Wikipedia:Sockpuppet investigations/Pitzzaboy/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

DUCK sock based on username.

Requesting CU since I have a hunch that this user may be a sock of an LTA User:Meteorological Person. Both this user and MP have created [drafts https://en.wikipedia.org/w/index.php?title=Draft:Cyclone_Paddy&oldid=1056804706] direct copied from the season article about tropical cyclones without attribution.

I have a hunch that this is. User:Pitzzaboy. Similar names, this IP user (who is presumed to be the same person) added uploaded by Pitzzaboy. Also, both users have issues regarding copyright, see Pitzzaboy's User_talk:Pitzzaboy and this draft direct copied from the season article about tropical cyclones without attribution. Destroyeraa (Alternate account) 01:18, 24 November 2021 (UTC)


 * I don't know if you saw my later addition - I have a hunch that this is a Pitzzaboy sock given the evidence posted above. Destroyeraa (Alternate account) 01:26, 24 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * There is no policy against abandoning one account in favor of a new one, and the username similarity suggests that there was no intention to evade scrutiny. As to whether they're an MP sock, the behavior you're referencing doesn't seem distinctive enough to justify a check. Lots of people violate attribution when creating drafts based on mainspace content, and the tropical cyclone topic area is known for having many users who engage in similar behavior to one another. . . --  Tamzin  [ cetacean needed ] (she/they) 01:23, 24 November 2021 (UTC)
 * I had not seen your edits when I made the above comment. I think my reasoning regarding this being an MP sock also applies to this being a Pitzzaboy sock. If anything, the existence of two different sockmasters known to create drafts from season articles without attribution shows that this is not distinctive behavior of the sort that would justify a check. You're right that the edit by that one IP presents some evidence for that IP being a Pitzzaboy sock, but checkusers will not links IPs to usernames, and you haven't presented any evidence for why this IP is Fastestboi(i). I see that they both edited the Cyclone Paddy draft, but again, that isn't enough evidence of being the same person to justify a check. --  Tamzin  [ cetacean needed ] (she/they) 01:39, 24 November 2021 (UTC)

Suspected sockpuppets

 * ( original case name)
 * ( original case name)




 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Behavioral evidence:
The suspected master and the suspect socks have two common interests: tropical cyclones and 2021 California wildfires. See this (Pitzzaboy) and Fastestboii. For tropical cyclones, both users have created drafts by copying within Wikipedia without attribution. See this (Pitzzaboy) and Fastestboi.

IPs
I suspect that this IP: is also Pitzzaboy and Fastestboii. The IP contributed to Draft:Cyclone Paddy which was created by Fastestboi. Also, the IP added an. Finally, the suspected IP sock geolocates to the same area (LA, California) as (geolocation), who was blocked by  as a Pitzzaboy sock. There is ample behavioral evidence provided above to connect this IP to Pitzzaboy and connect the suspected users as socks of Pitzzaboy.

I am requesting CU to provide technical evidence regarding the user accounts. Destroyeraa (Alternate account) 01:22, 25 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Isn't Pitzzaboy the oldest account here? It clearly says that Pitzzaboy's account was created on August 7th of this year. --DarkMatterMan4500 (talk) (contribs) 00:34, 30 November 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The evidence presented still falls just a bit short of what I'm willing to endorse on; as I said at Sockpuppet investigations/Fastestboi/Archive, a certain amount of leeway has to be granted for the tendency toward very similar editing styles in this topic area. However, looking at the named accounts' contribs, I see similar ES style, including lots of typos, and this is a close enough typo to this that I'd like to know what CU has to say. with respect to the named accounts (although, as I found at the previous SPI, it seems almost certain that Fastestboi == Fastestboii, and there is not a policy violation there if there isn't also a previous block being evaded).As to the IPs, three different services give me a combined six geolocations for them up and down the length of California, which I'm guessing has something to do with proxy use (they don't appear to be proxies themselves, but someone at both IPs uses the same proxy service). Fortunately we don't need to rely on geolocation here, as   show a repeated typo that is characteristic enough to block on (ctrl+f here for comparison) . : .  If they return to that IP after that, please report to the blocking admin or AIV for a quick re-block.  --  Tamzin  [ cetacean needed ] (she/they) 04:24, 26 November 2021 (UTC)
 * - -- RoySmith (talk) 13:09, 26 November 2021 (UTC)
 * Pitzzaboy, Fastestboi, and Fastestboii are all confirmed to each other. -- RoySmith (talk) 13:14, 26 November 2021 (UTC)
 * PS, this needs to be merged with Sockpuppet investigations/Fastestboi -- RoySmith (talk) 14:42, 26 November 2021 (UTC)
 * Thanks, Roy. Could an admin-clerk please merge the Fastestboi case into this one? Thanks.  --  Tamzin  [ cetacean needed ] (she/they) 22:23, 26 November 2021 (UTC)
 * Cases merged as requested. Sir Sputnik (talk) 23:15, 28 November 2021 (UTC)
 * Moved back to older master. Sorry for any confusion. Closing. --  Tamzin  [ cetacean needed ] (she/they) 00:57, 30 November 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The IP is self admitted and has continued disruption in the exact same topic areas as their account, storms, floods, wildfires, elections.

