- Bodiadub (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Older archives were moved to an archive of the archive because of the page size and are listed below:
Suspected sockpuppets
[edit]See below. Bbb23 (talk) 17:00, 21 March 2019 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]See below. TonyBallioni (talk) 03:55, 22 May 2019 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Note that I think this is a firm of one or two people (consistent with Bbb23's results), but that the possibility does exist that this is the same person and there is more technical evidence tying the two groups than there was last time. I'm fine calling it the same sockfarm, however.
The following are
Confirmed to Group 2 from last time:
The following accounts are
Possilikely (a mix between possible and likely) to the above, but I've gone ahead and blocked because of the clear spamming and autoconfirmed gaming:
The following accounts are
Confirmed to one another and Group 1 from last time and I'd say
Possilikely (a mix between possible and likely) to first group here:
My suspicion is that this is a marketing firm or a bunch of freelancers working together, but putting it all under one case going forward makes sense. All
Blocked without tags.
Clerk assistance requested: Would a clerk move to Bodiadub? As that is the apparent oldest account and this has xwiki implications. Don't worry about the tagging. Thanks for your help :) TonyBallioni (talk) 04:05, 22 May 2019 (UTC)[reply]
- Thanks. Deleted everything I could under G5. I see that Bodiadub is blocked on the Russian Wikipedia for UPE, so this is likely a candidate for locking. MER-C 10:47, 22 May 2019 (UTC)[reply]
- I notified the global checkuser-l email list last night, and uk.wiki cus are aware of this and will be looking at it. TonyBallioni (talk) 12:25, 22 May 2019 (UTC)[reply]
Suspected sockpuppets
[edit]
Repost of PassivDom at Passivdom. MER-C 11:16, 13 July 2019 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]See below.
— Berean Hunter (talk) 21:53, 6 October 2019 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- @Berean Hunger and MER-C: Денис Секрета is indeed a false positive, also a coincidence. Others are still being investigated — NickK (talk) 21:10, 8 October 2019 (UTC)[reply]
- Unblocked. MER-C 09:57, 9 October 2019 (UTC)[reply]
- There is currently a thread at ANI that is about this sockmaster. Courtesy of NickK (thank you!), the uk.wiki checkusers have supplied us with this list of confirmed accounts. I have not checked them yet but will be. I thought that I would go ahead and get the accounts listed for others to start looking at their articles.
These accounts are currently stale:
These accounts do not exist on en.wiki but are used on other projects:
Like the above group, some of the following do not have edits on en.wiki. Group 2 are
Possible to the above group but need closer scrutiny:
Behavioural evidence needs evaluation
— Berean Hunter (talk) 15:05, 7 October 2019 (UTC)[reply]
- It was requested that we pursue a global ban instead. I've done some preparatory work on the preconditions, notification requirements (translations will be needed) and the proposal on the talk page but will be away for the next week with no certainty of being able to edit much (or at all) in that time.
- Pinging those involved so far - Bbb23, Berean Hunter, MER-C, ST47, TheSandDoctor, TonyBallioni
- -- Cabayi (talk) 07:09, 30 October 2019 (UTC)[reply]
- TheSandDoctor, The account was labeled by the Ukranian checkuser, NickK as a coincidence.
— Berean Hunter (talk) 17:00, 9 December 2019 (UTC)[reply]
- @Berean Hunter: My apologies for the mix-up. The rest of the question still stands, however. --TheSandDoctor Talk 23:07, 9 December 2019 (UTC)[reply]
- After conferring with User:Ruslik0, the account has been unlocked per your request. Apologies for the delay. --Green Giant (talk) 12:00, 13 December 2019 (UTC)[reply]
- Thank you, Green Giant! Happy holidays!
