Wikipedia:Sockpuppet investigations/Wnnse/Archive

15 July 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

Same disruptive pattern of editing by both users. Multiple IP addresses from the same ISP have been used to edit the same articles. These are the IP addresses which i strongly suspect that have been used by the same person who operates these two accounts, User:88.245.150.38, User:81.214.144.157, User:81.214.159.36, User:88.245.157.176, User:95.14.105.166, User:88.245.145.83, User:81.214.159.74, User:81.214.155.120, User:81.214.146.105, User:78.168.204.172, User:88.245.154.29, User:88.245.148.87, User:81.213.245.201, User:95.5.17.198, User:95.14.103.255, User:81.214.153.239, User:88.238.237.254, User:88.238.239.14, User:88.235.50.30, User:85.101.212.80, User:78.180.250.7, User:78.183.87.42. Also note that all these IP addresses are tracked to Turk Telecom in Istabul, Turkey. Interestingly one of the IP has edited both the user pages, this IP User:81.214.159.36 edited both User:Wnnse and User:Bow-bb user pages on the same day on February 29, 2012. This is an attempt by User:Bow-bb to evade scrutiny and is a block evasion as it is very much possible that they same person who operated their previous account User:Wnnse before until it got indefinitely blocked. User account Wnnse was indefinitely blocked on February 27, 2012 for disruptive editing (see this and user account Bow-bb was created 2 days after that on February 29, 2012 (see this ). Both the user accounts have very similar user pages, (see this for User:Wnnse  and this for User:Bow-bb ) regarding the same topics which makes it even more suspicious. Some of the similar articles edited by both the accounts and IP addresses include List of Good Luck Charlie episodes, List of Jessie episodes, iCarly (season 4), ICarly (season 5), ICarly (season 6), List of iCarly episodes, List of Victorious episodes, List of Zoey 101 episodes, etc. and there can be many more also. The person behind this has taken advantage of the dynamic IP changing and has continued to evade their block which is definitely not allowed by making new accounts and evading block and scrutiny. I request the CheckUser's to take the necessary action. Thank you. TheGeneralUser (talk) 09:34, 15 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Just for everyone's information, User:Bow-bb commented on my user talk page yesterday saying that their user account User:Wnnse had been banned (see ) which now definitely proves it 100% plus with CheckUser confirmed result that they are indeed the same person. TheGeneralUser (talk) 11:09, 17 July 2012 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  18:25, 17 July 2012 (UTC) — Berean Hunter   (talk)  18:47, 17 July 2012 (UTC) — Berean Hunter   (talk)  18:50, 17 July 2012 (UTC)
 * - Obvious sock is obvious, would like to see if more socks exist. Going to block sock via DUCK. Dennis Brown -  2&cent;    &copy;  23:38, 15 July 2012 (UTC)
 * ✅; no surprise there. Sadly, they come from all over two very dynamic ranges that sees plenty of legitimate traffic, and often edits logged off; no range block is possible, semi-protection of affected articles might be worth considering.
 * is a match; worth looking into.  &mdash; Coren (talk) 00:25, 17 July 2012 (UTC)
 * What about User:Luckyeleven who has confessed to being this user and trying to keep control on the sock?
 * They have already admitted to it, no CU is required, and won't tell you more than you already know. Unless your asking for sleepers... -- DQ  (ʞlɐʇ)  18:37, 17 July 2012 (UTC)
 * Yes, since Luckyeleven didn't come up in the initial check it may lead them to additional sleeper accounts.
 * ..er, lead you to additional sleeper accounts. :)


 * can be added as a self admitted sock, whom I just indef blocked. A sleeper check is not a bad idea.  Dennis Brown -  2&cent;    &copy;  18:41, 17 July 2012 (UTC)
 * Yeah, not much to do there.  is another sock; but the ranges are huge and highly dynamic.  It'll have to be whack-a-mole on behavior coupled with some strategic semi-protections.  &mdash; Coren (talk) 19:44, 17 July 2012 (UTC)
 * Blocked and tagged. Marking for closure. Tiptoety  talk 20:15, 17 July 2012 (UTC)

04 August 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Very likely a block evading sockpuppet of User:Wnnse which has continued to created more multiple sockpuppet accounts and continues editing from various IP addresses of a broad dynamic range ISP all of which trace to Turk Telecom in Istanbul, Turkey (Recently used IP addresses which i have tagged and could find are these User:78.183.88.235, User:78.183.92.199, User:78.183.94.206, User:78.180.244.195, User:78.183.93.110, User:78.183.84.43, User:78.180.250.36, User:78.181.103.195, User:78.180.251.192). Same disruptive editing pattern and vandalism has been going after an indefinite block was done on a few CheckUser confirmed accounts a few weeks ago but it does not seem to have any effect on the disruptive sockpuppeteer. I suspect there is a high possibility that there can also be more sleeper accounts which we all don't know until a CheckUser check is done. The sockpuppeteer continues to edit various similar articles some of which i am listing here are, List of Zoey 101 episodes, List of Victorious episodes, ICarly (season 6), List of Big Time Rush episodes, List of Mike & Molly episodes, List of Phil of the Future episodes, List of Blue Bloods episodes, List of The Big Bang Theory episodes, List of My Babysitter's a Vampire episodes, List of Big Time Rush episodes, List of Jessie episodes, List of Shake It Up episodes, The Vampire Diaries (season 3), List of What I Like About You episodes, What I Like About You (TV series), List of 2 Broke Girls episodes (there are many more also, so if possible please try to have a thorough check on their history and also other articles edited from other blocked accounts given in the archive) which this user has also edited from multiple IP addresses and possibly more sockpuppet accounts. I strongly recommend the CheckUser's to kindly have a check on all the IP addresses which i have tagged, these can be found on [Category:Suspected Wikipedia sockpuppets of Wnnse] (Wikilink is not showing up with the normal wikicode so have removed one bracket from each side) which also includes all the above IP addresses which i have recently tagged for finding out any other sleeper accounts as this user has a known history of making multiple sockpuppet accounts and using them at different times (see the sockpuppet investigations archive). I also suggest to the CheckUser's and Administrator's to make a range block on the IP range (if at least possible) or take other strict actions and measures for protecting Wikipedia against this highly disruptive block evader and sockpuppeteer since the said user has blatantly given a casual threat of block evasion (see this, where User:Luckyeleven posted this note on my user talk page ) a few weeks ago of making more accounts and edit with them until they get blocked then keep switching accounts which violates multiple points of Wikipedia policy of WP:SOCK. I therefore request the CheckUser's and Administrator's to take strict action and strict measures to stop this sockpuppeteer to continue evading scrutiny and block evasion. Thank you. TheGeneralUser (talk) 21:36, 4 August 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
I can tell you that the IP ranges are way too broad to rangeblock, so very likely WP:RFPP is going to have to be used as an option in the future. Dennis Brown - 2&cent;    &copy;   Join WER 12:57, 5 August 2012 (UTC)
 * - Strong behavioral evidence but endorsing for sleeper check. Dennis Brown - 2&cent;    &copy;   Join WER 21:57, 4 August 2012 (UTC)

