User-4488

User-4488 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

23 February 2017

[edit]

Suspected sockpuppets

[edit]

Continuous identical disruption to pages List of wars involving the People's Republic of China, Sino-Vietnamese War, and others. Den-Drater 07:18, 23 February 2017 (UTC)

@Vanjagenije (talk):

↓Provided diffs↓
[1] User:User-4488

[2] User: 94.254.233.62

[3] User: 94.254.234.130

[4] User: MaxPrem

+ "Vietnamese military victory" continually added onto Sino-Vietnamese War and pages linking to that page especially by reported IPs.

[5] User: 94.254.230.129

[6] User: User-4488
Den-Drater 21:20, 24 February 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]
  1. At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
  2. At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
  3. In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this. Vanjagenije (talk) 15:59, 23 February 2017 (UTC)[reply]

@Vanjagenije (talk): Is this for me to answer? UserDe (talk) 02:28, 1 March 2017 (UTC)[reply]

06 April 2017

[edit]

Suspected sockpuppets

[edit]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

04 May 2017

[edit]

Suspected sockpuppets

[edit]

There edit has 3 type:

1st. An account or an IP make an edit, another undo edit. Even pretend to communicate with each other.
2nd. Use 2600:387:6: X to delete other account or IP's talk page message, and intervention User-4488 or other Sock puppets(like UserDe) past editors.Will not only appear once in each page, and use different accounts and IP cross-editing
3rd. Create a template with a talk page. 61.224.5.200 (talk) 15:01, 4 May 2017 (UTC)[reply]
PS:By Geolocate,If it is not using proxy. Those IP must come from California and may be located in Chinatown, California.--Contributions/61.224.5.200 (talk) 18:17, 4 May 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. The fact that User:Arron-A (a CU sock) made an edit to User talk:Wattsj528 [8] suggests that this is Wattsj528 again. The retroactive edits to already closed unblock requests have been seen before by Wattsj528. Meters (talk) 16:36, 5 May 2017 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]

10 October 2017

[edit]

Suspected sockpuppets

[edit]

1 2 3 4

Also note that there are other IP edits with similar purposes. Like (2600:387:6:*)(113.*.*.*)(14.*.*.*). O1lI0 (talk) 10:49, 10 October 2017 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

This case is being reviewed by Sir Sputnik as part of the clerk training process. Please allow them to process the entire case without interference, and pose any questions or concerns either on their Talk page or on this page if more appropriate.

12 January 2018

[edit]

Suspected sockpuppets

[edit]
  1. https://en.wikipedia.org/w/index.php?title=User_talk%3AMaxPrem&type=revision&diff=818989817&oldid=774212936
  2. https://en.wikipedia.org/w/index.php?title=User:QkrGusQo&diff=prev&oldid=818990218
  3. https://en.wikipedia.org/w/index.php?title=User:MaxPrem&diff=prev&oldid=818989785
  4. https://en.wikipedia.org/w/index.php?limit=50&title=Special%3AContributions&contribs=user&target=MiceyPoor&namespace=2&tagfilter=&start=&end=2017-11-12 O1lI0 (talk) 22:40, 12 January 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

27 June 2018

[edit]

Suspected sockpuppets

[edit]


Similar editing patterns. For example, on 1 April 2018 at the article Incorporation of Tibet into the People's Republic of China, Desp2002 changed "Invasion of Tibet" to "Battle of Chamdo" and removed the word "invaded" from the article hatnote. This user was subsequently blocked. Today, SitDownAndHaveSomeTea, an account created recently, made basically the same edit. Also, I'm wondering if these accounts are the same as the blocked sockpuppeteer Whaterss? Citobun (talk) 08:18, 27 June 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I found that he may use more than one IP at a time and he has frequent activities. Because it keeps reminding me of his presence on [Tibetan Americans].--Tr56tr (talk) 19:16, 27 June 2018 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]

 Clerk assistance requested: Please merge to Wikipedia:Sockpuppet investigations/User-4488.--Bbb23 (talk) 12:05, 27 June 2018 (UTC)[reply]

30 July 2018

[edit]

Suspected sockpuppets

[edit]
Tr56tr (talk) 02:17, 30 July 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]
Behaviorally, this editor was clearly not new: knows all sorts of WP acronyms and admin processes. Tr56tr is not the only to note that this editor was a sock either. See this RFPP for "Chinese nationalism" for some notes. I had not noticed the decline of this filing, but I talked to DoRD who did CU-confirm it. Please do not take this as any complaint about EdJohnston's or Deskana's cautious approach given the lack of any detail in the filing (and the lack of strong/any correlation in the default tools links), and sorry if I caused any toe-stepping. DMacks (talk) 17:15, 30 July 2018 (UTC)[reply]
DMacks asked me to look at this account this morning, and at the time, I wasn't aware of this SPI, but since it was clear to me that the account was socking, I ran a check. If I had seen this completely evidence-free case, I would also have declined and insisted on more evidence. Anyway, the account is an unambiguous  Confirmed match to the recent socks. —DoRD (talk)​ 22:48, 30 July 2018 (UTC)[reply]

