Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Wikipedia

Wikipedia:Long-term abuse/Full

< Wikipedia:Long-term abuse


    Belteshazzar

    Belteshazzar
    Shortcut: WP:LTA/BTSZ
    WikilifespanSeptember 2021 - present
    Sockpuppet investigationsWikipedia:Sockpuppet investigations/Belteshazzar
    InstructionsSuspected sockpuppet accounts should be reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information. All edits should be reverted, even if not obviously bad, in order to discourage further attempts to probe what we will allow. Belteshazzar is banned by the Wikimedia Foundation and should not make edits without the explicit permission of the WMF, so socks should be reported to SRG for global locks and blocks.
    StatusActive

    Basic information

    Belteshazzar (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    XTools Timecard

    Belteshazzar was first reported for sockpuppetry in September 2021 and was blocked for it in October 2021. As of August 2024 there have been 90 sock-puppet reports. This has led to the blocking of many accounts and IP addresses. Several of their preferred target pages have had to be semi-protected. As of September 4, 2023, Belteshazzar has been banned by the Wikimedia Foundation from editing any Wikimedia project.

    Targeted areas, pages, themes

    Medical themes

    Ophthalmology related:

    Opioid related:

    Diet related:

    They like to edit pages in the Wikipedia space, sometimes in seemingly innocuous ways, sometimes to try to make our policies more tolerant of their types of bad behaviour. A non-exhaustive list:

    Stalking

    A few examples of articles which they stalked other people to and then used multiple socks to edit:

    They also like to edit some personal essays within specific editors' user space:

    Self-referential

    Arguing the toss and attempts at self-justification:

    Seemingly random

    Habitual behaviour

    Belteshazzar initially used sockpuppet accounts but has since mostly shifted over to anonymous editing using proxy IPs instead with only occasional forays back into registering accounts. Their most recent registered account (as of October 2023) was blocked in September 2023.

    They will often make a few uncontroversial small edits to seemingly random articles before starting on their usual targets. This might be to cover their tracks or just to check that whichever IP address they are using that day is not already blocked. Edit summaries often contain plausibly innocuous descriptions. "Subject-verb agreement" seems to be a favourite.

    One pattern that is often seen is editing articles about baseball and baseball players with small updates. Seems to reflect a genuine interest in baseball, in addition to the foregoing reason of testing the waters with a few less obviously bad edits. Some such edits have actually been reinstated by other editors as minor improvements. (Doing this is fine but please try to avoid doing so in a way that Belteshazzar could misinterpret as supportive of their continued ban evasion.)

    After this, they will return to their previous main targets to reinstate their preferred changes (often with minor variations) and sometimes (but not always) try to justify their edits in their edit summaries. When trying to justify their behaviour they completely ignore the fact that the sockpuppetry is the main problem and are quite indignant that they are not treated with the same grace as an editor in good standing.

    When their preferred targets get semi-protected do they will sometimes take to the Talk pages to argue the toss there.

    They sometimes return to previously used proxy IP addresses once blocks on them expire suggesting that they have a fairly limited pool of proxy IPs at their disposal. Such IPs can probably be blocked for long periods without risk of disrupting legitimate editors.

    Stalking, harassment and retaliation

    Belteshazzar sometimes becomes annoyed with people who repeatedly report or revert their edits and will stalk their recent contribution histories and make small edits to articles they find there. Such edits are not normally particularly bad but, as they are editing articles about subjects that they know little or nothing about, they are very rarely improvements. This might be done to try to assert a degree of ownership over the articles that their imagined nemesis has edited or just to be annoying. This is disruptive even when the edits themselves are innocuous. The two users most frequently targeted in this way are Psychologist Guy and DanielRigal. In September 2023, Belteshazzar created a sock-puppet INeverEmailedPG referring to Psychologist Guy, who had received harassing emails seemingly sent by Belteshazzar. In November 2023 they escalated this behaviour by making a bogus report to WP:BLPN, seemingly in retaliation for being reverted, demanding that their preferred versions be reinstated.

    Canvassing

    When reverted they will occasionally try to canvass another editor who has edited the article in question for assistance. They do this by approaching editors on User Talk pages in a way that carefully avoids explaining why they are being reverted. As of December 2023, nobody has fallen for these approaches. If an editor in good standing is ever seen to be assisting them then we should consider the possibility that that editor has been tricked, and is acting in mistaken good faith, before reacting too harshly towards them.

    In addition to canvassing individual editors they sometimes complain about being reverted at Wikipedia:Help desk, Wikipedia:Teahouse and other places where they hope to find a new audience, unfamiliar with their disruptive antics, who might be tricked into taking their side and assisting them.

    Canvassing on other WMF projects

    Belteshazzar has also been active on the Wikimedia Commons where they have contacted other banned Wikipedia users including Chamaemelum in an attempt to get other disruptive users to support their edits. They claim to have a "list of users to contact". It is not clear whether Chamaemelum, or anybody else, actually became involved.

    Use of reminders/timers

    Sometimes Belteshazzar will edit a previously attacked article within minutes of page protection expiring. This most likely indicates that they set set a timer to remind them when pages expire so that they can get back in and attack the articles again as quickly as possible. This may argue for longer periods of semi-protection in cases where the risk of impact on legitimate anonymous editors is not too high.

    Cases

    SPI:

    Before the socking started there was all this drama about the Bates Method:

    There was a topic ban:

    And, of course, it was violated:

    Other notes

    Confirmed and suspected accounts


    Marquis de la Eirron

    Marquis de la Eirron
    Original name(s)Marquis de la Eirron
    Physical locationManchester
    Sockpuppet investigationsMarquis de la Eirron
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusPending Approval

    Basic information

    Marquis de la Eirron (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    The editor Marquis de la Eirron was site-banned on 3 December 2011. Since then, for years, the editor has used IP addresses and created multiple accounts at Wikipedia and Wikimedia Commons, especially to evade the ban.

    Targeted areas, pages, themes

    Mainly politics, generally of American, British, and Indonesian politics. Edits biographies of politicians, such as those of various ethnicity. Also peerages. Also pages related to COVID-19.

    Habitual behavior

    Cases

    Other notes

    Confirmed and suspected accounts


    Muhammad Samiuddin Qazi

    Muhammad Samiuddin Qazi (sami)
    Shortcut: WP:LTA/SAMI
    Original name(s)User:Muhammad Samiuddin Qazi (sami)
    Wikilifespan2017–present
    ISPPtcl
    Ebone,WorldCall
    Known IPs39.51.0.0/17, 119.157.0.0/17, 119.159.0.0/17, 119.153.128.0/19, 119.73.96.0/19, 182.190.16.0/20, 182.183.128.0/17, 43.246.220.0/22, 168.211.188.0/24, 168.211.189.0/24, 196.195.36.0/24, 117.102.0.0/18, 122.8.51.0/24, 45.116.232.0/22
    see notes
    Physical locationKarachi, Pakistan
    Sockpuppet investigationsMuhammad Samiuddin Qazi (sami)
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Basic information

    Muhammad Samiuddin Qazi (sami) (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    Sami either edits with sockpuppet which has been recently created or with an IP based out of Karachi, Pakistan.

    Targeted areas, pages, themes

    Chronic sockpuppeteer active in these broad topics: Hindi-Urdu pages (articles, categories and templates); Indian showbiz (adding Urdu POVPUSHing cats to actors, songs, films and TV shows), Pakistani television (creating blatant hoax articles, cats); the India-Pakistan conflict (creating POVPUSHing articles, templates and cats) and Muhajir topics (adding Muhajir POVPUSH cats).

    More extensive info on other pages targeted at this wikia by the abuser.

    Habitual behavior

    Mostly non-sensical Urdu/Pakistan POVPUSHing in the topics above. Any IP making such edits from the above range that geolocates to Karachi is most likely him. Also uses good hand bad hand tactics for deception. Fakes identities (claiming to be from different countries) and feigns ignorance of sockpuppetry.

    Cases

    Other notes

    For infobox: Basically any IP beginning prefixed with 39.51.*, 119.57.*, 182.190.*, 119.159.*, 119.153.*, 43.246.*, 182.183.*, 168.211.*, 196.195.*, 117.102.*, 122.8.*, 45.116..

    Confirmed and suspected accounts

    Confirmed

    Suspected


    Thai gun hoaxster

    Thai gun hoaxster
    Original name(s)Thai gun hoaxster
    Wikilifespan2017-present
    Known IPsSee below
    Physical locationThailand
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Basic information

    The Thai gun hoaxster is an IP editor that adds user entries in firearm articles usually with false references taken from legitimate entries in the same or other articles. Sometimes, he just makes up ref names. He also has sometimes edited the infoboxes to give incorrect service histories. They uses IP addresses from Thailand and has been active since at least 2017.

    Targeted areas, pages, themes

    Generally user sections in articles on firearms.

    Habitual behavior

    Copy/pastes existing references on other user entries to falsely substantiate the ones that he wants to add. He has IP hopped to edit war when others have reverted him. When editing, he will often use the article or section title as his edit summary.

    Cases

    History

    These are the user reports documenting the history of this hoaxster:

    Other notes

    IPv4 addresses

    Discrete addresses as examples
    Ranges

    IPv6 addresses

    Discrete addresses as examples
    Ranges

    Confirmed and suspected accounts

    This editor has usually used IP addresses although he has used one account known to the filing checkuser.


    Yaysmay15

    Shortcut
    Yaysmay15
    Original name(s)Vince Daryl Falcunitin
    Wikilifespan2014–2016 (as "Vince daryl falcunitin" and IPs); 2016–present (as "Yaysmay15" and socks/IPs
    ISPPLDT, Globe, Smart
    Known IPs49.145.xx, 58.71.xx, 112.198.xx, 112.210.XX, 122.53.xx
    Physical locationVarious (Manila; Quezon City; Bacoor, Cavite)
    Sockpuppet investigationsYaysmay15
    InstructionsRevert edits by socks, report them to sockpuppet investigations with a link to this abuse report, and block and tag if found. Articles/pages targeted may have pending changes protection enabled to limit repeated disruptive activity.
    StatusActive

    Basic information

    Yaysmay15 (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    Yaysmay15 is a disruptive user who frequently bloats recent history and timeline articles, especially those related to the Philippines with non-notable events. Commonly targeted articles are those of about years in the Philippines ("XXXX in the Philippines" articles), but has also targeted decade and century pages.

