Wikipedia:Sockpuppet investigations/Atac2/Archive
__TOC__
{{SPIarchive notice|1=Atac2}}
{{SPIpriorcases}}
=13 December 2021=
==Suspected sockpuppets==
- {{checkuser|1=Santana's Smooth|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Julius Al Mohammed|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Jamal Tyrones|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- Tools: [https://tools.wmflabs.org/sigma/editorinteract.py?users={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&users={{urlencode:Santana's Smooth}}&users={{urlencode:Julius Al Mohammed}}&users={{urlencode:Jamal Tyrones}} Editor interaction utility] • [https://tools.wmflabs.org/interaction-timeline?wiki=enwiki&user={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&user={{urlencode:Santana's Smooth}} Interaction Timeline] • [https://tools.wmflabs.org/betacommand-dev/UserCompare/{{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}.html User compare report] Auto-generated every hour.
The master account was committing vandalism with addition of false information to various articles by [https://en.wikipedia.org/w/index.php?title=Kalamazoo_Quest&diff=prev&oldid=1059763934&diffmode=source adding] "Ron Merkle" to them, including the [https://en.wikipedia.org/w/index.php?title=Scientology&diff=prev&oldid=1059765335&diffmode=source Scientology article]. The Santana Smooth account has [https://en.wikipedia.org/w/index.php?title=Scientology&diff=prev&oldid=1059765335&diffmode=source repeated] the same addition in Scientology.
The master account repeatedly made [https://en.wikipedia.org/w/index.php?title=Akinwale_Arobieke&diff=next&oldid=1059765491&diffmode=source this edit] which is did not have the name in the source and is likely false information. The Julius Al Mohammed account has made a [https://en.wikipedia.org/w/index.php?title=Akinwale_Arobieke&type=revision&diff=1060024739&oldid=1059766400&diffmode=source similar edit].
The Jamal Tyrones account added [https://en.wikipedia.org/w/index.php?title=Barnett_J4B&type=revision&diff=1053296574&oldid=1047841156&diffmode=source deliberate false information] (SF and LA are in the same coast) to the article which mentions "Ron Merkle". This might be a legit Ron Merkle as it is information from years back in the article history.
Note: Only the Julius Al Mohammed account seems to have been created after user:Widr blocked Atac2, so it would not be surprising if there are other accounts. Whpq (talk) 18:00, 13 December 2021 (UTC)
:It looks like some IP accounts, like User:2A00:23C7:84A7:4B01:4464:BD16:CF63:3C25, have picked up on the vandalism. Liz Read! Talk! 02:41, 14 December 2021 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{Inprogress}} - Girth Summit (blether) 18:46, 13 December 2021 (UTC)
- Santana's Smooth and Julius Al Mohammed are both {{confirmed}} to Atac2. The other account doesn't appear to be related, technically at least. Girth Summit (blether) 18:54, 13 December 2021 (UTC)
- Jamal hasn't edited in over a month, so a block would not be in compliance with WP:BP. I'll close this; please file another report if disruption persists. -- RoySmith (talk) 00:28, 17 December 2021 (UTC)
----
=07 January 2022=
==Suspected sockpuppets==
- {{checkuser|1=Ron Merkle IV|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- Tools: [https://tools.wmflabs.org/sigma/editorinteract.py?users={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&users={{urlencode:Ron Merkle IV}} Editor interaction utility] • [https://tools.wmflabs.org/interaction-timeline?wiki=enwiki&user={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&user={{urlencode:Ron Merkle IV}} Interaction Timeline] • [https://tools.wmflabs.org/betacommand-dev/UserCompare/{{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}.html User compare report] Auto-generated every hour.
