Wikipedia:Sockpuppet investigations/Wikibaji/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Greensignalpoint and Musiclovetoall are single-purpose accounts who recreated Samaira Sandhu/Samaira Sandhu (Actress), an article originally created by Wikibaji (a possible paid editor?) and then deleted according to Articles for deletion/Samaira Sandhu. 122.160.30.242 has overlapping editing with Greensignalpoint and Musiclovetoall at Samaira Sandhu as well as Draft:Samaira Sandhu (plus lots of other promotional editing that looks like paid editing). 122.160.30.242 also has overlapping editing with Wikibaji at a diverse set of other articles such CBG oil and Bombay Hemp Company Private Limited (BOHECO). 122.160.30.242 has edited other promotional drafts created by single purpose promotional accounts and  so maybe these two editors should be checked against Wikibaji as well. Peacock (talk) 16:17, 18 July 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  15:42, 19 July 2017 (UTC) — Berean Hunter   (talk)  23:42, 19 July 2017 (UTC)
 * - to discern between meats and socks and find other accounts. Greensignal is stale.
 * This is more than just creating an article about an Indian actress.
 * The following accounts are ✅:
 * Thindranjit is ❌, and Leftmars is between and . Blocked and tagged all the confirmed accounts.--Bbb23 (talk) 19:47, 19 July 2017 (UTC)
 * Leftmars' userpage looks like the rest. . GABgab 23:08, 19 July 2017 (UTC)
 * Hardblocked the static IP which has been used extensively for undisclosed paid editing and posted a notice at COIN.
 * Thindranjit is ❌, and Leftmars is between and . Blocked and tagged all the confirmed accounts.--Bbb23 (talk) 19:47, 19 July 2017 (UTC)
 * Leftmars' userpage looks like the rest. . GABgab 23:08, 19 July 2017 (UTC)
 * Hardblocked the static IP which has been used extensively for undisclosed paid editing and posted a notice at COIN.
 * Thindranjit is ❌, and Leftmars is between and . Blocked and tagged all the confirmed accounts.--Bbb23 (talk) 19:47, 19 July 2017 (UTC)
 * Leftmars' userpage looks like the rest. . GABgab 23:08, 19 July 2017 (UTC)
 * Hardblocked the static IP which has been used extensively for undisclosed paid editing and posted a notice at COIN.
 * Thindranjit is ❌, and Leftmars is between and . Blocked and tagged all the confirmed accounts.--Bbb23 (talk) 19:47, 19 July 2017 (UTC)
 * Leftmars' userpage looks like the rest. . GABgab 23:08, 19 July 2017 (UTC)
 * Hardblocked the static IP which has been used extensively for undisclosed paid editing and posted a notice at COIN.
 * Thindranjit is ❌, and Leftmars is between and . Blocked and tagged all the confirmed accounts.--Bbb23 (talk) 19:47, 19 July 2017 (UTC)
 * Leftmars' userpage looks like the rest. . GABgab 23:08, 19 July 2017 (UTC)
 * Hardblocked the static IP which has been used extensively for undisclosed paid editing and posted a notice at COIN.
 * There is probably some sort of connection to Thindranjit, but it is likely not socking. Closing. GABgab 15:40, 20 July 2017 (UTC)

Suspected sockpuppets

 * Aritel Delhi static IP
 * Aritel Delhi static IP
 * Aritel Delhi static IP
 * Aritel Noida static IP
 * Aritel Delhi static IP
 * Aritel Noida static IP


 * User compare report Auto-generated every hour.
 * Editor interaction utility

We are doing a cleanup job at COIN and it looks like several socks were missed. Starting with the most obvious for now.


 * Music4382 clearly involved due to co-editing and similar username to other Musicxxx accounts created by master. The sandbox behavior & identical summaries when blanking clinches it:
 * Rahuldeewan1 uses same summary when blanking its sandbox:
 * IPs listed due to obvious co-editing with the group & similar ISP, geo to the IP tagged by Berean Hunter

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  15:00, 20 July 2017 (UTC)
 * Rahuldeewan1 is, and Music4382 is .--Bbb23 (talk) 14:03, 20 July 2017 (UTC)
 * Indeffing and tagging both socks. The IPs are too stale to block but the discovery helps present the picture. I ran a couple of range checks but didn't see anything.
 * We're all done. Closing. GABgab 15:40, 20 July 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Recreation of Kumaran Mahalingam as Kumaran M. along with same exact ES. CHRISSY MAD ❯❯❯  ¯\_(ツ)_/¯  11:10, 1 August 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
to confirm and flush accounts. — Berean Hunter   (talk)  17:50, 1 August 2017 (UTC)
 * . .-- Jezebel's Ponyo bons mots 20:44, 2 August 2017 (UTC)
 * The articles are very similar, if not identical. . GABgab 02:47, 3 August 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Sockpuppeteer blocked already, but all these accounts are SPAs only removing the undisclosed paid editing tag from Prasanth Manghat, an article created by. ,, , Joseph2302 (talk) 11:47, 3 September 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Please compare these two accounts to each other, previous socks, and the master. Thanks, GABgab 16:54, 3 September 2017 (UTC)
 * The two accounts are to each other but there are technical differences to the master. Katietalk 20:07, 6 September 2017 (UTC)
 * - Please also check . Thanks, GABgab 18:24, 8 September 2017 (UTC)
 * I just blocked as they're ✅ to  from the August 1st check in the archive.  is  connected to the two named accounts above, but, as Katie noted, they're technically distinct from this master. They also don't partake in some of the standard M.O. stuff the Wikibaji socks do (being purposefully vague).-- Jezebel's Ponyo bons mots  20:30, 14 September 2017 (UTC)
 * I've the three accounts as a separate group. Closing.  GABgab 00:06, 15 September 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Forgive me, if I'm late to the party, I forgot if socks are stale after 60 or 90 days.

