Wikipedia:Sockpuppet investigations/Dealer07/Archive

Add links
Source: Wikipedia, the free encyclopedia.


Dealer07

Dealer07 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

27 September 2021

Suspected sockpuppets

Very similar behaviour as Eurofan00 (contribs) and Dealer07 (contribs) (earlier confirmed socks). Engaged in the same dispute as Eurofan00 earlier, and the same edit warring behaviour as Dealer07. This person also claimed to have made a talk page comment already, but that IP address hasn't edited any talk page yet – implying that they have another account.

Dealer07 also has a history of evading their block by using IP addresses such as 109.178.147.133 (talk · contribs · deleted contribs · logs · filter log · block user · block log) or 5.54.241.215 (talk · contribs · deleted contribs · logs · filter log · block user · block log). ―Jochem van Hees (talk) 14:41, 27 September 2021 (UTC)[reply]

Also, this IP address appears to come from the same city as Dealer07's other socks. ―Jochem van Hees (talk) 14:47, 27 September 2021 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • IP partially blocked. Closing. Bbb23 (talk) 17:19, 27 September 2021 (UTC)[reply]

09 October 2021

Suspected sockpuppets

WP:DUCK for the same reason as previous report (same editing behaviour, geolocation shows the same city). ―Jochem van Hees (talk) 21:15, 9 October 2021 (UTC) ―Jochem van Hees (talk) 21:15, 9 October 2021 (UTC)[reply
]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

23 November 2021

Suspected sockpuppets


Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

24 November 2021

Suspected sockpuppets

Same editing behaviour, and geolocates to the same city as before. ―Jochem van Hees (talk) 13:33, 24 November 2021 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • The IP made one edit two days ago. Closing. Bbb23 (talk) 23:34, 26 November 2021 (UTC)[reply]

04 January 2022

Suspected sockpuppets

I couldn't find any guidance on how to request rangeblocks, so sorry if I'm not following the correct procedure. I'd like request a rangeblock for User:Dealer07's IP address which they have been using to evade their block over the past few months. It consists of multiple large ranges though, so a check for collateral damage should happen first. Below is the full list of IP addresses that I suspect have been used by Dealer07, because they all geolocate to the same city and have similar editing patterns. According to the IP range calculator this would be 12 ranges, in total affecting 34K addresses. ―Jochem van Hees (talk) 17:57, 4 January 2022 (UTC)[reply]

List of IP addresses

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

04 January 2022

Suspected sockpuppets


Same username and editing pattern;

WP:DUCK. ―Jochem van Hees (talk) 18:11, 4 January 2022 (UTC)[reply
]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

22 March 2022

Suspected sockpuppets

The IPs and listed usernames have returned to the same articles frequently visited by Dealer07 socks, to make the same edits. Example 1.[1][2][3] Example 2.[4][5]

Editorwiki07 was created after some Greek IPs were reverted, shortly before the range Special:Contributions/62.74.8.0/23 was blocked.

Checkuser requested to search for further socks. Binksternet (talk) 04:55, 22 March 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • I don't see any other accounts. Editorwiki07 geolocates to the same city as LefterisAp, but there isn't enough there to let me say for sure this is them. They're already indeffed for DE. No comment on the IPs, I'll let someone else consider whether any action is required there. Girth Summit (blether) 08:12, 22 March 2022 (UTC)[reply]
    @Girth Summit: Editorwiki is only blocked for 31 hours. -- Tamzin[cetacean needed] (she/they) 20:07, 22 March 2022 (UTC)[reply]
    Thanks - not sure how I managed to miss that, is a 'misbrain' a thing? Indeffed, tagged as suspected. Girth Summit (blether) 23:10, 22 March 2022 (UTC)[reply]
  • Blocked 62.74.0.0/20 for a month. -- RoySmith (talk) 17:22, 22 March 2022 (UTC)[reply]

