Wikipedia:Sockpuppet investigations/JShanley98/Archive

;Suspected sockpuppets

• {{checkip|1=76.21.72.248}}
• {{checkuser|1=ThePhantom666}}

• [http://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=JShanley98 User compare report] Auto-generated every hour.
• [http://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility]

User:JShanley98 was recently indef'd for copyright violations on film articles by {{user|Diannaa}}. No attempt was made by JShanley98 to a) acknowledge the issue or b) contest the block. IP 76.21.72.248 has edited film articles with the same editing style as the blocked user. Here are the diffs:

1. [https://en.wikipedia.org/w/index.php?title=The_Madness_of_King_George&type=revision&diff=712774084&oldid=711167499 First example from JShanley98]
2. [https://en.wikipedia.org/w/index.php?title=The_Flintstones_%28film%29&type=revision&diff=713455243&oldid=713446607 Second example from JShanley98]
3. [https://en.wikipedia.org/w/index.php?title=Evolution_%282015_film%29&type=revision&diff=714101107&oldid=710986508 First example from IP]
4. [https://en.wikipedia.org/w/index.php?title=Southbound_%282015_film%29&type=revision&diff=713904864&oldid=712351280 Second example from IP]

Notice the subtle edits in the infobox. JS adds in plainlist to the infobox for lists of crew members, puts the words "Theatrical runtime" in hidden comments, uses the BFI for the source of the runtime and (the clincher), puts the name of the film in the ref for the runtime in UPPERCASE. Now check the IP edits. EXACTLY the same layout/style. Also further down all the articles, both of them fill in the missing external links and categories. I'm 100% sure they are one and the same editor. Lugnuts ^{Dick Laurent is dead} 17:15, 7 April 2016 (UTC)

;Additional from 10th April

I've added the user ThePhantom666 to the list too, for the exact same edit pattern. Note that this account started editing two days after Shanley was blocked, doing the exact same style of edits to film articles. Diffs:

1. [https://en.wikipedia.org/w/index.php?title=Colonia_%28film%29&type=revision&diff=713909323&oldid=712257454 First example]
2. [https://en.wikipedia.org/w/index.php?title=Truman_%282015_film%29&type=revision&diff=714559345&oldid=705577875 Second example]

Thanks. Lugnuts ^{Dick Laurent is dead} 14:19, 10 April 2016 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• This is incredibly obvious sock puppetry. Does it need more evidence? Alright:
• ThePhantom666 ({{diff2|716791624|diff}}): removes whitespace from headers, adds citation for runtime, moves {{cl|American films}} and {{cl|English-language films}} to the top of the category list
• JShanley98 ({{diff2|707133268|diff}}): removes whitespace from headers, adds citation for runtime, moves {{cl|American films}} and {{cl|English-language films}} to top of the category list
• There are plenty of other edits JShanley98 and ThePhantom666 have made that are basically identical gnomish tweaks to {{tl|infobox film}} and the category list. NinjaRobotPirate (talk) 23:44, 23 April 2016 (UTC)
• I imagine the local CUs won't want to confirm an IP --> account connection publicly. Ajraddatz (talk) 02:35, 24 April 2016 (UTC)

• Clearly passes the duck test. JShanley98 was blocked on April 3, and a few days later The Phantom666 shows up to continue his disruption. Blocked ThePhantom666, tagged both accounts; the IP is a little stale, but tagged as a suspected sock. Closing. Katie^talk 00:09, 24 April 2016 (UTC)

----

• {{checkip|1=166.159.61.73}}
• {{checkip|1=2600:1010:B048:A1FB:95F3:ABDE:3755:139D}}
• {{checkip|1=2600:1010:b042:bbdc:04c1:4a0d:81e1:e31e}}
• {{checkip|1=2600:1010:b04f:150f:9510:27e8:0c9d:4034}}
• {{checkip|1=2600:1010:B018:888D:B087:2E2D:BABE:20DC}}
• {{checkip|1=104.55.172.40}}

• [http://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=JShanley98 User compare report] Auto-generated every hour.
• [http://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility]

The 166.159 IP is one of several IP accounts recently used by JShanley98 to evade his block. JShanley98 makes pretty much the same edit every time: he replaces
HTML tags with {{tl|Plainlist}} (always with the first letter capitalized), cites the runtime the BBFC, add adds a date tag at the top. This IP editor does the same thing.