Endoca was deleted on 2 April following Articles for deletion/Endoca. I can't tell who created that version, but sockmaster Wikibaji asked for help in February at the Teahouse and participated in the AFD in March.

Blocked sock User:Sapersway created an article about Endoca in their sandbox, moved it mistakenly to User:Endoca. on 31 May, and from there to Endoca. where it was PRODed and deleted.

User:Crackjee used what appears to be the same M.O.: created the article in their sandbox within 9 minutes in only and then moved it into main space, this time at the dual-DAB title Endoca (Cannabis company), something that is a hallmark of a skilled editor on a throw-away account trying to avoid detection of a recreation. I have moved the article to Endoca.

Two of the IPs editing in Endoca (Cannabis company) (106.222.20.238 and 122.162.232.233) geolocate to Bharti Airtel and Airtel Broadband.

Not quite certain if this calls for a sleeper check, ye who knows better decide on that. Sam Sailor 22:43, 13 December 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The CU data retention period is 90 days, but even with that, all the accounts in the archive are.
 * Notwithstanding, Crackjee is ✅.
 * The following accounts are technical matches but :
 * (about 8 days older than Wikibaji)
 * Regardless of their possible relationship with the master, Shadowfinder and Sureshpandey are practically carbon copies of each other, and although they declared their COIs, they did not disclose that they were operated by the same person and their editing overlapped.
 * I've blocked and tagged Crackjee.
 * I've blocked without tags Shadowfinder and Sureshpandey.--Bbb23 (talk) 00:41, 14 December 2017 (UTC)
 * - I blocked Hammey3008 and Saumya tripathi as obvious UPE editors. RateGain has a very long history of socking and promotion. Could we also see how and  (courtesy ping ) fit in? Thanks, GABgab 01:51, 18 December 2017 (UTC)
 * The two accounts don't fit anywhere in this case. ThinkingMan is part of a moderate-sized sock farm – none of the blocked accounts has been tagged with a master. Sam Womp wasn't discovered in that farm, although I think the account is to them. The various accounts have used almost exclusively proxies, and I think Sam Womp was missed because he wasn't using one of the same proxies the others were using. I'm blocking Sam Womp without tags. I think we can put this puppy to bed.--Bbb23 (talk) 18:40, 18 December 2017 (UTC)
 * Tagged the first group, closing. GABgab 20:55, 18 December 2017 (UTC)
 * I've blocked and tagged Crackjee.
 * I've blocked without tags Shadowfinder and Sureshpandey.--Bbb23 (talk) 00:41, 14 December 2017 (UTC)
 * - I blocked Hammey3008 and Saumya tripathi as obvious UPE editors. RateGain has a very long history of socking and promotion. Could we also see how and  (courtesy ping ) fit in? Thanks, GABgab 01:51, 18 December 2017 (UTC)
 * The two accounts don't fit anywhere in this case. ThinkingMan is part of a moderate-sized sock farm – none of the blocked accounts has been tagged with a master. Sam Womp wasn't discovered in that farm, although I think the account is to them. The various accounts have used almost exclusively proxies, and I think Sam Womp was missed because he wasn't using one of the same proxies the others were using. I'm blocking Sam Womp without tags. I think we can put this puppy to bed.--Bbb23 (talk) 18:40, 18 December 2017 (UTC)
 * Tagged the first group, closing. GABgab 20:55, 18 December 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Very similar creation of 's version of Draft:Sudhakar Tomar + similar username. Requesting CU as I don't think the data from the last check would be stale yet? CHRISSY MAD ❯❯❯  ¯\_(ツ)_/¯  15:16, 20 February 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - TNT❤ 19:34, 20 February 2018 (UTC)


 * and behaviourally looks likely - TNT❤ 19:40, 20 February 2018 (UTC)
 * . GABgab 21:28, 20 February 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Significant overlap with the master, particularly with edit summaries and removing maintenance tags on their creations. And though I find them behaviorally very similar, I suspect this is continued WP:UPE, same as the last. CHRISSY MAD ❯❯❯  ¯\_(ツ)_/¯  15:44, 20 June 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - per evidence provided. Please indef. Sro23 (talk) 22:55, 20 June 2018 (UTC)
 * I have indefinitely blocked User:Raksha Rajput per the request. I especially noticed their unjustified removal of maintenance tags from articles created by User:Wikibaji. EdJohnston (talk) 02:02, 21 June 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation of Kumaran Mahalingam under Mahalingam Kumaran. The suspected sock tried a lot to show himself a different person but some habits never change. GSS (talk |c|em ) 16:18, 24 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * based on behavior. Closing. GABgab 19:42, 24 October 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This wording is copied from WP:Conflict of interest/Noticeboard, originally posted by.


