Wikipedia:Sockpuppet investigations/TRUEV140/Archive
TRUEV140
TRUEV140 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
16 November 2016
[edit]Suspected sockpuppets
[edit]- User compare report Auto-generated every hour.
- Editor interaction utility
Account created solely for vandalizing "selected" Indian films' box office. Adding puffery, uncited claims, POV etc. And if his additions are removed/challenged, the user reverts it without any explanation. He do not participate in a discussion, nor do he provide an edit summary. He just log out and uses IP hopping for re-adding the contents.
Following diffs shows his user edit and IP sock's edit after log out.
Thuruppugulan (2006 film) ([1], [2], [3], [4])
New Delhi (1987 film) ([5], [6], [7])
Hitler (1996 film) ([8], [9], [10], [11])
Oru CBI Diary Kurippu ([12], [13], [14])
The King (1995 film) ([15], [16])
Mayavi (2007 film) ([19] ,[20], [21])
Annan Thambi ([22], [23]) - For the 1st time, left an edit sum.
Sethurama Iyer CBI ([26], [27])
Valliettan ([28], [29], [30])
Pranchiyettan & the Saint ([33], [34])
Bavuttiyude Namathil ([35], [36], [37])
Munnariyippu ([38], [39])
Pappayude Swantham Appoos ([40], [41])
There are a lot more of his IPs, over 50. Even if the user a/c is blocked, he will continue with the IP hopping. In that case, only a range block will do the work. Essex-1799 (talk) 20:32, 16 November 2016 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]- I believe that I've dealt with this user numerous times. See this report, and I totally forgot that I'd created User:Cyphoidbomb/Malayalam film fluffer. Most of the IPs above geolocate to Thiruvananthapuram in the Indian state of Kerala, and are on ISP Asianet.
Some IPs I logged at the time:
- 111.92.51.178
- 111.92.49.150
- 111.92.50.190
- 111.92.49.130
- 111.92.49.122
- 111.92.50.34
- 111.92.50.2 - This was the first IP of the batch that I blocked. - June 11, 2016 - 31 hours
- 111.92.51.30 - This was the second IP blocked - June 12, 2016 - 1 week
- 111.92.50.170 - Blocked 1 month for addition of this content indicating "huge success" and this edit for describing a film as a "box office failure".
I'm mostly including them in case any behavioral research yields any results. Don't know where else to put this info. It's possible they're not related, but the list of Thiruvananthapuram IPs certainly makes me uncomfortable. Cyphoidbomb (talk) 18:28, 27 November 2016 (UTC)
- Clerk note: this user's IP range is 111.92.48.0/22, but AFAICS this range hasn't been involved in the same activity for a couple weeks. Closing this case for now. Ivanvector (Talk/Edits) 23:49, 11 December 2016 (UTC)
27 November 2016
[edit]Suspected sockpuppets
[edit]- OneFourZero (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
- Obvious similarity in name, 140 vs OneFourZero
- Both user pages are similar, containing the odd Special:Prefixindex link.TRUEV140, OneFourZero.
- OneFourZero appears to be extending an edit war between TRUEV140 and Essex-1799. For instance, in this edit they restore content submitted by TRUEV140 here. Here, OneFourZero restores content submitted by TRUEV140.
While this seems like a clear duck case, Essex believes that TRUEV140 has been editing while logged out so he can keep inserting his version of information into articles. This behavior, coupled with the very obvious sock account is highly suggestive to me of someone who may be a paid editor with an agenda to make articles look a certain way. I would appreciate a deeper look to see if there are any other accounts linked to this user. Thank you! Cyphoidbomb (talk) 17:59, 27 November 2016 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
The IP 14.139.183.220 [42] is different from other IPs of the user. When checked with WHOIS, it is located to Thiruvanathapuram, Kerala, but in a different place and registered to different person. But all his edits and even edit summaries are exactly similar to TRUEV140 and his other IPs (ranging "111.92......"). I think it is a meatpuppet or may be himself from a different location and internet connection, like his workplace or school computer. Also see the block log of this particular IP, 111.92.20.148 [43], same IP range, location, internet connection and registration used by TRUEV140's IPs. But this IP was blocked for abusively using multiple account, and the coupled account is User:Mealwaysrockz007, who is indefinitely blocked. Like TRUEV140, almost all his socks edited similar pages and apparently is a fan of actor Mammootty and Kunchacko Boban. I believe there is a connection between these accounts. There may also have chances for meatpuppetry. Essex-1799 (talk) 19:48, 27 November 2016 (UTC)
Clerk, CheckUser, and/or patrolling admin comments
[edit]- TRUEV140 and OneFourZero are very Unlikely.
