Wikipedia:Sockpuppet investigations/Zhmailik/Archive

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The User contributions of Zhmailik closely match that of the IP. The IP is active 3 days after the user was blocked and appeal rejected. All of the same target articles and even identical edits (including word-for-word) content. ≫  Lil- Unique1  -{ Talk  }- 21:54, 20 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Given that they're continuing to revert to Zhmailik's version at Physical_(Dua_Lipa_song), I'm going to call this a . Blocked one week. GeneralNotability (talk) 22:02, 20 November 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This user has a very similar username to the sock master. As well, this user is attracted to the same types of pages as the sock master. Isaac (Madonna song): Sockpuppet, Sockmaster. Edits relating to the Physical (Dua Lipa song) remix: Puppet adding to chronology, Puppet adding to chronology. Other confirmed socks plus the sock master have been involved with re-adding this remix to chronologies and the main page for weeks now. D🐶ggy54321 (let's chat!) 15:09, 5 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked, tags applied. Closing. GeneralNotability (talk) 15:24, 7 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same behaviour as other previous socks. Exact same edit summaries as : and  both have the edit summary of + My Hair. and both cite WP:PROMO (the IP also uses the same horrible grammar as prev IP sock). They are a WP:DUCK. D🐶ggy54321 (let's chat!) 17:22, 5 December 2020 (UTC)
 * Update: user used the exact same talk comment (with Den's signature). Original comment vs copied comment. D🐶ggy54321 (let's chat!) 17:24, 5 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Don't see much else coming out of that range, so rangeblocked for one month. Closing. GeneralNotability (talk) 20:49, 9 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Attracted to same articles, same IP location as prev socks, pretty obvious WP:DUCK. For example, this page's history has edits from DenZhmailik, which is a confirmed sock. Precisely, that user added "Physical Remix" to the chronology. This user did the same. Another page: Obsession with Ay, Dios Mio!. Zhmailik was obsessed with that page, and kept adding a remix with Ariana Grande and Cardi B that no other user had ever heard of. Then, this IP just makes a draft page about the remix, which I am about to nominate for speedy deletion under criterion G5.

D🐶ggy54321 (let's chat!) 13:07, 7 December 2020 (UTC)


 * Added one more. Same articles and same edit summaries as the IP sock reported on 5 December 2020. Hayman30 (talk) 14:19, 7 December 2020 (UTC)
 * The IP range seems to be . (CC) Tb hotch ™ 14:40, 7 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Rangeblocked the /21 here too. GeneralNotability (talk) 20:55, 9 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCK. Edits same articles in the same fashion and still disrupting articles. Really obvious duck. To specify, this user has been re-adding the "Physical (Mark Ronson remix)", which is a trademark of the sockmaster and previous sockpuppets. See here for more details. D🐶ggy54321 (let's chat!) 17:36, 16 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP has been blocked 31h. Cabayi (talk) 21:14, 16 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This IP was confirmed a sock and blocked three days ago for 31 hours. They are back at it again: disrupting articles, creating pages (which I have tagged for speedy deletion under criterion WP:G5), and behaving like other socks/the sockmaster. D🐶ggy54321 (let's chat!) 13:54, 19 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Closing as the IP has already been blocked for 2 weeks. Mz7 (talk) 01:06, 20 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCK. Seems like the sockmaster got smart and started to include edit summaries. Unfortunately, their username clearly suggests they are a Sockpuppet. They also copied stuff from my userpage/subpages histories, which is more evidence they are a sock. There’s 87 million editors on Wikipedia and somehow I’m the one who’s userpage they copy from. Me, the editor who caught all but one of their socks and have reverted all of their edits. D🎉ggy54321 (happy new year!) 22:40, 29 December 2020 (UTC)
 * Update: the user has since started using the same type of edit summaries as other socks. It’s nonsense, and its basically disagreeing with comments and reverting because of it. For example, if I revert with an edit summary of “block evasion”, they’ll revert my edit saying “no block evasions here”. If I say “not notable enough”, they’ll say “notable enough”. So on and so forth. D🎉ggy54321 (happy new year!) 23:53, 29 December 2020 (UTC)