 * The first 2 users alleged socks have similar names, and have tried creating the same page about marilyn hughes. In the first 2 user's pages, you can see that many(if not all) of their created pages were deleted for non-notability. The third user is a recently active user(made a single edit in 2016, and then active again in January 2019), and he too created the marilynn Erika Hughes page. What I think is that these three users are either the same person or more likely belonging to a marketing agency and were paid by the Relevant party for every single page they created.

Since many of the articles are deleted, I can't provide diffs but here are the creations of the bunch: Obvious DUCKiness in the names of the socks, plus sneaky article (re)creation should be enough to launch a look at these. ☆ Bri (talk) 16:54, 4 January 2019 (UTC)
 * Marilynn Erika Hughes (Cbrtutor)
 * Marilynn Hughes (WFE24)
 * Marilynn Hughès not a typo (KPL98)

Duplicate case I just noticed Sockpuppet investigations/KPL98 exists so I will fold this into the other investigation. ☆ Bri (talk) 18:20, 4 January 2019 (UTC)
 * Additional notes at Articles for deletion/IndiaLaw LLP. by other users ... noting here for the record, since that is linked back to the deleted duplicate of this SPI. ☆ Bri (talk) 20:13, 4 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅ to each other, to some socks, and  to Wikibaji:
 * . Please merge into Wikibaji.--Bbb23 (talk) 21:53, 4 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)
 * . Please merge into Wikibaji.--Bbb23 (talk) 21:53, 4 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)
 * . Please merge into Wikibaji.--Bbb23 (talk) 21:53, 4 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)
 * . Please merge into Wikibaji.--Bbb23 (talk) 21:53, 4 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)
 * . Please merge into Wikibaji.--Bbb23 (talk) 21:53, 4 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)
 * . Please merge into Wikibaji.--Bbb23 (talk) 21:53, 4 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)
 * . Please merge into Wikibaji.--Bbb23 (talk) 21:53, 4 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)
 * ✅ and closed.  Vanjagenije  (talk)  17:57, 7 January 2019 (UTC)

Suspected sockpuppets

 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

See below. —DoRD (talk)​ 13:54, 9 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Filing for the record, the following are ✅ matches to this group:
 * —DoRD (talk)​ 13:54, 9 January 2019 (UTC)
 * —DoRD (talk)​ 13:54, 9 January 2019 (UTC)
 * —DoRD (talk)​ 13:54, 9 January 2019 (UTC)
 * —DoRD (talk)​ 13:54, 9 January 2019 (UTC)
 * —DoRD (talk)​ 13:54, 9 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation of the salted RateGain as Rategain Technologies which had been created multiple times by a CU puppet of  & suspected puppet of  Cabayi (talk) 12:00, 12 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 13:40, 12 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I previously reported a list of sockpuppets (KPL98, WFE24) for some user, who were all creating pages for Marilynn Hughes.Turns out its a huge sockpuppeteering group working on promoting multiple pages. This user too belongs there too, as he recreated the Marilynn hughes page. Daiyusha (talk) 06:25, 28 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * but I'd like a CU to look for other sleepers given the age of this account. —&thinsp;JJMC89&thinsp; (T·C) 06:36, 28 January 2019 (UTC)
 * ✅. No other accounts seen. Retagged, closing. Bbb23 (talk) 19:34, 28 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreated previously created by. SmartSE (talk) 17:40, 8 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. Blocked, tagged, closing. Katietalk 17:15, 9 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Compare to  —&thinsp;JJMC89&thinsp; (T·C) 19:05, 18 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * For the record. —&thinsp;JJMC89&thinsp; (T·C) 19:07, 18 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The suspected sock was registered in February 2018 and created Pragyesh Singh in November. The article was previously created by the master, and it was deleted in October per G7. Both editing in the same area and their editing pattern and the use of edit summary is very similar. Both first created their sandbox with a small random edit and then began with the infobox. After expanding the page in a couple of edits, both moved their sandbox to mainspace using the same summary draft moved to an article. The master was inactive since October and reappeared today to submit Draft:Pragyesh Singh for a review. GSS (talk |c|em ) 16:52, 10 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Please compare the two.  Vanjagenije  (talk)  18:23, 17 February 2019 (UTC)
 * ✅ match to Sockpuppet investigations/Wikibaji:
 * —DoRD (talk)​ 12:28, 18 February 2019 (UTC)
 * —DoRD (talk)​ 12:28, 18 February 2019 (UTC)
 * —DoRD (talk)​ 12:28, 18 February 2019 (UTC)
 * —DoRD (talk)​ 12:28, 18 February 2019 (UTC)
 * —DoRD (talk)​ 12:28, 18 February 2019 (UTC)
 * —DoRD (talk)​ 12:28, 18 February 2019 (UTC)


