Wikipedia:Sockpuppet investigations/TotalTruthTeller24/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

User brought to my attention the belief that these three users are all potentially the same. This stemmed from a WP:AN/I discussion in regards to the account Nurseline247 (perm link here), where Spintendo presented this per the range contributions of the three accounts. All do edit similar article type, and have similar editing styles. I have encourage Spintendo to contribute here specific diffs for this case and will also try and do the same if I can. - Favre1fan93 (talk) 16:53, 11 August 2017 (UTC)
 * Per the Editor interaction utility above, Spider-Man in film is an article where there is a lot of overlap in type of edits between the three (see the report here). - Favre1fan93 (talk) 16:57, 11 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

While we're at it, I'd also like to see investigated. This address implements similar, if not identical, edits to the aforementioned accounts. Also, I'd like to point out that this is not a witch hunt, as a large number of editors have expressed concern about this at the AN/I, as well as the several involved with this SPI. D ARTH B OTTO talk • cont 23:18, 11 August 2017 (UTC)

Pre-presentation statement I understand that this forum prefers links to diffs — however, for explanatory purposes, I do not (I'm adding diffs as I discover them). If diffs are desired, I've made note of all the dates below, and those dates may be used to locate the diffs from this linear-dated user edit chart for all three accounts. In Part I we look at evidence of the user logging into the three different acounts. Part II contains evidence from 3 particular episodes where the different accounts are used to add material that has been removed by other editors.

Part I (account cycling You can easily make out this user's path as they navigate through logging on, then off, and on again, to one of the three different accounts. Let's start by taking a look at edits made three days ago (Note: The sequence as shown here is opposite to how it appears in wikipedia, with the top being the oldest edits and the newest towards the bottom.)

On August 9, 2017 Nurseline247 makes 2 edits, at 10:28 and 10:29. One hour later starting at edit #10 through edit #16, the user signs in under TotalTruthTeller24 at 11:29 and makes a series of edits from 11:29 until 12:58. The user logs out for 45 minutes and returns under Impending IP (edit #17) at 13:43.

08. 2017-08-09, 10:28  Nurseline247  (diff)(hist)  List of fictional shared universes in film and television‎ · (Centralizing side of Film list, to be more presentable.) 09. 2017-08-09, 10:29 Nurseline247  (diff)(hist)  Wikipedia:Administrators' noticeboard/Incidents‎ · (/* Nurseline247 repeatedly reinstates content on multiple character  10. 2017-08-09, 11:29  TotalTruthTeller24  (diff)(hist)  List of Batman films cast members‎ · (/* Lego DC Comics Super Heroes */) 11. 2017-08-09, 11:36  TotalTruthTeller24  (diff)(hist)  List of Batman films cast members‎ · (/* Lego DC Comics Super Heroes */) 12. 2017-08-09, 11:50  TotalTruthTeller24  (diff)(hist)  Sharknado (film series)‎ · (/* Recurring cast and characters */) 13. 2017-08-09, 12:56  TotalTruthTeller24  (diff)(hist)  The Producers (2005 film)‎ · (/* Reception */) 14. 2017-08-09, 12:57  TotalTruthTeller24  (diff)(hist)  The Producers (2005 film)‎ · (/* Sequel */) 15. 2017-08-09, 12:58  TotalTruthTeller24  (diff)(hist)  Template:The Producers‎ ·  16. 2017-08-09, 12:58  TotalTruthTeller24  (diff)(hist)  Trumped (short film)‎ · (←Redirected page to The Producers (2005 film)) 17. 2017-08-09, 13:43 Impending IP        (diff)(hist)  It (2017 film)‎ ·

On July 16 and 17, 2017, with edit #18 at 22:41, the username Nurseline247 (shown in green) is making edits to Spider Man Homecoming and Spider Man in film (shown in yellow) until 22:58. Sixteen minutes later at 23:14 (edit #21), the user logs out of Nurseline247 and logs in as Impending IP (shown in purple) and makes an edit to the exact same article (shown in yellow), Spider Man in film, at 23:14. They then make two more edits (#22 and #23) and presumably retire for the night. The next day, July 17, the user logs in not under Impending IP (the last account used the night prior, shown in purple) but rather, Nurseline247 (shown in green). Under that name, the user then proceeds to make an edit (#24) to the very same Spider-Man:Homecoming page that the alter account Impending IP had been editing the prior evening (edit #22). In my opinion, it is this edit sequence, more than any other which proves the same person is using these accounts.

18. 2017-07-16, 22:41 Nurseline247  (diff)(hist)  Spider-Man: Homecoming‎ · (Just saw the film, when a clip of the scene is released I will add a ref.) 19. 2017-07-16, 22:57 Nurseline247  (diff)(hist)  Spider-Man in film‎ · ("The" was included in the film; Sally Avril appeared across two franchises; a huge joke was made about Flash's name being Eugene in TASM 1) 20. 2017-07-16, 22:58 Nurseline247  (diff)(hist)  Spider-Man in film‎ · (Fixed typos) 21. 2017-07-16, 23:14 Impending IP  (diff)(hist)  Spider-Man in film‎ · 22. 2017-07-16, 23:19 Impending IP  (diff)(hist)  Spider-Man: Homecoming‎ · 23. 2017-07-16, 23:22 Impending IP  (diff)(hist)  Talk:Spider-Man: Homecoming‎ · (/* Ned / Jacob Batalon */) 24. 2017-07-17, 09:41 Nurseline247  (diff)(hist)  Spider-Man: Homecoming‎ · (Alright, extablished that Homecoming takes place in 2017. Check note.) 25. 2017-07-17, 09:43 Nurseline247  (diff)(hist)  Template:Spider-Man films‎ · 26. 2017-07-17, 09:48 Nurseline247  (diff)(hist)  Damage Control (comics)‎ · (/* Film */) 27. 2017-07-17, 09:48 Nurseline247  (diff)(hist)  Damage Control (comics)‎ · (/* References */)

From Part I, we can see that the three user accounts never overlap in their edits, and are always used in a linear sequence, strongly indicating that the same person is using all of them.

Part II (diffs) In Part II we'll look at how this user employs the three accounts to effect editing changes to Wikipedia. Note that the sequences in Part II are reversed back to how they're displayed in Wikipedia, with the newest on top and the oldest on the bottom.

