Lilianarice

Lilianarice (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

30 July 2017

[edit]

(originally filed at Wikipedia:Sockpuppet investigations/Xingzuin)

Suspected sockpuppets

[edit]


Spamming the same ref[1][2]. Not sure if socks are just responding to the same job post. Doc James (talk · contribs · email) 17:11, 30 July 2017 (UTC)[reply]

Spam links
Another possible sock

Doc James (talk · contribs · email) 22:45, 2 August 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]
User:GeneralizationsAre the question is are there any more that are socks. Doc James (talk · contribs · email) 23:31, 30 July 2017 (UTC)[reply]
@Doc James: Ah, I see. Self-endorsed by clerk for checkuser attention. Thanks very much, GABgab 00:09, 31 July 2017 (UTC)[reply]

This case is being reviewed by Sro23 as part of the clerk training process. Please allow them to process the entire case without interference, and pose any questions or concerns either on their Talk page or on this page if more appropriate.

Yes, there is. Based on this edit, Robrobinno (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) should be a DUCK. Salvio is this a confirmed account?
 — Berean Hunter (talk) 02:42, 2 August 2017 (UTC)[reply]
User:Salvio giuliano checking and blocking. The pattern is that one account adds a spam link and then the second account quickly makes a minor edit to throw off the bots that deal with spamming. Appears to work. Likely all the links these accounts are adding need to be added to the blacklist. I must sleep but unless someone beats me to it will continue later. Doc James (talk · contribs · email) 15:36, 2 August 2017 (UTC)[reply]
 Blocked and tagged All the accounts and removed the spam. Listed a few affected articles at COIN. SmartSE (talk) 19:58, 2 August 2017 (UTC)[reply]
Blacklisted link local, no cross-wiki that I can see. Still looking at this...
 — Berean Hunter (talk) 20:41, 2 August 2017 (UTC)[reply]
User:Berean Hunter they are adding a variety of spam links. Will go through and create a list of the rest. Doc James (talk · contribs · email) 21:17, 2 August 2017 (UTC)[reply]

 Clerk note: The current status, all of the above are indeffed except:

...so I'm confused by SmartSE's all blocked and tagged comment above. This is important because the casename would be moved to the oldest account as the master and it is not currently blocked. Salvio did confirm the accounts. Looking for clarification.
 — Berean Hunter (talk) 21:07, 2 August 2017 (UTC)[reply]

All accounts now blocked indef and tagged. Checking spam links added by other accounts. Doc James (talk · contribs · email) 22:50, 2 August 2017 (UTC)[reply]
Woops. I definitely checked all the contribs... just must have missed some blocks and evidently the easyblock script was playing up on the last two as I definitely only clicked on confirmed socks. Thanks Berean Hunter for checking and User:Doc James for fixing it! SmartSE (talk) 12:10, 3 August 2017 (UTC)[reply]

New account created adding the same link aswell just before it was added to the blacklist.

They are still creating accounts and spamming. Gr Doc James (talk · contribs · email) 22:53, 2 August 2017 (UTC)[reply]

More accounts from the database:

Stale:

MER-C 03:05, 3 August 2017 (UTC)[reply]

24 August 2017

[edit]

(originally filed at Wikipedia:Sockpuppet investigations/Mrgrayzon)

Suspected sockpuppets

[edit]

See filter logs: Oliganobo and Mrgrayzon both created the same article on a software product perfectly on the first edit as brand new accounts.

Oliganobo additionally created it by a different name to avoid being tagged by the bot as an old AfD.

This has all the hallmarks of socking to include a commissioned article in the encyclopedia. Requesting CU to see if there are any other accounts out there. TonyBallioni (talk) 20:12, 24 August 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

16 October 2017

[edit]

(originally filed at Wikipedia:Sockpuppet investigations/Michakellies)

Suspected sockpuppets

[edit]

These users seem to be a cluster of spam accounts working to a pattern.

  1. Two word names which are run together without spacing or capitals,
  2. Undertake 12-ish inconsequential edits on articles sharing the same initial letter, Leannjoyce - N, Marriehudson - K, and Buckyloonion - J,
  3. Go to sleep until autoconfirmed kicks in,
  4. Create spam.

It seems to be a repeated pattern to game their way past ACTRIAL. The gaps in the initial letters used suggest there's an L spammer & an M spammer at the least, more likely more, and sleepers which have not yet been used for spam. Cabayi (talk) 15:19, 16 October 2017 (UTC)[reply]

Bucky & Leanne's spam overlap at BedJet (company) & BedJet.

Looking through the output from EF 867 found Pittdenloas on the letter U with spam at Major Food Group. Cabayi (talk) 15:52, 16 October 2017 (UTC)[reply]

Janicediscko on the letter W, spam at MySugr. Kellyhunggino on the letter Q, spam at O’Keefe Reinhard & Paul. Cabayi (talk) 16:28, 16 October 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I've added Karenswiss to the SPI. Similar MO: adding Wikilinks to random articles to get autoconfirmed [3] [4] and then creating an article perfectly in one edit. The naming pattern is also the same here for all the accounts: one full name with no spaces and where the last name is kept lowercase. TonyBallioni (talk) 15:44, 16 October 2017 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]

This case is being reviewed by Sir Sputnik as part of the clerk training process. Please allow them to process the entire case without interference, and pose any questions or concerns either on their Talk page or on this page if more appropriate.

