Wikipedia:Sockpuppet investigations/Vhaslhv/Archive

22 January 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Per AN thread, most of these are already blocked locally and/or locked globally by m:User talk:Teles ☺ ·  Salvidrim!   ·  &#9993;  18:08, 22 January 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Self-endorsed for CU attention. ☺ ·  Salvidrim!   ·  &#9993;  18:09, 22 January 2015 (UTC)
 * Please notify m:User:Teles of the results so he can globally lock accounts if needed. ☺ ·  Salvidrim!   ·  &#9993;  18:10, 22 January 2015 (UTC)

These are all the non-globally locked accounts I found:

These are technically ✅ but there isn't any other factors that link them with the master.


 * Elockid  ( Talk ) 04:19, 23 January 2015 (UTC)
 * I have locally everyone who wasn't already (two tagged without CU confirmation), and Elockid has kindly notified Teles in case he wants to globally lock and/or locally block on ptwiki ☺ ·   Salvidrim!   ·  &#9993;  04:33, 23 January 2015 (UTC)
 * I have locally everyone who wasn't already (two tagged without CU confirmation), and Elockid has kindly notified Teles in case he wants to globally lock and/or locally block on ptwiki ☺ ·   Salvidrim!   ·  &#9993;  04:33, 23 January 2015 (UTC)


 * You can add for a global lock. -- zzuuzz (talk) 15:10, 23 January 2015 (UTC)
 * I locked all confirmed accounts above. You may wish to check and four other accounts that share same IP and were also locked. Thanks for helping.—Teles « Talk to me ˱ M @ C S ˲» 13:34, 24 January 2015 (UTC)

We also have the following accounts which have been blocked based upon behavior: Mike V • Talk 23:11, 25 January 2015 (UTC)


 * I've sent an email to Teles. Elockid  ( Talk ) 23:36, 25 January 2015 (UTC)


 * per this. Mike V • Talk 15:22, 26 January 2015 (UTC)
 * Everything here seems to be addressed. I'm closing the case for now. Mike V • Talk 19:28, 27 January 2015 (UTC)
 * Just a bunch of new ones:
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\
 * Notifying Teles. ☺ ·  Salvidrim!   ·  &#9993;  15:39, 30 January 2015 (UTC)\


 * And some more:
 * NawlinWiki (talk) 17:08, 30 January 2015 (UTC)
 * I locked them.—Teles « Talk to me ˱ M @ C S ˲» 17:28, 30 January 2015 (UTC)
 * NawlinWiki (talk) 17:08, 30 January 2015 (UTC)
 * I locked them.—Teles « Talk to me ˱ M @ C S ˲» 17:28, 30 January 2015 (UTC)
 * NawlinWiki (talk) 17:08, 30 January 2015 (UTC)
 * I locked them.—Teles « Talk to me ˱ M @ C S ˲» 17:28, 30 January 2015 (UTC)

31 January 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Accounts are targeting the same article as previous socks. 1 Requesting a check to catch additional accounts and to address the underlying IP/proxies. <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 23:23, 31 January 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * <b style="color:#151B54">Mike V</b> • <b style="color:#C16C16">Talk</b> 23:23, 31 January 2015 (UTC)
 * I... well... *speechless* ☺ ·  Salvidrim!   ·  &#9993;  23:37, 31 January 2015 (UTC)
 * The following accounts are.
 * The technical connection to is  as it's the right country, but wrong area. PhilKnight (talk) 10:25, 2 February 2015 (UTC)
 * Under the circumstances, I've tagged the accounts as suspected socks. Also, I've blocked the underlying IP for 3 months. The accounts are all globally locked. PhilKnight (talk) 10:34, 2 February 2015 (UTC)
 * The technical connection to is  as it's the right country, but wrong area. PhilKnight (talk) 10:25, 2 February 2015 (UTC)
 * Under the circumstances, I've tagged the accounts as suspected socks. Also, I've blocked the underlying IP for 3 months. The accounts are all globally locked. PhilKnight (talk) 10:34, 2 February 2015 (UTC)
 * The technical connection to is  as it's the right country, but wrong area. PhilKnight (talk) 10:25, 2 February 2015 (UTC)
 * Under the circumstances, I've tagged the accounts as suspected socks. Also, I've blocked the underlying IP for 3 months. The accounts are all globally locked. PhilKnight (talk) 10:34, 2 February 2015 (UTC)

07 March 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

Similar usernames created within six minutes of one another (see here and here), editing the same article with the same wordage ("shitting") in the edit summary and vandalism (see vandalism and edit summary here, see WP:SPA activity here and here). This looks like a classic case to me, but obviously it's up to the checkusers to determine.  ~Oshwah~  (talk) (contribs)  01:17, 7 March 2015 (UTC)
 * Update: GRS73 Fabiano Pires just registered an account and made a similar edit to the other two accounts. See creation log here.  ~Oshwah~  (talk) (contribs)   01:34, 7 March 2015 (UTC)
 * Update: Saw this edit. Not sure, but I feel like this should be looked at too...  ~Oshwah~  (talk) (contribs)   01:34, 7 March 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

