Shuppiluliuma (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Prior SSP or RFCU cases may exist for this user:

• Suspected sock puppets/Shuppiluliuma
• Suspected sock puppets/Shuppiluliuma (1st)

• Requests for checkuser/Case/Shuppiluliuma

Suspected sockpuppets

• Shiham K (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Hekatonesos (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Truthspeaks11 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 78.40.231.225 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 85.153.27.4 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Gilokalentel (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Evidence submitted by Hiberniantears

For background, this is the most helpful of the previous cases to read through: Wikipedia:Requests for checkuser/Case/Shuppiluliuma last year.

This time through, I blocked Shiham K as an obvious sock, but requesting a CU for all underlying IP ranges. Currently appears to be editing from 85.153.27.4 and the associated range out of Istanbul. I have previously blocked an IP range out of Milan, Italy, and could greatly benefit from a comprehensive look at this editor's IPs.

Additionally, I blocked User:Hekatonesos as another obvious sock, and suspect that User:Truthspeaks11 is probably him as well. For a little additional background, Shuppiluliuma edits from dynamic IPs, and has created at least dozens of sleeper accounts over the years. I'm looking for multiple IP ranges that can be blocked, and a list of sleeper accounts.

In fairness, whoever this guy is, he makes a fair number of helpful contributions. However, every couple of months he goes off the rails and starts antagonizing other editors at pages generally related to Turkey. This has now been going on for years (in fact, my initial run in with him back in Spring 2007 killed my first attempt at RfA). Lately, I have been giving him space so long as he behaves, and because chasing his socks around is a bit like a dog chasing its tail. In the case of Shiham, I was fairly certain all along that it was Shuppiluliuma from day 1, but let him be until another administrator reached out to me for my opinion on whether it was him or not. When he began an edit war this week over an image of Turkish money, I blocked him, but as you can see from the growing list above, he hasn't really missed a beat. Because of the number of sleeper accounts and IPs from different ranges that Shuppiluliuma uses, it is very difficult to regularly keep an eye out for him as the pages he edits already tend to have many editors of various nationalist POVs. My request for a very thorough CU here is aimed at avoiding mistakenly identifying innocent editors making newbie mistakes, as well as finding a more effective way to create a stable environment around pages like Turkey. Obviously, if we get flagged revisions off the ground, life becomes a lot easier for those of us watching pages that are impacted by editors like Shuppiluliuma... but in the mean time, I would really appreciate a deep look at this by a CU. Hiberniantears (talk) 18:00, 24 April 2009 (UTC)[reply]

Comments by accused parties    See Defending yourself against claims.

Comments by other users

CheckUser requests

Checkuser request – code letter: F (Other reason )

Current status – Completed: Reviewed by a Checkuser, results and comments are below.

 Clerk endorsed to check for potential range blocks and collateral damage Mayalld (talk) 06:29, 23 April 2009 (UTC)[reply]

Clerk, patrolling admin and checkuser comments

 Clerk note: merged from other case. Mayalld (talk) 06:29, 23 April 2009 (UTC)[reply]

Conclusions

•  Confirmed: Shiham K (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) and Hekatonesos (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) are the same and almost certainly Shuppiluliuma (including both IPs).
•  Unrelated: Truthspeaks11 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) and Gilokalentel (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), to each other and to Shuppiluliuma.
• The 78 address range was softblocked for a month, but the other would cause a great deal of collateral damage. — Coren ^(talk) 04:51, 26 April 2009 (UTC)[reply]

Thanks! For future reference, what was the range for the 78 address? Hiberniantears (talk) 15:28, 26 April 2009 (UTC)[reply]

78.40.192.0/18 — Coren ^(talk) 15:31, 26 April 2009 (UTC)[reply]

This case has been marked as closed. It has been archived automatically.

--Tagged confirmed accounts; already blocked. PeterSymonds (talk) 16:49, 26 April 2009 (UTC)[reply]

 Clerk note: Okie-dokie. Archiving. — Jake Wartenberg 17:11, 26 April 2009 (UTC)[reply]

• StanStun (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

User:StanStun appears to be the latest in a long list of socks by the dreadful User:Shuppiluliuma. This case screams WP:DUCK pretty loudly. Specifically:

• Identical interests with previous Shuppiluliuma socks: Turkey, Turkish cities (esp. Istanbul), Economy of Turkey, Turkish Navy, Accession of Turkey to the European Union. Compare the contribs for StanStun (talk · contribs · deleted contribs · logs · filter log · block user · block log) with those of previous Shupp socks: [1] [2] [3] [4] [5] and many many others.
• Identical editing style, lots of small incremental edits in a row.
• Turkish nationalist agenda, e.g. denial of the Armenian genocide [6], and also promotion of Turkey, particularly it's European credentials [7] and economy [8].
• Stubborn edit-warring accompanied with extreme hostility and trolling, e.g. here [9] [10].
• Same MO as previous socks, a few edits to random articles at first, before focusing exclusively on Turkey articles with a WP:OWN mentality, as for example with this sock [11]. See also this [12].

