- BolsaOObsequios (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
07 August 2020
Suspected sockpuppets
Recreation of David Diamante. Sock account got active almost after one year, making articles. Master was blocked for promotional articles, and has many socks. Might be a rare coincidence, but there is high probability of socking, hence requesting CU. —usernamekiran (talk) 05:46, 7 August 2020 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- @MER-C: is there any publicly accessible info on master? The only way i connected this account to Bolsa was from article creation. I couldnt find any SPI page. —usernamekiran (talk) 12:47, 7 August 2020 (UTC)[reply]
- Nope. I discovered this abuse pattern by accident and rolled it up myself. (I did ask for CU privately but Yunshui hasn't edited since I sent the email.) MER-C 16:09, 7 August 2020 (UTC)[reply]
Clerk, CheckUser, and/or patrolling admin comments
- This isn't the usual BolsaOObsequios abuse pattern involving shenanigans with redirects. The recreation, however, is near verbatim. This is probably freelance meatpuppetry but please check this sockfarm. I've also blocked Nadine Dewi for spamming. MER-C 12:20, 7 August 2020 (UTC)[reply]
- Clerk endorsed - Both are not new and could use a deep dive for a potential bigger master. -- Amanda - mobile (aka DQ) 06:56, 8 August 2020 (UTC)[reply]
- Technically Unrelated, no additional accounts or possible masters visible. ST47 (talk) 07:09, 8 August 2020 (UTC)[reply]
19 November 2020
Suspected sockpuppets
Already blocked (not tagged) after conclusive CU evidence. I have posted on COIN about this as well, in case other editors know of more socks of these accounts. Drmies (talk) 14:54, 19 November 2020 (UTC)[reply]
Update--note from MER-C: related to Wikipedia:Sockpuppet investigations/BolsaOObsequios. Drmies (talk) 23:20, 19 November 2020 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- MER-C, could you expand on why you think this is BolsaOObsequios? Email is fine if you'd rather not say on-wiki. GeneralNotability (talk) 02:12, 22 November 2020 (UTC)[reply]
- See their deleted contributions and how they think they can use redirects to bypass scrutiny. MER-C 09:38, 22 November 2020 (UTC)[reply]
- Clerk note: I'll take your word for it. Merged to BolsaOObsequios, Blocked and tagged. GeneralNotability (talk) 15:48, 1 December 2020 (UTC)[reply]
08 November 2021
Suspected sockpuppets
- Not stale
- Probably stale
A massive haul of 136 spam accounts was uncovered on Simple English Wikipedia: [1][2][3]. At least two of them - Hartsinner and Berinlatin - are extended confirmed here. I'm sure this sockmaster hasn't given up on en.wp so lodging here. All blocked, most without tags. MER-C 19:10, 8 November 2021 (UTC)[reply]
- Ping @Bsadowski1 and Vermont: who did the CU on simple.wp. MER-C 19:34, 8 November 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- In progress GeneralNotability (talk) 22:10, 8 November 2021 (UTC)[reply]
- Ytarstan (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) and Dreusan (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) are Confirmed to Hamiltson, not mentioned here but CU-blocked on simple.