--TheSandDoctor Talk 02:57, 15 December 2019 (UTC)[reply]
Suspected sockpuppets
[edit]-- Amanda (aka DQ) 23:07, 1 July 2020 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Confirmed Speipk0, KressInsel, Bezirk34, Espenx22, Rommelnyk. The rest are supposedly related according to ukwiki CUs. -- Amanda (aka DQ) 23:10, 1 July 2020 (UTC)[reply]
Clerk assistance requested: - Case should be moved to Rommelnyk, which is the oldest account. TheSandDoctor Talk 23:42, 1 July 2020 (UTC)[reply]
- Note: per commonswiki CUs Speipk0 is related to Crazyalien. We already have Wikipedia:Sockpuppet investigations/Crazyalien — NickK (talk) 07:47, 2 July 2020 (UTC)[reply]
- NickK, do you have a link to their findings? GeneralNotability (talk) 17:07, 2 July 2020 (UTC)[reply]
- c:Special:Contributions/Speipk0 says that, check with local CUs to confirm. In parallel, I made a check in ukwiki and KressInsel matched Crazyalien. As Speipk0 matches KressInsel, they are clearly from the same family — NickK (talk) 17:35, 2 July 2020 (UTC)[reply]
Clerk note: I've talked to a couple of checkusers, and they've asked that we do an enwiki behavior check to connect these socks to Bodiadub before merging the cases. I will do the behavioral check tomorrow - if it comes up as "yes" I will merge to Bodiadub, else I will rename to Rommelnyk. GeneralNotability (talk) 02:00, 3 July 2020 (UTC)[reply]
Clerk note: I'll deal with moving these once we've dealt with the next group. GeneralNotability (talk) 01:56, 4 July 2020 (UTC)[reply]
Suspected sockpuppets
[edit]
-- Atlantic306 (talk) 22:03, 2 July 2020 (UTC)[reply]
- Wellring (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) has created a number of promotional articles on Ukranian companies and businessmen diff, diff, diff and others.He created NIX (company) that was later recreated after deletion by sp suspect Sorrow3. In the Wikipedia:Articles for deletion/NIX (company) Wellring opposed deletion diff as did blocked sp KressInsel diff. Wellring and KressInsel both edited Kvartal 95 Studio diff, diff. Wellring created Oleg Bakhmatyuk diff which was edited by sp suspect Diana Andrusiv diff. Also, don't know if this is significant but all of the following sign with two dashes: Wellring diff, KressInsel diff, Speik0 diff, Crazyalien diff, Rommelnyk diff, Diana Andrusiv diff, Sorrow3 diff, Bodiadub diff
Atlantic306 (talk) 18:43, 7 July 2020 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- I split the new potential socks into a new case so it's not confused and lost with the parts above. Courtesy ping: @Atlantic306: -- Amanda (aka DQ) 16:06, 3 July 2020 (UTC)[reply]
- Atlantic306, among the various names for the article, I see creations by the following users:
- Based on available evidence, possible Bodiadub connection, and suspicions of UPE,
Clerk endorsed checkuser for the second group, and sleeper check as well please. GeneralNotability (talk) 01:55, 4 July 2020 (UTC)[reply]
- Awangba Mangang is
Unrelated to everything. The other 4 have a generic geolocation to a capital, which I never trust (meaning it could come from anywhere in the country, all behind common UAs that are hard to seperate. So
Possible for those 4, use behavior. -- Amanda (aka DQ) 20:12, 7 July 2020 (UTC)[reply]
Clerk note: I'll take care of the blocking, tagging, etc. on this case. Posting here because it might take a little while and I don't want to edit-conflict with anyone.
- Oh what a tangled web we weave and all that. I'm going to trust the ukwiki CUs here (though I've marked anything they confirmed as "proven" since I don't know if enwiki CUs have verified that), since I've been told that they are very familiar with the Bodiadub case. As such, I have renamed the case.
- Group 1: the enwiki-CU-confirmed socks (Speipk0, KressInsel, Bezirk34, Espenx22, Rommelnyk) link to Bodiadub via KressInsel -> Crazyalien on ukwiki and possibly Speipk0 -> Crazyalien on commons (though the latter does not appear to be a CU block). There also appears to be overlapping edits with previous Bodiadub socks. Diana Andrusiv has overlap with the Bodiadub sock pile that is Beetroot AB. I am leaving the remainder of group 1 (43Darwing, Boeo3reng, F4Spacesnis, Nightwatcher2401, RomanKotlar, Lankastor) alone; most are stale and have no contribs, and the one that does have contribs (Lankastor) does not appear to have any overlap with Bodiadub.
- Group 2: behavior-only here.
- Awangba Mangang came back unrelated, they will be left alone.
- Koriandr12345 and Spiepk0 are highly likely to be working together (since one removed a UPE tag from the other's page) and Koriandr promotionally edited known Bodiadub targets Andrey Stavnitser and Darnitsa (pharmaceutical company)
- Лемберг is also very likely related since they posted exactly the same article as Koriandr12345 (DLC InterChem/Draft:DLC InterChem). There may also be a connection to Wikipedia:Sockpuppet_investigations/HenryFriedberg here, since I note that sockfarm has also been active on one of the pages they created (Boris_Lozhkin). I note that this account is actually older than Bodiadub, but I think Bodiadub is the name we all know so I'm not going to rename.