In the following sequence from May 2, 2017, we see the user cycling through the three accounts to effect an edit change on X-Men (film series)

14:12, May 2, 2017‎ 67.140.170.11 (talk)‎. . (95,388 bytes) (0)‎. (undo) (cur | prev) 14:10, May 2, 2017‎ Rcarter555 (talk | contribs)‎ .(95,388 bytes) (→‎Logan (2017)) (undo | thank) (cur | prev) 14:09, May 2, 2017‎ Rcarter555 (talk | contribs)‎ (95,389 bytes) (→‎Logan Noir (2017): If Days of Future Past: The Rouge Cut doesn't merit its own section, neither does this.) (cur | prev) 14:04, May 2, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (95,438 bytes) (+21)‎. . (→‎Logan Noir(2017)) (undo | thank) (cur | prev) 14:04, May 2, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (95,417 bytes) (+6)‎. . (→‎Logan Noir) (undo | thank) (cur | prev) 14:03, May 2, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (95,411 bytes) (+1,069)‎. . (→‎Logan (2017)) (undo | thank) (cur | prev) 13:57, May 2, 2017‎ 66.69.132.230 (talk)‎. . (94,342 bytes) (-30)‎. . (→‎Recurring characters) (undo) (cur | prev) 12:12, May 2, 2017‎ Nurseline247 (talk | contribs)‎ m. . (94,372 bytes) (+400)‎. . (Better Layout) (undo | thank) (cur | prev) 11:03, May 2, 2017‎ Tenebrae (talk | contribs)‎. . (93,972 bytes) (Undid revision 778365215 by 86.183.69.103 (talk) rvt edit-warring anon IP who leaves uncivil edit summaries) (cur | prev) 10:57, May 2, 2017‎ 86.183.69.103 (talk)‎. . (93,957 bytes) (-15)‎. . (What on earth is wrong with you? Stop acting like you own the place and grow up. That message you left on my talk page lacked any wit or logic too.) (undo) (cur | prev) 10:02, May 2, 2017‎ Hotwiki (talk | contribs)‎. . (93,972 bytes) (-439)‎ (We don't your assumption! Thank you! Also don't revert my updates on box office numbers, Rt de) (cur | prev) 08:14, May 2, 2017‎ Impending IP (talk | contribs)‎ m. . (94,411 bytes) (She's obviously going to beDark Phoenix in the Future if the next film is called "Dark Phoenix".) (cur | prev) 07:58, May 2, 2017‎ 86.183.69.103 (talk)‎. . (93,957 bytes) (-15)‎. . (→‎Recurring characters: This table looks dreadful but at the very least get rid of the scrolling feature. Also, it'd hep if "Hotwiki" wasn't making 3000 edits at a time.) (undo)

In the next sequence from July 20-27, 2017, Nurseline247 attempts to add material to a familiar pet project of theirs, Spider-Man_in_film. When this is reverted, the user re-adds it under Impending IP. (The subsequently added information is not identical to what was removed. See "the rule" below.)

17:41, July 27, 2017‎ 77.103.66.57 (talk)‎. . (103,105 bytes) (0)‎. . (undo) (cur | prev) 08:50, July 27, 2017‎ Favre1fan93 (talk | contribs)‎. . (103,105 bytes) (-599)‎. . (Undid revision 792413437 by Impending IP (talk)) (undo | thank) (cur | prev) 11:22, July 26, 2017‎ 73.116.29.104 (talk)‎. . (103,704 bytes) (0)‎. . (→‎Box office) (undo) (cur | prev) 04:09, July 26, 2017‎ Impending IP (talk | contribs)‎ m. . (103,704 bytes) (+599)‎. . (→‎Licensing agreement with Marvel Studios) (undo | thank) (cur | prev) 08:31, July 25, 2017‎ 86.185.224.254 (talk)‎. . (103,105 bytes) (0)‎. . (→‎Box office) (undo) (cur | prev) 17:17, July 24, 2017‎ 108.17.22.8 (talk)‎. . (103,105 bytes) (+2)‎. . (→‎Recurring cast and characters) (undo) (cur | prev) 11:52, July 24, 2017‎ Favre1fan93 (talk | contribs)‎. . (103,103 bytes) (-1,138)‎. . (Undid revision 792091792 by 86.43.178.233 (talk) unsourced. also, they are still TV episode, despite how they were released) (undo | thank) (cur | prev) 11:51, July 24, 2017‎ Favre1fan93 (talk | contribs)‎. . (104,241 bytes) (-1,200)‎. . (Reverted 1 edit by Nurseline247 (talk): Rvt disruptive, incorrect edit. (TW)) (undo | thank) (cur | prev) 05:07, July 24, 2017‎ Nurseline247 (talk | contribs)‎ m. . (105,441 bytes) (+1,200)‎. . (Aaron Davis The Prowler) (undo | thank) (cur | prev) 05:01, July 24, 2017‎ 86.43.178.233 (talk)‎. . (104,241 bytes) (+1,138)‎. . (→‎Marc Webb films) (undo) (cur | prev) 12:49, July 23, 2017‎ 86.43.178.233 (talk)‎. . (103,103 bytes) (+47)‎. . (undo) (Tags: Mobile edit, Mobile web edit) (cur | prev) 20:27, July 21, 2017‎ Richiekim (talk | contribs)‎. . (103,056 bytes) (+22)‎. . (→‎Captain America: Civil War (2016)) (undo | thank) (cur | prev) 15:20, July 21, 2017‎ 181.228.153.145 (talk)‎. . (103,034 bytes) (0)‎. . (→‎Critical and public response) (undo) (cur | prev) 20:39, July 20, 2017‎ Favre1fan93 (talk | contribs)‎. . (103,034 bytes) (-2,036)‎. . (Reverted 1 edit by Nurseline247 (talk): That's not what you did at all in your edit. plus already mentioned in prose above, so can be included in the table as iss. (TW)) (undo | thank) (cur | prev) 15:22, July 20, 2017‎ Nurseline247 (talk | contribs)‎ m. . (105,070 bytes) (+2,036)‎. . (Given Iron Man 2 does not have its own section above, mentioning details of cameo below Recurring section.) (undo | thank)

The next sequence covers April 24 through May 4, 2017. Again at the user's pet project Spider-Man_in_film, the user spends several days trying to add material that is continually reverted, via one of their three different accounts, straggling the edits over the course of a few days.

