Wikipedia:Sockpuppet investigations/Philip126/Archive

Add links
Source: Wikipedia, the free encyclopedia.


Philip126

Philip126 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
01 May 2011
Suspected sockpuppets

Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters "~~~~"

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I think that this would be closed because Checkuser is not for fishing. It is that checkusers cannot reveal the IP so if it is the same and the checkuser said Confirmed, it would be revealing the IP. ~~EBE123~~ talkContribs 15:49, 1 May 2011 (UTC)[reply]

  • Huh? Given that the evidence in the request legitimately shows a connection, this hardly qualifies as fishing. Indeed, it seems like a good idea to find any sleeper socks, as a cursory review of the history of the article shows that there appear to be several SPAs engaging in blanking of that same content. --Kinu t/c 19:15, 1 May 2011 (UTC)[reply]
Clerk, CheckUser, and/or patrolling admin comments
I think the sock-master of Group 2 is Coconut91. Was that user not confirmed? ―― Phoenix7777 (talk) 20:27, 2 May 2011 (UTC)[reply]
  • information Administrator note So in the first group, I'm going to leave Koreanworld1 unblocked for now. In the second group, I've blocked and tagged all the socks with Philip126 as the master, and I've blocked him for a week. — HelloAnnyong (say whaaat?!) 01:53, 3 May 2011 (UTC)[reply]
06 May 2011
Suspected sockpuppets

Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters "~~~~"

Group 2 of the original SPI.

  • All accounts edit mainly Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: removing the words "China", "Japan" and "tributary".
  • All IPs are located in the vicinity of NY.
  • Two IPs are the same University.
Request to indef block to Sock master User:Philip126 if confirmed. The user used a sockpuppet three days after blocking before expiring one week block. ―― Phoenix7777 (talk) 08:42, 6 May 2011 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

It's  Likely that Philip126 (talk · contribs) and TheHistorian222 (talk · contribs) are the same. Argiecon is on the same ISP as TheHistorian222, but on a different computer. Coconut91 is  Stale. No comment on the IPs. TNXMan 13:45, 6 May 2011 (UTC)[reply]

  • information Administrator note I spun this case off of the Koreaworld1, as they're two separate farms. And here, I've blocked TheHistorian222 as a sock of Philip. There's no overlap in Argiecon and Historian's edits, so I'm going to leave it alone for now. — HelloAnnyong (say whaaat?!) 13:18, 8 May 2011 (UTC)[reply]
23 May 2011
Suspected sockpuppets


Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters "~~~~"

  • All accounts edit mainly Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: removing the words "China", "Japan" and "tributary". ―― Phoenix7777 (talk) 23:58, 23 May 2011 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
  •  Clerk endorsed - Honestly, I'm not really sure of the connection to the master - but I think something funny is going on here, so endorsing to clarify. — HelloAnnyong (say whaaat?!) 21:30, 25 May 2011 (UTC)[reply]
  •  Confirmed as socks, all other blocked previously. Keegan (talk) 07:44, 27 May 2011 (UTC)[reply]
Please block the sockmaster Philip126 indefinitely because Philip126 used above socks during his 1 week block. Also please block relevant IPs for an extended period of time rather than 1 day autoblock. ―― Phoenix7777 (talk) 08:18, 27 May 2011 (UTC)[reply]
  • information Administrator note All blocked indefinitely NW (Talk) 13:49, 27 May 2011 (UTC)[reply]
08 September 2011
Suspected sockpuppets
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
  •  Clerk endorsed - The master and their socks are stale, but we can see if these accounts are the same. There won't be a comment on the IP. — HelloAnnyong (say whaaat?!) 01:48, 8 September 2011 (UTC)[reply]
  • Technically, rather
    •] 10:56, 8 September 2011 (UTC)[reply
    ]
13 September 2011
Suspected sockpuppets