Sodaman32 created Draft:2022 Florida Brushfires, which was declined as unsourced. Following that an IP editor from the self-admitted range showed up to add a source to it. Also note the username similarity, "Soda Man" vs "pizza boy". 192.76.8.70 (talk) 23:24, 16 February 2022 (UTC)
 * Is also obviously them based on the recent edit war at 2021–22 North American winter. The IP geolocates to the same place as their self admitted IP range and showed up to join in an edit war with the edit summary "stop it User :MarioProtIV" followed by reinserting a change made by their now confirmed sock Muffinhea. The IP has also made edits like these  192.76.8.77 (talk) 20:29, 17 February 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
 
 * Whilst the crossover with the self-admitted range and subject matter is pretty compelling, there's a couple of non-stale socks in the archive and I'd like confirmation this isn't a strange joe-job (I doubt it, but stranger things have happened). - For comparison of  to the accounts in the archive. --Jack Frost (talk) 07:10, 17 February 2022 (UTC)
 * - -- RoySmith (talk) 19:32, 17 February 2022 (UTC)
 * Sodaman32 is ✅. Also, uptagging previously found  to ✅.    -- RoySmith (talk) 19:43, 17 February 2022 (UTC)
 * I spoke too soon about the lack of sleepers.  is ✅ -- RoySmith (talk) 19:48, 17 February 2022 (UTC)
 * Moving this back to checked so somebody can look at the IP. -- RoySmith (talk) 19:50, 17 February 2022 (UTC)
 * Did you not mean to block and tag Muffinhea?--Bbb23 (talk) 19:52, 17 February 2022 (UTC)
 * So many checkboxes, so few neurons :-) -- RoySmith (talk) 19:53, 17 February 2022 (UTC)


 * 24.23.163.220 is clearly them, as is the /64. Both have been recently active, and both have been static since at least July 2021. The IPv4 doesn't seem to be hopping when I check out to the /20, however the /64 is hopping across a /49 which has no collateral since July 2021. Therefore -  please anonblock 24.23.163.220 for 9 months and consider anonblocking 2601:643:8300:8000::/49 for the same period. Jack Frost (talk) 02:27, 19 February 2022 (UTC)
 * @Jack Frost If you're looking for clear evidence of block evasion, how about Special:Permalink/1058601900? -- RoySmith (talk) 15:25, 19 February 2022 (UTC)
 * Ah, I see we're beyond ducks and well into ostrich territory now... --Jack Frost (talk) 00:58, 20 February 2022 (UTC)
 * I'm not too excited about blocking a /49, but I did block 2601:643:8300:A4B0::/64 and 2601:643:8300:AD50::/64 and we'll see how things progress from there. -- RoySmith (talk) 15:32, 19 February 2022 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