 * Case merged, closing. GABgab 15:40, 21 February 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation of Mandar Jamsandekar under Mandar Jàmsandêkar. ShuliJen's last edit was in May and reappeared last week after their article was moved to draftspace. GSS (talk |c|em ) 11:51, 26 December 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Comment. is active again (Dif). I'm not sure if something should be done about that, or... Pinging for review &#8211;  MJL &thinsp;‐Talk‐☖ 21:53, 9 March 2019 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Please, compare those two.  Vanjagenije  (talk)  13:41, 9 January 2019 (UTC)
 * Group 1 are all ✅ to socks previously confirmed to ANNMT:
 * ShuliJen is ✅ to, a confirmed Wikibaji sock.
 * The two groups are very bordering on confirmed to each other: my feeling is that the cases should be merged but I'll leave the determination to a clerk.  please compare the behaviour of the group 1 accounts and determine if they should be blocked. If they are behaviourally related to ShuliJen then please merge this report to Sockpuppet investigations/Wikibaji; if not, please merge the report to Sockpuppet investigations/ANNMT and then rename it to SaiLeeKom. Ivanvector (Talk/Edits) 16:36, 9 January 2019 (UTC)
 * ShuliJen is ✅ to, a confirmed Wikibaji sock.
 * The two groups are very bordering on confirmed to each other: my feeling is that the cases should be merged but I'll leave the determination to a clerk.  please compare the behaviour of the group 1 accounts and determine if they should be blocked. If they are behaviourally related to ShuliJen then please merge this report to Sockpuppet investigations/Wikibaji; if not, please merge the report to Sockpuppet investigations/ANNMT and then rename it to SaiLeeKom. Ivanvector (Talk/Edits) 16:36, 9 January 2019 (UTC)
 * ShuliJen is ✅ to, a confirmed Wikibaji sock.
 * The two groups are very bordering on confirmed to each other: my feeling is that the cases should be merged but I'll leave the determination to a clerk.  please compare the behaviour of the group 1 accounts and determine if they should be blocked. If they are behaviourally related to ShuliJen then please merge this report to Sockpuppet investigations/Wikibaji; if not, please merge the report to Sockpuppet investigations/ANNMT and then rename it to SaiLeeKom. Ivanvector (Talk/Edits) 16:36, 9 January 2019 (UTC)
 * ShuliJen is ✅ to, a confirmed Wikibaji sock.
 * The two groups are very bordering on confirmed to each other: my feeling is that the cases should be merged but I'll leave the determination to a clerk.  please compare the behaviour of the group 1 accounts and determine if they should be blocked. If they are behaviourally related to ShuliJen then please merge this report to Sockpuppet investigations/Wikibaji; if not, please merge the report to Sockpuppet investigations/ANNMT and then rename it to SaiLeeKom. Ivanvector (Talk/Edits) 16:36, 9 January 2019 (UTC)
 * The two groups are very bordering on confirmed to each other: my feeling is that the cases should be merged but I'll leave the determination to a clerk.  please compare the behaviour of the group 1 accounts and determine if they should be blocked. If they are behaviourally related to ShuliJen then please merge this report to Sockpuppet investigations/Wikibaji; if not, please merge the report to Sockpuppet investigations/ANNMT and then rename it to SaiLeeKom. Ivanvector (Talk/Edits) 16:36, 9 January 2019 (UTC)


 * A fresh check on ✅ to be a Wikibaji sock (matches with .  This means Group 1 = Group 2 = Wikibaji = ANNMT. All can be merged accordingly (including this case) to Wikibaji. - Mailer Diablo 14:19, 30 March 2019 (UTC)
 * Mailer diablo - I'm just a small bit confused here... I see "Group 1" above, but where exactly is "Group 2"? Can you point me to exactly what lists of sock users need to be merged into the Wikibaji SPI report? I want to leave little room for confusion and error. Thanks :-)  ~Oshwah~  (talk) (contribs)   18:22, 2 April 2019 (UTC)
 * Since the earlier check revealed that = Wikibaji, combined with the latest finding, then all confirmed socks listed on this page are Wikibaji socks. - Mailer Diablo 14:23, 4 April 2019 (UTC)


 * Blocked and tagged. MER-C 17:47, 4 April 2019 (UTC)
 * Cabayi (talk) 15:16, 20 April 2019 (UTC)
 * Everything on this case dealt with. Closing. Cabayi (talk) 15:22, 20 April 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