  • All users edit mainly Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence to Korea therefore removing the word or sentence related to China, Japan and so on.
  • All IPs' locations are vicinities of New York City. IP2Location.com may not indicate correct place. MaxMind or IP Address Location indicates more accurate place.
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

information Administrator note 173.77.112.0/20 blocked 2 weeks. Elockid (Talk) 02:25, 14 September 2011 (UTC)[reply]

Also, 173.52.156.0/22 and 173.52.160.0/20 blocked 2 weeks. Elockid (Talk) 02:30, 14 September 2011 (UTC)[reply]
25 September 2011
Suspected sockpuppets
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Before closing: Could someone else please take a look at User:KoreanSentry. The user hasn't edited much recently (the last article edit prior to today was on September 3). However, today, that user re-appeared and reverted all of Phoenix7777's reverts of Philip126, generally implying that Phoenix7777 was the one making changes to the article, when all xe did was revert it to its stable, pre-disrupted state. Given the big delay in editing, then the sudden mass-revert, I'm concerned that KoreanSentry is either a sock or a meatpuppet of Philip126. I just blocked KoreanSentry for 48 hours, because the mass reverting to include the contributions of an indefinitely blocked sock puppet is highly disruptive and I'm concerned it will continue. I would like others to see if longer term sanctions are appropriate. Qwyrxian (talk) 01:55, 26 September 2011 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments
  •  Relisted. I want to see if KoreanSentry is indeed connected, and if we have any other accounts that are hiding. — HelloAnnyong (say whaaat?!) 02:13, 26 September 2011 (UTC)[reply]

From a technical standpoint, it seems quite  Unlikely that KoreanSentry is being controlled by the same person as the other accounts. J.delanoygabsadds 04:38, 26 September 2011 (UTC)[reply]

  • Quite pervasive sockpuppetry: we probably ought to keep a close eye on this one in the future. Nonetheless it looks to be currently resolved. NativeForeigner Talk/Contribs 05:26, 26 September 2011 (UTC)[reply]
06 October 2011
Suspected sockpuppets


Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
19 October 2011
Suspected sockpuppets
  • All users edit mainly Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea therefore removing the word or sentence related to China, Japan and so on.
  • A new IP was used from a location in Queens, New York as with all the IPs used by the master. ―― Phoenix7777 (talk) 09:02, 19 October 2011 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

 Confirmed the following are the same:

19 October 2011
Suspected sockpuppets

The first three ips recently started editing wiki and reverted without any reason on the pages of History of Korea,Four Commanderies of Han,Template:History of Korea,Gojoseon and Timeline of Korean history. I am suspecting that someone is using multiple ips (proxy server maybe) to revert my edits and avoid my invitations of talk-page discussion. The first and third ips are from Korea. The second ip seems to be a US ip. However, after I left a vandalism notice on its talk page, it left the very first discussion at "http://en.wikipedia.org/wiki/Talk:Four_Commanderies_of_Han" in which using a Korean publication (written in English but published in South Korea) as a reference, and this makes it even more suspicious. The forth ip used the same ref and stated the similar edit summary with the discussion left by second ip. The fifth ip has already been suspected as a sockpuppet of forth ip. Another reason I listed fifth ip is that it has the same ip section with second one and probably are dynamic ips of the same user. EJcarter (talk) 04:37, 19 October 2011 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. What exactly is to be "investigated"? They're all IPs. Choyoołʼįįhí:Seb az86556 > haneʼ 12:50, 19 October 2011 (UTC)[reply]

Probably I misunderstand the definition of sockpuppet, but I wonder is it a must of including a user account in order to start this inverstigation? BTW, I just noticed a open SPI on User:Philip126 which also includes the second ip. Hope this may give a clue. EJcarter (talk) 16:24, 19 October 2011 (UTC)[reply]
Clerk, CheckUser, and/or patrolling admin comments