• Blocked, obvious. Don't think there's a need for CU; I don't think he usually keeps sleepers around. Fut.Perf. ☼ 19:37, 30 April 2010 (UTC)[reply]

Checkuser request – code letter: E (Community ban/sanction evasion )

Current status – Declined, the reason can be found below.    Requested by Athenean (talk) 19:26, 30 April 2010 (UTC) [reply]

 Clerk declined agreeing with Future Perfect with regard to sleepers, as the accounts have been blocked no further need for checkuser. Thanks for the report, and thanks to Future Perfect for dealing with it. Regards, Spitfire^Tally-ho! 19:42, 30 April 2010 (UTC)[reply]

This case has been marked as closed. It has been archived automatically.

• Iceman rides your tail (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 88.251.68.187 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 78.176.98.249 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))

Standard Shuppiluliuma sock.

• As soon as the latest Shup sock, StanStun (talk · contribs · deleted contribs · logs · filter log · block user · block log) was discovered and blocked, [13], this account picks up right where he left off with the maniacal removal of any mention of the Armenian Genocide from Turkey [14], which i had restored only a few hours previously [15]. Note the reverts by StanStun and Iceman are identical.

• Identical interests: Turkey, Ottoman Empire, Accession of Turkey to the European Union, Turkish Armed Forces, Turkey geography articles [16]. Compare the contribs of the Iceman account and the suspected IPs with the contribs of the StanStun account and previous Shuppiluliuma socks: [17] [18] [19] [20] [21].

• Identical editing style, lots of small incremental edits to geography articles, e.g. on Heybeliada [22] (compare with Trabzon [23]).

• Same level of English, stubborn edit-warring over keeping any mention of the Armenian Genocide out of Turkey: StanStun: [24] Iceman: [25] [26] [27] [28] [29]. Athenean (talk) 05:57, 25 May 2010 (UTC)[reply]

A checkuser is necessary, since the evidence shows this was a sleeper account. He could well have more and uses a wide IP range. The maniacal tenacity of this individual is not to be underestimated. He has created something like 100 socks so far. Something more than a simple block is necessary, otherwise he will be at it again in no time

See Defending yourself against claims.

Checkuser request – code letter: E (Community ban/sanction evasion )

Current status – Completed: Reviewed by a Checkuser, results and comments are below.    Requested by Athenean (talk) 22:26, 23 May 2010 (UTC) [reply]

 Clerk endorsed The submitted evidence makes sense, and I see my own similarities in edit summary style. A CU would be good as a rangeblock was placed in the past, but seems to have expired. --Shirik (Questions or Comments?) 14:08, 25 May 2010 (UTC)[reply]

 Administrator note Blocked all three reported under WP:DUCK, not requesting a CU comment on the IPs. Just looking for a possible rangeblock. (The fact that the IPs were so dramatically different suggests this may not be possible, but if we're lucky maybe it's two small ranges.) --Shirik (Questions or Comments?) 14:13, 25 May 2010 (UTC)[reply]

A rangeblock is probably not going to happen... J.delanoy^gabs_adds 18:24, 25 May 2010 (UTC)[reply]

This case has been marked as closed. It has been archived automatically.

• Koruyucu (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Karakemence (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Obvious socks of Shuppiluliuma, created as soon as previous socks were blocked, identical reverts (e.g. compare [30] to [31]).

See Defending yourself against claims.

•  Administrator note Koruyucu blocked and tagged. No evidence links Karakemence and Shuppiluliuma, and Ka. is here since 2008 anyway, so that account is left alone. Tim Song (talk) 22:52, 1 June 2010 (UTC)[reply]

This case has been marked as closed. It has been archived automatically.

Suspected sockpuppets

• Ben diyom Angara (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Other, already blocked, recents accounts, for CU comparison:
  • Namuslu (talk · contribs)
  • Türbanistan (talk · contribs)

• User compare report Auto-generated every hour.

Latest of the innumerable socks by user:Shuppluliuma. Primary interests are Turkey and Turkish military articles [32]. There is a simple, foolproof way to detect his socks: Because most of the articles he likes to edit (Turkey, Turkish Air Force, etc...) are semi-protected, he needs to rack up a number of edits on non-semiprotected articles. So the first thing he does after creating the new account is to make a few edits to non-semied articles before editing his favorite articles. Interestingly, these first few edits are always related to the new sock's name, it's as if each of his socks has a "theme". I noticed this with his sock Mokoko 24-7 (talk · contribs), which edited a few Japan related articles, then as soon as he reached 20 edits or so, immediately switched to Turkey and never looked back [33]. The first edits by Ben diyom Angora are to topics related to the Turkish capital Ankara (of which "Angara" is an alternate spelling and "Ben diyom Angara means "I sent him to Ankara"). Then, after those edits, it's back to the Turkish Armed Forces and Turkey. Also, Shuppiluliuma and socks love to make lots of small consecutive edits to articles, endlessly tweaking them, much like Ben dioym Angara. Ben diyom Angora thus fits the pattern perfectly. Athenean (talk) 20:21, 2 July 2012 (UTC)[reply]

Regarding the checkuser, he has at least two socks that were active until a few days/weeks ago, User:Namuslu and User:Türbanistan, so they can be used for checkuser purposes. His older accounts are of course stale. Athenean (talk) 21:32, 3 July 2012 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Clerk declined - because all of the contrib data in the archive is stale. This will have to be decided on behavioral evidence.
   — Berean Hunter (talk) 17:18, 3 July 2012 (UTC)[reply]

