Wikipedia:Sockpuppet investigations/Xoni98/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Both accounts contain the word "Xoni". Both are interested in the same types of articles (Albanian sports). Both use the phrase "we talk about..." in their edit summaries. Xoni98: Xonilatifi25:  Both have made very similar POV edits to Kosovo at the Olympics seeking to remove any mention of Serbia. Xoni98: Xonilatifi25:  And both are fond of saying, "politics shouldn't mix with sports". Xoni98: Xonilatifi25:  Amanuensis Balkanicus (talk) 14:25, 22 May 2021 (UTC) Amanuensis Balkanicus (talk) 14:25, 22 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Given that there is almost a year between Xoni98's last edit and Xonilatifi25's first, I see no evidence of misuse here. Closing without action. Sir Sputnik (talk) 19:31, 23 May 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

flagged this for me as we've both tried to help User:Xonilatifi25 to become a better editor, admittedly without much success as the editor does not really understand Wikipedia norms and prefers to accuse us of racism and other faults (my Talk, as well as John's, specifically this edit). Today Special:Contributions/Egzonlatif25 popped up making the same type of contributions, specifcally this edit which has some similarities to this one. Xoni indicated he'd be on wikipedia forever, but may not realize the edits are an orange flag, even with a different account. Star  Mississippi  02:31, 18 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Too - no available data:
 *  ~Oshwah~  (talk) (contribs)   02:49, 18 June 2021 (UTC)
 * Too - no available data:
 *  ~Oshwah~  (talk) (contribs)   02:49, 18 June 2021 (UTC)
 *  ~Oshwah~  (talk) (contribs)   02:49, 18 June 2021 (UTC)
 *  ~Oshwah~  (talk) (contribs)   02:49, 18 June 2021 (UTC)

Thank you, that was quick. Indeffed the sock. I am probably too involved to block the Master. Would much appreciate an uninvolved admin handle that one, if possible. Star  Mississippi  02:55, 18 June 2021 (UTC)
 * Star Mississippi - ✅.  ~Oshwah~  (talk) (contribs)   03:19, 18 June 2021 (UTC)


 * I'll go ahead and close this SPI, since there's nothing more that needs doing.  ~Oshwah~  (talk) (contribs)   03:20, 18 June 2021 (UTC)
 * @Oshwah, it's not clear from your block if I should tag Xonilatifi25 as confirmed. -- RoySmith (talk) 17:50, 18 June 2021 (UTC)
 * Sorry for the ambiguity, RoySmith! Yes, go ahead and tag. :-)  ~Oshwah~  (talk) (contribs)   18:00, 18 June 2021 (UTC)
 * Tagged Xonilatifi25 -- RoySmith (talk) 18:20, 18 June 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same fascination with Albania, Kosovo sports. Frequent use of "indeed" "official" and "important" in edit summaries. cc:  Star   Mississippi  02:04, 29 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Good call. CU block is placed. Drmies (talk) 02:08, 29 June 2021 (UTC)


 * I assume that your comment in 22 May 2021, I see no evidence of misuse here no longer applies so I'm going to block and tag Xoni98. -- RoySmith (talk) 03:23, 29 June 2021 (UTC)
 * Looks like forgot to change the state after their CU, so closing. -- RoySmith (talk) 11:54, 29 June 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

"Star Mississippi needs to stop changing post" as his first edit and created right after the last sock was blocked. I have already blocked, but is there any filter that might catch these new accounts. Star  Mississippi  17:06, 29 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I'm interpreting Star's is there any filter that might catch these new accounts? as, "Is there an IP range block that could be made". -- RoySmith (talk) 18:08, 29 June 2021 (UTC)
 * Thank you, for translation. I do think that's what I meant, even though I wasn't sure exactly what I should ask for. It looks like there is or was one stopping some edits, but new accounts pop up.  Star   Mississippi  18:21, 29 June 2021 (UTC)
 * ✅. NinjaRobotPirate (talk) 11:41, 30 June 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I know it can't be publicly connected, but "include some information" and other blatant tells on Sports in Albania and Sport in Kosovo. Is there an edit filter (as mentioned here that can be used since this editor is otherwise unable to stop socking? Please feel free to tweak my request for it to be clear.  Star   Mississippi  19:00, 8 July 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . Checkusers cannot connect or confirm any kind of information between accounts and IP addresses. They can only connect accounts to accounts.  ~Oshwah~  (talk) (contribs)   20:13, 8 July 2021 (UTC)