 Clerk note: Three of the IPs geolocate to NYC, two to Seoul. Of the three NYC ones, two belong to the same ISP. The two Seoul ones are different ISPs but one is a university which could imply that one edits at home and at school. Alexandria (talk) 20:16, 20 October 2011 (UTC)[reply]

Doing a scan, all five of them have 25/tcp open. Given the near identical edits, I would guess that the IPs are being used by the same person. –MuZemike 20:32, 20 October 2011 (UTC)[reply]

A whole bunch of  Confirmed (already blocked) accounts under these proxies, plus two new ones:

–MuZemike 20:44, 20 October 2011 (UTC)[reply]

These above accounts are  Confirmed as Philip126 (talk · contribs). –MuZemike 20:44, 20 October 2011 (UTC)[reply]

25 October 2011
Suspected sockpuppets


  • All users edit mainly Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea therefore removing the word or sentence related to China, Japan and so on.
  • Sambodia55 edited the same edit as an edit by User:Greynader a sockpuppet of Philip126.
  • Sambodia55 removed a Japanese influence. ―― Phoenix7777 (talk) 09:04, 25 October 2011 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

 Clerk endorsed Phillip has a history of using open proxies as well as sleepers. Alexandria (talk) 10:28, 25 October 2011 (UTC)[reply]

I am not sure Sambodia55 used an IP abused by multiple users. So I didn't request ChekUser. However, if the IP is from Queens, New York, I am sure Sambodia55 is a sockpuppet of Philip126. ―― Phoenix7777 (talk) 10:44, 25 October 2011 (UTC)[reply]

Sambodia55 is  Confirmed plus these:

Breethlergb (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Happydayj (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Also,  IP blocked. Elockid (Talk) 11:38, 25 October 2011 (UTC)[reply]

 Clerk note: socks blocked and tagged. Closing. Alexandria (talk) 11:46, 25 October 2011 (UTC)[reply]
25 November 2011
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea therefore removing the word or sentence related to China, Japan and so on.
  • 173.77.121.45's location is Queens, New York as all other sockpuppets. IP2Location shows an incorrect location while MaxMind and IP Address Location shows it Queens, New York.
  • 173.77.121.45's all edits are to remove US and Japanese influences.[1]
  • Checkuser may help to uncover sleepers.
―― Phoenix7777 (talk) 00:49, 25 November 2011 (UTC) ―― Phoenix7777 (talk) 00:49, 25 November 2011 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
  • information Administrator note Yes, these IPs geolocate to Flushing, Queens, an area that has a relatively large Korean population. Most of these IPs are stale. 173.77.120.0/21 would be one range to block, but there'd be a bit of collateral damage so I'm hesitant to rangeblock. Nevertheless I've blocked 173.77.121.45 for a week. — HelloAnnyong (say whaaat?!) 14:54, 25 November 2011 (UTC)[reply]
01 February 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea therefore removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
  • Beretasle removed a word "Japanese".[2]
  • Spockblot removed a word "Japanese".[3],[4]
  • Assethepe removed a word "Japanese".[5]
  • Scholelied removed a word "Japanese".[6]
―― Phoenix7777 (talk) 03:30, 1 February 2012 (UTC) ―― Phoenix7777 (talk) 03:30, 1 February 2012 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
16 February 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
  • Assendingar removed a Chinese influence.[7], [8].
  • Assendingar removed a Soviet influence.[9].
  • Assendingar removed a Japanese influence.[10].
  • Basketseh edited the same edit as Assendingar's.Assendingar, Basketseh
  • Assendingar removed a Mongol influence.[11]
―― Phoenix7777 (talk) 20:37, 16 February 2012 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

 Confirmed the following are Philip126, blocked, tagged:

14 May 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
  • Queenoftuf removed a Chinese influence.[12][13][14].
  • Vebertim1 edited the same edit as a blocked sockpuppet User:Spockblot.[15] and [16], [17] and [18] ―― Phoenix7777 (talk) 02:51, 14 May 2012 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

