Joanna Gunadi (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Suspected sockpuppets

• Jenna Malkovich (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 139.192.40.108 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

Joanna Gunadi and Jenna Malkovich have 80 articles where their contributions overlap. There is little doubt that they are the same user. Joanna was blocked by Diannaa for copyright violations, and Jenna was blocked by the same admin as a sock; Jenna's account was created before Joanna was blocked. JohninDC has opened a CCI for Joanna.

Diffs:

• 139.192.40.108 removes part of the copyvio template at Audi Marissa, created by Joanna Gunadi
• one minute later, Jenna removes the rest of it

• Jenna re-adds to Cita Citata material removed as copyvio, previously added by Joanna; she did the same at Haji Backpacker, but the diffs have been revdeleted so I can't provide them.

Check user is requested to locate any other sleeper accounts that need to be added to the CCI. There seem to be a lot of IPs involved too, but I assume it's no good asking for those to be checked. Justlettersandnumbers (talk) 00:13, 9 November 2015 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
There appear to be several IPs in the same range making similar edits. I haven't undertaken anything systematic, but in reviewing for copyvios, noticed these two (which are pretty stale now BTW): Special:Contributions/139.195.169.225; Special:Contributions/139.192.40.92. JohnInDC (talk) 02:45, 9 November 2015 (UTC)[reply]

• Joanna Gunadi (talk · contribs · count) and Jenna Malkovich (talk · contribs · count) are  Confirmed. Tagged.  No sleepers immediately visible.--Bbb23 (talk) 04:56, 9 November 2015 (UTC)[reply]

• Willy2000 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Naurabubbletea (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 61.94.157.77 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 125.161.62.123 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 111.94.101.204 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 36.70.152.129 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 36.70.157.255 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 36.70.155.5 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))

• User compare report Auto-generated every hour.
• Editor interaction utility

Duck: Willy2000 (currently blocked for abusive recreation of AFD'd articles), has significant edits on articles created by blocked sock Special:Contributions/Terry Shelton: [1], [2], [3], [4], [5], [6], [7], [8], [9], [10], [11], [12]. I can't see a linked talk page to show the original creator of Koala Kumal (film), which Willy2000 was blocked for repeatedly recreating, but I'm willing to bet it was a blocked sock of this puppeteer. Wikishovel (talk) 14:38, 1 January 2017 (UTC)[reply]

Duck: Naurabubbletea only edits were to Naura (singer), created by blocked sock User:Terry Shelton. Wikishovel (talk) 15:30, 1 January 2017 (UTC)[reply]

Block-evading IPs: IP 61.94.157.77, 125.161.62.123, 111.94.101.204, 36.70.152.129, 36.70.157.255 and 36.70.155.5 have almost exclusively edited articles created by puppeteer or her blocked sockpuppets User:Terry Shelton and User:Jenna Malkovich. Wikishovel (talk) 14:36, 1 January 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. Please add 111.94.102.247 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log)) to the investigation. Considerable overlap with the master. Also, if possible, please include the creator of Audi Marissa (second creation) and Aurel Hermansyah – I don't have the powers that would allow me to see who that was. The first version of Audi Marissa was created by the master, deleted by Moonriddengirl. This is apparently very widespread socking/block evasion; a possible example is the almost immediate restoration by 139.192.19.20 in this article created by the master of material removed by Diannaa. Thank you, Justlettersandnumbers (talk) 20:43, 1 January 2017 (UTC)[reply]

@Justlettersandnumbers: the creator of those two articles was User:Terry Shelton. I tagged both for G5 deletion today: please see WP:Sockpuppet investigations/Terry Shelton for more info, as it hasn't been merged here yet. Wikishovel (talk) 20:52, 1 January 2017 (UTC)[reply]

