Wikipedia:Sockpuppet investigations/Çelebicihan: Difference between revisions
Content deleted Content added
Comment (using spihelper.js) |
Archiving case section to w:en:Wikipedia:Sockpuppet investigations/Çelebicihan/Archive (using spihelper.js) Tags: Replaced Manual revert |
||
| (26 intermediate revisions by 9 users not shown) | |||
| Line 2: | Line 2: | ||
{{SPIarchive notice|Çelebicihan|crosswiki=yes}} |
{{SPIarchive notice|Çelebicihan|crosswiki=yes}} |
||
{{SPIpriorcases}} |
{{SPIpriorcases}} |
||
===20 March 2021=== |
|||
{{SPI case status|admin}} |
|||
====Suspected sockpuppets==== |
|||
* {{checkuser|1=4elopuck|master name={{#titleparts:{{SUBPAGENAME}}}}}} |
|||
<!-- You may duplicate the templates above ({{checkuser}} and {{checkIP}}) to list more accounts--> |
|||
*'''Tools''': <span class="plainlinks">[https://tools.wmflabs.org/sigma/editorinteract.py?users={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&users={{urlencode:4elopuck}} Editor interaction utility] • [https://tools.wmflabs.org/interaction-timeline?wiki=enwiki&user={{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}&user={{urlencode:4elopuck}} Interaction Timeline] • [https://tools.wmflabs.org/betacommand-dev/UserCompare/{{urlencode:{{#titleparts:{{SUBPAGENAME}}}}}}.html User compare report]</span> <small>''Auto-generated every hour.''</small> |
|||
Recreation of [[Svitlana Bevza]] at [[Bevza Svitlana]]. We haven't seen this sockpuppeteer in a while, and this account suggests the tactics, techniques and procedures have changed. [[User:MER-C|MER-C]] 15:27, 20 March 2021 (UTC) |
|||
====<big>Comments by other users</big>==== |
|||
<small>''Accused parties may also comment/discuss in this section below. See [[Wikipedia:Sockpuppet investigations/SPI/Guidance#Defending yourself against claims|Defending yourself against claims]].''</small> |
|||
* Dear [[User:Blablubbs|@Blablubbs]], what do you mean by putting me here in that list? I read the section '''Defending yourself against claims''' and feel good as I didn't violate any of the wikipedia rules. But I'm pretty much confused of your statement "The following accounts are on the same connection". Can you please explain what is "the same connection"? To make things clear I state that I don't know any of the mentioned accounts. However, I do see that some of them have edited English wikipedia articles about politicians related to Ukraine. Is that the case or something else? I ask you and anyone else to remove any suspicions from me. And if possible to explain what do I violate. If it can help, I live in Ukraine and edit from here. [[User:TonyBallioni|@TonyBallioni]] - thank you for suggesting a deep look. It all looks strange. |
|||
P.S. in order to facilitate the process of discussion I ping here the accounts and ask them to explain what they could do wrong. |
|||
[[User:Breaking Sir|@Breaking Sir]], [[User:Braduman|@Braduman]], [[User:Tarabono00|@Tarabono00]], [[User:Inkitrinky|@Inkitrinky]], [[User:Inger Berg18|@Inger Berg18]], [[User:Pestrolim|@Pestrolim]], [[User:Pysatel|@Pysatel]], [[User:Olga Malozhvanets|@Olga Malozhvanets]], [[User:Nameitgood|@Nameitgood]] --[[User:Щіпальця|Щіпальця]] ([[User talk:Щіпальця|talk]]) 09:22, 23 March 2021 (UTC) |
|||