A previous sock of Wikibaji, moved their sandbox to Danube Group on 25 Feb. NTF41 did the same on 17 April. Cabayi (talk) 15:30, 20 April 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅
 * Cabayi (talk) 15:31, 20 April 2019 (UTC)
 * Please confirm & check for any newer sleepers. Cabayi (talk) 15:32, 20 April 2019 (UTC)

. — Berean Hunter   (talk)  17:19, 20 April 2019 (UTC)
 * Stale but likely based on behavior
 * G5s galore, closing. Cabayi (talk) 17:45, 20 April 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

A sockpuppet of Wikibaji, namely DroomLuck, edited the Edelweiss Group article to remove promotional material, as other paid editing rings have done in the past, such as https://en.wikipedia.org/wiki/Wikipedia:Sockpuppet_investigations/Zenminded/Archive (which I suspect is another name for whoever is behind this). RahulAuthor1 has done the same in this edit: https://en.wikipedia.org/w/index.php?title=Edelweiss_Group&diff=prev&oldid=844347595, and his MO of moving a draft to article space in this edit: https://en.wikipedia.org/w/index.php?title=User:RahulAuthor1/sandbox&oldid=893723294 matches Wikibaji's socks. Thus, they are clearly related, and even if they're different people RahulAuthor1 is still someone who isn't disclosing any paid editing, which is against the Terms of Use. 92.7.175.176 (talk) 22:47, 29 April 2019 (UTC)
 * Added Dopedaniel, who recreated and petitioned for the undeletion of Draft:Oluwatobi Oyinlola. Oluwatobi Oyinlola was created by DroomLuck. MER-C 10:36, 30 April 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Cabayi (talk) 11:50, 30 April 2019 (UTC)
 * - Please confirm & check for sleepers. Cabayi (talk) 11:51, 30 April 2019 (UTC)

The following accounts are ✅ to each other: They also appear to be ❌ to the Wikibaji group. is to be related to anyone. Reaper Eternal (talk) 02:27, 1 May 2019 (UTC)
 * Are you sure that Ssoetan is actually a sockpuppet? He's on the other side of the world from Wikibaji. Reaper Eternal (talk) 02:41, 1 May 2019 (UTC)
 * was why I blocked. MER-C 09:27, 1 May 2019 (UTC)
 * I've blocked RahulAuthor1 for UPE. MER-C 17:16, 2 May 2019 (UTC)


 * - Please indef Dopedaniel as a confirmed sock of Ssoetan. Cabayi (talk) 20:14, 4 May 2019 (UTC)
 * Done. MER-C 09:25, 5 May 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Hello. Mostly, the evidence comes from these 2 edits to the same article with the same edit summary and more or less the same content: L2B2 and PT69G. Obviously, there is also the user name which resembles many user names in this SPI. Thanks and regards, Biwom (talk) 12:15, 12 June 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Added for recreation of Dragana Dujovic (originally created by ). MER-C 09:24, 13 June 2019 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus:
 * . Closing.--Bbb23 (talk) 13:23, 13 June 2019 (UTC)
 * I've G5d all the created pages. SmartSE (talk) 13:57, 13 June 2019 (UTC)
 * . Closing.--Bbb23 (talk) 13:23, 13 June 2019 (UTC)
 * I've G5d all the created pages. SmartSE (talk) 13:57, 13 June 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

SPA gaming WP:ACPERM and recreated KWT TODAY earlier created by as Kwt Today. GSS (talk |c|em ) 14:40, 25 June 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Now blocked and tagged. Closing.--Bbb23 (talk) 15:26, 25 June 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Hello. This user has created Draft:Know What’s Trending Today which is yet another version of Kwt Today or KWT TODAY. Thanks and regards, Biwom (talk) 07:47, 28 June 2019 (UTC) Biwom (talk) 07:47, 28 June 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Cabayi (talk) 09:27, 28 June 2019 (UTC)
 * - Please indef the sock. Cabayi (talk) 09:28, 28 June 2019 (UTC)
 * ✅ SmartSE (talk) 10:07, 28 June 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Hello. This user re-created Power Corridors as PowerCorridors. The 2 versions of the article are identical, as far as I can tell. Thanks and regards, Biwom (talk) 08:06, 22 July 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The lead was the same, but the about section was new. —&thinsp;JJMC89&thinsp; (T·C) 00:57, 23 July 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

SPA recreated Dino james (rapper) previously created by the master under Dino james. GSS (talk |c|em ) 10:28, 28 July 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Dino James (capitalized correctly) was created twice by confirmed Wikibaji socks. Both versions are too similar too Priyanka Bhambhani's version to be unrelated. . Sir Sputnik (talk) 14:39, 28 July 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Resubmitted draft article repeatedly created by socks of the master and asked for it to be reviewed. Both edits were in June, but his return now in August shows he has no interest in anything other than the draft which is autobio of the master. The current draft was created by. Not sure whether check is needed. – Ammarpad (talk) 13:19, 12 August 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Has also inserted name-dropping of same person . ☆ Bri (talk) 23:23, 12 August 2019 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * , closing. Kevin ( aka L235 ·&#32; t ·&#32; c) 02:52, 16 August 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

