User:GeneralNotability/clerk

Cases

Y Wikipedia:Sockpuppet investigations/Macaulay Nichol Done - blocked and closed
Y Wikipedia:Sockpuppet investigations/Abhishek shannu
Y Wikipedia:Sockpuppet investigations/Ineedtostopforgetting
Y Wikipedia:Sockpuppet investigations/Viktor O. Ledenyov
Y Wikipedia:Sockpuppet_investigations/WildlyAccurate (CU requested -> CU endorsed, checked -> closed)
- I would have just duck-blocked them and called it a day without CU, but because there was clear evidence of at least one sleeper I figured it would be worthwhile to CU.
Y Wikipedia:Sockpuppet investigations/Kbs987 (CU declined -> more information requested, more information requested -> closed)
- CU declined, and while I see an overlap with a previous sock I'm not seeing any solid evidence that it's the same person. Requested paired diffs.
- Paired diffs weren't convincing enough for me and other behavioral evidence suggests they're different people, closed without action.
Y Wikipedia:Sockpuppet investigations/Ric Faiol (CU requested -> closed)
- Obvious decline (trying to link a user to an IP), probably someone trying to evade 3RR (first time I've seen someone log in to do that), blocked three days for edit-warring.
Y Wikipedia:Sockpuppet investigations/Thurmondt (CU requested/clerk assistance -> closed)
- Moved per bradv's request and blocked per his findings. I note in retrospect that I wasn't given explicit approval to perform case merges, so I won't do any more of those without checking with you first.
Y Wikipedia:Sockpuppet investigations/NomanPK44 (declined -> closed)
- Like I said there - it's darn suspicious but I don't see enough proof to claim sockpuppetry, also fairly different grasp of English between the two editors.
Y Wikipedia:Sockpuppet investigations/Deeznuts2454
- Technically not sockpuppetry even if they are the same person (master was only softblocked), neither account has edited, and they're both blocked anyway, no need to go through CU.
Y Wikipedia:Sockpuppet investigations/AmericanDirectory (open -> self-endorse, confirmed -> closed)
- CU was effective before and I suspected there may be sleepers. Blocked everyone involved (some on technical evidence, some on behavioral) but opted not to rename the case.
  - I'm not entirely sure declining to move the page was technically OK but I think it's fine. Kevin (aka L235 · t · c) 19:28, 6 June 2020 (UTC)
Wikipedia:Sockpuppet_investigations/Aman.kumar.goel (requested -> endorsed)
- I think the possibility of sockpuppetry exists, and a suspicious amount of overlap, so sending it for CU.
Wikipedia:Sockpuppet_investigations/Dinushan_w77 (filed, confirmed -> closed)
- Filed the initial request, blocked with CU confirmation, made sure to pull TPA and email from the socks.
Wikipedia:Sockpuppet investigations/Sholi22 (clerk requested -> closed)
- Renamed per Bbb23's request, also minor cleanup - two accounts were only temporarily blocked, upgraded to indef.
Wikipedia:Sockpuppet investigations/HRMbruh
- Figured I'd take this one since I was also the admin who dealt with a lot of the mess surrounding their AfD nominations. Closed without further action, they've all admitted to or implied that they are socks, so I'm going to leave them blocked and watch their talk pages in case they request unblock.
Wikipedia:Sockpuppet investigations/Luka Djordjevic55 (checked -> closed)
- Did behavioral eval; not convinced the last sock was one of theirs, so closed without further action.
Wikipedia:Sockpuppet_investigations/Simon_westall191 (checked -> closed)
- Pretty obvious logged-off editing, blocked the IP for a week (seemed reasonable since I see no other activity on that IP).
Wikipedia:Sockpuppet_investigations/Muhammad_Samiuddin_Qazi_(sami)
- Insufficient evidence to tie the suspected sock to the master. creffett (talk) 23:13, 11 June 2020 (UTC)
Wikipedia:Sockpuppet investigations/Apurbakantiroy22 (requested -> close)
- Not a clear violation of sock rules (it looked more like a mix of logged-out editing and creating a second account for unclear reasons, but no overlapping edits between the named accounts). Warned the named accounts about sockpuppetry and logged-out editing but didn't take further action.
Wikipedia:Sockpuppet_investigations/CalebHughes (requested -> endorsed)
- The suspected account is already duck-blockable, endorsed to be certain and to get a sleeper check.
Wikipedia:Sockpuppet_investigations/Snksounak (requested -> endorsed)
- Suspected paid-editing/sockfarm case, looked fishy enough that I endorsed CU.
Wikipedia:Sockpuppet investigations/Lakerunr (requested -> endorsed, completed -> close)
- Endorsed to decide whether this was sock or meat (since that would determine exactly what kind of block I'd hand out). I have no idea how to interpret Bbb23's comment.
Wikipedia:Sockpuppet investigations/AryaShahMumbai (open -> closed)
- I'm familiar with this LTA. Made sure everything was oversighted and blocked without tags.
Wikipedia:Sockpuppet investigations/Binksternet (open -> closed)
- Disruptive SPI, closed without action.
Wikipedia:Sockpuppet_investigations/DavideVeloria88 (clerk assistance -> close)
- Moved per Mz7's request and unblocked the incorrectly-blocked original "sockmaster"
Wikipedia:Sockpuppet_investigations/Ssimad (open -> close)
- Insufficient evidence to prove sockpuppetry, and looked kind of like a personal vendetta against the suspected sockmaster (given how insistent the filer was about calling an article a hoax even after it passed AfD). Closed without action.
Wikipedia:Sockpuppet_investigations/Pcgmsrich (open -> closed)
