(→Comments by other users: added more) |
|||
Line 69: | Line 69: | ||
::*I presume you are asking of editing on [[Gulag]]. On that note, I also checked out a few other IPs that edited [[Gulag]] at around the same time as the problematic IPs you've listed. {{ip|98.175.61.198}} is labeled as a proxy and VPN by IPQualityScore, and the IP is based in the United States. |
::*I presume you are asking of editing on [[Gulag]]. On that note, I also checked out a few other IPs that edited [[Gulag]] at around the same time as the problematic IPs you've listed. {{ip|98.175.61.198}} is labeled as a proxy and VPN by IPQualityScore, and the IP is based in the United States. |
||
::Is there a particular user that you suspect these IPs to be linked to? I'm not seeing any obvious connections to any of the users listed in this investigation. — [[User:Mikehawk10|Mikehawk10]] ([[User talk:Mikehawk10 |talk]]) 01:10, 3 June 2021 (UTC) |
::Is there a particular user that you suspect these IPs to be linked to? I'm not seeing any obvious connections to any of the users listed in this investigation. — [[User:Mikehawk10|Mikehawk10]] ([[User talk:Mikehawk10 |talk]]) 01:10, 3 June 2021 (UTC) |
||
::* Thank you! This is a difficult question. In fact, this bunch of IP acted more in the interests of {{noping|Mhorg}}, but I think it was {{noping|PailSimon}}. If I remember correctly, at that moment they supported each other. But the real picture of the relationship between master and puppets can be much more complex.-- [[User:Nicoljaus|Nicoljaus]] ([[User talk:Nicoljaus|talk]]) 07:21, 3 June 2021 (UTC) |
|||
:Elsen Eor is not here to improve WP. The replacement of Putin by Tutu [https://en.wikipedia.org/w/index.php?title=Assassination_of_Anna_Politkovskaya&diff=prev&oldid=1012923623] (''presumably'' their first edit in the project, sure, it was not the first) was meant as an irony/fun, just as edit summary here [https://en.wikipedia.org/w/index.php?title=Roman_Protasevich&diff=prev&oldid=1026054704] ("I have to go to bed"). [[User:My very best wishes|My very best wishes]] ([[User talk:My very best wishes|talk]]) 13:41, 2 June 2021 (UTC) |
:Elsen Eor is not here to improve WP. The replacement of Putin by Tutu [https://en.wikipedia.org/w/index.php?title=Assassination_of_Anna_Politkovskaya&diff=prev&oldid=1012923623] (''presumably'' their first edit in the project, sure, it was not the first) was meant as an irony/fun, just as edit summary here [https://en.wikipedia.org/w/index.php?title=Roman_Protasevich&diff=prev&oldid=1026054704] ("I have to go to bed"). [[User:My very best wishes|My very best wishes]] ([[User talk:My very best wishes|talk]]) 13:41, 2 June 2021 (UTC) |
||
:MPSCL - the evidence here is not so much editing overlap and identical edits (although there are such), as very long identical editing summaries. Same with Mhorg, although the overlap in editing summaries here (see above) is smaller and less conclusive. All these accounts act as a "team". Two of these accounts are presumably "new" and two are only occasionally active.[[User:My very best wishes|My very best wishes]] ([[User talk:My very best wishes|talk]]) 13:41, 2 June 2021 (UTC) |
:MPSCL - the evidence here is not so much editing overlap and identical edits (although there are such), as very long identical editing summaries. Same with Mhorg, although the overlap in editing summaries here (see above) is smaller and less conclusive. All these accounts act as a "team". Two of these accounts are presumably "new" and two are only occasionally active.[[User:My very best wishes|My very best wishes]] ([[User talk:My very best wishes|talk]]) 13:41, 2 June 2021 (UTC) |
Revision as of 07:21, 3 June 2021
MPSCL
- MPSCL (talk · · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser (log) · investigate · cuwiki)
31 May 2021
– A user has requested CheckUser. An SPI clerk will shortly look at the case and endorse or decline the request.