Just quickly added the IP 95.27.46.45 per same reasons above, WP:DUCK. They created a draft of a Mark Ronson remix of the song "Physical" by Dua Lipa by just copying what is in the article Love is Religion. Also all their IPs seem to be in St Petersburg, Russia, along with this one. LOVI 33  22:56, 29 December 2020 (UTC)
 * I was just about to add this, thank you. D🎉ggy54321 (happy new year!) 22:59, 29 December 2020 (UTC)
 * Also, other sockpuppets are interested in that remix as well and have shown the same behaviour towards it, please see the archive page for examples. D🎉ggy54321 (happy new year!) 23:53, 29 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Seems pretty obvious. Already blocked and now tagged. Closing. Callanecc (talk • contribs • logs) 03:36, 31 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

As always, WP:DUCK. They is always insisting that certain songs are going to be released without providing evidence. At this point, I think we need an entire page on this vandalizer, considering how many times this has happened. LOVI 33  13:12, 8 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked for a week. Closing.  Vanjagenije  (talk)  19:27, 9 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCK. Whoever is reviewing this: please look at the archive page for this SPI, as I will be referring to much previous behaviour. This IP has exhibited classic Zhmailik sockpuppet traits, including:
 * A Saint Petersburg, Russia IP address
 * Obsession with Ariana Grande (especially 34+35)
 * Specifically, past sockpuppets have alluded to a 2021 re-release of Grande's sixth studio album Positions. This user did the same here, here and here
 * No edit summaries whatsoever
 * Building on that, unexplained reverts
 * Blanking their talk page
 * Editing Real Groove (song), Let Me Reintroduce Myself, Fever (Dua Lipa and Angèle song) and Future Nostalgia, four of the many pages that have attracted every single sockpuppet so far. Current Previous Current Previous
 * Use of the phrase "don’t cancel"/"please no cancel" or any variations, another trademark of past socks. Current Previous
 * Use of edit summaries citing Genius (website). Current

I will be updating this list as more and more behavioural evidence is given. D🐶ggy54321 (let's chat!) 22:18, 14 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Why not blocking as well? Since August 2020 the IP range has been used exclusively by Mailik. (CC)  Tb hotch ™ 21:56, 14 January 2021 (UTC)
 * That would be a good idea, thanks for the suggestion! D🐶ggy54321 (let's chat!) 22:04, 14 January 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked 78.107.205.135 for a month. Please ping me if there's additional IP problems here and I'll think about longer and/or range blocks. -- RoySmith (talk) 22:48, 11 February 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCK. Edits with a St Petersburg IP address (like every other IP sock this far). Makes the same edits to the same pages that previous sock puppets have made. Current sock Previous sock Current sock Previous sock Current sock Previous sock. Edits without edit summaries/reverts without edit summaries (shown in the diffs above). Blanks their talk page whenever anyone gives any warnings. Current sock Current sock Previous sock. As you can see, these are all habits of previous socks. D🐶ggy54321 (let's chat!) 14:43, 22 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Declining CU. Checkuser isn't used to confirm accounts to IP addresses. They can only be used to confirm accounts to other accounts.  ~Oshwah~  (talk) (contribs)   03:08, 27 January 2021 (UTC)


 * The IP is already blocked, nothing left to do here, closing. -- RoySmith (talk) 22:51, 11 February 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCK. Saint Petersburg IP address (like other socks), same type of edits to the same type of pages (like other socks), same behaviour as other socks, etc. D🐶ggy54321 (let's chat!) 12:42, 31 March 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked per WP:DUCK. One draft G5ed and a couple of targets semi-protected. Closing.-- Jezebel's Ponyo bons mots 20:04, 31 March 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same obsession with the remix of Physical.. (CC) Tb hotch ™ 20:05, 3 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Adding onto 's original report, this is a classic WP:DUCK case. The IP address geolocates to St Petersburg, the IP edits within the realms of Gwen Stefani and Dua Lipa, the IP removes all their talk comments, etc. I could be copy-and-pasting these reports, as they're all the same. D🐰ggy54321 (the Easter bunny has been summoned...) 23:24, 3 April 2021 (UTC)


 * Blocked for two weeks (reported at AIV by bot). --Malcolmxl5 (talk) 01:03, 5 April 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked at AIV, nothing else to do here. GeneralNotability (talk) 01:54, 15 April 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same edits as previous socks, St Petersburg IP address, re-creating similar pages as previous socks, edits the same artists, same old, same old. . D🐶ggy54321 (let's chat!) 00:31, 22 April 2021 (UTC)
 * Added another which has pretty much the same reasoning as the previous one, WP:DUCK. Same vandalism on the same articles. As well as a St Petersburg IP address. LOVI  33  14:52, 3 May 2021 (UTC)
 * Added another one for the same reasons as the last two. D🐶ggy54321 (let's chat!) 17:01, 3 May 2021 (UTC)
 * Added 37.146.99.228, it's in Moscow, but the same behavior . (CC) Tb hotch ™ 17:10, 6 May 2021 (UTC)
 * Added yet another one, St Petersburg IP, same behaviour as one of the other socks listed here. D🐶ggy54321 (let's chat!) 14:17, 7 May 2021 (UTC)
 * Added per duck. (CC)  Tb hotch ™ 20:40, 7 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * All of the IPs and associated ranges here haven't edited in a while. The named account is already blocked, see below. Closing. --Blablubbs&#124;talk 19:39, 21 May 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The account was used to remove