- I'm not as sure that Sorrow3 or Wellring are related to Bodiadub - I suspect that they're UPE, but am not confident enough to block. In particular, Sorrow3 has been translating articles from ukwiki, a behavior we haven't seen in previous socks, and Wellring is also doing a fair amount of translation and writing about historical topics.
- I have filed for global locks of the locally-confirmed socks. GeneralNotability (talk) 21:55, 7 July 2020 (UTC)[reply]
Suspected sockpuppets
[edit]
Significant overlap in articles edited, such as David Weild IV, Stephen Calk, Edward Banayoti, and Reputation management, sometimes adding similar content - compare this and this. Cordless Larry (talk) 15:21, 13 February 2021 (UTC)[reply]
- Both have also added external links to the same online reputation management company, here and here. Cordless Larry (talk) 15:56, 13 February 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
netreputation.com: Linksearch en (insource) - meta - de - fr - simple - wikt:en - wikt:fr • Spamcheck • MER-C X-wiki • gs • Reports: Links on en - COIBot - COIBot-Local • Discussions: tracked - advanced - RSN • COIBot-Link, Local, & XWiki Reports - Wikipedia: en - fr - de • Google: search • meta • Domain: domaintools • AboutUs.com
Clerk endorsed - endorse to find possible links to other cases / other accounts. Linkspamming on articles they have both edited. These two are
Looks like a duck to me. Blocking both indef for link spam / sockpuppetry without tags pending for CU. Dreamy Jazz talk to me | my contributions 22:50, 13 February 2021 (UTC)[reply]
Confirmed, plus:
- Stale but behaviorally similar: Maastricht Treaty (work of student M.Gibson) (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- It's possible that these are all meat puppets, but, behaviorally, this looks like a sock farm around Serghiy Hrabarook (talk · contribs) – see the user page. NinjaRobotPirate (talk) 00:21, 14 February 2021 (UTC)[reply]
Clerk note: I've moved this to Wikipedia:Sockpuppet investigations/Serghiy Hrabarook, and tagged everybody as suspected to that master. -- RoySmith (talk) 02:55, 14 February 2021 (UTC)[reply]
Clerk note: For the record, TKing2019 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) is probably part of the same spam farm (at least they spammed the same link to Reputation management), but is too stale to be worth blocking. Working on COIBot reports now. GeneralNotability (talk) 03:17, 20 February 2021 (UTC)[reply]
Suspected sockpuppets
[edit]Both accounts were created on 22 Feb. Your Personal Rooster made a few edits adding links to random articles, then produced the spammy article Wunder Mobility. I saw it in the NPP queue, and applied a G11 tag. Up popped Mistercashinskyi, which had not yet edited since being created, made a flurry of little edits and then removed the CSD tag. I suspect UPE, requesting CU to look for sleepers. GirthSummit (blether) 14:00, 28 February 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]UPE on Stephen Calk, including reuploading and reinserting the same copyvio image with different accounts [1][2][3]; IOTX (IOTX, Draft:IoTeX (2), Draft:IoTeX (3)); WOWCube (Draft:WOWCube (console), [4]) and Draft:ARDR.