Please reconsider; recent account Namuslu (talk · contribs) with several other socks (Türbanistan (talk · contribs) etc.) were likely also him. Fut.Perf. ☼ 21:58, 3 July 2012 (UTC)[reply]

I wasn't aware of the other accounts. Striking my decline and moving back to open CU request for consideration.
 — Berean Hunter (talk) 22:08, 3 July 2012 (UTC)[reply]

Ben diyom Angara, Türbanistan, and Namuslu are  Confirmed. --MuZemike 23:31, 10 July 2012 (UTC)[reply]

• Blocked and tagged. -- DQ (ʞlɐʇ) 02:19, 11 July 2012 (UTC)[reply]

Suspected sockpuppets

• 78.181.138.199 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 88.251.110.42 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• 88.251.88.62 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• User compare report Auto-generated every hour.
• Editor interaction utility

Block evasion. Identical arguments: Lord of Rivendell diff1, Lord of Rivendell diff2 vs. IP 78.181.138.199.

Examples

• IP 78.181.138.199: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)
• Lord of Rivendell diff1: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)

More IPs have been involved over the past few days, ex. 2 IPs 88.251.xxx.xx, but this is the latest disruption using IP 78.181.138.199.  Sounds like a duck quacking into a megaphone to me. Δρ.Κ. ^{λόγοςπράξις} 01:56, 22 April 2014 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• Blocked, closing. King of ♥ ♦ ♣ ♠ 21:56, 23 April 2014 (UTC)[reply]

Suspected sockpuppets

• Eldarion of Gondor and Arnor (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

New account. Username derived using names from Lord of the Rings, exactly as the master, and edits disruptively. The articles the sock edits are, you guessed it, Turkey-related with an emphasis on Turkey.  Sounds like a duck quacking into a megaphone to me. Δρ.Κ. ^{λόγοςπράξις} 10:20, 16 August 2014 (UTC)[reply]

Evidence

• Image-related edit-warring at Template:Largest cities in Turkey: Lord of Rivendell as compared to Eldarion of Gondor
• Large-scale additions/deletions on Turkey-related articles accompanied by edit-warring and personal edit-summaries directed at user Elmasmelih: Lord of Rivendell, Eldarion of Gondor
• The userpage of Lord of Rivendell was decorated in a similar way with that of Eldarion of Gondor and Arnor, using images from the Lord of the rings
• Repeating the same disapproved activity
• Editing identical articles
• Similar writing/editing styles
• WP:ACTING

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Eldarion of Gondor and Arnor has same altitude with Lord of Rivendell as you can see in the history of Turkey. He removes valuable/cited/GA reviwer recommended edits without any reasonbale in summaries. Also see this elmasmelih 11:37, 16 August 2014 (UTC)[reply]

Eldarion blocked as obvious, plus a recent IP 88.251.86.240 (talk · contribs · WHOIS) that was trying to stir up trouble at WP:AN. Fut.Perf. ☼ 16:08, 17 August 2014 (UTC)[reply]

• Closing...no checkuser necessary at this time.
   — Berean Hunter (talk) 18:23, 17 August 2014 (UTC)[reply]

Suspected sockpuppets

• Superfluous man (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 85.107.23.27 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) - IP sock activated after Superfluous got a second edit-warring block.
• User compare report Auto-generated every hour.
• Editor interaction utility

Although there has been a long time since the last disruption by the socks of Lord of Rivendell, long enough to render a CU check impossible, I open this SPI based on rather loud quacking. I think there is enough evidence to firmly establish the relation between sock and master.  Looks like a duck to me Δρ.Κ. ^{λόγοςπράξις} 19:27, 24 April 2015 (UTC)[reply]

Evidence

• Heavy edit-concentration on Turkey accompanied by incessant edit-warring
• Master got indeffed due to edit-warring, sock is blocked due to edit-warring on Turkey even as the 3RRN report was ongoing, a fact noted by the blocking admin. The sock was finally blocked after he reached 6 reverts.

Edit-warring on Turkey about the same sources and victim numbers of the Armenian Genocide

• Keywords: Encyclopædia Britannica, Tehcir Law, Arnold J. Toynbee and Justin McCarthy
• Key number: 600,000
• Master mentioning the victim numbers and Encyclopaedia Britannica, Master mentioning the numbers, Encyclopaedia Britannica and historian Toynbee during his edit-warring on Turkey vs. sock doing the same and adding McCarthy to boot
• Master mentioning the victim numbers, Encyclopaedia Britannica, Tehcir Law, Toynbee, and McCarthy on his talkpage vs. sock Superfluous adding exactly the same things to Turkey
• IP sock 78.181.138.199: Section title: The correct number of deaths is 600,000 according to Encyclopædia Britannica, Arnold J. Toynbee and Justin McCarthy Text sample: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)
• Lord of Rivendell Identical edit as the IP above also mentioning the usual keywords Encyclopædia Britannica, Arnold J. Toynbee and Justin McCarthy. Text sample: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)

Very similar locus of articles

• Apart from their heavy concentration and edit-warring on Turkey, sock and master have similar interests and edit several common articles
• Istanbul
• Turkish Armed Forces
• Turkish Land Forces
• Turkish Naval Forces
• Mustafa Kemal Atatürk
• Galatasaray S.K.