- Sock was already CU-blocked, so this was just housekeeping.
Wikipedia:Sockpuppet investigations/07Ziad (requested -> endorsed)
- Would have blocked without CU, but I was suspicious that there might be sleepers, so endorsed.
Wikipedia:Sockpuppet investigations/CentralTime301 (requested -> more info -> endorsed)
- Tough one, and the filer apparently doesn't understand what "paired diffs" mean. It was borderline enough that I would have declined and closed, but Bbb23's comment was enough to push me over the line to endorse - regardless of what's going on with him now, I'm willing to trust his familiarity with the sockmaster.
Wikipedia:Sockpuppet_investigations/Asoka89
- No evidence of sockpuppetry, appeared to be a bad-faith accusation by a new editor in an editing dispute.
Wikipedia:Sockpuppet investigations/Surviivorrcbss (open -> closed)
- I think it was more likely that it was multiple people playing userspace games rather than sockpuppetry. Blocked them all as NOTHERE but not as socks.
Wikipedia:Sockpuppet investigations/Qualitee123 (open -> closed)
- Convincing behavioral overlap.
Wikipedia:Sockpuppet investigations/Yuanyuanpig (checked -> closed)
- Suspicions of meatpuppetry or canvassing but not enough proof to get a block. Blocks may be needed for other disruptive behaviors in the future. Closed without action.
Wikipedia:Sockpuppet investigations/MaximusEditor (checked -> closed)
- CU came back negative and behavioral evidence wasn't convincing enough to prove meatpuppetry, closed without action.
Wikipedia:Sockpuppet investigations/IphisOfCrete (checked -> closed)
- Per CU findings, closed without action
Wikipedia:Sockpuppet investigations/Oliver H10
- Convincing behavioral evidence of anonymous editing to evade a block, blocked the IP for three months.
Wikipedia:Sockpuppet_investigations/Makhamakhi / Wikipedia:Sockpuppet_investigations/Asad_Ali_Palijo (open -> closed)
- Originally filed under the former case but overlapping articles didn't match up. Further investigation matched their contributions to Asad Ali Palijo. Moved report to correct case, blocked, filed SRG request.
Wikipedia:Sockpuppet investigations/NhatMinh1701 (checked -> closed)
- After talking with Mz7, closed as not worth the time to go through the accounts and sort out what master to file them under, since they're all blocked anyway.
Wikipedia:Sockpuppet_investigations/Queenkong1 (open -> closed)
- Substantially similar drafts, duck. Blocked.
Wikipedia:Sockpuppet investigations/Xiang09 (checked -> closed)
- Blocked one sock on techncial + behavioral, left two technical findings alone because they weren't behavioral matches.
Wikipedia:Sockpuppet investigations/Seraphim System (checked -> closed)
- Behavioral evidence wasn't strong enough to prove socking, closed without action.
Wikipedia:Sockpuppet investigations/BMX On WheeIs (requested -> more info)
- Not clear how the edit the user cited is characteristic vandalism of this LTA, requested paired diffs.
Wikipedia:Sockpuppet investigations/Bertrand101 (requested -> endorsed)
- Looked enough like the LTA that I endorsed - I know that the most recent account is stale, but I think it's worth verifying the two known accounts and checking for sleepers, and if I'm lucky there will be something in the CU logs/cuwiki since this is an LTA.
Wikipedia:Sockpuppet investigations/1.42.216.227 (open -> closed)
- Not ILLEGIT, AGF that this was accidental logged-out editing. Dropped the user a warning but did not take further action.
Wikipedia:Sockpuppet_investigations/Arshifakhan61 (checked -> closed)
- Blocked one outstanding account following CU and requested locks.
Wikipedia:Sockpuppet investigations/Fourlaxers (open -> endorsed)
- Suspicious amount of behavioral overlap on disconnected topics. With Mz7's help I found a non-stale account, so endorsed for CU.
Wikipedia:Sockpuppet investigations/Ishita1119 (requested -> closed)
- Strong behavioral match, previous CUs weren't slam dunks so I did a behavior-only block.
Wikipedia:Sockpuppet investigations/Sandhuzboyz (open -> closed)
- Loud quacking, identical deleted drafts. Renamed case to correct master and blocked.
Wikipedia:Sockpuppet investigations/Stokerbean (open -> endorsed)
- Strong behavioral evidence, blockable already, but since there are UPE concerns I self-endorsed for a sleeper check.
Wikipedia:Sockpuppet investigations/PHAM VIET DUNG (open -> closed)
- With the help of WHOIS, found that the evasion is ongoing. Handed out some fairly wide rangeblocks.
Wikipedia:Sockpuppet investigations/Zaydx (open -> endorsed, checked -> closed)
- Two of the suspected socks are extremely unlikely (I suspect the IP editor who filed the SPI is just reporting anyone who edits the pages that Zaydx socks edited), but the third was fairly suspicious, so endorsed a check on that one. CU came back yes with a couple of sleepers, blocked them all.
Wikipedia:Sockpuppet investigations/Roqui15 (requested -> closed)
- Strong behavioral and linguistic match between the master and the sock. Blocked the master on behavioral evidence for two weeks.
Wikipedia:Sockpuppet investigations/Tylertoney Dude perfect (requested -> endorsed, checked -> closed)
- Iffy match, but just enough that I endorsed. Closed without action when CU came back negative.
Wikipedia:Sockpuppet investigations/Drankcarat (open -> closed)
- Quackity-quack quack. Blatant behavioral match, blocked. Also did some clerking since two separate cases were filed, one of which capitalized the master's name wrong.
Wikipedia:Sockpuppet investigations/Tezwoo (open -> closed)
- Straightforward logged-out 3RR violation.
