Wikipedia:Sockpuppet investigations/Tokyo Metro 6000 series/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Edits on Ralph Breaks the Internet - see and. Targets this article also logged out with IPs generally from PT Telkom Indonesia. Geraldo Perez (talk) 03:30, 9 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Sock is blocked and tagged.  ~Oshwah~  (talk) (contribs)   20:11, 9 November 2020 (UTC)


 * Master originally blocked for vandalism, re-blocking and tagging as sock. -- RoySmith (talk) 01:56, 10 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Giant duck. Based on their edits on Administrators' newsletter/Subscribe, their interest in trains and buses, and most importantly, this. Enjoyer of World💬 02:02, 11 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅., closing. Mz7 (talk) 18:29, 11 November 2020 (UTC)
 * as the master is locked and there is crosswiki abuse. Mz7 (talk) 18:34, 11 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Article focus same as other socks. this and this and this Geraldo Perez (talk) 00:09, 12 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Mz7 (talk) 01:05, 12 November 2020 (UTC)
 * ✅ plus the following accounts:
 * , closing. . Mz7 (talk) 01:22, 12 November 2020 (UTC)
 * , closing. . Mz7 (talk) 01:22, 12 November 2020 (UTC)
 * , closing. . Mz7 (talk) 01:22, 12 November 2020 (UTC)
 * , closing. . Mz7 (talk) 01:22, 12 November 2020 (UTC)
 * , closing. . Mz7 (talk) 01:22, 12 November 2020 (UTC)
 * , closing. . Mz7 (talk) 01:22, 12 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same vandalism target as rest of socks Geraldo Perez (talk) 00:46, 15 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to each other:
 * There seems to be at least some use of proxies here. NinjaRobotPirate (talk) 01:45, 15 November 2020 (UTC)
 * There seems to be at least some use of proxies here. NinjaRobotPirate (talk) 01:45, 15 November 2020 (UTC)
 * There seems to be at least some use of proxies here. NinjaRobotPirate (talk) 01:45, 15 November 2020 (UTC)
 * There seems to be at least some use of proxies here. NinjaRobotPirate (talk) 01:45, 15 November 2020 (UTC)
 * There seems to be at least some use of proxies here. NinjaRobotPirate (talk) 01:45, 15 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Resumed from previous socks same vandalism edits Geraldo Perez (talk) 06:23, 15 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Indef'd and tagged.  ~Oshwah~  (talk) (contribs)   20:20, 15 November 2020 (UTC)


 * Closing as global locks have already been requested for all five accounts today. Mz7 (talk) 20:31, 15 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Username differs by only the first digit (5000 vs 6000) DannyS712 (talk) 03:49, 24 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Confirmed to a bunch of disruptive accounts:
 * . NinjaRobotPirate (talk) 06:54, 24 November 2020 (UTC)
 * . NinjaRobotPirate (talk) 06:54, 24 November 2020 (UTC)
 * . NinjaRobotPirate (talk) 06:54, 24 November 2020 (UTC)
 * . NinjaRobotPirate (talk) 06:54, 24 November 2020 (UTC)
 * . NinjaRobotPirate (talk) 06:54, 24 November 2020 (UTC)
 * . NinjaRobotPirate (talk) 06:54, 24 November 2020 (UTC)
 * . NinjaRobotPirate (talk) 06:54, 24 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

KRL vandalism, request CU, there are many other accounts that weren't known recently. MRZQ (talk) 12:45, 26 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked. No obvious accounts found. NinjaRobotPirate (talk) 12:56, 26 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

KRL/train vandalism, Special:History/Hindia_(singer), changed redirect. MRZQ (talk) 12:53, 27 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Some more where that came from:
 * I'll request global locks. NinjaRobotPirate (talk) 13:58, 27 November 2020 (UTC)
 * I'll request global locks. NinjaRobotPirate (talk) 13:58, 27 November 2020 (UTC)
 * I'll request global locks. NinjaRobotPirate (talk) 13:58, 27 November 2020 (UTC)
 * I'll request global locks. NinjaRobotPirate (talk) 13:58, 27 November 2020 (UTC)
 * I'll request global locks. NinjaRobotPirate (talk) 13:58, 27 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Extremely similar usernames. See this. HurricaneTracker495 (talk) 19:31, 2 December 2020 (UTC)

Other have same editor focus and same vandalism pattern. Geraldo Perez (talk) 01:29, 3 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Please note: if a clerk archives this, consider merging with the case below. Thanks. HurricaneTracker495 (talk) 13:03, 3 December 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * See below. KevinL ( aka L235 · t · c) 03:15, 3 December 2020 (UTC)

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Making the same types of edits to the same articles adding the same images.

https://en.wikipedia.org/w/index.php?title=Ralph_Breaks_the_Internet&diff=prev&oldid=992011143

https://en.wikipedia.org/w/index.php?title=Ralph_Breaks_the_Internet&diff=prev&oldid=992020344

https://en.wikipedia.org/w/index.php?title=Bogor_Zoology_Museum&diff=prev&oldid=992019991

https://en.wikipedia.org/w/index.php?title=Bogor_Zoology_Museum&diff=prev&oldid=992018872

I've blocked them all as quacking but I've not tagged them.