Similar top-four articles from edit-count

Lord of Rivendell

1. 599 edits on Turkey
2. 52 on Turkish Naval Forces
3. 44 on New Mosque (Istanbul)
4. 42 on Istanbul

Superfluous man

1. 137 edits on Turkey
2. 61 on Turkish Naval Forces
3. 35 on Turkish Air Force
4. 24 on Istanbul

Interest on aircraft articles and the Turkish Air Force

• Air force/jet related edit of master on Turkey vs. sock performing a similar edit on Turkish Air Force
• Aircraft-related edit of sock on TAI TFX vs. master editing the aircraft article ATR 72

Similar image work on Istanbul

• Image edit by 武士道 vs. Superfluous man's similar edit vs. image edit by Rivendell master

Similar mode of sock insertion

• Use of non-Latin usernames for the socks: Blocked sock 武士道 (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) (blocked by Future Perfect at Sunrise) versus Лев Я́шин the username of Superfluous man before he had his name changed.

Similar MO of socks once inserted

• 武士道 started his edits by editing Japanese articles while Лев Я́шин started editing Russia-related articles. Soon after that they started heavily concentrating on Turkey and edit-warring there. By the way Лев Я́шин is Lev Yashin, a legendary Russian goalkeeper.

Similar layout of user pages

• Superfluous man has a single picture decorating his user page with the caption "Superfluous man" while Lord of Rivendell had a picture of Rivendell with the caption "Rivendell".

Edit-warring is the strongest common thread of all the socks

• As mentioned above, Superfluous man was edit-warring while the 3RRN report was open and got blocked at 6R. Please see also User:Dr.K. and User:Elmasmelih reported by User:武士道 (Result: Submitter blocked) where the Bushido (武士道) sock was impacted by a WP:BOOMERANG. The master's edit-warring does not need further mention for obvious reasons.

Sock has violated 3RR again after release from block

• Hours after release from block and while the previous edit-warring report is still at 3RRN the sock reinstated his/her edit and has performed a total of four reverts so far. The usual keywords of the master and other socks are all there.

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I dont believe that Superflous is a sockpuppet of Rivendell. Rivendel was much more aggresive. kazekagetr 19:31, 24 April 2015 (UTC)[reply]

Socks can change some aspects of their behaviour. Δρ.Κ. ^{λόγοςπράξις} 20:27, 24 April 2015 (UTC)[reply]

• Blocking sock but leaving IP since it is stale. Closing.
   — Berean Hunter (talk) 22:09, 8 May 2015 (UTC)[reply]

Suspected sockpuppets

• Heimdallr of Æsir (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• 88.251.68.205 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

Shuppiluliuma (talk · contribs · deleted contribs · logs · filter log · block user · block log) is a banned user and particularly prolific sockmaster, with close to 100 outed socks. He has a penchant for unstoppable edit-warring and extreme incivility that crosses the line into hate speech, particularly in edit summaries. One of his innumerable socks, Pantepoptes (talk · contribs · deleted contribs · logs · filter log · block user · block log) made the following comment in an edit-summary long ago [34], taunting Armenian users about Armenia's "3 million population" and "11 billion GDP". The account Heimdallr of Æsir (talk · contribs · deleted contribs · logs · filter log · block user · block log), which I suspected of being a sock due to the similarity in hate speech, was blocked today for 24 hrs for edit-warring. He was also participating in this talkpage discussion [35]. Immediately after the block, he edited the discussion as an IP, making the following comment [36]. It couldn't quack any louder. CU is desirable to ferret out sleeper accounts. Frankly, considering the magnitude and incredible tenacity of this maniac (he has been socking since 2007), it seems a rangeblock is the only way to put an end to the disruption. All his IP edits are from the 88.251 IP. Athenean (talk) 00:18, 14 September 2015 (UTC)[reply]

More evidence:

• Shuppiluliuma socks always uses wikilinks in edit summaries [37] [38]
• Main focus on Turkish economy and armed forces, and the neighborhood of Galata [39] [40]
• An obsessive attention to detail, reflected in the many incremental minor quality control edits, and the lack of spelling mistakes.

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• I've declined the CU request. Per the archives, there hasn't been a puppet blocked since 2012. Thus, among other issues with the request, there's nothing to compare against.--Bbb23 (talk) 04:10, 14 September 2015 (UTC)[reply]
• The sock account is already blocked, the IP is not active. Closing the case. Vanjagenije (talk) 15:41, 5 October 2015 (UTC)[reply]

Suspected sockpuppets

• Lord of Rivendell (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Heimdallr of Æsir (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

See the discussion at WP:ANI section "WP:BATTLEFIELD threats and constant edit-warring at Turkey" as of right now. The user is aggressively editing on Turkish topics; I blocked him yesterday for edit-warring on Turkey (see recent history), and an IP that's seemingly him has been active on the talk page, advocating the position that Heimdallr was trying to force into the article. Over at WP:ANI, someone adds a note:

Heimdallr of Æsir has a name from Norse mythology. (To see the connection to Lord of the Rings, Google for 'Heimdallr Tolkien'). Based on his choice of user name and his interest in Turkey, this editor is most likely the same person as WP:Sockpuppet investigations/Lord of Rivendell. EdJohnston (talk) 21:06, 14 September 2015 (UTC).

