Wikipedia:Sockpuppet investigations/Sapah3/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Sapah3 has been using IPs (WP:LOUTSOCK, WP:ILLEGIT) to mislead other users on their talk pages that there are more than 1 user involved in an article. Both Sapah and these IPs (possibly more yet to be discovered) are all active in obscure topics very unrelated to each other such as Barua (Bangladesh), British Asian, Disco, Sri Lankan Malays and songs related to Dua Lipa. They all seem to have an interest in South Asian languages and topics as well. It's highly likely that they are all operated by the same person. It's also entirely possible that they are using alternate accounts as well.

Diffs:
 * IP 2001:8003:5c28:6700:15b4:3732:2edf:3f5f:


 * Made an edit on Future Nostalgia, a song by Dua Lipa
 * Made an edit on Sri Lankan Malays
 * Made an edit on Barua (Bangladesh)


 * Sapah3:
 * Made an edit on Levitating, a song by Dua Lipa
 * Made an edit on Sri Lankan Malay Language (and many more, as well as in within the same topic area)
 * Made edits on Disco (and many more)
 * Made edits on Barua (Bangaldesh) (and many more)
 * Made edits on British Asian
 * and so did IP 2001:8003:4E6B:7F00:950F:DF2F:6FE7:6E53, who seem to be in the same IP range (2001:8003:...)
 * Made edits on Singaporeans (and many more)
 * IP 2001:8003:5C28:6700:15B4:3732:2EDF:3F5F above also made an edit on Music of Singapore, definitely within the same topic area


 * IP 2001:8003:5C28:6700:601E:9EA4:8213:1460:
 * Made an edit on Sri Lankan Malays (and many more, including reverting other users and engaging in talk page discussions without disclosing their connection with Sapah3)
 * Interestingly, The IP misled Revirvlkodlaku by claiming and I quote "My IP address often changes but more recently it's often stayed the same. I may create an account in the future though because I know it's easier to keep track of edits". The diffs provided seems to suggest otherwise and that they very much already have an account.
 * Made an edit on Disco as well. AbsorbedLastage (talk) 02:24, 16 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * A checkuser isn't going to run a single user against a list of IP addresses. CheckUser is used for identifying if multiple accounts are being used by the same person. Declining CU request...  ~Oshwah~  (talk) (contribs)   02:36, 16 November 2020 (UTC)


 * So first, I'm throwing out 2601:44:8701:6C00:8115:38E0:DFE9:443A and 2601:48:8100:9740:ECEA:60F:3662:AE88 - they're in the US while the others are in Australia and I don't see anything more convincing than "small edit overlap". Now, as for 2001:8003:5C28:6700::/64 (which covers all of the recently-active IPs), I feel reasonably confident that that is Sapah3 editing logged-out, similar edit summary styles and strong overlap in interests. What pushes this over the line for me from "unintentional logged-out editing" to "deceptive" is that, as the filer indicated, the IP explicitly claimed that they don't have an account. Blocked Sapah3 and the IP range I mentioned for two weeks each. Closing. GeneralNotability (talk) 02:48, 16 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recently came across a newly created user on East Asian people and articles relating to Asia making sudden contentious edits. I had a hunch that this couldn't possibly be a new user, and so I looked down the revision history and found a user named Sapah3 who made similar claims on the same article. And lo and behold, this specific user was just blocked a few days ago for sockpuppetry with various IPs, and so I doubt this newly created user isn't just a coincidence. Edit summaries from both accounts are very similar as well with also a strong overlap in interests (genetic history of Asian groups). Although "FloralRiver" was created on September 21 according to its log, it laid dormant until November 20-21, which was just a few days after Sapah3 first got blocked.

Their contributions also seem to correlate Sapah3's edits from the timestamps on November 21 -


 * FloralRiver's edits on East Asian people (and Yellow cab (stereotype)) were made from 1:08 to 1:19, 21 November 2020
 * Sapah3's response on their talk page was made on 02:58, 21 November 2020
 * FloralRiver then returned on Mail-order bride on 03:10, 21 November 2020. (barely 10 mins after Sapah3)

Based from above, it's possible that were some account switching going on. I've read their talk page, and if they really wanted a WP:CLEANSTART, they shouldn't be editing on articles that they frequent, re-adding material that their old account did, or especially while they are still blocked.

