Wikipedia:Sockpuppet investigations/Andranikpasha/Archive

Report date September 28 2009, 05:40 (UTC)

 * Suspected sockpuppets


 * Evidence submitted by Grandmaster

On 26 September 2009 was placed on 1 rv per week parole for edit warring in the arbitration covered area:  Soon after that the account of Sako556 appeared and reverted 2 articles to the versions preferred by Andranikpasha. It appears that Andranikpasha is evading his parole using a sock account. He did that in other language wikis, for which he was banned in the Russian Wikipedia. Also see this for info about the past activities of this user: Grand master  05:40, 28 September 2009 (UTC)


 * Comments by accused parties    See Defending yourself against claims.


 * Comments by other users

Requested by Grand  master  05:40, 28 September 2009 (UTC)
 * CheckUser requests

sufficient suspicion to warrant a check Mayalld (talk) 14:49, 28 September 2009 (UTC)

✅ =.
 * Clerk, patrolling admin and checkuser comments

I think this is merely a case of someone forgetting that they already had an account, not an attempt at hiding something, but I don't know.

appears to be related to the above. Their ISPs and user agents are not the same, but the IPs do geolocate to the same place, which is why I hesitated to say outright that they are unrelated. J.delanoy gabs adds 18:44, 28 September 2009 (UTC)


 * Strangely, the only edit by Pan5145 is to rv the article Gourgen Yanikian to the version of Andranikpasha: . If not a sock, this look very much like meatpuppetry. Grand  master  10:01, 29 September 2009 (UTC)

No action taken per CheckUser findings and suspicions that meatpuppetry is going on. I don't think ArbCom sanctions were violated here. MuZemike 15:44, 30 September 2009 (UTC)
 * Conclusions

Evidence submitted by Tuscumbia
A day after Andranikpasha was banned, the IP 83.149.9.1 is reverting the article to Andranikpasha's version in the article March Days where Andranikpasha was pretty active. . A few minutes later, another article Khojaly Massacre is reverted by an IP 178.177.57.161 which just started its "crusade" on articles just a few hours after Andranikpasha was blocked for a year. Tuscumbia ( talk ) 17:19, 29 October 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments

 * 83.149.9.1 is a duck. Blocked for a week. Courcelles 17:24, 29 October 2010 (UTC)
 * Suggest blocking the other IP as well, and consider semiprotecting each article that was edited three or more times by Andranikpasha for a month. Early discouragement might help. EdJohnston (talk) 17:30, 29 October 2010 (UTC)
 * Done and done. Courcelles 17:39, 29 October 2010 (UTC)
 * It looks like everyone is blocked, so I'm going to mark this for close. Just a note for future reference - checkuser will not link usernames to IPs. TN X Man  17:38, 29 October 2010 (UTC)

Evidence submitted by Tuscumbia
Another IP 178.177.70.243, most likely Andranikpasha is editing another article from the conflict area:. He has extensively participated in the article contributions in the past. There is a reason to believe it is a sock of the abovementioned blocked user. About 10 minutes later, another IP 46.70.147.103 vandalizes the page Nagorno-Karabakh War with adding unsourced numbers, also from the conflict area:. Although the IPs may be in different geographical locations, it seems to be a timely coordinated action. And I have a reason to believe we will be seeing more and more socks and ducks since the block of Andranikpasha. Tuscumbia ( talk ) 19:39, 29 October 2010 (UTC)
 * This IP and the IP 178.177.70.243 come from the same specific region, same host, domain and same ISP. Within a few hours of blocking the other two IPs, the latter IP starts to edit, therefore it is suspicious enough for a CU. Tuscumbia  ( talk ) 20:11, 29 October 2010 (UTC)
 * That might be enough for a rangeblock, but not for a CU. A CU is for checking if accounts exist, I am looking at the users now, but from what you have said, it seems like their is no chance that another user (sock) is editing. -- DQ  (t)  (e)  20:14, 29 October 2010 (UTC)
 * Sorry, didn't see the block evasion part. -- DQ  (t)  (e)  21:08, 29 October 2010 (UTC)
 * Thank you. I think we're likely to see more IPs or newly registered users from Moscow and its vicinity where Andranikpasha seems to have edited from. Tuscumbia  ( talk ) 21:25, 29 October 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments

 * September Days semiprotected one month. I don't object to another admin lifting this if they weigh the probabilities differently. EdJohnston (talk) 20:00, 29 October 2010 (UTC)
 * - That being said, if you can provide the info about how their could be socks, then maybe a CU will look. --  DQ  (t)  (e)  20:04, 29 October 2010 (UTC)
 * The 46 IP traces to Armenia, over a thousand miles away. The other IP is likely a duck but the other IP is either a coordinated meatpuppet or just a random vandal who just decided to vandalize this particular page today. Kevin Rutherford (talk) 20:15, 29 October 2010 (UTC)

is ✅ as Andranikpasha. Underlying IP range blocked. No comment on the above-reported IP addresses. I will note that he has been evading his block. –MuZemike 20:33, 29 October 2010 (UTC)

Alaguerre already blocked, closing. Nakon 07:41, 2 November 2010 (UTC)

Evidence submitted by Tuscumbia
Suspicious. As active as Andranikpasha was, jumping right into the heat of debate. Pretty similar pattern. I have hard time believing Andranikpasha rests. Either sock or a duck. Please check. Thank you! Tuscumbia ( talk ) 16:00, 3 November 2010 (UTC)
 * Also, please see his incivil language in his comments here giving his opinion about the creator of the article:
 * Deportations, this section has no purpous in this article other than trying to allude that Western Azerbaijan was depopulated from its population to make place for an Armenia. The 1905-07 text is so idiotically crafted that it alone discredit the author of the article. Tuscumbia  ( talk ) 16:06, 3 November 2010 (UTC)

Comments by accused parties
See Defending yourself against claims.

Sorry, but who is Andranikpasha and why I am him? I was searching information about the West of the republic of Azerbaijan because of my interest (I don't see why I should justify) in the NK conflict and I have found an article and commented in its talkpage. I was checking the contribution of the users to know more about them and have found one having contributed in the Medicaid fraud of 2010 and provided few links in its talkpage. But I don't care investigation if that's what he wants. Magotteers (talk) 16:10, 3 November 2010 (UTC)
 * I give you that that it was a little bit incivil, but accusing someone of consumming propaganda is incivil too. Magotteers (talk) 16:12, 3 November 2010 (UTC)

Clerk, patrolling admin and checkuser comments
❌ TN X Man  16:19, 3 November 2010 (UTC)