Previous socks were inserting the name "Ron Merkle" into various articles. [https://en.wikipedia.org/w/index.php?title=An_American_Family_(song)&diff=prev&oldid=1064211958&diffmode=source Same] [https://en.wikipedia.org/w/index.php?title=ADP_(company)&diff=prev&oldid=1064212315&diffmode=source behaviour] including adding teh assertion of a [https://en.wikipedia.org/w/index.php?title=Barnett_J4B&diff=prev&oldid=1064213251&diffmode=source gyrocopter record] for coast-to-coast speed when the starting and ending cities are on the same coast. Plus the user name. Is Wikipedia:Sockpuppet investigations/Molotov Cock related to this? Whpq (talk) 13:02, 7 January 2022 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- Yes, seems a duck. Compare [https://en.wikipedia.org/w/index.php?title=Stara_Gradi%C5%A1ka_prison&diff=prev&oldid=1059765820] [https://en.wikipedia.org/w/index.php?title=Die_Krupps&diff=prev&oldid=1059765772] [https://en.wikipedia.org/w/index.php?title=Die_Krupps&diff=prev&oldid=1059140809], indirectly [https://en.wikipedia.org/w/index.php?title=Bensen_B-8&diff=prev&oldid=1057881144]. {{re|Whpq}} In the future please link diffs from both accounts, not just the suspected sock. Normally I wouldn't care whether this is a sock or just some related VAO, but with an eye to Drmies statement at Wikipedia:Sockpuppet investigations/Molotov Cock/Archive, and noting the Merkle connection on usernames and edits like this, {{rae}} to see if this ties back to a known LTA. -- Tamzin[cetacean needed] (she/they) 14:49, 7 January 2022 (UTC)
- User:Tamzin, User:Whpq, I haven't found an "original" but a range that includes Ron Merkle IV and Molotov Cock coughs up a few other already blocked socks: ILoveMarvel223, Squid Games, RonMerklefeller Skank, Ron Merkle's Nephew, Quart Games, Ron Merkle III. They seem to use proxies that are all over the place to make these accounts, and there's little that I can do about it. Maybe a better CU can figure out whether there are ranges that can be hardblocked... Drmies (talk) 15:07, 7 January 2022 (UTC)
- Just clarifying, I've set this to endorsed since I'd forgotten to do so originally and since Drmies' response seems to request further CU attention. -- Tamzin[cetacean needed] (she/they) 15:41, 7 January 2022 (UTC)
- Blocking Ron Merkle IV per off-wiki conversation with Tamzin. -- RoySmith (talk) 20:12, 7 January 2022 (UTC)
- I have Ron Merkle IV == {{checkuser|St Mary's church of the pool of the white hazels over against the pool of St Tysilio}} == {{checkuser|Lake Chargoggagoggmanchauggagoggchaubunagungamaugg in Webster, Massachusetts}}. Could be Molotov, I similar ranges and UAs but never see them on the same IP. I wouldn't dare call myself "better" than Drmies, but I see a couple small rangeblocks that can be made (won't get everything, but it might slow them down a bit). GeneralNotability (talk) 17:39, 9 January 2022 (UTC)
----
=10 January 2022=
==Suspected sockpuppets==
- {{checkuser|1=Ron Merkle Go-Go-Go!|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Molotov Cock|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Bogstandard Hockey|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=ILoveMarvel223|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Ron Merkle|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Ron Merkle's Great Grandson|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Squid Games|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Quart Games|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=Ron Merkle's Nephew|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- {{checkuser|1=RonMerklefeller Skank|master name={{#titleparts:{{SUBPAGENAME}}}}}}
- Tools: [https://tools.wmflabs.org/sigma/editorinteract.py?users={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&users={{urlencode:Ron Merkle Go-Go-Go!}}&users={{urlencode:Molotov Cock}}&users={{urlencode:Bogstandard Hockey}}&users={{urlencode:ILoveMarvel223}}&users={{urlencode:Ron Merkle}}&users={{urlencode:Ron Merkle's Great Grandson}}&users={{urlencode:Squid Games}}&users={{urlencode:Quart Games}}&users={{urlencode:Ron Merkle's Nephew}}&users={{urlencode:RonMerklefeller Skank}} Editor interaction utility] • [https://tools.wmflabs.org/interaction-timeline?wiki=enwiki&user={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&user={{urlencode:Ron Merkle Go-Go-Go!}} Interaction Timeline] • [https://tools.wmflabs.org/betacommand-dev/UserCompare/{{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}.html User compare report] Auto-generated every hour.