22 March 2022

Suspected sockpuppets

These two showed up to continue the Dealer07-style disruption from sockpuppet Editorwiki07, making the same edits.[6][7][8]

Checkuser requested to search for sleepers. Binksternet (talk) 19:21, 22 March 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  •  Clerk note: @Semikon06: Please do not remove your name from this SPI. If you would like to present a defense, you're welcome to do so in the "Comments by other users" section above. Thank you. -- Tamzin[cetacean needed] (she/they) 20:05, 22 March 2022 (UTC)[reply]
  • Semikon06 is  Likely based on CU and, combined with the behavioural duckiness, blocked and tagged as proven. The IP has been blocked by an admin. Closing.-- Jezebel's Ponyobons mots 20:09, 22 March 2022 (UTC)[reply]

25 March 2022

Suspected sockpuppets

New user MadameX2 resumed the same edit war at Mabel (singer), warring over English versus British nationality.[9][10][11]

Checkuser requested to search for sleepers. Binksternet (talk) 20:43, 25 March 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  •  Confirmed to each other:

27 March 2022

Suspected sockpuppets

These user continues the same editing pattern as confirmed puppets of Dealer07 (confirmed puppet edit, this user edit. Also MadameX2 is a confirmed puppet [12]. C messier (talk) 19:35, 27 March 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Based on the CU data, I'd call these  Highly likely, but I can't quite get all the way to confirmed, so I'll just tag them as proven. -- RoySmith (talk) 13:46, 28 March 2022 (UTC)[reply]
  • Redirect arrow Global lock(s) requested TheSandDoctor Talk 05:01, 29 March 2022 (UTC)[reply]

29 March 2022

Suspected sockpuppets

The very first edit of Onmyway3 was to resume the edit warring of blocked Greek IP Special:Contributions/62.74.8.222.[13]

Checkuser requested to locate sleepers. Binksternet (talk) 22:36, 29 March 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

02 April 2022

Suspected sockpuppets

These IPs made the exact same edits (diff1, diff2) at

Alvan (musician) as 176.92.5.151 (talk · contribs · WHOIS) (diff3), a sockpuppet of Dealer07. — Ætoms [talk] 16:41, 2 April 2022 (UTC)[reply
]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

  • The first Greek IP is already connected to this case, partially blocked in the range Special:Contributions/5.54.224.0/19. The second Greek IP continued the same edit war over British versus English nationality.[14][15] These are absolutely Dealer07 evading their block. Binksternet (talk) 19:01, 2 April 2022 (UTC)[reply]
  • This is my first time contributing to a sockpuppet investigation, so I'm not sure how this works, but I've gone ahead and added the third IP address as I've noticed they've made the same edits as the previous IP's. — Film Enthusiast✉ 23:28, 4 April 2022 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

08 April 2022

Suspected sockpuppets

In four articles, Ciclu6 followed directly behind blocked Greek IP 89.210.33.145 to restore their edits. Example 1. Example 2. Example 3. Example 4.

Checkuser requested to make certain the connection. Binksternet (talk) 15:31, 8 April 2022 (UTC)[reply]

Ciclu6 was quickly blocked as a sock by Widr. Binksternet (talk) 15:33, 8 April 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

14 April 2022

Suspected sockpuppets

The very first edit of Strongbow5 in April 2022 was to continue the edit-warring of Greek IPs, edit-warring about nationality, and even adding back the February tag of "lead too long". The Greek IP was doing the same thing.[16]

Checkuser requested to root out any sleepers. Binksternet (talk) 12:59, 14 April 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Strongbow5  Confirmed.  No sleepers
    immediately visible. no No comment with respect to IP address(es), but given that it's not been used in 4 days, I'll just close this. I'll note that historically, sleeper checks have not been productive in this case. -- RoySmith (talk) 15:25, 15 April 2022 (UTC)[reply
    ]