    The user started disruptive editing on Philippine history-related articles as "Vince daryl falcunitin" before June 2016, and as Yaysmay15 from June 2016. Most of the user's edits mostly restoring previously removed non-notable events or additions of newer ones, resulting to the Tambayan Philippines community to include criteria for events to be inserted to Philippine history articles by year, starting with 2015 in the Philippines through its talk page. After being blocked for edit warring with Hariboneagle927, Yaysmay15 started to use sockpuppets and do IP hopping to re-add events that he added on articles he targeted, then removed by other users.

    As of 2023, the user mostly edits through IPs.


    Targeted areas, pages, themes

    The user frequently targets articles about years in the Philippines, especially those discussing events in contemporary Philippine history. "XXXX in the Philippines" articles (e.g. 2013 in the Philippines, 2015 in the Philippines, 2016 in the Philippines, etc.) are the frequent targets, but Timeline of Philippine history and navboxes about the life and regime of recent presidents (e.g. {{Gloria Macapagal-Arroyo}},{{Benigno Aquino III}},{{Rodrigo Duterte}}), are also being targeted. Timelines and pages for recent centuries (timeline of the 20th century, timeline of the 21st century) have been also targeted. In 2023, they have been seen adding events in Media circus#Philippines, often recent ones and with citations that do not support claims of a media circus.

    Habitual behavior

    1. Yaysmay15 continually adds non-notable events, mostly sensational, routine, or redundant events (e.g. New Year celebration injuries and stray bullet deaths, road rage incidents, non-deadly road accidents, road accidents, that has no nationwide effect, routine anniversaries, etc.) on articles related to years in the Philippines. After other editors remove the events Yaysmay15 reverts them, eventually violating the edit warring policy.
    2. Once blocked, Yaysmay15 re-add the deleted events by creating a sock account, or hopping on IPs, usually of the 112.98.XX range.
    3. User or its sockpuppets create articles for several non-notable events, mostly sensationalized events, like Death of Emilyn Villanueva (PRODed, them speedied) and 2017 Quezon City road rage incident (AFDed). All articles are deleted as sensationalism and block/ban violations.
    4. After the pages Yaysmay15 or its sockpuppets are unprotected, they re-add events that a previously deleted prior or during the protection.
    5. After his edits are reverted, the user or its sockpuppets sometimes message users who remove it, thanking it, but in some cases, the user sends uncivil comments, that can be revision deleted if found to be grossly offensive.
    6. User is fond of adding non-notable events on navboxes of recent presidents.
    7. User uses some vague comments, like "fixing", to hide re-addition of non-notable events removed by other users.
    8. User names by Yaysmay15 sockpuppets usually includes the names "Yays" (or its variants) "Vince Daryl", "Falcunitin", but soon resorted to use IPs on the 112.198.XX or 122.53.XX ranges.

    Cases

    Other notes

    Confirmed and suspected accounts


    Lysdexia

    Morning277

    Morning277
    WikilifespanAugust 2010 [1] – present
    ISPAT&T DSL
    Known hostmasks84.169.0.0/16, 54.215.0.0/16, 54.241.0.0/16, and 54.251.0.0/16 confirmed with checkuser and blocked; 46.137.192.0/21 reported
    Physical locationPleasanton, California, San Diego, Miami, Bangladesh and others
    Sockpuppet investigationsMorning277
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive





    Please report all ongoing incidents of abuse to AIV or ANI.
    Note: Unfortunately, some of the information below and to the right conflates[2] LegalMorning and Wiki-PR. We now know that they are two separate entities.





    Basic information

    Full (talk · contribs · block log · arb · SPI)

    Comprehensive edits analysis

    Community banned in 2012.

    Who is Morning277?

    This is a writer, or group of hired writers, who collaborate without ever using talk pages to communicate with each other. As of January 2014, 323 accounts have been confirmed, with another 95 suspected.

    Wiki-PR editing of Wikipedia#Investigation and company reaction includes a discussion of whether Morning277 is Michael Wood or Wiki-PR.

    It could be Michael Wood (Elance / LinkedIn / G+), the owner of professional writing service LegalMorning. Mr. Wood's website advertises Wikipedia article writing, monitoring, and translation services. He advertises that he doesn't use any foreign subcontractors. Mr. Wood adds on his blog that he's also a regular contributor to a bunch of websites: AllBusiness Experts, Yahoo, Business Insider, Business2Community, Social Media Today, and others. He runs a blog with articles such as "Are There Rules Against Paying Someone To Write A Wikipedia Article" and "Understanding What It Takes To Be Notable For Wikipedia".

    Or it could be Wiki-PR.

    Or perhaps it's both.

    Targeted areas, pages, themes

    These writers create or (less often) rewrite articles about the people and companies who commission them. It is believed that there is a company with several regular employees, which also hires freelancers from Odesk and Elance [3] [4].

    The client base is almost entirely from the United States. It is heavily laden with Silicon Valley dot-coms and their principals, dubbed "serial entrepreneurs" in several instances. Small financial institutions also make a showing. Articles about authors, medical doctors, a musician, a small oil company, and even a minor political party [5] have been placed.

    In the less frequent case when an article about the client already exists, the Morning277 writers make extensive changes, cleansing the article of any disparaging material in the process.

    Below is a list of article subjects found in User:Sublimeharmony/sandbox11, linked to the corresponding articles (sometimes the name of the article name differed from the subject). Most of these articles were deleted, but attempts to replace some of them, most often with variations on the name, have been seen. Often the new articles are shorter, but comparison of the new articles to the drafts in User:Sublimeharmony/sandbox11 has shown identical passages. This is not an exhaustive list of Morning277's topics; these drafts appeared between 22 February and 11 July 2013.

    Sublimeharmony sandbox topics

    list of topics
    term/article draft search remarks
    4Cabling draft search recreated at 4 Cabling;new article 4cabling
    Aasted draft search
    Alsbridge, Inc. draft search
    American Writers and Artists Inc. (AWAI) draft search new article American Writers and Artists
    Bizible draft search recreated at Bizible, Inc. and Bizible (company)
    Brendan Wallace draft search
    Brosix (Company) draft search also was at Brosix and Brosix (company); new article at Brosix Inc.
    Bunndle draft search
    CALNET draft search
    CHMB draft search not the radio station; restored at CHMB, Inc.; new article CHMB Solutions
    Campus Apartments draft search in Philadelphia; CEO is David J. Adelman. See Wikipedia:Articles for deletion/Campus Apartments
    Certified Disaster Recovery Engineer (CDRE) draft search
    Certified Penetration Testing Consultant C)PTC draft search
    ClassDojo draft search restored at ClassDojo (software)
    Cleeng draft search new article Cleeng.com
    Confio Software draft search Confio Software Inc.
    CrowdOptic draft search recreated at CrowdOptic, Inc.
    DDC Advocacy (DDCA) draft search recreated at DDCA
    DPT Laboratories, Ltd. draft search philanthropy section added to existing article by User:Aeolis Mons; previously at DPT Labs
    David Kiger draft search recreated at David Kiger (business executive)
    David Schwedel (entrepreneur)/David A. Schwedel draft search recreated at David Schwedel (investor); comment from Morning277
    Digital Prospectors Corporation (DPC) draft search
    Dominique Molina draft search draft at Wikipedia talk:Articles for creation/Dominique Molina
    Echopass draft search
    Ethan Bearman draft search
    FindTheBest draft existing article edited by User:A1Abigail
    Fundology draft search
    Game Cooks draft search
    GatherSpace (company) draft search earlier version at GatherSpace
    Genius Inside draft search new article Genius Inside (company)
    Global Met Coal Corporation draft search
    Go Try It On draft search
    GroundWork draft search new article GroundWork Inc.
    HALO Maritime Defense Systems (HMDS) draft search
    Heel That Pain draft search
    Heliospectra draft search
    ITelagen draft search
    Inflection draft search recreated at Inflection (technology); related to PeopleSmart and GoodHire
    Inigral draft search recreated at Inigral (company)
    John Uustal draft search
    Jonathan Cardella draft search founded NeighborCity
    Junk It! draft search
    Legitmix draft search See Wikipedia:Articles for deletion/Legitmix
    Loyaltyworks (company) draft search new article Loyaltyworks
    MarketLive draft
    Maximilien de Hoop Cartier draft revived at Max Cartier and Maximilien Cartier
    MediCortex draft search
    Mike Macadaan draft
    Misty Lown draft See Wikipedia:Articles for deletion/Misty Lown
    ModelManagement.com draft search not Heidi Gross' company
    Muzak Holdings LLC draft existing article edited by User:Namfields
    Neal Creighton, Sr. draft
    Network Capital draft search newer article at Network Capital Funding Corporation
    NewYorkStay.com draft recreated as NewYork Stay
    ONEHOPE draft search recreated at OneHope Wine; California not Florida
    Oren Laurent draft search recreated as Oren Laurent (entrepreneur) and Oren Laurent (business executive)
    PCN Technology (company) draft search new article at PCN Technology
    PeopleSmart.com draft search
    Pneuron draft search
    PressPadApp draft search recreated at PressPad (software)
    Reputation Advocate draft
    ResumeBear draft search
    Rev. Fr. Emmanuel Lemelson draft related article Amvona
    ReviewBoost draft search recreated as Review Boost (company)
    Reza Ghorbani draft
    Rich Schefren draft new article Rich Schefren (entrepreneur)
    SJ (born Scott Jablonski) draft search new article SJ (singer)
    Security Innovation draft
    Shimao Property Holdings Ltd. draft existing article edited by User:Jhaneez B
    SocialSoft draft search
    Sollensys Corporation draft search
    Steven M. Neil draft
    Sweet Couch draft search new draft at User:Cecilia.firstencoding/sandbox
    TableTopics draft search not Toastmasters; new article TableTopics (game)
    Tee Ashira draft
    Telly draft
    The American University of Iraq, Sulaimani, draft N/A existing article edited by User:Agnesatelance
    The Hand and Wrist Institute draft
    Tom Dyson draft
    Tom Hoban draft
    Tom Kemp (entrepreneur) draft
    Tsebo Outsourcing Group draft search draft at User:Robertkerans/sandbox
    ViSalus draft article contributed by Morning277 himself
    Virool draft search recreated at Virool (company)
    Waterfield Group draft search recreated at Waterfield Group (company)
    Zipwhip draft search
    Zorpia draft N/A existing article edited by User:Hildred

    Non-Sublimeharmony topics

    Below is a list of other topics not necessarily present in Sublimeharmony's sandbox but which were worked on by Morning277 writers (to do: remove the Sublimeharmony topics).