• I looked at both of these accounts as part of my previous investigation but found insufficient evidence to justify sock blocks based on behavior alone. Requesting CU to compare the above two accounts to the recent sock Terry Shelton. I haven't examined the IPs yet, but chances are most will be stale. ~ Rob₁₃^Talk 19:18, 1 January 2017 (UTC)[reply]
• Willy2000 and Naurabubbletea are  Unrelated to each other and to Terry Shelton. Terry Shelton is  Likely to the master.--Bbb23 (talk) 20:54, 1 January 2017 (UTC)[reply]
• @Wikishovel: With the unrelated CU result, I don't find enough behavioral evidence to block either named account. There are some coincidences on topic area similarities and overlap, but my gut and some substantial behavioral differences are telling me that these are different people. In particular, Willy2000 has much broader participation than the narrow topic area of the master. As for the IPs, many are probably the master, but they're all stale (no activity since early December). Please only report IPs that have been active in the past week or so or an IP range if its been consistently active over a considerable period of time (several weeks) with IPs rapidly changing within the range. I did block one recently active IP for block evasion during my earlier investigation. ~ Rob₁₃^Talk 00:14, 2 January 2017 (UTC)[reply]

• Terry Shelton (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 111.94.115.22 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• User compare report Auto-generated every hour.
• Editor interaction utility

IP 111.94.115.22 removed the AfD template twice from Hi5teria. The same IP linked to a variant spelling of the film in Imelda Therinne [13], and Tara Basro [14]. Some minutes later, Puppeteer User:Terry Shelton created the new target of that link change, the duplicate article Histeria (Indonesian film) [15] . IP 111.94.115.22 had already edited both Hi5teria and the two actor articles, so it's impossible that the editor(s) involved that didn't know this article already existed. This is an evident attempt to fork the article and evade the AFD. After three warnings for removing the db-a10 tag from Histeria (Indonesian film), IP editor posted at Talk:Histeria (Indonesian film): [16] "This article should not be speedy deleted as being recently created, having no relevant page history and duplicating an existing English Wikipedia topic, because this is truth wikipedia and not making lie to people in the world" Wikishovel (talk) 17:07, 27 October 2016 (UTC)[reply]

Also worth noting that I warned the puppeteer about editing while logged out [17], prior to further sock edits by the IP: [18], etc. An hour after the warning, sock's only response was to blank the talk page [19]. Wikishovel (talk) 19:32, 27 October 2016 (UTC)[reply]

• @BU Rob13:: per your comments below, I've gone through Terry Shelton's contributions. What a mighty pile of shite, but it's now all either deleted or tagged G5. I've added a few more probable socks to the Joanna Gunadi SPI. Nice work on the editing behaviour investigations! And now, I'm going to go have a little lie down. :-) Happy New Year! Wikishovel (talk) 16:50, 1 January 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

That blank by the IP at the end, if anything. Quack Quack ? Or am I confusing which page the IP blanked? MM (WhatIDo WHATIDO?) ^{(Now THIS... I did.)} 20:05, 9 November 2016 (UTC)[reply]

•  Check declined by a checkuser - We will not publicly disclose or link an IP address with a registered account. Katie^talk 17:13, 27 October 2016 (UTC)[reply]
  • The IP is well stale at this point, but I'm blocking Terry Shelton indefinitely as a sock of Joanna Gunadi. The IP's contributions are almost exclusively related to articles created be either Terry or Joanna, which caused me to look into more direct connections between the two. Terry and Joanna have similar style of usernames (first and last names). Their topic areas are identical. They both create substantial amounts of content in the form of new articles in highly similar topic areas, and they create generally complete articles. Please note that it appears this latest Joanna sock is being used almost exclusively for page creations, with additional edits conducted via several IPs in order to evade scrutiny. They appear to operate exclusively on the 111.94.0.0/16 range. I haven't put any effort into narrowing that range down further, but it may be considerably more narrow than that.  Clerk assistance requested: Please merge this case with Wikipedia:Sockpuppet investigations/Joanna Gunadi. ~ Rob₁₃^Talk 09:39, 1 January 2017 (UTC)[reply]
    • As additional evidence, Audi Marissa and Tarra Budiman were both created originally by Joanna, deleted, and then re-created by Terry. I'm not going through them now, but the article creations of Terry should be gone through comprehensively and nominated for WP:G5 as appropriate. Pinging the filer, Wikishovel, in case they want to take on that task. ~ Rob₁₃^Talk 09:45, 1 January 2017 (UTC)[reply]
      •  Done. Merged and closed. Vanjagenije (talk) 00:05, 2 January 2017 (UTC)[reply]