Suspected sockpuppets
- CPCEnjoyer (talk · · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser (log) · investigate · cuwiki)
- BSMRD (talk · · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser (log) · investigate · cuwiki)
- Elsen Eor (talk · · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser (log) · investigate · cuwiki)
- Mhorg (talk · · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser (log) · investigate · cuwiki)
- 194.44.36.31 (talk · · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser (log) · investigate · cuwiki)
- 41.210.154.194 (talk · · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser (log) · investigate · cuwiki)
- Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.
- CPCEnjoyer (edit summary: "It does not matter what Azov Battalion claims they are, they have been described as neo-nazi by reliable sources."; 14:27, 26 May 2021), MPSCL (edit summary: "It does not matter what Azov Battalion claims they are, they have been described as neo-nazi by reliable sources.", 14:45, 26 May 2021)
- All four accounts edit war to keep same content on same page: Mhorg (edit summary: The Italian and French sources clearly say ...), BSMRD - CPCEnjoyer MPSCL (edit summary: The Italian and French sources clearly say..). Note that they are also supported by Elsen_Eo that looks like a "disruption only" account.
- Edit by BSMRD compare to edit by CPCenjoyer - this is painting RFE/RL and related organizations as "propaganda" organizations
- Compare edit summaries here (BSMRD) and here (Elsen_Eor). Based on edits and timing, there is a coordination. Elsen_Eor is apparently just another "throw away" account.
- The history of first three accounts (note that all of them have few edits):
- [1] - MPSCL resumed activity after several months, specifically to disparage Roman Protasevich [2]. This account has only around 1,200 edits since 2007.
- [3] - BSMRD started editing in this April, has few edits, specifically to support positions by Chinese government [4],[5] and more recently to disparage Roman Protasevich (it has less than 200 edits)
- [6] - CPCEnjoyer was created in this April, specifically to support positions by Chinese government [7] and more recently to disparage Roman Protasevich (it has less than 200 edits)
— Preceding unsigned comment added by My very best wishes (talk • contribs) 16:47, 31 May 2021 (UTC)
- edit by Mhorg (edit summary: "The Italian and French sources clearly say that the one in the photos is him (there is no "allegedy"), please respect international journalists.") - compare to this edit by MPSCL - same edit summary ("The Italian and French sources clearly say that the one in the photos is him."). Note that MPSCL mentioned Mhorg in their edit summary. It might be possible that MPSCL copy-pasted edit summary by Mhorg, but I can't say how likely that might be.
- Compare this edit by Mhorg (including new ref to "The Nation") and by CPCEnjoyer, i.e. restoring very same ref to "The Nation", although it is no longer needed for referencing. However, Mhorg did notify other accounts by postings on-wiki: [8],[9], so perhaps this is more an "on-wiki" coordination. This is hard to say.
- Note edits by IP:194.44.36.31.
It is geographically not far fromand by this IP. Both came from Ukraine. Their actions seem to be coordinated with named accounts above. My very best wishes (talk) 21:06, 31 May 2021 (UTC) Both IPs are likely same person based on these diffs: [10], [11] - posting bare title plus link without "[]". My very best wishes (talk) 23:22, 31 May 2021 (UTC)
- In response to this SPI request BSMRD doubles down on their editing of RFE/RL right now [12]. Same strong bias was evident for CPCEnjoyer who earned an ANI complaint for editing Radio Free Asia [13]. My very best wishes (talk) 20:53, 31 May 2021 (UTC)
- Conclusion. Based on their overall behaviors and reactions to this SPI request (which are exactly identical for two accounts), I have no doubt that CPCEnjoyer and BSMRD is the same person who pretend to be two different people by interacting with each other. This is WP:DUCK. As about other accounts - please see evidence/diffs above. They can be different people only if CPCEnjoyer/BSMRD intentionally copy-paste their editing summaries to make them appear as the same person. But it can't be the case for MPSCL (please see the timing of first two diffs in this request). Also, I never saw that before. My very best wishes (talk) 11:42, 1 June 2021 (UTC)
- Speaking on behavior, all these accounts are focused on POV editing not just one page (Protasevich), but a specific aspect of this page they edit war about (diffs above). I mean they are focused on promoting the idea that Protasevich is allegedly a collaborator of Ukrainian neo-Nazi (the claim is false or at least unsupported by RS). They are focused on this so much that the dispute migrated to another page, Azov battalion, where three of these accounts supported each other by voting on an RfC. My very best wishes (talk) 16:08, 1 June 2021 (UTC)
- Note this series of edits by Elsen Eor and supporting IPs [14],[15],[16],[17]. Perhaps this is not the same person, but someone who decided to "join the party". This is hard to say with so few edits.My very best wishes (talk) 16:03, 1 June 2021 (UTC)
Comments by other users
Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
Comments from another editor:
- The two IPs are from different geolocations. The Ukranian IP (which notified the users) is flagged as an abused IP that serves as a VPN/proxy by IPQualityScore and it is listed on a few spam blacklists, as far as I can tell. The Ugandan IP (which posted on the talk page of My very best wishes and reverted a bunch of their edits) also appears to be on at least one spam blacklist. It's quite possible that someone is using proxies here.