May be related to Wikipedia:Sockpuppet investigations/Serghiy Hrabarook, who has also hit Stephen Calk heavily. MER-C 14:38, 1 May 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- Also found and
Confirmed:
- Polnock (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Eliasmsg (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- These accounts are
Possilikely (a mix between possible and likely) to the master based on geolocation and user agents. I'm not sure who Hrabarook is? The account doesn't seem to exist. Can someone help me out here? :-) ~Oshwah~(talk) (contribs) 01:45, 7 May 2021 (UTC)[reply]
- @Oshwah: Wikipedia:Sockpuppet investigations/Serghiy Hrabarook. MER-C 18:03, 7 May 2021 (UTC)[reply]
- Oshwah, would you mind comparing this group to Serghiy Hrabarook? There's at least one non-stale account (Spicy iPhone (talk · contribs)) in the archives. In any case,
Awaiting administrative action: Please block the confirmed socks indefinitely. --Blablubbs|talk 08:28, 9 May 2021 (UTC)[reply]
- I'd say that the two are
Likely. ~Oshwah~(talk) (contribs) 16:29, 9 May 2021 (UTC)[reply]
Suspected sockpuppets
[edit]
I noticed both Snarky tale and PatokaT created, in short succession, an article on a Ukrainian topic with an "in use" tag which I find very odd for users with this level of experience. I vaguely recall seeing similar behaviour from User:Rommelnyk on Kharkiv Bicycle Plant (which is G5ed, so can't give diff) or one of the other socks here. Both users are not new, using good formatting from the beginning. Both accounts are using the visual editor. The link to the previous accounts is based on similar subject matter (Ukrainian companies, personas, and other potentially promotional subjects). CU to help confirm possible link between accounts and to uncover additional accounts (which were uncovered by previous CUs). Eostrix (🦉 hoot hoot🦉) 09:08, 20 May 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]
Recreation of IoTeX (cryptocurrency) (see also the related Elrond (cryptocurrency)) and WOWCube (game console). MER-C 13:49, 12 June 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- Also found and
Confirmed to the above:
- Oxymyrron (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Ginsburg97 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Monterey09 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- MisterMLS (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Possible:
- Sirroneday (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Unrelated:
- ErrorFixinger (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- All accounts (with the exception of ErrorFixinger) geolocate to the same country and area as the master. ~Oshwah~(talk) (contribs) 06:01, 16 June 2021 (UTC)[reply]
Suspected sockpuppets
[edit]Low edit account (handful here, 152 edits on Ukranian Wikipedia) contesting G5 deletion ([5] , [6]) and restoring sockpuppet edits [7], [8], [9]).
Note they created the UFuture article on Ukrainian Wikipedia, however this article was suspiciously created by SPAs on the Polish Wikipedia (by Pan_Żabka) and Hebrew Wikipedia (by Mioorleen) which smacks of cross-Wikipedia coordination given the proximity and nature of accounts.
Also A1 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki) may merit attention (due to [10], [11]), but this is a much more established account on the Ukrainian Wikipedia and other projects, it isn't as suspicious.
I also want to point out that both A1 and Britt Wikström showing up in close proximity is suspicious (both accounts being mostly inactive on the English Wikipedia), though that may point at off-Wikipedia canvassing.--Eostrix (🦉 hoot hoot🦉) 08:28, 14 June 2021 (UTC)[reply]
- Adding that the Ukrainian UFuture page, as created by Britt Wikström (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), also had the in use tag (which is a sign of Bodiadub as above). Also the Hebrew and Polish pages (both created by SPAs) had the in-use tag added on creation.--Eostrix (🦉 hoot hoot🦉) 12:12, 14 June 2021 (UTC)[reply]
- The CA of Britt Wikström is similar to that of Sharky tale and PatokaT. All three accounts access Ukrainian, Russian, and English Wikipedias shortly after creation. All 3 add interlanguage links in Wikidata. Accessing the French Wikipedia is also shared amongst these three accounts.--Eostrix (🦉 hoot hoot🦉) 16:25, 14 June 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- Good day everybody. I need to say, that I was updating today the Ufuture article in Ukrainian wikipedia and also checked the English one and noticed it was proposed for deletion. Having read the rules I decided to contest it as well as some other good pages about local companies, some of which are defucnt (Lviv bus, Dnipro bus plant, Nadra bank). I created Ufuture in Ukrainian wikipedia so there is no strange action that I edited in in English wikipedia. Talking about my usage of "in use tag", it's quite popular in at least ukrainian wikipedia, as many newly published articles in our wikipedia are being heavily edited by other active wikipedia users, and without such a tag you can lose your edits. I created many articles in ukrainian wikipedia and all with this tag. it's more safe or something like that. I also noticed that some of my edits in Nadra bank and Kolchuga are still alive. thanks for that. I live in Kyiv, Ukraine and from my edit history in my local language wiki you can see what is my area of interests. Pardon If I didn't answer properly to accusations. Britt Wikström (talk) 15:35, 14 June 2021 (UTC)[reply]
