Wikipedia:Sockpuppet investigations/Hurricane Luis/Archive

26 March 2014

 * Suspected sockpuppets
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }
 * }


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Ducks. All users were created only 1 day apart at most, rather recently in fact, and both accounts have similar usernames. They also edit the same type of articles, and dump similar types of vandalism onto Tropical Cyclone articles. Requesting checkuser, and indef block of both accounts if they are related. User:Markybalatucan's vandalism is similar to the other 2 names accounts, and created within the same timespan. I wouldn't be surprised, though, if both accounts were socks of IPhonehurricane95, due to his recent vandalism spree and his obsession with tropical cyclone-related articles. However, the usernames are different and the vandalism is different from his recent pattern of vandalism (although it resembles the vandalism from some of his 2012 and 2013 socks), so this is probably not the case. LightandDark2000 (talk) 01:32, 26 March 2014 (UTC)
 * Added a possible IP sock, due to its interactions with the other 2 named accounts. The IP started editing around the same date that Karen is fun registered, they also edit the same type of articles. Many of this IP's edits appear to be made in good-faith (as far as I know), so if it is related to the other 2 accounts, then this is probably a "good hand-bad hand" sockpuppetry situation. However, he also made a large portion of disruptive edits, and has a history of trouble with other users. LightandDark2000 (talk) 01:49, 26 March 2014 (UTC)
 * The sockmaster is still editing via the account Doug Is Dean, and Karen and Doug both appear to be WP:VOAs. LightandDark2000 (talk) 04:24, 27 March 2014 (UTC)
 * Added some more socks. Help from a checkuser, please? LightandDark2000 (talk) 09:51, 27 March 2014 (UTC)
 * Adding User:Hurricane Luis as a possible sock/potential sockmaster. LightandDark2000 (talk) 10:01, 27 March 2014 (UTC)
 * Requesting 1 month block of underlying IP Address(es) (IP Range if this user has socked before) in order to prevent further abuse. It's obvious that he has some experience socking at this point. Also requesting sleeper check. LightandDark2000 (talk) 10:19, 27 March 2014 (UTC)

Also see their editing interactions. LightandDark2000 (talk) 02:20, 30 March 2014 (UTC) (Now updated and maxed out at 20 users.)
 * I added some more IP socks. They all edit only the same specific pages, and they all seem to have the same motive(s) whether is "good-hand" or "Bad-hand". LightandDark2000 (talk) 02:56, 30 March 2014 (UTC)
 * I wouldn't be surprised if most of the IPs listed here were unrelated, due to them being from different locations (Germany) than the blocked IP: 75.139.136.82. However, they all edit the same articles and thus share some interactions, which makes their motives questionable. LightandDark2000 (talk) 09:50, 30 March 2014 (UTC)
 * Just added User:Laca michaelat2014, because his quacking is loud and clear. Requesting indef blocking of all listed User accounts, underlying IPs, as well as the tagging of all confirmed named accounts. Also requesting a sleeper check, as this is starting to get out of control. LightandDark2000 (talk) 09:58, 30 March 2014 (UTC)
 * Added the latest sock (as of this writing): User:Directormaqbool. Requesting checkuser attention to sort this out. Note: There is some uncertainty about whether or not Hurricane Luis was the actual sockmaster behind these accounts. Sockpuppetry is obvious in this case, but a checkuser is needed in order to determine who the real sockmaster is, preferably before this sockmaster can create more accounts to wreak more havoc. LightandDark2000 (talk) 08:34, 1 April 2014 (UTC)
 * If Checkuser confirms that Hurricane Luis is unrelated to any of these accounts, then User:Hurricanes2006 is potentially the true sockmaster, because it is the earliest named account that is related to the others. As I said before though, we need a checkuser to confirm whether Hurricane Luis is involved or not. LightandDark2000 (talk) 08:52, 1 April 2014 (UTC)
 * Just added User:Philipslau681 as another possible sock. This user barely edits outside of the range of articles that the sockmaster edits, and one of the articles he particularly focuses on is Typhoon Doug (1994), and it so happens that the sockmaster has 3 accounts with names relating to "Doug". There is an overlap between some of the articles he edits, and his behavior may indicate that he is a "good-hand" sock. The user has also been used only during November 2013, until he returned in March 2014. LightandDark2000 (talk) 08:35, 2 April 2014 (UTC)
 * Added the IP 79.253.160.144. The 79.25 IPs are obviously being abused by the same person in Germany (5.146.241.78 may be a good-hand sock, but I can't tell for sure without a Checkuser) to insert WP:OR and blatantly false information into TC-related articles, whether or not there is a connection to the sockmaster of the named accounts. Socking is obvious, and the edits from this IP are becoming increasingly disruptive. LightandDark2000 (talk) 02:02, 3 April 2014 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Hello, To whoever reads this. But after messaging and talking with another user, he has informed me to defend myself againts the "sockpuppet" accusations. So here goes, - User:Hurricane Luis is my and only my account. I have not been using or creating other accounts to vandalise or disrupt the editing of Wikipedia in any way. Also to those wondering why most of my edits are the same, I had created something in my sandbox which kept getting deleted, so when it was deleted I put it back there because I was not aware that it had been deleted and noone had told me that they had done this. After an admin person had blocked me for a week I had a message telling me that this was the case. Hurricane Luis (talk) 16:10, 1 April 2014 (UTC)


 * Comment - For the sake of disclosure, I've reverted this edit to this SPI by a pretty obvious sockpuppet pretending to be DoRD, presumably one made by User:LightandDark2000 in retaliation for being blocked. - Aoidh (talk) 03:34, 5 April 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - There are no diffs but it's blatantly obvious from their contribs that they are related, also a few of the accounts have been CU blocked by . Callanecc (talk • contribs • logs) 02:44, 28 March 2014 (UTC)


 * There is no technical evidence at all to support the allegation that is operating any other accounts; in fact, the technical evidence shows him to be ❌ to any other account or IP on this page.  Recommend that this SPI be renamed to one of the other confirmed socking groups below.
 * The following are ✅ as socks of each other - and are already blocked:
 * Relevant IP is also blocked.
 * Relevant IP is also blocked.
 * Relevant IP is also blocked.
 * Relevant IP is also blocked.
 * Relevant IP is also blocked.
 * Relevant IP is also blocked.
 * Relevant IP is also blocked.

The following are ✅ as socks of each other:

The following are ✅ as socks of each other:


 * The 79.250.xxx.xxx and 7.253.xxx.xxx edits are indicative of an unregistered editor with a dynamic ISP; unless there is solid evidence that the editing is disruptive (e.g., inserting patently false information, removing properly sourced information), I'm not seeing any reason to block the ranges. There are some good edits from others coming through these ranges.


 * The remainder of the accounts mentioned in this SPI are ❌ to each other or to any other account or IP mentioned in this SPI.

Well, that should keep everyone busy for a bit. Risker (talk) 01:51, 6 April 2014 (UTC)
 * To each their own: Sockpuppet investigations/Awesomenessluigi, Sockpuppet investigations/Velascobrent189 and Sockpuppet investigations/Douglas bond of doom. Closing now. Callanecc (talk • contribs • logs) 01:04, 7 April 2014 (UTC)