These accounts were connected to previous socks through checkuser and technical evidence. I'm creating this SPI retro-actively for record-keeping and accountability purposes. The accounts are blocked and tagged, and this SPI report will be filed as 'closed'. ~Oshwah~(talk) (contribs) 00:21, 10 January 2022 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{confirmed}}:
- :{{checkuser|Ron Merkle Go-Go-Go!}}
- :{{checkuser|Molotov Cock}}
- :{{checkuser|Bogstandard Hockey}}}
- :{{checkuser|ILoveMarvel223}}
- :{{checkuser|Ron Merkle}}
- :{{checkuser|Ron Merkle's Great Grandson}}
- :{{checkuser|Squid Games}}
- :{{checkuser|Quart Games}}
- :{{checkuser|Ron Merkle's Nephew}}
- :{{checkuser|RonMerklefeller Skank}}
:These accounts are already blocked and tagged, and this SPI is already closed. No further action is needed here (short of archiving, of course)... ~Oshwah~(talk) (contribs) 00:24, 10 January 2022 (UTC)
- {{re|Oshwah}} Does the last one need to be tagged? -- Tamzin[cetacean needed] (she/they) 00:25, 10 January 2022 (UTC)
- :Tamzin - Good catch! Thank you - Yes, and {{done}}. :-) ~Oshwah~(talk) (contribs) 00:28, 10 January 2022 (UTC)
----
=02 March 2022=
==Suspected sockpuppets==
- {{checkuser|1=Boysmell}}
- {{checkuser|1=TheMerk205}}
{{sock list|tools_link=yes}}
While both accounts were already blocked today — the sock by {{u|Liz}} and the presumed puppeteer by {{u|Jake Wartenberg}} — the sock turned out to be a month-old sleeper. Therefore, I would like to use this SPI to request a CheckUser to look for further sleepers. IceWelder [✉] 21:26, 2 March 2022 (UTC)
=={{big|Comments by other users}}==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
=={{big|Clerk, CheckUser, and/or patrolling admin comments}}==
- {{Endorse}} - page-move vandalism like this [https://en.wikipedia.org/w/index.php?title=Talk:Roblox_Corporation&diff=prev&oldid=1074897612][https://en.wikipedia.org/w/index.php?title=Roblox_Corporation&diff=prev&oldid=1074899750] indicates that this is probably someone with prior experience. Please check for other accounts. Thanks, Spicy (talk) 23:53, 2 March 2022 (UTC)
- {{Inprogress}} - -- RoySmith (talk) 00:26, 3 March 2022 (UTC)
- All of these are {{confirmed}} to each other: {{socklist| Boysmell|Attack II 2 |Corpsecucker | TheMerk205|Ron Merkle's Hot Dog Booth |Ron Merkle's Financial Advisor |Ron Merkle Go-Go-Go! |Lake Chargoggagoggmanchauggagoggchaubunagungamaugg in Webster, Massachusetts |MMMMMMMMMMMMMMMMMMMMLMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM |MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM |St Mary's church of the pool of the white hazels over against the pool of St Tysilio |Ron Merkle IV }} -- RoySmith (talk) 00:40, 3 March 2022 (UTC)
- Actually, the M* accounts are logged in CU, but failed creation due to [https://en.wikipedia.org/wiki/Special:AbuseFilter/887 filter 887] -- RoySmith (talk) 00:44, 3 March 2022 (UTC)
- {{Clerk Request}} - Looks like this needs to be merged with Atac2. Could a clerk please sort out the merge then ping me and I'll get all the checkuser-block stuff done up right. -- RoySmith (talk) 00:47, 3 March 2022 (UTC)
- {{re|RoySmith}} {{done}} (moved from Wikipedia:Sockpuppet investigations/TheMerk205). GABgab 23:35, 11 March 2022 (UTC)
- Blocking and tagging -- RoySmith (talk) 23:48, 11 March 2022 (UTC)
----
=26 June 2022=
==Suspected sockpuppets==
{{sock list|1=Greenma201|tools_link=yes}}
"Ron Merkle" nonsense like multiple other socks: [https://en.wikipedia.org/w/index.php?title=Heinrich_Dietz&diff=1087131748&oldid=1075455321]
