Wikipedia

Wikipedia:Sockpuppet investigations/EstebanJals/Archive

< Wikipedia:Sockpuppet investigations | EstebanJals


EstebanJals

15 December 2013
edit
Suspected sockpuppets


Both have added irrelevant images to the Fontana, California article: [1] [2] [3] [4] [5]. Both have an interest in children's television. The IP editor began contributing today, during EstebanJals' block. —rybec 00:54, 15 December 2013 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
25 December 2013
edit
Suspected sockpuppets


Nepal Television wasn't founded in November 2013, so this change is vandalism. EstebanJals and the previously-reported IP address 2605:e000:bc80:9c00:78f0:c4d2:2096:a17d (talk+ · tag · contribs · filter log · WHOIS · RBLs · proxy check · block user · spi block · block log · cross-wiki contribs · CheckUser (log)) vandalised articles about television. Note here how the .a17d IP adds a link to Robot Chicken; the .5483 IP inserts a mention of Robot Chicken here. —rybec 03:11, 25 December 2013 (UTC)[reply]

vandal with interest in children's television and school buses; attacks some of the same articles, in the same way, as EstebanJals

—rybec 03:27, 25 December 2013 (UTC)[reply]

[6] [7] —rybec 06:40, 25 December 2013 (UTC)[reply]

replaced images in Rancho_Cucamonga,_California with unrelated ones [8] [9] much as EstebanJals did in Fontana,_California —rybec 07:15, 25 December 2013 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
30 December 2013
edit
Suspected sockpuppets


[10] [11] —rybec 05:53, 30 December 2013 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit


31 December 2013
edit
Suspected sockpuppets

See [12]. Target recently vandalized with same MO by other SPs of this master. Dwpaul Talk 03:07, 31 December 2013 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
20 January 2014
edit
Suspected sockpuppets


EstebanJals vandalised the page Fontana, California; this account contains "Fontana" in its name and added the word to an article here. EstebanJals had an interest in buses and children's television; so does this account. —rybec 18:30, 20 January 2014 (UTC)[reply]

FontanaLand also vandalised The Wiggles Movie. 05:28, 21 January 2014 (UTC)

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
09 February 2014
edit
Suspected sockpuppets


Road Runner IP with interest in The Den [13]; edited Thomas Built Buses and Blue Bird Corporation which were edited by EstebanJals [14] —rybec 11:33, 9 February 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
16 February 2014
edit
Suspected sockpuppets


has edited some of the same articles: https://tools.wmflabs.org/sigma/editorinteract.py?user1=GloveWorld&user2=EstebanJals&user3=&user4=&user5=&user6=&user7=&user8=&user9=&user10=&ns=none&startdate=&enddate=

also GloveWorld inserted an irrelevant image into this version of the Redlands, California article, and attempted to insert one into the Fontana, California article, much as EstebanJals did to the San Bernardino, California and Fontana, California articles. —rybec 05:05, 16 February 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit


17 February 2014
edit
Suspected sockpuppets


has only edited articles that were also edited by EstebanJals or EstebanJals' socks [15]; inserted irrelevant image [16] in Fontana,_California article (Fontana is not served by Sonoma County Transit); previous activity from 2605:e000:bc80::/42 —rybec 00:17, 17 February 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit

  Clerk note: Hasn't edited since February 7. No need to take action.--Bbb23 (talk) 09:15, 27 February 2014 (UTC)[reply]

22 February 2014
edit
Suspected sockpuppets


Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit

  Clerk note: Also vandalized Rybec's talk page (and then self-reverted). Blocked and tagged based on duck.--Bbb23 (talk) 09:13, 27 February 2014 (UTC)[reply]

01 March 2014
edit
Suspected sockpuppets


  1. same IP range previously used by EstebanJals
  2. this edit by the IP user to my talk page is just like this edit by the EstebanJals sock FontanaChannel (both say I am a sock-puppet of Mark Arsten)

The address has been blocked, with a log entry saying it was used by Edgarrr. I think EstebanJals is the correct identification. —rybec 01:39, 1 March 2014 (UTC)[reply]

  1. username contains "Fontana"
  2. edited The Den (television)