This seems like a convincing argument to me. If you want more evidence, let me know and I'll supply more diffs or other links. Nyttend (talk) 23:50, 14 September 2015 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Actually Lord of Rivendell and Heimdallr are both socks of the original sockmaster, Shuppiluliuma (talk · contribs · deleted contribs · logs · filter log · block user · block log). The aggressive POV is the same, the insults to Greek and Armenian users are the same, the "Ethnically themed sock" is the same, the many consecutive minor grammar edits are the same, the consistent use of wikilinks in edit summaries is the same. The smoking gun is this edit summary by one of Shuppiluliuma's socks [41], where he taunts Armenian users about "Armenia's 3 million people and 11 billion GDP". The IP sock of Heimdallr made the same exact taunt at Talk:Turkey a few days ago [42]. They are all the same guy. I've opened an SPI on Heimdallr here [43], I think these should all be merged. Athenean (talk) 18:34, 16 September 2015 (UTC)[reply]

• I've declined the CU request. Per the archives, there are no non-stale puppets, confirmed or otherwise, to compare against. If you know of an account that is not stale, feel free to renew the request and provide the username.--Bbb23 (talk) 01:15, 15 September 2015 (UTC)[reply]

• Just curious, Bbb23: in general, how long do we give before considering a puppet to be stale? I mistakenly thought that an April 2015 appearance would be recent enough. Nyttend (talk) 02:25, 15 September 2015 (UTC)[reply]

• @Nyttend: Three months.--Bbb23 (talk) 04:03, 15 September 2015 (UTC)[reply]

• Oh, so "stale" means "you're absolutely unable to get it". I didn't know that: I figured there was a continuum between stale and not-stale, and the checkuser had to determine where a specific case fit. So basically you're allowed to work with whatever data are available, since stuff older than three months is totally unavailable. Thanks for helping me understand. Nyttend (talk) 04:25, 15 September 2015 (UTC)[reply]

• That's generally correct. However, one can look at other CheckUsers' logs that predate the three-month window. I don't look at logs except in unusual circumstances and, even then, they have limited value.--Bbb23 (talk) 04:49, 15 September 2015 (UTC)[reply]

• Admin needed. Please, merge this page into Wikipedia:Sockpuppet investigations/Shuppiluliuma. Vanjagenije (talk) 15:44, 5 October 2015 (UTC)[reply]
•  Done Vanjagenije. I've also retagged a few of the old accounts.
   — Berean Hunter (talk) 17:10, 8 October 2015 (UTC)[reply]
• Closing the case. Vanjagenije (talk) 18:10, 8 October 2015 (UTC)[reply]

Suspected sockpuppets

• Protego Totalum (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• User compare report Auto-generated every hour.
• Editor interaction utility

Introduction

In the tradition of the recent sock incarnations of the Lord of Rivendell this new sock makes a few initial token edits on some articles and then starts the edit-warring on his favourite article: Turkey (edit | talk | history | protect | delete | links | watch | logs | views). But let's start from the beginning. Dr. K. 01:13, 22 December 2015 (UTC)[reply]

Evidence

Name

• The name of this sock is related to the mythology surrounding the saga of Harry Potter: Protego Totalum. The other socks also have names inspired by similar magic-related mythologies, as the one of the Lord of the Rings.

Edit-warring on Turkey

• In the unbroken and time-honoured tradition of all the other socks, Protego T also makes his/her last stand by edit-warring on Turkey.

Elaborate edit-summaries

• All socks belonging to this sockfarm use up most of the edit-summary field writing elaborate edit-summaries to justify their edit-warring.
• Heimdallr of Æsir vs. Protego T writing a mini Bachelor's thesis inside his/her edit-summary

Edit-warring about the GDP of Turkey

• Protego T, Protego T again vs. blocked sock Superfluous man vs. Heimdallr of Æsir and more Heimdallr of Æsir.

Use of wikilinks inside elaborate edit-summaries

• Lord of Rivendell himself, Lord of Rivendell again vs. Protego T and more Protego T

Duck probability

•  Sounds like a duck quacking into a megaphone to me

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Comment by User:Athenean

I also strongly suspect this is a sock of Shuppililiuma/Lord of Rivendell. The last sock was blocked back in September and this would be right around the time this user would create another sock. This new account, created a few days ago knows how to edit-wikipedia and is clearly a sock. What made me suspect it was the latest sock of Shuppiluliuma is

1. A few token edits to get past the semiprotection on Turkey, and once that is done, almost exclusive focus on Turkey
2. Incessant edit-warring: this user simple cannot not edit-war. Even though all his previous socks have been blocked for edit-warring, he keeps doing it. He just can't not edit-war.
3. Meticulous attention to detail, lots of small quality control edits to Turkey in keeping with this individual's obsessive nature.
4. Long-winded edit-summaries without any typos or grammatical mistakes
5. Frequent use of wikilinks in the edit-summaries, whenever possible. This is a signature of this user. Athenean (talk) 05:22, 22 December 2015 (UTC)[reply]

• Protego Totalum (talk · contribs · count) and Heimdallr of Æsir (talk · contribs · count) are  Likely. Blocked, tagged, closing.--Bbb23 (talk) 17:17, 22 December 2015 (UTC)[reply]

Suspected sockpuppets

• 85.107.224.212 (talk⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log))
• User compare report Auto-generated every hour.
• Editor interaction utility