Requesting CheckUser for sleeper check. Edits by these socks often go unnoticed, so I need to know whether there are currently unknown puppets. IceWelder [✉] 16:03, 26 June 2022 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- Behaviourally, this looks like a match, so I am blocking and tagging as suspected. I've looked at the CU records, and I don't see any other accounts. I actually wonder whether this account was hijacked - this account was created in 2012, and made a single edit (which was vandalism). The CU data shows attempts to log into a bunch of old, abandoned accounts. This was the only success that I saw - perhaps the password was just 'password' or similar, and easily guessable, but once it had been accessed, the Ron Merkle nonsense started. Use strong passwords, folks. Girth Summit (blether) 17:50, 26 June 2022 (UTC)
----
=16 July 2022=
==Suspected sockpuppets==
{{sock list
| The Lord Above
| General Kerr Melon
| X2A3Q
| Thomitoraaz
| Alemaledongsing
| Ghko01
| XxxTy3uKxxx
| Elm Kroner
|tools_link=yes}}
"Ron Merkle" nonsense once again.[https://en.wikipedia.org/w/index.php?title=Ron_Merkel&diff=1097695841&oldid=1097695125][https://en.wikipedia.org/w/index.php?title=Human_Rights_Awards_(Australia)&diff=prev&oldid=1097696070] The former account was already active in May, before I last requested a sleeper check, which apparently came up empty-handed. The user is active from an IP range as well (Special:Contributions/2001:14bb::/37)[https://en.wikipedia.org/w/index.php?title=Rhytiphora_multispinis&diff=prev&oldid=1097585161][https://en.wikipedia.org/w/index.php?title=Post-quantum_cryptography&diff=prev&oldid=1097694589][https://en.wikipedia.org/w/index.php?title=Connolly_Association&diff=prev&oldid=1097514507][https://en.wikipedia.org/w/index.php?title=Judy_in_Disguise_(With_Glasses)&diff=prev&oldid=1097585351][https://en.wikipedia.org/w/index.php?title=The_Dain_Curse&diff=prev&oldid=1097693161][https://en.wikipedia.org/w/index.php?title=2007%E2%80%9308_Toronto_Maple_Leafs_season&diff=prev&oldid=1097693777][https://en.wikipedia.org/w/index.php?title=Elias_M._Stein&diff=prev&oldid=1097604416] with IPs changing multiple times a day. Maybe a range block is in order. Can a user be prevented from logging in on a blocked range? IceWelder [✉] 18:08, 16 July 2022 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
I am not Atac2. — Preceding unsigned comment added by The Lord Above (talk • contribs) 01:58, 17 July 2022 (UTC)
- {{ping|Materialscientist}} You unfortunately had to deal with several socks this night. What do you think about the few I listed above that have not yet been blocked, as well as the IP range? IceWelder [✉] 06:22, 18 July 2022 (UTC)
Huh. General Kerr Melon (talk) 07:11, 18 July 2022 (UTC)
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
It's difficult to be specific, but these are all apparently related to each other. Going mostly by behaviour, Atac looks about right. I've blocked about 30 related accounts,[https://en.wikipedia.org/w/index.php?title=Special:Log/Zzuuzz&offset=202207182216005&limit=30&type=block&user=Zzuuzz] using various levels of confirmation to other accounts. Most are compromised. Many are on proxies. -- zzuuzz (talk) 22:25, 18 July 2022 (UTC)
----
=21 July 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- Blocked. {{rae}} given the extensive history of sleepers. --Blablubbs (talk) 21:53, 21 July 2022 (UTC)
- {{Inprogress}} - -- RoySmith (talk) 22:03, 21 July 2022 (UTC)
- Ashpokeman is {{confirmed}} to several socks from 16 July 2022 and a few sock-blocked accounts that I don't see listed in the archive. The only sleeper I see is {{socklist|DESTROYX1}}. -- RoySmith (talk) 22:23, 21 July 2022 (UTC)
----
=22 July 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