—rybec 05:42, 1 March 2014 (UTC)[reply]

username resembles FontanaChannel; edited The Den (television) —rybec 22:32, 2 March 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
05 March 2014
edit
Suspected sockpuppets


username resembles KingFontana II (talk · contribs); edited List of programs broadcast by the Arutz HaYeladim and The Den (television) which were edited by other accounts/IPs in this SPI —rybec 04:24, 5 March 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit


06 March 2014
edit
Suspected sockpuppets


Username resembles KingFontana II; edited articles 2014 in home video, RTÉjr ‎and The Den (television) which were edited from other EstebanJals accounts or IP addresses. —rybec 12:07, 6 March 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
08 March 2014
edit
Suspected sockpuppets

6125 IP is in same range as several already reported, and has edited List of BBC children's television programmes. EstebanJals edited several lists of children's television programmes.

C31A IP is in same range and edited Thomas Built Buses.

Duchh8888 account has also edited List of BBC children's television programmes; all other edits concern articles which had been edited from EstebanJals accounts or IP addresses:

  • Thomas Built Buses was edited by 2605:e000:bca0:fe00:8080:8c1b:511c:787c, 142.129.199.97, 2605:e000:bc80:9c00:b1fb:2d49:523b:c31a and EstebanJals
Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
09 March 2014
edit
Suspected sockpuppets


The IPv4 address was previously reported and blocked due to its use by EstebanJals. A recent edit to Thomas Built Buses shows it is again in use by EstebanJals.

The IPv6 address was used to insert a link to Fontana Distribution into Template:Cerberus Capital Management [17], a page which was also edited by 142.129.199.97. EstebanJals vandalised the Fontana, California article and several of his alternate accounts have had "Fontana "in the account name. —rybec 04:49, 9 March 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit


11 March 2014
edit
Suspected sockpuppets
  • I Am SBX-335 edited BabyFirstTV which had been edited by

FontanaLand, 2605:e000:bc80:9c00:4843:9cbc:6dca:8ef0, 2605:e000:bc80:9c00:2d3c:ac40:5662:a17e and EstebanJals

EstebanJals has an affinity for children's television and for editing "List of programs broadcast by" articles; it was edited both from the I Am SBX-335 account and from the IP address, with about 3 minutes between the edits [19] [20] —rybec 04:49, 11 March 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
14 March 2014
edit
Suspected sockpuppets


  • edited Gillig Corporation (former maker of school buses), adding unreferenced claim that it is owned by Cerberus Capital Management [21]
  • recreated the hoax page Omnitrans Channel about a television channel run by the transit company Omnitrans (Omnitrans article was vandalised by EstebanJals)

There was an earlier version of Omnitrans Channel which had been deleted in February. Whichever account or IP address created it was doubtless in use by EstebanJals, and may not have been detected before. Could an administrator please check that earlier, deleted version? —rybec 06:45, 15 March 2014 (UTC)[reply]

I had requested that an administrator look at the first version of Omnitrans Channel, the one that was deleted on 20 February. It would have been created by an EstebanJals account, possibly one that has not been detected. —rybec 13:01, 18 March 2014 (UTC)[reply]

Callanec has written "The account was already blocked, and now tagged." —rybec 15:01, 19 March 2014 (UTC)[reply]
Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

This user is also currently repeating earlier reverted edits to Template:Cerberus Capital Management which were initially made by previously-blocked socks of EstebanJals. Bonusballs (talk) 12:10, 16 March 2014 (UTC)[reply]
Clerk, CheckUser, and/or patrolling admin comments
edit
20 March 2014
edit
Suspected sockpuppets


  • in King (company) made an unsupported change to the owner parameter in the infobox, adding the name of a manufacturer of school buses [22]], similar to an edit by an EstebanJals sock, putting a different bus company on the same line of the same article [23]

This account has already received a one-month block but has not been confirmed as belonging to EstebanJals. —rybec 13:49, 20 March 2014 (UTC)[reply]

Added further blocked username, KingFontana X - same pattern of behaviour, focus on particular company names and television programmes (Sonic X and Peg+Cat being particularly obvious stand-outs at present). Also currently blocked for vandalism. Bonusballs (talk) 00:29, 21 March 2014 (UTC)[reply]
Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
29 March 2014
edit
Suspected sockpuppets