• Mappase (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

After 2 years of complete inactivity, account suddenly awakens today and quickly recreates a whole batch of articles deleted yesterday G5: 16th Annual Panasonic Gobel Awards (deleted twice today G3 and G2), 17th Annual Panasonic Gobel Awards (deleted twice today G3 and G2), 19th Annual Anugerah Musik Indonesia (deleted A1/G2), 2016 Dahsyatnya Awards (deleted A1/G2), Repvblik, and RAN (Indonesian group). Wikishovel (talk) 08:37, 2 January 2017 (UTC)[reply]

Correction about the article RAN (Indonesian group) mentioned above: one of Mappase's first edits today wasn't to recreate it, but rather to replace the existing article created by User:Terry Shelton, along with the G5 tag, with an empty article consisting only of the flag of Luxembourg: [20] This was then speedied by another editor, and then completely rewritten as a good new article, with new references by a third editor. At this point it obviously can't be speedied G5 anymore, but the behaviour by Mappase is still of interest here. Wikishovel (talk) 15:50, 2 January 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Clerk endorsed. Please, compare to the above accounts. Vanjagenije (talk) 10:00, 2 January 2017 (UTC)[reply]
• Mappase is  Confirmed to Willy2000 (talk · contribs · count).--Bbb23 (talk) 15:47, 2 January 2017 (UTC)[reply]
  • Both indeffed. Case closed. Vanjagenije (talk) 17:12, 2 January 2017 (UTC)[reply]
    • @Vanjagenije: I would not have tagged the two accounts as suspected puppets of Joanna Gunadi. You can leave it that way, but, if so, I would appreciate it that you would make an express finding that the behavioral evidence is sufficiently persuasive to override the technical. Thanks.--Bbb23 (talk) 18:53, 2 January 2017 (UTC)[reply]
      • @Bbb23: Above, BU Rob13 wrote I'm blocking Terry Shelton indefinitely as a sock of Joanna Gunadi. And, Mappase recreated article created by Terry Shelton, Isn't that a connection? Vanjagenije (talk) 18:59, 2 January 2017 (UTC)[reply]
        • @Vanjagenije: I found Terry Shelton to be likely to the master, so it makes sense to block the account. I found Willy2000 to be unrelated. I didn't say there wasn't a connection. If there hadn't been some behavioral evidence in the first instance, I wouldn't have checked. That said, to override an unrelated finding, there has to be very strong behavioral evidence. It's not the same quantum of evidence needed without such a finding.--Bbb23 (talk) 19:04, 2 January 2017 (UTC)[reply]
          • @Bbb23: Sorry, but I don't get it. (a) Terry Shelton was blocked as a sock of Joanna Gunadi and you agree with that (it makes sense to block the account). (b) There is very strong behavioral connection between Mappase and Terry Shelton. Mappase recreated a deleted article that was previously created by Terry Shelton (see [21] vs. [22]). So, why can't I say at least that Mappase is a "suspected" sock of Joanna Gunadi? Vanjagenije (talk) 19:17, 2 January 2017 (UTC)[reply]

• Teddy Bear (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Duck: Teddy Bear's first edit was to request page protection for recently G5'd articles: [23], [24], knowledgeably naming a blocked sock in both requests. Goes straight on to recreate a pile of just-g5'd articles from puppeteer:

• Explore! (Isyana Sarasvati album)
• 18th Annual Panasonic Gobel Awards
• 19th Annual Panasonic Gobel Awards
• 17th Annual Panasonic Gobel Awards
• Moments (Maudy Ayunda album)
• Monita Tahalea
• Handmade (Raisa album)
• Bondan Prakoso & Fade 2 Black
• Bangkit!
• 2016 Dahsyatnya Awards
• Monokrom
• Teza Sumendra
• Judika (singer)
• Kunto Aji
• Virzha
• Armand Maulana
• Seperti Magic
• Best of Ayu Ting Ting
• Sammy Simorangkir
• Gamaliel Audrey Cantika

...mostly as redirects, which his sock IPs can then fill in at their leisure. Editor then moves on to 2006 FIFA World Cup broadcasting rights and 2018 FIFA World Cup broadcasting rights: [25], [26], favourite topics of blocked sock User:Willy2000. Wikishovel (talk) 20:26, 5 January 2017 (UTC)[reply]

Today editor moved on to List of FIFA World Cup broadcasters, again heavy overlap with Willy2000, then recreated more G5'd articles by this puppeteer:

• Sides (Afgan album)
• HIVI!.     Wikishovel (talk) 07:48, 6 January 2017 (UTC)[reply]
• Comic 8: Casino Kings Part 1
• Comic 8: Casino Kings Part 2
• Rahasia Cinta (Kahitna album)
• 16th Annual Anugerah Musik Indonesia    Wikishovel (talk) 17:24, 6 January 2017 (UTC)[reply]

It's pretty hard to imagine a circumstance under which a innocent novitiate would, upon their arrival at Wikipedia, zero in on a lengthy series of G5'd articles and recreate them seriatim. Obviously a sock. The editor should be blocked, the pages deleted (again) and the pages salted. JohnInDC (talk) 21:37, 5 January 2017 (UTC)[reply]

• Probably worth noting that I tagged several of User:Teddy Bear's new articles for deletion and in the last 15 minutes they have deleted the CSD tags. Chrissymad ❯❯❯ ¯\_(ツ)_/¯

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Already blocked. Case closed. Vanjagenije (talk) 23:03, 6 January 2017 (UTC)[reply]

• Nasriya (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Omri rt (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

Another possible sockpuppet, who appeared just today and whose only contribution is this request on WP:REFUND to restore an article (deleted earlier today) that was created by User:Willy2000, a confirmed sock of Joanna Gunadi. ~Anachronist (talk) 06:13, 8 January 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• User began to remove speedy tags from articles where the one of his socks (User:Willy2000) have created. Diffs: [27], [28], [29], [30]. Stylez995 (talk) 11:58, 8 January 2017 (UTC)[reply]

Also [31] --Anthony Bradbury^"talk" 12:21, 8 January 2017 (UTC)[reply]

Adding User:Omri rt. Only edits by this user so far are at Draft:Tamar Rachum, on which he/she has been almost the sole editor, but in this edit at User:Sphilbrick's talk page, blocked sock account Nasriya requests restoration of the draft article, which the day before had the db-g13 tag removed by Sphilbrick, immediately following similar request by Omri rt in this edit. It's possible that the blocked sock simply copied and pasted another editor's request and forgot to change the article title, so a CU might shed some light. Wikishovel (talk) 13:28, 8 January 2017 (UTC)[reply]

Omri rt's Talk page here reflects copyvio concerns about the draft article that was just restored. The original socks here were notable for their extensive copyvios, lending further behavioral support to the likely sock puppetry here. JohnInDC (talk) 14:15, 8 January 2017 (UTC)[reply]

FYI, I acceded to the request of Omri rt, not realizing the connection to the sock master but I've declined to do the restoration requested by Nasriya. --S Philbrick(Talk) 18:23, 8 January 2017 (UTC)[reply]

After reviewing Draft:Tamar Rachum in light of this page, I have deleted the draft as a copyvio.--S Philbrick(Talk) 18:26, 8 January 2017 (UTC)[reply]

 In progress. A point of clarification: Willy2000 is not a confirmed sock of Joanna Gunadi.--Bbb23 (talk) 23:53, 8 January 2017 (UTC)[reply]

• Nasriya is  Confirmed to Mappase. Omri rt is very  Likely Mappase. It would be confirmed except they are using an IP I believe hides their true location. Blocked Omri rt without tags.--Bbb23 (talk) 00:12, 9 January 2017 (UTC)[reply]
• Tagged, closing. GAB^gab 00:36, 9 January 2017 (UTC)[reply]

• Luis Angel (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Not one but 4 (!!!) JG recreations...and possibly more!