- Regarding the PailSimon SPI stuff particularly, it doesn't appear that My very best wishes was alone in that suspicion. At the archive of the ANI thread at which PailSimon was indefinitely banned per WP:NOTHERE, you'll notice that there was at least one other editor besides My very best wishes shared concerns about possible sockpuppetry.
- I don't think MPSCL is a duck here; they seem to be the least like the other editors on this page in terms of overlap.
- Regarding Elsen Eor, in particular, I am strongly concerned regarding the use of proxies and IPs as socks. My reasoning follows from the status of each of the four IPs that came to back up their edits on the Assassination of Anna Politkovskaya article. The following pattern indicates a use of proxies and a mobile device in association with the user's edits. While I understand that a checkuser cannot formally comment due to privacy policy concerns except in exceptional circumstances, the following demonstrates a preponderance of the evidence that the edits constitute the use of IPs as sockpuppets. The edits made by suspected IP sockpuppets and Elsen Eor are as follows (UPDATE: after reviewing additional edits, I have revised the below list to include an additional edit that follows this pattern):
- Elsen Eor, in March, makes an edit that replaced the name of "Vladimir Putin" with that of "Desmond Tutu".
- 64.62.219.153 (talk · contribs · WHOIS) flags as a proxy (on proxycheck.io, GetIPIntel, and IPQualityScore) and was responsible for this edit that replaced the name of "Vladimir Putin" with that of "Desmond Tutu". The ISP is listed as "Hurricane Electric". The edit is made in May. This is the same edit that Elsen Eor had previously made to the page in March.
- Elsen Eor made this edit, which each removed a section involving the association of the date of the assassination with the birthday of Vladimir Putin.
- 66.160.164.174 (talk · contribs · WHOIS) flags as a proxy (on proxycheck.io, GetIPIntel, and IPQualityScore), and was responsible for this edit to the page, replacing the name of "Vladimir Putin" with that of "Desmond Tutu". The ISP is listed as "Hurricane Electric". This is the same edit that Elsen Eor had previously made to the page in March and that contributions had made in May.
- Elsen Eor made this edit, which each removed a section involving the association of the date of the assassination with the birthday of Vladimir Putin.
- 92.184.100.180 (talk · contribs · WHOIS) does not flag as a proxy, but it is responsible for this edit, which removed a section involving the association of the date of the assassination with the birthday of Vladimir Putin. It was the exact same section as was deleted by Elsen Eor. The ISP is listed as "Orange France Mobile".
- 74.82.18.195 (talk · contribs · WHOIS) does flag as a proxy (on proxycheck.io, GetIPIntel, and IPQualityScore), and was responsible for this edit, which removed a section involving the association of the date of the assassination with the birthday of Vladimir Putin. It was the exact same edit that was made by 92.184.100.180. The ISP is listed as "Hurricane Electric".
- Based upon this pattern of behavior and the public technical evidence, this looks like a heck of a lot like coordinated effort by a single actor. I'd support My very best wishes's assertions that Elsen Eor is related to the IPs in some way that constitutes prohibited sockpuppetry. However, if the user is pulling proxy stunts like this, I'd also be concerned regarding the possibility that this is a highly sophisticated WP:LTA case.