    other topics
    term/article search salted remarks
    24Hr HomeCare search
    4Cabling search
    Aasted search
    AbanteCart (software) search previously at AbanteCart
    ABCpdf search new article ABCpdf (company) posted by Goldenfish05 (talk · contribs)
    Adeyemi Ajao search
    Adrienne Arieff search
    Affiliate Traction/AffiliateTraction (company) search
    Alex Mehr/Alex Mehr (entrepreneur) search related to topics Shayan Zadeh and Zoosk
    Alliance Media search
    Allied Marble search
    Alsbridge (company) search
    Altius Education search
    American Writers and Artists Inc. search
    Amvona search later creation at Amvona (site)
    AnFed Bank search
    Apex Web Technology search
    Appsfire search
    Arctic Island search
    Authr search
    Banc De Binary search
    Bayan Towfiq search [6]
    Becker Avionics search no posted by TrialMystery (talk · contribs); draft at User:Morning277/sandbox/BUSA
    Bernstein Crisis Management search
    Biocom search
    Bizible search
    Bob Dorf search
    BofI Advisor search
    BofI Federal Bank (company) search previous article BofI Federal Bank
    Bombay Realty search posted by Morning277
    Bottlenose.com search
    Boundary, Inc. search
    Brendan Wallace search
    Brosix (Company) search
    Bunndle search
    CHMB (company) search
    Cal-American Homes search
    Campus Apartments search See Wikipedia:Articles for deletion/Campus Apartments
    Campus Special search
    CaratLane search
    CardsChat search
    Caren Z. Turner search
    Carolyn A Brent search
    Carolyn Brent search
    Certified Disaster Recovery Engineer search
    Certified Penetration Testing Consultant search
    Certified Penetration Testing Engineer search
    Chris Hobart search
    ClassDojo search
    Cleeng search
    Concussion Mitigation Technologies search
    Confio search
    Confio Software search
    CrowdOptic search
    DDC Advocacy search
    Daily Stocks, Inc. search
    Darian Kovacs search yes comment by Sublimeharmony Wikipedia talk:Articles for creation/Reverend Darian Kovacs by MarcusBrown777
    Dasein Executive Search search
    David Gorodyansky search
    David Kiger search
    David Rusenko search
    David Schwedel/David A. Schwedel/David Schwedel (investor)/David Schwedel (entrepreneur) search yes draft,comment from Morning277
    Deal Angel (company) search earlier article was at DealAngel
    Deepak Ravindran search
    Digital Prospectors Corporation search
    Digital Risk search
    Dominique Molina search
    EDSI (company) search previous article at EDSI
    EFans search Wikipedia talk:Articles for creation/eFans contributed by Gobama396
    EG Innovations search
    EVastment search
    EVestment search
    Eat24 search
    Echopass search
    Educational Data Systems, Inc. search
    Edward Vilga search
    Eg Innovations search
    Emad Rahim search
    Emmanuel Gregory Lemelson search
    Ethan Bearman search
    Exosite (company)/Exosite (organization) search no software not enzymes
    FanXchange search
    FindTheBest search
    FlixFit search
    Flowroute search [7]
    Frank Cohen (entrepreneur) search
    Fundology search
    Game Cooks search
    Gary Guion search
    GatherSpace (company) search
    Genius Inside search
    George Patton Associates (company) search
    GingerBread Lane search
    Global Met Coal Corporation draft search no
    GoodHire search no
    Goodmortgage.com search
    Gordon Kahn (architect) search
    GroundWork search yes
    Guidant Financial search
    Habif, Arogeti & Wynne, LLP search
    Hand and Wrist Institute search
    Hannah Bronfman search
    Hard Landing (novel) search
    Heel That Pain (company) search
    HelloSociety search
    HiringThing search AfD
    Hotel Urbano search
    Identified (company)
    ITelagen search
    Ilan Kidron search
    Imagination Stage search
    InCrowd/InCrowd Inc. search no
    Inflection (company) search
    InfoRelay search
    InfoStretch search
    Inigral search
    Innoz search no recreated at Innoz (company)
    Investment Underground search
    Jason Kanner search
    John Uustal search
    Jonathan Cardella search
    Junk It! search
    Keenan (company) search
    Kevin Surace search
    Key Realty School search
    Kryoman search
    Kryoman the Robot search
    Kuvva search
    Las Vegas Luv Bug Weddings search
    Legitmix search See Wikipedia:Articles for deletion/Legitmix
    Lettrs search
    Loyaltyworks (company) search
    User:Sangoku09/sandbox about Manhattan Fruitier search
    Moughenda Mikala contributed by Morning277
    Mark A. Fischer search
    MarketLive search
    Martin Bayne search
    Matty Amendola search
    Mavatar search
    Mazor Robotics search
    MediaWhiz search no
    MediCortex search
    Message Systems search
    Metadata Orchestration search
    MicroConstants search
    Mike Macadaan search
    Misty Lown search
    MobiManage search
    ModelManagement.com search
    Moderna Therapeutics search
    Moovweb search
    More Than Just Great Dancing search
    N2 Publishing search
    Nalden (entrepreneur) search new article at Nalden
    Nathan Ballard/Nathan Finch Ballard search no AfD
    National Child Award for Exceptional Achievement search
    National Children Award for Exceptional Achievement search
    Neal Creighton, Sr search
    NeighborCity search
    Network Capital search
    Neuralstem, Inc. search
    NewYorkStay search
    Newsfilter.org search
    Nicole Kersh search
    No Payment Made search
    Olympus Worldwide Chauffeured Services (company), Olympus Worldwide Chauffeured Services search AfD
    Oren Laurent search
    PCN Technology (company) search
    PeopleSmart search
    Pheed search
    Plumbee search
    Pneuron search
    Pneus Online search
    Pogoseat search
    Poikos search
    PointCross search
    PokerSites search
    Portal A Interactive search
    PressPad search
    PressPadApp search
    PushToTest search
    Qumu (Company) search
    Quote Wizard search
    QuoteWizard search
    Rachel Amanda search
    RentSeeker/Rentseeker search
    Renters Warehouse search
    RepairClinic.com search
    Wikipedia talk:Articles for creation/ResortsandLodges.com search
    Restoration1 search
    ResumeBear search
    Review Boost (company) search
    ReviverSoft search
    Rick E. Schaden search
    RiseSmart search
    Robert W. Kelley search
    Rounds (social network) search
    RxWiki search
    Sequans Communications search
    SJ (musician) search
    Samir Becic (fitness expert) search
    Scott Cullather search re-inserted by a second sock after deletion. Related to InVNT. Salted. AfD
    Security Innovation search
    Security Innovations search
    Shayan Zadeh search related to topics Alex Mehr and Zoosk
    Simeio Solutions search
    Sirion Biotech (company) search
    Small Business Owners of America search
    SocialSoft search
    SouthWest Energy/SouthWest Energy Ltd/SouthWest Energy Ltd. search no
    Sphero search
    Splash (company) search
    Splash (service) search
    Spotware search
    Steve Kuhn (Executive) search
    Steven M. Neil search new article Steven M Neil
    Streak (company) search
    Submit Express/SubmitExpress search no
    Summit Learning Services search
    Sweetcouch search
    Systemware Inc. search
    TableTopics search
    TapouT XT search
    Tee Ashira search
    Telly (website) search
    The Network Hub search
    The RLJ Companies search
    The Wikileaks Party search
    Thumb (social network) search
    Timo Weiland search
    Timo Wieland search
    Tom Dyson search
    Tom Hoban (entrepreneur) search
    Tom Kemp (entrepreneur) search
    Transport Marketplace search
    Transportmarketplace search
    TravelShark/Travel Shark search no
    Tsebo search
    Tsebo Outsourcing Group search
    US Federal Contractor Registration search
    Udutu search
    Unanet Technologies search
    UnbeatableSale search
    Unified Inbox search
    Unique Squared search
    Vidi Aldiano search
    Virool search
    VoIP Club search
    VoIPClub search
    Volusion (company) search previous article Volusion (edit | talk | history | protect | delete | links | watch | logs | views)
    Vungle/Vungle (company)/"Vungle (company)” search no
    Waterfield Group search
    WeTransfer.com search new article at WeTransfer
    WebWatcher search no
    Wem (rapper) search
    World Escape/WorldEscape search yes
    Wpromote search
    Yodo1 search
    Yozons search
    Zipwhip search
    Zoosk search

    Articles posted on simple wiki

    The articles listed below were posted from two accounts. Due to overlap with Morning277 topics found on the regular English Wikipedia, all of these are assumed to be of interest to Morning277. The search links are for searching the regular English Wikipedia.

    articles posted on simple wiki
    term/article search
    simple:4cabling search
    simple:AEgis Technologies search
    simple:BillFloat search
    simple:Boundary Inc. search
    simple:Brendan Wallace search
    simple:Brosix search
    simple:Calnet search
    simple:Caren Turner search
    simple:Chris Krause search
    simple:Cleeng search
    simple:DDC Advocacy search
    simple:David Gorodyansky search
    simple:Deepak Ravindran search
    simple:Enigma NMS search
    simple:Gerald Imber search
    simple:GroundWork search
    simple:HelloSociety search
    simple:Helsinn search
    simple:InVNT search
    simple:Incrowdnow search
    simple:Kaleem Shah search
    simple:Legitmix search
    simple:MarketLive search
    simple:Message Systems search
    simple:Neal Creighton, Sr. search
    simple:Nicole Kersh search
    simple:Oogwave search
    simple:Qubole search
    simple:Resortsandlodges.com search
    simple:ResumeBear search
    simple:Reval search
    simple:Rick E. Schaden search
    simple:ServiceMax search
    simple:Steve Kuhn search
    simple:Telly (network) search
    simple:The RLJ Companies search
    simple:Thom Reilly search
    simple:Tom Dyson search
    simple:Tungsten Branding search
    simple:Wayne Tamarelli search
    simple:WillowTree Apps search
    simple:Zultanite search

    Habitual behavior

    Morning277 articles usually cite stories from the Web sites below, some of which are blog-like in accepting material from "citizen journalists." Search links are provided for strongly indicative sites:

    • Vatalyst.com (search)
    • InvestmentUnderground.com (search)
    • CaBusinessJournal.org (search) Project Spam page
    • DividendKings.com (search) Project Spam page
    • Business2Community.com (search) turns up some likely false positives
    • DigitalJournal.com
    • Voices.Yahoo.com (sometimes misleadingly referred to as simply Yahoo)
    • Iwatch.CNN.com (sometimes misleadingly referred to as simply CNN)
    • CrunchBase
    • Technorati.com