Not sure if CheckUser is even needed for this, however the user has went to user pages of other blocked sockpuppets from the master and removed the block notice. Dat Guy^Talk_Contribs 19:04, 26 December 2015 (UTC)[reply]

1 2 3 4 5 6 7 8

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• IP blocked 72 hours. Closing. Bbb23 (talk) 20:16, 26 December 2015 (UTC)[reply]

• Balki Chalkidiki (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

• Consistent edits on Turkey and Turkey-related articles. (you can check these edits here and compare those edits to old socks' edits here and here
• Reckless edit warring.
• Lots of small quality control edits in artcile of Turkey (related with this individual's obsessive nature).
• Oh and he/she explictly stated that I used to consider myself a Hellenophile (listening to Dalaras, etc.) in here so one can figure out that his/her name comes from Greek-related persons or places such as Balki Bartokomous and Chalkidiki. kazekagetr 13:46, 2 February 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

As far as I can tell, everyone is  Stale. CU declined.--Bbb23 (talk) 14:52, 2 February 2017 (UTC)[reply]

• Blocked on behavioral evidence. NeilN ^{talk to me} 22:56, 2 February 2017 (UTC)[reply]

• V t I (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• User compare report Auto-generated every hour.
• Editor interaction utility

1. New account created very soon after last Shuppiluliuma sock was blocked
2. Single-minded focus on Turkey, the usual lots of consecutive small quality-control edits, in keeping with this individual's obsessive nature [44]
3. The usual Kemalist POV
4. The usual aggressiveness, hair-trigger edit-warring [45] Khirurg (talk) 05:50, 28 February 2017 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

We are tired of him/her. kazekagetr 15:40, 4 March 2017 (UTC)[reply]

 Confirmed, blocked, tagged, closing.--Bbb23 (talk) 18:02, 11 March 2017 (UTC)[reply]

• Æternus Prætor Firmitas Semper (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

1. Similar grandiose Latin username, same as a previous account Res_Gestæ_Divi_Augusti (talk · contribs)
2. New account with a few token edits to get past the semiprotection on Turkey, and once that is done, almost exclusive focus on Turkey
3. Single-minded focus on Turkey, the usual many consecutive small quality-control edits, in keeping with this individual's obsessive nature
4. The same Turkish nationalist POV (e.g. does not like Kurds [46] [47]) Khirurg (talk) 17:00, 25 September 2018 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Confirmed plus:
  • Æternus prætor (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
  • Boccadasse (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Blocked the unblocked accounts and tagged all three. Closing.--Bbb23 (talk) 17:29, 25 September 2018 (UTC)[reply]

• Egnatias 406 (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

A typical "themed" Shuppiluliuma sock, this time named after a street in the city of Thessaloniki (Egnatias avenue). He makes a few edits to Thessaloniki to get around the semi-protection of Turkey, and then edits exclusively Turkey almost exclusively, pushing Turkish nationalist POV [48] and then lots of consecutive small edits to Turkey, as usual. Khirurg (talk) 16:39, 31 October 2018 (UTC) Khirurg (talk) 16:39, 31 October 2018 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Egnatias 406 is  Confirmed to Æternus Prætor Firmitas Semper and others in the archive.  Blocked and tagged.
 — Berean Hunter (talk) 18:14, 31 October 2018 (UTC)[reply]

• Case closed. Vanjagenije (talk) 20:42, 31 October 2018 (UTC)[reply]

• Oumuamua Num Num (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Identical in behavior to previous socks:

1. Makes a few token edits to non-semiprotected articles, to get past the semiprotection at Turkey, and once that is done focuses exclusively on Turkey.
2. Many small incremental edits to Turkey in quick succession.
3. Same Turkish nationalist POV (e.g. against Kurds [49]). Khirurg (talk) 16:13, 30 January 2019 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Likely  Blocked and tagged.
 — Berean Hunter (talk) 19:52, 31 January 2019 (UTC)[reply]

• Aegean Pine Honey (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Classic Shuppiluliuma sock, which makes a few edits related to its username to get around the semi-protection at Turkey, and from then on exclusively makes edits to Turkey. Lots of successive minor incremental edits without edit summaries at Turkey, in keeping with the sockmaster's obsessive nature. When reverted, he just reverts everything without an edit summary and continues. Khirurg (talk) 15:34, 10 September 2019 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Confirmed, blocked, tagged, closing.--Bbb23 (talk) 17:17, 10 September 2019 (UTC)[reply]

• MacßæthDuff (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Typical "themed" Shuppluliuma sock: Makes a few edits related to its username (in this case related to Scotland) to get past semi-protection at Turkey, then lots of little incremental edits to Turkey and Istanbul. Khirurg (talk) 13:39, 24 September 2019 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Confirmed,  Blocked and tagged,  No sleepers immediately visible.
 — Berean Hunter (talk) 19:25, 24 September 2019 (UTC)[reply]

•  Clerk note: Berean Hunter, MacßæthDuff (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) hasn't been blocked or tagged yet. Cabayi (talk) 11:32, 25 September 2019 (UTC)[reply]

• Thank you, Cabayi. I'm not sure what happened but he's blocked now.
   — Berean Hunter (talk) 11:40, 25 September 2019 (UTC)[reply]

• TR34Istanbul (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

It's been a while since the last Shuppiluliuma sock, so we are due for another one. This one was created in February. After making the usual small edits to get around the page protection, begins to edit Turkey obsessively, as all past other socks.