30 August 2018

[edit]

Suspected sockpuppets

[edit]

67.188.179.66 made some filter log in zh.wikipedia.org. We can know he want to create User:UserDead/沙盒 ,and we can sure he had some edit in en.wikipedia.com and vi.wikipedia.com. In zh.wikipedia.com,I also found that he use proxy to edit at a and b. In these two page,also found Mongolian Beef and Samweithe4 may be related account. And I note that Samweithe4 had edit Category:Environment of Tibet with Toshi12345 and other IP.In Samweithe4's edit log ,I found he edit Category:Geology of Tibet with FormerZ and other IP. Tr56tr (talk) 07:31, 30 August 2018 (UTC)[reply]

Update,the 67.188.179.66 edit Johnson South Reef Skirmish thirty times,and Iserfs makes same editing.Check his editing history can found that 2600:387:6:805::5b edit at 03:00,and Iserfs take a vandalism reporting at 03:09.I feel that they are very relevant.Tr56tr (talk) 12:16, 30 August 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

@Bbb23:
Iserfs edit
113.115.36.110 edit
67.188.179.66 edit
14.25.85.198 edit
113.88.81.180 edit
113.92.152.83 edit
Samweithe4 edit
117.136.29.178 edit
221.13.92.178 edit
123.161.168.175 edit
2600:387:6:803::b4 edit
2600:387:6:803::78 edit
Toshi12345(User-4488) edit
2600:387:6:803:0:0:0:76 edit
2600:387:6:803:0:0:0:A4 edit
221.13.92.178 edit
211.138.16.228 edit
211.142.189.68 edit
123.161.171.137 edit
113.88.81.180 edit
113.92.152.83 edit
Samweithe4 edit
113.88.81.180 edit
113.92.152.83 edit
Samweithe4 edit
123.161.171.137 edit
211.142.189.68 edit
211.138.16.228 edit
221.13.92.178 edit
123.161.168.175 edit
FormerZ edit
UserDead
Chuamp
SitDownAndHaveSomeTea
Can also see es.wikipedia.org. He just doing same thing at there.
61.69.191.197
Mongolian Beef----> Note this edit
49.197.242.89
51.38.124.252 ---->Note this one
164.132.197.18
82.202.226.168
199.195.250.201
14:42, 26 August 2018‎ 51.38.124.252 (talk)‎ . . (3,069 bytes) (-168)‎
06:32, 8 August 2018‎ 166.216.158.209 (talk)‎ . . (3,069 bytes) (-168)‎
02:37, 29 July 2018‎ 2600:387:6:805::9c (talk)‎ . . (3,069 bytes) (-168)‎
19:17, 28 July 2018‎ 2600:387:6:807::70 (talk)‎ . . (3,069 bytes) (-168)‎
07:46, 28 July 2018‎ 2600:387:6:807::70 (talk)‎ . . (3,069 bytes) (-168)
04:21, 5 July 2018‎ 107.77.211.184 (talk)‎ . . (3,069 bytes) (-168)‎
04:59, 4 July 2018‎ 107.77.211.24 (talk)‎ . . (3,069 bytes) (-168)
14:43, 23 June 2018‎ 123.161.170.160 (talk)‎ . . (3,069 bytes) (-168)‎
06:13, 23 June 2018‎ 2600:387:6:80f::9d (talk)‎ . . (3,069 bytes) (-168)
SitDownAndHaveSomeTea(User-4488)

Tr56tr (talk) 16:47, 30 August 2018 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

[edit]

@Tr56tr: You have presented almost no evidence. You need to provide relevant evidence in the form of diffs for every account you've listed tying them together. Otherwise, this report will be closed.--Bbb23 (talk) 13:45, 30 August 2018 (UTC)[reply]

 Done - case merged; related case updated and moved. Ivanvector (Talk/Edits) 14:49, 2 September 2018 (UTC)[reply]

06 September 2018

[edit]

Suspected sockpuppets

[edit]

Referring to the last report in Wikipedia:Sock puppet investigations/User-4488/Archive