Wikipedia:Sockpuppet investigations/Armandojimenesaqp (clerk assistance -> closed)
- Moved per CU request.
Wikipedia:Sockpuppet_investigations/Kolapoimam (open -> closed)
- Suspected sock was already blocked, I tagged and noted a possible related (also blocked) account.
Wikipedia:Sockpuppet investigations/JovGeo (requested -> closed)
- After a lot of thinking, closed without action - not ILLEGIT and behavioral evidence was not especially strong. Followed up with Mz7 following objections from the filer, which led to Mz7 confirming the two via CU.
Wikipedia:Sockpuppet investigations/Age of Makto (open -> closed)
- Blocked the named accounts, though it probably won't make much difference since they appear to have mostly been throwaways.
Wikipedia:Sockpuppet investigations/JohannesAugustin (requested -> endorsed, completed -> closed)
- Clear overlap, checking whether sock or meat, blocked after CU said sock.
Wikipedia:Sockpuppet investigations/Chunkysdead (open -> closed)
- Closed without action - since it appears to be social media-induced vandalism, there isn't a ton of value in an SPI.
Wikipedia:Sockpuppet investigations/Lakepupulake (open -> closed)
- All listed socks were CU blocked, so checked the blocks and closed.
Wikipedia:Sockpuppet investigations/Joloimpat (open -> closed)
- Blocked an IP for a week on behavioral evidence.
Wikipedia:Sockpuppet investigations/TheComParts (open -> closed)
- Obvious, plus the account creation logs gave it away. Edits overlap in time so I'd call it illegit. Moved to older account, indeffed sock, blocked the master for two weeks.
Wikipedia:Sockpuppet investigations/MTV Hits (open -> endorsed)
- Clear behavioral overlap with past socks, endorsed for CU because sleeper checks have been effective in the past.
Wikipedia:Sockpuppet investigations/Wacky Wars (open -> endorsed)
- Merged a separate case into it, merged multiple open cases together, endorsed for CU sleeper check since it's an LTA
Wikipedia:Sockpuppet investigations/12345678909836481hello9
- Probably meat, blocked for behavior (and a bit of UPOL)
Wikipedia:Sockpuppet investigations/LéKashmiriSocialiste (requested -> more info -> endorsed)
- Frankly, I'm doubtful given how this editor filed a different SPI about the same suspected master a few days ago. Requested paired diffs. Following diffs, I wasn't entirely convinced, but the timing and overlap in interests is just suspicious enough for me to endorse CU...though if this comes back negative I'm going to have words with the filer since this would be the second wrong SPI they filed against the same user.
Wikipedia:Sockpuppet investigations/MarcoAt18 (checked -> closed)
- Possible undeclared alt accounts, but since they're undeclared and editing the same articles, blocked out of caution with a note that I'm fine with unblocking if they declare the connection.
Wikipedia:Sockpuppet investigations/Dolyn (clerk assistance -> closed)
- Merged case and closed.
Wikipedia:Sockpuppet investigations/Combo Panda (open -> closed)
- Self-admitted IP sock of blocked user, blocked the /64.
Wikipedia:Sockpuppet investigations/Dude Master 2 (open -> closed)
- Behavioral evidence was strong, blocked an account and rangeblocked a previously-blocked IP range
Wikipedia:Sockpuppet investigations/Blight55 (open -> closed)
- Quacky quack quack.
Wikipedia:Sockpuppet investigations/Threesixnine369 (open -> on hold -> closed)
- Clearly the same person, but not clear why this was ILLEGIT, placed on hold pending answer from filer. Following response without filer, closed without action but suggested the filer keep an eye out for the first account coming back - not a clear ILLEGIT case, but definitely the same person.
Wikipedia:Sockpuppet_investigations/Bhinegar (open -> closed)
- I'd actually already blocked the sock already from a different request, tagged and closed.
Wikipedia:Sockpuppet_investigations/Dopenguins (open -> closed)
- Already blocked+tagged by another admin, filed an SRG lock request and close.
Wikipedia:Sockpuppet investigations/Jesien1
- CU says "likely" + possible meatpuppetry, overlap in interests in pushing a non-notable musician, so good enough for me. Since they'd previously been blocked for this same thing, indeffed them.
Wikipedia:Sockpuppet investigations/Atompressure (checked -> closed)
- Substantial overlaps in edits, gut says UPE sock/meatfarm. Blocked everyone involved.
Wikipedia:Sockpuppet investigations/Sunny Saab (checked -> commented -> closed)
- Directly asked the involved editors if they know each other, blocks will depend on whether or not I believe their answers. Based on answers, closed without action in the name of AGF.
Wikipedia:Sockpuppet investigations/Khan tabrez
- Blatant behavioral overlap with past socks, quack quack.
Wikipedia:Sockpuppet investigations/Timlaieditor (started -> self-endorsed)
- Found a group of their socks on my own, looks like a spam farm. Blocked everyone involved and requested global blacklisting of the spammed domains, but requested a sleeper check.
[[Wikipedia:Sockpuppet investigations/Junoongrill] (requested -> closed)
- Strong behavioral overlap, ducky enough that I didn't think CU was necessary. Blocked.
Wikipedia:Sockpuppet investigations/Astropolice (requested -> endorsed)
- Behavioral overlap, endorsed for sleeper check.
Wikipedia:Sockpuppet investigations/Hunan201p (checked -> closed)
- This was a fun one - it was so obvious that it was a little too obvious. Based on Krakkos's comments about other masters interacting with Hunan201p, I suspect this is actually a joe job (presumably to get Hunan201p indeffed). Blocked the sock, left Hunan alone.
