Wikipedia:Sockpuppet investigations/Marylucygril/Archive

• {{checkuser|1=Marygril}}
• {{checkuser|1=Katdm}}
• {{checkuser|1=Kimdotcom}}
• {{checkuser|1=User991}}
• {{checkuser|1=Indiaguy}}
• {{checkuser|1=Marysupergril}}
• {{checkuser|1=Jumpmusic}}
• {{checkuser|1=Yugi9}}

• [http://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=Marylucygril User compare report] Auto-generated every hour.
• [http://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility]

A swarm of new accounts (some already blocked) trying to post new URLs to various defunct torrent providers, such as KickassTorrents, Torrent Project, and IsoHunt. Ivanvector (^Talk/_Edits) 17:05, 19 September 2017 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• {{selfendorse}} - as I'm the filer I'm pretty sure all of these accounts are socks; please check for sleepers and see if some kind of rangeblock would help. Ivanvector (^Talk/_Edits) 17:06, 19 September 2017 (UTC)
• The following accounts are {{tallyho}}:

:*{{checkuser|Katdm}}

:*{{checkuser|Kimdotcom}}

:*{{checkuser|User991 }}

:*{{checkuser|Indiaguy}}

:*{{checkuser|Jumpmusic}}

:*{{checkuser|Yugi9}}

• The following accounts are also {{tallyho}}

:*{{checkuser|Marylucygril}}

:*{{checkuser|Marygril}}

:*{{checkuser|Katdm}}

• Both groups are {{confirmed}} to each other.--Jezebel's Ponyo^{bons mots} 19:16, 19 September 2017 (UTC)

::{{yo|Ponyo}} I notice Marysupergril is not listed but Katdm is listed twice. An error? Ivanvector (^Talk/_Edits) 19:34, 19 September 2017 (UTC)

::*{{ping|Ivanvector}} the Katdm account showed up in both groups, which is why it's listed twice. I missed Marysupergril as they created the account and edited through a (now blocked) open proxy. The UA is a match though.--Jezebel's Ponyo^{bons mots} 20:13, 19 September 2017 (UTC)

• {{checkuser|1=Justpourti}} based on [https://tools.wmflabs.org/guc/?user=Justpourti global contribs] spamming.
• Report 1, Report 2, Report 3 and Report 4.
   — Berean Hunter (talk) 20:12, 19 September 2017 (UTC)
• {{ping|Berean Hunter}}, can you just list them inside {{tl|LinkSummary}} templates on these pages .. it gives some easier cross searching, and this page is also easier to find back:
• {{LinkSummary|isohunt.tv}}
• {{LinkSummary|isohunt2.org}}
• {{LinkSummary|kickass2.nz}}
• {{LinkSummary|torrentproject2.com}}
• --Dirk Beetstra ^{T C} 08:12, 20 September 2017 (UTC)
• {{clerknote}} master's block upgraded to indef and all other socks were already blocked and are now tagged as well. I've requested global lock for Justpourti. Ivanvector (^Talk/_Edits) 20:35, 19 September 2017 (UTC)

:All locked and (range)blocked globally. RadiX∞ 03:57, 23 September 2017 (UTC)

:{{ping|Ivanvector}} Master have also tagged locked global account, case can be closing. SA 13 Bro (talk) 11:26, 23 September 2017 (UTC)

:Closed per above. Thanks everyone. Ivanvector (^Talk/_Edits) 11:32, 23 September 2017 (UTC)

----

• {{checkuser|1=Panu7}}

• [http://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=Marylucygril User compare report] Auto-generated every hour.
• [http://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility]

Found this account replacing the same links at KickassTorrents as previous socks, two days after protection expired. I have blocked this account as an obvious sock. This master is known to create many accounts; requesting CU for sleepers. Ivanvector (^Talk/_Edits) 13:14, 11 November 2017 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• {{selfendorse}} per above. Ivanvector (^Talk/_Edits) 13:16, 11 November 2017 (UTC)
• {{nosleepers}}. ~ Rob₁₃^Talk 21:49, 11 November 2017 (UTC)

----

• {{checkuser|1=Maryime}}
• {{checkuser|1=Srjoe000}}
• {{checkuser|1=Liloeditor}}

• [http://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=Marylucygril User compare report] Auto-generated every hour.
• [http://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility]

Series of throwaway accounts playing around with links at on defunct torrent sites again (this time IsoHunt). Requesting CU for sleepers per case history. Ivanvector (^Talk/_Edits) 19:28, 12 February 2018 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• {{selfendorse}} per above. Ivanvector (^Talk/_Edits) 19:30, 12 February 2018 (UTC)
• {{confirmed}}. Blocked Liloeditor. No other accounts seen. Should we be requesting global locks?--Bbb23 (talk) 23:53, 12 February 2018 (UTC)

::I think no, these accounts only have edits on enwiki. Closing. Ivanvector (^Talk/_Edits) 02:23, 13 February 2018 (UTC)

----

• {{checkuser|1=Hulo999}}
• {{checkuser|1=Hulu998}}

• Tools: [https://tools.wmflabs.org/sigma/editorinteract.py Editor interaction utility] • [https://tools.wmflabs.org/interaction-timeline?wiki=enwiki Interaction Timeline] • [https://tools.wmflabs.org/betacommand-dev/cgi-bin/uc?uc=Marylucygril User compare report] Auto-generated every hour.

More new obvious throwaway accounts messing with links on defunct torrent sites, this time KickassTorrents. Ivanvector (^Talk/_Edits) 00:04, 19 April 2018 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• {{selfendorse}} to check for sleepers given the case's history and the username pattern strongly suggesting systematic creation of throwaways. Ivanvector (^Talk/_Edits) 00:06, 19 April 2018 (UTC)
• {{noping|Ninjaeditor001}} is {{confirmed}} to {{noping|Srjoe000}} and {{noping|Maryime}} from the previous investigation. {{noping|Hulu998}} is essentially {{tallyho}} from them. {{noping|Hulo999}} is very {{likely}}. I poked around, but I didn't see anything else. I'll block and tag them all. NinjaRobotPirate (talk) 04:00, 19 April 2018 (UTC)

----