15:14, May 4, 2017‎ Favre1fan93 (talk | contribs)‎. . (104,802 bytes) (0)‎. . (→‎Recurring cast and characters: table should not be greater than 100% total) (undo | thank) (cur | prev) 12:08, May 4, 2017‎ Nurseline247 (talk | contribs)‎ m. . (104,802 bytes) (-2)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 21:18, May 3, 2017‎ Taniya94 (talk | contribs)‎. . (104,804 bytes) (0)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 17:18, May 3, 2017‎ 107.77.169.6 (talk)‎. . (104,804 bytes) (-5)‎. . (Removed the word "both" from a sentence in "Licensing" in order to improve readability) (undo) (Tags: Mobile edit, Mobile web edit, Visual edit) (cur | prev) 12:34, May 1, 2017‎ Doniago (talk | contribs)‎ m. . (104,809 bytes) (-127)‎. . (Reverted edits by 217.151.98.13 (talk) to last version by Favre1fan93 gibberish and unsourced) (undo | thank) (cur | prev) 12:01, May 1, 2017‎ 217.151.98.13 (talk)‎. . (104,936 bytes) (+127)‎. . (→‎Spider-Man 4) (undo) (cur | prev) 14:27, April 30, 2017‎ Favre1fan93 (talk | contribs)‎ m. . (104,809 bytes) (+2)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 14:27, April 30, 2017‎ Favre1fan93 (talk | contribs)‎ m. . (104,807 bytes) (-32)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 14:26, April 30, 2017‎ Favre1fan93 (talk | contribs)‎. . (104,839 bytes) (0)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 14:25, April 30, 2017‎ Favre1fan93 (talk | contribs)‎. . (104,839 bytes) (-1,091)‎. . (Undid revision 777977219 by TotalTruthTeller24 (talk)) (undo | thank) (cur | prev) 13:24, April 30, 2017‎ InternetArchiveBot (talk | contribs)‎. . (105,930 bytes) (-2)‎. . (Rescuing 4 sources and tagging 0 as dead. #IABot (v1.3beta8) (Elisfkc)) (undo) (cur | prev) 05:56, April 30, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (105,932 bytes) (+1,091)‎. . (Of course they do! He confirmed that Stan Lee's character in the Marvel Cinematic Universe is the same character! Ergo StanLee has the same specifications Chris Evans and Robert Downy Jr. have for appearing in the Recurring Characters Being in a Solo film) (undo | thank) (cur | prev) 15:34, April 29, 2017‎ Adamstom.97 (talk | contribs)‎. . (104,841 bytes) (-1,091)‎. . (Undid revision 777856931 by TotalTruthTeller24 (talk) Feige's comments have nothing to do with this.) (undo | thank) (cur | prev) 11:41, April 29, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (105,932 bytes) (+1,091)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 11:20, April 28, 2017‎ Captain Assassin! (talk | contribs)‎. . (104,841 bytes) (+43)‎. . (→‎Animation: Untitled animated Spider-Man film) (undo | thank) (cur | prev) 07:59, April 28, 2017‎ 117.224.135.68 (talk)‎. . (104,798 bytes) (+2)‎. . (undo) (cur | prev) 05:54, April 28, 2017‎ Impending IP (talk | contribs)‎ m. . (104,796 bytes) (-1)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 11:54, April 27, 2017‎ Newyorker32 (talk | contribs)‎. . (104,797 bytes) (+3)‎. . (→‎Animation) (undo | thank) (cur | prev) 11:05, April 27, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (104,794 bytes) (+838)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 07:56, April 27, 2017‎ Newyorker32 (talk | contribs)‎. . (103,956 bytes) (-188)‎. . (→‎Animation) (undo | thank) (cur | prev) 05:58, April 27, 2017‎ Impending IP (talk | contribs)‎. . (104,144 bytes) (+754)‎. . (Added info) (undo | thank) (cur | prev) 15:01, April 26, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (103,390 bytes) (+1,232)‎. . (→‎The Amazing Spider-Man film series (1977–1981)) (undo | thank) (cur | prev) 14:55, April 24, 2017‎ Favre1fan93 (talk | contribs)‎. . (102,158 bytes) (-217)‎. . (Reverted to revision 776905669 by Favre1fan93 (talk). (TW)) (undo | thank) (cur | prev) 12:36, April 24, 2017‎ TotalTruthTeller24 (talk | contribs)‎. . (102,375 bytes) (+12)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 12:32, April 24, 2017‎ TotalTruthTeller24 (talk | contribs)‎. . (102,363 bytes) (+15)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 12:12, April 24, 2017‎ TotalTruthTeller24 (talk | contribs)‎ m. . (102,348 bytes) (+6)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 05:54, April 24, 2017‎ Impending IP (talk | contribs)‎. . (102,342 bytes) (0)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 05:54, April 24, 2017‎ Impending IP (talk | contribs)‎ m. . (102,342 bytes) (+150)‎. . (→‎Recurring cast and characters) (undo | thank) (cur | prev) 05:51, April 24, 2017‎ Impending IP (talk | contribs)‎ m. . (102,192 bytes) (+34)‎. . (→‎The Amazing Spider-Man 2 (2014)) (undo | thank)

The Rule: It is my belief that the suspect user is not using these three accounts in a prototypical manner (which perhaps, explains why they weren't spotted earlier). As an analogy, lets say a user has multiple accounts. That user goes to an article on furniture and adds a paragraph about sofas. Later, that paragraph is deleted by another user. The expected reaction would be that the user would then log into a second account and try to re-add the same information about sofas. This user's response to having edits removed is different. Using the same analogy, this user would later add paragraphs about dining room tables or bookshelfs (i.e., all different things). This user has shown no qualms about adding and then re-adding the same information from the same account (as shown in DarthBotto's research: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11) That makes the use of diffs in this case problematic, because most of the diffs from these three accounts do not show a concerted effort at using one account to get through the backdoor what another account couldnt get through the front. They only show "different" users adding and then re-adding information. Their goal is ephemeral — using multiple accounts to add variegated information in an improvised, ad-hoc manner — figuring three heads are better than one. Whether or not all of this even violates any established Wikipedia policy is not for me to say.

Exceptions to the rule As I just mentioned, Nurseline247's "rule" is to never use one account to buttress another account's edits on a specific point, preferring instead to add a broader range of material over the three accounts. However, there are at least two examples where one account does buttress another account's edits. I call these "exceptions to the rule."

The first one took place on June 11, 2017 on the article titled List of fictional shared universes in film and television, where Nurseline247 had been attempting to modify the main list of shared universes displayed in the article to one radically different than had been previously displayed. One of Nurseline247's first attempts to fashion the list in this new manner was quickly reverted. Later, Nurseline247 again switches the list. In the very next edit, Impending IP comes along and, instead of being confused at seeing a now-newer version of the list, they effortlessly make this edit adding information to one of the newly configured cells. Having no difficulty navigating this version (even though its only been actively displayed for 2 hours) Impending IP is even kind enough to improve upon this version's definition sentence displayed at the top (a sentence Nurseline247 crafted) adding (in italics) "This is a list of shared universes in film. A shared universe is created when two or more characters or locations come together into one film, or if a creator of a film states it to be so." With that edit, Impending IP seems to have had a prescient knowledge of just what Nurseline247's "version" of the list additionally needed. Despite these helpful gestures, the list and its definition sentence were eventually reverted back to the standard display version.

That prescience on the part of Impending IP occurs again with the second exception to the rule, on August 8, 2017, in the article for Blair Witch. Nurseline247 made this edit where they added to the cast list "Heather Donahue as Heather Donahue and the Blair Witch". Three minutes later, Impending IP made this edit to the same article where they added more information about Ms. Donahue's role in the film: "In an interview with Adam Wingard, the film's director, it was later confirmed that Donahue was portraying the Blair Witch in the form of Heather Donahue." Editors often add information that compliments a previous editor's additions — but in this case, the three minute lag time is conspicuous.