User created draft page Draft:Rizwan Sajan (and User talk:WikiWriter4Peanuts/sandbox). Rizwan Sajan was previously created by sock

DUCK. Ask CU for sleeper check (given prolific socking) and confirmation  Eve rgr een Fir  (talk) 20:41, 20 March 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * WikiWriter4Peanuts and are ✅ to each other and ❌ to Wikibaji. Blocked and tagged with WikiWriter4Peanuts as the master. The clerk may create a new case with the report if they wish. Either way, the report should be closed.--Bbb23 (talk) 22:08, 20 March 2020 (UTC)
 * Closing. TonyBallioni (talk) 15:15, 21 March 2020 (UTC)
 * Sockpuppet investigations/WikiWriter4Peanuts —&thinsp;JJMC89&thinsp; (T·C) 00:04, 22 March 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Both users have repeatedly created non-notable articles which were speed-died: UK-E79 and Slowthin

With just 6 mainspace edits from 2018, User:UK-E79 nominated my article for CSD and then AFD using Twinkle. This came moments later after User:Slowthin's AFD on my another article.

User:UK-E79 also created some promotional pages in the past which give me the impression of WP:PAID editing and that User:UK-E79 might be a sleeper sock of User:Slowthin.

It is to be noted that UK-E79's edits came after I asked Slowthin for a possible WP:COI on my talkpage.

Both users have similar userpages: UK-E79 and Slowthin KartikeyaS (talk) 07:21, 6 March 2020 (UTC)


 * Interestingly, a response to my WP:COI question was answered with And for your information i am not a paid user by which gives a strong indication of WP:UPE.-- KartikeyaS (talk) 09:56, 6 March 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * This is an interesting one. Normally, I'd consider this a vexatious nomination: lack of interaction between the sock and the sockmaster, the claim that the userpages are similar is clearly wrong, and the nom's claim that someone denying being paid somehow makes them suspicious...but it's undeniable that UK-E79 just happened to come back from a two-year break an hour after KartikeyaS343 requested speedy deletion/AfD'd one of Slowthin's pages. Hesitant endorsement of CU from me, for whatever that's worth. creffett (talk) 03:51, 7 March 2020 (UTC)
 * I got strong paid vibes from slowthin as well, but after seeing this AFD, I think they are definitely from the same paid farm that Wikibaji came from. Particularly as their first set of edits was to Neeraj Gupta which was heavily edited by, guess who,, a WB sock!Praxidicae (talk) 11:55, 8 March 2020 (UTC)
 * I too have a similar feeling about slowthin and I believe they are somehow connected. UK-E79's sudden appearance and similar editing pattern came immediately after slowthin's edits. I also think that this SPI case may have a connection. KartikeyaS (talk) 17:19, 8 March 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  13:13, 8 March 2020 (UTC)
 * I've blocked UK-E79 as a sock of Wikibaji. I also blocked, , and . Igal Dahan (jewellery designer) is a recreation of Igal Dahan. The other accounts are directly implicated in UPE via Arsh Bajwa (a Wikibaji article) and Draft:Zita Vass. Observant admins will also see a particular "coincidence" which makes the link to Wikibaji stronger. MER-C 11:32, 8 March 2020 (UTC)
 * UK-E79 is a sock of Wikibaji. Slowthin appears to be a different editor but they are in the same region. Meatpuppetry is possible..
 * Closing with no further action.--Bbb23 (talk) 23:07, 25 March 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * Both have similar edit patterns of welcoming new users who barely made an edit: Endureforce and Slowthin using same welcome template.


 * This is just one instance, their contributions have a long list.


 * Both have been suspected of WP:UPE. Also see comments by MER-C and Praxidicae


 * Both accounts have created spammy articles. Slowthin's articles have been deleted and Endureforce's article is at AFD now. KartikeyaS (talk) 19:29, 21 March 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Endureforce is ✅ to UK-E79. Slowthin is ✅ to Wikibaji. . Please merge this case into Sockpuppet investigations/Wikibaji.--Bbb23 (talk) 15:54, 1 April 2020 (UTC)
 * Merged, closing. Cabayi (talk) 15:23, 2 April 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Per evidence by on my talk page. See below. — Berean Hunter   (talk)  18:52, 4 April 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)


 * spamming
 * spamming

Spammed links:

Also spammed these: https://sites.google.com/site/activeleanketopillsscam/ https://sites.google.com/site/ketogeniksdietplan/ https://medium.com/@helentoombs0/zylophin-rx-this-sexual-supplement-comes-top-10-list-in-the-world-where-to-buy-60cbd4a612ad https://medium.com/@helentoombs0/ketogeniks-diet-pills-review-price-ingredient-advantage-scam-first-read-this-then-buy-67a0114d3b1c https://medium.com/@shirleypropp487/diet-clarity-keto-this-is-efective-accurate-way-to-weight-lose-it-is-proven-by-scientically-813a42cd245d https://health673274574.wordpress.com/2020/02/15/ketogeniks-diet/ https://supplementsworld.org/genbrain/ https://myfitnessclubb.com/genbrain/

I lost one of the links which began " https://medium.com/@shirley ...". I have posted to COIBot/Poke for followup. I suspect that we will need to blacklist all but medium.com and saatchiart.com. Found https://medium.com/@shirleypropp487/diet-clarity-keto-this-is-efective-accurate-way-to-weight-lose-it-is-proven-by-scientically-813a42cd245d

all but the one possible account which is already blocked. — Berean Hunter   (talk)  18:57, 4 April 2020 (UTC)

Also ✅
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)
 * (blocked on de.wiki as spambot)

— Berean Hunter   (talk)  21:02, 4 April 2020 (UTC)
 * Nothing more to do. Closing. Cabayi (talk) 07:03, 5 April 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * Looks like another sleeper account similar to, . With less than 50 edits, first created a spammy article back in 2017 then suddenly become active in 2019 with first edit to create another promotional company page. There might be more such sleeper accounts so requesting a CU. KartikeyaS (talk) 14:30, 6 April 2020 (UTC) KartikeyaS (talk) 14:30, 6 April 2020 (UTC)


 * GRIPK created the same article which was previously created by a Vasu1206 sock. -- KartikeyaS (talk) 14:55, 6 April 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked, closing. MER-C 18:48, 6 April 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The master is a newbie (joined in April) and sock joined only few days back. Both have Afded my articles which I am counting below. Aaqib Anjum Aafī (talk) 09:51, 26 May 2020 (UTC)
 * 1) ) That master is a newbie and welcomes newbies, the sock is a newbie and welcomes newbies. See Special:Contributions/Numan765 and Special:Contributions/KST981.
 * 2) ) that master AfDed Articles for deletion/Muhammad Sufyan Qasmi on 24 May and sock AfDed Articles for deletion/Noor Alam Khalil Amini on 26 May and they mentioned "non notable scholar, no independent reliable resources. Fails WP:GNG". - Aaqib Anjum Aafī (talk) 09:56, 26 May 2020 (UTC)
 * 3) ) that Articles for deletion/Safoora Zargar AfDed by DTM, the master after commenting there went on to AfD my created articles including Abdur Rahman ibn Yusuf Mangera, All India Majlis Sada-e-Haq, Gori (actress). The sock commented on that AfD "Delete As per nomination by User:Sturdyankit", quite wrong.
 * 4) ) that the sock after commenting in that AfD, AfDed my articles including Noor Alam Khalil Amini, Vipin Kumar Tripathi and CSded Natasha Badhwar.
 * I think that this is only to vandalize Wikipedia. Request investigation. - Aaqib Anjum Aafī (talk) 10:02, 26 May 2020 (UTC)
 * Also, there is a common format of external links on the userpage of both master and sock. - Aaqib Anjum Aafī (talk) 10:33, 26 May 2020 (UTC)
 * One thing matching in both is that when Numan765 commented at AfD Safoora, he then AfDed my created articles like Abdur Rahman ibn Yusuf Mangera, Muhammad Sufyan Qasmi, All India Majlis Sada-e-Haq, Gori (actress), possibly because I argued for Keep. He then headed to AfD Vicky Manhas, and there is a coincidence that its creator also had argued the Keep at AfD Safoora. Moving on, Numan765 AfDed Adil Akhtar at AfD Adil Akhtar possibly because its creator  had argued for Keep at the same AfD  Safoora. Here the master stops.
 * KST comments at AfD Gori, then at AfD Sufyan, then at AfD Safoora and then AfDed Ababeel (NGO) whose creator again is . The sock then AfDed, Noor Alam Khalil Amini, Vipin Kumar Tripathi, my created articles and CSDed Natasha Badhwar. this diff makes me believe that both Numan and KSt are sock puppets of Sturdyankit, who since 3 years has made no substantial contribution to AfDs but highly participated at AfD Safoora. The master is someone else. - Aaqib Anjum Aafī (talk) 03:18, 28 May 2020 (UTC)
 * , what about the AfDs they started or they contributed to? Thanks. - Aaqib Anjum Aafī (talk) 14:09, 29 May 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * The editing timeframes also match up (KST stops editing, then Numan starts, and vice versa). — MarkH21talk 15:24, 26 May 2020 (UTC)


 * The User:KST981 is 7 days old account and is trying to vandalise Wikipedia. I am agree with Aaqib Anjum Aafī . The user KST981 added AfD tag on Ababeel (NGO) says it have Self Published resources. However, the said article have proper reliable sources like The Indian Express, The Kashmir Monitor, Greater Kashmir, Two Circles, News18 and many others. The user KST981 claiming these sources as self published. The user have 140+ approximately contribution having about 100 contribution in Main. And his contribution is used only for vandalism. TheChunky (talk) 10:20, 28 May 2020 (UTC)