- @Britt Wikström:, by many articles you mean five articles? In the span of 4 days? Also of note is that there is a paid disclosure on the Ukrainian Wikipedia: [12]. Five is a handful, not many, unless you have created many articles under other accounts on ukwiki? Certainly edit number 8, 40 minutes after account creation shows familiarity with Wikipedia formatting.--Eostrix (🦉 hoot hoot🦉) 15:45, 14 June 2021 (UTC)[reply]
- Also, the return to editing today 14 June, after a break of more than a month (last edit on 7 May, per global contributions), with a minor single minor edit to Ukrainian Wikipedia followed by a spate of support for a banned sock puppet on English Wikipedia 17 minutes later does not appear coincidental. All this coming two hours after the articles were tagged.--Eostrix (🦉 hoot hoot🦉) 15:57, 14 June 2021 (UTC)[reply]
- yes, five articles is a lot for me. I pointed in ukrainian wikipedia that I'm a paid contributor. I created a thematic list of articles about scientific parks and similar companies. And today I updated the ukrainian wiki page about the company and edited the english one, following the contest speedy deletion guideline. Don't see a problem at all. I see, that you are trying to accuse me at something, that I don't even understand. You are way much crossing the red line with bald accusations. I don't want to waste my time here. Have a nice evening. --Britt Wikström (talk) 16:47, 14 June 2021 (UTC)[reply]
- by the way, how many articles (not Talks and other technical stuff) did you create? Britt Wikström (talk) 16:52, 14 June 2021 (UTC)[reply]
- Six, a smirk more than a handful, yet far off from many.--Eostrix (🦉 hoot hoot🦉) 16:54, 14 June 2021 (UTC)[reply]
Suspected sockpuppets
[edit]
This was noticed by someone else first, received initial tip for this via e-mail, after analysis posting this here.
Topic overlap on Ukraine, and specifically Ukrainian politicians (GR: Vasyl Shevchuk, Yuriy Kostenko, Sharky Tale: Yuriy Bohutsky, Viktor Liashko) and organizations (GR: Association of Protected Areas of Ukraine, PatokaT :Prydniprovsky Chemical Plant radioactive dumps.
Similar CA data. Consider Golden Ranky's CA vs. Sharky Tale's CA. Both accounts created on uk.wiki, but go over to en.wiki as well attaching on the same date of creation. Both attach to wikidata and do their own wikidata edits. Both attach to ru.wiki. pl, es, and de Wikipedia are shared. hy.wiki can be found in Speipk0's CA.
All three recent socks create a short bland user page shortly after creation (to avoid being red linked): Golden Ranky's 2nd edit, Sharky Tale's 1st edit, PatokaT's 5th edit. All three are missing a period at the end of this blurb.
Ass previous sock, Golden Ranky creates pages with the in-use tag and leaves the in-use tag on the page when they are done with it: created with (left on last), created with (left on last).
CU unlikely to be conclusive (besides confirming geolocation), but miracles can happen. Eostrix (🦉 hoot hoot🦉) 06:57, 27 June 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]Possible sockpuppet; appears to have recreated Draft:Gismart following its previous G5 deletion. Nathan2055talk - contribs 16:33, 18 August 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- They're certainly a sock of Golden Ranky who is suspected of being a Bodiadub sock (see archives). G5'd and salted Draft:Gismart. I've also located a bunch of other likely G5 targets, but don't have the time to go through them all. If somebody is looking for something to do to help SPI, checking all of these and tagging for G5 as appropriate would be really helpful:
Suspected sockpuppets
[edit]
Asketbouncer came to my attention with disruptive AfD nominations from the 28th of September with copy-pasted rationales ([13], [14], [15], [16], and this one in which CORPDEPTH was argued for a biography). Upon looking at the account deeper, they have many Bodiadub similarities in the earlier editing career, prior to the recent 2021 editing on AfD. On the CA data, they have a similar mix of projects with editing both on uk.wiki and here as well as connections to multiple projects. In terms of articles, they seem to be editing biographies with bare notability that prone for promotional content, cultural subjects (in this case many Ukranian awards), and organizations (e.g. Ternopil Historical-Memorial Museum of Political Prisoners).
Considering the subject matter (borderline notability organisations and biographies), it is not surprising that Bodiadub might want an account active at AfD.
As with previous Bodiadub socks they are creating articles with an in-use tag, e.g. [17], [18], which they don't always remove themselves.
The account is familiar with proper reference formatting from their 2nd edit, and first article creation (~30th edit). This familiarity with references does not arise from their uk.wiki editing, as their first edit there was less than an hour prior to their first en.wiki editing (on uk.wiki they also formatted references properly in their first edits).