    Variations have been seen, but the most stereotypical editing chronology of these writers is as follows:

    • a series of at least ten edits to existing articles, typically marked (accurately) as minor and without edit summaries, often concentrating on articles related to Bangladesh. This is done in order to begin achieving autoconfirmed status.
    • sometimes the creation of a user page and/ or talk page to go along with the account, the user page usually consisting of a one- or two-sentence biography stating the writer's ostensible reason for being on Wikipedia. This is done to prevent the username from showing up as a red link in the history of the user's contributions, which otherwise would be an easy flag.
    • no edits for a few days while awaiting autoconfirmation.
    • once account is autoconfirmed, creation of an article in a sandbox; when created, the article has multiple paragraphs and a list of references, although at this stage the citations are occasionally in a References section rather than in-line (no edit summary is given here, either)
    • references are commonly named with a two- or three-character, capitalized abbreviation and are often used multiple times in the article, sometimes multiple times in the same paragraph, giving the article a visual appearance of overwhelming credibility— for this reason, the writers never bundle their citations as this would detract from the entire purpose of adding citations (i.e., to make the article seem legitimate at first glance or even second)
    • another editor, often using an AT&T DSL IP address beginning in 70, 71, or 99 with "pltn" (believed to be Pleasanton, California) or "sndg" (believed to be San Diego) in the hostname may then remove the sandbox template while the article is still a sandbox
    • after removal of the sandbox template but before the article is moved to main space, there may be a delay of hours or days
    • the article is moved to the main space and may receive small or large changes (including changes before it is moved)
    • account from which article was inserted is usually, but not always, abandoned soon afterward
    • usually the contributed articles are left orphaned, or are linked only to other Morning277 articles; if an unaffiliated editor places an orphan tag on the article, it may be removed by a Morning277 editor without the status as orphan having been altered
    • other affiliated writers, or writers who may be the client or the client's employees, often make small edits to the article; edits from IP addresses are common in this phase
    • photos or logos, if added, are placed through a separate (not necessarily autoconfirmed) account.
    • if the article is tagged for improvement or deletion, Morning277 accounts or IP editors frequently remove the tags or participate in AfD discussions. When tags are removed, the corresponding edit summary deceptively claims that grammar was corrected or promotional material was removed, decrying puffery, or states that the article's subject is well-known in a certain metropolitan area.
    • if an article is deleted, it may be recreated from a different account, typically without the aid of an administrator, often under a different but very similar title.

    Morning277 articles are written in fluent English, with few spelling, grammatical or punctuation errors. However, they often have a promotional tone, and always contain material that is either neutral or that is flattering of their subjects, never material that is critical or negative, to the extent that they have sometimes been speedily deleted as spam. References sections always have a surfeit of citations, with the clients' press releases and web sites balanced by passing mentions in seemingly independent publications.

    Cases

    Other notes

    Check-user information showed use of 184.169.0.0/16 belonging to row44.com, an ISP which provides service aboard airliners. Used 65.122.15.184 at the Phoenix airport. Edited from Amazon EC2/AWS hosts in the United States (184.169.0.0/16, 54.215.0.0/16, 54.241.0.0/16, and 54.251.0.0/16, all confirmed with check-user information) and Ireland (46.137.194.87, not CU confirmed).

    Confirmed and suspected accounts


    Gabriella~four.3-6

    Gabriella~four.3-6
    Shortcut: WP:LTA/GF36
    Wikilifespan2013–present
    ISPVerizon
    Physical locationNew Jersey, USA[8]
    Sockpuppet investigationsWikipedia:Sockpuppet investigations/Gabriella~four.3-6
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Gabriella~four.3-6 (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    No basic information entered

    Gabriella~four.3-6 is a disruptive editor targeting the areas of TV, cartoons, anime, and manga. She often edits or wholly rewrites character or show pages without consensus and uses talk pages as forums or discussion pages (instead of places like the reference desk). The community first became aware of the editor's sockpuppetry circa January 2014.

    Targeted areas, pages, themes

    Most known for her focus on the Monster High general topic area, with a special interest in List of Monster High characters. Lately edited on pages relating to TV shows (ex. List of Married... with Children characters), cartoons (ex. List of Hey Arnold! characters), anime (ex. Charlotte (TV series)), and manga (especially in the yaoi genre, ex. Hitorijime My Hero). Also treats talk pages as general discussion pages, as seen here on Talk:Luca (2021 film), for example.

    Most recent interests include K-pop (Babymonster and Fromis 9) and List of Bob's Burgers characters.

    Habitual behavior

    Naming habits

    Socks will often name themselves Gabby, Gabriella, or full name Gabriella Grace Comito or any variant of the above often with numbers following. Usernames often contain punctuation (User:GabbyComito.Dont-BlockMe!, User:WhyDoIEvenBotherWithIt?). Many accounts (circa 2017) have included food terms (User:BananaSplitSundae-0, User:WafflesandPancakeswithSyrup-But Watch Out! Very Messy., User:HotBigPretzelsNoMustard, etc.

    Cases

    Useful background can be found at Wikipedia:Sockpuppet investigations/Gabriella~four.3-6/Archive and the talk page history of the master.

    Other notes

    English is probably this person's first language, but her printed grammar is often malformed and she sometimes uses bizarre affects like "I'll be well at it", which doesn't seem consistent with how most people from New Jersey speak. She has previously posted on her talkpage that she has Autism Spectrum Disorder. When she chooses to communicate, her comments are often unclear, rambling, and sometimes incoherent. Questions that she asks are typically about trivial matters like cartoons, the Monster High doll franchise, TV series, and the Japanese language.

    Confirmed and suspected accounts


    Reports

    Honduras200010
    WikilifespanAugust 2020 - present
    Physical locationHonduras
    Sockpuppet investigationsWikipedia:Sockpuppet investigations/Honduras200010
    InstructionsSuspected socks should be reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Basic information

    Honduras200010 (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    XTools Timecard

    No basic information entered

    Targeted areas, pages, themes

    Both under registered accounts and IPs, typically there are intersections of two or more of the following:

    • climate classification
    • adding or editing images
    • articles on cities worldwide, centered on Honduras and Venezuela (which are also heavily represented in the user's choice of account names) and radiating out from there
    • Laura Pausini, both edits to the article on her and account names based on songs by her, such (Desesperadocasihecholeño, Lasolitudineitaly, Susonrisadefabula, Angelesenelcielo)

    Habitual behavior

    Makes changes to climate-related pages that are almost uniformly refuted by others involved in those pages. Add photos to articles over the objections of others. Routinely alternates between IP addresses from a few ranges and registered accounts. Sometimes builds up ability to edit semi-protected articles by a series of small edits, not infrequently making and edit and then reverting it. Also:

    • bases account names on songs by Laura Pausini, such (Desesperadocasihecholeño, Lasolitudineitaly, Susonrisadefabula, Angelesenelcielo)
    • citing sources in edit summaries instead of in the articles
    • run-on account names, often in Spanish, often including the name of a person, usually a woman, sometimes a star, always with only the first letter capitalized (Vilmapalmabuenosaires, Josephinefrance, Cheatingjosh, Kassandrarctv.ven, Lolysanchezven, Latinamericancities, Vengodevalencita, Nightinmerida)
    • account names that double the final letter: Braziliann1996, Washingtondccityy, Thechinesee, Judydaviss)

    Cases

    Other notes

    Confirmed and suspected accounts

    Hassan Guy
    Wikilifespan2016–present
    Known IPs37.200.197.207, 5.36.0.0/17, 5.37.128.0/18, 62.231.224.0/20, 62.61.160.0/19, 85.154.0.0/19, 82.178.48.0/20, 82.178.176.0/21, 41.253.0.0/18, 41.252.0.0/18, 134.0.192.0/22, 165.16.119.128/26
    Physical locationMainly Libya and Oman
    Sockpuppet investigationsHassan Guy
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Basic information

    Hassan Guy (talk · contribs · block log · arb · SPI confirmed suspected)
    Guy Comprehensive edits analysis
    Hassan Guy either edits with sockpuppet which has been recently created or with an IP based out of mostly Oman and occasionally Libya.

    Targeted areas, pages, themes

    Chronic sockpuppeteer who primarily attacks and disrupts articles related to Pakistan Armed Forces with a Pro-Pakistani bias. An incomplete list of affected articles is mentioned below.

    Habitual behavior

    Has a tendency to add poorly sourced information and canvass for support with other Pakistani editors.

    Cases

    Other notes

    Confirmed and suspected accounts

    Confirmed

    Suspected

    Brianmagallano
    Wikilifespan2012–present
    ISPVarious; most likely to be PLDT. Dito Telecommunity or Globe Telecom IPs
    Known IPsVarious
    Physical locationCebu City, Philippines
    Sockpuppet investigationsBrianmagallano
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Basic information

    Brianmagallano (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    Vandal primarily targeting video game articles, Philippine media articles, and Football articles, introducing false information, active for years even after blocks. Dozens and dozens of suspected socks from the same IP range.

    Targeted areas, pages, themes

    Video game articles, Philippine media companies, Football articles

    Habitual behavior

    Other notes

    • The vandal is rarely seen creating new accounts, however, he is very active using IP addresses. The IPs are based from Cebu City or the Central Visayas region of the Philippines when checked with Geolocate.
    • As of 2022, the vandal is using different IP addresses in en.wiki and seldom creates sockpuppet accounts. However, he has been seen creating various accounts in Commons, with the main sockpuppet account named as User:Yuiyui2001. See Requests for checkuser/Case/Yuiyui2001 and Category:Sockpuppets of Yuiyui2001.
    • The vandal is also seen in Tagalog and Cebuano Wikipedias, doing the same edits whenever his current IP address is blocked here in en.wiki.

    Confirmed and suspected accounts



    ItsLassieTime
    Original name(s)ItsLassieTime
    Wikilifespan2008–present
    Known IPsmultiple, unknown
    Physical locationMaine
    Sockpuppet investigationsItsLassieTime
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Basic information

    ItsLassieTime (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    User:ItsLassieTime (ILT) is a prolific sockmaster with roughly 200 confirmed accounts dating back to 2008 with accounts blocked every year from 2009–2012, and again 2015–2018. Checkuser data is most likely stale in uncovering new socks, save for those operating simultaneously at the time of an SPI, and so behavioral evidence may be the only means to link new accounts to the old ones. Due to this user's penchant for creating multiple personas, mass copyvio, and then attacks or threats toward users who disagree with their edits, (example) new socks need to be blocked as soon as the habitual problems emerge before too many problem articles are involved. Checkuser is generally advisable as this individual has at times created sleeper accounts.