20 April 2022

Suspected sockpuppets

New user Suspicious3 behaving the same as past socks: changing British to English and edit-warring over nationalities. They returned to the Darko Dimitrov page to continue the same edit war as before, removing Macedonians ethnic group.[17][18][19][20]

This is an obvious case, so no need for checkuser, and RoySmith said sleepers were not the norm here. Binksternet (talk) 07:03, 20 April 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

User vandalising

MOS:OVERLINK rule by reverting the ethnicity link in the lead and removing people's links in the main body. Suspicious3 (talk) 07:08, 20 April 2022 (UTC)[reply
]

Thought it was Binksternet, chill. Suspicious3 (talk) 07:35, 20 April 2022 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

  • @Binksternet: Please stop edit-warring. I haven't looked at this case yet, and in my experience you're usually right on SPIs, but the accused is allowed to reply. It's not a helpful reply, but that in itself often makes things easier for us reviewing the case. -- Tamzin[cetacean needed] (she/they) 07:30, 20 April 2022 (UTC)[reply]
  • @Suspicious3: Only warning. Do not revert me again. -- Tamzin[cetacean needed] (she/they) 07:34, 20 April 2022 (UTC)[reply]
  • Account blocked. IPs haven't edited recently so leaving them unblocked. Closing. Callanecc (talk • contribs • logs) 07:49, 20 April 2022 (UTC)[reply]
    • Thanks, Callanecc. Was just typing up my block request, so that saved me some time. :)
      3X'd since 26 March. -- Tamzin[cetacean needed] (she/they) 07:53, 20 April 2022 (UTC)[reply
      ]

23 April 2022

Suspected sockpuppets

back restoring edits on the pages the Suspicious3 sock was editing last week before it was blocked. we can look forward to Suspicious5 soon i Unbh (talk) 13:37, 23 April 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Blocked and tagged. Global locks requested for Suspicious3 and Suspicious4. I believe a clerk or checkuser should add a comment about reporting these accounts to meta. The master is globally locked, and Suspicous3 and 4 are both already blocked on other wikis. Bbb23 (talk) 13:48, 23 April 2022 (UTC)[reply]
  •  Clerk note: ​ Meta/Interwiki banner added. Archiving. --Jack Frost (talk) 23:38, 23 April 2022 (UTC)[reply]

02 May 2022

Suspected sockpuppets

The first edit by Mightberight was to continue the edit-warring behavior of previous socks.[21][22]

Checkuser requested to make certain. Binksternet (talk) 16:23, 2 May 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • The account is now blocked and the 5.54... IPs have been rangeblocked. The other IP has not edited recently. Tagged, Redirect arrow Global lock(s) requested, closing. Thanks, Spicy (talk) 02:45, 3 May 2022 (UTC)[reply]

30 May 2022

Suspected sockpuppets

Not 100% sure, but there is some behavioural evidence. The first thing this account did six minutes after creation is exactly the same thing as what Dealer07 did: adding a link to English language. This person also uses the same kinds of arguments in edit summaries when reverting. Requesting CU to be sure. ―Jochem van Hees (talk) 00:51, 30 May 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Technically exceedingly likely to confirmed sock Editholic and various other accounts; given editing style and interests, I'm calling it confirmed. Blocking, requesting lock, closing. Girth Summit (blether) 10:49, 31 May 2022 (UTC)[reply]

01 June 2022

Suspected sockpuppets

One minute after registering the username, Hasands went immediately[23] to the biography

MOS:ETHNICITY here. It's unusual for someone's third edit to refer to obscure manual of style points, so it is very likely that Hasands had been watching my earlier edits here and here
where I cited the same guideline while I was reworking two biographies that had been disrupted by Dealer07 block evading IPs.

Dealer07 socks have interfered at that biography in the past, for instance LefterisA removed "Albanian".[26]

The Greek IP range Special:Contributions/79.166.64.0/18 was blocked on May 31, so the person switched to using the range Special:Contributions/46.176.64.0/18, and was eventually blocked as 46.176.127.91. 46.176.127.91 admitted to having been blocked for disruption at the biography Eleni Foureira[27] at which Dealer07 and many socks have been active. A few hours after 46.176.127.91 was blocked, Hasands registered the username.