Repeating past vandalism against same focus articles including Cerberus Capital Management template, Omnitrans, Gillig, etc. Interacting with and posting fake notices on talk pages of accounts already blocked for socking. Bonusballs (talk) 18:48, 29 March 2014 (UTC) Bonusballs (talk) 18:48, 29 March 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
05 April 2014
edit
Suspected sockpuppets

Omnitrans channel previous version was created by another proven sock of EstebanJals Geraldo Perez (talk) 02:24, 5 April 2014 (UTC)[reply]

Also this was added to my page and matches warning message at User talk:FontanaLand, another sock. Geraldo Perez (talk) 02:40, 5 April 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
07 April 2014
edit
Suspected sockpuppets

Common article focus as per other socks Geraldo Perez (talk) 03:14, 7 April 2014 (UTC)[reply]

This edit by Santos5 TV (talk · contribs) [24] and this edit by Shrek12345 (talk · contribs) [25] --Geraldo Perez (talk) 00:24, 8 April 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
20 April 2014
edit
Suspected sockpuppets

Same edits as Shrek12345 (talk · contribs) on New Flyer, Santos5 TV (talk · contribs) on Template:Corus Entertainment & Corus Entertainment Geraldo Perez (talk) 21:50, 20 April 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
20 May 2014
edit
Suspected sockpuppets

Editing pattern and preference matches previous socks of this master. Dwpaul Talk 01:53, 20 May 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
20 August 2014
edit
Suspected sockpuppets

Simultaneous editing of Omnitrans, Sonoma County Transit, others; behavioral evidence (WP:DUCK) Dwpaul Talk 02:24, 20 August 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
  •   CheckUser requested -   Self-endorsed by clerk for checkuser attention - Looks pretty likely that they're related but it'd be worth checking that they aren't copycats and for sleepers. The edit histories of those two pages is very compelling. Callanecc (talk • contribs • logs) 13:54, 20 August 2014 (UTC)[reply]
  • I blocked them as ducks prior to the check given the related names and the odd combo of bus articles and cartoons/animation articles. A check found the following   Confirmed socks:
16 September 2014
edit
Suspected sockpuppets


Correcting malformed report added here Jezebel'sPonyobons mots 21:30, 16 September 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
23 September 2014
edit
Suspected sockpuppets


Suspected based on behavior, article focus Trivialist (talk) 21:37, 23 September 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
28 October 2014
edit
Suspected sockpuppets


I have a COI with BabyFirst, which I brought up to GA. I previously noticed that user:My Little Minecraft modified the "owners" parameter in the infobox to list companies incorrectly without a source.[26] This user was later blocked as a result of an SPI investigation led by user:Rybec and user:Coretheapple reverted the unsourced edit; I presumed the edit was some kind of spam for the companies listed. Now a new user user:Spider Manchester United States made the same exact edits just a few weeks after the prior account was blocked. It seems extremely unlikely that two accounts operated by different people, who happened to make the same edit just a few weeks after the first one was blocked.

Other than a minor nuisance, they are not bothering me much, but figured I would report it to make things easier for those hunting down the socks of this user. CorporateM (Talk) 14:58, 28 October 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
11 November 2014
edit
Suspected sockpuppets


Usual pattern of edits to film and transport articles, same focus articles including Thomas Built Buses and Gillig Corporation, and references to Cerberus Capital Management. [[27]] [[28]] Bonusballs (talk) 19:35, 11 November 2014 (UTC) Bonusballs (talk) 19:35, 11 November 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
19 December 2014
edit
Suspected sockpuppets


Usual behaviour pattern of edits to same children's transportation-and-television focus articles including Template:Cerberus_Capital_Management, same cross-listing of this editor's favoured companies (e.g. Gillig Corporation, Thomas Built Buses, 9 Story Entertainment, BabyFirst TV - e.g. [[29]], [[30]] Bonusballs (talk) 12:46, 19 December 2014 (UTC) Bonusballs (talk) 12:46, 19 December 2014 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
10 February 2015
edit
Suspected sockpuppets

Same evidence as last report on 19Dec. Eg interest in Cerberus Capital Management (diff), just like a previous sock. Stickee (talk) 10:15, 10 February 2015 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Thanks Ponyo. Wikipedia:Sockpuppet investigations/London Transportation Commissioned appears to be a duplicate. Does that one need dealing with? Stickee (talk) 03:27, 11 February 2015 (UTC)[reply]