Also it was (accidentally?) used to fight in the edit war on They Ain't Ready which was begun using the IP adress. 

The users are similar to Zhmailik because
 * They edit(ed) about the same topic (music)
 * They do/did edit wars. FF-11 (talk) 20:42, 7 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I like the fact that they even acknowledge that it is not notablefor our guidelines, yet they persist to create not-notable songs and hoaxes. (CC) Tb hotch ™ 20:53, 7 May 2021 (UTC)
 * Which, if I may add, is something Zhmailik socks love to do. They contradict themselves in their edit summaries. D🐶ggy54321 (let's chat!) 21:14, 7 May 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * based off of the geolocation.  ~Oshwah~  (talk)  (contribs)   21:02, 7 May 2021 (UTC)


 * Already blocked for evasion, IP and the associated /22 haven't edited in a while., closing. --Blablubbs&#124;talk 19:37, 21 May 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCK, follows the Zhmailik username structure (word, "Fan", "42812"), edits the same pages/topics as previous socks, same old, same old. Requesting CU. D🐶ggy54321 (let's chat!) 12:20, 19 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to, , and others. Bagging and tagging sock account. This SPI can be closed...  ~Oshwah~  (talk) (contribs)   13:26, 19 May 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Crosswiki activity on ru.wp... just uploaded the same copyvio image as two puppets. Magog the Ogre (t • c) 02:19, 2 June 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * , on a dynamic-looking connection. Based on very clear behavior . Closing. KevinL ( aka L235 · t · c) 07:24, 2 June 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Using the interactive tool performed here, both 81.9.126.27 and the sockmaster share an interaction with Club Future Nostalgia and Hawái (song). The IP additionally recreated the draft article for the non-existent article subject Draft:Colección de Casas, which was initially created by another sockpuppet User:Physical42812 according to the draft's public log. Several of the IP edits are disruptive, as they share several similar edit summaries with another recently blocked IP range such as in My Head & My Heart (current IP user, blocked IP range) and EveryTime I Cry (first IP user, blocked IP range), and add falsified information to recent music articles pertaining to artists such as Ava Max, Dua Lipa, the Weeknd, and Gwen Stefani. In addition, the first IP user has attempted to create and expand on draft non-existent articles such as Draft:Imposible and Draft:Physical (Remix) initially created by the second IP user, with the latter article being used as a reason in the edit summaries by the IP addresses (first IP user, blocked IP range) on Love Again (Dua Lipa song). Each of the listed IPs additionally share similar geolocations, which suggests that the edits are derived from the same user and do not just appear from mere coincidence. — Angryjoe1111 (talk) 16:38, 3 July 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Note that the Draft:Colección de Casas was a hoax; it asserted verifiably wrong facts about well-known artists. If someone is drafting hoaxes, all of their other edits should be held in the highest suspicion. Binksternet (talk) 19:55, 4 July 2021 (UTC)
 * There is a connection between this case and banned user . Max Arosev was also using St Petersburg IPs, and he was very interested in Olympic sports topics. St Petersburg IP 89.113.98.183 is the link: they were actively working on the music articles listed above, and also editing Olympic sports articles. That IP also created a hoax draft about Kesha touring in July: Draft:High Road Tour. This is false: Kesha is touring in August. Since then, IP range Special:Contributions/89.113.98.73/32 has been prevented by from editing in draft space. Binksternet (talk) 20:12, 4 July 2021 (UTC)

Added. Ignoring that the user shares a number with, and , the very first edit of this user was to remove a MFD tag, a page created by one of these IPs. The history od DownDown is related to other Zhmailik's socks: Gwen Stefani, Dua Lipa, Ariana Grande, Becky G and Selena Gomez. (CC) Tb hotch ™ 19:08, 12 July 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The named sock is now blocked, and the IPs haven't edited in a while. Closing. Bbb23 (talk) 00:48, 15 July 2021 (UTC)
 * Tagged DownDown42812 -- RoySmith (talk) 12:21, 15 July 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCKs. They make the same edits to the same pages as other puppets, they create random draft pages like other puppets, and all the IPs geolocate to St Petersburg, which is the case for every single other IP listed as a puppet. D🐶ggy54321 (let's chat!) 12:59, 28 July 2021 (UTC) (updated 12:52, 8 August 2021 (UTC))