Checkuser requested to make certain. Binksternet (talk) 20:38, 1 June 2022 (UTC)[reply]

  • Adding Meritony, a new user who made two reversions as their first two edits. The two reversions were to restore the version preferred by Dealer07 socks and IPs. Example 1 here.[28][29] Example 2 here.[30][31] This one is obvious. Binksternet (talk) 05:08, 2 June 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Hasands and Meritony are  Confirmed based on archived data. No comment on the IPs, I'll let someone else handle them. Girth Summit (blether) 10:57, 2 June 2022 (UTC)[reply]
  • Noting that 46.176.0.0/16 is blocked for one week and 79.166.64.0/18 for six months. The remaining IP 89.210.34.169 is now stale, having last edited on 1 June, but report at AIV or ANI if there is renewed block evasion and disruptive editing. I think we’re done here. Closing. --Malcolmxl5 (talk) 22:20, 6 June 2022 (UTC)[reply]

14 June 2022

Suspected sockpuppets

Same edits as sock AnotherGuyThere.

AnotherGuyThere: [32][33] [34] [35] [36]

Zgdsh: [37][38] [39] [40] [41]

There is even more if you need it. --StellarNerd (talk) 19:02, 14 June 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Yeah, 89.210.55.206 is them. The archive is full of 89.210.xx.xxx IPs. Maybe this portion of their ISP could be blocked? It's in Greece, should mostly affect Dealr07. --StellarNerd (talk) 19:48, 16 June 2022 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

  • Blocked and tagged. Bbb23 (talk) 23:57, 14 June 2022 (UTC)[reply]
  • Blocked and tagged Faderline. Bbb23 (talk) 13:05, 18 June 2022 (UTC)[reply]
  • FWIW, from the technical data I'd say that Zgdsh is  Confirmed to AnotherGuyThere, and Faderline is  Likely to Zgdsh. They operate across a number of wide IP ranges though, so identifying sleepers is not easy, and blocking indidual ranges is unlikely to be very effective - page protection might be a better way to go. Come back if you see any similar behaviour from new accounts. Closing. Girth Summit (blether) 11:53, 19 June 2022 (UTC)[reply]

22 June 2022

Suspected sockpuppets

obvious from https://en.wikipedia.org/w/index.php?title=Poo_Bear&action=history, reinstating reverted edits through manual reverts FMSky (talk) 12:45, 22 June 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • Blocked, tagged, global lock requested, closing. Bbb23 (talk) 13:09, 22 June 2022 (UTC)[reply]

22 June 2022

Suspected sockpuppets

back again https://en.wikipedia.org/w/index.php?title=Ar%C3%B3n_Piper&diff=prev&oldid=1094441485 FMSky (talk) 16:52, 22 June 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

  • Adding two Greek IPs which have been active recently. Binksternet (talk) 17:06, 22 June 2022 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

26 June 2022

Suspected sockpuppets

Greek IP exclusively editing Kosovar people. One of the band socks recently requested an unprotection (https://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_page_protection/Decrease&diff=prev&oldid=1094336258) of Dafina Zeqiri, which the IP now edits --FMSky (talk) 17:05, 26 June 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • The IP has not edited in several days, so blocking it at this point would not prevent any ongoing abuse. Closing. Spicy (talk) 03:53, 3 July 2022 (UTC)[reply]

19 July 2022

Suspected sockpuppets


Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

False accusation, do not even know who the other user they claim is. Just an Existence (talk) 21:22, 19 July 2022 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