Confirmed. Other compromised accounts:
- {{checkuser|Jamieis8}}
- {{checkuser|Nv5x5}}
- {{checkuser|IEpikboy}}
- {{checkuser|Dchavez06}}
- {{checkuser|Denstark}}
-- zzuuzz (talk) 07:58, 22 July 2022 (UTC)
:FWIW, Jamieis8 is now the oldest account, but I don't know if there's any value in renaming the case. -- RoySmith (talk) 12:23, 22 July 2022 (UTC)
::I don't think so. We've gotten a new oldest account since this one was discovered, and there will probably be more down the line (and I'm not a huge fan of having compromised accounts listed as masters anyway). --Blablubbs (talk) 05:45, 23 July 2022 (UTC)
- I just blocked {{checkuser|Janyksteenbeek}} as VOA, but I suspect they are part of this group. I've requested CU. The account is very old, but their first edit was right after the last check.--Bbb23 (talk) 00:05, 23 July 2022 (UTC)
:*Yes, same party. These accounts have been compromised:
- {{checkuser|Janyksteenbeek}}
- {{checkuser|Nickjoanni}}
- {{checkuser|Isma1201}}
- {{checkuser|Coolman8909}}
- {{checkuser|Buddybuddy0920}}
- {{checkuser|Jaredrules2}}
- {{checkuser|Jared67j}}
- {{checkuser|1packerkid}}
- {{checkuser|Pnut2435}}
- {{checkuser|Jaslamer1}}
- {{checkuser|Ajjget}}
- {{checkuser|Anuk2000}}
- {{checkuser|Fishermugs}}
- {{checkuser|Kaixxc}}
- {{checkuser|Adi2004123}}
- {{checkuser|Cupidmage72}}
- {{checkuser|Bravest llama}}
- {{checkuser|Jmacareno}}
- {{checkuser|Ilanthtamil}}
- {{checkuser|Bramanjupiter}}
- {{checkuser|GreenhouseTreatment}}
-- zzuuzz (talk) 00:49, 23 July 2022 (UTC)
:{{glr}}. --Blablubbs (talk) 08:15, 23 July 2022 (UTC)
----
=23 July 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
There is another account, AngelaMerkelFan. I saw it at WP:ANI. Quandane Dingle (talk) 08:58, 23 July 2022 (UTC)
:Noting Quandane Dingle, renamed to {{u|Tennismanlol5190}} is [https://en.wikipedia.org/wiki/Special:Contributions/Tennismanlol5190 check user blocked.] Deepfriedokra (talk) 19:17, 23 July 2022 (UTC)
::But not part of this sock farm.--Bbb23 (talk) 20:32, 23 July 2022 (UTC)
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- Clearly related. {{Endorse}} - For another sleeper check given how active they've been recently. --Jack Frost (talk) 08:52, 23 July 2022 (UTC)
- There is an active ANI thread and I've noted {{np|AngelaMerkelFan}} from that thread for posterity (thankyou {{u|Quandane Dingle}}). Also noting Wikipedia:Sockpuppet investigations/Molotov Cock appears to be the same user as this one. {{yo|Girth Summit}} As a courtesy. --Jack Frost (talk) 09:11, 23 July 2022 (UTC)
- {{inconclusive}} Salvio 09:25, 23 July 2022 (UTC)
----
=24 July 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
=29 July 2022=
==Suspected sockpuppets==
{{sock list|1=Detective P.|tools_link=yes}}
Account evidently compromised today. {{bwt}}, {{lock requested}}. Requesting check for other compromises by the same master. (Guessing you might also find a lot of failed login attempts against some accounts.) -- Tamzin[cetacean needed] (she|they|xe) 07:15, 29 July 2022 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{selfendorse}}. -- Tamzin[cetacean needed] (she|they|xe) 07:15, 29 July 2022 (UTC)
- Confirmed to Atac2, confirmed to be a likely compromise, {{nosleepers}}. -- zzuuzz (talk) 07:32, 29 July 2022 (UTC)
----
=30 July 2022=
==Suspected sockpuppets==
{{sock list|1=JvaGoddess|tools_link=yes}}
Another clear compromise. This one doesn't have the same obvious method of compromise as the last one. {{bwt}}. {{lock requested}}. CU requested for sleepers again. -- Tamzin[cetacean needed] (she|they|xe) 02:42, 30 July 2022 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{selfendorse}} -- Tamzin[cetacean needed] (she|they|xe) 02:42, 30 July 2022 (UTC)