- Sujeeshkdlr (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) and Ajlif Mohammed (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) are technical matches to TRUEV140. Both have very few edits. Although Sujeeshkdlr is more obvious to me, Behavioural evidence needs evaluation.--Bbb23 (talk) 18:19, 27 November 2016 (UTC)
- Interestingly (to me) I was suspicious that OneFourZero might be a decoy. Cyphoidbomb (talk) 18:30, 27 November 2016 (UTC)
- I don't see anything behaviorally that would clearly link Ajlif Mohammed and Sujeeshkdlr to the master. Insufficient number of edits. Ajlif hasn't edited in the world of Indian film. Sujeesh has, but there's nothing obvious to connect to the sockmaster. I don't see clear intersections with IPs in the above ranges either. Cyphoidbomb (talk) 18:41, 27 November 2016 (UTC)
- Clerk note: I agree with Cyphoidbomb, I don't see a behavioural connection with the two technically matched accounts. But with the confirmed case below to compare with I have to say this is the same user. Username pattern, similar edit summaries ([44] [45] [46]), topic overlap and edit warring with socks of Inside the Valley. @Bbb23: does any info from the Dec 3 check enlighten this case at all? Ivanvector (Talk/Edits) 00:30, 12 December 2016 (UTC)
- @Ivanvector: Nope. Just so you know, in these kinds of complex cases, I always look to see if a previous finding changes, although it doesn't hurt to ask.--Bbb23 (talk) 00:59, 12 December 2016 (UTC)
- I thought you would, just thought I should be sure. Closing this with no action, user seems to have stopped editing. Please file a new report if they start up again. Ivanvector (Talk/Edits) 13:51, 13 December 2016 (UTC)
03 December 2016
[edit]Suspected sockpuppets
[edit]- FaVe123 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Came back to make the same edits. [47] [48] [49] [50] Sro23 (talk) 18:23, 3 December 2016 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]Confirmed, blocked, tagged, closing.--Bbb23 (talk) 19:33, 3 December 2016 (UTC)
26 July 2017
[edit]Suspected sockpuppets
[edit]- 5ana1234 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
NOTE: Filed on behalf of I.P. 103.15.254.175: User:5ana1234 is a block evading a/c of User:TRUEV140, whose 6 such accounts (User:Cinephile1234, User:V4VICTORY, User:LetVDo, User:LetMeDo, and User:V2478) has been detected & blocked so far (excluding his IPs ranging 111.92...). Came again for the same (& sole) purpose, adding boosted box office data in a particular actor's film articles, probably a fan. Edits are in Malayalam language films of actor Mammootty (few edits in other films too), not to mention that all edits are in the "box office" section. 5ana1234 share many common edits with rest of the accounts in same articles for the same content, ranging from 1978 film Thacholi Ambu to 2016 film Thoppil Joppan. In 3 months time, 5ana1234 have covered almost all articled edited by the others. Some are listed down.
- Thaskaraveeran - TRUEV140 [51], FaVe123 [52], Cinephile1234 [53], 5ana1234 [54] copy pasting the same content.
- Black - TRUEV140 [59], Cinephile1234 [60], 5ana1234 [61] Adding same content and copy pasted a source.
- Ee Nadu - Cinephile1234 [62], IP [63], 5ana1234 [64] Clever. He added problematic content using in an IP. 5ana did the additional finishing touch.
- New Delhi - TRUEV140 [65], FaVe123 [66], IP [67], [68], 5ana1234 [69] Ignored talk page discussion. Added the problematic claim using IP (111.92.48.194) and 5ana1234 made additional finishing.