• Comic 8: Casino Kings Part 2
• Comic 8: Casino Kings Part 1
• Bangkit!
• Monokrom Chrissymad ❯❯❯ ¯\_(ツ)_/¯ 23:56, 25 February 2017 (UTC)[reply]

And strangely enough several creations by other socks...

• 2020 UEFA European Under-19 Championship by FallandSpringOlympics
• 2019 UEFA European Under-19 Championship by FallandSpringOlympics
• Judika (singer) by Teddy Bear
• Handmade (Raisa album) by Teddy Bear and Joanna Gunadi
• Moments (Maudy Ayunda album) by Teddy Bear/Joanna Gunadi
• Kunto Aji by Joanna Gunadi
• Sangia Nibandera Airport by a sock
• 16th Annual Anugerah Musik Indonesia by Joanna Gunadi

And the list continues.... Chrissymad ❯❯❯ ¯\_(ツ)_/¯ 00:12, 26 February 2017 (UTC)[reply]

• Rahasia Cinta (Kahitna album) and the list keeps growing....
• HIVI!
• Untuk Rena
• Eugène Afrika
• Teza Sumendra
• Eva Celia
• Heart to Heart (Raisa album)
• Generation Y (Kunto Aji album)
• Trio Lestari

And now this request for undeletion of a G5'd article...

And the new icing on the cake is almost identical to Willy's addition to the same article. Chrissymad ❯❯❯ ¯\_(ツ)_/¯ 01:18, 26 February 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

The archive here affords a handy set of wikilinks that shows quite quickly which of the many sock puppet pages have been recently recreated. Several of the prior pages are blue now, and were created by the puppet being reported here. JohnInDC (talk) 03:08, 26 February 2017 (UTC)[reply]

• Blocked, closing. GAB^gab 15:57, 27 February 2017 (UTC)[reply]

• Adelina Arsova (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

I came across this user at WP:REFUND, where they're making a ton of requests - all for pages that were created by Terry Shelton, a sock of Joanna Gunadi. It seems a little suspicious that they're asking for these pages, given that they've all be G5'd. They've also made edits to European sports pages, which seems to be something that the Gunadi socks like to do. It just seems unlikely that they would sign up and, after making only a few edits, make a ton of requests for G5'd articles. Tokyogirl79 (｡◕‿◕｡) 10:19, 4 March 2017 (UTC)[reply]

• I also note that this account was created on 7:53, 26 February 2017, only a few hours after the last known sockpuppet (Luis Angel) was blocked on 2:12, 26 February 2017. Tokyogirl79 (｡◕‿◕｡) 10:24, 4 March 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

This one's pretty obvious. There's no "coincidence" that can explain this. JohnInDC (talk) 19:36, 4 March 2017 (UTC)[reply]

• They've requested another page that was deleted due to sockpuppetry and they've restored a redirect created by Luis Angel. I'd recommend a cursory sweep for any sleepers, but I'm going to go ahead and block this user since they're quacking quite loudly. I was willing to give them the benefit of the doubt, but this seems too obvious now. Tokyogirl79 (｡◕‿◕｡) 09:59, 6 March 2017 (UTC)[reply]

• Already blocked. Case closed. Vanjagenije (talk) 11:43, 6 March 2017 (UTC)[reply]

• Levan Kemoklidze (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

This user came to notice after they made this request at DRV, claiming that several speedy deletions were improperly done. A look at the deleted pages (Catatan Akhir Sekolah, 2016 Dahsyatnya Awards, The Voice Kids Indonesia, Emak Ingin Naik Haji, ILY from 38,000 FT) shows that they were all created by known Gunadi socks and all after the main account was blocked, so they were all valid deletions. (I myself deleted one of them!) They seem to have a fairly good awareness of Wikipedia policy despite being a very new user and a look at their edits shows that they have edited at least one of the same articles that Willy2000 did, List of cigarette brands.