- The following are...let's go with likely-ish? to Berinlatin (all have edits on the same narrow range, multiple browsers, could be a proxy/VPN exit?):
- I also see a couple Uptoniter socks and a few of the socks mentioned below in this range. I feel pretty confident that everyone in this list is engaged in UPE of some sort based on their page creations and edits, and I see some of them sharing behavior with Berinlatin (particularly racking up edit counts via semi-automated gnoming, skipping precise details per BEANS). Behavioural evidence needs evaluation on those, please - I'm inclined to block all as UPE and block the gnomes as BolsaOObsequios, but would appreciate a second opinion. Not seeing activity by any of those folks on simplewiki, so don't think action is needed. Probably should also get locks for this farm - xwiki spam and blocks on multiple content wikis. GeneralNotability (talk) 22:57, 8 November 2021 (UTC)[reply]
- That would be fair. Reanital, Nirkaten, Maijeurin are all behavioral matches to Hartsinner and Berinlatin, while Kaijilarn, Drioinstan and Einterhal are going down the same route. The rest are likely UPEs and have been blocked. Leaving for a clerk to tag and report everyone (including in the suspected category) to SRG. MER-C 19:20, 9 November 2021 (UTC)[reply]
- Clerk assistance requested:: I tried to mass-tag here and got ratelimited. Could an admin-clerk (or account-creator-clerk, or bot-op-who-is-braver-than-me-at-testing-the-limits-of-IAR-clerk) please finish the job? I've done the two complicated bits, with Hamiltson, Ytarstan, and Dreusan, and with the double-tag situation for Franca Eneide, and have also handled the SRG report, so all that's left is selecting "all users" → "Suspected sock", unchecking the master and those four, and letting 'er rip. -- Tamzin[cetacean needed] (she/they) 03:21, 20 November 2021 (UTC)[reply]
- I'm on it. If I don't come back in an hour, send out a search party. -- RoySmith (talk) 20:19, 20 November 2021 (UTC)[reply]
- @Tamzin Well, that seemed to have worked. Back to you. -- RoySmith (talk) 20:23, 20 November 2021 (UTC)[reply]
- Thanks, Roy. Think we're done here for now, then. Closing. -- Tamzin[cetacean needed] (she/they) 21:01, 20 November 2021 (UTC)[reply]
- I see you reverted some of these. I think I know what probably happened. I remember un-checking the ones you specified, but literally in the sense of "undo the checkbox" which is the checkbox for blocking. And then I went back and mass-unchecked everybody for blocking since I knew were weren't doing that, but must have left them selected in the tag column. Oh well. Looks like you got it fixed up, through. Sorry about that. -- RoySmith (talk) 21:32, 20 November 2021 (UTC)[reply]
13 November 2021
Suspected sockpuppets
Found three more of the gnome type accounts - behavioural match to Reanital, Nirkaten, Hartsinner, Berinlatin, etc. How many more of these are there?
Also update with more socks found on simple.wp. MER-C 18:16, 13 November 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- Clerk endorsed - agree that the behaviour matches previous accounts, and it's worth another run of CU to fish out any sleepers. Thanks, Spicy (talk) 16:02, 20 November 2021 (UTC)[reply]
- In progress - ~TheresNoTime (to explain!) 18:48, 24 November 2021 (UTC)[reply]
- Listed accounts are a mix of very ((likely)) & ((confirmed)) to each other and other locked accounts, calling the group Likely to the master. No sleepers immediately visible, but I note what could be evidence of evasion. Clerk assistance requested: clerk to tag please if required ~TheresNoTime (to explain!) 18:58, 24 November 2021 (UTC)[reply]
- Thanks. Tagged accounts, closing. Spicy (talk) 19:03, 24 November 2021 (UTC)[reply]
20 December 2021
Suspected sockpuppets
Recently created account, after the last sock of the puppeteer was blocked (Raeutriam), which went directly to a page created by the other puppet. Onel5969 TT me 12:48, 20 December 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Clerk, CheckUser, and/or patrolling admin comments
- This doesn't strike me as a Bolsa sock (different UPE contractor?), but could be a sock of:
- whom I've just blocked for spamming. MER-C 12:59, 20 December 2021 (UTC)[reply]
- As far as I can tell, RawMarketer and YouJay are Unrelated to each other and Bolsa, but I see past evidence of proxy use so take that with a grain of salt. GeneralNotability (talk) 00:56, 21 December 2021 (UTC)[reply]
- Awaiting administrative action - This isn't a BolsaOObsequious sock and I'm not convinced it's a sock of Youjay, but they should be indeffed for spamming and having a promotional username - they're spamming links to rawmarketer.com. Thanks, Spicy (talk) 23:13, 21 December 2021 (UTC)[reply]
- Administrator note: blocked for spamming, per Spicy. clpo13(talk) 00:00, 22 December 2021 (UTC)[reply]