Again, the diffs from these two exceptions to the rule are: 1, 2, 3, 4, 5, 6. Spin tendo Talk 10:01, 13 August 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
The following accounts are ✅: Obviously,. All named accounts blocked and tagged. Yunshui 雲 水 12:52, 14 August 2017 (UTC) — Berean Hunter   (talk)  16:31, 14 August 2017 (UTC)
 * Closing.

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Coinciding with TotalTruthTeller24, along with their detected sock puppets, getting indefinitely blocked on August 14, 2017, this new account was created that same day and began to implement similar edits to some of the hallmark pages, including List of fictional shared universes in film and television (1) and The Dark Tower (2017 film) (2), as well as other pages with a specific emphasis on shared universes. D ARTH B OTTO talk • cont 07:36, 19 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I would also add the IP user 92.60.192.241 to the above list. The edit which links it to the Marty Smith account was made to the Darkwing Duck article, specifically an edit first by the Marty Smith account here → 1. then followed by an edit from the IP user, shown here →2. Note that the IP user in their edit expands upon information added by the Marty Smith account in the previous edit. This IP user 92.60.192.241 can also be linked to the-now defunct account Nurseline247, through this edit →3. which resembles the edit here →4.

The Marty Smith account can be linked to another blocked account Impending IP. On the List of fictional shared universes in film and television article on June 11, 2017, Impending IP makes this edit → 5. adding to the article's lead sentence (shown in bold) "A shared universe is created when two or more characters or locations come together into one film, or if a creator of a film states it to be so." That edit was later reverted. Two months later on August 14, 2017, the Marty Smith account makes this edit → 6. where they alter the same sentence to read with the same information Impending IP had added just sixty days prior: "This is a list of shared universes in film. A shared universe is created when two or more characters, or objects, come together into one film, or when a director says two or more films (sic) to be so."

All six of the diffs I just mentioned are: 1., 2., 3., 4., 5., 6. — Spin tendo Talk 10:00, 20 August 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * CU came out with and I've blocked mainly on behaviour. Closing. Callanecc (talk • contribs • logs) 10:43, 21 August 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This day-old account immediately jumped into adding content to pages hallmark to TotalTruthTeller24's behavioral patterns. These include edits to List of Marvel Cinematic Universe television series (1), The Conjuring (film series) (1), DC Extended Universe (1), Spider-Man 3 (1 - over identical deleted scenes content), Batman: Arkham (1), Spider-Man in television (1), and... I suppose the theme is that literally every page matches up. D ARTH B OTTO talk • cont 19:53, 27 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * - Favre1fan93 (talk) 01:46, 28 August 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, . Closing. Callanecc (talk • contribs • logs) 09:54, 28 August 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Apparently, this account was created shortly after the last sock puppet was identified on August 27. This one most notably has been applying unilateral edits to the known pages of interest, including Arrowverse, Joker in other media, Talk:Joker (character), Alien: Covenant, Alien (franchise), Kingsman: The Secret Service (comics), DC Extended Universe and List of Alien characters. Considering the significant disruption to the Joker-related and Kingsman-related pages, investigation would be prudent. D ARTH B OTTO talk • cont 22:39, 12 September 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - to confirm and flush out other accounts. History certainly ties it to this sockmaster.

— Berean Hunter   (talk)  23:09, 16 September 2017 (UTC) — Berean Hunter   (talk)  15:53, 17 September 2017 (UTC)
 * see this (contribs). You have been conversing with this person for longer than you may have realized. Also, this and this show recent activity.
 * No way, that guy who sent me that antagonistic message two years ago?! Well, no wonder these sockpuppet accounts have seemed so ignorant and pig-headed-- they've been editing wrong all along! D ARTH B OTTO talk • cont 23:21, 16 September 2017 (UTC)
 * Also, in this edit summary, they refer to themselves as "Truth-Teller". I suppose that's confirmation that all these accounts and IPs are tied together. D ARTH B OTTO talk • cont 06:35, 17 September 2017 (UTC)
 * That's correct and I've gone ahead and blocked the sock without a tag for the moment. Since he has had multiple accounts in the past, a check is still useful and then the account may be tagged.
 * ✅. Lots of use of IPs also. Doug Weller  talk 16:44, 17 September 2017 (UTC)


 * Tagged and closing. GABgab 17:37, 17 September 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This account was created on September 21, and has been making a surprisingly skilled amount of edits for a new users. Also editing MCU, DCEU, Blade Runner, and other comic/pop culture-related articles as other socks for TotalTruth had done previously. I'm also requesting CheckUser evidence because I'm pretty certain, but not totally convinced they are a sock of TotalTruth by the edits alone. Favre1fan93 (talk) 20:16, 2 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Following are ✅:
 * . Closing. Callanecc (talk • contribs • logs) 12:19, 7 October 2017 (UTC)
 * . Closing. Callanecc (talk • contribs • logs) 12:19, 7 October 2017 (UTC)
 * . Closing. Callanecc (talk • contribs • logs) 12:19, 7 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

New editor with obvious extensive experience editing Wikipedia making similar edits to existing confirmed socks. See this, this and this focus on adding same out of scope content to article. Geraldo Perez (talk) 17:32, 22 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * There were some interesting similarities in the interaction analyser, so I ran a CU. As expected, it turned up another account.   and  are both ✅. NinjaRobotPirate (talk) 07:00, 23 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

This one jumped out at me when looking back at some previous edits tonight. The above suspect does have a good deal of overlap with topic areas edited by previous confirmed socks. And began editing on October 24, 2017, just a couple of days after the previous sock report/blockings. But what really stuck out to me was that this edit by a previous sock and this edit by the above are near identical right down to the edit summary. When I went and saw the date of the HarrisonSteam account's first edit being so soon after a previous sock blocking, alarm bells klaxons screamed at me. oknazevad (talk) 02:47, 9 January 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ and blocked. NinjaRobotPirate (talk) 07:32, 9 January 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar interests, comic series, uploading copyvios.

