Wikipedia:Sockpuppet investigations/TORPIG/Archive

• {{checkip|1=116.73.43.122}}
• {{checkuser|1=115.97.208.242 }}

• Tools: [https://tools.wmflabs.org/sigma/editorinteract.py?users={{urlencode:{{SUBPAGENAME}}}} Editor interaction utility] • [https://tools.wmflabs.org/interaction-timeline?wiki=enwiki&user={{urlencode:{{SUBPAGENAME}}}} Interaction Timeline] • [https://tools.wmflabs.org/betacommand-dev/UserCompare/{{urlencode:{{SUBPAGENAME}}}}.html User compare report] Auto-generated every hour.

WP:DUCK - identical marketing-style edits coming firstly from IPs

115.97.208.242 [https://en.wikipedia.org/w/index.php?title=Mebroot&type=revision&diff=906681565&oldid=894125667 Diff1]

116.73.43.122 [https://en.wikipedia.org/w/index.php?title=Mebroot&type=revision&diff=912778416&oldid=912776640 diff2]

Torpig [https://en.wikipedia.org/w/index.php?title=Mebroot&type=revision&diff=913253889&oldid=912784335 Diff 3 (account)]

The IPs were sanctioned for their actions, so I believe this is a case of avoiding blocks, rather than just a moving IP who decided to form an account.

Checkuser requested to verify that this account matches the other IPs (if those 2 IPs are themselves within a logical range) Nosebagbear (talk) 22:41, 30 August 2019 (UTC)

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

• {{ping|Nosebagbear}} CU will never link accounts to IP addresses so there is no point asking for it here. Regardless, the account is clearly WP:NOTHERE and so I have blocked accordingly. SmartSE (talk) 23:00, 30 August 2019 (UTC)

----