• Edits mostly Turkey, but also some Turkish industry-related articles, like past socks [50].
• Lots of incremental, consecutive, small quality control edits [51]
• Turkish nationalist POV (removing 12 kb of material from human rights section [52])
• Aggressive, rapid-fire edit-warring [53] Khirurg (talk) 23:59, 26 April 2020 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Likely also with a fair bit of logged out editing.  Blocked and tagged.
 — Berean Hunter (talk) 11:24, 10 May 2020 (UTC)[reply]

•  Clerk note: This case has already been actioned. Closing. Reaper Eternal (talk) 17:07, 10 May 2020 (UTC)[reply]

• Gott erhalte F. d. K. (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

• Sleeper account of Shuppiluliuma, was reactivated just after his latest sock, TR34Istanbul (talk · contribs) was blocked for good [54].
• This is a typical "themed" Shuppiluliuma sock. All Shuppiluliuma socks, for some bizarre reason known only to him, have some kind of "theme" around which the first few dozen edits are related to, before exclusively editing Turkey and articles related to the Turkish military. In this case, the "theme" is the Austrian monarchy, the username being based on Gott erhalte Franz den Kaiser, the personal anthem of Francis II, Holy Roman Emperor. After making a few edits related to Austria, the account begins editing exclusively Turkey and Turkish Naval Forces. This is textbook Shuppiluliuma behavior. Turkish Naval Forces is a favorite article of Shuppiluliuma, as evidenced by many of his previous socks, e.g. Superfluous man (talk · contribs) [55].
• The account edit wars to re-instate edits [56] [57] of the previous sock, TR34Istanbul (talk · contribs) [58] [59]
• Non-stop edit warring [60]. The latest sock just broke 3RR. The reason Shuppiluliuma was blocked in the first place was incessant edit-warring. He simply cannot not revert. He will keep reverting until blocked. Khirurg (talk) 23:01, 14 May 2020 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Likely,  Blocked and tagged. Closing.
 — Berean Hunter (talk) 00:57, 15 May 2020 (UTC)[reply]

• Spiritum Sanctum (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

See below.
 — Berean Hunter (talk) 14:20, 1 June 2020 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

 Confirmed,  Blocked and tagged.
 — Berean Hunter (talk) 14:21, 1 June 2020 (UTC)[reply]

• Denarius Solidus (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

like his old socks User:TR34Istanbul and User:Spiritum Sanctum they edit same pages. [61], [62] and [63] + in Turkey He is already 2 weeks banned [64] Shadow4dark (talk) 14:27, 10 July 2020 (UTC)[reply]

More evidence After his block of his previous sock he continue edit same paragraph. Here he eddit same paragraph in "Financial Sector" , [[65]] [[66]] It lacks more diffs because he is blocked. Shadow4dark (talk) 13:41, 12 July 2020 (UTC)[reply]

The giveaway that this is a Shuppluliuma sock is the bizarre habit that this individual has of making edits related to the socks name. A "denarius" is a type of Roman coin, and his first edit was to the article of Constantine the Great, a Roman Emperor. Then, once that's out of the way, he starts editing Turkey (almost exclusively), making lots of small incremental quality control edits without an edit summary. If you look at the archive, every single one of socks follows the same pattern of behavior. This is one of the most prolific sockpuppeteers I have come across; he's been socking since at least 2007. Khirurg (talk) 15:10, 12 July 2020 (UTC)[reply]

•  Additional information needed - Shadow4dark, interest in Turkey and Istanbul isn't unique enough to prove that two people are the same. Please provide paired diffs showing how the suspected sockpuppet is making similar edits to past socks. GeneralNotability (talk) 13:22, 12 July 2020 (UTC)[reply]
• CheckUser requested - It's borderline, but I think that this does match the "theme" pattern. Requesting CU. GeneralNotability (talk) 17:26, 13 July 2020 (UTC)[reply]
•  Likely to TR34Istanbul (talk · contribs) who has previously been found likely to the master. They've also been editing logged out so their block is now indefinite. Closing. Ivanvector (^Talk/_Edits) 17:44, 13 July 2020 (UTC)[reply]

• GigaBiga (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

His last sock User:Neolir was blocked 22 november and he created current sock same day. Here he do same edit as his older sock [[67]] and [[68]] he edit same pages as last socks in. Istanbul, Dolmabahçe Palace Grand Bazaar, Istanbul User:Spiritum Sanctum, Ataşehir User:Strabonis Levent User:Neolir and Istanbul Sapphire User:TR34Istanbul Shadow4dark (talk) 05:29, 25 December 2020 (UTC)[reply]

More blocked IPs https://en.wikipedia.org/wiki/Special:Contributions/88.246.76.187 and https://en.wikipedia.org/wiki/Special:Contributions/88.244.95.222 Shadow4dark (talk) 04:03, 28 December 2020 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Possilikely (a mix between possible and likely) is the best I can do with the data that's leftover but the behaviour is enough combined with that to block and tag. All socks blocked and tagged. Closing case. Callanecc (talk • contribs • logs) 07:50, 28 December 2020 (UTC)[reply]