Lastly, this was also Sapah3's IP range that got blocked, and you can get a sense that they are definitely some WP:DUCKish behavior with all the Singapore, South East Asian, East Asian, South Asian, Indian, etc. stuff. This is also prevalent on their main account. ShelteredCook (talk) 06:30, 22 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Blocked and tagged.  ~Oshwah~  (talk) (contribs)   21:47, 22 November 2020 (UTC)
 * I suppose it's time to block the master for good? ShelteredCook (talk) 04:47, 23 November 2020 (UTC)


 * Master indeffed by SilkTork. Tagged, closing. GeneralNotability (talk) 20:07, 23 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Flagged as "likely bad faith" on recent changes. A new account making major edits on East Asian people, seems to be connected to the modus operandi of this specific sockmaster based on the revision history. Liberaldemocrat (talk) 09:40, 12 December 2020 (UTC)

Also, huge WP:DUCK from IP. Liberaldemocrat (talk) 10:43, 12 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * A ton of logged out editing
 * A ton of logged out editing




 * ✅ but ❌ to the above:
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)
 * -- Amanda  (aka DQ) 23:34, 12 December 2020 (UTC)
 * Somebody should double-check me on this, but it looks like SánchezW is the oldest of this bunch, so I'll move these all to Sockpuppet investigations/SánchezW. -- RoySmith (talk) 02:06, 13 December 2020 (UTC)


 * 195.123.241.29 looks long-term static, with relevant history back to early September; blocked for 3 months. Gonghca looks unrelated.  Closing. -- RoySmith (talk) 22:24, 13 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Note the IP, "2001:8003:5c...", identical IP range to Sapah3's logged out editing, so it seems like the sockmaster is still socking around Wikipedia while logged out. Sapah3 and their socks usually hangs out around Asian topics in relation to genetics as well, confirming strong overlap in interests and similar editing styles, WP:DUCK for sure.

Both IPs also geolocates to Australia, where Sapah3 originates. Pinging to confirm this, as you were the blocking admin at the time based on the archives. AmandaNP had also confirmed back on December 12 that Sapah3/FloralRiver has been engaging in logged out editing, this is most likely one of them that I've come across. Liberaldemocrat (talk) 16:51, 28 December 2020 (UTC)

100% convinced this is Sapah3/FloralRiver now, judging by the IP range we can see here. (2001:8003:5c00:1a00:0:0:0:0/64) Liberaldemocrat (talk) 17:20, 28 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' This is my defense. I don't make problematic edits to Wikipedia. I follow the rules. The only time I have broken the rules was by using a second account while waiting for a block to expire. That is the only time I have broken the rules on Wikipedia.

I was unfarily targeted by an IP address (who happens to live in my city) in which my privacy on Wikipedia was breached. I came to Wikipedia to edit privately, not to have my identity exposed by an IP user who knows who I am now. They didn't like how I reverted an unconstructive edit they made as an IP user and they came after me by using multiple accounts (, and ). When all of those accounts were blocked for sockpuppetry, they created a new account and successfuly got me blocked by locating my location and building a case to block me.

The thing is if you look at the edits I have made on my original account, I haven't made a single problematic edit. I always provide sources and I always engage in discussion if there is an issue. I'm not here to destroy Wikipedia. I don't tamper with edits and I don't pretend to be two different users. I only come here to make constructive edits.

In regards to my second account, I created this account because at the time, I had suspicion that the IP user would come after me in another form and somehow get me blocked. I created this account (FloralRiver}) to defend myself and get my original account back in case that ever happened. I made three initial edits using this account to test what it felt like to edit under a different "persona" per se. I should have waited until my 2 week block ended but I didn't and broke the rules as a result of that.