:: thank you for explaining [[User:Blablubbs|@Blablubbs]]. So, that is a question for me too, why [[User:TonyBallioni|@TonyBallioni]] put me on a list. If same connection means same IP - why TonyBallioni didn't state that clearly? Talking about IP, I'm sure enough it is a mistake as I use it from my mobile phone (and it provides a dynamic IP). My brothers and sisters don't edit or create wikipedia profiles. Maybe my IP range is in a blacklist or something? Can I ask someone else to investigate the results of the CU too? --[[User:Щіпальця|Щіпальця]] ([[User talk:Щіпальця|talk]]) 13:31, 23 March 2021 (UTC) |
|||
::: [[User:Blablubbs|@Blablubbs]], your last sentence made me frustrated. You pointed below: ''I do note that all of the accounts listed certainly do have an interesting familiarity with Wikipedia for new users, and an interesting fascination with promoting things across multiple wikis for users who have no relationship to one another.'' I didn't get your point at all. It seems like you want to accuse my behaviour or myself of violationg some wikipedia rules :( Let's wait the checkuser who could explain what he/she meant by "the same connection". --[[User:Щіпальця|Щіпальця]] ([[User talk:Щіпальця|talk]]) 14:03, 23 March 2021 (UTC) |
|||
* [[User:Primefac|@Primefac]], [[User:Drmies|@Drmies ]] can you please look through this situation as I feel falsely accused to use the same IP? --[[User:Щіпальця|Щіпальця]] ([[User talk:Щіпальця|talk]]) 13:38, 23 March 2021 (UTC) |
|||
**{{U|Щіпальця}}, "All of the following accounts are on the same connection "--that connection is the IP, or maybe a narrow IP range. I'm not sure what you want me to look at. This is the technical evidence, and so I doubt you're being falsely accused of anything; whether you are or are not related in terms of editing (that is, socking) is another matter. I see only one overlapping edit ([https://en.wikipedia.org/enwiki/w/index.php?title=Dmytro_Razumkov&diff=1011330388&oldid=1011322338 this one]) so I don't see much behavioral evidence that would prove you're a sock. [[User:Drmies|Drmies]] ([[User talk:Drmies|talk]]) 16:12, 23 March 2021 (UTC) |
|||
* Hi! I have seen the notification mentioned here. Can anybody explain what happened? I am a new user and don't know all the wiki rules. --[[User:Pysatel|Pysatel]] ([[User talk:Pysatel|talk]]) 14:36, 23 March 2021 (UTC) |
|||
====<big>Clerk, CheckUser, and/or patrolling admin comments</big>==== |
|||
* {{glr}}. [[User:Blablubbs|Blablubbs]]<nowiki>|</nowiki>[[User talk:Blablubbs|talk]] 15:30, 20 March 2021 (UTC) |
|||
*All of the following accounts are on the same connection and share the same type of device as {{checkuser|4elopuck}}: |
|||
**{{checkuser|Breaking Sir}} |
|||
**{{checkuser|Braduman}} |
|||
**{{checkuser|Tarabono00}} |
|||
**{{checkuser|Inkitrinky}} |
|||
*The following accounts are on the same connection but have some variation of user agents from the above group and one another: |
|||
**{{checkuser|Щіпальця}} |
|||
**{{checkuser|Inger Berg18}} |
|||
**{{checkuser|Pestrolim}} |
|||
**{{checkuser|Pysatel}} |
|||
**{{checkuser|Olga Malozhvanets}} |
|||
**{{checkuser|Nameitgood}} |
|||
:Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. [[User:TonyBallioni|TonyBallioni]] ([[User talk:TonyBallioni|talk]]) 19:38, 20 March 2021 (UTC) |
|||
