Wikipedia:Sockpuppet investigations/TillyMullaly5/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Please see this AN thread. Userpages are being created to spam a link. Requesting checkuser to confirm, find any accounts that have been missed and hardblock any IPs being used. — Berean Hunter   (talk)  11:34, 21 July 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Track: (want to look through some things, and now we can find it back from the spam-side of stuff) --Dirk Beetstra T  C 17:20, 21 July 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  11:34, 21 July 2017 (UTC) — Berean Hunter   (talk)  12:21, 21 July 2017 (UTC)
 * per the above.
 * inprogress - the accounts are using various VPN services, so they'll each have to be looked at separately. In the mean time, please add Sylvia9693 and DarcyBrewton594 to the list. ​—DoRD (talk)​ 12:01, 21 July 2017 (UTC)
 * Done. Please see the Poke report...there are quite a few more. I'll start adding...

Note that the report is now there, and contains way more than what is listed here or at AN. I have taken the freedom to blacklist: ; see. New editors now will either pop up in the spam blacklist log .. or they will do something else. --Dirk Beetstra T C 12:37, 21 July 2017 (UTC) — Berean Hunter   (talk)  12:42, 21 July 2017 (UTC)
 * There are non-registered accounts popping up in the list...I don't understand why they are there. For the moment, I've taken them back off the report.
 * Edits on another project, maybe?, can you enlighten us? ​—DoRD (talk)​ 14:03, 21 July 2017 (UTC)
 * Yep, wikinews and wikisource. I'll defer to meta.  The individual edits are listed at the bottom of the report - For the accounts that are not here, you can there see where they were (m:User:LiWa3 keeps an eye on ~819 wikis ...).  --Dirk Beetstra T  C 14:48, 21 July 2017 (UTC)
 * It was already done there: diff by User:Billinghurst. There may be a task here for stewards to lock the accounts or IPs globally.  --Dirk Beetstra T  C 14:51, 21 July 2017 (UTC)

— Berean Hunter   (talk)  15:24, 21 July 2017 (UTC)
 * Okay, CU really isn't very helpful here. Other than the two accounts I turned up early on, and two web hosting rangeblocks, my checks have been fruitless. These accounts all have the same UA, but they're making use of widely scattered VPN/proxy services. Given that this is a commonly-used spamming technique, SPI probably isn't the best venue to deal with it. ​—DoRD (talk)​ 14:17, 21 July 2017 (UTC)
 * Tagged and closing. GABgab 15:06, 21 July 2017 (UTC)
 * Placed on hold awaiting global locks at meta. Request is here.
 * Done. In addition to the aforementioned accounts, I have found more than 80 spambots. Abused IP ranges and open proxies have been globally blocked. R adi X  ∞  20:56, 21 July 2017 (UTC)

— Berean Hunter   (talk)  21:07, 21 July 2017 (UTC)
 * Excellent work. Looks like we have everything in order here so I'm closing this.