Evidence is based partly on activity on the Commons, where the user has repeatedly made false copyright ownership claims on tornado-related images, similar to a previous sock I've dealt with,  (note that several such files were deleted for copyright violation). This user has also started to edit war over images, , , which I understand is another pattern for this person. User has also been reported on the Commons here. TornadoLGS (talk) 02:51, 15 April 2022 (UTC)
 * They have also shown an interest in another sockmaster, . . TornadoLGS (talk)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Does that mean Pitzzaboy and Mazum24 could be the same? TornadoLGS (talk) 18:02, 19 April 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I blocked Brishzombie as a probable sock of Pitzzaboy given their comment here and overlap in editing interests. If there is a different finding as a result of this SPI then feel free to undo/amend my block as needed. firefly  ( t · c ) 10:29, 16 April 2022 (UTC)
 * Brishzombie is ✅ to the accounts confirmed in the most recent Pitzzaboy case at Sockpuppet investigations/Pitzzaboy/Archive (i.e. Muffinhea, Sodaman32, Legensd). These accounts are to Mazum24 based on historical information from CU wiki. Mz7 (talk) 07:14, 19 April 2022 (UTC)
 * It’s certainly possible from a technical standpoint. It depends on how convincing we think the behavioral similarities are. I will defer to the next clerk or admin on that question. Mz7 (talk) 20:10, 19 April 2022 (UTC)
 * I moved this case to Pitzzaboy based on the CU and behavioural evidence (Mazum24 seems to be better at spelling and is more interested in hurricanes than tornadoes). Tagging as confirmed, will request lock. Closing. Thanks, Spicy (talk) 09:37, 23 April 2022 (UTC)

Suspected sockpuppets
Already blocked for disruptive editing and they'd set off sock radar earlier, but they just tagged their own Talk as a sock. Guessing it's a different LTA, but not sure there's a better place to file this for investigation. Star  Mississippi  20:55, 23 May 2022 (UTC)


 * @Beeblebrox FYI that this is here since I just saw your revert. Star   Mississippi  00:46, 24 May 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus . per WP:DENY. I'm loath to tag here given how attention-seeking tagging one's own sock is. Closing. Mz7 (talk) 00:54, 25 May 2022 (UTC)
 * . Mz7 (talk) 01:09, 25 May 2022 (UTC)

Suspected sockpuppets
Procedural request, user has tagged themselves as a sock in keeping with the previous MO. ~ Matthewrb  Talk to me &middot;  Changes I've made 16:39, 11 August 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - to confirm and look for other accounts. Global locks should be requested after check is completed. Bbb23 (talk) 18:00, 11 August 2022 (UTC)
 * ✅, also . Will request locks. Girth Summit  (blether)  10:37, 13 August 2022 (UTC)

Suspected sockpuppets

 * ( original case name)

Reversion history on a draft, Reversion history on the redirect of previous draft, reversion history of another monkeypox article, Edit contribution history matches dead on to Cabin314 (Pitzzaboy) with weather/monkeypox articles. 2-day old account should not have even know the draft linked first existed, let alone challenge a unanimous merge proposal a long time ago. Obvious Cabin314 (Pitzzaboy) behavior. Elijahandskip (talk) 14:05, 25 September 2022 (UTC)

Evidence Match:
 * 1) 2034 Winter Olympics: (HiltonCalifornia - 4th edit on Wikipedia) | (Cabin134 - One of last edits on Wikipedia)
 * 2) Reversion history on Draft:2022 monkeypox outbreak in Florida
 * 3) Reversion history on the redirect of 2022 monkeypox outbreak in Florida


 * Update: Even more suspicious on this user after they uploaded a NY Times article image to Wikipedia commons and claimed it was their own. (In process to delete it, but that is the image). Elijahandskip (talk) 05:06, 27 September 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - Please merge to WP:Sockpuppet investigations/Pitzzaboy. Thanks, Spicy (talk) 14:10, 25 September 2022 (UTC)
 * ✅. I'll move, look for other accounts, and block. Girth Summit  (blether)  05:34, 27 September 2022 (UTC)
 * ALso confirmed:
 * That's all I see at the moment. Will request locks. Girth Summit  (blether)  05:40, 27 September 2022 (UTC)
 * That's all I see at the moment. Will request locks. Girth Summit  (blether)  05:40, 27 September 2022 (UTC)

Suspected sockpuppets
WP:DUCK with matching editing interests. In Olympic and weather articles: 2024 Summer Olympics & Tornadoes of 2022 & Tornadoes of 2023. Matching the most recent 2 socks (HiltonCalifornia) & (Cabin134). Also trolling on both of the weather articles listed (adding false information), which they received 4 separate warnings for this month. Editing history says sock, so SPI was started rather than AIV. Elijahandskip (talk) 01:53, 25 May 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ - I'm just poking around to see if I can find any others.  Girth Summit  (blether)  15:06, 31 May 2023 (UTC)
 * Don't see any others. Lock requested. Closing.  Girth Summit  (blether)  15:09, 31 May 2023 (UTC)