- Nair Saab - TRUEV140 diff, FaVe123 [70], 5ana1234 [71], [72], [73]. Re-adding same content with same sources, but this time one by one.
- Pathemari - TRUEV140 [74], FaVe123 [75], 5ana1234 [76] In contrast to the source, he a changed "India" to "Kerala" (state) in an attempt to boost the boxoffice output.
Similarly,
So far, 5ana1234 has edited only one Tamil language film, that is Ayan (TRUEV140 [115], 5ana1234 [116]), which is also the same for TRUEV140. And has also edited few other actors' films. See this edit (TRUEV140 diff, 5ana1234 [117], [118]) in China Town, a film starring Mohanlal (Mammootty's rivalry actor). Here 5ana1234 is doing the opposite, degrading the box office status - see how he changed the "2 month" to "final gross" and has removed the description of The Economic Times. There are common edits even in non-Mammootty films he edited, they are:
- Thacholi Ambu - Cinephile1234 [119], 5ana1234 [120] Starring Prem Nazir
- Chinthavishtayaya Shyamala - Cinephile1234 [121], 5ana1234 [122], [123] : Starring Sreenivasan
Four films starring Jayaram,
Four films starring Dileep
Like the other accounts, 5ana1234 is also not participating in talk page discussions even when discussions are open in some. Checking through the articles, the user was part of an edit war (not in one, but several articles) and is returning to re-add the contents, has been doing this since months. I suggest a mass revert of all his edits. It will create a notion that there is no use in returning since his edits are being removed. — fortunavelut luna 12:33, 26 July 2017 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]Confirmed, blocked, tagged, closing.--Bbb23 (talk) 13:00, 26 July 2017 (UTC)
- I did the mass rollback. Cyphoidbomb (talk) 16:22, 26 July 2017 (UTC)
05 November 2017
[edit]Suspected sockpuppets
[edit]- User compare report Auto-generated every hour.
- Editor interaction utility
Same interest - films' box office editing, same articles, same IP range "111....". Let There Be Sunshine (talk) 15:17, 5 November 2017 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]- 111.92.48.0/22 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) Range blocked. GABgab 17:17, 5 November 2017 (UTC)
21 December 2017
[edit]Suspected sockpuppets
[edit]- User compare report Auto-generated every hour.
- Editor interaction utility
Same IP range, same location as per WHOIS, and edit is at box office section as usual. Let There Be Sunshine (talk) 15:12, 21 December 2017 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]We don't publicly disclose the IP(s) of named accounts. CU declined.--Bbb23 (talk) 16:36, 21 December 2017 (UTC)
- The IP made only one edit three days ago. Closing. Bbb23 (talk) 19:11, 24 December 2017 (UTC)
10 February 2018
[edit]Suspected sockpuppets
[edit]- User compare report Auto-generated every hour.