Wikipedia:Sockpuppet investigations/Seaniemcf2
- Based on comments by other users, I think this is a social media blowup drawing attention rather than sockpuppetry, plus not enough evidence to justify a CU. Closed without action.
Wikipedia:Sockpuppet investigations/CentralTime301 (open -> closed)
- It was a CT301 IP...reporting himself? Why me? Handed out a rangeblock.
Wikipedia:Sockpuppet investigations/FFS19 (clerk assistance -> closed)
- Split case from Wikipedia:Sockpuppet investigations/Architect 134
Wikipedia:Sockpuppet_investigations/Socks_01 (open -> closed)
- Possible edit-warring while logged-out, but not the claimed 3RR violation. Gave the suspected sockmaster a uw-login and called it a day.
Wikipedia:Sockpuppet_investigations/Wacky_Wars (requested -> closed)
- Per previous CU findings, proxies are in play so there probably won't be much to find with a CU. All accounts were blocked, requested glocks.
Wikipedia:Sockpuppet investigations/Latha bsf (requested -> endorsed, clerked -> closed)
- Overlap with previous accounts, though I don't expect a ton since the last CU came back as "possible". Tagged socks with possible related master.
Wikipedia:Sockpuppet investigations/AndrewBasumatary (checked -> closed)
- Tagged and closed.
Wikipedia:Sockpuppet_investigations/Alex_Neman (open -> more info)
- I see overlap in article interest (cars) and the IP matches locations from the archives, but I'm unclear how this is characteristic of the editor. Requested more info, not that I expect an answer since it was an IP filing it. Also, the IP ranges involved would cause a fair amount of collateral damage.
Wikipedia:Sockpuppet investigations/Bahamoudi (open -> closed)
- The quacking is deafening. This appears to be an LTA primarily active on idwiki known as "Maleek Jacobs," might have been past cases here but I couldn't find anything about that in our sockpuppet archives.
Wikipedia:Sockpuppet investigations/Dinuka25 (open -> closed)
- Also pretty obvious - an SPA and a long-inactive account both repeatedly pushing the same change on the same page. Sock or meat, it looks like coordination.
Wikipedia:Sockpuppet_investigations/Prahlad_balaji (open -> closed)
- Somehow, someone came to the conclusion that a Wacky Wars sock named for Prahlad and vandalizing his talk page...was a sock of Prahlad?
Wikipedia:Sockpuppet investigations/Darryl.jensen (open -> endorsed, checked -> closed)
- Behavior showed overlap but wasn't strong enough for me to call it a sock, requested CU (all accounts are stale but ST47's previous comments suggested that there's CU log data for this group)
- Based on iffy CU evidence and lacking compelling behavioral evidence, closed without action.
Wikipedia:Sockpuppet investigations/Shanoonsak710 (open -> closed)
- Obvious behavior overlap, but enough wiggle room that it could have been accidental logged-out editing, droped a uw-login but didn't block anyone.
Wikipedia:Sockpuppet investigations/Govind Laljibhai Dholakia (open -> closed)
- Identical sandboxes in three separate user accounts with very different names (one of them suggestion autobiography) goes from "forgot password" to "sockpuppetry."
Wikipedia:Sockpuppet investigations/V ChandanaHarika (open -> closed)
- Obvious socks are obvious.
Wikipedia:Sockpuppet investigations/KevinThomas71293 (requested -> endorsed, checked -> closed)
- Endorsed + sleeper check due to behavioral overlap and UPE concerns, blocked everyone per CU findings.
Wikipedia:Sockpuppet investigations/Warren2922 (open -> closed)
- Another duck.
Wikipedia:Sockpuppet investigations/Amagency (open -> endorsed)
- Wanted more information about what we're dealing with - sock or meat
Wikipedia:Sockpuppet investigations/Xi Himanshu Kumar (open -> closed)
- Closed without action, not convinced they're the same user based on device. Probably just run-of-the-mill caste warriors.
Wikipedia:Sockpuppet investigations/KumarVenati (checked -> closed)
- All accounts were blocked, got one missing tag.
Wikipedia:Sockpuppet investigations/Sagar.kottappuram777 (requested -> endorsed, checked -> closed)
- Endorsed because this is a very socky area. Closed without action when CU came back negative.
Wikipedia:Sockpuppet investigations/Bradley026258
- Blocked on behavioral evidence + checkuser's comment.
Wikipedia:Sockpuppet investigations/Kansascitt1225 (declined -> more info -> closed)
- Requested more info for behavioral evaluation, then closed without action following reply from filer - not convinced by the available evidence.
Wikipedia:Sockpuppet investigations/Belmop (requested -> endorsed)
- This is going to be a fun one. Endorsed because of suspicions of a major UPE ring, made some notes about possible related cases.
Wikipedia:Sockpuppet investigations/Llelouar (checked -> closed)
- Blocked based on CU findings.
Wikipedia:Sockpuppet investigations/Senor Freebie (open -> closed)
- Possible, but not a clear behavior match, plus IP was a week stale. Closed without action.
Wikipedia:Sockpuppet investigations/Maz246810 (open -> closed)
- Closed without doing anything else - IPv6 rangeblock already in place, IPv4 addr stale, page protected already.
Wikipedia:Sockpuppet investigations/Dr.d.prabu (open -> closed)
- Either the same people or a meatpuppet.
Wikipedia:Sockpuppet investigations/DusanSilniVujovic (open -> closed)
- IP making the same edits as past socks, so a duck situation.
Wikipedia:Sockpuppet investigations/Tanishq1802 (open -> closed)
- Available evidence didn't suggest sockpuppetry, semi-protected the article that all of the accounts are editing.
Wikipedia:Sockpuppet investigations/Silvia1986 (open -> closed)