See overlap:
 * here and here, here with


 * here with
 * here with and
 * here with and   TAXIDICAE💰  13:31, 13 April 2021 (UTC)
 * I'm not convinced this needs CU but is the only non-stale account.  TAXIDICAE💰  13:32, 13 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I'm inclined to request CU for confirmation & to update the CU log after a 3 year gap in the record. Cabayi (talk) 19:42, 13 April 2021 (UTC)
 * . The CU logs from the master geolocate to a different country than this user.  ~Oshwah~  (talk) (contribs)   20:11, 13 April 2021 (UTC)
 * On a proxy. Some other recent socks have been on a proxy, too.  . NinjaRobotPirate (talk) 05:28, 27 April 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same editing behavior, creating loads of redirect page on superheroes fictional characters. After Milkine was blocked on July 6, 21AndSon was immediately created on the same day. 42.117.99.44 (talk) 03:28, 21 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked per WP:DUCK. Not sure if CU is warranted, though. ✗  plicit  05:05, 21 August 2021 (UTC)
 * Someone's posting to SPI from a proxy? That's not suspicious at all.  Well, anyway, 21AndSon is ✅ to Milkine. NinjaRobotPirate (talk) 07:21, 21 August 2021 (UTC)
 * Sidenote regarding the filer: see also the now-blocked Special:Contributions/210.99.73.135 . Inclined to believe that's an OP too based on the ISP (Korea Telecom is a major offender), but couldn't confirm from a quick check. --Blablubbs (talk) 16:02, 21 August 2021 (UTC)
 * Updating 21AndSon's tag to confirmed, and taging likewise. -- RoySmith (talk) 15:11, 21 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same editing behavior, 162.12.211.238 keeps on recreating the page that were made by 21AndSon, while 3 IP's 212.219.249.99, 86.26.92.28 and 78.149.42.173 has the same behavior by adding trivial stuffs to the fictional characters (especially superheroes) and ultimately has the same interest as Milkine and 21AndSon. 177.241.33.160 (talk) 09:11, 10 September 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - All of these are IPs, making CU inapplicable. GABgab 18:26, 12 September 2021 (UTC)
 * None of the IPs are actively editing. Closing without comment. TonyBallioni (talk) 00:34, 27 September 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same editing behavior, creating loads of redirect page on superheroes fictional characters. After both Milkine and 21AndSon were all blocked for having similar behavior as a sock. 110.13.224.102 (talk) 12:19, 22 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Account now blocked and tagged. Closing. Bbb23 (talk) 13:03, 22 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same type of edits - mostly to Marvel comics and film characters, especially adding specific redirect links to characters from Sam Raimi's Spider-Man films. Compare edits between this account and, blocked the other day as a sock. One of SPF1523's few edits was to in the same place that one was added by Dealmaces and removed as a block-evasion edit. Equivamp - talk 00:36, 26 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 14:02, 26 October 2021 (UTC)
 * . From a pure comparison of user agents and IP addresses, SPF1523 is ❌ to previously confirmed socks Dealmaces and 21AndSon.  But there's enough proxy use going around that I'm not sure how much faith to put in that, so  -- RoySmith (talk) 14:33, 26 October 2021 (UTC)
 * I came back and took another look at this from a behavioral standpoint. Other than a shared interest in Marvel comics, SPF doesn't look anything like Dealmaces.  Closing. -- RoySmith (talk) 03:06, 7 November 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

User has the same interest/edits at Morbius (film), Spiderman and Marvel articles as Dealmaces. 218.148.113.177 (talk) 04:53, 11 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ...  ~Oshwah~  (talk) (contribs)   12:50, 12 November 2021 (UTC)
 * /❌. The users all originate from different countries, IP ranges, and user agents. Closing this SPI report...  ~Oshwah~  (talk) (contribs)   13:22, 12 November 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same interest as the sockmaster, edits fictional characters articles and nominate them afterwards when someone Onel reverted back into redirect. 119.242.114.32 (talk) 01:33, 13 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * CU says ❌, or at best, due to proxy use.  There's not enough real history here to make a good behavioral assessment.  Closing. -- RoySmith (talk) 16:14, 13 March 2022 (UTC)

Suspected sockpuppets


Same edits just like his other socks, such as editing fictional characters in comics and video games, and creating franchise article. 60.68.29.130 (talk) 22:20, 15 March 2022 (UTC)
 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Behaviorally, this is 100% TotalTruthTeller24, so I have blocked the account as such. ✗ plicit  01:29, 16 March 2022 (UTC)
 * ...  ~Oshwah~  (talk) (contribs)   03:42, 16 March 2022 (UTC)
 * . Many of the past sock users have been editing from known VPN networks that have been identified by various tools. However, this one... isn't, apparently (or is using a different one). The giveaway of proxy/VPN usage is the fact that the geolocations of the various IP addresses that this account has used originates from vastly different countries. I unfortunately have to shrug my shoulders in a technical aspect - this account is not using the same proxy/VPN as past socks, but my intuition suggests that the user is using one. Hence, .  ~Oshwah~  (talk) (contribs)   03:57, 16 March 2022 (UTC)
 * Poindextero is already blocked and tagged, so I don't think there's anything left to do here. Closing. -- RoySmith (talk) 14:55, 19 March 2022 (UTC)

Suspected sockpuppets


This undiscovered sock has the same interest as sockmaster. Like Oshwah said, its hard to find accounts that are created on Proxy. So this is clearly 100% him and Explicit knows him well. Persistent edits on fictional characters such as marvels, television and etc. 152.165.67.107 (talk) 04:51, 28 March 2022 (UTC)
 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * Makes sense. Good to go, but im pretty sure is the same person. After creating account, he recreated all the non notable articles that was by previously redirect and created by confirmed sock. 152.165.67.107 (talk) 12:27, 28 March 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * -  Girth Summit  (blether)  08:21, 28 March 2022 (UTC)
 * The last blocked sock in the archive,, is ✅ to - I will block that account. I don't see anything technical to link them to Runningman2027, but I will leave this open should anyone familiar with the puppeteer want to perform a behavioural evaluation.  Girth Summit  (blether)  08:32, 28 March 2022 (UTC)
 * I don't see much behavioral evidence to suggest that is a sock, especially when their editing time frame overlaps with .  ✗  plicit  12:18, 28 March 2022 (UTC)
 * I'm not seeing the similarity either. Closing. -- RoySmith (talk) 13:52, 28 March 2022 (UTC)
 * , did you notice that the IP added Haterick above?--Bbb23 (talk) 14:12, 28 March 2022 (UTC)
 * I dismissed it as fishing. -- RoySmith (talk) 14:54, 28 March 2022 (UTC)

Suspected sockpuppets


Has the same interest as sockmaster. The socks appears to be very active as of March like User:Poindextero and User:MandoWarrior. Mandowarrior hasnt edited March 23 to 25, but appears to be 7Coleman this time and stopped editing march 26 to switch ointo his other account, Mandowarrior. Not to mention he also contributed to the Herlock Sholmes (Ace Attorney), which other sock User:Nooneguy created the page before. 121.162.48.171 (talk) 03:32, 1 April 2022 (UTC)
 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 13:05, 1 April 2022 (UTC)
 * On 28 March, MandoWarrior and Poindextero were confirmed to each other. 7CameronColeman and Haterick (13 March) are now ✅ to each other and  to the Mando/Poindextero group.  I still don't have anything definitive which ties that bunch back to TTT24.  I'll tag 7CC and Haterick as suspected, but I wouldn't be surprised if this group is actually not TTT24. -- RoySmith (talk) 13:27, 1 April 2022 (UTC)
 * If a clerk wants to do a dual-tagging of the 4 accounts discussed above, that might be a good thing. -- RoySmith (talk) 13:29, 1 April 2022 (UTC)
 * as requested. Gonna call 7CC and Haterick suspsected to Poindextero since there's no way to do three layers of alt-master with the current templates. Archiving. --  Tamzin  [ cetacean needed ] (she/they) 15:15, 21 April 2022 (UTC)