*{{u|Щіпальця}}, I've moved your comment to the correct section. I did not put you on ''any'' list; I requested global locks for a sock that was already blocked. The CU results come from {{u|TonyBallioni}}. What he likely means there is that you're all on the same IP address; could you explain why that might be? [[User:Blablubbs|Blablubbs]]|[[User talk:Blablubbs|talk]] 12:58, 23 March 2021 (UTC) |
|||
:*{{u|Щіпальця}}, I have moved your comment again. Please put new ones in the "comments by other users" section. I do note that all of the accounts listed certainly do have an interesting familiarity with Wikipedia for new users, and an interesting fascination with promoting things across multiple wikis for users who have no relationship to one another. [[User:Blablubbs|Blablubbs]]|[[User talk:Blablubbs|talk]] 13:41, 23 March 2021 (UTC) |
|||
*I don't see any behavioral evidence for Щіпальця socking. Inger Berg18 is a bit odd: all those useless spaces, that's often someone who tries to get autoconfirmed, but it wasn't enough edits and they stopped, so I don't know what to make of it. Mind you, I have not looked at the CU evidence and see no reason to. I don't know what the IP/IP range is; it might well be a location that explains similar interests. [[User:Drmies|Drmies]] ([[User talk:Drmies|talk]]) 16:14, 23 March 2021 (UTC) |
|||
**{{u|Drmies}}, they are inserting the same promotional material about the same person into wikis in 3 languages [https://uk.wikipedia.org/enwiki/w/index.php?title=%D0%A3%D0%BC%D0%B0%D0%BD%D1%81%D1%8C%D0%BA%D0%B8%D0%B9_%D0%86%D0%B3%D0%BE%D1%80_%D0%86%D0%B2%D0%B0%D0%BD%D0%BE%D0%B2%D0%B8%D1%87&type=revision&diff=31000267&oldid=30026719 uk], [https://ru.wikipedia.org/enwiki/w/index.php?title=%D0%A3%D0%BC%D0%B0%D0%BD%D1%81%D0%BA%D0%B8%D0%B9%2C_%D0%98%D0%B3%D0%BE%D1%80%D1%8C_%D0%98%D0%B2%D0%B0%D0%BD%D0%BE%D0%B2%D0%B8%D1%87&type=revision&diff=112974241&oldid=112841853 ru], [https://en.wikipedia.org/enwiki/w/index.php?title=Ihor_Umansky&type=revision&diff=1012225212&oldid=999009693 en] while demonstrating pretty good proficiency with Wikimarkup for someone who registered two weeks ago{{snd}}given that this a UPE sockmaster and the other accounts demonstrate similar patterns for similar people (e.g. nameitgood on [https://ru.wikipedia.org/enwiki/w/index.php?title=%D0%A4%D1%91%D0%B4%D0%BE%D1%80%D0%BE%D0%B2,_%D0%9C%D0%B8%D1%85%D0%B0%D0%B8%D0%BB_%D0%90%D0%BB%D1%8C%D0%B1%D0%B5%D1%80%D1%82%D0%BE%D0%B2%D0%B8%D1%87&action=history ru], [https://pl.wikipedia.org/enwiki/w/index.php?title=Mychaj%C5%82o_Fedorow&action=history pl], [https://en.wikipedia.org/enwiki/w/index.php?title=Mykhailo_Fedorov&action=history en]; Pestrolim on [https://eo.wikipedia.org/wiki/Speciala%C4%B5o:Protokolo/Pestrolim eo], [https://cy.wikipedia.org/wiki/Arbennig:Log/Pestrolim cy] and [https://be.wikipedia.org/wiki/%D0%86%D0%B3%D0%B0%D1%80_%D0%AE%D1%80%E2%80%99%D0%B5%D0%B2%D1%96%D1%87_%D0%A7%D0%B0%D1%80%D1%8D%D0%B7%D0%B0%D1%9E be]), I'm a tad bit suspicious here. [[User:Blablubbs|Blablubbs]]|[[User talk:Blablubbs|talk]] 16:34, 23 March 2021 (UTC) |
|||
***I haven't looked at the other wikis, but I'll take your word for it. Sorry, but I don't know what UPE stands for. I'm suspicious too, but I don't see any evidence for Щіпальця on the en-wiki, that's all I'm saying. IngerBerg, I just looked at their global contributions, and that seems to be a case of paid editing on the ru-wiki, so maybe my "they're trying to get autoconfirmed" makes even more sense. But I do not have experience or expertise here. {{U|MER-C}} is probably better at this here. BTW I have no idea why Щіпальця pinged ''me''. [[User:Drmies|Drmies]] ([[User talk:Drmies|talk]]) 16:41, 23 March 2021 (UTC) |
|||