-- Toddy1 (talk) 18:53, 28 May 2020 (UTC)
 * What is very odd is that both Numan765 and KST981 have posted welcome messages using Twinkle to users who often have no contributions (see table below)

Clerk, CheckUser, and/or patrolling admin comments
 
 * I think it's when you combine the technical with behavioral for Numan765 to  from Sockpuppet investigations/Wikibaji. KST981 is  - and I say this because I'd rather you look for a behavioral information than rely on what I am seeing as it's hard to pin down this result.  another good case to look at. --  Amanda  (aka DQ) 11:25, 29 May 2020 (UTC)
 * , There's no doubt KST981 and Numan765 are related by behavior. There's enough time card differences (Numan vs KST) that I suspect meat rather than sock.  Welcoming zero-edit users is overwhelming evidence; the text of the messages are even almost identical.  Previous socks were doing this (slowthin and Endureforce).  The text is different now, but the common theme is that contemporaneous messages are identical to each other.
 * The bottom line is that there's tons of general not-a-new-user behavior (CSD taggging, keeping a task list on their user page, extensive involvement in project space) that makes it clear KST981 is a sock, and the connections above that make it certain they're connected to this particular farm.
 * The next question is, should we suspect the recipients of all these zero-edit welcomes? I'd say yes, but if they haven't editing anything yet, there's really nothing to do there. -- RoySmith (talk) 13:07, 29 May 2020 (UTC)
 * No, the new accounts aren't related to the user notifying, it's just randomly picked from the new users log. Besides the edits are completely different between those welcomed accounts. -- Amanda  (aka DQ) 13:26, 29 May 2020 (UTC)
 * , OK, so then I recommend indefing Numan765 and KST981 and merging this into Sockpuppet investigations/Wikibaji. -- RoySmith (talk) 13:32, 29 May 2020 (UTC)
 * I'd have no objection to that, go ahead and do it. -- Amanda  (aka DQ) 13:35, 29 May 2020 (UTC)
 * Actually, the more I think about this, I'm no longer convinced the welcome messages are a connection. I was originally thinking along the lines of one sock welcoming their farm-mates.  It didn't make sense that one would want to advertise your sockiness so blatently, but socks do weird things.  But, now that you mention the idea that it's just random targets from the new user's log, I'm no longer sure.  Maybe just clicking on a twinkle button 10 times is the most efficient way to get past the autoconfirmed threshold.  For all I know, that's common knowledge in sockland.  So, yeah, KST981 is still definitely a sock, just no longer quite so sure they're connected to Numan765.  On the other hand, the name similarity to KGFT785 is pretty striking.  And the interaction report also says connected. -- RoySmith (talk) 13:43, 29 May 2020 (UTC)
 * Renamed case, blocked KST981 and Numan765, closing -- RoySmith (talk) 13:54, 29 May 2020 (UTC)
 * I'm looking through the contribution histories to see what should be G5'd. I don't see any point in wasting time on G5 for the welcome messages, but there's some stuff in mainspace and draftspace that may be worth deleting.  -- RoySmith (talk) 13:58, 29 May 2020 (UTC)
 * , To be eligible for WP:G5, there need to be no substantial edits by others. That would be unusual for an AfD, but if you know of any specific examples, let me know and I'll take a look.  Feel free to annotate any non-G5-eligible AfDs with a link to this SPI, however. -- RoySmith (talk) 14:14, 29 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Created just two days after the last round of socks were found and blocked. Made "grammar" edit to the otherwise obscure Bangladesh International School, Dammam, the same as a recent WikiBaji sock. They were originally reported (in bad faith) as a sock of SharabSalam at Sockpuppet investigations/SharabSalam. I am copying over 's comments there: Now, Wiseman is clearly a sock of someone, he has copied SharabSalem's edit summaries over at Tablighi Jamaat, filed a SPI report as his tenth edit, and did that "I am a new user teehee" schpiel over at User talk:ChamithN. Wiseman appears to be using deliberate typos. My first guess is that Wiseman (along with Hsachs1) are socks of Wikibaji since all have "fixed grammar" at Bangladesh International School and Wiseman appears immediately after Hsachs1's spammy article is declined. CaptainEek Edits Ho Cap'n!⚓ 05:28, 9 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
❌ to Wikibaji. — Berean Hunter   (talk)  18:24, 11 June 2020 (UTC)
 * I don't know exactly what's going on here (sock, meat, random vandalism?) but it all adds up to WP:NOTHERE, for which I've blocked Wiseman. "rv content added by a sockpuppet of blocked editor WP:BLOCKEVASION" as an edit comment on a new user's 4th edit?  Not likely. -- RoySmith (talk) 20:06, 11 June 2020 (UTC)