I am not asking for CU as previous CUs were useless (beyond general geolocation, and the Ukraine connection here is obvious), but it may be worth a CU. Eostrix (🦉 hoot hoot🦉) 07:37, 29 September 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]Unlocked but stale (update: now locked):
New accounts (15 October):
Usual modus operandi of Bodiadub's cross-wiki PR spam: Update an Ukrainian article with promotional spam and then create a perfect English translation full of spammy PR phrasing, usually done with visual editing. There are other telltale signs which experienced folks here should know about, but due to WP:BEANS I won't be saying much more here. uk:User:Кен Гінг created the uk.wiki version of Igor Mezencev just last month, which was then created by Ofkro Trun this month. Ofkro Trun also created the spammy-looking Marco Cervetti as a "translation." HᴇʀᴘᴇᴛᴏGᴇɴᴇꜱɪꜱ (talk) 06:34, 11 October 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- Note that Asketbouncer was (in appeal after block in this case) CUed by Yamla (further check by SQL), both CUs concurring they are
Confirmed to Golden Ranky (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). I was skeptical of CU being useful here, but it did confirm that account, so there might be other crosses here.--Eostrix (hoot, hoot!) 19:39, 15 October 2021 (UTC)[reply]
Relisted per MER-C's request (18:13, 22 October 2021). —Mdaniels5757 (talk • contribs) 20:38, 26 October 2021 (UTC)[reply]
- @Blablubbs: Not sure whether I should change the status to "CheckUser requested" or create a new report entirely, but noting that I've found Byzantine666 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki), whom I'm confident is Qiarring31 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki). See Draft:Caron Treatment Centers, which I moved to the draftspace. There are some behavioural clues as well, but I'll be happy to disclose them if you don't think they're obvious or violate BEANS. Sdrqaz (talk) 19:08, 4 November 2021 (UTC)[reply]
- It's them. I haven't followed this through except to request locking. MER-C 08:26, 11 October 2021 (UTC)[reply]
Clerk endorsed for a sleeper check if practical; I trust MER-C's judgment here. GeneralNotability (talk) 16:26, 13 October 2021 (UTC)[reply]
- I've blocked a lot of socks over the last two weeks, which I have listed above. I don't expect anything useful to turn up but they've been sitting on SRG unactioned for up to two weeks now. Putting them here may get them locked faster. MER-C 16:57, 13 October 2021 (UTC)[reply]
- All accounts above locked. Adding a bunch of accounts, see m:Talk:Wikiproject:Antispam#Wikibusiness. MER-C 14:53, 16 October 2021 (UTC)[reply]
- MER-C, if you take a look at [19], they list multiple articles in "our portfolio" from en.wiki, including Wizz Air, Nemiroff, Bolt (company), Kyiv Post, Nova Poshta, and Beyond Meat. Beyond Meat has several COI tags, but other articles have not been flagged. Based on checking out page histories, other associated accounts to consider under this umbrella are Special:Contributions/Zymiv, Special:Contributions/Dariastaverska and Special:Contributions/Bsbonner especially; not sure about Special:Contributions/Szefato. SpencerT•C 22:01, 18 October 2021 (UTC)[reply]
- I wouldn't count on spammers to be honest, especially these spammers. MER-C 12:05, 19 October 2021 (UTC)[reply]
In progress - -- RoySmith (talk) 17:48, 18 October 2021 (UTC)[reply]
- I poked around a bit. Not surprisingly, this is complicated and I didn't make much progress, so I'll just put this back to endorsed and let somebody else pick it up. -- RoySmith (talk) 18:33, 18 October 2021 (UTC)[reply]
- I found a few possible socks, but I'd like to see if someone more familiar with this user is able to look at their edits and see whether they are likely to be socks, or not. @MER-C:, @Herpetogenesis:, I think that might be you :) Here are some accounts that are technically
Likely:
- If these behaviorally seem to be Bodiadub as well, then they should be blocked and locked as well. ST47 (talk) 18:19, 20 October 2021 (UTC)[reply]
- Blocked:
- Lefik Nidzinsky
- Axel Blom
- Roko Inki
- MugManug
- Lesli Strong
- Panna Lang
- Scooter Packs
- Additional accounts not listed here:
- Additional cross-wiki accounts:
- Already locked:
- The remaining accounts are possible. I haven't finished looking yet, I'm out of time. MER-C 18:51, 20 October 2021 (UTC)[reply]
- Didn't find anything else. Relist please. MER-C 18:13, 22 October 2021 (UTC)[reply]
- While checking MER-C's latest list, I found that:
- Redminote008 and ArgentinenaTao are
Confirmed to each other, and blocked the following other socks on the same IP: Qiarring31, SteffanOlsen902, ACCD2021, Albemic, Pittsbilly, BilIyatthewheels, Diormica, and Rerando. Unclear if they are Bodiadub or someone else.