Yes I made a huge error by using a second account without waiting for my block to end. However, I am not problematic and my intention is to contribute positively to Wikipedia. I find it so unfortunate that my good intentions on this site have been compromised because an IP user had a problem with me in which they exposed my identity.

If there is one thing that you take from this, it's that I'm not problematic. If you look at my edits on my registered account you will see that I don't make edits to destroy this site. My good intentions on this site were compromised by an IP user who had issues with me and exposed my identity. I made one mistake, that's a fact but I would like to think that one mistake doesn't define who I am as an editor on this site. (101.165.223.2 (talk) 03:01, 29 December 2020 (UTC))
 * Also, just letting you know my IP address has changed because I'm currently in another location at the moment. I'm IP address 2001:8003:5C00:1A00:319E:D4CA:C6D0:174.

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked 2001:8003:5C00:1A00:0:0:0:0/64 for 1 month. Back in November, they were on 2001:8003:5C28:6700::/64, which leads me to assume we'd really need to block 2001:8003:5C00::/40 to be effective, and that's too big a range to contemplate blocking, I think. -- RoySmith (talk) 03:29, 29 December 2020 (UTC)
 * It seems like 101.165.223.2 (range 101.165.223.0/23) has also exposed themselves as Sapah3. Liberaldemocrat (talk) 03:46, 29 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I'm not sure if this is either a sock of Sapah3 or SanchezW, as they have both made similar edits on the same topics, but UNFen is a huge WP:DUCK for both of them, as they seem to be really knowledgeable (knowing how to add references immediately, as well as starting discussions on talk pages) for a "new user" on similar topics. (Asian genetics, culture, etc).

Furthermore, the edit summaries of both diffs here and here seems awfully similar, and the IP geolocates to Southern Australia, with the ISP Telstra Internet, identical to Sapah3's and their IP socks if you look at the archives. ShelteredCook (talk) 17:58, 11 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' Surely this has to be a misunderstanding? I created this account a few days ago to make some edits to Asian values page. I added sources (yeah I know my sources weren't done correctly, but I just copied what was already in the article). I can guarantee that I'm not a user pretending to be another user. Why would I be two different users? Did I do something wrong with my edits? You deleted it and said I'm another user? Why? I'm very confused and very upset. — Preceding unsigned comment added by UNFen (talk • contribs) 12:55, 13 January 2021 (UTC)
 * I think it's weird that you somehow "forgot" to sign this, but having no problems doing so on this IP's talk page. Your literal first edit which was on Asian values was real sophisticated for a "new user", including having advanced knowledge as to how to include an image array as well as POV edits that were previously included by previous socks. Lastly, new users very rarely comment on SPIs, because they are still trying to get the hang of this website. The fact that you are here just implies that you were observing this page from time to time, as you were not tagged. If you're going to at least pretend to be a new user, perhaps don't make it too obvious that it can be sensed from far away. Even if a CU report didn't return as "confirmed", although "possilikely" pretty much confirmed my suspicions, as well as Sapah3's previously mentioning of "moving places" (although still within the same country), this is textbook WP:DUCK. ShelteredCook (talk) 01:43, 14 January 2021 (UTC)


 * Interesting. The fact that they are of the same IP range (and therefore the same country, etc) as well as the similar edit overlap of Asian topics, and while telcos can have huge ranges (like you said, considering Telstra is the largest telecommunications company in Australia) I can fairly access that this is almost definitely Sapah3. On 28 December, they did mention about being "currently in another location at the moment", with a IPv4 IP 101.165.223.2, also from Southern Australia. They have previously evaded under an IPv6 IP as well, also from the same location. It's possible that they are jumping around IPs at the moment. The behavior of immediately going to one's talk page to prove a point like what UNFen did on this IP seems familiar with what FloralRiver did on my own talk page, which was a confirmed sock of Sapah3. ShelteredCook (talk) 05:14, 12 January 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * . Same IP range (although huge), and same user agents (although very common).  ~Oshwah~  (talk) (contribs)   02:50, 12 January 2021 (UTC)