    The original pattern of this sockmaster was to create dozens of articles (up to 100 in a couple cases) with relatively few accounts. In 2016, the pattern changed to produce a massive number of accounts (an example being approximately 20-25 during February 2016) that made fewer edits each, but often purely for disruptive purposes in a game of "catch me if you can." It is likely that these may be two different individuals, designated LassieTime1 and LassieTime2. LassieTime2 is currently the far more disruptive sockmaster. That said, the LassieTime1 sockmaster may also still be quietly editing children's book articles, with a continued pattern of undiscussed changes, too-close paraphrasing, plagiarism, and improper attribution, though otherwise not drawing attention to themselves—in those cases, simple reversion and if needed, running the earwig tool and requesting revdel of problem edits seems to settle the matter.

    Targeted areas, pages, themes

    • ItsLassieTime socks tend to edit a very broad range of articles including comic books, ballet, literature, animals, religion, drugs, and the Old West. One consistent pattern is to have edits or account names associated with children's literature or TV shows from the 1950s and 1960s. Edits from 2015 forward added geographic focus, particularly the state of Maine.
    • Each sock account tends to only edit a few articles in a narrow subject area, and behavioral analysis usually will not indicate that the socks are editing the same article at the same time. More recent socks tend to range a bit farther afield.
    • This user tends to perform massive rewriting and restructuring of articles with no prior collaboration and refuses to collaborate once other editors request that they do so: this is one example.
    • Has a penchant for WP:COPYVIO, close paraphrasing, and related problems. The original uncovering of this sockmaster also resulted in an extensive CCI involving about 700 articles which lasted from 2010 to 2023: Wikipedia:Contributor copyright investigations/ItsLassieTime.
    • Often replaces sourced material with unsourced material or improperly attributes citations. Sometimes, copying directly from a source; more recently has tended to closely paraphrase and put in citations that are misattributed or don't match up to content. Often engages in SYNTH and OR.
    • Another problem was frequently uploading non-free images. Many examples at User talk:ItsLassieTime
    • The final common behavior is attacking anyone who disagreed with their edits, including sometimes filing at AN/I, best described here as "Having run into ItsLassieTime multiple times before, the ownership issues are seriously dead on. She did the same crap with all the Lassie articles, driving off every editor who actually wanted to improve them..."
    • A 2016 pattern uses multiple accounts making multiple edits on the same article, such as here: [9], many now linked to the state of Maine or assorted highways in the United States.

    Habitual behavior

    • Original problem was mass socking combined with massive copy and paste copyvio from source materials in addition to behavioral issues noted here. User created some new articles but mostly edited existing articles. Since 2015, pattern now tends to primarily be disruptive editing with far less content creation.
    • Primary behavior of this user, regardless of persona, is 1) High degree of sensitivity to criticism, 2) Disruptive behavior when challenged in any fashion, ranging from pitiable appeals for sympathy to vicious personal attacks. 3) Ability to make a prolific number of edits in a short period of time. Probably has learned from this page and has altered standard behavior patterns, but is unable to avoid being disruptive in some fashion and engage in WP:NOTHERE behavior.
    • Characteristic original pattern was to make massive numbers of copyedits (sometimes 50 or more in a single day) to a small number of articles, often the very first day the sock account is created. Changed pattern in 2016 to create multiple single purpose accounts with only a few edits each, but still a large number of total edits, most disruptive.
    • Often opens a user page and user talk fairly early on.
    • Usernames frequently reference children's books or TV shows. 2016 pattern includes variants on ItsLassieTime name. Other personas may reflect primary subject area edited (ballet, westerns). Some are random personas.
    • Different personas (including variations of age and gender) for different socks and editing areas, for example, sock account User:LaSylphide tended to edit articles related to ballet and Hans Christian Anderson, claimed to be a grandmother. In the same general time frame, yet another sock account User:Buttermilk1950 edited rodeo articles and claimed to be a teenaged girl: [10] and [11]. Admitted here to doing so: "Creating characters like a Marine, an elderly resident in a senior home, a voodoo priest. I thought it was all harmless backstage fun."
    • Admitted to several sock accounts here: [12]
    • Attempted to justify socking on the grounds of creating separate accounts for topic areas: here
    • Often cites extensively to hardcopy works, which makes verification difficult. Often claims to be ordering new books.
    • Often attacks anyone who disagrees with their edits, many examples noted in the chart below. In the past has taken others to ANI, often accuses others of "harassment" or otherwise being unkind or unfair.
    • Often presents a sympathetic or pitiable persona, particularly after being challenged or disciplined. (Sometimes, though not always, claiming to be young/old/ill/disabled, etc.) May express remorse and a promise to behave better, usually claiming errors are due to inexperience, but actual behavior will not change.
    • Likes to submit articles for GA or FA status. Doesn't like when they are criticized.
    • Tag-teaming with sockpuppets and meatpuppets is also a hallmark: When LaSylphide was blocked, she made an edit claiming to be her husband [13] requesting an unblock. Buttermilk1950 was caught editing as ItsLassieTime, whereupon ILT claimed to be her mother. This user also tends to locate allies with a similarly tendentious style of editing and gets them to help in going after editors who they are attacking.
    • Has been known to have the sock accounts "talk" to each other.
    • Series of edits as the banhammer dropped in 2009 are particularly illustrative: [14]
    • As shown in this SPI case (among others), they may impersonate the habitual behavior of other LTAs, such as David Beals, Soft skin, Link Smurf, and CatCreekCityCouncil.
    • A new behavior starting in Oct 2016 is to {{hat}} reference sections, see sock #1 and sock #2.
    • In 2017 and 2018 a pattern of making mass reverts, templating users, and (as usual) reporting users to ANI was observed: example, example

    Cases

    • Archive: Wikipedia:Sockpuppet_investigations/ItsLassieTime/Archive
    • This chart below is an incomplete list, outlining behaviors associated with the over 140 sockpuppet accounts originally associated with this user. The list below is no longer maintained per WP:DENY, but most confirmed socks are here.
    • Accounts in the original CCI indicated with †
      • 2015: Reappeared, behavior matched ILT 1
      • 2016: Over 30 accounts created, behavior matched ILT 2
      • 2017: No problematic accounts identified until the end of 2017, at which time at least 11 new accounts were created in a short period of time.
      • 2018: At least 20 confirmed accounts.
    Name Create Date First Edit CU Confirmed? Evidence
    808Starfire (talk · contribs) † November 27, 2008 – November 25, 2009 Colt McCoy NFL football player Y Various popular culture topics, football players, TV shows, movies, actors, Charles Dickens. Submits Shirley Temple to FAC, withdraws when another of their socks undergoes an SPI, [15].
    Anny Nonymous (talk · contribs) November 30, 2009 Babes in Toyland (edit summary removed), [16] Y Various, [17]
    Audiobooks7 (talk · contribs) January 24, 2011 – September 23, 2011 Shirley Temple Y Apparently scrubs Shirley Temple and Little Orphan Annie of copyvio issues
    BeethovenFidelio (talk · contribs) March 30, 2008 List of Flipper episodes, [18] y Flipper. Admits to being a sock of ILT, [19]
    BlastAwayMeHearties (talk · contribs) 15 March 2010 to Ucucha Y Only two edits, both to Ucucha's page, [20], [21], and to Graham Beards but signs with BlowItAway (talk · contribs), [22]
    BlowItAway (talk · contribs) 15 March 2010 [23] Y Only two edits, both to Graham Beard's page, to copyedit posts left by its sock, [24], [25]
    Buttermilk1950 (talk · contribs) † March 10, 2009 – April 4, 2009 User page, "I love Wikipedia", and section blanking at Rodeo Y
    CharlesWTrowbridge (talk · contribs) July 18, 2011 – September 17, 2011 Horatio Alger Y Removes copyvio from a number of articles: contribs
    D4rkersib (talk · contribs) August 29, 2012 – September 16, 2012 Calf roping, [31] Y Edits Calf roping, user talk Montanabw, admits to being Lapzwans (talk · contribs), [32]
    EatNoPig (talk · contribs) † December 16, 2007 merge !vote Y Andy Griffith Show, edits articles about old movies, westerns, Charles Dickens, complains about edit warring, edit-warring
    FlippFlopp (talk · contribs) December 26, 2007 Flipper Y Flipper and Lassie related pages.
    HatAct (talk · contribs) † February 2, 2008 – February 10, 2008 Bareback bronc and Saddle bronc riding [33] Y Rodeo event articles, promoting views of PETA, dispute over content [34], [35], threats to have other users blocked
    HelloDenmark (talk · contribs) † January 25, 2008 – January 31, 2008 The Tinderbox: [36] Y Hans Christian Anderson stories, blocked November 11, 2009, probably on a CU sweep. Possibly intended as a sleeper account
    HomeComingQueenl1942 (talk · contribs) May 27, 2011 [37] Y Three edits, vandalism to Truthkeeper88 FAs: True at First Light, Edmund Evans, The Magdalen Reading
    IndianCaverns (talk · contribs) † March 4, 2008 – February 23, 2009 Thumbelina Y Edited to Feb. 23, 2009. 1950s movies, Peter Pan, Lousia May Alcott novels, Gidget [38]
    ItsLassieTime (talk · contribs)† January 12, 2008 – April 8, 2009 [39] Y
    • Lassie related article.
    • GA reviewer.
    • Disputes with Mattisse regarding GA reviews.
    • Blanks messages to their own userpage, [40], [41].
    • Unblock request includes info regarding sock accounts, [42].
    • Claims to be disabled, [43]
    • Exhibits multiple personas, [44], requests second chance, [45], explaining they created accounts to keep together themed articles, [46], [47], and admits to socking, [48], and using hundreds of accounts, [49]
    • Apologizes, [50], [51], [52], [53].
    • Conflict with Slim Virgin and Montanabw at AN/I with embedded diffs, [54].
    • Uses daughter excuse, [55].
    • Goodbye messages, [56]
    IttyBittyMe! (talk · contribs) September 24, 2011 Vandalism Y Vandalism only account: [57], [58], [59], one to a video game article, [60].
    JockFunster (talk · contribs) October 20, 2011 Vandalism to MuZemike Y Vandalism only account: [61]
    Kathyrncelestewright (talk · contribs) † May 6, 2009 Welsh Corgi Y LIterature/childern's lit/ballet. Ottava Rima points out sourcing/paraphrasing issues on GA nom of Flore et Zephire here.