****{{u|Drmies}}, UPE is "undisclosed paid editing" in this context{{snd}}there is indeed a lack of overlap both here and xwiki, but they all have the same MO (at least the ones that have enough edits for me to be able to tell): Creating spammy pages about Ukranian people and entities on wikis where they don't exist and inserting identical promotional content into existing articles. They seem to segregate topics by account, which accounts for the overlap, but the xwiki pattern, coupled with the CU results, makes me hear avian noises here. [[User:Blablubbs|Blablubbs]]|[[User talk:Blablubbs|talk]] 16:49, 23 March 2021 (UTC) |
|||
*{{replyto|Щіпальця}} apologies for any stress. You shared an IP with one of the accounts listed above and had a relatively similar (but common) device. I listed you here because there was enough of a technical connection to list it, but not enough to block. This is a Common way en.wiki handles cases like this, especially when the CheckUser doesn't want to get involved with the behavioural evidence. I re-ran the check on you, and while the technical connection I mention above does exist, I would say it is not the most likely one.{{pb}}Also, to be clear, I felt saying "same connection with different device" was probably the most clear I could be. I specifically didn't use any of the SPI templates because I wanted to be as precise as I could. More clarity would be: you share one IP with 4elopuck, but that is separated by time, and the useragent is different. The useragent difference is easily explainable, though, so because of the overlap and the large number of accounts on other IPs with 4elopuck, as well as the limited number of IPs that account used, your account was reported here so that a behavioural investigation could occur. [[User:TonyBallioni|TonyBallioni]] ([[User talk:TonyBallioni|talk]]) 00:18, 26 March 2021 (UTC) |
|||
*{{User:Blablubbs/CAW}}{{pb}}Whew, that was a fair bit to wade through. I'm confident that these accounts are part of an organised UPE effort: The MO is xwiki promotion, usually of Ukranian entities; new articles are created and existing ones are rewritten and "brought in line". For some, there is insufficient evidence to block (except if someone wants to do so based on CU results and the fact that e.g. Pysatel seems to be engaged in promotional editing elsewhere ([https://uk.wikipedia.org/enwiki/w/index.php?title=%D0%A1%D0%BB%D0%BE%D0%B1%D0%BE%D0%B4%D1%8F%D0%BD%D1%8E%D0%BA_%D0%9C%D0%B0%D0%BA%D1%81%D0%B8%D0%BC_%D0%95%D0%B4%D1%83%D0%B0%D1%80%D0%B4%D0%BE%D0%B2%D0%B8%D1%87&action=history]). The accounts where I did find evidence of being part of the same sockrings are |
|||
*Tarabono00 and Inkitrinky; both have been involved in xwiki promotion: Compare [https://es.wikipedia.org/enwiki/w/index.php?title=Andreas_Umland&action=history es] vs. [https://en.wikipedia.org/enwiki/w/index.php?title=Andreas_Umland&action=history en]; the version that Tarabono created on eswiki ([[https://es.wikipedia.org/enwiki/w/index.php?title=Andreas_Umland&oldid=134014431 perma]), was brought in line on en by Inkitrinky, see [https://en.wikipedia.org/enwiki/w/index.php?title=Andreas_Umland&type=revision&diff=1013444064&oldid=994360564]. |