 * Blocking the IP would probably be pointless, but I've semi-protected Sport in Kosovo and Sports in Albania for a month. -- RoySmith (talk) 20:33, 8 July 2021 (UTC)
 * Thank you . Star   Mississippi  01:32, 9 July 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I'm not sure whether the prior CU is stale or not, but flagged this and I concur this is our old friend who is hyper focused on sports in Albania and Kosovo and their representation at the Olympics based on behavior. Flagging here and understanding you can't comment on the IPs, but because there are undoubtedly other sleepers and these will likely need to be semi'ed again.

Besides "25" which is frequently part of his username, edits in common include calling edits "neutral" in tune with one of the prior IPs (185.109.153.66) and the odd pluralization of "informations" and often using include. Also the Balkans nationalism which isn't limited to this sockfarm, but is a hallmark including here on Greece and here in Kosovo. Further, this goes right back to Xoni's removing Serbia, and wanting to keep politics out Star   Mississippi  00:38, 8 December 2021 (UTC)


 * IP 186.109 has commented that "always attacks", curious from someone who has had no interaction with us yet makes same complaint as prior socks.  Star   Mississippi  14:23, 9 December 2021 (UTC)
 * of all the sections in JohnFromPinckney's talk, finds and comments in one from one of the socks. Funny,  didn't file this, but the socks are querying him.  Star   Mississippi  20:20, 10 December 2021 (UTC)
 * Tiny detail: there's a diaresis on the "e" in the actual user's name: User:Prishtinë25. But yes, there's no doubt this is all the same person, based on content, behavior, and geolocation (addresses in Germany, where Prishtinë25 claims to live). And yes, it's unsurprising to me that Prishtinë25 adds to a thread in the middle of my talk started by Xonilatifi25 in May. If there's still any doubt, I can point to other details to help nail it down. &mdash; JohnFromPinckney (talk / edits) 21:59, 10 December 2021 (UTC)
 * and it's not a sock, it's his "brother". FYI for Clerks/CU, admission is here. Star   Mississippi  00:26, 11 December 2021 (UTC)
 * Comment I blocked 185.109 for a month. It's undoubtedly the same editor who continued the same edits once the account was blocked. Disruptive, sock, take your pick. There are some good faith edits so it appeared to be better than semi'ing the page. Star   Mississippi  17:05, 12 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged the sock. -- Amanda  (aka DQ) 23:17, 11 December 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

