Jump to content

Wikipedia:Sockpuppet investigations/Ugur none/Archive/1

From Wikipedia, the free encyclopedia


Ugur none

Ugur none (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki)

Older archives were moved to an archive of the archive because of the page size and are listed below:

07 April 2018

[edit]

Suspected sockpuppets

[edit]


Bunch of throwaway REFSPAM accounts... that all insert fake access dates to deflect scrutiny. Methinks there's a bunch of webhosts and other spammers to block -- this is only a week's worth. MER-C 20:08, 7 April 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

Blacklisted:

Sent to WikiProject Spam for monitoring:

MER-C 16:56, 11 April 2018 (UTC)[reply]


21 April 2018

[edit]

Suspected sockpuppets

[edit]

Same spam, different day. Ran until midnight today (UTC). Domains blacklisted:

MER-C 16:44, 21 April 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

02 June 2018

[edit]

Suspected sockpuppets

[edit]

Same shit, different day. MER-C 15:15, 2 June 2018 (UTC)[reply]

I take it the intersection with Wikipedia:Sockpuppet investigations/CAD Red Plaanet was because the two different spam farms were using the same proxy? MER-C 18:53, 2 June 2018 (UTC)[reply]
At least two. Apparently they like to share.--Bbb23 (talk) 18:57, 2 June 2018 (UTC)[reply]

Six accounts added from link addition DB lookup with the accounts blocked in Wikipedia:Sockpuppet investigations/CAD Red Plaanet. MER-C 19:06, 2 June 2018 (UTC)[reply]

Three more accounts from the domains added by accounts CU blocked by DeltaQuad. MER-C 15:46, 3 June 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

@MER-C: Why are you asking for a check of already-blocked accounts? I'm having trouble justifying the extra work.--Bbb23 (talk) 14:44, 3 June 2018 (UTC)[reply]


17 May 2018

[edit]

Suspected sockpuppets

[edit]


These three users have added the same (spam) link to several life insurance articles in a very short time period. They have made no other edits. [2] BubbleEngineer (talk) 20:49, 17 May 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]
@Bbb23: MER-C 09:42, 18 May 2018 (UTC)[reply]
19 May 2018

Ran the links through EL search and found:

Probably more out there. We should probably blacklist the links as well. -KH-1 (talk) 00:55, 19 May 2018 (UTC)[reply]


17 June 2018

[edit]

Suspected sockpuppets

[edit]


The usual. Cleanup after recent checkuser runs. MER-C 19:31, 17 June 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]
Wikipedia:Sockpuppet investigations/Donnie Juanito is related.
I have no clue what this is supposed to mean, but CAD Red Plaanet (talk · contribs) socks are showing up on the same VPNs, same ranges, mostly the same UA... -- Amanda (aka DQ) 06:08, 18 June 2018 (UTC)[reply]
Blocked without tags. Please don't close this yet, I need to go through the list of domains added to look for more socks. MER-C 08:12, 18 June 2018 (UTC)[reply]

Two more stragglers:

I've blacklisted most of the domains involved. MER-C 19:22, 18 June 2018 (UTC)[reply]

Unblocked account punted to next case. This can be closed. MER-C 15:50, 29 July 2018 (UTC)[reply]

29 July 2018

[edit]

Suspected sockpuppets

[edit]

The usual, although this abuse pattern appears to be going away. MER-C 15:54, 29 July 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]
  • Windbeeq seems Red X Unrelated and in a range with little activity. Doesn't show as proxy.
  • Wilfred.weihe appears to have matching UA to Dulypond but using a range that doesn't show as proxy in a different country.
  • Blbman is  Possible to Dulypond with a matching UA but is using a proxy.
  • Different locations in the world represented by the separate groups above except Summer Vibez and Dulypond are using different IP ranges in the same country.
Spam links

Template:Collapsebottom

I have included some of the links above but they may need some removals/additions to tweak to this case as accounts may be included or excluded. Template:U, feel free to alter as needed. Sorry for the messy report but I believe they went meatpuppet on you.
 — Berean Hunter (talk) 15:57, 30 July 2018 (UTC)[reply]