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked a couple non-stale IPs. Closing. GeneralNotability (talk) 01:51, 19 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

WP:DUCK. The username included the username of the sockmaster, which has been done before. D🐶ggy54321 (let's chat!) 17:58, 14 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - might as well get a sleeper check in. Don't think we have a CU chain here, but this is either Zhmailik or an impersonator, either way, not someone we need around. Blocked. GeneralNotability (talk) 01:54, 19 August 2021 (UTC)
 * Very to previous socks., although I will say that sleeper detection for this sockmaster is a bit difficult because they seem to be hopping around on several different ranges. , closing. Mz7 (talk) 01:44, 20 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Geolocates to St. Petersburg, like all other IP socks. Edits the same topics (Dua Lipa previous current, Gwen Stefani previous current) as previous socks. Reverted one of my edits (in which I was reverting a previous sock) on their second edit "ever", which is a really good indication that this isn't actually their second edit ever. WP:DUCK. D🐶ggy54321 (let's chat!) 13:52, 22 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I believe it. Blocked 1 week. GeneralNotability (talk) 19:00, 22 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Fails the duck test. User is editing the same topics (Ariana Grande, mostly). Named after the hoax Draft:After Hours (Ariana Grande album). And compare with the users listed at Category:Wikipedia sockpuppets of Zhmailik. Draft:Cut You Off ‎ should be deleted as well. (CC) Tb hotch ™ 19:50, 16 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . Favonian (talk) 21:29, 16 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Special:Diff/1051161854, Special:Diff/1051160867 Special:Contributions/217.118.92.28 The SandDoctor  Talk 03:58, 22 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Already 31 hours. -- The SandDoctor Talk 03:58, 22 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Special:Diff/1051293496 and all other contributions The SandDoctor  Talk 17:41, 22 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Pro forma, already blocked by -- The SandDoctor  Talk 17:41, 22 October 2021 (UTC)
 * I've indefinitely semi-protected Positions (album). -- The SandDoctor Talk 17:44, 22 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Fails the duck test. Opened because of the creation of Draft:La Fuerza that needs to be deleted and admins will simply not delete it. (CC) Tb hotch ™ 17:06, 4 November 2021 (UTC)
 * In the past I've requested the drafts created by Mailik to be deleted and they simply are not deleted merely because they are drafts and they are automatically deleted after a few months of inactivity (Draft:Chasing Rainbows). Mailik, however, continues editing those drafts regardless of their validity (see Draft:33 or Draft:After Hours (Ariana Grande album) histories). The La Fuerza draft, for example, includes a track listing of invented songs and an alleged release date of January 14. When that date arrives, and the EP is not released, Mailik will return to change it once again to another invented. As I'm writing this started editing that specific draft and is behaving in the same way Mailik behaves: creating drafts on non-notable pseudo-singles and adding templates that new users simply don't use:  (CC)  Tb hotch ™ 19:03, 4 November 2021 (UTC)
 * No, that's it for now. Thanks. (CC) Tb hotch ™ 19:34, 4 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - the IP was blocked as a sockbefore you raised this report - what are you asking us to do here? If it's delete a draft, this is the wrong venue, slap a CSD G5 tag on it or something.   Girth Summit  (blether)  18:47, 4 November 2021 (UTC)
 * Apologies - I read the block log wrong, my bad. Is there anything else that needs doing now the IP is blocked, or can this be closed? Girth Summit  (blether)  18:48, 4 November 2021 (UTC)
 * I understand the frustrations. In fairness to the admins who have declined deletions in the past, MfD =/= CSDG5, and CSDG5 is not a clear-cut call if the article creator is not a blocked and tagged sock. Having said that, I've just blocked, and deleted a bunch of stuff. What I can see in the CU logs isn't conclusive on its own, there's a fair amount of IP hopping going on, but geolocation + editing interests + editing style + other BEANS stuff = . I think this should be wrapped up for now, unless you can see stuff I've missed?  Girth Summit  (blether)  19:32, 4 November 2021 (UTC)
 * Thanks, closing. Lock requested on LatinAriana. Girth Summit  (blether)  19:36, 4 November 2021 (UTC)