I'm going to block them, but I would recommend doing a sweep for any sleeper accounts just to make sure. Tokyogirl79 (｡◕‿◕｡) 07:32, 23 March 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Already blocked. Case closed. Vanjagenije (talk) 17:14, 25 March 2017 (UTC)[reply]

• Jiang Wu (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Quack, quack, quack. There's probably more quacking in deleted contribs, but you get the idea. CHRISSYMAD ❯❯❯¯\_(ツ)_/¯ 16:38, 25 March 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Blocked and tagged Primefac (talk) 16:40, 25 March 2017 (UTC)[reply]
  • Already blocked. Case closed. Vanjagenije (talk) 17:14, 25 March 2017 (UTC)[reply]

• Jordi Rossell (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

First immediate contribution is to appeal a deletion of Adhitia Sofyan which has been G5'd twice now and none of it suggests anything else, certainly not that such a seemingly new user comes back to a repeatedly deleted article, and, next, starts new article links. Not only starting the same letter, but it's the same subject field. SwisterTwister talk 03:33, 28 March 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Account blocked. No explanation why a CU is needed. Closing.--Bbb23 (talk) 21:12, 28 March 2017 (UTC)[reply]

• Andranik Mkhitaryan (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

Andranik Mkhitaryan is a relatively new account who has appeared on WP:REFUND to request undeletion of a number of articles written by socks of Joanna Gunadi. Also created a DRV record Wikipedia:Deletion review/Log/2017 April 18#Natasha_Wilona contesting the deletion of articles by the same sockpuppet. The focus on these articles suggests a possible connection. Also, the editor has made several contributions to Euro sports pages, which seems to be a characteristic of these socks. ~Anachronist (talk) 07:39, 18 April 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Confirmed to Mappase (talk · contribs · count). Blocked.--Bbb23 (talk) 20:29, 19 April 2017 (UTC)[reply]

• Tagging and closing. Vanjagenije (talk) 22:29, 19 April 2017 (UTC)[reply]

• Mateja Stankovic (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

This editor inserted an unusual, harmless-seeming edit at Fix You but when I was reverting it, I noticed User talk:JohnInDC had previously reverted someone else with a summary reading "per WP:DENY." That person was User talk:Andranik Mkhitaryan, a confirmed sock of User:Mappase, who is in turn a suspected sock of Joanna Gunadi. Mkhitaryan's three edits combined were exactly the same as the one Mateja Stankovic tried to add a few days later. CityOfSilver 23:58, 22 April 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Confirmed to Mappase (talk · contribs · count). Blocked.--Bbb23 (talk) 00:22, 23 April 2017 (UTC)[reply]

• Tagging and closing. Vanjagenije (talk) 08:29, 23 April 2017 (UTC)[reply]

• Conflictoreditor (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

New account whose first activity was to file several WP:REFUND requests as per the MO of several previous JG socks. A couple of these articles had been G5'd as creations of other sockmasters (in this case AwardPunjabi and Amitbhb12), also in the manner of some other socks. --Finngall ^talk 14:30, 28 April 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Unrelated.--Bbb23 (talk) 18:18, 20 May 2017 (UTC)[reply]

• Case closed. Vanjagenije (talk) 15:37, 28 May 2017 (UTC)[reply]

