Login
Login

Wikipedia:Sockpuppet investigations/Nakesha7c/Archive

__TOC__

{{SPIarchive notice|Nakesha7c}}
{{SPIpriorcases}}

=== <big>Report date July 24 2009, 14:55 (UTC)</big>===

{{SPIcat}}

;Suspected sockpuppets

  • {{checkuser|1=Boccard5c}}
  • {{checkuser|1=Arieln530}}
  • {{checkuser|1=Doreen25m}}
  • {{checkuser|1=Lilliam3p}}
  • {{checkuser|1=Tiny5aldo}}
  • {{checkuser|1=Twinelee123}}
  • {{checkuser|1=Statelee90}}
  • {{checkuser|1=Santa25di}}
  • {{checkuser|1=Fuson4q}}
  • {{checkuser|1=Janenezibg}}
  • {{checkuser|1=Latrishaf}}
  • {{checkuser|1=Margeretqouw}}
  • {{checkuser|1=Eviegqpa}}
  • {{checkuser|1=Sharietfs}}
  • {{checkuser|1=Typelee123}}
  • {{checkuser|1=Marilourdcarano}}
  • {{checkuser|1=Amiee0j}}
  • {{checkuser|1=Gabri4e}}
  • {{checkuser|1=Preferlee}}
  • {{checkuser|1=Hooeylee}}
  • {{checkuser|1=Smithwalsh0}}
  • {{checkuser|1=Annaleon2}}
  • {{checkuser|1=Doylelynch8}}
  • {{checkuser|1=Briannau}}
  • {{checkuser|1=Angelec60p}}
  • {{checkuser|1=Aliarmfe}}
  • {{checkuser|1=Grazynag1fw}}
  • {{checkuser|1=Eileenpuhi}}
  • {{checkuser|1=Arieln530}}
  • {{checkuser|1=Ariane6jk}}
  • {{checkuser|1=Elviede66}}

;Evidence submitted by Calton

The name chosen for the case was for convenience, not under any assumption that the user is the master account.

Essentially, a spamming ring, creating dozens of accounts and their pages as vehicles for spamming several law firms across the United States. Each page is essentially of the form:

:NAME is a STATE/CITY based firm specializing in representing CLASSOFVICTIMS/CLIENTTYPE

followed by the firm's website URL (usually of the form "http:www.URL.com/PracticeAreas/PAGE", though that may be an artifact of specialty legal-firm web design firm) and a batch of keywords such as

:personal injury attorney, accident lawyers, lawyers, personal injury, personal injury cases

I've (so far) identified most of the spam representing seven ten twelve different firms from New York, Illinois, Utah, California, Massachusetts, Texas, Colorado, and Florida, but the same formatting makes me think that the same spamming/SEO firm is responsible for all of them. The listed names are a sampling, but I can provide a longer list if necessary.

I believe a Checkuser investigation is necessary to root out the underlying IPs.

--Calton | Talk 14:55, 24 July 2009 (UTC)

;Comments by accused parties    See Defending yourself against claims.

;Comments by other users

;CheckUser requests

{{RFCU| B | F | Checked }}    Requested by Calton | Talk 14:55, 24 July 2009 (UTC)

;Clerk, patrolling admin and checkuser comments

  • {{Endorse}} based on Calton's description above. The edits by the accounts listed are deleted, but Calton's work in the spam area is well known. Likely that some of the law firm spam accounts have been missed, CU will hopefully pick up the rest. Nathan T 15:49, 24 July 2009 (UTC)
  • {{in progress}} I massblocked almost [https://secure.wikimedia.org/wikipedia/en/w/index.php?title=Special:Log&dir=prev&offset=20090726091222&limit=100&user=Luk&month=&year= 100 accounts] but I still need to check if there are proxies. -- Luk talk 12:38, 27 July 2009 (UTC)

:{{TakeNote}} the (dynamic) IPs are Chinese. -- Luk talk 12:45, 27 July 2009 (UTC)

:{{IPBlock}} (mostly open proxies) -- Luk talk 06:36, 30 July 2009 (UTC)

;Conclusions

  • {{clerknote}} I assume then, that all of those unblocked are fine? NW (Talk) 04:46, 2 August 2009 (UTC)
  • Accounts that are unblocked:
  • {{checkuser|1=Fuson4q}}
  • {{checkuser|1=Doylelynch8}}
  • {{checkuser|1=Angelec60p}}
  • {{checkuser|1=Aliarmfe}}
  • {{checkuser|1=Ariane6jk}}
  • {{checkuser|1=Elviede66}}