- Zeroinchy0 led me to the following socks that are
Likely to my long list above:
- Some additional re-checking also led me to the following accounts, that are also
Likely to my long list above:
- All blocked. ST47 (talk) 20:46, 26 October 2021 (UTC)[reply]
- Bodiadub is known to use subcontractors, Qiarring31 et al are different behaviorally. Their edits are still spam.
- Trutholder is a match to a previous article. Розовое небо, Ian Stems, BelSpaniel89 are unambiguous behavior matches. In addition, there are three more accounts, all with zero edits:
- This is the end of the trail, unless someone wants to look for more. Please send all for locking to SRG, I have an existing request open outstanding for 11 days now. MER-C 17:20, 27 October 2021 (UTC)[reply]
- One stray sock (no edits here, listing for the record). MER-C 08:51, 29 October 2021 (UTC)[reply]
Please merge Wikipedia:Sockpuppet investigations/Serghiy Hrabarook here per [20] and Special:CentralAuth/Serghiy Hrabarook. MER-C 09:46, 30 October 2021 (UTC)[reply]
- @MER-C: Do we actually think this is the same individual/that they share a technical profile? I remember a case merge that was based on T&S case number that backfired a fair bit because they were tracking a distributed meatfarm (whose individual members were also socking) under a single identifier. --Blablubbs (talk) 10:29, 30 October 2021 (UTC)[reply]
- The behaviors I am tracking as Bodiadub aren't in Serghiy Hrabarook. But when I initially saw the locking of Serghiy Hrabarook as a globally banned user I thought of this user. What we call Bodiadub is already at least two people; they are business partners. I think it is a fair interpretation that their entire company is banned. MER-C 13:15, 30 October 2021 (UTC)[reply]
- Hm. I'd be inclined to keep them separate if the two farms are technically and behaviourally distinct, even if the WMF is tracking them as one entity – especially as time goes on, people will probably forget that there are two separate clusters, and my worry is that that may lead to false negatives. --Blablubbs (talk) 22:15, 30 October 2021 (UTC)[reply]
- As far as I can tell, we're done here. Closing. -- RoySmith (talk) 01:31, 29 November 2021 (UTC)[reply]
Suspected sockpuppets
[edit]See Special:Diff/1053581355 by Sdrqaz. Filing this in a new case to keep the previous filing from growing even larger. --Blablubbs (talk) 14:25, 6 November 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]- Not stale
Added later:
- Probably stale
- Not registered locally
Separate from case above, new findings on Simple English Wikipedia (see m:Talk:Wikiproject:Antispam#Bodiadub). MER-C 12:26, 14 November 2021 (UTC)[reply]
- Add accounts found on Wikidata. MER-C 09:18, 15 November 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- MER-C, ST47, I have so much respect for you, handling such huge cases. I ran CU on one and that got out of hand almost immediately. I did block User:Al friendster after plowing through the history of Andriy Zagorodnyuk--but that's just a tiny little thing. Good luck with it, and thanks again. Drmies (talk) 18:27, 19 November 2021 (UTC)[reply]
- Yup. Let me quote from my recent trainee notes to Jack Frost:
I keep going back and looking at, say, Bodiadub, and saying, “Ugh, I just can’t’ deal with this” and look at something else.
Thank you for willing to go where others dare not tread. -- RoySmith (talk) 19:16, 19 November 2021 (UTC)[reply]
- Yeah. So I checked five of them real quick, and there's nothing to see on those individual IPs. Only one that had something was User:Уилл свободный, where another account, User:Rising Hand, was created--but that was months ago and there's nothing there. The IPs are all over the place, and in my five there are no close ones so I can't search a range, except for the /16 ranges which are full of accounts. This needs real experts, people who can keep all this together and combine a ton of info (and a ton of screens). Sorry. Drmies (talk) 21:11, 19 November 2021 (UTC)[reply]
Clerk endorsed - per the above. TheSandDoctor Talk 18:57, 28 November 2021 (UTC)[reply]
- Oh dear Lord, here we go...