These have already been blocked, mostly for violating the username policy, but based on the username styles and the articles edited, I think these have the same puppeteer:

Trivialist (talk) 00:01, 12 February 2015 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments
edit
  • The following accounts are   Confirmed:
07 February 2015
edit
Suspected sockpuppets


All accounts share similar names: they are all the names (or come close to the names) of actual organizations and three of the four share (or come close to) the names of public transit authorities. Two accounts have been blocked because of their names: see here and here. London Transportation Commissioned has vandalized pages that all of the suspected socks have edited:

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Just noticed this report after I made mine. The sockmaster appears to be EstebanJals (SPI link). Stickee (talk) 10:25, 10 February 2015 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments
edit
13 February 2015
edit
Suspected sockpuppets

This edit by Interiordesigner210 is very similar to this edit by confirmed sock Bella Coola Valley Transit System (talk · contribs). – Zntrip 02:21, 13 February 2015 (UTC)[reply]

Additionally, Mkrgolf's contribution history shares similarities to known sock puppet accounts, specifically list articles involving animated television programs. For example, see this edit where Mkrgolf and a known sock consecutively edited an article. It is worth noting that an SPI of Mkrgolf occurred in May 2014 (additionally, this comment on that SPI's archive is worth noting). – Zntrip 04:19, 13 February 2015 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit

  Note: I have asked Ponyo to take a look at this, as she is obviously very familiar with the background here. Risker (talk) 05:29, 16 February 2015 (UTC)[reply]

02 June 2015
edit
Suspected sockpuppets


I came across this person via the hoax article House of Smokey Bear. There was something about the username and the editing patterns that felt extremely familiar, so I did an SPI search and voila. (I can't remember how I came across the other socks, but I remembered this name.) Like the other accounts this user has created a page for a fake animated show and has tried to insert other hoaxes into Wikipedia with this edit, which linked to a fake source. The username is also similar to other EstebanJals names in that other accounts have had "Esteban Felix" in it to some extent and/or has had Minecraft in the name. I've already blocked the editor for the hoax articles and I've voiced concern about the possible sockpuppetry on the same page, although I haven't tagged them yet. I'm also going to ping Ponyo since she's familiar with this whole shebang. This looks to be a fairly obvious WP:DUCK, though. I don't know that we need a sweep for sleepers. Tokyogirl79 (｡◕‿◕｡) 06:02, 2 June 2015 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
04 July 2015
edit
Suspected sockpuppets


WP:DUCK, similar username, similar edits to articles about media, especially for kids. Trivialist (talk) 20:44, 4 July 2015 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit
07 July 2015
edit
Suspected sockpuppets

Same behaviour as the 10 February invetigation. Stickee (talk) 12:41, 7 July 2015 (UTC)[reply]

Comments by other users
edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments
edit

16 July 2015

edit
Suspected sockpuppets


WP:DUCK: Similar username, same article targets, same dubious edits (for example, adding "New Flyer Industries, a bus company, as owner of The Big Cartoon DataBase). Trivialist (talk) 21:15, 16 July 2015 (UTC)[reply]

Comments by other users

edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

edit

18 July 2015

edit
Suspected sockpuppets


WP:DUCK; same username style, editing targets, and questionable/unsourced edits. Trivialist (talk) 15:09, 18 July 2015 (UTC)[reply]

Comments by other users

edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

edit

26 July 2015

edit
Suspected sockpuppets


WP:DUCK; adding unsourced/false information to articles about children's movies/TV and busses. Trivialist (talk) 03:23, 26 July 2015 (UTC)[reply]

Comments by other users

edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

edit

25 October 2015

edit
Suspected sockpuppets


WP:DUCK: Interests in children's television and bus transit, creating hoax article Oliver & Jenny. Trivialist (talk) 06:32, 25 October 2015 (UTC)[reply]

Comments by other users

edit

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

edit
  •   Additional information needed - @Trivialist: In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
  1. At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
  2. At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
  3. In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this. Vanjagenije (talk) 10:05, 25 October 2015 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/EstebanJals/Archive&oldid=1136068356"