And there's also this, which may or may not give us a clue as to who these accounts are. <b style="color: #062">e</b><b style="color: #069">k</b><b style="color: #04f">i</b><b style="color: #108">ps</b><b style="color: #60c">39</b> (talk) 01:51, 7 March 2015 (UTC)
 * Good call, Ekips39. This is also suspicious as well.  ~Oshwah~  (talk) (contribs)   02:09, 7 March 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - - Accounts blocked, looks like it might be a cross-wiki vandal? CU would be helpful I believe. Legoktm (talk) 01:24, 7 March 2015 (UTC)
 * The three listed are ✅ and globally locked already. Otherwise appears . -- DQ   (ʞlɐʇ)  05:28, 7 March 2015 (UTC)
 * Closing. Legoktm (talk) 07:50, 7 March 2015 (UTC)
 * , CheckUser says that "the three listed are confirmed", yet is tagged as a sock of . What is the connection between this case and WP:Sockpuppet investigations/Vhaslhv?  Vanjagenije  (talk)  12:19, 7 March 2015 (UTC)
 * : I'm 98% certain these are yet more Vhaslhv socks (see the sock history for the similar usernames). Teles has been handling all previous global blocks and did these ones too. I would merge and update tags if you have no objections? ☺ ·  Salvidrim!   ·  &#9993;  20:20, 8 March 2015 (UTC)
 * Of course, that is what I thought.  Vanjagenije  (talk)  21:04, 8 March 2015 (UTC)
 * Case moved from Ligealso. Three socks (as proven, not confirmed, since they were only confirmed to each other) + globally blocked by Teles. ☺ ·   Salvidrim!   ·  &#9993;  01:45, 9 March 2015 (UTC) ☺ ·   Salvidrim!   ·  &#9993;  01:45, 9 March 2015 (UTC)

24 October 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

The first three accounts and first IP are all making the same edit and supporting each other on the talk page. The accounts are active on pt.wiki and both IPs geolocate to portuguese speaking Brasília, Brazil (where the master admits to being from).

Compare the writing by a current sock here versus the edit summaries made by IP 2 here: while making very similar edits to the current batch of socks. The second IP is definitely MissionFix:. See him supporting the last two Brasilia IPs making similar edits in the conversation here. MissionFix has a history of similar disruption was also quite active on pt.wiki, and the account was globally locked as a sock of Vhaslhv.

The last two named accounts are already blocked, and IPs are stale, just included them to make the link to the master clear and to document the socks. TDL (talk) 04:47, 24 October 2015 (UTC)
 * I can only assume that you must have looked at the wrong diffs. The diffs I described as the same showed that the current three named accounts edit warred to add the same content, to the same location of the same article and then argued on the same talk page on the same subject in the same conversation taking the same position all within days of each other.  How is that "not same at all"?  Given that these were also the very first edits made by brand new accounts, and the additional behavioural evidence above, the only reasonable conclusion that can be drawn is that they are operated by the same person.
 * As explained above, the stale IPs were listed to strengthen the link of the current batch of socks to the master MissionFix/Vhaslhv.
 * Ping who blocked the last socks.  TDL (talk) 03:37, 25 October 2015 (UTC)


 * Sorry, my bad. I wasn't aware that it was advisable not to take clerk actions on cases I initiated.  TDL (talk) 19:08, 25 October 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I am locking some accounts pointed here, but you may want to clarify that those are not accounts created by Vhaslhv and they seem to be created by MissionFix. Regards.—Teles « Talk to me ˱ M @ C S ˲» 22:55, 2 November 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  13:59, 25 October 2015 (UTC)
 * - Those four edits you say are the "same" are not same at all. Is there some stronger link between those accounts (disregard the IPs, they are stale anyway)?  Vanjagenije   (talk)  09:45, 24 October 2015 (UTC)
 * - Danlaycock, please don't change case statuses on your own -- leave it to the clerks. Thanks! ☺ ·  Salvidrim!   ·  &#9993;  03:42, 25 October 2015 (UTC)
 * Shit, dude, it had completely left my mind that you were in fact a clerk!! Thousand apologies. Still, it's probably better to leave it this way for now, and while there's no hard rule, it's kinda customary to leave it to another clerk to clerk cases where you're the filer. :) ☺ ·  Salvidrim!   ·  &#9993;  03:46, 25 October 2015 (UTC)
 * sorry that you are having a hard time with this case. Looks like you got caught in friendly fire. :) For clarity, you can file a case with the Template:Selfendorse to request checkuser at the time of filing. Personally, I would only do this if I felt that it is an urgent matter and prefer letting another clerk decide when I'm the filer. Those particular socks that I blocked, I caught on the fly. Since the case is already endorsed, there is nothing to do but wait on a CU and then we notify after the results are reported. You can, btw, post in this section...hopefully no one will shoot at you again. :)
 * Sorry ;_; I owe you a big favor someday :) ☺ ·   Salvidrim!   ·  &#9993;  18:42, 25 October 2015 (UTC)

