Seong Il Moon ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)

23 July 2019

Suspected sockpuppets

• Moon Seong-il ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
• 61.77.40.102 ( talk ⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser ( log))
• 39.7.53.102 ( talk ⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser ( log))
• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

In addition to the obvious similarity in the usernames: Same area of articles (Asian languages, phonology), same interface (mobile web), and canned or nonsensical (often non-English) edit summaries.

FYI, there are at least a couple dozens of IPs that also match these criteria and come from the same ISP (Korea Telecom). I'm not going to reveal them here, but advice on where to report them (ANI? LTA? EFR?) would be appreciated. (The CU request is for sleepers.) Nardog ( talk) 09:50, 23 July 2019 (UTC) reply

@ Vanjagenije: Please look at the edits on 12 August 2018 at Russian phonology. First the IP makes disruptive edits with nonsensical summaries ( "DDD", "Moonlight", "Wanna be"), and then as soon as they were warned about 3RR, they create the account "Moon Seong-il" and continue with disruptive editing, again with summaries making little sense. The connection between the IP and Moon Seong-il is palpable, and now that the IP has been blocked, the account might be used for evasion—not to mention the creation of Moon Seong-il would be evasion in the first place if it was indeed the same person as Seong Il Moon, who had already been indef blocked—which I'm confident about—there are not a lot of users who edit this area of articles, let alone consistently from mobile web and with nonsensical summaries. (It would be understandable if you were not blocking them just because you deemed the disruption as not imminent, but I'm surprised by your assessment that the evidence is "very weak"; "Seong Il Moon" and "Moon Seong-il" are just different ways of spelling the same Korean name, the Western way and the native way.) Nardog ( talk) 10:23, 23 July 2019 (UTC) reply

@ Vanjagenije: Added the latest IP, 39.7.53.102 ( talk). The one before it is 175.223.2.235 ( talk). The now-blocked IP would be the most striking comparison. Apart from the fact they have made unconstructive edits in the same area of articles ( Voiced alveolar fricative, the phonologies of Asian languages) from the same ISP, same location and same interface, notice the use of edit summaries, which are seemingly utter non sequiturs: 61.77.40.102's summaries "atarashi", "sekai", "hitotsuga", and "yozora mahiru" are Japanese words meaning "new", "world", "one (is)", and "night sky, noon", respectively, and they are editing articles about French, Portuguese, and Italian. 39.7.53.102's summaries "Ima" and "Kokoro" are Japanese for "now" and "heart", and they are editing articles about a phonetic sound and a language spoken in Papua New Guinea. Nardog ( talk) 10:46, 23 July 2019 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

• Regarding Moon Seong-il: First, CU check requested here is not possible because both accounts are  Stale. Second, evidence of socking is very weak. Third, there were no edits from this account for almost a year. There is no ongoing disruption, so no need to investigate anything. Vanjagenije (talk) 09:59, 23 July 2019 (UTC) reply
• @ Nardog: If those IPs are active (editing in the last few days), please report them here, together with evidence of them being Seong Il Moon. If they have not edited for some time, there is no point in reporting them at all. Vanjagenije (talk) 10:02, 23 July 2019 (UTC) reply
• I blocked 61.77.40.102 for one year. Vanjagenije (talk) 10:04, 23 July 2019 (UTC) reply
• Nothing more to do here. If Moon Seong-il resumes editing, please re-report them. Closing. Vanjagenije (talk) 10:36, 23 July 2019 (UTC) reply
•  Clerk note: I blocked the secont IP for 2 weeks. Vanjagenije (talk) 14:25, 24 July 2019 (UTC) reply

27 July 2019

Suspected sockpuppets

• 175.223.33.240 ( talk ⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser ( log))
• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Matches the pattern: Same ISP/interface, contentious edits to articles about the phonologies of Asian languages without providing source or explanation and with random, non-sensical summaries. [1] [2] [3] Nardog ( talk) 10:20, 27 July 2019 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

• BLocked for a week. Closing. Vanjagenije (talk) 18:57, 27 July 2019 (UTC) reply

13 January 2020

Suspected sockpuppets

• Amanda1970 ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
• TraceyJames19911993 ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
• 119.207.115.159 ( talk ⁺ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser ( log))
• Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

At Kyrgyzstan, IP moves the opening paragraph to above the infobox despite the site-wide convention, Amanda makes the exact same kind of edit ten minutes later. At Bengali language § Phonology, IP edits phonetic symbols with a completely random summary, " Lhamo Thondup", Tracey does the same with " Moroboshi Hikaru" nine days later. In the infobox at Polish language, Tracey adds South Korea to the list of countries where Polish is recognized as a minority language, Amanda adds Latvia to the same list a month later, both citing no source.

Two or all of them have also made spurious edits to Uyghur language § Consonants ( Amanda†, Tracey), Korean language § Consonants ( Amanda, IP, Amanda, IP), Korean phonology § Consonants ( Amanda, IP, IP, Tracey*), and Persian language ( IP, Amanda†, Tracey*†). Notice the random summaries " Sword Shield" and " Teikyō" in the edits marked with *, and the similarity of the edits marked with †, not to mention the fact they are their only edits to these articles yet all in the same sections.

All match the pattern of the previous socks: contentious edits to content about Asian languages' sound systems from mobile web (and the same ISP), providing no source or explanation, sometimes with random/nonsensical summaries.

IP and Tracey also made strikingly similar unconstructive edits to Netherlands, Estonia, Tajikistan, and Maldives within a matter of 18 hours. Nardog ( talk) 04:07, 13 January 2020 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

This case is  Stale. Amanda1970 and TraceyJames19911993 are  Confirmed to each other.  Blocked without tags.-- Bbb23 ( talk) 14:47, 13 January 2020 (UTC) reply

• Closing per the above. TheSandDoctor ^Talk 07:16, 22 January 2020 (UTC) reply

24 April 2022

Suspected sockpuppets

• SuwonHwaseongOsan ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
• JeonjuMokpo ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
• WanjuMuanSinan ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
• Tools: Editor interaction utility • Interaction Timeline • SPI Tools

SuwonHwaseongOsan, who has no history of WP:ENGAGE despite multiple warnings, has been blocked on rowp as a sock of the IP in the last report of this SPI. The three accounts have made similar edits to Help:IPA/Georgian ( hist), Chechen language ( hist), Ossetian language ( hist), etc. within very short periods of time (see interaction), all from mobile web with no summary. Nardog ( talk) 04:31, 24 April 2022 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

•  Clerk endorsed - the master is stale, but based on the username pattern and the odd fascination with IPA templates, I'm quite confident that these are socks of Seong Il Moon. I'm endorsing to check for other accounts since they seem to be running three concurrently. Thanks, Spicy ( talk) 06:28, 24 April 2022 (UTC) reply
•  In progress - Mz7 ( talk) 07:41, 24 April 2022 (UTC) reply
• The three accounts are  Confirmed to each other. No other accounts immediately visible. (Past accounts of this master are stale.)  Blocked and tagged, closing. Mz7 ( talk) 07:50, 24 April 2022 (UTC) reply
• Thanks. I tagged the master and will request locks (these accounts are blocked on several other wikis). Spicy ( talk) 07:57, 24 April 2022 (UTC) reply