- Checked this earlier. Nothing else to be done. -- Amanda (she/her) 08:18, 30 July 2022 (UTC)
----
=30 July 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{decline}} since we've already had a sleeper check in the past few hours. And I'm gonna decline to tag, seems like Atac likes the attention. Closing. -- Tamzin[cetacean needed] (she|they|xe) 09:35, 30 July 2022 (UTC)
----
=31 July 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{bwt}}. {{locks requested}}. {{endorse}} for sleeper check, particuarly in light of Special:Redirect/logid/134593165. -- Tamzin[cetacean needed] (she|they|xe) 09:03, 31 July 2022 (UTC)
- Compromised accounts locked and sleeper CUblocked by Amanda. Closing. -- Tamzin[cetacean needed] (she|they|xe) 09:18, 31 July 2022 (UTC)
----
=31 July 2022=
==Suspected sockpuppets==
- {{checkuser|1=A part of thee in the key of what we know to be every part without me}} ({{clerknote}} originally filed under this user)
{{sock list|1=Alone at the edge of a universe humming a tune|tools_link=yes}}
Both have exceedingly long usernames, both accounts first edits were to their user page adding dashes in 9 edits then blanking them (obvious attempt to game the system for autoconfirmed status) Lavalizard101 (talk) 11:38, 31 July 2022 (UTC)
==<big>Comments by other users</big>==
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- One more:
- {{checkuser|With sparkling crystals souls aglow}}
- "Alone.." is the oldest. ([https://genius.com/Miracle-musical-introduction-to-the-snow-lyrics lyrics]) 0xDeadbeef 15:32, 31 July 2022 (UTC)
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{Requestandendorse}} - considering the obvious autoconfirmed gaming, a check for other accounts and/or an older master seems like a good idea. Thanks, Spicy (talk) 18:59, 31 July 2022 (UTC)
- All three accounts are {{confirmed}} to {{checkuser|Atac2}}. {{bnt}}. {{Clerk Request}} Please merge this case to Wikipedia:Sockpuppet investigations/Atac2. Thanks, Mz7 (talk) 19:14, 31 July 2022 (UTC)
- Thanks. Merged, closing. Spicy (talk) 19:18, 31 July 2022 (UTC)
----
=01 August 2022=
==Suspected sockpuppets==
{{sock list|1=Johanneswilm|tools_link=yes}}
'nother compromise. Already locked. CU for sleepers. -- Tamzin[cetacean needed] (she|they|xe) 04:30, 1 August 2022 (UTC)
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- {{selfendorse}} -- Tamzin[cetacean needed] (she|they|xe) 04:30, 1 August 2022 (UTC)
- Doesn't look like anything more. -- Amanda (she/her) 09:21, 1 August 2022 (UTC)
----
=13 August 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
Confirmed, compromised. Several glocks requested. -- zzuuzz (talk) 21:57, 13 August 2022 (UTC)
----
=16 August 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
=29 August 2022=
==Suspected sockpuppets==
{{sock list|1=Cuchuoi4488|tools_link=yes}}
This user has just created 49 pages about a Ronald Merkle with the ever so slightest variations in the same. Seems likely that based on the Ronald Merkle spam they're this sockpuppeteer. Hey man im josh (talk) 16:29, 29 August 2022 (UTC)
:For those who are as confused as I was, the "slightest variations" consist of things like using an upper case "I" in place of a lower case "l", which looks identical in some fonts. -- RoySmith (talk) 16:36, 29 August 2022 (UTC)
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- The account is now indeffed. Tagging and closing. Bbb23 (talk) 16:37, 29 August 2022 (UTC)
- :We edit-conflicted, but {{confirmed}} to Atac2. And, wow, going back to 2009! Probably worth a case rename. -- RoySmith (talk) 16:47, 29 August 2022 (UTC)