    "I am a graduate student with an interest in English and children's literature, dogs and cats, theater, television and film.".

    KentPhiladelphia (talk · contribs) December 13, 2010 Christmas in Puritan New England, [66] Y Only two edits to a single article. Sets images upright like Kathyrncelestewright
    Lapzwans (talk · contribs) May 27, 2009 Electric potential Y Soccer, bowhunting, calf-roping, steerwrestling, food, zoos. Dispute with Montanabw [67]
    LaSylphide (talk · contribs) † January 9, 2008 – February 21, 2008 La Sylphide, [68] Y Edited mostly Hans Christian Anderson stories and ballet articles. Unblock request, says s/he's living in a senior center, [69] linked to account Overjoyed by shared IP, claimed it was someone in her building. Later admitted to the account: [70]
    LMD908jo (talk · contribs) November 18, 2010 Y Hansel and Gretel. Only edits for one day. 18:50 UTC to 2:34, stops, returns at 9:02 UTC .
    MayfieldForever (talk · contribs) † March 9, 2008 – May 29, 2008 Creates user page, then 50 edits the same day to Leave it to Beaver Y Primarily articles about Leave It to Beaver TV show, Had a different sock give her a barnstar admitted to account:[71]
    MyFebruaryBirthday (talk · contribs) May 28, 2011 to SandyGeorgia's page Y Single edit to to comment on SG's page about TK88
    NewHouse4533 (talk · contribs) May 27, 2011 Pig slaughter Y Account seems to have been created to harass and edit Jack and the Beanstalk [72], [73]
    NYFernValley (talk · contribs) May 18, 2011 – May 25, 2011 created article Y Pig articles, concern with Pig slaughter
    Overjoyed (talk · contribs) † February 17, 2008 – February 20, 2008 Adventures of Superman (TV series) deleted significant content Y Mostly Adventures of Superman (TV series) and Gidget (TV series). Linked to account of LaSylphide via IP. Admitted account: [74]
    Pancakepatty (talk · contribs) October 11, 2007 Flipper, [75], N Flipper and Lassie, Edited logged out by confirmed ItsLassieTime IP: [76]
    PrestoPrestoPresto (talk · contribs) March 11, 2011 [77] Y Edits to Horror comics talk re merge discussion, [78]. Says to TK88 that ILT has made hundreds of accounts and passed and FA without being detected, [79]
    ReverendLogos (talk · contribs) † January 31, 2008 creates new article Y Comic books, Christmas stuff, creates My Big Redneck Wedding first day, Tag-teaming with other socks on The Andy Griffith Show and talk. ItsLassieTime posted a "thank you":[80] Admitted to account: [81]
    SeeSpot Run (talk · contribs) November 3, 2014 Jumbo Altered infobox, totally rewrote article, removing sourced content N Ballet, Charles Dickens, Old West, Children's stories: Significant edits to Jumbo (about 60 over a three-day period as a brand new account), Petrushka (ballet), Giselle Le Spectre de la rose (also ballets), A Christmas Carol, Kit Carson, The Story of the Three Bears, plus assorted others. Significant edit-warring throughout: [82], [83],[84]
    ShaShaJackson (talk · contribs) † January 23, 2008- February 2, 2009 Hazel (TV series) Y Mostly old TV shows from the 1950s, also a bunch of GA reviews: [85] and horribly unkind comments at a GAN, notably: "However, the article is sooooooooooooooooo slight, my gorge rises every time I look at it. I am astonished beyond words that an editor would have the nerve to seek GA status for this trifle."[86]
    SoniaSyle (talk · contribs) † December 17, 2009 The Donna Reed Show [87] Y Lilyan Tashman, King Kong (1933 film), golden age Actresses, The Story of the Three Bears, Michael Jackson and Bubbles (note an IP hit to Simple article on same topic!)
    Susanne2009NYC (talk · contribs) † Dec. 6, 2009 - November 17, 2010 Beatrix Potter Y Almost completely Beatrix Potter related. GA reviews, i.e, this one to Don't Forget the Bacon. Sent a number of Potter articles to GA and Miss Moppet to FA. Come back to this.
    TimmyTruck (talk · contribs) † October 11, 2007 The Andy Griffith Show, [92] Y Andy Griffith, Flipper (intersects with?), Superman (intersects with?), Jockstrap, very sick this: [93]
    Tower4Sitz (talk · contribs) † November 17, 2010, creates userpage with "interests are" [94] Y All edits to Jack and the Beanstalk and Victoriaearle, [95]. Harasses VE on user page, pretentious bitch, rant, at AN/I calls VE/TK "pretentious little missy" etc, "pretentious little be-otch".
    User:Tre=poi November 16, 2009 Lad a Dog, complained to Ucucha and Graham about promoting this under a different account Y Edits Ed Gein, murderer and bodysnatcher and Charles Johnston (captive of Native Americans), Shawnee captive. Opens this SPI against another ILT sock. LaVidaLoca (talk · contribs) admits to living in Ohio (see possible Ohio IPs). Leaves November 25, 2009.
    Where the domestic things are (talk · contribs) July 7, 2017 [96], To Lassie (1954 TV series) article N Edits to Maine and Lassie articles [97]. Opened FAC following multiple edits. Soon blocked; also repeated a user harassment pattern here.
    WP Martinet MZmke (talk · contribs) September 19, 2011 vandalism Y Only two edits: One blanks a page, the second is a personal attack toward VE/TK

    IP accounts

    Name Create Date First Edit Link IP verified Evidence
    209.244.189.88 (talk · contribs) January 10, 2007-January 24, 2011 N/A (may not be a static IP) [98] Lassie, Flipper, Hazel (TV series), other TV shows, rodeo articles, ballet, baseball, Hans Christian Anderson stories, etc. Associated with LaSylphide [99], Overjoyed [100], ItsLassieTime [101], EatNoPig [102]
    209.244.43.194 (talk · contribs) December 31, 2006 - November 19, 2008 N/A (may not be a static IP) [103] baseball, old movies, rodeo, Hans Christian Andersen, other. Associated with LaSylphide [104]
    2601:184:200:8067:F018:D884:7936:3154 (talk · contribs) August 22, 2017 [105] [106] Primarily vandalism of Maine and rodeo articles

    Other notes

    • Tends to have recurring disputes with several long-term users including but not limited to Montanabw [107], SlimVirgin [108] and Victoriaearle/Truthkeeper88 [109]

    Confirmed and suspected accounts

    Guangzhou IP vandal
    Shortcut: WP:GZIP
    WikilifespanJune 2011/June 2012 – present
    ISPChina Telecom in Guangzhou
    Known IPs218.20.0.0/16, 219.135-137.0.0/16, 14.46.0.0/16, 14.150-151.0.0/16, 58.62.0.0/16, 59.41.0.0/16, 69.197.0.0/16, 74.208.0.0/16, 202.172.0.0/16, 204.74.0.0/16 and open proxies
    Physical locationGuangzhou
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.

    Basic information

    Meenewa (talk · contribs · block log · arb · SPI suspected) is a cross-wiki vandal.
    IP Comprehensive edits analysis
    No basic information entered

    Targeted areas, pages, themes

    Habitual behavior

    Cases

    Other notes

    Confirmed and suspected accounts

    Vandalism-only account using this IP range in 2011:


    Wikinger
    Shortcut: WP:WIKINGER
    WP:LTA/Wikinger
    Original name(s)User:Wikinger, User:CBMIBM
    Wikilifespan2007–present
    ISPNeostrada Plus, Poland
    Known IPs83.16.0.0/13, 79.184.0.0/13; 2A00:F41:2800::/40; and others; many open proxies
    Physical locationPoland
    InstructionsBlock sock IPs on sight; always check if they are open proxies (they usually are unless they are his Polish home ISP); semiprotect any page he touches to prevent follow-up disruption. Confirmed socks should be reported to m:SRG or #wikimedia-stewards connect for global locking.
    StatusActive

    Basic information

    Wikinger (talk · contribs · block log · arb · rfcu · ssp · SPI confirmed suspected)
    Comprehensive edits analysis

    Persistent spreading of misinformation about Greek alphabet topics across multiple language Wikipedias. Persistent sockpuppetry, including good-hand/bad-hand schemes, edit-warring against his own socks; verbal abuse, fake death threats and outing attacks against administrators, joe jobs and impersonation of other vandals, use of open proxies. Wikinger's account was globally locked on 24 March 2015 due to cross-wiki abuse.

    He is banned by the Wikimedia Foundation and may not edit any Wikimedia project. All accounts/IPs should be globally locked/blocked on sight.

    Targeted areas, pages, themes

    Persistent obsessive tinkering with pages relating to the Greek alphabet and its minor additional characters (Greek alphabet, Template:Greek alphabet sidebar, Ϝ, Ϛ, Ͱ, Ϙ, Ϻ, Ϡ, Ϸ), on en-wiki and multiple other projects. All Wikipedias that have equivalents of the above articles have been affected.

    Habitual behavior

    • Abusive behaviour
      • persistent edit-warring through dynamic IPs, usually his own Polish IPs and open proxies in rapid sequence
      • sock tricks: e.g. making his desired change through one IP, then reverting it back or adding vandalism through another strawman IP, hoping that an established user will revert back to his first edit
      • creates impersonation accounts named after unrelated established users (e.g. User:Blablaaa1, User:ΚεκρωΨ, User:Ϛτυχ, User:Stvx, [111], User:Njgos)
      • uses impersonator accounts of unrelated users and then reveals them to be his socks, trying to fool administrators to block the original impersonation victim as his sock too (known victims of these tactics: User:Aminullah, User:Marco9673)
      • mimicks other banned or blocked users with sock accounts or IPs pretending to be theirs [112]
      • creates strawman sockpuppets and revert-wars against them or raises extensive complaints against them with administrators. Abuses his own socks or lets them adopt strawman positions in order to "prove" they can't be him. (e.g. here)
      • attacks other users with verbal insults, attempted outing attacks, and fake death threats (mostly directed against FPaS)
      • several abusive alter ego personalities: "Wikinger"/"Penguin Eater" using nazi-themed and sexual abuse, "Aminullah" pretending to be a fundamentalist Islamist or Chechen separatist making terrorist death threats
      • Messing with other editors' postings on talk pages: falsifying, aping or mimicking other editors' edits
      • Tinkering with the block and sockpuppet tags on the user and talk pages of his own abandoned socks
      • On the German Wikipedia, Wikinger called others “dog”.
    • Imitates behavior of other LTAs:
    • Content edits: persistently pushes a number of idiosyncratic notions about obscure Greek characters, based on an idée fixe of achieving maximum systematicity and uniformity, with complete disregard to factual correctness. Examples:
      • insists on the (ahistorical and nonsensical) made-up spelling of "Ͳαμπι" for "σαμπι"
      • insists that Ͱ, Ϻ, Ϸ had numerical values
      • insists that Ϸ had a letter name and phonetic value in Greek
      • insists that "Greek Yot" was a letter of the Greek alphabet
      • insists that "Heta" has a name and sound value in Modern Greek
      • insists that "Sampi", "Stigma" or "Disigma" are ancient Greek letter names
      • tries to unify naming and presentation schemes for Greek characters across all Wikipedias, based on mistaken notions of analogy between them, often using one Wikipedia as an alleged source for justifying his edits on another (e.g. [113])
      • creates articles about these characters in languages he doesn't know, by blindly copy-pasting text from other articles without regard to factual correctness (e.g. [114])

    Cases

    Other notes

    • All Greek alphabet pages on enwiki are currently semiprotected indefinitely because of him. Disruption on other wikis continues.

