Wikipedia:Sockpuppet investigations/PacificTime201/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

It's highly possible that "PacificTime201" is not the master and an older account definitely exists, but this is a good start. Not to mention the similarities between that and "EasternTime401", All these accounts and their IPs seem to have an interest in WXYZ-TV, disruptively removing content as shown by these diffs -,  and  and weirdly enough making votes on articles for deletion. One example is for the now deleted Hamza Sufyan, when IP 100.37.166.70 was reverted by NinjaRobotPirate for being a sock before returning as another IP 174.197.149.126 with an edit summary of "You really fjucking (sic) think I care bitch? Just fjuck (sic) off and die." That same IP also responded on the talk pages of IP's 100.37.166.70 and 142.227.134.75 with comments such as "Shut your fjucking (sic) mouth" and "Please drop the soap and die". This evidently shows that these were all the same person gauging by their reactions to their IPs getting blocked.

These IPs (72.80.58.47, 174.197.150.13 and 173.56.224.210) has also both made disruptive edits on and PHP.

PHP


 * After 72.80.58.47 was reverted by Captainllama -
 * They then returned as 174.197.150.13 by restoring the same exact content (ultimately reverted again by Meters) -

This user also seems to be interested in being a "vigilante" by tagging others as socks despite being one themselves, as evidently shown here -
 * Note - one common behavior seems to be actively targeting and hounding IPs starting with 183.90

IP 173.56.224.210:
 * – "Keep your eye on these IP addresses"
 * - "rv obvious DUCK of either this or a joe job"
 * - Reverting admin C.Fred with an edit summary of "rv puffery made by an IP in a known LTA range"

On a now blocked user's talk page -
 * (Reverted by C.Fred)
 * (Reverted by Liz)

IP 72.80.58.47 (was disruptive on the WXYZ-TV article as well) and 100.37.166.70 on the same talk page:
 * 
 * 

Targeting IPs starting with 183.90 for no apparent reason, this is connected to his "Keep your eye on these IP addresses" statement from 173.56.224.210 -

IP 75.164.153.214
 * 
 * 
 * 

Miscellaneous:
 * On Killthepixelnow's talk page, making spiteful tags in regards to Beheaded Children Contest


 * On ST47's talk page about IP ranges


 * On User talk:0.0.0.0, IP 72.80.58.47 also made a disruptive edit by tagging the article as "Wikipedia sockpuppets of AmandaNP", an administrator. - eventually reverted by Captainllama

All these IPs may look different, but they always seem to originate within the same general area. All these, in addition to all these accounts having the similar limited proficiency of English and their subsequent personal attacks, led me to conclude that all of these were done by a single person currently living in a shared apartment complex, as we can see when they had admitted on the talk page while using the IP 72.80.58.47, including further disruptive behavior by advertising a scamming website. This user is potentially using ISPs of other people living in the same apartment complex as them merely for abuse who are not Wikipedians. Another explanation is good old VPN. There's definitely more accounts/IPs yet to be uncovered but this is what that has been gathered so far. Fetboten (talk) 04:16, 5 November 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Haven't looked into this too deeply, but my money is on them being either or an impostor thereof. My main concern is that most known CT301 IPs geolocate to the Houston area, while these appear to be in the northeast US - they could have moved, of course. GeneralNotability (talk) 18:23, 5 November 2020 (UTC)
 * All right, I've taken a longer look at this. Thoughts:
 * I think the PT201/ET401/gibberish named accounts are not CT301 - their behavior doesn't line up. There's a reasonable chance that's some LTA or other impersonating CT301, but I don't think it's worthwhile to checkuser them to figure out who (and they're blocked anyway)..
 * Most of the IPs haven't edited in several months, so it's not worth doing anything to them.
 * The non-stale IPs are, , and . The first two actually do seem kind of similar (though one inexplicably geolocates to Japan...not sure how that works when it's a Qwest IP). I have blocked both as disruptive. Third one is already blocked and doesn't seem that similar to the others. Closing. GeneralNotability (talk) 18:37, 5 November 2020 (UTC)