 * Closing without action. UNFen hasn't edited since January, and in my view there isn't enough evidence to block for sockpuppetry. Specifically, there doesn't seem to be any recent overlap on the Asian values article in particular, and based on Oshwah's statement, it looks like CU isn't very conclusive either. Incidentally, the filer of this SPI has since been blocked for sockpuppetry themselves. Mz7 (talk) 21:06, 24 March 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Ayuuy7 and the sockmaster has the same niche interests in various topics that overlap each other, including on Sri Lanka Malays, genetics in relation to Sinhalese people, Asian people, British Asians, Oil paper umbrella, Sarong party girl, Asian drama shows, and Sri Lankan celebrities.

They also have identical edit summaries and writing style, especially when talking about genetics in relation to Asian people. These are some summarized examples, but a look at both of their contributions show much more similarities than implied here that they are of the same person.

Sarong party girl: Genetics and archaeogenetics of South Asia Oil paper umbrella
 * FloralRiver (A confirm sock of Sapah3)
 * Ayuuy7
 * Sapah3
 * Ayuuy7
 * Sapah3 (1), Sapah3 (2)
 * Ayuuy7 ZaneFelix (talk) 14:00, 16 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * onhold - for training -- RoySmith (talk) 16:40, 16 November 2021 (UTC)
 * - There's enough differences between the accounts that I'm unconvinced. Closing with no action. --Jack Frost (talk) 19:55, 17 November 2021 (UTC)
 * Please hold off on archiving for a bit. --  Tamzin  [ cetacean needed ] (she/they) 07:01, 18 November 2021 (UTC)
 * I concur and have . --Blablubbs (talk) 09:54, 18 November 2021 (UTC)
 * onhold - filing user blocked, reviewing case ~TheresNoTime (to explain!) 22:26, 18 November 2021 (UTC)
 * , noting:
 * is ✅ to, for  to  ~TheresNoTime (to explain!) 22:32, 18 November 2021 (UTC)
 * is ✅ to, for  to  ~TheresNoTime (to explain!) 22:32, 18 November 2021 (UTC)


 * ☝️ Take note: I have collapsed the above as this became somewhat cluttered. The tl;dr is:
 * is fairly to
 * During the check I found:
 * who is ✅ to, ∴ it is safe to say are  to.
 * Listed accounts.
 * Y'all, withholding Jack, ", please call the tower". ~TheresNoTime (to explain!) 22:49, 18 November 2021 (UTC)
 * (Student pilot gets that deer-in-the-headlights look while their instructor keys the mike to soothe things over with ATC). Jack and I discussed this off-wiki prior to his closing the case.  What caught Jack's attention first was that filing this SPI was ZaneFelix's 5th edit (and I see ZF has since been blocked as an INTSF sock).  That said to both of us that this couldn't be legitimate, and we discussed whether endorsing for CU to check ZaneFelix would be fishing or not, and the various kinds of trolling and abuse that goes on at SPI.  So don't be too harsh with poor Jack.  Ready to copy, go ahead with the phone number, request progressive to the GA ramp. -- RoySmith (talk) 23:15, 18 November 2021 (UTC)
 * - Everyone's blocked and tagged. Discussed with TNT offwiki and agreed there's nothing else to do. Closing. --Jack Frost (talk) 03:44, 20 November 2021 (UTC)
 * - Everyone's blocked and tagged. Discussed with TNT offwiki and agreed there's nothing else to do. Closing. --Jack Frost (talk) 03:44, 20 November 2021 (UTC)

Suspected sockpuppets
Same Australian IP range and similar topic area, related to Sri Lanka, music and some kind of south-east Asian POV per which they added this WP:OR. Note that in another edit by a previously confirmed IP range  they declared their ancestry. Fylindfotberserk (talk) 11:32, 11 March 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Spicy (talk) 15:06, 30 March 2024 (UTC)
 * IP edits old, closing. Bbb23 (talk) 13:06, 4 April 2024 (UTC)