• JShanley98: {{diff2|713118634}}, {{diff2|712888407}}, {{diff2|712774084}}, {{diff2|712772255}}
• 166.159.61.73: {{diff2|741577438}}, {{diff2|741579705}}, {{diff2|741427424}}, {{diff2|741398532}}

These IPs are part of a range that he also uses, but they're mostly stale. I'm listing them on the long-shot chance that someone might consider a range block:

• 2600:1010:B048:A1FB:95F3:ABDE:3755:139D: {{diff2|739783670}}, {{diff2|739789221}}
• 2600:1010:b042:bbdc:04c1:4a0d:81e1:e31e: {{diff2|741046765}}, {{diff2|741061416}}
• 2600:1010:b04f:150f:9510:27e8:0c9d:4034: {{diff2|740843040}}, {{diff2|740844751}}
• 2600:1010:B018:888D:B087:2E2D:BABE:20DC: {{diff2|740223390}}

I realize this is a very wide range, but there isn't all that much activity on it beyond JShanley98 socks, {{diff2|738086904|other socks}}, and {{diff2|740101136|this pleasant fellow}}. NinjaRobotPirate (talk) 20:55, 29 September 2016 (UTC)

Another one just popped up on my watchlist:

• 104.55.172.40: {{diff2|741950774}}, {{diff2|741972192}}

This one is still fresh and seems to be a home ISP account instead of the often-used wireless accounts. NinjaRobotPirate (talk) 21:20, 30 September 2016 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

:I've taken a look at the contributions from the IPs listed above, and I agree, they are (at least to me) the same individual. The infobox update is the tell-tale sign. Lugnuts ^{Dick Laurent is dead} 07:01, 30 September 2016 (UTC)

:: Looks like {{checkip|1=2600:1010:B06F:44AE:2CDB:980C:622:BBCF}} is another one. Lugnuts ^{Precious bodily fluids} 18:39, 7 October 2016 (UTC)

• The IPv6 range is a /41 from Verizon Wireless; really big to rangeblock, and it's too stale at present. Blocked 166.159.61.73 for three months. Closing. Katie^talk 02:15, 19 October 2016 (UTC)

----

• {{checkip|1=76.21.72.248}}

• [http://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=JShanley98 User compare report] Auto-generated every hour.
• [http://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility]

JShanley98 was blocked for repeated copyright violations and has returned to continue making edits under a variety of IP addresses. 76.21.72.248 was blocked for 6 months in May 2016. JShanley98 seems to returned to editing on this IP address as soon as the block ended.

• JShanley98: {{diff2|712888407}}, {{diff2|712772255}}, {{diff2|712369747}}
• 76.21.72.248: {{diff2|750341565}}, {{diff2|749967218}}, {{diff2|749488873}}

In each edit, the same ritualistic changes are made: HTML "br" tags are replaced by {{tl|Plainlist}}, the runtime is cited to the BBFC, and a hatnote about English-language variety is added. NinjaRobotPirate (talk) 07:19, 19 November 2016 (UTC)

: He's still active: {{diff2|753463786}}. NinjaRobotPirate (talk) 07:59, 9 December 2016 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• {{awaitingadmin}} please block the IP for 1 year. NinjaRobotPirate's evidence is compelling. Ivanvector (^Talk/_Edits) 13:22, 14 December 2016 (UTC)
• :{{IPblock}} 🎄BethNaught (talk)🎄 13:43, 14 December 2016 (UTC)

----