- Suspected UPE, there were enough sections overlapping between the two drafts that something is clearly up. Blocked.
Wikipedia:Sockpuppet investigations/Shuppiluliuma (open -> more info -> requested)
- Presented evidence wasn't strong enough to be convincing, requested more info. The additional info pointed out a particular habit of the sockmaster; I'm a little iffy so I only set CU to requested (so that another clerk might take a look and endorse if they agree)
Wikipedia:Sockpuppet investigations/Winkelvi (checked -> closed)
- Based on filer and other comments, fairly strong behavioral match between the socks and Winkelvi, so applied tags and closed.
Wikipedia:Sockpuppet investigations/CodeSlashh (open -> closed)
- Looked like bad-faith logged out socking (or meat). Blocked the master and IP for two weeks. Was told this was wrong and unblocked.
Wikipedia:Sockpuppet investigations/Jacktinkonea (open -> closed)
- Likely enough from a behavior standpoint to not be worth CU. Indeffed named accounts, gave the IP a week off.
Wikipedia:Sockpuppet investigations/FFS19 (open -> self-endorse)
- Possible, but the behavior isn't exactly unique to this sockmaster (or sockpuppets in general). Requested CU and made a note about its past effectiveness.
Wikipedia:Sockpuppet investigations/Alok433 (open -> endorse, checked -> closed)
- Strong behavioral evidence, CU for sleepers because UPE. Blocked despite CU findings on behavioral evidence.
Wikipedia:Sockpuppet investigations/Daveydolphin (open -> closed)
- Not convinced by behavioral evidence, left a fairly detailed explanation for why.
Wikipedia:Sockpuppet investigations/शिव साहिल (open -> closed)
- Insufficient behavioral evidence, looked retaliatory for the editors removing content from a page that the filer is OWNing. Closed without action.
Wikipedia:Sockpuppet investigations/Theo Marquez (open -> closed)
- Duck.
Wikipedia:Sockpuppet investigations/Metin karasu (open -> closed)
- Not ILLEGIT, closed without action and gave filer advice about where to go to report other problems.
Wikipedia:Sockpuppet investigations/Chintu6 (open -> endorsed)
- Strange one - I'm suspecting there are multiple people coordinating rather than just one person socking, so requesting CU. The suspected sock is definitely related, but I want to know how they're related.
Wikipedia:Sockpuppet investigations/Tbiw (declined -> closed)
- Per Tony, not enough there to prove socking.
Wikipedia:Sockpuppet investigations/Wiki2008time (checked -> closed)
- Checked with bradv, he said I should treat the block as behavioral even though there was some CU disagreement. Left the third account alone since they were pretty obviously a one-off to !vote in an AfD and they hadn't edited in a month.
Wikipedia:Sockpuppet investigations/Greatgroot (open -> closed -> endorsed, checked -> closed)
- Originally filed under Abhishek shannu, closed for no behavioral overlap, reopened because I found a different possible sockmaster, blocked several accounts on a mix of behavior and CU.
Wikipedia:Sockpuppet investigations/Searchicas (open -> closed)
- Blocked master for suspected UPE but left the sock alone, behavioral evidence wasn't clear and convincing at this point.
Wikipedia:Sockpuppet investigations/Harisrahmandz (open -> closed)
- Closed for lack of compelling behavioral evidence
Wikipedia:Sockpuppet investigations/77.81.136.91 (declined -> closed)
- A dynamic IP being a dynamic IP isn't sockpuppetry.
Wikipedia:Sockpuppet investigations/Bideliran (checked -> closed)
- Blocked two socks on behavioral evidence.
Wikipedia:Sockpuppet investigations/Astra1999 (requested -> endorsed)
- Familiar with the master, almost certain this is one of their socks. Endorsed for sleeper check.
Wikipedia:Sockpuppet investigations/Armaansinghips (open -> closed)
This was a fun one and turned up a bunch of old accounts. Normally would have requested a sleeper check, but didn't think it would be effective here.
Wikipedia:Sockpuppet investigations/"stopwatch-online" (open -> closed)
- Spambots. Blocked without tags and blacklisted the domain.
Wikipedia:Sockpuppet investigations/Imrutu (requested -> endorsed)
- Behavioral overlap, if they aren't the same person they were canvassed.
Wikipedia:Sockpuppet investigations/DJdjPollard15 (requested -> endorsed)
- Lots of sleepers have come up in the past, so endorsed on those grounds.
Wikipedia:Sockpuppet investigations/The Ultimate Boss (requested -> declined+closed)
- Unconvincing behavioral evidence, my own behavioral says "different people". Filer objected and pinged Mz7 about it.
Wikipedia:Sockpuppet_investigations/Globalgistng (requested -> endorsed, checked -> closed)
- Endorsed for sleepers, tagged and closed when none were found.
Wikipedia:Sockpuppet investigations/Balolay (completed -> more info)
- Blocked and tagged two CU-confirmed accounts. A user suggested a third sock which didn't come up in the initial CU, so moved to "more info" and asked the user to provide details.
Wikipedia:Sockpuppet_investigations/Khadim_ahlesunnah_waljamaah (completed -> closed)
- CU said possilikely, the totality of evidence suggested that the suspected sock was indeed a sock. Blocked everyone.
Wikipedia:Sockpuppet investigations/Realyaru (open -> endorsed)
- Endorsed with my thoughts on the relationship between the accounts, pointed to a possibly-related SPI.
Wikipedia:Sockpuppet investigations/Cadeken (checked -> closed)
- Not enough behavioral evidence to connect the suspected sock, iffy CU findings. Closed without action.
Wikipedia:Sockpuppet investigations/Sofia Gibson (requested -> endorsed)