----

:I've now indef blocked the accounts listed above. All were already tagged as "indef blocked as sock of Nakesha7c" on their user pages - seems they were just missed. If they were left on purpose please go ahead and unblock. Tonywalton Talk 13:48, 2 August 2009 (UTC)

:{{completed}} Found and massblocked the following users: {{user|Adell1k}}, {{user|Marinedi4}}, {{user|Fredric0f}}, {{user|Charlsi9lke}}, {{user|Karinpkn}}, {{user|Thoows5ki}}, {{user|Lucilaraaw}}, {{user|Branda8f87}}, {{user|Jenifferkgm}}, {{user|Anymiles12}}, {{user|Zhirongni}}, {{user|Brant183}}, {{user|Adelaiderqd}}, {{user|Athenasvh}}, {{user|Arethafldand}}, {{user|Vivianatjpar}}, {{user|Kimberleesi}}, {{user|Jacquelinefe}}, {{user|Ellennx6m}}, {{user|Johnna1o5s}}, {{user|Hollyq4cu}} and {{user|Natividads5mt}}. Blocked the underlying IPs as open proxies. -- Luk talk 15:01, 3 August 2009 (UTC)

  • {{clerknote}} Everything blocked and tagged. NW (Talk) 15:18, 3 August 2009 (UTC)

{{SPIclose|archive}}__TOC__

{{SPIarchive notice|Nakesha7c}}
{{SPIpriorcases}}

=== <big>Report date August 2 2009, 12:16 (UTC)</big>===

{{SPIcat}}

;Suspected sockpuppets

  • {{checkuser|1=Drewbams}}
  • {{checkuser|1=Joeleopoid}}
  • {{checkuser|1=Bearsdsley}}
  • {{checkuser|1=Clevefland}}
  • {{checkuser|1=Mayasflan}}
  • {{checkuser|1=Dickinwson}}

;Evidence submitted by Calton

Garden-variety spammer, using User Talk pages for spamming links. Need a checkuser to root out any underlying IPs or sleepers. --Calton | Talk 12:16, 2 August 2009 (UTC)

;Comments by accused parties    See Defending yourself against claims.

;Comments by other users

;CheckUser requests

{{RFCU| F | No2ndletter |Endorse }}    Requested by Calton | Talk 12:16, 2 August 2009 (UTC)

;Clerk, patrolling admin and checkuser comments

  • Edits in this case are deleted, so I can't see them. Endorsed for CU based on Calton's track record in this area. Nathan T 16:15, 3 August 2009 (UTC)

{{confirmed}}:

  • {{checkuser|Kimberleeq}}
  • {{checkuser|Branda8f87}}
  • {{checkuser|Leevov}}
  • {{checkuser|Joeleopoid}}
  • {{checkuser|Mayasflan}}
  • {{checkuser|Clevefland}}
  • {{checkuser|Bearsdsley}}
  • {{checkuser|Dickinwson}}
  • {{checkuser|Mayasflan}}

See also Wikipedia:Sockpuppet investigations/Urllee52. – Luna Santin (talk) 19:17, 3 August 2009 (UTC)

:Still working on this; more in a bit. – Luna Santin (talk) 19:27, 3 August 2009 (UTC)

::More likely socks:

::# {{checkuser|??}}

::# {{checkuser|Bonnybanks7}}

::# {{checkuser|Tonyjohn8880}}

::# {{checkuser|Rosariozfc3}}

::# {{checkuser|Markjackson3}}

::# {{checkuser|Gmithtr66q}}

::# {{checkuser|Majorie4m}}

::# {{checkuser|AmeriDu65}}

::# {{checkuser|Guyeric6}}

::# {{checkuser|Dara4d}}

::# {{checkuser|HsiuAwtrey}}

::# {{checkuser|Kroug7h}}

::# {{checkuser|Myrticeybuf}}

::# {{checkuser|Alvacae2}}

::# {{checkuser|Anymiles12}}

::# {{checkuser|Baby12lee}}

::# {{checkuser|Kelseyn45u}}

::# {{checkuser|IngeMada12}}

::# {{checkuser|Kimberleeq}}

::# {{checkuser|Branda8f87}}

::# {{checkuser|Leevov}}

::# {{checkuser|Joeleopoid}}

::# {{checkuser|Blanchix6p}}

::# {{checkuser|Antilee80}}

::# {{checkuser|Soraya9k}}

::# {{checkuser|Verda25ba}}

::# {{checkuser|Diigolee}}

::# {{checkuser|Vera1994}}

::# {{checkuser|Kaitlyn4k}}

::# {{checkuser|Marylnre8}}

::# {{checkuser|Jene6t}}

::# {{checkuser|Stuart265}}

::# {{checkuser|Brant183}}

::# {{checkuser|Geniew9}}

::# {{checkuser|Elli4gmj}}

::# {{checkuser|Jzacharyjohn97}}

::# {{checkuser|Roseleebuloss}}

::# {{checkuser|Rache4}}

::# {{checkuser|Jolir}}

::# {{checkuser|Waltraudiswx}}

::# {{checkuser|Mindac4c}}

::# {{checkuser|Oyoung}}

::# {{checkuser|Linklee71}}

::# {{checkuser|Elfriedah}}

::# {{checkuser|Zacharymike28}}

::# {{checkuser|Ketty17a}}

::# {{checkuser|Kandlylee}}

::# {{checkuser|Urllee52}}

::# {{checkuser|Daniellalm}}

::# {{checkuser|Pura4a}}

::# {{checkuser|Weedlee37}}

::# {{checkuser|Fronick7}}

::# {{checkuser|Sherija}}

::# {{checkuser|Arethafldand}}

::# {{checkuser|Jaymielj}}

::# {{checkuser|Lauri6h}}

::# {{checkuser|Karie8v}}

::# {{checkuser|Rethaye78}}

::# {{checkuser|Carlen1j}}

::# {{checkuser|Nichelleufasper}}

::# {{checkuser|Seedlee85}}

::# {{checkuser|Pansydydela}}

::# {{checkuser|Angieyuneve}}

::# {{checkuser|Yerke3u}}

::# {{checkuser|Suellensufr}}

::# {{checkuser|Larae4l}}

::# {{checkuser|Keely8o}}

::# {{checkuser|Anna0220}}

::# {{checkuser|Annapmga}}

::# {{checkuser|Melodiwo1}}

::# {{checkuser|Nadiaowcol}}

::# {{checkuser|Lashawn4l}}

::# {{checkuser|Lettie6f}}

::# {{checkuser|Devora513}}

::# {{checkuser|Lauryn13}}

::# {{checkuser|Temekahegroch}}

::# {{checkuser|Reginiari59}}

::# {{checkuser|Deit7z}}

::# {{checkuser|Lucilap76u}}

::# {{checkuser|Biguangying}}

::# {{checkuser|Marielle4m}}

::# {{checkuser|Rosalin7a}}

::# {{checkuser|Tamalasjsti}}

::# {{checkuser|Earleen98}}

::# {{checkuser|Twinelee123}}

::# {{checkuser|Dorrissudem}}

::# {{checkuser|Redazgashmore}}

::# {{checkuser|Folkdlee}}

::# {{checkuser|Beste4b}}

::# {{checkuser|Maurice79lv}}

::# {{checkuser|Shoutlee123}}

::# {{checkuser|Eleanor7a}}

::# {{checkuser|Enjoylee54}}

::# {{checkuser|Latoshaavhk}}

::# {{checkuser|Allenearl3}}

::# {{checkuser|Keitha9n}}

::# {{checkuser|Arnetteutnq}}

::# {{checkuser|Baileycarlos2}}

::# {{checkuser|Detra4p}}

::# {{checkuser|Davida Andry}}

::# {{checkuser|Bialeck4i}}

::# {{checkuser|Janenezibg}}

::# {{checkuser|Arlindazp}}

::# {{checkuser|Yajair4a}}

::# {{checkuser|Silvia2a}}

::# {{checkuser|Janiece0pov}}

::# {{checkuser|Typelee123}}

::# {{checkuser|Deanemwrb}}

::# {{checkuser|Antoinettetkhs}}

::# {{checkuser|Marilourdcarano}}

::# {{checkuser|Sharietfs}}

::# {{checkuser|Sanjuanit}}

::# {{checkuser|Jackelinegpj}}

::# {{checkuser|NelleE9f}}

::# {{checkuser|Debby4d}}

::# {{checkuser|Pardu7e}}

::# {{checkuser|Silenceplace}}

::# {{checkuser|Hooeylee}}

::# {{checkuser|Walllee50}}

::# {{checkuser|Briannau}}

::# {{checkuser|Samiradq}}

::# {{checkuser|Fewlee28}}

::# {{checkuser|Maymesrrr}}

::# {{checkuser|Preferlee}}

::# {{checkuser|Elvied39n}}

::# {{checkuser|AllenKobe5}}

::# {{checkuser|Tijuanaont5}}

::# {{checkuser|Justan47}}

::# {{checkuser|Denitalxz8}}

::# {{checkuser|Leslii2x2}}

::# {{checkuser|Nicholeeawd}}

::# {{checkuser|Taco.converse}}

::# {{checkuser|Xingyuanwang}}

::# {{checkuser|Chensuxiang}}

::# {{checkuser|Anna0226}}

::# {{checkuser|Uavana}}

::# {{checkuser|Meking95}}

::# {{checkuser|Wellbeibei}}

::# {{checkuser|Linly}}

::# {{checkuser|Wellcap888}}

::# {{checkuser|Ebony01}}

::# {{checkuser|Su 722}}

::# {{checkuser|Wanano}}

::# {{checkuser|Sudamei}}

::# {{checkuser|Desting04}}

::# {{checkuser|Tradekeyb2b}}

::# {{checkuser|Samvalentine}}

::# {{checkuser|Philljf}}

::# {{checkuser|Ninhao0001}}

::# {{checkuser|Gobuyvogue}}

::# {{checkuser|Ryanmme}}

::# {{checkuser|Goyingdong}}

::# {{checkuser|H6269885}}

::# {{checkuser|Choicongliao}}

::# {{checkuser|Wanan}}

::# {{checkuser|Lynnnpm}}

::# {{checkuser|Chinaforseller}}

::# {{checkuser|Dreamyrider}}

::I've rangeblocked 58.22.0.0/16, in the meantime -- looks like nothing but persistent spam problems. – Luna Santin (talk) 19:43, 3 August 2009 (UTC)

::* {{checkuser|levefland}} is not a real user. NW (Talk) 04:22, 4 August 2009 (UTC)

:::That's because you're missing a letter. Try adding a "C": {{checkuser|Clevefland}} --Calton | Talk 13:37, 4 August 2009 (UTC)

::::Tagged and blocked. NW (Talk) 14:10, 4 August 2009 (UTC)

;Conclusions

All socks blocked (at least they should be... wouldn't be a bit surprised if I missed some). Quite a few were already blocked, mostly as part of two other SPIs, or simply for spamming. If someone really wants me to, I'll take a stab at tagging them with AWB tomorrow. I'm too tired now... J.delanoygabsadds 04:09, 4 August 2009 (UTC)

:{{clerknote}} Ugh, that was a monster to tag. J.delanoy only missed one; impressive. I pointed that out to him; it should be getting blocked now. All of the socks tagged. Move to close. NW (Talk) 04:46, 4 August 2009 (UTC)

{{SPIclose|archive}}

----__TOC__

{{SPIarchive notice|Nakesha7c}}
{{SPIpriorcases}}

=== <big>Report date August 3 2009, 13:04 (UTC)</big>===

{{SPIcat}}

;Suspected sockpuppets

  • {{checkuser|1=Urllee52}}
  • {{checkuser|1=Linklee71}}
  • {{checkuser|1=Elfriedah}}
  • {{checkuser|1=Waltraudiswx}}
  • {{checkuser|1=Elli4gmj}}
  • {{checkuser|1=VonnieDawe2}}

;Evidence submitted by Calton

Persistent spammer advertising Canadian self-storage units, using the User Talk pages of a few dozen newly created sockpuppet accounts. Need a check of the underlying IPs to block. --Calton | Talk 13:04, 3 August 2009 (UTC)

;Comments by accused parties    See Defending yourself against claims.

;Comments by other users

;CheckUser requests

{{RFCU| B | No2ndletter | Checked }}    Requested by Calton | Talk 13:04, 3 August 2009 (UTC)

;Clerk, patrolling admin and checkuser comments

20px Additional information needed: Please provide a code letter. SPCUClerkbot (talk) 13:04, 3 August 2009 (UTC)

  • Endorsed, same as [http://en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/Drewbams&diff=prev&oldid=305837887 this]. Nathan T 16:16, 3 August 2009 (UTC)

{{confirmed}}:

  • {{checkuser|Waltraudiswx}}
  • {{checkuser|Linklee71}}
  • {{checkuser|Elfriedah}}
  • {{checkuser|Daniellalm}}
  • {{checkuser|Weedlee37}}
  • {{checkuser|Brant183}}
  • {{checkuser|Baby12lee}}
  • {{checkuser|Elli4gmj}}
  • {{checkuser|HsiuAwtrey}}
  • {{checkuser|VonnieDawe2}}
  • {{checkuser|Kristi6s1k}}

– Luna Santin (talk) 19:12, 3 August 2009 (UTC)

;Conclusions

{{Clerk-note}} Some were already blocked indef due to other SPI cases or due to advertising. Others are blocked. OhanaUnitedTalk page 19:36, 3 August 2009 (UTC)

{{Clerk Request}} A merge into Wikipedia:Sockpuppet investigations/Nakesha7c seems appropriate per above. -- Avi (talk) 05:03, 4 August 2009 (UTC)

:{{clerknote}} ✓ Done NW (Talk) 05:10, 4 August 2009 (UTC)

:{{clerknote}} Blocked and tagged. NW (Talk) 05:10, 4 August 2009 (UTC)

{{SPIclose|archive}}

----__TOC__

{{SPIarchive notice|Nakesha7c}}
{{SPIpriorcases}}

=== <big>Report date August 8 2009, 17:07 (UTC)</big>===

{{SPIcat}}

;Suspected sockpuppets

  • {{checkuser|1=Barddick1}}
  • {{checkuser|1=Bartdevin6}}
  • {{checkuser|1=Drewcolin9}}
  • {{checkuser|1=Jimcarl8}}
  • {{checkuser|1=Johncarl6}}

;plus, as long as I'm here:

  • {{checkuser|1=Algerben3}}
  • {{checkuser|1=Devingale5}}
  • {{checkuser|1=Sarahcohen6}}
  • {{checkuser|1=Reneemoss2}}

;But wait! There's more!

  • {{checkuser|1=Ronnifjcol}}
  • {{checkuser|1=Sherilyn8b}}
  • {{checkuser|1=Charmain8}}
  • {{checkuser|1=Markevans7}}

;Evidence submitted by Calton

Yet another batch of User Talk spammers. Similar spamming technique and phrasing to the ones at Wikipedia:Sockpuppet investigations/Nakesha7c. Need the underlying IPs blocked, including revoking user-page editing privileges. --Calton | Talk 17:07, 8 August 2009 (UTC)

:Addendum:

Found four more whose spam matches the sockpuppets listed below. See above. --Calton | Talk 15:14, 9 August 2009 (UTC)

;Comments by accused parties    See Defending yourself against claims.

;Comments by other users

;CheckUser requests

{{RFCU| B | No2ndletter | Endorse }}    Requested by Calton | Talk 17:07, 8 August 2009 (UTC)

;Clerk, patrolling admin and checkuser comments

  • {{Endorse}} per Calton's experience with spammers. NW gets ready to tag another thousand sockpuppets. NW (Talk) 19:20, 8 August 2009 (UTC)

{{completed}}. The following accounts should all be blocked, with talk pages salted and locked:

  1. {{checkuser|Bartdevin6}}
  2. {{checkuser|Catherineujij}}
  3. {{checkuser|Mignonm1n6}}
  4. {{checkuser|Cliffarno2}}
  5. {{checkuser|Jimcarl8}}
  6. {{checkuser|Markabel6}}
  7. {{checkuser|Jimcarl8}}
  8. {{checkuser|Markabel6}}
  9. {{checkuser|Hnoelxhei6}}
  10. {{checkuser|Barddick1}}
  11. {{checkuser|Johncarl6}}
  12. {{checkuser|Drewcolin9}}
  13. {{checkuser|Amosford1}}
  14. {{checkuser|Markevans7}}
  15. {{checkuser|Davidthomas7}}
  16. {{checkuser|Johnevans6}}
  17. {{checkuser|Paulgates1}}
  18. {{checkuser|Markjackson3}}
  19. {{checkuser|Glenned2}}
  20. {{checkuser|Sarahddt6}}
  21. {{checkuser|Josephine5j}}
  22. {{checkuser|Lakisha6o}}
  23. {{checkuser|Algerben3}}
  24. {{checkuser|Devingale5}}
  25. {{checkuser|Reneemoss2}}
  26. {{checkuser|Sarahcohen6}}

Thanks. – Luna Santin (talk) 11:22, 9 August 2009 (UTC)

;Conclusions

  • Blocked and tagged. NW (Talk) 18:24, 9 August 2009 (UTC)

{{SPIclose|archive}}

----