User:TheDoDahMan/SPI

Sock Puppet Investigation

Background and user behaviour

• On 04 June 2019 TheDoDahMan observed that identical edits were emanating from more than one IP address. Furthermore, although previous warnings had been given out, none were initially observed on the talk pages with the IP addresses in question. CASSIOPEIA was briefed on the suspicions and instructed me to initiate a sock puppet investigation.
• User behaviour: The user typically uses an IP once or twice and then abandons it for new one. In each case the user tries to insert identical, unsubstantiated (and unverifiable) content into a BLP of Stephane Graff. For some reason, no warnings are present on the talk pages associated with the most of the IPs. Perhaps they have been deleted. After using a large number of IPs the user has acquired the username: Raggedtrouseredphilanthropists2019. Now that the user has acquired an account, they are trying to argue with me over giving a level 1 warning. I have not responded. In the first incident the user gave a website as a reference:[1]. Subsequent edits do not include this "reference". According to my research it does not substantiate their claim. After the edit made by the named account was reverted on 04 June 2019, they went back to using an IP address.
• Based on this evidence, I believe this user is a "sock puppet" and that a check user is warranted.TheDoDahMan (talk) 07:52, 5 June 2019 (UTC)

IP Addresses and DIFFS

IP/USER DIFF

1. 2A02:C7D:83D:4800:D886:7100:E19E:D74B DIFF1
2. 2A02:C7D:83D:4800:B438:3EA4:4424:3459 DIFF2
3. 2A02:C7D:83D:4800:9E0:C9B:2185:9DBD DIFF3
4. Raggedtrouseredphilanthropists2019 DIFF4
5. 2A02:C7D:83D:4800:580B:FF57:424F:AD26 DIFF5
6. 2A02:C7D:83D:4800:6103:EF8D:42CF:9286 DIFF6
7. 2A02:C7D:83D:4800:B472:E9FA:5C07:638D DIFF7
8. 2A02:C7D:83D:4800:3055:A9CF:A048:B5E9 DIFF8
9. 213.31.67.22 DIFF9
10. 2A02:C7D:83D:4800:A0EF:8F94:7C2A:2B78 DIFF10
11. 2A02:C7D:83D:4800:1460:1BBA:A483:F192 DIFF11
12. 2A02:C7D:83D:4800:4DA2:5E23:B17C:913 DIFF12
13. 2A02:C7D:83D:4800:9AC:73F5:516C:7342 DIFF13
14. 90.204.32.81 DIFF14
15. 2.216.113.85 DIFF15
16. 2A02:C7D:83D:4800:D19A:770E:F84E:EAE8 DIFF16
17. 31.185.148.167 DIFF17
18. 2A02:C7D:83D:4800:4F0:4796:9A22:B423 DIFF18
19. 81.99.108.4 DIFF19
20. 2A02:C7D:83D:4800:A516:130:8812:3C69 DIFF20
21. 2A02:C7D:83D:4800:D002:6688:824B:BA2F DIFF21
22. 51.9.251.215 DIFF22
23. 2A02:C7D:83D:4800:8D62:9B8F:3EFC:557 DIFF23
24. 2A02:C7D:83D:4800:D34:A156:EB3B:A692 DIFF24
25. 2A02:C7D:83D:4800:7C96:503E:34BB:599 DIFF25
26. 2A02:C7D:83D:4800:FDFF:C985:6DD3:FFC0 DIFF26
27. 2A02:C7D:83D:4800:2994:8751:6CAB:1B47 DIFF27
28. 31.185.148.167 DIFF28
29. 2A02:C7D:83D:4800:D19A:770E:F84E:EAE8 DIFF29
30. 90.204.32.81 DIFF30

User contributions

USER/IP Contributions

1. 31.185.148.167 CON1
2. 2A02:C7D:83D:4800:D19A:770E:F84E:EAE8 CON2
3. 81.99.108.4 CON3
4. 2.216.113.85 CON4
5. 90.204.32.81 CON5
6. 2A02:C7D:83D:4800:9AC:73F5:516C:7342 CON6
7. 2A02:C7D:83D:4800:4DA2:5E23:B17C:913 CON7
8. 2A02:C7D:83D:4800:1460:1BBA:A483:F192 CON8
9. 213.31.67.22 CON9
10. 2A02:C7D:83D:4800:A0EF:8F94:7C2A:2B78 CON10
11. 2A02:C7D:83D:4800:3055:A9CF:A048:B5E9 CON11
12. 2A02:C7D:83D:4800:B472:E9FA:5C07:638D CON12
13. 2A02:C7D:83D:4800:6103:EF8D:42CF:9286 CON13
14. 2A02:C7D:83D:4800:9E0:C9B:2185:9DBD CON14
15. 2A02:C7D:83D:4800:580B:FF57:424F:AD26 CON15
16. 2A02:C7D:83D:4800:B438:3EA4:4424:3459 CON16
17. 2A02:C7D:83D:4800:D886:7100:E19E:D74B CON17
18. Raggedtrouseredphilanthropists2019 CON18
19. 2A02:C7D:83D:4800:4F0:4796:9A22:B423 CON19
20. 2A02:C7D:83D:4800:A516:130:8812:3C69 CON20 Oldest account
21. 2A02:C7D:83D:4800:D002:6688:824B:BA2F CON21
22. 51.9.251.215 CON22
23. 2A02:C7D:83D:4800:8D62:9B8F:3EFC:557 CON23
24. 2A02:C7D:83D:4800:D34:A156:EB3B:A692 CON24
25. 2A02:C7D:83D:4800:7C96:503E:34BB:599 CON25
26. 2A02:C7D:83D:4800:FDFF:C985:6DD3:FFC0 CON26
27. 2A02:C7D:83D:4800:2994:8751:6CAB:1B47 CON27
28. 31.185.148.167 CON28
29. 2A02:C7D:83D:4800:D19A:770E:F84E:EAE8 CON29
30. 90.204.32.81 CON30

In every case the contributions are exclusively to Stephane Graff, except for CON18 which also has a contribution on their talk page.

Results of WHOIS

i) The IPv6 Addresses belong to: Sky Network Services 1 Brick Lane London E1 6PU UK abuse@sky.uk

(ii) 213.31.67.22 belongs to: Offices Minerva Herikerbergweg 2 1101 CM Amsterdam NETHERLANDS ipp@bt.com

(iii) 90.204.32.81 belongs to: Sky Network Services 1 Brick Lane London E1 6PU UK

(iv) 2.216.113.85 belongs to: Sky Network Services 1 Brick Lane London E1 6PU UK

(v) 31.185.148.167 belongs to: PlusNet Plc The Balance 2 Pinfold Street Sheffield S1 2GU UK abuse@plus.net

(vi) 51.9.251.215 belongs to: FORCE9 PlusNet plc. Room 211, Telephone Exchange(CWT-LA), Cawthorne Street LA1 1TG Lancaster, Lancashire UNITED KINGDOM

(vii) 90.204.32.81 belongs to: Sky Network Services 1 Brick Lane London E1 6PU UK