    Confirmed and suspected accounts

    Blocks, bans and protections on other projects


    Richard Daft
    Shortcut: User:Richard Daft
    Original name(s)Richard Daft
    Wikilifespan2008–present
    Physical locationKidderminster, England
    New Zealand
    InstructionsRevert and block on sight. Suspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.

    Please report all ongoing incidents of abuse to AIV or ANI.

    Basic information

    Richard Daft (talk · contribs · block log · arb · SPI confirmed suspected)

    Long-term persistent vandalism

    Targeted areas, pages, themes

    This person is banned indefinitely for repeated block evasion, constant POV pushing, repeated disruption to WP:CRIC, legal threats, a general lack of competence and non-stop incivility to further a single purpose. See Wikipedia:Sockpuppet investigations/Richard Daft and archive.

    Habitual behavior

    Single purpose disruption of articles re cricket, especially designed to make personal attacks on several members of WP:CRIC

    Cases

    Wikipedia:Sockpuppet investigations/Richard Daft and archive

    Other notes

    Frequently edits from hotels, both in the UK and continental Europe. Formerly based in Powys, Wales, then Kidderminster in Worcestershire, but recent IPs suggest relocation to New Zealand.

    Confirmed and suspected accounts

    see SPI as above

    Shortcut
    Ananny
    WikilifespanDecember 2006–present
    Sockpuppet investigationsAnanny
    StatusActive

    A persistent cross-wiki spammer and sock-puppeteer since December 2006, Ananny's goal is to promote the work of Terry M. Ananny, a non notable artist (as established in independent AfD discussions on the German, Russian, and English Wikipedias). To this end, the user has used more than a dozen socks and innumerable IPs to recreate the deleted article and add Ananny's name to various lists. Although low level, Ananny's spamming has affected 19 Wikimedia wikis over a 10 year period.

    Ananny is presumably the artist herself, as both her username and the persistent, specific nature of her spamming indicate a deep conflict of interest. She is unlikely to stop any time soon, as she believes that the Wikipedia community opposes her inclusion for personal reasons. For example:

    History

    Ananny initially created Terry Ananny, which was deleted, (now indefinitely protected because of repeated attempts to re-create the article) despite attempts to interfere with the AFD process using the sock User:Jane Rushmore. It was soon after this that the spamming began in earnest.

    Initially, she would add Ananny's name and a link to the artist's official site to articles such as List of Canadian artists, List of Canadian painters, Naive art, and Christmas card. Occasionally non-art related pages like Picnic and Hockey Jersey were also affected. Most of this editing would be done using IPs from the Toronto area.

    When these began to be reverted more quickly, she created List of Canadian Contemporary Painters under the account User:CanadianArtworks in an attempt to escape notice. After this was deleted, Ananny took to sockpuppetry more freely (see suspected socks, and archived sock investigations), recreating the original biography using variations on spelling, including Terry Annany, TERRY ANANNY, Terry Marie Ananny, Terry M Ananny, Terry ananny, Terry M. Ananny, Terry A nanny, T.M.Ananny, Terry (Ananny) Annany, Terry Ananny - Canadian Painter, Terry Mary Broughton, Terri Ananny and Marie Stewart (artist).

    Somewhere along the way, Ananny discovered Google Translate and began to go on periodic runs of cross-wiki spamming using machine-translated articles. (see list below)

    User:Freshacconci has dealt with this user both here and on the Simple English Wiki, and also reported her to WP:WPSPAM. As a result terryananny.com has been added to the Meta spam blacklist.

    M.O.

    Ananny at first spammed by adding her name and website to lists and other articles, but is now more focused on spamming by article creation. Also, the former method of spamming is restricted almost entirely to the English Wikipedia, where she is most active.

    Ananny's article-creation spamming comes in intense but relatively brief bursts. It will last for several days, after which she appears to lose interest. Several months later, it will start up again. The link spamming, by contrast, is often more offhand and isolated.

    In a typical burst of cross-wiki spam, she creates autobiographical articles on about half a dozen Wikipedia editions. Once deleted these often will resurface within a few days under variant spellings. After several iterations the spamming stops- for the time being.

    Dealing with Ananny

    If you run across a Terry Ananny article, be sure to google "Terry Ananny Wikipedia", as the spam comes in cross-wiki clusters. Once the articles are all deleted, continue to periodically google those terms for the next few days, as they will recur.

    Roy Ananny

    An article was created on May 23, 2017 for Roy Ananny. To be clear, there is nothing wrong with the article itself nor is there anything suspicious about the article creator (a long-time editor and administrator). However, with some quick digging, it turns out Roy Ananny is Terry Ananny's father-in-law. This is mentioned simply as a heads-up to other editors involved in this case as that article may be targeted as a backdoor entry for Terry Ananny who has used every trick in the book to create an article and adding a paragraph to this existing article would certainly not be beyond her. It has happened at least once, by a now-blocked sockpuppet of Ananny.

    Editing by Ananny herself confirmed

    Most Ananny sockpuppets, when confronted, deny any association with Ananny. However, most have been confirmed as socks, all from the same editor. A now-blocked sockpuppet of Ananny made this comment on the userpage. As such, it is believed that the spammer/sockpuppeteer is Ananny herself.

    Wikis spammed

    Accounts and IPs

    70.26.18.223 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.26.21.250 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.26.22.213 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.49.137.198 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.49.247.40 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.54.8.138 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.54.9.152 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    74.14.120.0/22 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · block user · block log)
    74.14.135.170 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    74.12.180.0/22 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · block user · block log)
    76.64.152.0/21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · block user · block log)
    76.64.159.252 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.26.17.4 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.55.23.21 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    67.71.41.76 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    Ananny (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    AttiKings123 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    CanadianArt~enwiki (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    CanadianArtworks (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Canadianlibrary (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Edamsecond (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Gabrielle Hines (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Jane Rushmore (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Janetsproblems (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Miningbot (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Rorybb2z (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Simon Faulkner (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    SunnySkies (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Whisperjet (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    333faulkner (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Brooksure (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Sortiago (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Spaceship2012 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Superfluous5 (talk · contribs · deleted contribs · logs · filter log · block user · block log)

    Unconfirmed accounts and IPs

    65.93.163.88 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.26.16.187 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.49.244.142 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    76.70.77.159 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    76.70.76.212 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.26.20.155 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    70.52.161.52 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · http · block user · block log)
    184.148.11.0/24 (talk · contribs · deleted contribs · filter log · WHOIS · RDNS · RBLs · block user · block log)
    Redline1983 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Artsmart2 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Atasteofarmy (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Bluesky1982 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Canadianarts101 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Droplucky99 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Greyshade1984 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Papermoon1981 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Oftenaltert (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Tewwatart (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Picassoid (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Helpburg (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Stelo-miregigita Genio (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Breggswatt222 (talk · contribs · deleted contribs · logs · filter log · block user · block log)
    Karmaisking
    Wikilifespan2009 - present
    Sockpuppet investigationsKarmaisking
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusActive

    Basic information

    Full (talk · contribs · block log · arb · SPI)
    Comprehensive edits analysis

    Karmaisking has been indefinitely blocked for vandalism, personal attacks, soapboxing, and sockpuppeteering (confirmed through multiple checkuser cases). Some openly admit to being other versions of the sockpuppet numbering. Has admitted to having more active sockpuppets here.

    More ongoing use of sockpuppets (documented at Checkuser case history, as well as clear history of use of IPs without logging in to evade block (primarily edits history of own contributions to talkpages, as well as editing). IPs usually geolocate to south-eastern Australia, see IP contribution history1, IP contribution history2. Yet more confirmed sockpuppets, abusive actions, etc, mostly documented under checkuser. Self-promotion of (presumed) real name (same as one of earliest registered names): Timothy Mak.

    Targeted areas, pages, themes

    Edits primarily on pages related to finance, economics and libertarian issues. These include:

    • Has also edited articles on Keynesian economics and Keynesian economists in order to attack them.

    Habitual behavior

    • Often chooses usernames related to finance, Austrian economics or libertarian issues.
    • Uses throwaway accounts or anon IPs that geolocate to Australia.
    • Often claims to be a new user, starting off with innocuous edits, sometimes even attacking or reverting a previous known sock. User:Lagrandebanquesucre was a particularly egregious devious approach, which began by attacking User:Karmaisking.
    • Uses misleading edit summaries, sometimes claims to revert the edit of another sock in order to hide the edits.
    • Often devolves to vulgar insults and personal attacks when challenged.

    Cases

      Deferred to abuse response for contact. The report may be found here.

    Other notes

    Confirmed and suspected accounts

    TyrusThomas4lyf
    Shortcut: WP:LTA/TT4L
    Original name(s)User:TyrusThomas4lyf
    WikilifespanFebruary 27, 2007 – present
    ISPAT&T Internet Services
    Physical locationChicago metropolitan area
    Requests for commentWikipedia:Requests for comment/TyrusThomas4lyf
    Sockpuppet investigationsTyrusThomas4lyf
    InstructionsRevert and block on sight.
    StatusActive

    TyrusThomas4lyf (talk · contribs · deleted contribs · nuke contribs · logs · filter log · block user · block log) is the Wikipedia alias of a basketball fan who was blocked indefinitely in May 2007 for repeated personal attacks and edit warring on NBA-related articles, in spite of numerous warnings and attempts to mediate. For a summary of this user's past behavior, see the RFC and his talk page User talk:TyrusThomas4lyf. Prior to his block, this user possibly also edited under the aliases 68.253.206.119 (talk · contribs · logs). Since his block, he has repeatedly attempted to subvert the block by resorting to sockpuppetry. Several reports were made at Wikipedia:Suspected sock puppets:

    but he has returned time and time again.