Suspected sockpuppets
I didn't notice this until now. Mailik includes "factual" information while they add citation needed tags. Going further into their contributions, I see a lot of draft articles on these pseudo upcoming articles, like Draft:Si Estóy Bailando. If confirmed, please erase all their creations as Mailik continues editing those hoaxes. Requested CU because the last time this happened it was a while ago. (CC) Tb hotch ™ 16:44, 7 May 2022 (UTC)


 * At La Reina, for example the user is claiming that Grande will release a remix without a source but with "page needed tags" (the user replaced the cn tag for that, I don't know why). At Ay! Dios Mío, the user did exactly the same.
 * The user claimed that Draft:After Hours (Ariana Grande album) was her upcoming album (and Draft:Colección de Casas was an upcoming Spanish language EP by Selena Gomez). If you compare both articles with Draft:Si Estóy Bailando or with Draft:Pa Mis Muchachas (album),‎ you can see that the information is false, unsourced and relies on several sources that are not talking about the subject. In other words, the user creates a hoax based upon real (but unrelated) information.
 * Here is an example of the user adding info with a cn tag. (CC) Tb hotch ™ 17:32, 7 May 2022 (UTC)
 * More situational information I just remembered:
 * The user blanks their talk page when warned  vs
 * The user edit-wars and never demonstrates their information is actually correct (example )
 * The user leaves blank unblock requests vs  (CC)  Tb hotch ™ 17:45, 7 May 2022 (UTC)
 * And finally, the user attempts to get their LTA page deleted vs.  (CC)  Tb hotch ™ 17:51, 7 May 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - please could you provide some diffs for us to compare against of socks in the archive doing similar things with the hoaxes and the citation needed tags? Sorry to be a pain, but you seem to be familiar with the case and likely in a good place to point us at the evidence. Thanks Girth Summit  (blether)  17:21, 7 May 2022 (UTC)
 * This pretty much fell into my lap when I was running checks on an account that turned out to be unrelated, but is ✅ to .--  Jezebel's Ponyo bons mots 17:18, 10 May 2022 (UTC)
 * Thanks for letting me know - and apologies to  for dropping the ball, I'd intended to look back in on this but got a little sidetracked over the last couple of days dealing with another case. Cheers  Girth Summit  (blether)  18:21, 11 May 2022 (UTC)
 * Requesting locks on LaFuerzaReina and on SS54143, tagging, closing.  Girth Summit  (blether)  18:24, 11 May 2022 (UTC)

Suspected sockpuppets
Russian IP 37.144.215.134 was quickly followed by new user LaFuerzaTormenta in restoring the same edits as past socks. They keep translating the Spanish word santo as "holy" rather than "saint" which is indicated by context.

Checkuser requested to make certain and to roust sleepers. Binksternet (talk) 15:22, 2 June 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No comment on the IP, naturally, but they are technically exceedingly to, and the username/editing removes any doubt. Blocked and tagged, will leave it for someone else to determine whether the IP needs blocking.   Girth Summit  (blether)  15:45, 2 June 2022 (UTC)
 * IP is now blocked, closing. Thanks, Spicy (talk) 20:53, 2 June 2022 (UTC)
 * accounts all locked. The SandDoctor  Talk 16:04, 5 June 2022 (UTC)

Suspected sockpuppets
The same absurd hoaxes tagged with page needed tags (compare with ). (CC) Tb hotch ™ 17:39, 14 June 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Both IPs blocked.-- Jezebel's Ponyo bons mots 19:55, 14 June 2022 (UTC)

Suspected sockpuppets
For their first edits, ArianaGrandeLatin showed up at Draft:Te Deseo lo Mejor, an obscure draft article started by Saint Petersburg IP 37.144.215.163. The IP range Special:Contributions/37.144.215.0/24 has been used by Zhmailik, especially Special:Contributions/37.144.215.117 which was blocked four months ago, and Special:Contributions/37.144.215.134 which was blocked three times. The action of creating useless draft articles is a known behavior of Zhmailik socks.