• Snoop Puppy Dog (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

When i deleted large edits by his older socks he reverted me here [[69]] and when i asked speedy deletion WP:G5 (page created by his older sock) https://en.wikipedia.org/w/index.php?title=Metropol_Istanbul&diff=997020581&oldid=996740610 he reverted me again and he edit same page as his older socks here [[70]] his sock User:Neolir Shadow4dark (talk) 17:43, 29 December 2020 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Confirmed to GigaBiga.  Blocked and tagged, closing. Mz7 (talk) 18:53, 29 December 2020 (UTC)[reply]

• AnatoLion (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Martevenere (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Both already blocked but i want add my evidence here. AnatoLion is sock of Martevenere but they are both sock of Shuppiluliuma. Shuppiluliuma will Non-stop edit warring until blocked [71] like his older sock, evidence here [[72]] + he do personal attacks like older socks, look edit summaries of AnatoLion. Main pages of Shuppiluliuma is Istanbul related and or turkey related Shadow4dark (talk) 15:50, 18 January 2021 (UTC) Shadow4dark (talk) 15:50, 18 January 2021 (UTC)[reply]

@Drmies: New sock User:Smyrneika Shadow4dark (talk) 22:55, 1 February 2021 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• CU confirms User:Moëtley as well; already blocked. Drmies (talk) 22:22, 19 January 2021 (UTC)[reply]

•  Clerk note: Everything seems to have been tidied up here already, closing. GirthSummit _(blether) 15:31, 6 February 2021 (UTC)[reply]

• SMorevinen (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Obvious sock, already blocked. CU showed no others. Drmies (talk) 21:07, 15 March 2021 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  Tagged, closing. Blablubbs|talk 21:10, 15 March 2021 (UTC)[reply]

• Hoeppala (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

He edits same pages and same section here.

[73]

[74] Shadow4dark (talk) 02:45, 27 April 2021 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. Look this user edits mostly on Istanbul or turkey related like his older socks. Look here mostly banned socks [[75]][[76]] Shadow4dark (talk) 19:45, 2 May 2021 (UTC)[reply]

• I was pinged on this but unfortunately don't have much to add (not being familiar with the master) except that some of their edits (especially the ones to Armenian Genocide article) seemed to be agenda-driven although I tried to give them the benefit of the doubt. (t · c) buidhe 04:52, 9 May 2021 (UTC)[reply]
• Lots of minor incremental quality control edits almost exclusively to Turkey and [[Istanbul, no edit summaries for most edits, exactly as all other previous socks. Khirurg (talk) 07:17, 9 May 2021 (UTC)[reply]

•  Possible. Same geolocation and wide range. Same common user agent. ~Oshwah~^{(talk) (contribs)} 03:09, 27 April 2021 (UTC)[reply]
• Account blocked and tagged. Closing SPI... ~Oshwah~^{(talk) (contribs)} 03:56, 22 June 2021 (UTC)[reply]

• Benkerbrot (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar with his older socks he editing again mostly istanbul and Turkey, see [[77]] . The main reason why i saw this is his sock is this edit, other editor adding WP:SANDWICH tag because he adding to many pictures but he reverts [[78]] and see this [[79]] and [[80]]. He will never stop reverting until he is blocked like his past socks. Here they edit same section like his past sock (Image gallery) [[81]] Shadow4dark (talk) 10:43, 3 December 2021 (UTC)[reply]

[82]Moxy- 12:25, 3 December 2021 (UTC)[reply]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

•  In progress - -- RoySmith (talk) 00:45, 12 December 2021 (UTC)[reply]
• Everything is stale, but based on some old log data, I'll call Benkerbrot  Possilikely (a mix between possible and likely) to several accounts listed in the archive. -- RoySmith (talk) 00:53, 12 December 2021 (UTC)[reply]
• I came back and took a closer look at the behavioral evidence. Based on that and my previous technical analysis, I'm calling this suspected. -- RoySmith (talk) 17:05, 17 December 2021 (UTC)[reply]

• Mercresis (talk⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
• Tools: Editor interaction utility · Interaction Timeline · SPI Tools

First there is a overlap with past socks.[[83]]

They fighting edits wars like past socks and has many warnings [[84]], [[85]]. This happend also with his past socks [[86]] and [[87]]

At this page they editing same section as last sock see page history Levent also city as Istanbul has more tall buildings if he is no sock why are they editing same building and why same section?

Further they do mostly small controll edits, editing mostly images and almost never use talkpage for edit wars as past socks Shadow4dark (talk) 23:09, 25 May 2023 (UTC)[reply]

Similar with his past sock mentioned above they do Turkish pov edits and removing genocide details [[88]]they did this similar deletion in 2010! [[89]]Shadow4dark (talk) 07:53, 11 June 2023 (UTC)[reply]

I have also long suspected that Mercresis is a Shuppiluliuma sock. The combination of endless small edits combined with the uncompromising attitude are always a tell. Plus he is the most long-term sockpuppeteer I have ever encountered, and he is due for another sock. Khirurg (talk) 19:24, 4 June 2023 (UTC)[reply]

•  Possilikely (a mix between possible and likely) No sleepers immediately visible -- RoySmith (talk) 23:44, 15 June 2023 (UTC)[reply]
• Behavioural analysis + CU results leads me to believe Mercresis is indeed a sock.  Blocked and tagged as proven. DatGuy^Talk_Contribs 22:43, 18 June 2023 (UTC)[reply]