    Modus operandi

    TyrusThomas4lyf sock-puppets are recognizable most easily by their typical (but not exclusive) focus on a certain range of NBA articles, signature edits, occasionally abusive edit summaries, and edit warring. Favorite articles (with some sample signature edits) include:

    NBA edits frequently show bias in favor of the Chicago Bulls and Michael Jordan, especially in bios on players that are compared to him. They frequently edit many of the "List of career achievements by ..." type pages at Category:Career achievements of basketball players. They have also shown an interest in serial killer and Nazi-related articles and are known for creating voluminous redirects for improbable spelling errors. The redirects are also sometimes music related, redirecting songs to articles on their album, or lyric snippets to their actual song title. They also create lots of categories in these subject areas.

    IPs tend to originate mostly from the Chicago metropolitan area and St. Louis, typically using AT&T and associated networks. This user has also been known to use a Barnes & Noble shared account in the past, though this is uncommon. In 2020, some IPs were from Iowa.

    Partial list of confirmed and suspected sock-puppets

    For a more complete listing, see (for example) [164], as well as Category:Suspected Wikipedia sockpuppets of TyrusThomas4lyf and Category:Wikipedia sockpuppets of TyrusThomas4lyf.

    Wikipedia:Long-term abuse/Best known for IP

    Keegscee
    Original name(s)Keegscee
    ISPTime Warner Cable/Spectrum
    (*.austin.res.rr.com)

    Sprint PCS
    (*.spcsdns.net)
    Known IPs66.68.86.111 (may have since changed), open proxies, Sprint IPs.
    Physical locationAustin, Texas (possibly relocated to Altamonte Springs, Florida based on IP geolocation)
    Sockpuppet investigationsKeegscee and ChadBrunner
    InstructionsDon't feed the troll. Quietly report to WP:AIV or WP:SPI and deny recognition.
    StatusPending Approval

    Basic information

    Keegscee (talk · contribs · block log · arb · SPI confirmed suspected)
    Comprehensive edits analysis
    Keegscee is a member of RationalWiki, a website originally created in protest of Conservapedia. RationalWiki members have been known to promote vandalism of other wikis.[165] [166]. Though Keegscee's account at RationalWiki has been dormant for several years, he may or may not be using a different identity at the site, which is common practice there. He was banned by the English Wikipedia community in 2010 and banned from all Wikimedia projects in 2021 by the Wikimedia Foundation Trust & Safety team. He is also known as ChadBrunner.

    Targeted areas, pages, themes

    Mostly pages edited by contributors he dislikes, and those contributors' talk pages. Keegscee is known to harass User:PCHS-NJROTC (real name David Morris), User:Ed Poor, User:Georgewilliamherbert, User:Neutralhomer, User:LBHS Cheerleader, and User:Orangemike, but his attacks should not be considered to be limited to those users.

    Habitual behavior

    Keegscee's activities range from harassing people he considers to be "right wing nuts" or who he believes are responsible for him being disciplined[167], to impersonating other users, to reverting vandalism and encouraging the perpetrators to vandalize wikis he dislikes. Keegscee's accounts are often obvious to those familiar with him, but sometimes his harassment is subtle in nature and might not even be detected as vandalism by recent changes patrols, such as to insert inaccurate information into an article mixed with off-wiki information about his victims (he has made malicious contributions that have survived for days before being reverted as "unreferenced" for example). He often makes numerous sockpuppet accounts at one time, although sometimes he will just make one sporadic account or use an IP. When his socks are identified, he sometimes denies being a sock He is known to use open proxies. Keegscee is known to dox his victims and harass them off-wiki, causing email access to be disabled from his main account. Sometimes similar, but slightly different abuse has been seen from different IP ranges (see the Keegscee SPI), possibly indicating meatpuppetry.

    Cases

    Other notes

    Avoid engaging Keegscee in conversation, and minimize unnecessary noticeboard discussions. His intentions are to create drama on Wikipedia. A hand-written abuse report was sent to Time Warner Cable in Austin, Texas in 2010, after which Keegscee disappeared altogether for roughly one year, but he has since returned with a new IP on the same network.

    Confirmed and suspected accounts

    Hydro dot net
    WikilifespanNovember 2014 – 2019
    ISPMostly various Japanese ISPs
    Known IPsOver 200 related IPs so far
    Physical locationMostly Japan; some IPs in Bermuda and United Kingdom
    InstructionsSuspected socks should be tagged and reported to sockpuppet investigations for confirmation. When reporting, please link to this long-term abuse report. When the active abuse has been taken care of, please update this report with the latest information.
    StatusArchived

    Basic information

    The "hydro dot net" editor has been using IP-hopping since at least November 2014, to engage in disruptive editing. As of August 2018, contributors to this page have identified over 200 IP addresses that appear to have been involved.

    As of August 2018, the editor is not known to have registered any usernames.

    ISPs

    c. August 2018, "hydro dot net"'s IP addresses are often in the range 126.0.0.0/8 (which, according to WHOIS, belongs to the SoftBank Group of Japan).

    Targeted areas, pages, themes

    The editor was given the nickname "hydro dot net" by Intgr (who created this LTA page), after Intgr had noticed that the editor had made several edits alleging that the hydro.net domain name had been hijacked. The allegations featured a conspiracy involving payment providers, domain registrars, ICANN, etc. (User:Intgr was not able, through Google searches, to find any WP:RS about these allegations. Despite many requests, the editor has not provided any useful ones.)

    Additionally, the user has made contentious edits or edit summaries across numerous topics.

    "Hydro dot net" often posts and wages edit wars for unsourced content or for content that misrepresents sources. The edits and edit summaries are often somewhat incomprehensible.

    Also frequent is introducing references to "cybercrime", "domain hijacking" etc. into articles.

    There have been a few other spurts of abuse by these IPs, adding content that misrepresents cited sources, but relatively infrequent.

    The table below is a work in progress attempt to summarise the user's disruptive activities.

    Page Page category (roughly) Topic of disruptive edit or edit summary
    hydro.net Israel Police China Markham family
    Axis Bank Financial [168]
    EBS Financial [169]
    Talk:EBS Financial [170] [171] [172]
    Ingenico Financial [173]
    Ingenico CEO Philippe Lazare Financial [174]
    One Churchill Place Financial [175]
    Amdocs Technology [176]
    Endurance International Group Technology [177]
    ICANN Technology [178] [179]
    Sybase Technology [180]
    Sybase CEO Mitchell Kertzman Technology [181]
    Trustwave Holdings Technology [182] [183] [184]
    Convention on Cybercrime Crime(-fighting) [185]
    Talk:Convention on Cybercrime Crime(-fighting) [186]
    Cybercrime Crime(-fighting) [187]
    Talk:Cybercrime Crime(-fighting) [188] [189]
    Domain hijacking Crime(-fighting) [190] [191]
    Talk:Domain hijacking Crime(-fighting) [192] [193] [194]
    Electronic Transaction Aggregation & Analysis Layer Crime(-fighting) [195]
    European Arrest Warrant Crime(-fighting) [196] [197]
    European Cybercrime Centre Crime(-fighting) [198]
    Talk:Europol Crime(-fighting) [199] [200]
    Illegal settlements Crime(-fighting) [201]
    Talk:International_Cybercrime_Reporting_and_Cooperation_Act Crime(-fighting) [202]
    Interpol Crime(-fighting) [203]
    Talk:Interpol Crime(-fighting) [204] [205]
    Edward Snowden Surveillance [206][207] [208]
    News International phone hacking scandal Surveillance [209]
    Beryl Markham Aviation [210][211][212]
    Wikipedia talk:Community health initiative on English Wikipedia/Per-user page, namespace, and upload blocking Wikipedia itself [213]

    Habitual behavior

    Distinctive edit summaries. IPs occasionally post on each others' talk pages ([214], [215] [216]), revert each others' edits (e.g. [217]) or reply to each others' talk page messages to make it seem they are legitimate distinct editors. But it's not very plausible, the editing patterns are just too similar.

    There are also some unrelated edits that look like good faith edits on the surface, but mostly they're not desirable and get reverted anyway.

    The user's edits were:

    • mostly made in 2018;
    • often made to overlapping sets of articles;
    • often similar to each other in nature (e.g. inserting unrelated "See also" wikilinks; invoking conspiracy theories, especially re: surveillance, internet, police or military technologies, or about identity politics; expressing anti-Israel, anti-Blair, anti-Muslim, pro-Thatcher or pro-EDL opinions; making disparaging remarks about other editors; pretending to perform anti-vandalism activities; editing their own or each others' talk pages); sorting lists by alphabetical order; and
    • often disruptive (e.g. inserting unsourced or poorly-sourced claims; breaking links; disrupting sentence structure).

    Cases

    Other notes

    • A full range block for SoftBank's /8 would remove this editor's primary means of access to Wikipedia (as of August 2018). However, MediaWiki software does not allow IP rangeblocks on IPv4 ranges larger than /16.

    The largest IPv4 range block that can be made is /16. The system will reject anything larger. The most common range block is /24. Anything larger usually requires extra scrutiny, although ranges vary widely in activity.

    — Bbb23, talk page discussion, August 2018
    • User:Rich Farmbrough kindly created edit filter 929. It would probably benefit from having additional strings added to match more terms that are popular with the user, e.g. "Israel", "nation", etc.

    Confirmed and suspected IP addresses

    Wikipedia:Long-term abuse/Wikiexplorer13

    Wikipedia:Long-term abuse/BMX On WheeIs

    Wikipedia:Long-term abuse/Benniejets

    Wikipedia:Long-term abuse/Albert20009

    Wikipedia:Long-term abuse/Nate Speed

    Wikipedia:Long-term abuse/Slowking4

    Wikipedia:Long-term abuse/Mikemikev

    Wikipedia:Long-term abuse/Sandbox troll

    Wikipedia:Long-term abuse/Googie man

    Wikipedia:Long-term abuse/BillyNorth

    Wikipedia:Long-term abuse/Urbanuntil

    Wikipedia:Long-term abuse/Indonesian "stub"-related vandalism

    Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Long-term_abuse/Full&oldid=1239710919"