes, the case may be reopened.--Bbb23 (talk) 15:07, 11 October 2015 (UTC)
 * The master and confirmed accounts have been blocked/tagged. Closing with no other action although if editing without logging in resumes, the case may be reopened.--Bbb23 (talk) 15:07, 11 October 2015 (UTC)

20 April 2016

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

This is being filed under the Ridryman case despite my previous complaint about the Ridryman account editing in opposition to the Brazilian IPs and socks. I think this case should be split so that the Brazilian socks have their own page. User:DJ Dryki may be the oldest Brazilian account. All of the related socks were created by someone using IPs from the Brazilian state of Rio Grande do Sul. Binksternet (talk) 14:28, 20 April 2016 (UTC)


 * Evidence
 * Three identical edits made to the same page by the new sock accounts and the Brazilian IP, all of them edit warring against.
 * 187.109.232.3, 01:08, April 20, 2016
 * Oathkepper, 03:24, April 20, 2016
 * Sythed, 12:08, April 20, 2016
 * The above shows a violation of WP:MULTIPLE. Binksternet (talk) 14:32, 20 April 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

How is this case stale? They (the first IP and two accounts, not Ridryman) were editing just earlier today. I originally reported a week ago at Sockpuppet investigations/Phantasus Magician, which includes recent diffs, so it already is split. This IP is continuing to edit war and restore content using multiple accounts.  Ss 112  15:34, 20 April 2016 (UTC)
 * Also, and  are the same Brazilian editor. They create new accounts pretty much every day to back themselves up.  Ss  112  15:40, 20 April 2016 (UTC)
 * It's just the Ridryman account that's stale. No problem; the IPs from the Ridryman case can be connected to the new sock accounts. Binksternet (talk) 02:22, 21 April 2016 (UTC)
 * Just saw the IP has gone on an editing spree for the past two hours, editing all their old favourite articles, restoring some particularly problematic edits and giving misleading edit summaries. I'm sure it won't be long before they create another user account to re-add their edits.  Ss 112  03:27, 21 April 2016 (UTC)
 * User has been blocked by an administrator.  Ss 112  18:16, 21 April 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Putting aside your behavioral analysis, what makes you think the master was not editing from Brazil? It would be odd for a CheckUser to find multiple accounts confirmed if they weren't editing from at least the same country. There's certainly no basis for splitting this case. As a side note, the master and the previously confirmed socks are .--Bbb23 (talk) 15:25, 20 April 2016 (UTC)
 * I remember seeing an edit war between US state of Florida IPs and Brazil state of Rio Grande do Sul IPs, and I was thinking Ridryman was from the Florida camp. Binksternet (talk) 15:33, 20 April 2016 (UTC)
 * Closing. I don't understand the purpose of this report. All those accounts and one IP are already blocked as socks of .  Vanjagenije  (talk)  21:07, 27 April 2016 (UTC)
 * The report was filed before the accounts were blocked. I should think the cases are linked and should be merged. Binksternet (talk) 04:23, 28 April 2016 (UTC)