Suspected sockpuppets
Similar edits and interests to blocked User:Poindextero, see for example. Geraldo Perez (talk) 16:36, 6 May 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Yeah, that's TTT24. Confirmed to some older socks.  Also  is TTT24, too.  . NinjaRobotPirate (talk) 03:37, 7 May 2022 (UTC)

Suspected sockpuppets
appears to be yet another TruthTEller sock, as their first edit once getting ACP was to move a sock favorite: Migs Mayfeld back to Mayfield as past socks have done. PRAXIDICAE💕 19:04, 25 May 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * Ponyo has blocked a few accounts as this user's sock including . Segaton (talk) 22:47, 1 June 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Technically, this account is, maybe .  Girth Summit  (blether)  12:46, 2 June 2022 (UTC)
 * Account's probably abandoned by now, but based on edit summaries at Migs Mayfield, and an additional ES tell I noticed that also comes up with Pumpoffed, I'm prepared to call this a duck. as suspected. Closing.  --  Tamzin  [ cetacean needed ] (she/they) 02:05, 20 June 2022 (UTC)

Suspected sockpuppets
I came across this edit by 200MLA, in which the user added a navbox to a category page, and had recently seen Vexedsmuggery doing the same edits such as here and here. It felt very duck-ish. Favre1fan93 (talk) 15:42, 23 November 2022 (UTC)
 * To add, 200MLA also made these edits at Category:Agent Carter (TV series), Category:The Falcon and the Winter Soldier, and Category:Agents of S.H.I.E.L.D. among many other similar edits (this was just an additional sampling). - Favre1fan93 (talk) 15:48, 23 November 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * It seems plausible . . MarioGom (talk) 22:02, 1 December 2022 (UTC)
 * - -- RoySmith (talk) 15:09, 2 December 2022 (UTC)
 * ✅ but given that this appears to be a first offense and I'm having trouble seeing what they're doing as actually disruptive, just a 2 day block for the master, indef for the sock, no tags.  please read WP:Sockpuppetry to make sure you understand our rules on using multiple accounts. -- RoySmith (talk) 15:19, 2 December 2022 (UTC)
 * I think there's a chance that this is Sockpuppet investigations/TotalTruthTeller24. Both technical data and behaviour look like fairly consistent to me. --Blablubbs (talk) 16:07, 2 December 2022 (UTC)
 * Hmmm, I took a look just now. Yeah, that's certainly plausible. -- RoySmith (talk) 16:42, 2 December 2022 (UTC)
 * From my former experience with TotalTruthTeller24, the category/navbox editing didn't seem familiar (hence opening a new SPI), but I honestly won't be shocked if it was them based on any examination given the edits are on pop culture/franchise related articles, which is where TTT24 edited. - Favre1fan93 (talk) 17:26, 5 December 2022 (UTC)
 * One of TTT's past socks whom I crossed paths with,, was also big on navboxes, so I wouldn't be surprised if this is them again. InfiniteNexus (talk) 05:10, 6 December 2022 (UTC)

Suspected sockpuppets

 * per below. Ponyo bons mots 17:53, 9 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * and are ✅ to each other and to the master.--  Ponyo bons mots 17:53, 9 December 2022 (UTC)

Suspected sockpuppets
Compare and, specifically the same "In 2019, the originally-fan-created..." part. Seems like a DUCK block evasion. Geolocation similar to IP reported in the first CU report. — HELL KNOWZ ∣ TALK 21:41, 9 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - . Please, consider a short, anon. only block. Thank you. MarioGom (talk) 23:14, 9 December 2022 (UTC)
 * for one week. Closing. DatGuyTalkContribs 16:30, 10 December 2022 (UTC)

Suspected sockpuppets
See below. Bbb23 (talk) 22:34, 5 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments
For background, see the discussion between and me at User talk:HeyZeusVictory888. The report at Sockpuppet investigations/Vexedsmuggery needs to be merged into this case. Vexedsmuggery needs to be blocked. Vexedsmuggery, 200MLeunscentedAveeno, and HeyZeusVictory888 need to be tagged as confirmed to each other and a suspected sock of TTT24. If anything is unclear, please ask.--Bbb23 (talk) 22:34, 5 January 2023 (UTC)
 * Tagged as proven since "confirmed" breaks the template. Closing. cc  The SandDoctor  Talk 00:01, 7 January 2023 (UTC)
 * I'm not sure if it can be done with one template, but it can with two, so I've adjusted the tags.--Bbb23 (talk) 00:42, 7 January 2023 (UTC)
 * It's a tad bit finnicky, but it can be done in one template – see User:Blablubbs/SPI clerking cheat sheet. I've merged the tags. --Blablubbs (talk) 17:26, 8 January 2023 (UTC)

Suspected sockpuppets
The last sock in this case was blocked on January 5. OatsOeben made a few edits on January 1, but started editing very prolifically on January 7th. Like previous accounts, they are focused on category and redirect creations for TV shows and fictional characters, which is best demonstrated by viewing their contribs side by side (note that redirect creations from the blocked socks have been G5'd). OatsOeben also adds navboxes to category pages, which previous socks have done. Spicy (talk) 17:13, 8 January 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - to confirm. Thanks, Spicy (talk) 17:13, 8 January 2023 (UTC)
 * - -- RoySmith (talk) 17:34, 8 January 2023 (UTC)
 * Sorry, I forgot to mark this as in progress and we edit conflicted – I have them as ✅ to Vexedsmuggery, along with . --Blablubbs (talk) 17:35, 8 January 2023 (UTC)
 * No problem, but since I had the data, I went ahead and updated the cuwiki notes with it. -- RoySmith (talk) 17:38, 8 January 2023 (UTC)
 * Perfect, thanks. --Blablubbs (talk) 17:39, 8 January 2023 (UTC)

Suspected sockpuppets
I noticed an odd pattern while taking part in the NPP backlog drive and reviewing redirects. There's been quite a few relatively new accounts that are focused on creating redirects for television series, typically focusing on characters or television episodes. Most of these have stopped editing after a burst of activity, but one of them (WRCWRC) has kept at it. The first 6 accounts listed have re-created redirects to Zom-B thatr were previously G5 deleted for being created by TotalTruthTeller24, while #7 and #8 on the list also created redirects to the same target (though those weren't previously G5'd). Accounts #9–11 exhibit the same type of behaviour, in that they appear to be SPA for creating television redirects. There's more that I believed I've missed, which is why I'm requesting a CU. Hey man im josh (talk) 16:06, 17 October 2023 (UTC)