​—DoRD (talk)​ 17:40, 16 October 2017 (UTC)[reply]

24 October 2017

[edit]

(originally filed at Wikipedia:Sockpuppet investigations/Michakellies)

Suspected sockpuppets

[edit]

Creation of Jū-Ni (restaurant), which master/sock uploaded and crossover with Leannjoyce here, here and [5] also follows same naming pattern. CHRISSYMAD ❯❯❯¯\_(ツ)_/¯ 15:47, 24 October 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

This case is being reviewed by Sir Sputnik as part of the clerk training process. Please allow them to process the entire case without interference, and pose any questions or concerns either on their Talk page or on this page if more appropriate.

25 October 2017

[edit]

(originally filed at Wikipedia:Sockpuppet investigations/Mrgrayzon)

Suspected sockpuppets

[edit]


Lilianarice has disclosed that they are "managing" WP editing projects. Although activity on this account halted after November 2014, off-wiki evidence exists that as of today, they are still offering paid WP article editing. This account Oliganobo has recently attempted to recreate one of Lilianrice's deleted articles, Avaza (software) as Avaza Software. Realizing that CU data is out of scope, consider this a request for procedural WP:DUCK linkage of the accounts based on the off-wiki stuff. Doc James and WMF Legal are aware of the contents of the off-wiki info. ☆ Bri (talk) 17:27, 25 October 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

This case is being reviewed by Sir Sputnik as part of the clerk training process. Please allow them to process the entire case without interference, and pose any questions or concerns either on their Talk page or on this page if more appropriate.

 Done - I have merged all three cases and moved to the name of the oldest account which I'm considering proven based on behaviour, however per Rob's note above I have not blocked the master account. I've re-tagged all of the accounts that had been tagged previously, as well as re-tagged the former masters, but have not blocked or tagged any other accounts. I'm leaving this as "checked" in case I missed anything, but don't hold on my account. Ivanvector (Talk/Edits) 15:15, 30 October 2017 (UTC)[reply]
@Ivanvector: You can definitely block the master. I just wasn't interested myself in looking at the behavioral links because of how old the account was. If you've already done so, no point leaving it unblocked. ~ Rob13Talk 16:22, 30 October 2017 (UTC)[reply]

09 November 2017

[edit]

Suspected sockpuppets

[edit]

Recreation of Richard’s Foodporium, one of many variations of Richard’s Foodporium (food retailer) etc... plus follows same naming convention. CHRISSYMAD ❯❯❯¯\_(ツ)_/¯ 13:25, 9 November 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

This case is being reviewed by Sir Sputnik as part of the clerk training process. Please allow them to process the entire case without interference, and pose any questions or concerns either on their Talk page or on this page if more appropriate.

04 December 2017

[edit]

Suspected sockpuppets

[edit]

Behaviour very reminiscent of Wikipedia:Sockpuppet investigations/Lilianarice/Archive#16 October 2017, multiple inconsequential edits on articles with same initial letter to acquire autoconfirmed, followed by spamming. Request CU because of use of multiple socks & sleepers previously. Cabayi (talk) 13:54, 4 December 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

25 January 2018

[edit]

Suspected sockpuppets

[edit]

Autoconfirmed gaming to upload images using similar methods to this sock farm. Initial creation is perfectly formatted and includes maintenance banners, suggesting that it has been created as an article before. Also, note the company name in parenthesis and the formatting choices, which are methods used by UPE farms to throw off Special:Undelete (to the point I can't find the original source). These are methods used by this farm in the past. Additionally, the username format is almost identical to this farm's name of choice.

Asking for CU mainly for a sleeper check given how large this farm is: there might be some non-stale confirmeds, but unsure. The account is probably DUCKable on its own. TonyBallioni (talk) 23:36, 25 January 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

11 March 2018

[edit]

Suspected sockpuppets

[edit]

Recreation of Jū-Ni (Japanese restaurant), which is a clear sign of this farm, along with the similarities of autoconfirmed gaming. Requesting CU for sleepers. I've duck blocked, and think the behavioral evidence is strong enough regardless of the CU findings, but CU would be helpful to see what else is out there. TonyBallioni (talk) 15:50, 11 March 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

22 June 2018

[edit]

Suspected sockpuppets

[edit]

Created Avaza (company) (one of the clients of this farm). Other behavioral similarities to this farm that makes it a proven sock. Already blocked by Smartse for spamming. Asking for CU for sleepers. TonyBallioni (talk) 13:48, 22 June 2018 (UTC)[reply]

Also added Leonakarlis for creating Richard's Foodporium, one this firms other clients. Blocked and also likely stale, but adding for the record. TonyBallioni (talk) 13:55, 22 June 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

This case is  Stale. Closing.--Bbb23 (talk) 14:41, 22 June 2018 (UTC)[reply]

@TonyBallioni: I don't run a check to look for other accounts based on only one account.--Bbb23 (talk) 15:28, 22 June 2018 (UTC)[reply]
More