- Iffy endorse with a long rationale on how the various accounts may or may not be related.
Wikipedia:Sockpuppet investigations/Tobias Conradi (open -> closed)
- Prodded drmies since he filed the case then left it, handled tagging and global locks
Wikipedia:Sockpuppet_investigations/Kingshowman (checked -> closed)
- Prodded Ivanvector, renamed per clerk request, pointed a duplicate case, closed.
Wikipedia:Sockpuppet investigations/EruTheLord (checked -> closed)
- Per a couple of peoples' suggestions, blocked all of the socks but let the main account off with a stern warning.
Wikipedia:Sockpuppet_investigations/The_Neoplan_Rider_Studios (open -> closed)
- Duck.
Wikipedia:Sockpuppet investigations/DrL (clerk -> closed)
- Moved case per CU request, tagged socks but left masters alone per TB.
Wikipedia:Sockpuppet investigations/Henryhe43 (open -> closed)
- One sock already blocked from a past SPI, not enough behavioral evidence to prove the second suspected sock.
Wikipedia:Sockpuppet investigations/AlaskaLava (checked -> closed)
- Not enough behavioral evidence to prove that the technically-related user is a sock.
Wikipedia:Sockpuppet investigations/Usman Khalil (clerk -> closed)
- Moved, retagged.
Wikipedia:Sockpuppet investigations/John Daker (open -> closed)
- Already blocked, no tags.
Wikipedia:Sockpuppet investigations/SeminarianJohn (open -> closed)
- Did a behavioral, unconvinced, closed without action.
Wikipedia:Sockpuppet investigations/AppalachianCentrist (open -> closed)
- Looked like unintentional logged-out editing rather than intentional evasion of scrutiny, no action.
Wikipedia:Sockpuppet investigations/Philip Adrian (comments)
- Handled the blacklisting for the spammed domains.
Wikipedia:Sockpuppet investigations/Marjoriejam (open -> closed)
- "socks" are 6 years stale, so this isn't sockpuppetry even if it is the same person.
Wikipedia:Sockpuppet investigations/سب سے بڑی گڑبڑ (clerk -> closed)
- Merged per CU request (and confirmed that my auto-merge script works for non-Latin characters).
Wikipedia:Sockpuppet investigations/Tunedel (checked -> closed)
- Behavioral on two possible socks did not come back with strong evidence.
Wikipedia:Sockpuppet investigations/Rd64e (open -> closed)
- Duck.
Wikipedia:Sockpuppet investigations/Spreadmediaglobal (open -> closed)
- Blocked on behavioral evidence.
Wikipedia:Sockpuppet investigations/Dubai knowsitsall (open -> endorsed)
- Possibility of two different groups, endorsed for CU since the previous case was duck-blocked and I want to know what's going on behind the scenes here.
Wikipedia:Sockpuppet investigations/Dj albert pala (open -> closed)
- Not ILLEGIT.
Wikipedia:Sockpuppet investigations/FCBlinder (checked -> closed)
- Probably UPE, blocked on those grounds instead of sock-blocking.
Wikipedia:Sockpuppet investigations/Ross kramerov (checked -> closed)
- Asked Amanda how she wanted tagging done since the CU results were weird. Tagged and requested locks.
Wikipedia:Sockpuppet investigations/Lolasaffy (open -> endorsed, checked -> closed)
- Requested CU on a gut feeling that this might be a different set of socks, closed without action when CU said unrelated.
Wikipedia:Sockpuppet investigations/KIKKU PRO UGANDA (requested -> endorsed, checked -> closed)
- Dead certain from behavior, requested CU for sleepers. Blocked, tagged, locked, closed.
Wikipedia:Sockpuppet investigations/CCLevy (requested-> closed)
- Closed without action, appeared to be a group project sort of deal. Helped the user in question with UPOL issues.
Wikipedia:Sockpuppet investigations/KevinPR82 (open -> closed)
- Self-admitted logged out editing, Ad Orientem gave them a stern talking to, not going to block at this point.
Wikipedia:Sockpuppet_investigations/Rajumitwa878 (open -> endorsed, checked -> closed)
- Endorsed for sleeper check, plus one of the accounts was behaving very differently from the rest of the farm.
Wikipedia:Sockpuppet investigations/ItWasPredestined (open -> endorsed)
- Linked to a different sockmaster, requested CU.
Wikipedia:Sockpuppet investigations/Delamazapaulo (open -> closed)
- Not socking.
Wikipedia:Sockpuppet investigations/Martino447 (open -> closed)
- Strange one, had to get Mz7 to look at some oversighted material. Blocked on similar behavior.
Wikipedia:Sockpuppet investigations/InternetWatchDog (open -> closed)
- Gave a uw-agf-sock since the "sock" hadn't edited yet, watching the master since I think it might be a shared account.
Wikipedia:Sockpuppet investigations/Abonazzi (open -> endorsed)
- Lots of overlap in (specific) interests but not a smoking gun, requested CU.
Wikipedia:Sockpuppet investigations/Vishva Mohan babu (open -> closed)
- Not sockpuppetry (no overlap in edit times).
Wikipedia:Sockpuppet investigations/CareAtya (open -> closed)
- Loud, loud quacking.
Wikipedia:Sockpuppet investigations/Fsilvers (open -> closed)
- Pretty sure from behavior, blocked the sock and gave the master a week off.
Wikipedia:Sockpuppet investigations/Rayukk (open -> closed)
- Not sockpuppetry, unintentional logged-out editing (admitted by the sockmaster). Gave them a uw-login.
Wikipedia:Sockpuppet investigations/Carmellow15 (open -> closed)
- Blocked two IPs, but the user appears to be on a fairly wide dynamic IP range and I don't want to rangeblock it since there are legitimate contributions coming from it.
Wikipedia:Sockpuppet investigations/Triple 8 Intern (open -> closed)
- Insufficient behavioral evidence to connect the two accounts.
Wikipedia:Sockpuppet investigations/JaneHillervene (open -> closed)
- Hardly any behavioral evidence presented, looked like a content dispute. Declined.