The following are  Likely matches to each other:

06 June 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

Islamisforme (talk · contribs) is a  Confirmed match plus the following:

Turkishpl (talk · contribs) is technically  Possible/ Likely. Elockid (Talk) 15:40, 6 June 2012 (UTC)[reply]

  • All blocked and tagged. There was enough to match on the last one even with one edit and some same CU info. --
    (ʞlɐʇ) 19:47, 6 June 2012 (UTC)[reply
    ]
26 August 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
―― Phoenix7777 (talk) 02:26, 26 August 2012 (UTC) ―― Phoenix7777 (talk) 02:26, 26 August 2012 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

 Confirmed plus:

Also,  IP blocked. Elockid (Talk) 02:46, 26 August 2012 (UTC)[reply]

information Administrator note All blocked and tagged. Jafeluv (talk) 11:51, 26 August 2012 (UTC)[reply]

23 September 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
―― Phoenix7777 (talk) 06:10, 23 September 2012 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
  • Qbbe (
    (ʞlɐʇ) 13:34, 23 September 2012 (UTC)[reply
    ]
08 October 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
―― Phoenix7777 (talk) 10:37, 8 October 2012 (UTC) ―― Phoenix7777 (talk) 10:37, 8 October 2012 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

The following are  Confirmed matches to each other and  Likely related to Philip126:

Vickjsda (talk · contribs) is highly  Likely related to the above. Elockid (Talk) 14:05, 8 October 2012 (UTC)[reply]

  • All accounts have been blocked indef. De728631 (talk) 15:16, 8 October 2012 (UTC)[reply]


11 October 2012
Suspected sockpuppets

Both accounts removed mentions of Japan and China on

Tristram's Woodpecker.  Looks like a duck to me. Klilidiplomus+Talk 19:57, 11 October 2012 (UTC)[reply
]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
  •  Clerk endorsed Added Amyflecher and endorsing, check for sleepers if you please, since this one is prolific. Just too many new users to be a coincidence. May go semi-protect those pages as well. Dennis Brown - 2¢ © Join WER 00:33, 12 October 2012 (UTC)[reply]
  •  Confirmed:
  • (ʞlɐʇ) 16:55, 12 October 2012 (UTC)[reply
    ]
05 December 2012
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.
―― Phoenix7777 (talk) 10:18, 5 December 2012 (UTC) ―― Phoenix7777 (talk) 10:18, 5 December 2012 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
  • Obvious sock is obvious.  Confirmed; IP given a brief block in the hopes of slowing them down. — Coren (talk) 13:59, 5 December 2012 (UTC)[reply]
  •  Clerk note: Sockpuppets blocked and tagged. Closed. Reaper Eternal (talk) 14:01, 5 December 2012 (UTC)[reply]
21 January 2013
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.


Please endorce the CheckUser in order to find other sleepers as the past CUs did.

―― Phoenix7777 (talk) 02:28, 21 January 2013 (UTC) ―― Phoenix7777 (talk) 02:28, 21 January 2013 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
​—DoRD (talk)​ 03:26, 21 January 2013 (UTC)[reply]
23 January 2013
Suspected sockpuppets


  • All users edit Korean articles. pro-Korea, anti-Japan and anti-China.
  • Similar editing style: All users hate foreign influence on Korea by removing the word or sentence related to China, Japan and so on.
  • All IPs used before were located in Queens, New York.

---

  • All the edits by 108.27.220.3 removed Japanese and Chinese word from articles the user edited.[31]
  • The user's location is Corona, Queens, New York City, NY.
―― Phoenix7777 (talk) 08:45, 23 January 2013 (UTC) ―― Phoenix7777 (talk) 08:45, 23 January 2013 (UTC)[reply]
Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
  • Blocked for a month. Maybe that will keep him from making more socks for a while. Someguy1221 (talk) 10:19, 23 January 2013 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/Philip126/Archive&oldid=1138677461"