 * I've noticed some of these accounts during the drive, specifically ISEwhydo and WRCWRC. I also noticed veeeveee, who I will add above; they exhibit the same large-scale creation of redirects. I will add YellowBookNode as well, who may be connected with veeeveee due to the two sharing a similar editing pattern regarding Hercule Poirot on top of redirect creation (veeeveee diffs: 1, 2, 3; YellowBookNode diffs: 1, 2, 3). Schminnte &#91; 16:34, 17 October 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I monitor Category:Episode redirects to lists for new entries and place them into appropriate redirect categories by series. Some of these socks seem to have been responsible for recent bursts of activity. Based on editing behavior, I believe User:Z3Retro and may be another sock.— TAnthonyTalk 06:28, 18 October 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I'm going to start checking but may not get a chance to finish before I have to head out elsewhere, so I'll leave the CU request open in case another CU wants to pick up where I left off.-- Ponyo bons mots 22:42, 17 October 2023 (UTC)
 * First, I've blocked as an obvious sock using open proxies to edit. I've also zapped a number of their redirect creations. The rest of their contribs will need review/reverting as well.--  Ponyo bons mots 22:49, 17 October 2023 (UTC)
 * The following pairs of accounts are ✅:


 * is editing via VPNs but is proven based on behaviour and proxy use.
 * Note that, specifically with 7even8eight, there is technical overlap with Sockpuppet investigations/1-1-2-2-SixtySix/Archive and the behaviour is pretty ducky. as the CU in that case and to satisfy your curiosity regarding the WRCWRC account.--  Ponyo bons mots 23:20, 17 October 2023 (UTC)
 * added to the list of ✅.-- Ponyo bons mots 19:11, 18 October 2023 (UTC)
 * What does it mean "The following pairs of accounts are confirmed"? Also, are they confirmed to this case in any way? Also, what is the clerk expected to do here?  Vanjagenije  (talk)  23:51, 15 November 2023 (UTC)
 * I think I meant "set of accounts", not pairs. Do we still tag TTT24 socks? If so, just tag them as proven. I'm far too old to remember what I was thinking last week, let along a month ago! They're all TruthTeller though.-- Ponyo bons mots 00:09, 16 November 2023 (UTC)


 * ✅ and closing.  Vanjagenije  (talk)  10:03, 16 November 2023 (UTC)

Suspected sockpuppets
created 15 Oct, immediately began gaming autoconfirm. Half an hour ago, came back with precocious edits, creating Kick-Ass (film series) (which was interestingly last created by WP:Sockpuppet investigations/TreCoolGuy), but as a redirect to Hit-Girl & Kick-Ass. Another redirect at Kick-Ass (franchise), then recreated Kick-Ass vs. Hit-Girl. On a side note, isn't blocked yet: was that an oversight? Wikishovel (talk) 08:52, 25 October 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. And Veeeveee is now blocked as well, it was just an oversight.-- Ponyo bons mots 20:44, 10 November 2023 (UTC)
 * Case closed.  Vanjagenije  (talk)  17:30, 11 November 2023 (UTC)

Suspected sockpuppets
This account fits the pattern of generally an SPA account very interested in files and redirects of the previous accounts. compared to the previous accounts. Seawolf35 (talk - email) 23:27, 9 November 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅.-- Ponyo bons mots 20:39, 10 November 2023 (UTC)
 * Case closed.  Vanjagenije  (talk)  17:30, 11 November 2023 (UTC)

Suspected sockpuppets
These accounts all fit the pattern of SPAs creating a bunch of redirects related to television then going inactive. Definitely based on the behaviour I saw in the batch I reported a month ago. I've also not been as active at NPP as I once was, so I suspect I may have missed a few accounts, which is why I'm requesting CheckUser. Hey man im josh (talk) 20:36, 16 November 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the above. I see that got one as well. Leaving this at ReqCU in case someone else wants to chime in. As a note, I'm not totally certain this is all TTT myself, but there is clear behavior parallel and several connections to the 17 October batch. Izno (talk) 00:16, 17 November 2023 (UTC)
 * is ✅ as well.-- Ponyo bons mots 00:24, 17 November 2023 (UTC)
 * Tagged all, closing. Spicy (talk) 00:25, 18 November 2023 (UTC)

Suspected sockpuppets
Compare by IP editor I'm reporting with  by a blocked sockpuppet of the blocked sockpuppeteer. Seems interested in editing the same article. George Ho (talk) 19:19, 20 November 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * 1 week block. Closing. DatGuyTalkContribs 02:41, 21 November 2023 (UTC)

Suspected sockpuppets
Typical redirect nonsense, WP:DUCK. Requesting CU as this account has been around since September, leaving the door open for other potential sleepers. ✗ plicit  00:44, 26 November 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * can this section be closed? &mdash; Mdaniels5757 (talk &bull; contribs) 02:38, 27 November 2023 (UTC)
 * It's ready to close and archive yes. -- ferret (talk) 02:44, 27 November 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I just checked and blocked another sock,, so I checked on this one as well. Blocked and tagged. -- ferret (talk) 16:10, 26 November 2023 (UTC)
 * Since this hasn't archived yet, just noting 3 more: -- ferret (talk) 21:51, 27 November 2023 (UTC)
 * Closing the case.  Vanjagenije  (talk)  22:25, 27 November 2023 (UTC)

Suspected sockpuppets
Typical creation of redirects, navigational templates, and one dormant account suddenly coming back to life. ✗ plicit  12:25, 26 December 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * is a to TTT24. I'd say the following are   Izno (talk) 06:01, 27 December 2023 (UTC)
 * @Izno 2O: I'd say that DestonDestonD, Xenowoman, FittingGoon and Alicande are all TTT24. I would definitely call Xenowoman, FittingGoon and Alicande confirmed to each other, regardless. As for Yoyoponderosa.... Maybe. Odd topic spread to me. Maybe Sockpuppet investigations/1-1-2-2-SixtySix instead? -- ferret (talk) 03:10, 29 December 2023 (UTC)
 * Yeah, I think so. I will block as a sock of them. Izno (talk) 03:13, 29 December 2023 (UTC)
 * Had a 2O take a look, they believe everyone but Yoyo is worth a straight block, for whom behavior needs evaluation. 2O's opinion was that trains and war weren't TTT24's typical topic areas. Izno (talk) 03:08, 29 December 2023 (UTC)
 * Closing. Everyone is blocked. Izno (talk) 03:16, 29 December 2023 (UTC)

Suspected sockpuppets
All new users who, like previous socks, are simply spamming redirects relating to various cartoons (mainly of Hazbin Hotel and HelluvaBoss at the moment); see Diff, Diff 2, Diff 3, etc. CoconutOctopus   talk  21:23, 31 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * All ✅, blocked and tagged.-- Ponyo bons mots 22:45, 1 February 2024 (UTC)