I know the IP can't be publicly connected, but filing for tracking. Should it be blocked, or should these be semi'ed? It's obviously our Albanian friend in Germany. Star  Mississippi  02:01, 13 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I blocked this IP, as well as a few others, and semi-protected the Sport in Kosovo article. Closing. Mz7 (talk) 03:58, 16 December 2021 (UTC)
 * Thank you @Mz7. I'll check a couple of the others in case he was editing them after his semi mea culpa on my Talk Star   Mississippi  14:46, 16 December 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Obviously can't be connected publicly, but it's obvious, especially with this edit and this from the last named sock. Is there any range blocking possible, or do we need to semi all the Albanian sports articles? Star  Mississippi  16:01, 18 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - please hardblock for another 3 months; they've been stable on that range for a while and repeatedly hardblocked in the past. It's a /64 so there should be no collateral. The 77 IP hasn't edited in several days, and there's nothing we can do regarding rangeblocks there I'm afraid. From the archives it looks like they have access to other ranges which aren't easily blockable, but this should at least do something. Thanks,  Spicy (talk) 05:29, 23 December 2021 (UTC)
 * , let's hope it slows down whack a mole. Star   Mississippi  15:52, 23 December 2021 (UTC)
 * @Star Mississippi looks like this was implemented as a soft block. -- RoySmith (talk) 16:21, 23 December 2021 (UTC)
 * oops, fixed (I think). Thanks! Star   Mississippi  16:35, 23 December 2021 (UTC)
 * Yup, thanks. -- RoySmith (talk) 23:26, 23 December 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Different username pattern, but they've not all had the trailing numeral. New account in the sock-infested Albanian sports articles. no politics edit and in Albania–Serbia football rivalry, same edits as on the legitimacy of a rivalry w/ Serbia. Would some rangeblocks clear this up if this edtitor is also in Germany, or do we just need to keep semi'ing? Star  Mississippi  16:55, 22 December 2021 (UTC)
 * Courtesy who blocked the aforementioned IP sock.  Star   Mississippi  16:57, 22 December 2021 (UTC)
 * thanks Anton for making it easier by making the same edit as the last named sock did w/r/t to Viktor Mitrou. We're now in Duck block territory, but CU appreciated as I'm sure there's a sleeper or three. Star   Mississippi  14:45, 27 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * AntonSilvers and Prishtinë25 are ✅ to each other. The case is stale but based on CU logs these two accounts are . as necessary. Ivanvector (Talk/Edits) 16:02, 2 January 2022 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Another IP geolocating to Germany and among other things, adding Viktor Mitrou. DUCK and can't be connected of course as an IP, but are there range blocks or anything else possible? Extended semi of the sports articles? Star  Mississippi  00:10, 3 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've blocked the IP for a month. Looking through the IPs listed in the archive, the only actionable range is the /64 one that you blocked on 23 December - the others are all on a bunch of different ranges and networks. I don't have a view on whether the level of disruption is enough to warrant long-term semi on their preferred articles; you could ask for a second opinion at RfPP? (Random thought - if there is a lot of similarity in what they are doing, it might be possible for an edit filter to pick it up? Not my area of expertise though.)  Girth Summit  (blether)  11:43, 3 January 2022 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Slight "neutral information" and "25" quacking. Sleeper check please. Star  Mississippi  02:35, 5 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - per history at Sport in Albania, and I threw in, who created the Egzon25.04 account. Xoni25 hasn't edited since January of last year, but they created the new account today, so there should be some CU data. A sleeper check seems reasonable since they're now reviving year-old accounts. Thanks, Spicy (talk) 02:48, 5 January 2022 (UTC)
 * Thanks for that background and additional account. Will check for the who created and include, since we all know we're not done with this sock farm. cc: @JohnFromPinckney Star   Mississippi  03:10, 5 January 2022 (UTC)
 * - -- RoySmith (talk) 03:35, 5 January 2022 (UTC)
 * Starting with the simple stuff, these accounts are all ✅ to each other:
 * -- RoySmith (talk) 03:49, 5 January 2022 (UTC)
 * -- RoySmith (talk) 03:49, 5 January 2022 (UTC)
 * -- RoySmith (talk) 03:49, 5 January 2022 (UTC)
 * -- RoySmith (talk) 03:49, 5 January 2022 (UTC)
 * -- RoySmith (talk) 03:49, 5 January 2022 (UTC)
 * -- RoySmith (talk) 03:49, 5 January 2022 (UTC)


 * AntonSilvers and Prishtinë25 were previously tagged as proven. With some additional data in today's check, I'm calling all 5 of these accounts confirmed to Xoni98. -- RoySmith (talk) 04:35, 5 January 2022 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Brand new account, knows to go to to complain about the lack of Albanian updates. John had just reverted the last piece of laundry. Sleeper check, please. Star  Mississippi  21:48, 9 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Technically ; blocked based on technical data supporting the reporter's observations. . Ivanvector (Talk/Edits) 22:00, 9 January 2022 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

In the event there's a range block for this one or recommended block duration given the quacking. Have otherwise reverted. Star  Mississippi  20:59, 11 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Just doing paperwork in the event there's a rangeblock possible, have already duck blocked. Same URL as last named sock. Star  Mississippi  01:02, 15 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * It's a quite sleepy range, which is good to know for future reference, but I don't see any disruption beyond the one IP blocked, so, closing. Thanks. --  Tamzin  [ cetacean needed ] (she/they) 01:17, 15 January 2022 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Adding Viktor Mitrou just like one of the last names. Edit filter if range block won't work? Star  Mississippi  18:02, 15 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The IP's are in different ranges. Maybe try protecting the articles being hit hardest? Sro23 (talk) 18:12, 15 January 2022 (UTC)
 * Thanks! I'm going to semi Sport in Albania and Albania at the Olympics, which are their recent favorites. tried a month, so will do three and hope for a break in whack a mole. cc: @JohnFromPinckney any other targets you've seen?  Star   Mississippi  18:17, 15 January 2022 (UTC)
 * Thanks for the ping. If I may give a shameless plug for my SPI Tool, this will show you which pages have been the most frequent targets of this particular sock farm.  And provide you convenient (if erroneously labeled) links to make it easier to protect them. -- RoySmith (talk) 18:31, 15 January 2022 (UTC)
 * Oops, I had somehow missed this. Bad Wikipedia! That is insanely helpful, thank you. Star   Mississippi  16:00, 18 January 2022 (UTC)
 * Roy's tool already neatly lists the articles I've seen pop up on the radar via the various socks' contributions list. A very helpful tool, indeed! &mdash; JohnFromPinckney (talk / edits) 17:47, 18 January 2022 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