In progress. ~Oshwah~(talk) (contribs) 05:40, 3 December 2021 (UTC)[reply]
Likely:
- Скаль Джок (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Helvisss0 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Adrian Ivanesky (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Chiara Gruber (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Sheetposting (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Loera Dif (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Good Bad Karma (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- DoorKeats (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- RagsCuttern (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Kokakyka (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Bulls Rares Fiondo (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Fundamental5555 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Prey Wota (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Inconclusive:
- DeadHeadMad (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Sheetposting (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Olga Chyi (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Уилл свободный (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Arsen Petrov (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Фридрик Фредрик (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Archi Swab (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Closter Frau (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Jeroen Haas (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Baked Bar (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Lecz Ka (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Stale - no available data:
- Abbat Abbot (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Lucky Svamp (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- InAFlowX2 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Iren Sm (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- ColineDrocks (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- BellyS22 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- PinnyWoo (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Simple Rimple (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Boltik1 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Snoop Jaime (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Christoferr Ayyon (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Urals Sport (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Ivoryepic (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Гульнара Лейдер (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Marcys Lag (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- SDD sj (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Mews Rages (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Pinogina222 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Samir Bitorik (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- AriskaMoldok9 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- RushKaunter (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Liv Lundin (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Taras Slovotvir (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Ann Voloshina (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
Declined - no local account:
- Ricardo Boli (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Closss4 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Rozhenyuk Alexander (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Peuceet (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Saxon Jason (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Jilli Hill (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Prose Waded (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Spurt Sur (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Wash Ash (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Totem Zlato (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- Blocking all accounts that I found to be
Likely that aren't already blocked, and tagging. Closing SPI... ~Oshwah~(talk) (contribs) 08:49, 3 December 2021 (UTC)[reply]
Suspected sockpuppets
[edit]The usual WowCube and cryptocurrency crap (see deleted contributions). Korol Memov is the SPA author of the Russian article added here. MER-C 12:17, 20 November 2021 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
This case is being reviewed by Jack Frost as part of the clerk training process. Please allow him to process the entire case (including admin actions against suspected socks) without interference, and pose any questions or concerns either on his talk page or on this page if more appropriate.
Suspected sockpuppets
[edit]User:Endeavor.Morse created Tomas Fiala, the CEO of Dragon Capital (company), a Ukrainian investment management company created by User:Wellring, a Bodiadub sock. Has all the telltale signs of the Bodiadub Ukrainian spam operation. HᴇʀᴘᴇᴛᴏGᴇɴᴇꜱɪꜱ (talk) 20:46, 13 January 2022 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Suspected sockpuppets
[edit]AlexArcherfrom has overlap with User:Ian Stems (previously blocked sock) on Intetics, as well as Melsoft Games with sock User:Sorrow3, among others; the editing patterns of AlexArcherfrom also resemble those of other socks, such as an interest in pages on companies and businesspeople, and adding covert advertising in a way that is very reminiscent of Bodiadub (which I won't mention for good reason). ArgonPrime2077 has similar editing patterns as well as overlaps with AlexArcherfrom. Pinging @MER-C: who is an expert at detecting Bodiadub socks. Also requesting CU as it seems to have been a while since the last filing. JavaHurricane 11:09, 7 February 2022 (UTC)[reply]
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
- Add:
- Fairou (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)
- for intersection on Softeq (see ). MER-C 14:00, 7 February 2022 (UTC)[reply]
Clerk endorsed - The observed pattern of behaviour and overlap on a number of not overly popular pages is enough to warrant a check considering the archive. --Jack Frost (talk) 19:00, 7 February 2022 (UTC)[reply]
In progress - -- RoySmith (talk) 22:42, 7 February 2022 (UTC)[reply]
Inconclusive
Behavioural evidence needs evaluation As drmies said back in November, "The IPs are all over the place". And on top of that, I don't have much to compare to; a handful of non-stale suspected socks in the archive and some notes in cuwiki. Nothing matches anything, and I don't have much faith that I can believe any of the data anyway. The best I can give you is that the IPs for these new accounts all geolocate to the kinds of places you would expect for somebody writing about Russian and Ukrainian topics. -- RoySmith (talk) 23:05, 7 February 2022 (UTC)[reply]
- Blocked, tagged, closing. MER-C 19:23, 8 February 2022 (UTC)[reply]
- ((GlobalLocksRequested, archiving. Spicy (talk) 00:39, 11 February 2022 (UTC)[reply]