I'm requesting CheckUser as I discovered two of the accounts by accident and just want to make sure there's no sleepers been created. 5 albert square (talk) 02:57, 3 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This is part of Sockpuppet investigations/Tokyo Metro 6000 series. ✅ to each other:
 * Mass Rapid Transit Jakarta
 * Kereta rel listrik
 * Piyuts
 * Best, KevinL ( aka L235 · t · c) 03:14, 3 December 2020 (UTC)
 * , requesting locks. KevinL ( aka L235 · t · c) 03:16, 3 December 2020 (UTC)
 * Best, KevinL ( aka L235 · t · c) 03:14, 3 December 2020 (UTC)
 * , requesting locks. KevinL ( aka L235 · t · c) 03:16, 3 December 2020 (UTC)
 * Best, KevinL ( aka L235 · t · c) 03:14, 3 December 2020 (UTC)
 * , requesting locks. KevinL ( aka L235 · t · c) 03:16, 3 December 2020 (UTC)
 * , requesting locks. KevinL ( aka L235 · t · c) 03:16, 3 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Looks diff. MRZQ (talk) 08:54, 5 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Newly-created User:KGBishna and User:Another KGBishna have been protesting against the deletion of and added  etc to that category which was created by known sock User:BOO109.Le Deluge (talk) 10:07, 8 December 2020 (UTC)
 * To make sure this is seen I added a new report below with both of those users DannyS712 (talk) 13:23, 8 December 2020 (UTC)
 * I have reported remaining not globally locked socks to SRG.  SMB9 9thx   my edits!  05:42, 10 December 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments



 * Also found and ✅:
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)
 * All are indef'd and tagged.  ~Oshwah~  (talk) (contribs)   01:24, 7 December 2020 (UTC)


 * Updated tag for Transjakarta Cityline, closing. -- RoySmith (talk) 21:14, 9 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

So this is a sly attempt to evade detection, I think. I noticed this user making ostensibly adequate edits to Ralph Breaks the Internet, one of this sockmaster's pages of choice, last night ("adequate" as in some changes seemed fine and others introduced issues I had to revert)... but their edit summaries seemed off, linking to something the way some automated tools do... except it was a random page for GMA channel New Year's specials. I just thought maybe it was some weird semi-automated edit that maybe was set up for some sort of previous editing? But when I got up this morning I noticed more edits by this user and they're the same "ostensibly adequate" but now the edit summaries link to things like Tokyo Metro 6000 Series, JR Group, and KAI Commuter, which are definitely part of this sockmaster's MO (and several more recent edits include "via" Internet Archive links in the summary that are entirely unrelated to the edit or page (diff, archive link). I've never reported suspected socking that looks like this so here's hoping I'm doing it right? This account is much older than Tokyo Metro 6000 Series (it's from 2018 and with an editing history, which meant it was able to evade the page protection put into place to prevent the sockmaster from continuing to edit) so if this account is related then technically it's the sockmaster, I think? (Geez, I'm so inexperienced with reporting at SPI, sorry.) Purplewowies (talk) 13:44, 9 December 2020 (UTC)
 * , Thanks for filing the report, and please keep on the lookout for other socks and file reports on them as needed. For future reference, the best reports are short and sweet.  More diffs, less essay :-)  But, please don't take that the wrong way, we do appreciate the report. -- RoySmith (talk) 21:30, 9 December 2020 (UTC)
 * , that's fair--I'm very prone to essays in general but I think I did even more "talking it out" than usual here because the summaries had me so thoroughly confused. - Purplewowies (talk) 00:58, 10 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ❌.  ~Oshwah~  (talk) (contribs)   14:53, 9 December 2020 (UTC)


 * I don't understand what's going on with the archive.org links, but I don't see any obvious evidence of socking. Closing with no action taken. -- RoySmith (talk) 21:51, 9 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