" in fact" German IP, Sport in Kosovo whose protection had literally just expired. (Thanks for flagging this one.) as a heads up since you previously semi'ed. I've gone six months this time. Feel free to modify if you prefer different. Flagging here in case a range can be done, but I'm guessing taking away Xoni's favorite targets is the best solution? Star  Mississippi  14:35, 18 January 2022 (UTC)


 * Looks good to me, thanks. -- RoySmith (talk) 14:46, 18 January 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Don't see a workable rangeblock here. The page is now semi-protected, so closing. Thanks, Spicy (talk) 18:07, 19 January 2022 (UTC)

Suspected sockpuppets
These articles just came off semi and we have a new friend. "in fact", informations. CU for sleepers. Any suggestions on how long these should be semi'ed? Star  Mississippi  14:46, 5 April 2022 (UTC)


 * courtesy @JohnFromPinckney who knows the subject/master better than I. Star   Mississippi  14:47, 5 April 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged based on behavior. Leaving CU request. Bbb23 (talk) 02:17, 6 April 2022 (UTC)
 * There's not a lot I can do here. I can say that BMW245 is  to Silvio1269 from 09 January 2022.  Beyond that, the trail is pretty much stale.  I don't have a solid enough baseline to do an effective sleeper check. -- RoySmith (talk) 01:30, 7 April 2022 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

Almost identical location to 185.109.153.66. Both of them have two common articles in their contribs (Albania at the Olympics and Sport in Albania‎). The puppeteer is to be a puppet of User:Xoni98 who has a. lol1VNIO[not Lol1VNIO] ( I made a mistake? talk to me &#8226; contribs) 22:49, 7 May 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Neither IP has edited recently. Closing with no action. A clerk may want to move this report to the proper spot. Bbb23 (talk) 01:05, 9 May 2022 (UTC)

Suspected sockpuppets
Pristina obsession, "an reference" CU for sleepers please as this account was undetected for six weeks. Star  Mississippi  16:12, 16 May 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 00:27, 17 May 2022 (UTC)
 * ✅  -- RoySmith (talk) 00:37, 17 May 2022 (UTC)

Suspected sockpuppets
As discussed at User_talk:Star_Mississippi (thanks @ScottishFinnishRadish), this sock farm continues to disrupt Talk:Albania_at_the_Olympics. I know you can't say anything, but block length suggestions based on your prior actions ? Perfunctory paperwork. Star  Mississippi  17:12, 7 June 2022 (UTC)
 * Fix ping to and courtesy   Star   Mississippi  17:14, 7 June 2022 (UTC)
 * Just found from that it spilled to ANI at around the same time. Courtesy ping to @Firestar464 so they're aware it's a larger issue.  Star   Mississippi  17:29, 7 June 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No comment on IPs and relationships to accounts, but I've blocked 91.148.64.0/18 for 6 months for ongoing disruption that is visible without access to CheckUser. Closing. TonyBallioni (talk) 00:10, 8 June 2022 (UTC)

Suspected sockpuppets
Same edits, especially this one and in fact. Blocked. Sleeper check please as they never create just one? Star  Mississippi  13:28, 14 June 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
. TonyBallioni (talk) 06:01, 15 June 2022 (UTC)

Suspected sockpuppets
Know it can't be publicly connected, but logging here for future named socks or if there's a possible range block. Protection expired literally yeterday and they're back at it. This is the edit that's the clear tie. Star  Mississippi  21:39, 19 July 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The IP is now inactive and I don't see any other editing that looks like them on the range. Page is now semi-protected, closing without further action. Thanks, Spicy (talk) 18:57, 25 July 2022 (UTC)