19 July 2022

Suspected sockpuppets

https://en.wikipedia.org/w/index.php?title=Bardhi&diff=prev&oldid=1099265517 -- FMSky (talk) 21:38, 19 July 2022 (UTC)[reply]

a range block might make sense: https://en.wikipedia.org/wiki/Special:Contributions/62.74.0.0/16 -- FMSky (talk) 21:39, 19 July 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

20 July 2022

Suspected sockpuppets

https://en.wikipedia.org/w/index.php?title=Florat&action=history - again manually restoring previously reverted edits FMSky (talk) 18:09, 20 July 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

20 August 2022

Suspected sockpuppets

both removed a picture for allegedly being inappropriate

- https://en.wikipedia.org/w/index.php?title=Ksenia_Sitnik&diff=prev&oldid=1098657657

- https://en.wikipedia.org/w/index.php?title=Ksenia_Sitnik&diff=1105486183&oldid=1104051978

also manually restoring a bunch of other sock edits that were reverted --FMSky (talk) 17:25, 20 August 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • The IP has been trying to blank this page and has been stopped by the edit filter. I have blocked the IP who has reappeared at User talk:89.210.59.36 and been blocked again. So in conclusion this case is moot. Closing. PhilKnight (talk) 11:55, 21 August 2022 (UTC)[reply]

22 August 2022

Suspected sockpuppets

- https://en.wikipedia.org/w/index.php?title=Lindon_Berisha&diff=prev&oldid=1105887369

can someone rangeblock this pesky guy already FMSky (talk) 23:45, 22 August 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

16 September 2022

Suspected sockpuppets

Same IP as always from Attiki, Athens, Greece. Same edit warring and constant manual reverts FMSky (talk) 03:51, 16 September 2022 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  • CU cannot be requested for IPs, it will always be declined. The IP has been blocked, so I'm closing the report.-- Jezebel's Ponyobons mots 17:12, 16 September 2022 (UTC)[reply]

28 October 2023

Suspected sockpuppets

Shortly after the block of

MOS:ETHNICITY related edits and changing of birth place for the person, that seems very unlikely to be coincidence. Checkuser can help confirm through location check. TylerBurden (talk) 17:34, 28 October 2023 (UTC)[reply
]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

20 February 2024

Suspected sockpuppets

There's something dodgy about this IP and their editing on Draft:Sierra Post, and after a lot of digging I may have found a tentative connection to Dealer07: the IP geolocates to Athens, where many of Dealer07's earlier IP socks are from, and edits (not this specific address, but others from the same range) on similar topics incl. Eurovision Song Contest, some Greek musicians, etc.

I know you won't CU an IP, but I'll request it anyway for the registered account, Kriparopo1963, who created Draft:Sierra Post and who I think is the IP when logged out.

At one point the IP posted this fake AfC notification on their own talk page, which was the first thing that caught my attention. I know I've seen someone else do that recently, but can't for the life of me remember who/when/where.

There's one more thing: when the IP submitted this draft for the second time, they manually edited the AfC template to make a non-existent user KriparoVespa63 the submitter. To me that suggests they are indeed Kriparo*, although why they entered an incorrect username, I don't know. I can't find any record of such a user anywhere, but I'm mentioning it in case it rings any bells. -- DoubleGrazing (talk) 17:42, 20 February 2024 (UTC)[reply]

PS: I'll mention this in case it helps this or any future investigations: the Sierra Post draft is about a Greek business that seems to refer to itself variously as
  • Sierra Post
  • Sierra Recordings
  • Sierra Studios
...as well as just Sierra, as in Sierra.gr -- DoubleGrazing (talk) 18:00, 20 February 2024 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I'm not seeing the signature edit-warring over nationality and ethnicity from this IP range. I even widened the search to the /40 and then the /32 range, getting much larger sample. I don't recognize the style of Dealer07 here. Binksternet (talk) 20:16, 20 February 2024 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

  • The named account is now blocked. IP range hasn't edited recently. Closing. Spicy (talk) 16:16, 30 March 2024 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/Dealer07/Archive&oldid=1217271764"