Misplaced Pages

:Sockpuppet investigations/Heres The Dealio/Archive: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Sockpuppet investigations | Heres The Dealio Browse history interactively← Previous editNext edit →Content deleted Content addedVisualWikitext
Revision as of 08:11, 10 November 2021 editSpicy (talk | contribs)Autopatrolled, Checkusers, Administrators63,566 edits Archiving case section from w:en:Misplaced Pages:Sockpuppet investigations/Heres The Dealio (using spihelper.js)← Previous edit Revision as of 19:59, 17 November 2021 edit undoTamzin (talk | contribs)Autopatrolled, Administrators68,777 edits Archiving case section from w:en:Misplaced Pages:Sockpuppet investigations/Heres The Dealio (using spihelper.js)Next edit →
Line 210: Line 210:
* {{adminnote}} {{bnt}} ]<sub>(])</sub> 20:38, 9 November 2021 (UTC) * {{adminnote}} {{bnt}} ]<sub>(])</sub> 20:38, 9 November 2021 (UTC)
*{{clerknote}} {{nosleepers}}. Closing since the account is already blocked. ] (]) 21:18, 9 November 2021 (UTC) *{{clerknote}} {{nosleepers}}. Closing since the account is already blocked. ] (]) 21:18, 9 November 2021 (UTC)
----<!--- All comments go ABOVE this line, please. -->
===10 November 2021===

====Suspected sockpuppets====
* {{checkuser|1=Bluetreefrog}}
<!-- You may duplicate the templates above ({{checkuser}} and {{checkIP}}) to list more accounts-->
*'''Tools''': <span class="plainlinks"> • • </span> <small>''Auto-generated every hour.''</small>

Created attack page redirect right after being autoconfirmed by making useless user sandbox edits. Similar behavior to suspected sock Carsonshoe. ] (]) 20:58, 10 November 2021 (UTC)

====<big>Comments by other users</big>====
<small>''Accused parties may also comment/discuss in this section below. See ].''</small>

====<big>Clerk, CheckUser, and/or patrolling admin comments</big>====
* I'm not 100% sure the cu-confirmed chain back to the master is completely correct, but in any case, Bluetreefrog is undeniably {{confirmed}} to all the accounts reported on or after 22 October 2021. I . -- ] ] 00:05, 11 November 2021 (UTC)
----<!--- All comments go ABOVE this line, please. --> ----<!--- All comments go ABOVE this line, please. -->

Revision as of 19:59, 17 November 2021


Heres The Dealio

Heres The Dealio (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

14 June 2019

Suspected sockpuppets


A bit of an unusual sock case, while patrolling recently created redirects, I've come across a slew of attack redirects created by accounts with <15 edits and which have extremely similar behavior on their user and talk pages, always having a short statement like "Hey" or "Sup" on both. The suspicious accounts proceed to make 10 test edits to their sandbox, and then create a single blatant attack redirect, followed by no other activity. I suspect that this is either meatpuppeting or someone who decided that their vandalism would be harder to catch and revert if they preemptively spread it across multiple accounts. Note that there's more accounts involved than the two listed here, but because the attack pages are promptly deleted, I can't find the first few examples of such behavior that I came across (once it clearly became a pattern I started taking notes). Attack redirects that I've come across include Plastic smile (pointing at John Kerry), Retarded fish frog (pointing at Jimmy Carter), Absurdly delusional (pointing at Lavar Ball), and a homophobic one that I can't specifically remember pointing to Adam Levine. signed, Rosguill 20:07, 14 June 2019 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • I haven't checked any of these, but this is someone I first noticed a couple of months ago. I assume that it's one LTA or another, but so far, I've just been deleting the malicious redirects (if nobody has already done it) and blocking. CU hasn't been very useful because they're on a big mobile carrier, if I recall correctly, and I haven't been able to come up with a reasonable rangeblock. FWIW, I wouldn't bother with tags. —DoRD (talk)​ 16:04, 16 June 2019 (UTC)

18 July 2019

Suspected sockpuppets


Duck editing, types a short message on their user page, messes around in the sandbox, and then makes an attack redirect. signed, Rosguill 14:56, 18 July 2019 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

01 February 2020

Suspected sockpuppets

Create redirects with "nasty" titles targeting existing articles. Put "Hi" on their userpages. Play around with their sandboxes.--Bbb23 (talk) 19:28, 1 February 2020 (UTC) Bbb23 (talk) 19:28, 1 February 2020 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Bbb23, see Misplaced Pages:Sockpuppet investigations/Heres The Dealio. This troll has been around for a while now. Sro23 (talk) 23:31, 2 February 2020 (UTC)
@Sro23: You are absolutely right. You have a better memory than I. I can confirm the two cases technically. Please merge this case into the earlier one and tag accordingly. Thanks!--Bbb23 (talk) 00:10, 3 February 2020 (UTC)

27 February 2020

Suspected sockpuppets

All of these accounts appear to be edited and created by one person whose sole purpose is to create attack pages as can be seen in Should be in school, Amazing flopper and Too much plastic. Check for sleepers should be conducted too. —Nnadigoodluck🇳🇬 09:07, 27 February 2020 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

22 October 2021

Suspected sockpuppets

As reported by Sdrqaz, all accounts create a user page with just "hi" on (see deleted of Majorniceguy for an example), makes a number of edits to their sandbox and then creates and redirects a page (e.g. French Laundry ambassador).

Logging for the record, unsure if there are older accounts. I have checked Inthestall and Recyclelady and found them to be very  Likely, leaning  Confirmed ~TheresNoTime 22:35, 22 October 2021 (UTC)

Surprised that Recyclelady and Inthestall didn't pop up, they looked like twins of each other. Liz 23:54, 22 October 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. Thank you, TNT. Looking through my CSD log and edits to AIV, I've found a few more that fit this modus operandi. In chronological order: Chargemeup (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Sandandown (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Warmbrowngoo (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Hoopstarslim (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), Holderplacer (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). While Chargemeup is stale (and the oldest account), the others should not be. All have been indefinitely blocked as regular administrative actions. Sdrqaz (talk) 23:27, 22 October 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

29 October 2021

Suspected sockpuppets

  • Same autoconfirmed gaming in sandbox as previous socks: and then disruption
  • Same username pattern as previous socks ("Floorwithdoor", "Tableglass"). Requesting checkuser to check for sleepers.

Thanks, Giraffer 18:17, 29 October 2021 (UTC)

@GeneralNotability, I think I found another – Paperzeed. Giraffer 18:22, 29 October 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

03 November 2021

Suspected sockpuppets

Identical behaviour to previously confirmed sock, and similar username pattern. Requesting CheckUser to find others given history of batch-creation. firefly ( t · c ) 18:26, 3 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

This case is being reviewed by Tamzin as part of her training as a clerk. Please allow her to process the entire case without interference. You may pose any questions or concerns either on her talk page or on this page.

09 November 2021

Suspected sockpuppets

 Looks like a duck to me. Please check for sleepers. Sdrqaz (talk) 20:35, 9 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

10 November 2021

Suspected sockpuppets

Created attack page redirect right after being autoconfirmed by making useless user sandbox edits. Similar behavior to suspected sock Carsonshoe. EDM fan 2 (talk) 20:58, 10 November 2021 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments