Wikipedia:Sockpuppet investigations/Punkox/Archive
{{SPIarchive notice|Punkox}}
{{SPIold}}
=== <big>Report date April 13 2009, 23:22 (UTC)</big>===
{{SPIcat}}
;Suspected sockpuppets
- {{checkuser|Fkng}}
- {{checkuser|PunkoXfob}}
- {{checkip|190.232.90.22}}
- {{checkip|200.121.234.219}}
- {{checkip|200.121.197.105}}
- {{checkip|190.43.56.60}}
;Evidence submitted by —Kww(talk)
Fkng and 190.232.90.22 are the most recent socks. All other reported accounts are known socks that were handled without checkuser requests.
This report is partially to create a better historical record, as this sockpuppeting was primarily handled at ANI during the interval where SSP was so backlogged as to be useless. Historical reports are at [http://en.wikipedia.org/wiki/Wikipedia:Administrators%27_noticeboard/IncidentArchive499#Punkox.2C_again], [http://en.wikipedia.org/wiki/Wikipedia:Administrators%27_noticeboard/IncidentArchive498#Punkox], and [http://en.wikipedia.org/wiki/User_talk:NrDg/Archive_090131#Punkox.2C_again here].
Punkox edit-warred so hard that nearly all Jessica Simpson articles wound up protected, bouncing back and forth between his named accounts and anonymous accounts, usually in 190.43.0.0/16 and 200.121.0.0/16, and always traceable to Peruvian ISPs. I recently noticed {{userlinks|Fkng}}, who has a similar fixation on Jessica Simpson articles. 190.232.90.22, another anonymous Peruvian editor, began inserting false information into {{la|Jessica Simpson discography}}, and Fkng has protected those edits against reversion.
;Comments by accused parties See Defending yourself against claims.
;Comments by other users
;CheckUser requests
{{RFCU| E | No2ndletter | Checked }} Requested by —Kww(talk) 23:22, 13 April 2009 (UTC)
;Clerk, patrolling admin and checkuser comments
;Conclusions
All users except {{user|Fkng}} are {{IPstale}}. Fkng matches the IPs listed in the suspected socks of Punkox category. Nishkid64 (Make articles, not wikidrama) 23:24, 16 April 2009 (UTC)
{{user|Fkng}} indef blocked, {{user|PunkoXfob}} was already blocked. All the IPs have been left unblocked as they are inactive and stale. Tiptoety talk 00:27, 17 April 2009 (UTC)
{{SPIclose|archive}}
----
=== <big>Report date February 27 2010, 23:25 (UTC)</big>===
{{SPIcat}}
====<span style="font-size:150%"> Suspected sockpuppets </span>====
- {{checkuser|Zlipz}}
====<span style="font-size:150%"> Evidence submitted by [[User:Kww|Kww]] </span>====
Punkox is stale, but his IP range is pretty well documented and recorded: there aren't many editors that generally edit Jessica Simpson articles from anonymous Peruvian accounts. Today, I reverted a group of edits from {{userlinks|190.43.97.231}}, and Zlipz immediately restored them all. It's remotely possible that Zlipz simply believes the edits to be valid, so I'm requesting checkuser, as I suspect it's just a Punkox sock.—Kww(talk) 23:25, 27 February 2010 (UTC)
====<span style="font-size:150%"> Comments by accused parties </span>====
====<span style="font-size:150%"> Comments by other users </span>====
====<span style="font-size:150%"> Clerk, patrolling admin and checkuser comments </span>====
{{RFCU| E | No2ndletter | decline }} Requested by —Kww(talk) 23:25, 27 February 2010 (UTC)
{{decline}} – Behavioral evidence clearly indicates that this is Punkox. No CU necessary. –MuZemike 00:33, 1 March 2010 (UTC)
{{admin-note}} Blocked and tagged. –MuZemike 00:33, 1 March 2010 (UTC)
{{SPIclose}}
----
=== <big>Report date March 21 2010, 18:00 (UTC)</big>===
{{SPIcat}}
====<span style="font-size:150%"> Suspected sockpuppets </span>====
- {{checkuser|Vanstoo}}
====<span style="font-size:150%"> Evidence submitted by [[User:Kww|Kww]] </span>====
Punkox has been pretty active recently, as a look at some article histories will show:
- {{history|A Little Bit}}
- {{history|I Think I'm in Love with You}}
- {{history|In This Skin}}
- {{history|Irresistible (song)}}
Focus on the number of edits made by his most recent IP sock. After a large burst of anonymous edits, I [http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_page_protection&diff=prev&oldid=350150817 requested semi-protection on most of his targets to slow him down].