  1. At Siege of the International Legations, we can notice that IP is being abused.Like A and B.
  2. See Special:Contributions/2600:387:6:80F:0:0:0:B1/48, namespace select Wikipedia. We can find this. And we go to see Special:Contributions/2600:387:6:80F:0:0:0:95.We can see Special:Contributions/IanDBeacon. Their editors are the same, and they are repeated in a short time.
  3. In this link, I note 2600:387:6:80f::77 / 2600:387:6:803::a4 / 2600:387:6:80f::bd. I speculate that these IPs are often abused by User-4488. Using New Tang Dynasty Television for example, we can notice that he abused IP and repeatedly deleted the referenc. The common point of these IPs is 2600:387:6:80.
  4. The last report indicated that he would create a specific content page across the wiki. This time he created another one in Chinese Wikipedia.See this.
  5. A feature of User-4488 is added. User-4488 seems to insist on editing Chinese-related content, especially the war that China has participated in. Because of the editorial record, most of the page titles have Battle of. These records can refer to Special:Contributions/2600:387:6:80F:0:0:0:B1/48.Tr56tr (talk) 07:26, 6 September 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

 Confirmed, blocked, tagged, closing.--Bbb23 (talk) 13:06, 6 September 2018 (UTC)[reply]

20 October 2018

[edit]

Suspected sockpuppets

[edit]
Same edit with 2600:387:6:805:0:0:0:85/61
Other log of group of 2600:387:6:805:0:0:0:85/61.
02:09, 9 September 2018‎ 2600:387:6:803::7f (talk)‎ . . (8,537 bytes) (-436)
01:33, 9 September 2018‎ 2600:387:6:803::90 (talk)‎ . . (8,537 bytes) (-436)
01:32, 9 September 2018‎ 2600:387:6:803::5a (talk)‎ . . (8,537 bytes) (-436)‎ . . (Tr56tr O1lI0 sock)
01:31, 9 September 2018‎ 107.77.211.159 (talk)‎ . . (8,537 bytes) (-436)
01:29, 9 September 2018‎ 2600:387:6:803::7a (talk)‎ . . (8,537 bytes) (-436)‎
01:03, 9 September 2018‎ 2600:387:6:803::c4 (talk)‎ . . (8,537 bytes) (-436)
00:27, 9 September 2018‎ 107.77.211.159 (talk)‎ . . (8,537 bytes) (-436)‎ .
2600:387:6:803::c4 is a group of 2600:387:6:805:0:0:0:85/61.

2600:387:6:805::93 is a group of 2600:387:6:805:0:0:0:85/61.

Compared with the 801256950 version
Compared with the 801256950 version

I note Special:Contributions/2600:387:6:803:0:0:0:C4 has edited Chagpori and Hasan Uğurlu Dam. 2600:387:6:805:0:0:0:85/61 may be abused by the same person. 2600:387:6:803::5a said that (Tr56tr O1lI0 sock).

20 October 2018 (diff | hist) (-31)‎ China–Nepal relations ‎ (Undid revision 860952675 by 49.217.21.146 (talk) Stop harassing other users, Witotiwo.) (Tag: Undo)

I am confused about what message 2600:387:6:805:0:0:0:85/61 wants to tell me. So I read the page history

edit by Esiymbro
Compare Esiymbro and 2600:387:6:805:0:0:0:85/61

So I am guessing that 2600:387:6:805:0:0:0:85/61 might be telling me that Esiymbro and 2600:387:6:805:0:0:0:85/61 are the same person.

2600:387:6:803::5a and [Wikipedia:Sockpuppet investigations/Tr56tr] make me believe that they should be the same person.

I found that he cares a lot about O1lI0. I am a bit confused about this. I found some things in O1lI0 page. ( https://en.wikipedia.org/w/index.php?title=User%3AO1lI0&type=revision&diff=862280816&oldid=846989159 )

From the editing history of this page, we can notice that O1lI0 has long noticed the association between these IPs and accounts, and recorded them. But this record was deleted by Le Petit Chat. O1lI0 suspects Le Petit Chat is related to an IP in the record.

Witotiwo (talk) 21:44, 20 October 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

PrePublic is  Confirmed to User-4488 (talk · contribs · count).  Blocked and tagged. no No comment with respect to IP address(es).--Bbb23 (talk) 23:06, 20 October 2018 (UTC)[reply]

04 November 2018

[edit]

Suspected sockpuppets

[edit]

In Battle of Shanghai.We can see a lot of his sock puppet actived. In those, we can know he is likes infobox.He can create a lot of info box in talk page like PrePublic.After all.I have no evidence.

But this account had strange edit motive.If we go compare the data of he and UserDe. His edit count is 67.Use Editor Interaction Analyser, 61% of his edit are with UserDe, 41% of his edit page are with UserDe.Another is that his edit summary always see O1lI0 sock or undid Witotiwo,like a constructive and revengeful edit.This is similar to User-4488 usual IP editing.Why do I know because I often see the summary of IP writing me as a sock.

Maybe because revenge is successful or people think he doesn't use a sock puppet, his IP has recently significantly reduced the editing frequency.