To the checkuser, if you would be able to explore if any other users listed on this page use the same proxy service (as defined by the "Hurricane Electric" ISP), it would be helpful as far as technical evidence goes for seeing if there exists coordination between Elsen Eor and any other editors listed here. — Mikehawk10 (talk) 04:33, 2 June 2021 (UTC)
- Regarding the updates above, I added an edit made in March by Elsen Eor. The edit includes the same birthday substitution as done by the IPs, and this similarity is one that is extremely unlikely to be independently replicated. When taken in combination with the evidence of proxy use, Looks like a duck to me. (updates made — Mikehawk10 (talk) 03:30, 3 June 2021 (UTC))
- Great job. Can you say something about these IPs? 90.226.7.90, 188.148.132.176, 49.145.131.43?--Nicoljaus (talk) 13:21, 2 June 2021 (UTC)
- @Nicoljaus:
- IPQualityScore flags 90.226.7.90 (talk · contribs · WHOIS) and 188.148.132.176 (talk · contribs · WHOIS), as proxies. A WHOIS lookup reveals that both of these IPs belong to Swedish corporations.
- 49.145.131.43 (talk · contribs · WHOIS) is an IP address from the Philippines that does not flag as a proxy.
- Both 188.148.132.176 (talk · contribs · WHOIS) and 49.145.131.43 (talk · contribs · WHOIS) appear on a Spamhaus blacklist (links: 188.148.132.176, 49.145.131.43).
- I presume you are asking of editing on Gulag. On that note, I also checked out a few other IPs that edited Gulag at around the same time as the problematic IPs you've listed. 98.175.61.198 (talk · contribs · WHOIS) is labeled as a proxy and VPN by IPQualityScore, and the IP is based in the United States.
- Is there a particular user that you suspect these IPs to be linked to? I'm not seeing any obvious connections to any of the users listed in this investigation. — Mikehawk10 (talk) 01:10, 3 June 2021 (UTC)
- Thank you! This is a difficult question. In fact, this bunch of IP acted more in the interests of Mhorg, but I think it was PailSimon. If I remember correctly, at that moment they supported each other. But the real picture of the relationship between master and puppets can be much more complex.-- Nicoljaus (talk) 07:21, 3 June 2021 (UTC)
- @Nicoljaus:
- Elsen Eor is not here to improve WP. The replacement of Putin by Tutu [18] (presumably their first edit in the project, sure, it was not the first) was meant as an irony/fun, just as edit summary here [19] ("I have to go to bed"). My very best wishes (talk) 13:41, 2 June 2021 (UTC)
- MPSCL - the evidence here is not so much editing overlap and identical edits (although there are such), as very long identical editing summaries. Same with Mhorg, although the overlap in editing summaries here (see above) is smaller and less conclusive. All these accounts act as a "team". Two of these accounts are presumably "new" and two are only occasionally active.My very best wishes (talk) 13:41, 2 June 2021 (UTC)
Comments by accused parties
BSMRD
Just because people disagree with you doesn't mean it's a conspiracy, quite frankly I don't really care about Protasevich I mostly popped in because it was a current event, and at this point I'm more concerned abut the efforts to whitewash the Azov Battalion that sprung out of that article, an effort whose most vociferous supporter I might add, is you. I reverted your edit because multiple editors have told you to wait for the talk page to reach a conclusion, just because people agree doesn't mean they are the same person. I don't see how the comparison of my reversion of your repeated edit and Elsen's prove anything, other than that we both disagree with you and think you should wait. As for RFE/RL, I added one line about how multiple observers have called RFE/RL US propaganda(did not use wikivoice), which is a true statement. If you would like I can tell you all about how real of a person I am, but I don't see much point. BSMRD (talk) 17:29, 31 May 2021 (UTC)
- Just chiming in again here, since CPC and I are "definitely the same person" because we talk to each other, which somehow proves we are actually faking(seriously this conspiratorial nonsense is ridiculous), here[20] is a link to the Azov RfC Discussion(basically the only place we have directly communicated that I can think of aside from a joke on their talk page) where we disagree with each other(minorly, but still). For your own sake, please drop this, it's extremely embarrassing. While I'm here, I am curious about the IP that pinged us all though, it is a bit strange that that is all they have done.BSMRD (talk) 14:23, 1 June 2021 (UTC)
- Edit again,
Conclusion. Based on their overall behaviors and reactions to this SPI request (which are exactly identical for two accounts), I have no doubt that CPCEnjoyer and BSMRD is the same person who pretend to be two different people by interacting with each other
Called it in my edit summary lmao. [21] BSMRD (talk) 01:22, 2 June 2021 (UTC)
- Edit again,
CPCEnjoyer
Sad that sockpuppet investigations have been reduced to "multiple editors disagree with me, therefore they must be the same person". I am not a sockpuppet of anyone, nor is anyone my sockpuppet. CPCEnjoyer (talk) 17:19, 31 May 2021 (UTC)
- I have decided that I will indulge in answering all of your allegations:
CPCEnjoyer (edit summary: "It does not matter what Azov Battalion claims they are, they have been ..."), MPSCL (edit summary: "It does not matter what Azov Battalion claims they are, they have been...")