Wikipedia:Sockpuppet investigations/Imrutu (open -> endorsed)
- Drafts were identical, endorsed CU for sleeper check since that had previously been effective, but I recognize that this is probably an Indian ISP and so CU may not be especially helpful.
Wikipedia:Sockpuppet investigations/Wiseman75 (open -> closed)
- Possible, but some wiggle room, erring on the side of AGF and templating the suspected master and sock with uw-agf-sock.
Wikipedia:Sockpuppet investigations/Henryzw01 (open -> closed)
- Pretty sure they're different people working together, nothing overtly socky yet so I dropped a uw-agf-sock on both.
Wikipedia:Sockpuppet investigations/Ababio70 (open -> closed)
- Don't think it's the same person, closing without action.
Wikipedia:Sockpuppet investigations/SethRuebens (checked -> closed)
- Asked a related admin for their thoughts, blocked on behavior - I feel pretty clear that they're working together somehow, even if meat.
Wikipedia:Sockpuppet investigations/Nickjames0423 (clerk -> closed -> open again -> closed)
- Handled rename request, reopened as I did some digging and found more spammed domains, blacklisted the spam domains.
Wikipedia:Sockpuppet investigations/Escoperloit (open -> endorsed)
- Endorsed for sleeper check, sock is a duck.
Wikipedia:Sockpuppet investigations/JesusLuna19 (open -> endorsed, clerk -> closed)
- Endorsed for check on suspicions of LTA, split case, handled some discussion cross-wiki with simplewiki folks about one account.
Wikipedia:Sockpuppet investigations/Ohiopioneers (declined -> closed)
- Not sockpuppetry.
Wikipedia:Sockpuppet investigations/Editor 2050 (open -> closed)
- Behavioral evidence lacking, probably UPE but wasn't sure enough to block.
Wikipedia:Sockpuppet investigations/HarinMusic (declined -> closed)
- Not going to block someone who hasn't edited enwiki yet.
Wikipedia:Sockpuppet investigations/Obsuser (clerked, requested -> closed)
- User is editing while logged in and while logged out, logging in avoided a 3RR block on their IP. Blocked both for a week.
Wikipedia:Sockpuppet investigations/Megha1408 (filed -> closed)
- Strange ducks
Wikipedia:Sockpuppet investigations/Kavyachaudhary555 (open -> closed)
- Ducks, indeffed sock, master got a week
Wikipedia:Sockpuppet investigations/Lisa Lambe official (clerked, requested -> declined -> closed)
- Moved to correct master, blocked IPs, declined CU since the socks were all IPs.
Wikipedia:Sockpuppet investigations/Shweta-biraj (filed -> self-endorsed, checked -> closed)
- Filed and requested CU, when CU came back ambiguous I blocked the most likely socks/meats
Wikipedia:Sockpuppet investigations/ArmanAfifeh (checked -> closed)
- Blocked, tagged, nuked sock contribs.
Wikipedia:Sockpuppet investigations/Drsartawi (clerked, open -> closed)
- Duck blocked, suspicion of meat or UPE.
Wikipedia:Sockpuppet investigations/Dpgame (requested -> closed)
- Obvious sock, skipped CU and blocked.
Wikipedia:Sockpuppet investigations/Emel Ulusoy (lots of things)
- This was a fun one! I'm doing a writeup of it on meta.
Wikipedia:Sockpuppet investigations/CUfiveo (declined -> closed)
- Blocked a fairly straightforward IP sock.
Wikipedia:Sockpuppet investigations/Viralvilla (open -> closed)
- No action required, sock was blocked and locked already.
Wikipedia:Sockpuppet investigations/Pillow4 (requested -> endorsed)
- Endorsed for sleeper check and to establish CU history since this group hasn't been CU'd yet.
Wikipedia:Sockpuppet investigations/SohagRJ (cumoreinfo -> closed)
- It's been three weeks and the filer has only managed to supply one diff.
Wikipedia:Sockpuppet investigations/0lesson (checked -> closed)
- Tagged and requested locks.
Wikipedia:Sockpuppet investigations/Bhattarai1237 (closed -> still closed)
- Blocked an IP which wasn't handled by the closing clerk.
Wikipedia:Sockpuppet investigations/Janitor102 (checked -> closed)
- Everything had been handled, closed.
Wikipedia:Sockpuppet investigations/PUJADAS211 (checked -> closed)
- UPE-blocked the suspected sock instead of sock-blocking them.
Wikipedia:Sockpuppet investigations/Gauravrn4 (various)
- Pinged Materialscientist for input, clerk-moved, blocked, tagged
Wikipedia:Sockpuppet investigations/SohagRJ (more info -> closed)
- Closed as stale, at "more info" for three weeks without useful input from filer.
Wikipedia:Sockpuppet investigations/Vishaal Elias Manesh (filed -> endorse, checked -> closed)
- Blocked and tagged, requested CU to see if the underlying range could be blocked
Wikipedia:Sockpuppet investigations/Dimpsboyno3 (open -> endorsed, checked -> closed)
- Blocked the obvious sock, requested CU.
Wikipedia:Sockpuppet investigations/Worldplus (filed -> closed)
- Filed for record, pretty clearly working together.
Wikipedia:Sockpuppet investigations/Aj517 (open -> closed)
- Don't think it's the same person, but they're MEAT somehow.
Wikipedia:Sockpuppet investigations/Ineedtostopforgetting (checked -> relist, checked -> closed)
- Relisted for a possible other sock, closed when they came back unlikely (much to my surprise)
[[Wikipedia:Sockpuppet investigations/Annette.spry} (requested -> closed)
- Declined CU (all IPs), not enough evidence to connect the named account to the IPs.
Wikipedia:Sockpuppet investigations/DinoBernie66
- Appeared to be a vandal switching from anonymous to logged-in editing. Rangeblocked the /64, left the account with a vandalism-4im.
[[Wikipedia:Sockpuppet investigations/FFA P-16} (commented)
- Complicated one. I'm pretty sure everyone is related, but I just left a comment with my impressions rather than acting.

