Wikipedia:Sockpuppet investigations/Aloolkaparatha/Archive

Suspected sockpuppets
These accounts all follow the same general pattern: they first make vast numbers of minor edits to inflate their edit count (compare, , and ), and then they spam AfD with myriad low-quality pile-on !votes. Some additional similarities follow. The pattern I've described here is pretty similar to what we see from some of the other AfD sock farms (for instance Sockpuppet investigations/Expertwikiguy/Archive), and it's possible that CU might be able to find a connection. (I'd be very surprised if this wasn't part of a larger-scale operation.) I can provide additional behavioral evidence if necessary. Thanks in advance. Extraordinary Writ (talk) 22:03, 13 April 2022 (UTC)
 * Aloolkaparatha and Timetraveller80: Both use the very odd phrase "Does not follows the guidelines". Compare (TT80) with  (AKP). As can be observed here, this phrase has never been used by anyone else in the history of Wikipedia.
 * Aloolkaparatha and TimothyStellar: These accounts share the particular phrase "The sources present are not reliable". Compare (TS) with  (AKP). As before, this phrase has never been used on Wikipedia by anyone other than these two users (see here).
 * Timetraveller80 and TimothyStellar. Quite a few giveaways here. Both created sandboxes that contain nothing other than and the phrase "experimenting with sandbox". See User:Timetraveller80/sandbox and User:TimothyStellar/sandbox. Both make the unusual mistake of linking to GNG (a mainspace disambiguation page) instead of the correct project-space WP:GNG: compare  (TT80) with  (TS). Both use the phrase "promotional content present", which has only been used five times at AfD: once by TimothyStellar and four times by Timetraveller80. See.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ...  ~Oshwah~  (talk) (contribs)   07:04, 14 April 2022 (UTC)
 * My findings:, leaning towards.


 * Technical evidence: All of these users geolocate to the same exact area. They are all editing through ranges that are manged by different ISPs. Two of these users edit with the same (common) user agent. The third uses a different (but common) user agent.


 * Behavioral evidence: One thing I noticed in addition to the evidence presented above and the technical evidence I received is the fact that both and  had a large gap in contributions at almost the same time.  went from 0:45, 21 March 2022 to 19:28, 10 April 2022 with 0 edits. Similarly,  went from 15:20, 25 March 2022 to 09:16, 11 April 2022 with 0 edits.


 * I'm going to mark this check as 'completed' and let another SPI patroller evaluate the evidence and findings and take this case from there. I normally don't do this (any more), but it's late and I need to call it a night. Anyone is welcome to respond with questions - just make sure to ping me when you. I am not watching this page.  ~Oshwah~  (talk) (contribs)   07:39, 14 April 2022 (UTC)


 * - the behavioural and technical evidence makes it clear that these are either the same person or people closely coordinating with each other for illegitimate purposes (likely UPE). Please indef all three accounts. Thanks, Spicy (talk) 22:12, 14 April 2022 (UTC)
 * . Ks0stm  (T•C•G•E) 22:19, 14 April 2022 (UTC)
 * Thanks. Tagged, closing. Spicy (talk) 22:20, 14 April 2022 (UTC)