On {{la|Jessica Simpson discography}}, Vanstoo suddenly appeared to repeat Punkox's edits. Every article Vanstoo has edited has been edited by Punkox in the past. [http://en.wikipedia.org/w/index.php?title=Ashlee_Simpson_discography&diff=prev&oldid=351097541 Vanstoo] and [http://en.wikipedia.org/w/index.php?title=Ashlee_Simpson_discography&diff=prev&oldid=343939654 190.43.92.125]. [http://en.wikipedia.org/w/index.php?title=Autobiography_%28Ashlee_Simpson_album%29&diff=prev&oldid=351096016 Vanstoo] and [http://en.wikipedia.org/w/index.php?title=Autobiography_(Ashlee_Simpson_album)&diff=329376622&oldid=329283755 190.43.74.127].—Kww(talk) 18:00, 21 March 2010 (UTC)
====<span style="font-size:150%"> Comments by accused parties </span>====
====<span style="font-size:150%"> Comments by other users </span>====
====<span style="font-size:150%"> Clerk, patrolling admin and checkuser comments </span>====
=== <big>Report date March 25 2010, 22:48 (UTC)</big>===
{{SPIcat}}
====<span style="font-size:150%"> Suspected sockpuppets </span>====
- {{checkip|201.240.1.46}}
====<span style="font-size:150%"> Evidence submitted by [[User:Kww|Kww]] </span>====
WP:DUCK case. Peruvian IP address editing nothing but Jessica and Ashley Simpson articles. I've requested [http://en.wikipedia.org/w/index.php?title=Wikipedia:Requests_for_page_protection&diff=prev&oldid=352056833 semi-protection of his targets at RFPP]] as well.—Kww(talk) 22:48, 25 March 2010 (UTC)
====<span style="font-size:150%"> Comments by accused parties </span>====
====<span style="font-size:150%"> Comments by other users </span>====
====<span style="font-size:150%"> Clerk, patrolling admin and checkuser comments </span>====
===<big>07 March 2011</big>===
;Suspected sockpuppets
- {{checkuser|1=Rayos19}}
- {{checkip|1=200.121.181.181}}
- [http://toolserver.org/~betacommand/cgi-bin/uc?uc=Punkox User compare report] Auto-generated every hour.
Please list evidence below this line. Remember to sign at the end of your section with 4 tilde characters "
Almost same editing pattern as Punkox. No reference formatting, adding Bad charts like Portugal Charts, and digging up bad or unsourced information from article's history and adding them to articles. —Novice7 (talk) 09:24, 7 March 2011 (UTC)
====<span style="font-size:150%">Comments by other users</span>====
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
====<span style="font-size:150%">Clerk, CheckUser, and/or patrolling admin comments</span>====
All of the accounts in the archive are {{IPstale}} - there's nothing to which I can compare this account. TNXMan 12:24, 7 March 2011 (UTC)
- {{clerknote}} Novice7, can you provide specific diffs as to why you think these two accounts are the same? I'm having a bit of a hard time justifying a block on a sockpuppet case this old. — HelloAnnyong (say whaaat?!) 23:40, 8 March 2011 (UTC)
::Well, I can provide diffs of edits by {{u|Drink1}} and {{u|Rayos19}}. Here's what Drink1 made [http://en.wikipedia.org/w/index.php?title=Irresistible_%28Jessica_Simpson_song%29&action=historysubmit&diff=393548967&oldid=393402379]. After few months, Rayos19 digs up the same references from the history (most of which are unreliable) and adds it to the article [http://en.wikipedia.org/w/index.php?title=Irresistible_%28Jessica_Simpson_song%29&diff=prev&oldid=417493353]. I'm very sure Drink1 is a sockpuppet too ([http://en.wikipedia.org/w/index.php?title=Irresistible_%28Jessica_Simpson_song%29&diff=prev&oldid=411316211] and using an IP [http://en.wikipedia.org/w/index.php?title=Irresistible_%28Jessica_Simpson_song%29&diff=prev&oldid=411250475]). Novice7 (talk) 09:58, 9 March 2011 (UTC)
- {{clerknote}} {{awaitingadmin}} 200.121.181.181 is a proxy (webhost). The two diffs connecting those accounts (even though not exact) tell me it's likely the same user. The IP proxy and user are definitely behavoirally confirmed. DQ.alt (t) (e) 18:24, 11 March 2011 (UTC)
- {{adminnote}} IP blocked as an open proxy, account blocked as a suspected sock. — HelloAnnyong (say whaaat?!) 04:35, 12 March 2011 (UTC)
Just commenting for the record: Punkox is pretty easy to detect. Jessica Simpson and Ashlee Simpson articles, editing out of Telefonica de Peru.—Kww(talk) 05:13, 12 March 2011 (UTC)
----