Archivings

Signed off.

old

May 24, 2020

Welcome to the SPI clerk team! We're delighted to have you.

If you haven't already done so, please read Wikipedia:Sockpuppet investigations/SPI/Clerk and checkuser procedures and (mostly as background) Wikipedia:Sockpuppet investigations/SPI/Administrators instructions.

If you don't have these scripts yet, please install them now:

the MarkBlocked gadget
User:Timotheus Canens/spihelper.js
the staleness scripts (install as below):

lazyCheckCUStaleness = false;
maxUsersCUStaleness = 100;
mw.loader.load('/w/index.php?title=User:Writ Keeper/Scripts/cuStaleness.js&action=raw&ctype=text/javascript');
mw.loader.load('/w/index.php?title=User:Writ Keeper/Scripts/sockStaleness.js&action=raw&ctype=text/javascript');

Also, while not mandatory, these scripts are very useful and I strongly recommend them:

Kevin (aka L235 · t · c) 18:06, 24 May 2020 (UTC)

L235, policies read and understood, scripts installed. creffett (talk) 19:55, 24 May 2020 (UTC)

I've sent you a brief quiz about the SPI procedures and your interpretation of them (privately per BEANS). Give me a ping (on-wiki or directly) when you get to it, but take your time, nothing urgent there. Kevin (aka L235 · t · c) 02:20, 25 May 2020 (UTC)

May 25

Tools:

For working with single IP addresses and ranges:
1. Proxy checker: (link) endlessly useful
2. Wikimedia whois: (link) I use this every day
3. Stalk Toy: (link) This tool will give you the global outlook on accounts and IP addresses on most projects. It is also useful for finding nested IP blocks...for example if a IPv4 /16 range has blocks on any of its subranges or single IP addresses then this will show them to you. Also useful for pinhole access detection: If a hardblock exists on a range but smaller ranges or single IPs have anonblocks then those are undesired access pinholes unless it is by design (you may need to check with the blocking admin to see if it is).
4. ISP Rangefinder: (link) I don't use this personally but others find it helpful
5. IP Range Resolver: (link) I don't use this personally but others find it helpful
6. Rangeblock Calculator (IPv4 and IPv6): (link) very helpful, you can paste in a bunch of IP addresses and extraneous text and it will parse the IP addresses and find the link
For working with accounts and comparing editors:
1. Pages created: (link) Get pages that have been created by a user
2. Get distinct authors: (link)
3. Edit summary search: (link) (may miss some)
4. Editor Interaction Analyzer 1: (link) (may miss some)
5. Editor Interaction Analyzer 2: (link)
6. Intersecting Contribs: (link)
7. Timecard: (link)

Spend some time looking at SPI cases to see how the scripts work and try out some of the tools to gain familiarity.
The above is not an exhaustive list by any means. If you have any favorite scripts or tools that you believe will come in handy with SPI work that are not listed above, then please list them below.

Kevin (aka L235 · t · c) 17:40, 25 May 2020 (UTC)