Suspected sockpuppets
Typical type of redirect creations, including a number of which were previously deleted after being created by socks. Screams based on the redirects of theirs I've come across when patrolling. Note that the fourth and fifth accounts are relatively stale, but they fit the sockmaster's MO. Hey man im josh (talk) 19:38, 9 April 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * . Indisputably TotalTruthTeller24. ✗  plicit  00:56, 10 April 2024 (UTC)

Suspected sockpuppets
These all seem like pretty obvious ducks to me based on the experience I have with this LTA. A number of redirects created by these accounts were also previously created by other socks of this sockmaster. Hey man im josh (talk) 19:00, 29 April 2024 (UTC) Hey man im josh (talk) 19:00, 29 April 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✗ plicit  01:37, 30 April 2024 (UTC)

Suspected sockpuppets
Same pattern with redirect creations, behaviour, and edits which match past reports that I've made. A number of the redirects these accounts have created were also previously created by the sockmaster or puppets. Pretty clear, with an exception being , due to the age of the account. I was less sure about #2 as well, but I felt more confident based on them having created the Angstrom Levy redirect (also previously created by a TotalTruthTeller24 sock) a week before the account was registered. Requesting a checkuser run because I believe there was a period of time recently where I was paying less attention and more of these socks possibly slipped through. Hey man im josh (talk) 15:56, 24 April 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * In this batch we have:


 * All but (which is stale) and, which is a duck on a proxy, are ✅. Everything blocked.--  Ponyo bons mots 19:30, 24 April 2024 (UTC)
 * , closing. Mz7 (talk) 05:38, 2 May 2024 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

The three seem to edit the same pages and topics. A lot of interest in The Boys (TV series). Both of the suspected socks started editing after the master stopped on April 20, 2024. I'm more sure that the master and Franch Messing are the same person, but I wouldn't have found them had I not been looking at Izzy's edits. I'm requesting CU to confirm, particularly Izzy, and look for any others.--Bbb23 (talk) 17:37, 4 May 2024 (UTC) Bbb23 (talk) 17:37, 4 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * IzzyBell Oskverry and Franch Messing look like TotalTruthTeller24. Ulises1126 is ❌. Spicy (talk) 20:45, 19 May 2024 (UTC)
 * Blocked and tagged the sock accounts, closing. Thanks, Spicy (talk) 20:46, 19 May 2024 (UTC)

Suspected sockpuppets
Same patterns as the other confirmed accounts - create empty userpages and talkpages to make account look more padded than is, immediately start blasting changes to fiction articles. Came across Gert's Inferno while on NPP which had already been speedy deleted twice. Came across Puncheztiwn while looking through Patteeer's history. BrigadierG (talk) 00:14, 23 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✗ plicit  00:30, 23 May 2024 (UTC)

Suspected sockpuppets
created 25 May, two days after the last SPI and blocks.

First edit was on 5 June, requesting undeletion of Rick and Morty: Go to Hell, last created by sock User:Milkine, and G5'd in 2021. Spent the rest of that day first gaming autoconfirm, then the next couple of days discussing the undeletion request. 8 June they created what might be a new version of it (original isn't archived) at Rick and Morty - Go to Hell. This was moved to draft, then submitted and accepted, by uninvolved editors. Full thread is at WP:Requests for undeletion/Archive 398.

Hardik Joshi India did the same with Rick and Morty: Heart of Rickness (previously created by sock User:1181472215counter), Rick and Morty: Crisis on C-137 (previously created by sock User:Coimenda), and Rick and Morty: Infinity Hour (previously created by socks User:Coimenda and User:1181472215counter). Wikishovel (talk) 18:45, 17 June 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * I've observed that most of the IPs suspected to this user geolocate to Ireland, though the one I listed below is not. –LaundryPizza03 ( d c̄ ) 19:53, 19 June 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * That's probably not TotalTruthTeller24, though one can never rule out the use of proxies. Instead, I think it's a case of meat puppetry or proxying.  The last person that I blocked as a sock of TTT24 made a credible claim of not being TTT24 but was advertising paid editing on their user page.  I suspect what's happening is that TTT24 is using something like Fiverr to recruit cheap paid meat puppets.  Blocked for mimicking TTT24 in a way that's indistinguishable from TTT24.  And also suspected paid editing, but that's really hard to prove. NinjaRobotPirate (talk) 02:05, 18 June 2024 (UTC)

Suspected sockpuppets
Recreated Rick and Morty: Infinity Hour in draftspace, less than two days after the last article was deleted. –LaundryPizza03</b> ( d c̄ ) 19:51, 19 June 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Seems kind of obvious. It's a web host, so range blocked for several years.  I'm getting a bit tired of blocking the same web hosts for 1 year every year. NinjaRobotPirate (talk) 01:53, 20 June 2024 (UTC)

Suspected sockpuppets
Like TotalTruthTeller24's previous socks, this IP is removing from Phoenix Wright any mention that the San Francisco Chronicle thinks he and Miles Edgeworth can be more than friends.

Diffs for the IP: Special:Diff/1230650382 and Special:Diff/1230565333

Diffs for previous socks (not comprehensive): Rxoichi and Dutero Rotideypoc41352 (talk · contribs) 05:55, 25 June 2024 (UTC)


 * Thanks, Ponyo (and diligent SPI clerks when they come by). I need no action on a stale WP:SPA named, but just wanted to note my suspicions. HS96 also wanted to remove the Wright and Edgeworth text (last of three diffs of edit request on Talk:Phoenix Wright). IP agrees with HS96 (later of two diffs on article talk, one on my user talk). Again, HS96 is stale, so no action needed. I just want this to be in the SPI archives for the record. Rotideypoc41352 (talk · contribs) 16:51, 25 June 2024 (UTC) Added a diff 23:54, 25 June 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * IP hard blocked as an open proxy.-- Ponyo bons mots 16:33, 25 June 2024 (UTC)

Suspected sockpuppets
Recreated a whole bunch of deleted redirects by previous socks, this time using WP:AFC/R, presumably to avoid detection/deletion (see Special:PermaLink/1235130357). Edits in the exact same topic areas. Two minutes after creating their account, they added the template to their user page (obviously not something a new user would do). Account was created 4 days after the last detected sock. C F A  💬  22:02, 17 July 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * , also . Spicy (talk) 22:06, 17 July 2024 (UTC)

Suspected sockpuppets
Same AfC/R requests. Editing the exact same pages as previous socks. Page histories of contributions all have edits by other socks. The Best Baker, Next Great Baker and BnB Drones which were connected to each other should probably also be categorized as TotalTruthTeller24. C F A  💬  16:31, 18 July 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the IP for a month as a proxy. Closing. Bbb23 (talk) 16:38, 18 July 2024 (UTC)