User:MichelleTheola is ✅ as a sock of User:Wnnse. No comment on the IPs. Frank &#124;  talk  17:22, 5 August 2012 (UTC)
 * Further note: no sleepers found at the time this check was made. Frank  &#124;  talk  18:55, 5 August 2012 (UTC)


 * Blocked and tagged, RFPP for the IPs, too broad to block range. Dennis Brown - 2&cent;    &copy;   Join WER 17:30, 5 August 2012 (UTC)

25 August 2012

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.

Very same pattern of editing and behavior on all the accounts above. The IP's tagged all locate to the same location in Istanbul, Turkey. Many types of same articles have been edited by all these user accounts and IP addresses, and even more are possible which can be unknown as of now. Please have a look at the sockpuppet investigations archive and see the previous 2 requests that i had filed which let to confirmed matching on all the suspected sockpuppet accounts. I strongly believe that these accounts User:Ainsworth anderson, User:GLCFan1, User:Hurricanethan, User:Pantsaklanos, User:VampireColoredBlue and User:Volkovp56 have a likely strong connection to User:Wnnse, User:Bow-bb, User:Luckyeleven, User:ElisSL. and User:MichelleTheola and there can be many more unknown sockpuppet accounts too. A point to note here is that User:Pantsaklanos and User:Volkovp56 are already suspected of socking by other Wikipedia editors which makes it highly possible that these accounts in addition to the rest of the accounts most probably can be sockpuppets. User:Pantsaklanos has been blocked before on grounds of Sockpuppetry but his block was reduced to 2 weeks from indefinite (see the block log ) Even User:Ainsworth anderson has been blocked 3 times before (see the block log ) due to disruptive editing, creating inappropriate pages and vandalism which most these sockpuppet accounts have in common even if not all of them show and exhibit the same type of thing, as this Sockpuppet Master has a long history of evading scrutiny and as many blocks as he/she pleases by having an unfair advantage of using Dynamic IP Address ranges. I highly recommend for a sleeper check too. So, therefore I request the CheckUser's and Administrator's to take appropriate necessary actions. TheGeneralUser (talk) 20:30, 25 August 2012 (UTC)
 * Also when user account User:MichelleTheola was blocked at 17:29 on August 5, 2012 (see the block log ), user account User:VampireColoredBlue was created on the same day in less than a hour at 18:07 on August 5, 2012 (see the log ). This disruptive sockpuppeteer tends to use multiple user accounts in order to evade scrutiny and blocks by the unfair benefit of many Dynamic IP address ranges. TheGeneralUser (talk) 10:30, 26 August 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * There is considerable similarity in editing pattern in several ways, including similar interests and very similar errors in use of English. Pantsaklanos has in the past used at least one sockpuppet account (Pantsaklan) and may well have used others. VampireColoredBlue looks likely: there is the timing of the account creation, mentioned above, and there is a striking similarity of editing interests. For example, 12 out of VampireColoredBlue's 31 edits (39%) are to pages previously edited by MichelleTheola, and if we include editing of different pages on the same topic the proportion becomes close to 100%. Some if not all of them could, I think, be on behavioural evidence, but in view of the editor's history of sockpuppetry, together with having openly stated his/her intention of continuing to evade blocks by further sockpuppetry, a checkuser for sleepers is highly desirable, and we may as well consider any checkuser evidence before blocking. (However, that is just my view, and I will not quarrel with any admin who is willing to go ahead and block without waiting.) JamesBWatson (talk) 17:28, 26 August 2012 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  14:06, 27 August 2012 (UTC) ✅: VampireColoredBlue (from older Wnnse socks). : Ainsworth anderson. ❌: All other named accounts. . I am surprised that more of these socks were not related to the master, because a new sock-ring from Wnnse seems overdue. However, with this string of unrelated findings it strikes me that better evidence than "They edit about Disney shows" will be needed for future checks. AGK [•] 18:47, 27 August 2012 (UTC)
 * - to sort out and find sleepers.
 * VampireColoredBlue blocked indef and tagged. Several of the IP addresses look suspicious, but none has edited within the last few days, and most have not done so for much longer, and they are far too widely spaced for any sort of range block. JamesBWatson (talk) 11:26, 29 August 2012 (UTC)