- ::I strongly advise against renaming. They keep compromising old accounts (there's one in the archive that was created in 2001), so we might be moving and retagging quite frequently. It would also be fairly confusing if the original owners regain access to their accounts. --Blablubbs (talk) 16:52, 29 August 2022 (UTC)
- ::Actually, {{ping|zzuuzz}} you previously identified a lot of Atac2 socks as compromised accounts. Maybe this is another of those? I'm still a little hazy on how to spot compromises, but you seem to have it figured out. -- RoySmith (talk) 16:54, 29 August 2022 (UTC)
- :::@Blablubbs, as is often the case, I see you were one step ahead of me :-) -- RoySmith (talk) 16:55, 29 August 2022 (UTC)
- ::::Definitely compromised, and I'll just mention that I/we blocked/glocked a bunch of Atac2/compromised accounts earlier today. {{yo|RoySmith}} I'll drop you an email later. But for now, if it's older than a few months and spouting merkle, assume it's compromised. -- zzuuzz (talk) 17:13, 29 August 2022 (UTC)
----
=29 August 2022=
==Suspected sockpuppets==
{{sock list|1=Ron Wars Merkle Strikes Back|tools_link=yes}}
Leonidlednev (talk) 03:00, 29 August 2022 (UTC)
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
- This is Wikipedia:Sockpuppet investigations/Atac2, as mentioned in the block log for the 'master' account(!). No real point merging there I don't think. Recommend G6 in lieu of anything else. Closing. firefly ( t · c ) 11:09, 29 August 2022 (UTC)
- Moved to Atac2 and will G6 Wikipedia:Sockpuppet investigations/Ron Merkle (signatures will provide sufficient attribution in this circumstance and there is no value in retaining that page otherwise). {{stagged}}. Closing. --Jack Frost (talk) 07:48, 30 August 2022 (UTC)
----
=03 December 2022=
==Suspected sockpuppets==
{{sock list|1=Ron Wars Return of the Merkle|tools_link=yes}}
More insertion of 'Ron Merkle' into articles: [https://en.wikipedia.org/w/index.php?title=Krak%C3%B3w&diff=prev&oldid=1125381023], [https://en.wikipedia.org/w/index.php?title=Fascist_Italy_(1922%E2%80%931943)&diff=prev&oldid=1125381897]. Also, 'Return of the Merkle' suggests it's not this user's first rodeo. ◇HelenDegenerate◆ 18:27, 3 December 2022 (UTC)
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
=21 December 2022=
==Suspected sockpuppets==
{{sock list|1=Ach afri ke|tools_link=yes}}
[https://en.wikipedia.org/w/index.php?title=Kenneth_C._Rogers&diff=prev&oldid=1128756594]. WP:DUCK ◇HelenDegenerate◆ 21:01, 21 December 2022 (UTC)
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
I wholeheartedly disagree with this rude accusation. Ach afri ke (talk) 21:08, 21 December 2022 (UTC)
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
=21 December 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
=21 December 2022=
==Suspected sockpuppets==
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
==<big>Clerk, CheckUser, and/or patrolling admin comments</big>==
=22 December 2022=
==Suspected sockpuppets==
{{sock list|1=Awesomek555|tools_link=yes}}
More [https://en.wikipedia.org/w/index.php?title=Bill:_On_His_Own&diff=1128770606&oldid=1107015098&diffmode=source Ron] [https://en.wikipedia.org/w/index.php?title=Probuditi!&diff=prev&oldid=1128771651&diffmode=source Merkle] [https://en.wikipedia.org/w/index.php?title=Doc_(film)&diff=1128771850&oldid=1106735336&diffmode=source nonsense]. I've already blocked the account but a check for sleepers may be in order. Whpq (talk) 13:50, 22 December 2022 (UTC)
==<big>Comments by other users</big>==
:Accused parties may also comment/discuss in this section below. See Defending yourself against claims.