- Editor interaction utility
Same IP range as previously blocked from this user. As usual, edits are on the box office section, and again, promotional edits on Mammootty films (Masterpiece (2017 film), Aayiram Naavulla Ananthan) and disparaging in Mohanlal films (Pingami, T. P. Balagopalan M. A.). --Let There Be Sunshine 17:59, 10 February 2018 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]- Clerk declined - CU will not connect IP's to accounts. Sro23 (talk) 18:05, 10 February 2018 (UTC)
- Administrator note Similarity of edits to master as described above. IP blocked for a month. Ben MacDui 19:29, 11 February 2018 (UTC)
18 February 2018
[edit]Suspected sockpuppets
[edit]- Abcd1234Pkd (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Created on the same day as last sock (IP) was blocked (Feb 11). As usual, edits are in Malayalam film box office, especially Mammootty films. So far edited 11 articles, 4 of which he had edited before - Pranchiyettan & the Saint (2010) - [145][146][147][148], Thaniyavarthanam (1987) - [149][150][151], Kauravar (1992) - [152], and Sarapancharam (1979) - [153], the remaining 5 are new films. This a/c also adds US, UAE and UK box office numbers citing Box Office Mojo and Bollywood Hungama - [154][155][156][157][158][159], as he usually does - [160][161][162][163][164][165]. His use of numbers in username can be seen here too. Created this a/c possibly for getting auto-confirmed to edit the semi'd Mammootty film The Great Father. --Let There Be Sunshine 15:16, 18 February 2018 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]Administrator note Abcd1234Pkd indef blocked and tagged. Ben MacDui 19:56, 19 February 2018 (UTC)
24 February 2018
[edit]Suspected sockpuppets
[edit]- Canpal2802 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Editing exactly the same articles. As usual, edits are all for promoting box office performance of Mammootty films. A/c created 4 days after the last block. --Let There Be Sunshine 17:45, 24 February 2018 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]Blocked and tagged. Ben MacDui 18:47, 24 February 2018 (UTC)
26 February 2018
[edit]Suspected sockpuppets
[edit]- KanPkd24 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Created 2 days after last block. Same box office editing and similar username (see Abcd1234Pkd and Canpal2802). Also requesting an all-edit rollback; this is his 4th sock in last month alone. --Let There Be Sunshine 13:40, 26 February 2018 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]- Blocked and tagged. I rolled back some of the larger edits. Ben MacDui 19:30, 1 March 2018 (UTC)
10 March 2018
[edit]Suspected sockpuppets
[edit]- WelcomeGDR (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Created 4 days after the last block. Same behavior as usual. All edits are exclusively for promoting box office performance of selected Malayalam films. Makes an average 15 or more edit per day, same as last socks, usually on or between the period 08:00 to 18:00. See the first 5 edits on day 1, adding complex citation templates, which can be rarely seen from a rookie. This a/c too adds UK, UAE, US collection reports from Bollywood Hungama and Box Office Mojo (sample - [166], [167]), an activity done by all his socks, see evidences in the case of Abcd1234Pkd. Again requesting an all-edit rollback. --Let There Be Sunshine 10:30, 10 March 2018 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]Administrator note Blocked and tagged. Ben MacDui 19:45, 12 March 2018 (UTC)
- Adding R1A2G3 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) Also blocked. Ben MacDui 20:26, 24 March 2018 (UTC)
28 March 2018
[edit]Suspected sockpuppets
[edit]- GAR022428 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Created one day after the last block. Same box office editing, articles and editing style. Similar user name - G, A & R can be seen in the last sock as well in a alphabetical vs numerical combo. Out of the 9 edits (as of now) in 6 articles, except for Mummy & Me and Cycle (2008 film), the user has former editing history in all other 4 articles. Same edits - [168] & [169], [170] & [171]. "the film was a commercial success" or "the film was both critical and commercial success" are sentences the user regularly adds. --Let There Be Sunshine 14:52, 28 March 2018 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]- Blocked and tagged. Ben MacDui 17:32, 28 March 2018 (UTC)
01 April 2018
[edit]Suspected sockpuppets
[edit]- Lal123456 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- User compare report Auto-generated every hour.
- Editor interaction utility
Created one day after last block. As usual, all edits are in box office section, same articles, same style. Sangham (1988 film), Yavanika, Ustad Hotel, Su.. Su... Sudhi Vathmeekam, Aadu 2, Pretham, Punyalan Agarbattis, The King (1995 film), My Boss, Marykkundoru Kunjaadu, and Kalyanaraman (2002 film) are the articles having previous edit history, as of now. --Let There Be Sunshine 09:08, 1 April 2018 (UTC)
Comments by other users
[edit]Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
[edit]Blocked. I am hoping a CU will look at a range block per Wikipedia:Sockpuppet investigations/Muhammed Zafwan. Ben MacDui 09:41, 1 April 2018 (UTC)
- CheckUser requested and endorsed by clerk - Would a rangeblock of the underlying IP be possible to help curtail the abuse? Thanks. Sro23 (talk) 13:46, 1 April 2018 (UTC)
- I've given it a go. Rangeblock enacted, let's see if it does anything. Courcelles (talk) 19:24, 2 April 2018 (UTC)
- Closing. Vanjagenije (talk) 20:14, 3 April 2018 (UTC)