And one of his IP appeared in https://en.wikipedia.org/w/index.php?title=Battle_of_Northern_and_Eastern_Henan&type=revision&diff=867266134&oldid=848886118. Tr56tr (talk) 22:50, 4 November 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

15 November 2018

[edit]

Suspected sockpuppets

[edit]


Tr56tr (talk) 22:50, 15 November 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

[edit]

 Confirmed,  Blocked and tagged.
 — Berean Hunter (talk) 23:33, 15 November 2018 (UTC)[reply]

No.But why do you think so?--Tr56tr (talk) 23:01, 26 November 2018 (UTC)[reply]
I have filed Wikipedia:Sockpuppet investigations/O1lI0. Changing from hold to checked status.
 — Berean Hunter (talk) 16:03, 3 December 2018 (UTC)[reply]

15 December 2018

[edit]

Suspected sockpuppets

[edit]

His recent editing methods have several features.

1. May try to use proxy IP 1.186.181.126(India) and 70.67.200.112(Canada) in New Tang Dynasty Television. Because their editing time is very similar, it can be inferred from their editings that there is Chinese nationalism behind this.

https://en.wikipedia.org/w/index.php?title=New_Tang_Dynasty_Television&type=revision&diff=873880518&oldid=873731800 edit by CloverTrails is same as https://en.wikipedia.org/w/index.php?title=New_Tang_Dynasty_Television&type=revision&diff=873479933&oldid=873387286 edit by DPPTPP

https://en.wikipedia.org/w/index.php?title=New_Tang_Dynasty_Television&type=revision&diff=873731759&oldid=873547326 edit by 1.186.181.126 is same as https://en.wikipedia.org/w/index.php?title=New_Tang_Dynasty_Television&type=revision&diff=873877935&oldid=873731800 and https://en.wikipedia.org/w/index.php?title=New_Tang_Dynasty_Television&type=revision&diff=873357213&oldid=872748841

(cur | prev) 17:52, 15 December 2018‎ CloverTrails (talk | contribs)‎ . . (15,827 bytes) -129‎ . . (undo) (cur | prev) 18:20, 14 December 2018‎ 1.186.181.126 (talk)‎ . . (15,864 bytes) -92‎ . . (Removed Edits by Chinese Trolls.) (undo) Tag: Visual edit (cur | prev) 15:45, 13 December 2018‎ 70.67.200.112 (talk)‎ . . (16,019 bytes) +42‎ . . (唐人电视係颠倒是非黑白的邪恶媒体) (undo) Tags: Mobile edit, Mobile web edit, Visual edit (cur | prev) 15:41, 13 December 2018‎ 70.67.200.112 (talk)‎ . . (15,977 bytes) +21‎ . . (唐人电视係邪恶及不中肯的媒体) (undo) Tags: Mobile edit, Mobile web edit, Visual edit (cur | prev) 23:00, 12 December 2018‎ DPPTPP (talk | contribs)‎ m . . (15,834 bytes) -122‎ . . (Reverted 2 edits by 36.232.207.225 (talk) to last revision by DPPTPP. (TW)) (undo) Tag: Undo

There is a trend from these editing records that he edits every day. I guess he insisted on deleting the content may be because he said 唐人电视係邪恶及不中肯的媒体(Chinese nationalism behind this).

2. Use one account at a time, and multiple accounts. Littletiwo and CloverTrails Both of them currently only edit a single page. The IP range of 107.77.213.176/20 is still active. There may be other accounts not found. From his recent editing mode, I guess he has other accounts.Maybe you can find some clues in his past editing, and I found him unusual in the editing record.

https://en.wikipedia.org/w/index.php?title=Battle_of_West_Hunan&type=revision&diff=873617456&oldid=873494000 edit by 107.77.213.176/20 is same as https://en.wikipedia.org/w/index.php?title=Battle_of_West_Hunan&type=revision&diff=873393970&oldid=873389196 edit by DPPTPP

https://en.wikipedia.org/w/index.php?title=Sino-Vietnamese_conflicts,_1979%E2%80%931991&diff=prev&oldid=873620369 edit by Littletiwo is same as https://en.wikipedia.org/w/index.php?title=Sino-Vietnamese_conflicts%2C_1979%E2%80%931991&type=revision&diff=873348089&oldid=869028990 , From his recent editing features, I suspect that 117.6.92.136 is his own disguised identity. 36.234.30.17 (talk) 23:21, 15 December 2018 (UTC)[reply]

Comments by other users

[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

[edit]

Of the IP's - the only one that shows technical signs of being a proxy is 1.186.181.126, which was likely a compromised host sometime recently. That's based mostly on this CBL listing, which does mention that the IP hasn't been seen in about 10 days. So, it may not be anymore (or, it may be being used / rented by someone different). SQLQuery me! 23:26, 13 January 2019 (UTC)[reply]

More