Wikipedia:Sockpuppet investigations/Tessable/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

These three users were all created in the last few minutes, and all of them have three edits - one creating their user page, another their user talk page and the third adding a reference to the same website - see, ,. The editing itself doesn't seem particularly pernicious, but they are clearly socks of some account. I'm pretty sure I've seen this same ref added elsewhere today but didn't note where at the time, hence the CU request. GoldenRing (talk) 17:25, 11 January 2017 (UTC)

Now up to eight socks, all with identical editing patterns, all created inside the last two hours. GoldenRing (talk) 17:35, 11 January 2017 (UTC)

Apologies that I've probably got the wrong account as the master on this report. Not sure how best to fix it, sorry. GoldenRing (talk) 17:36, 11 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ + the following accounts:
 * is ✅.
 * Blocked all without tags. Please determine the oldest account and move the case accordingly. However, if, as I suspect, KKSabir is the oldest account, I see no behavioral connection between that account and the others. KKSabir is a vandal. I've blocked the account, but if you agree about the absence of any behavioral connection, KKSabir should not be the master and should not be tagged. Please let me know if this is unclear.--Bbb23 (talk) 18:31, 11 January 2017 (UTC)
 * I believe this is related to this case, Bbb23. --Bsadowski1 19:07, 11 January 2017 (UTC)
 * Behaviorally, I agree. I haven't run it technically but it certainly looks like Brilbuterin. Katietalk 19:16, 11 January 2017 (UTC)
 * The Brilbuterin case is complicated, but I don't see a technical relationship between this case and that one.--Bbb23 (talk) 20:34, 11 January 2017 (UTC)
 * More specifically, these accounts spammed the same domains (myhappyjourney.com, jobs-frankfurt.org, waschmaschinentest.net) in the same obfuscated way as the bunch of accounts reported by DeltaQuad at the bottom of the Brilbluterin SPI except now they're using URL shorteners to circumvent the spam blacklist. I also found one more account and an IP address:
 * in the spam blacklist logs, who hit the blacklist immediately before Altoskilom did. MER-C 03:27, 12 January 2017 (UTC)
 * Technically, the accounts here are closer to Amanda's list than the others. Eggedbursa and socks are different from the rest of the socks listed in the Brilbuterin case in one important respect. They are editing from a different country. However, the other technical data of the socks here and the Eggedbursa socks doesn't match, at least not for the two socks (Eggedbursa and Rogercosts) I checked (I didn't recheck Amanda's list). To make things even more complicated, over time the OfficialPankajPatidar case has gotten somewhat muddled with respect to locations, with the master and socks initially editing from one country but then many subsequent socks editing from the second country. I've watched this with some dismay, although I've largely acquiesced in it because of the strong behavioral evidence and because the socks obviously match each other. At one point I believe I created separate groups but somehow they got smushed together as one big blob.--Bbb23 (talk) 14:08, 12 January 2017 (UTC)
 * The Brilbuterin case is complicated, but I don't see a technical relationship between this case and that one.--Bbb23 (talk) 20:34, 11 January 2017 (UTC)
 * More specifically, these accounts spammed the same domains (myhappyjourney.com, jobs-frankfurt.org, waschmaschinentest.net) in the same obfuscated way as the bunch of accounts reported by DeltaQuad at the bottom of the Brilbluterin SPI except now they're using URL shorteners to circumvent the spam blacklist. I also found one more account and an IP address:
 * in the spam blacklist logs, who hit the blacklist immediately before Altoskilom did. MER-C 03:27, 12 January 2017 (UTC)
 * Technically, the accounts here are closer to Amanda's list than the others. Eggedbursa and socks are different from the rest of the socks listed in the Brilbuterin case in one important respect. They are editing from a different country. However, the other technical data of the socks here and the Eggedbursa socks doesn't match, at least not for the two socks (Eggedbursa and Rogercosts) I checked (I didn't recheck Amanda's list). To make things even more complicated, over time the OfficialPankajPatidar case has gotten somewhat muddled with respect to locations, with the master and socks initially editing from one country but then many subsequent socks editing from the second country. I've watched this with some dismay, although I've largely acquiesced in it because of the strong behavioral evidence and because the socks obviously match each other. At one point I believe I created separate groups but somehow they got smushed together as one big blob.--Bbb23 (talk) 14:08, 12 January 2017 (UTC)
 * in the spam blacklist logs, who hit the blacklist immediately before Altoskilom did. MER-C 03:27, 12 January 2017 (UTC)
 * Technically, the accounts here are closer to Amanda's list than the others. Eggedbursa and socks are different from the rest of the socks listed in the Brilbuterin case in one important respect. They are editing from a different country. However, the other technical data of the socks here and the Eggedbursa socks doesn't match, at least not for the two socks (Eggedbursa and Rogercosts) I checked (I didn't recheck Amanda's list). To make things even more complicated, over time the OfficialPankajPatidar case has gotten somewhat muddled with respect to locations, with the master and socks initially editing from one country but then many subsequent socks editing from the second country. I've watched this with some dismay, although I've largely acquiesced in it because of the strong behavioral evidence and because the socks obviously match each other. At one point I believe I created separate groups but somehow they got smushed together as one big blob.--Bbb23 (talk) 14:08, 12 January 2017 (UTC)


 * Case moved, all tagged, closing.  Vanjagenije  (talk)  10:07, 15 January 2017 (UTC)