Checkuser requested to search for sleepers. Binksternet (talk) 22:02, 31 July 2022 (UTC)


 * I would like to request a rangeblock. Binksternet (talk) 15:51, 1 August 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 14:01, 1 August 2022 (UTC)
 * ✅ plus . I see one other that's possible, but the behavior doesn't match. -- RoySmith (talk) 14:12, 1 August 2022 (UTC)
 * AGL blocked and tagged, -- RoySmith (talk) 14:14, 1 August 2022 (UTC)
 * - please block for three months (anon-only, account creation blocked). Same geolocation as previous IP socks, same edits, no apparent collateral. The other IP hasn't been active recently enough to block. Thanks, Spicy (talk) 22:58, 1 August 2022 (UTC)
 * Range blocked as requested, closing.  —&#8288;Scotty Wong &#8288;— 00:37, 2 August 2022 (UTC)

Suspected sockpuppets
ArianaGrandeBienvenidaaMexico was blocked for vandalism. The person created a bunch of drafts about Ariana Grande and other pop singers, many of which were deleted, for instance Draft:Bola (song) and Draft:I Need You (Leigh-Anne Pinnock song). This is the same behavior as blocked puppetmaster Zhmailik, who edits from St Petersburg in Russia.

Russian IPs have been doing the same thing, too. IP 46.56.206.108 created Draft:La Luz (EP) which was subsequently edited by Russian IPs 37.144.212.93, 37.144.213.10 and now-blocked ArianaGrandeBienvenidaaMexico, followed by Russian IP 95.27.193.192 and then ArianaGrandePositions42812, sometimes going back and forth between IP and registered user within minutes. Three of these Russian IPs have created the blatant hoax Draft:Smooth Operator (album).

The editor interaction chart shows the same fingerprints.

Checkuser requested to root out sleepers, and to tie blocked user ArianaGrandeBienvenidaaMexico to this case, which will allow the drafts to be deleted. Binksternet (talk) 22:13, 20 October 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Dreamy Jazz talk to me &#124; my contributions 22:44, 20 October 2022 (UTC)
 * Dreamy Jazz talk to me &#124; my contributions 22:44, 20 October 2022 (UTC)


 * All seems wrapped up here, closing.  Girth Summit <sub style="font-family:Segoe print;color:blue;"> (blether)  11:39, 26 October 2022 (UTC)
 * . MarioGom (talk) 15:46, 1 November 2022 (UTC)

Suspected sockpuppets
Recreated Draft:La Luz (EP), which was initially created by other socks. Magnatyrannus (talk &#124; contribs) 16:20, 23 October 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * This IP is definitely Zhmailik recreating another draft article. The previous version was created by Special:Contributions/46.56.206.108 as may be seen here. Binksternet (talk) 19:29, 23 October 2022 (UTC)


 * Please also check ChristinaAguileraLaLuz as they recreated a draft article previously created by two sockpuppets. Liz <sup style="font-family: Times New Roman; color: #006400;">Read! Talk! 23:07, 27 October 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * IP is now blocked. Spicy (talk) 15:37, 24 October 2022 (UTC)

Suspected sockpuppets
WP:DUCK. Was banned under a previous user name ArianaBienvendiaaMexico Erick (talk) 01:54, 29 October 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * , see also Special:Undelete/Draft:No Es Que Te Extrañe. Closing. DatGuyTalkContribs 19:36, 29 October 2022 (UTC)
 * . MarioGom (talk) 15:47, 1 November 2022 (UTC)

Suspected sockpuppets
Same pattern as before. Makes deliberate hoax articles. Erick (talk) 02:46, 27 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Tagged, . Closing. DatGuyTalkContribs 22:38, 28 February 2023 (UTC)

Suspected sockpuppets
Same behavior pattern as the banned user, adding hoax information without providing a reliable source. Erick (talk) 23:18, 13 September 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments
Changed to open status; we don't connect named accounts and IPs.--Bbb23 (talk) 12:32, 14 September 2023 (UTC)
 * Definitely looks like Z. already blocked the /24. Please re-file if disruption resumes after the block. Ready for closure. Firefangledfeathers (talk / contribs) 17:40, 28 September 2023 (UTC)

Suspected sockpuppets
This IP was reverted multiple times after editing where previous socks edited. Please see Special:Contributions/95.24.234.132. They also blanked the talk page on Draft talk:Green Light Go after Binksternet left a notice there because it was created by an IP who was a sock, 95.24.234.133. TheGreatestLuvofAll (talk) 00:12, 9 March 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Yes, this is Zhmailik who has been blocked before on this same IP range: Special:Contributions/95.24.224.0/19. He has some characteristic style quirks that I recognize immediately. Binksternet (talk) 00:17, 9 March 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * IP already rangeblocked, nothing more to do here. <span style="font-family:Papyrus, Courier New">The Wordsmith Talk to me 00:17, 20 March 2024 (UTC)