• Johnson Harditz (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Recreation of Eva Celia and creation of 4th Indonesian Choice Awards which focuses on other JG creations such as Armand Maulana, Handmade (Raisa album), Monokrom, Gamaliel Audrey Cantika, Vino G. Bastian, Mata Najwa. CHRISSYMAD ❯❯❯¯\_(ツ)_/¯ 18:02, 24 May 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Unlikely.--Bbb23 (talk) 19:46, 24 May 2017 (UTC)[reply]

Closing because of inaction.--Bbb23 (talk) 13:59, 11 June 2017 (UTC)[reply]

• Spas Minev (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Recreation of Gamaliel Audrey Cantika, which has been G5'd three times already. Primefac (talk) 20:01, 19 September 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I'll note that the alleged sock isn't an entirely new account, it's been pretty active on Wikipedia for almost half a year now, seems mostly constructive as far as I can tell. ~Anachronist (talk) 21:46, 19 September 2017 (UTC)[reply]

• Everything in the archive is stale. There are multiple article recreations from that master. Here are a few of examples beyond the one above. Special:Undelete/Sangia_Nibandera_Airport, Special:Undelete/Trio_Lestari, Special:Undelete/Didi_Kempot. Indeffing, tagging and closing.
   — Berean Hunter (talk) 17:14, 25 September 2017 (UTC)[reply]

• Andrus Saar (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Re-addition of identical material to article (Special:Diff/802892804). Recreation of Gamaliel Audrey Cantika. Primefac (talk) 01:18, 30 September 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Blocked but awaiting tags Primefac (talk) 01:18, 30 September 2017 (UTC)[reply]
• Tagging and closing. Vanjagenije (talk) 19:02, 30 September 2017 (UTC)[reply]

• Mohamed Maaloul (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

User removed a chunk of archive links in 2010 FIFA World Cup broadcasting rights, just weeks after another sock did the same thing before getting blocked. Most of the disruption is related to random Asian and European Association football content, mostly related to Indonesia and Russia. jd22292 (Jalen D. Folf) (talk) 02:55, 19 October 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Sounds like a duck quacking into a megaphone to me.  Blocked and tagged. Primefac (talk) 11:22, 19 October 2017 (UTC)[reply]

• Johnson Harditz (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Quack quack, and there's a bunch of other page creations in their contributions. jd22292 (Jalen D. Folf) (talk) 06:39, 20 October 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Blocked and tagged. Requesting a CU because this is clearly a sleeper. Primefac (talk) 12:35, 20 October 2017 (UTC)[reply]
•  No sleepers immediately visible, and they're on a different set of ranges than the last sock in the archive. ​—DoRD (talk)​ 14:12, 20 October 2017 (UTC)[reply]
• Closing. GAB^gab 14:36, 20 October 2017 (UTC)[reply]

• Alfred Gonzalez (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

One of the first things this user does is request creation of subjects previous socks of the master also requested, i.e. Ildikó Zelinka, which Mohamed Maaloul previously requested before that sock's block. Requesting CU for sleepers. jd22292 (Jalen D. Folf) (talk • contribs) 14:45, 7 November 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I am not sockpuppet. I am contributing for WP:SPORTS. Alfred Gonzalez (talk) 02:12, 8 November 2017 (UTC)[reply]

This case is being reviewed by Sir Sputnik as part of the clerk training process. Please allow them to process the entire case without interference, and pose any questions or concerns either on their Talk page or on this page if more appropriate.

•  Clerk endorsed - Given the peculiar interest in requested articles by nationality, please check to confirm sockpuppetry. Sir Sputnik (talk) 17:22, 9 November 2017 (UTC)[reply]
•  Confirmed to each other:
• Alfred Gonzalez (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Mohamed Maaloul (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

•  Possible to the above:
• Arijansumanti (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Dalton Hunter (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
   — Berean Hunter (talk) 13:00, 10 November 2017 (UTC)[reply]
• I'm seeing enough behavioural differences to conclude that the two possible accounts are not connected to Joanna. Closing. Sir Sputnik (talk) 16:45, 10 November 2017 (UTC)[reply]

