Jump to content

Wikipedia:Sockpuppet investigations/AzUrArInG

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Berean Hunter (talk | contribs) at 11:00, 11 October 2017 (→‎Clerk, CheckUser, and/or patrolling admin comments: best way forward I believe). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

AzUrArInG

AzUrArInG (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki)
Populated account categories: confirmed


29 September 2017

– A checkuser has completed a check on relevant users in this case, and it is now awaiting administration and close.

Suspected sockpuppets

Impersonators
AzUrArInG socks below

(This is a partial rewrite after my power went out and I only had some of it saved. :/ )

See this ANI thread. Also see User talk:AmyWeatherspoon63 (doppelganger) where they state "I will create more hoax articles and drafts about fictional amusement parks and attractions. My 2 accounts I created: my doppelganger and MothraFanGirl1763 is just the beginning. Enjoy your time here as I take a hiatus until March 15, 2018. Because when I come back, I'm gonna create more fictional and made-up amusement parks and attractions articles as well as drafts."

I backtracked the IPs that this person has used centered around their article subject interests and they all geolocate to the exact same place. In this article history, ScienceGuy101, a sock of AzUrArInG will revert his own IP which is in one of the same ranges of interest. A comparison of interests and edits are spot on but the easiest way to see they are the same is the message at User talk:KaijuFan557 which states their intention to keep socking much like the above. Notice also in a seperate occasion, AzUrArInG tags his own IP which was also in the same /64 range of interest.

He edits articles on reptiles, dogs and other animals as well as the obvious target articles. Example crossover of subjects showing same editor behind the IP editing Underworld and animals as seen in the first two lines. Sometimes they only edit animal articles so it might not always appear obvious when looking through his ranges. A study of the range contribs is required here to understand subject focus and the contribs are greater than 95% all him:

The 68.208.127.8 address seems to be shared with an LTA or alternatively AzUrArInG is an account belonging to the LTA and he is impersonating that person who uses the name elsewhere. The LTA is made clear here and here also.

Based on this edit to an Italian monster movie in the midst of that IP's editing spurt and the sharing of common IP ranges and locale, I'm going to say that AzUrArInG is quite possibly Brunodam.

The first four socks above are not stale and may be checked against the master also.
 — Berean Hunter (talk) 15:41, 29 September 2017 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

@Berean Hunter:, given the CU results below, It appears that the accounts listed below are all sockpuppets of another LTA master, Incorrigible Troll. They have all been CU-linked to a couple of "UCLA" accounts, which are known socks of Incorrigible Troll (see his SPI archives). Also look at the "Global Account Details" of each sock; they are all Globally Locked as accounts of Incorrigible Troll, as you can see here [1] [2] [3]. It appears to be a large-scale impersonation and vandalism campaign. As such, I think that you should move this case to the SPI for Incorrigible Troll after it has closed, in order to prevent other users from being confused later on. LightandDark2000 (talk) 23:42, 6 October 2017 (UTC)[reply]

I'd like to mention that Incorrigible Troll also seems to be from a state in the eastern US (as evidenced in one of the blocked ranges he used in a recent case I filed at his SPI), but there were 2 suspect IPs with similar behavioral edits that located to the other side of the globe. That being said, those 2 IPs haven't been CU-linked, so it's possible that they were a different vandal or another sockmaster editing while logged out. AzUrArInG and Incorrigible Troll's IPs seem to geolocate to different US states, but I could be wrong and Incorrigible Troll could have access to more IPs (such as VPNs or Proxies). I would also like to say that a number of IPs and sock accounts you listed above aren't Incorrigible Troll socks (probably socks of AzUrArInG), but the vast majority of the accounts named are Incorrigible Troll accounts, as indicated in the CU results below. LightandDark2000 (talk) 23:48, 6 October 2017 (UTC)[reply]

Okay, is User:UnderArmourKid did Hurricane Irma an UnderArmourKid sock, or is it an Incorrigible Troll sock? I would also like a sleeper check done on this account as well, as I'm sick of these sockmasters running around and screwing up those articles. LightandDark2000 (talk) 00:02, 7 October 2017 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments

  • Self-endorsed by clerk for checkuser attention to confirm the first four accounts to the master and also to compare to Brunodam to see if this is him. Please locate alt accounts/sleepers of either along the way. Vituzzu, I would also appreciate your input here as you probably know BD better than anyone.
     — Berean Hunter (talk) 15:51, 29 September 2017 (UTC)[reply]
Legacypac, did I get all of the ones that you referred to at ANI (thank you for reporting there btw).?
 — Berean Hunter (talk) 13:02, 1 October 2017 (UTC)[reply]

Looks like it Legacypac (talk) 07:50, 4 October 2017 (UTC)[reply]

  • Following accounts are  Confirmed to each other:
They are  Unlikely to AzUrArInG (AzUrArInG seems to be from a different state in the US, but I'd take that technical info with a grain of salt). no No comment with respect to IP address(es). Callanecc (talkcontribslogs) 02:42, 6 October 2017 (UTC)[reply]