— Berean Hunter   (talk)  22:40, 25 October 2015 (UTC)
 * - Yes, actually, you are right, I didn't look the right way. I'm endorsing the CheckUser to compare Mascklump, Lkginqlmntkocjnfrh and Allemnisch to each other.  Vanjagenije  (talk)  10:00, 25 October 2015 (UTC)
 * I know almost nothing about the behavioral characteristics of this master. I'm reporting only my technical findings. Just because I use the "confirmed" does not imply a behavioral connection. Some of the accounts below have no edits. Other than the three reported accounts, is the only account with edits. A behavioral analysis of that account is needed. I have taken no action against any of the accounts, e.g, blocks/tagging. I leave that to others, perhaps  as he’s the only administrator clerk involved in this case and also seems to be familiar with the master.
 * Group 1 – The following accounts are ✅ to each other:
 * Group 2 – The following accounts are ✅ to each other and to Group 1:
 * --Bbb23 (talk) 16:09, 25 October 2015 (UTC)
 * Not taking action yet, but just a note detailing Bbb23's results about the accounts with no local enwiki edits: Teorgizza has edits on ptwiki and enwikt (and is indef-blocked for evasion on ptwiki); Jtogorghotrgo has no live edits anywhere and was created on multiple English projects and ptwikb, but only those; Ryplok had 2006 edits on ptwiki, became a global account in April 2013, and a local enwiki account was created in September-2015 (probably by navigating between projects while logged in). ☺ ·  Salvidrim!   ·  &#9993;  18:49, 25 October 2015 (UTC)
 * Grelngo4ehn54oçh looks like a sock of the same master to me, based on this edit showing the same editing behaviour as the other socks outlined in the diffs above (changing the number of state recognizers, albeit on a different article this time). Also, this edit provides further connection between the current batch of socks back to MissionFix through their unrelated interest in phonetics (ie ).  There is also an overlapping interest in flags/coats of arms:.
 * Teorgizza is blocked on pt.wiki as a confirmed sock of MissionFix: pt:Wikipédia:Pedidos_a_verificadores. There are a whole bunch of other socks listed at pt:Categoria:!Fantoches de MissionFix, but they mostly don't seem to have edited on en.wiki.  TDL (talk) 19:08, 25 October 2015 (UTC)
 * I have blocked and tagged the above accounts and emailed Teles. I'm placing this case on hold pending his comments here.
 * --Bbb23 (talk) 16:09, 25 October 2015 (UTC)
 * Not taking action yet, but just a note detailing Bbb23's results about the accounts with no local enwiki edits: Teorgizza has edits on ptwiki and enwikt (and is indef-blocked for evasion on ptwiki); Jtogorghotrgo has no live edits anywhere and was created on multiple English projects and ptwikb, but only those; Ryplok had 2006 edits on ptwiki, became a global account in April 2013, and a local enwiki account was created in September-2015 (probably by navigating between projects while logged in). ☺ ·  Salvidrim!   ·  &#9993;  18:49, 25 October 2015 (UTC)
 * Grelngo4ehn54oçh looks like a sock of the same master to me, based on this edit showing the same editing behaviour as the other socks outlined in the diffs above (changing the number of state recognizers, albeit on a different article this time). Also, this edit provides further connection between the current batch of socks back to MissionFix through their unrelated interest in phonetics (ie ).  There is also an overlapping interest in flags/coats of arms:.
 * Teorgizza is blocked on pt.wiki as a confirmed sock of MissionFix: pt:Wikipédia:Pedidos_a_verificadores. There are a whole bunch of other socks listed at pt:Categoria:!Fantoches de MissionFix, but they mostly don't seem to have edited on en.wiki.  TDL (talk) 19:08, 25 October 2015 (UTC)
 * I have blocked and tagged the above accounts and emailed Teles. I'm placing this case on hold pending his comments here.
 * Teorgizza is blocked on pt.wiki as a confirmed sock of MissionFix: pt:Wikipédia:Pedidos_a_verificadores. There are a whole bunch of other socks listed at pt:Categoria:!Fantoches de MissionFix, but they mostly don't seem to have edited on en.wiki.  TDL (talk) 19:08, 25 October 2015 (UTC)
 * I have blocked and tagged the above accounts and emailed Teles. I'm placing this case on hold pending his comments here.

— Berean Hunter   (talk)  15:16, 5 November 2015 (UTC) — Berean Hunter   (talk)  15:16, 5 November 2015 (UTC)
 * Closing.