• James Sohapie (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Recreated Armada (Indonesian band), Armand Maulana, Payung Teduh, GAC (Indonesian group) (previously Gamaliel Audrey Cantika favorites of JG socks + username similarity. Crossover here too. This may be worth a quick sweep as well since it appears several throw away accounts edited along side James or moved it into main space.

tl;dr I can barely find anything that doesn't overlap with this master/socks. CHRISSYMAD ❯❯❯¯\_(ツ)_/¯ 13:54, 26 February 2018 (UTC)[reply]

111.94.115.163 (talk · contribs · WHOIS) appears to be a duck as well. CHRISSYMAD ❯❯❯¯\_(ツ)_/¯ 14:58, 26 February 2018 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• The account is  Blocked and tagged. IP blocked for a week. Closing. TonyBallioni (talk) 13:03, 27 February 2018 (UTC)[reply]

• LolaKWA (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• YondA04 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• YondA Forgot Pass (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Lullabian (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• HelenaSW (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Though the naming pattern is quite a bit different these appear to be a set of throw away accounts that have popped up in what I can only imagine is an attempt to avoid G5 deletions (ie. substantial edits by other editors) as soon after the last sock created several articles, these accounts pop up and add a significant amount of content and only seem to follow the JG socks around.

• YondA04, 112.215.175.100, 203.78.119.146, 203.78.119.214 all pop up to edit GAC (Indonesian group) immediately following James' creation. Their only edits are to JG creations.
• YondA04 and YondA Forgot Pass show up together following JS' creation of Virgoun along with 111.94.7.6.

• LolaKWA shows up to Payung Teduh with 112.215.245.137 just after JS' and past JG socks' creations. Only edits are primarily to JS' articles.

• Lullabian and HelenaSW appear to be throwaway accounts that show up to Armada (Indonesian band) just after creation and only have edits to this article.

And this list of ips all crossover in the same manner as I point out above: 203.78.119.146, 112.215.174.89, 112.215.175.18, 112.215.175.182, 203.78.119.32, 112.215.174.199, 139.0.151.190. All of these IPs geolocate to the same place and provider (except one.)

I realize the IPs can't be connected and there's a possibility the named accounts aren't direct JG socks but it's fairly obvious that this is a massive case of at least meat puppetry. CHRISSYMAD ❯❯❯¯\_(ツ)_/¯ 14:55, 27 February 2018 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Taken from multiple ranges
•  Technically indistinguishable:
• Johnson Harditz (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• James Sohapie (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

•  Confirmed to each other and  Likely to above:
• Ricky Ro (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• NathOskn (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Gollumshape (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Lullabian (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• LolaKWA (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• HelenaSW (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• AzkaPtr (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• YondA04 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• YondA Forgot Pass (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Etherloss Forgot Pass (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Etherloss (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• KaylaPR (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• JoeyLo (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Well71Done (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• LaBelleRos (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

•  Confirmed and  Possible to above:
• GregJoe09 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Arobertodd (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

•  Possible (UA matches but use different IPs in same ranges):
• Yogi33WP (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Perchgoofy (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Saqq43ir (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

•  Possible:
• Andira PA (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) (Different UA but same range) (Agnez Mo and related awards article are key targets for many socks in this case that are logging out to edit anon)

• Zhang26 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) is possible to James Sohapie

•  Technically indistinguishable to each other:
• Sarahjohnsons (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Zakkiyahakeem (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

•  Possible and share multiple IP ranges:
• Petewarrior (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
   — Berean Hunter (talk) 19:48, 27 February 2018 (UTC)[reply]
• I've blocked all but the  Possible candidates, will wait for a clerk to comment on the appropriateness of blocking those. Blocked accounts are still awaiting tags. Primefac (talk) 20:01, 27 February 2018 (UTC)[reply]
• Blocked the unblocked possible accounts except Petewarrior who does not appear to be related behaviourally, and is also a much older account. Tagging and closing. Ivanvector (^Talk/_Edits) 16:18, 29 April 2018 (UTC)[reply]