|||
*Nameitgood has also been involved in xwiki promotion: PL: [https://pl.wikipedia.org/enwiki/w/index.php?title=Mychaj%C5%82o_Fedorow&type=revision&diff=61977160&oldid=59019353][https://pl.wikipedia.org/enwiki/w/index.php?title=Mychaj%C5%82o_Fedorow&type=revision&diff=61988863&oldid=61980363][https://pl.wikipedia.org/enwiki/w/index.php?title=Mychaj%C5%82o_Fedorow&type=revision&diff=62001573&oldid=61992181] EN: [https://en.wikipedia.org/enwiki/w/index.php?title=Mykhailo_Fedorov&type=revision&diff=999873052&oldid=997421337] RU:[https://ru.wikipedia.org/enwiki/w/index.php?title=%D0%A4%D1%91%D0%B4%D0%BE%D1%80%D0%BE%D0%B2%2C_%D0%9C%D0%B8%D1%85%D0%B0%D0%B8%D0%BB_%D0%90%D0%BB%D1%8C%D0%B1%D0%B5%D1%80%D1%82%D0%BE%D0%B2%D0%B8%D1%87&type=revision&diff=112191947&oldid=111051564]) |
|||
*Shipalzya (Щіпальця) promoted [[Ihor Umansky]] on [https://uk.wikipedia.org/enwiki/w/index.php?title=%D0%A3%D0%BC%D0%B0%D0%BD%D1%81%D1%8C%D0%BA%D0%B8%D0%B9_%D0%86%D0%B3%D0%BE%D1%80_%D0%86%D0%B2%D0%B0%D0%BD%D0%BE%D0%B2%D0%B8%D1%87&type=revision&diff=31000267&oldid=30026719 uk], [https://ru.wikipedia.org/enwiki/w/index.php?title=%D0%A3%D0%BC%D0%B0%D0%BD%D1%81%D0%BA%D0%B8%D0%B9%2C_%D0%98%D0%B3%D0%BE%D1%80%D1%8C_%D0%98%D0%B2%D0%B0%D0%BD%D0%BE%D0%B2%D0%B8%D1%87&type=revision&diff=112974241&oldid=112841853 ru] and [https://en.wikipedia.org/enwiki/w/index.php?title=Ihor_Umansky&type=revision&diff=1012225212&oldid=999009693 en]. |
|||
*Pestrolim created, or attempted to create, articles about Igor Cherezov on [https://eo.wikipedia.org/wiki/Speciala%C4%B5o:Protokolo/Pestrolim eo], [https://cy.wikipedia.org/wiki/Arbennig:Log/Pestrolim cy] and [https://be.wikipedia.org/wiki/%D0%86%D0%B3%D0%B0%D1%80_%D0%AE%D1%80%E2%80%99%D0%B5%D0%B2%D1%96%D1%87_%D0%A7%D0%B0%D1%80%D1%8D%D0%B7%D0%B0%D1%9E be]. |
|||
The rest of the farm follows the same xwiki pattern; see e.g. the master [https://ru.wikipedia.org/wiki/%D0%9D%D0%B0%D0%B2%D1%80%D0%BE%D1%86%D0%BA%D0%B0%D1%8F,_%D0%9E%D0%BB%D1%8C%D0%B3%D0%B0_%D0%92%D0%BB%D0%B0%D0%B4%D0%B8%D0%BC%D0%B8%D1%80%D0%BE%D0%B2%D0%BD%D0%B0 here], [https://uk.wikipedia.org/wiki/%D0%9D%D0%B0%D0%B2%D1%80%D0%BE%D1%86%D1%8C%D0%BA%D0%B0_%D0%9E%D0%BB%D1%8C%D0%B3%D0%B0_%D0%92%D0%BE%D0%BB%D0%BE%D0%B4%D0%B8%D0%BC%D0%B8%D1%80%D1%96%D0%B2%D0%BD%D0%B0 here] and [https://en.wikipedia.org/wiki/Olga_Navrotska here]. There are some formatting quirks that all these accounts have (BEANS) that serve as additional evidence of socking. {{awaitingadmin}}{{snd}}please block {{noping|Tarabono00}}, {{noping|Inkitrinky}}, {{noping|Nameitgood}}, {{noping|Щіпальця}} and {{noping|Pestrolim}}. Thanks and best, [[User:Blablubbs|Blablubbs]]|[[User talk:Blablubbs|talk]] 19:04, 4 April 2021 (UTC) |
|||
* {{adminnote}} Blocked as requested - back to {{u|Blablubbs}}. [[User:Cabayi|Cabayi]] ([[User talk:Cabayi|talk]]) 11:19, 5 April 2021 (UTC) |
|||
----<!--- All comments go ABOVE this line, please. --> |
|||
Latest revision as of 03:50, 7 November 2021
Çelebicihan
Çelebicihan (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
For archived investigations, see Wikipedia:Sockpuppet investigations/Çelebicihan/Archive.
This SPI case may involve cross-wiki abuse. Please consider reporting the results on Meta; checkusers can send an email to the interwiki checkuser mailing list if required.