See the history edits, this user seems very similar to the one here. 115.178.195.174 (talk) 08:50, 10 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * (Copied from an edit request on Wikipedia talk:Sockpuppet investigations/Pemasangan papan nama stasiun KA Baru (2020 ver.)) Both editors indeed overlap on making odd edits to Jakartan train station articles. – Thjarkur (talk) 10:17, 10 December 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Nothing left to do here, closing. -- RoySmith (talk) 14:52, 10 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

As far as I can tell, the only pages they've ever edited are ones previously created or edited by Tokyo Metro or their socks, most commonly BOO109, for example Kereta Api Indonesia, EA203 series, and most significantly CC300, which they both requested be moved into mainspace and 114.79.2.139 is now requesting be restored after G5. It's possible it's just another railfan, but block evasion is what I suspect. 114.79..0.0/16 is too wide a range to block, so mostly noting it here for the archives. -- RoySmith (talk) 16:24, 17 December 2020 (UTC)
 * I would add, they are familiar with obscure wiki-processes such as WP:RMT, WP:REFUND, and the details of WP:G5 requirements, so clearly not a random new user. -- RoySmith (talk) 18:08, 17 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No activity from this IP for more than a month. Closing.  Vanjagenije  (talk)  22:19, 19 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Familiar vandalism on File:Ralph Breaks the Internet (2018 film poster).png Geraldo Perez (talk) 01:43, 20 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Confirmed to previous socks, plus: -- zzuuzz (talk) 02:09, 20 December 2020 (UTC)


 * Added tags. -- RoySmith (talk) 02:49, 20 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same username match as the other socks; already blocked indeffed on Indonesian Wikipedia, who vandalized the same article Ralph Breaks the Internet in said different language wiki. Chompy Ace 09:11, 24 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Requesting CU for sleepers. I also requested global locks.  Mario Jump  83!  09:19, 2 January 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - for a sleeper check and confirmation. Dreamy Jazz talk to me &#124; my contributions 11:23, 2 January 2021 (UTC)
 * . Already globally locked. Closing. TonyBallioni (talk) 17:39, 2 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

See diff, Tokyo Metro 6000 series. MRZQ (talk) 03:31, 4 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

For the record, I've requested a lock at Meta.  Java Hurricane  04:33, 4 January 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Bagging and tagging sock. This SPI report can be closed...  ~Oshwah~  (talk) (contribs)   04:17, 4 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same pattern of the actual train edits to the page Ralph Breaks the Internet, which continues LTA vandalism since protection has expired in January 3, 2021. Chompy Ace 00:14, 8 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. Case closed.  Vanjagenije  (talk)  15:22, 8 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Another series of socks found in Talk:Ralph Breaks the Internet/GA1, where the user is working on it Chompy Ace 02:17, 12 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * K41 was already blocked for vandalism, reblocking as a sock and tagging. -- RoySmith (talk) 02:33, 12 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same targets in the page Field trip. Chompy Ace 07:05, 18 January 2021 (UTC)

Added sock. --MRZQ (talk) 12:25, 18 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Accounts are now either blocked or locked, one IP is blocked, and the other IP made just one edit two days ago. Nothing more to do here, so I'm closing this.  Vanjagenije  (talk)  22:47, 18 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same targets of patterns as before and matching usernames named after KAI Commuter, including a user KAI Services doing a KRL Commuterline target seemingly used to become a good article, which violates the GA criteria. Chompy Ace 09:53, 27 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * -- RoySmith (talk) 14:39, 27 January 2021 (UTC)
 * Dreamy Jazz talk to me &#124; my contributions 22:36, 27 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same username matches as previous socks. Chompy Ace 13:07, 4 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I agree the user name raises flags, but they have 0 edits (at least on enwiki). Please reopen if they start to be disruptive.  Closing with no action taken. -- RoySmith (talk) 01:09, 5 February 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Inserting "KRL" at completely unrelated subject. (diff). Already blocked at id wikipedia. enjoyer|talk 04:53, 10 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Global lock has already been requested. Dreamy Jazz talk to me &#124; my contributions 13:50, 10 February 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same pattern as previous socks. Chompy Ace 06:28, 25 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Requesting CU.  Mario Jump  83!  01:11, 27 February 2021 (UTC)
 * , can you indef? The user page is now deleted, the user blocked at idwiki and a lock requested. Thanks.  Java Hurricane  11:19, 28 February 2021 (UTC)
 * JavaHurricane - The account has been globally locked. :-)  ~Oshwah~  (talk) (contribs)   17:10, 1 March 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * .  ~Oshwah~  (talk) (contribs)   01:39, 27 February 2021 (UTC)


 * Blocked for good measure and tagged. Close. Dreamy Jazz talk to me &#124; my contributions 22:08, 1 March 2021 (UTC)