Another person used the same edit summary, do not see how that is any proof.All four accounts edit war to keep same content on same page: Mhorg, BSMRD - CPCEnjoyer MPSCL. Note that they are also supported by Elsen_Eo that looks like a "disruption only" account.
This is usually the case when you only accuse people who disagree with you.Edit by BSMRD compare to edit by CPCenjoyer - this is painting RFE/RL and related organizations as "propaganda" organizations
The exact/similar wording was added by another editor, Volteer1 on Radio Free Asia page, so I assume BSMRD just copied it from there, also there is a month gap between those edits, if I really wanted to edit that onto Radio Free Liberty, I would have done it myself.[5] - CPCEnjoyer was created in this April, specifically to support positions by Chinese government [6] and more recently to disparage Roman Protasevich.
These are simply unfounded allegations, I do not go around claiming you are white-washing ukrainian war-crimes and creating anti-russia articles, even though I easily could and I wouldn't be lying either. [22]edit by Mhorg (edit summary: "The Italian and French sources clearly say that the one in the photos is him (there is no "allegedy"), please respect international journalists.") - compare to this edit by MPSCL - same edit summary[...]
I assume this is the same situation as with me.Compare this edit by Mhorg (including new ref to "The Nation") and by CPCEnjoyer, i.e. restoring very same ref to "The Nation", although it is no longer needed for referencing [...]
That source was originally a part of the lead, I assume that's why he put it further down the article, after it was removed. I restored it to the lead as well.Note edits by IP:194.44.36.31. It is geographically not far from this IP. Their actions seem to be coordinated with named accounts above.
Yes, one thousand kilometres, definitely not "geographically far".
- All in all, these allegations are unfounded, but that seems to be the norm on Wikipedia. CPCEnjoyer (talk) 19:36, 31 May 2021 (UTC)
Mhorg
I do not know much about these other users, as for the allegations against me, I do not expect anything other than actions of this type from "My very best wishes". First of all "disparage Roman Protasevich", no, it is the brought sources that cast shadows on the character. The fact that the user can't even recognize this tells of his political battle mindset. I don't know if this is the place to put certain arguments, I would just like to remind you what kind of user is this:
- Gordimalo\LauraWilliamson collaborates on an article with My very best wishes[23]
- Gordimalo\LauraWilliamson tries to get me banned by accusing me of sockpuppetry instead he is banned for sockpuppetry [24][25]
- Gordimalo\Beanom comes out of nowhere and sides again with My very best wishes (Beanom was clearly a sockpuppet)[26]
- Gordimalo\Beanom is investigated and banned[27]
- My very best wishes does everything to save him,[28][29] even by contacting the admin personally.[30]
- PailSimon intervenes in a discussion on the same article and goes against My very best wishes[31]
- My very best wishes intervenes against PailSimon in an SPI[32]--Mhorg (talk) 10:30, 1 June 2021 (UTC)
The last thing... My very best wishes says: "Speaking on behavior, all these accounts [...] are focused on promoting the idea that Protasevich is allegedly a collaborator of Ukrainian neo-Nazi (the claim is false or at least unsupported by RS)
" Just to underline the correct behavior of My very best wishes, he even manages to lie here by saying that I'm doing a POV pushing without RS,[33] while the part I inserted and then removed by him contains 3 reliable sources (Agenzia Giornalistica Italia, Radio France Internationale, Current Time TV) that report in a neutral way some objective facts. It's also funny how, when I pointed this out to him in the discussion,[34] he only appealed to the "due weight", and he wrote also that the information I was trying to put in the article "was covered in best mainstream sources (such as BBC) very little
"[35] So, was that part covered very little or not covered at all as he is saying here? Why is the user lying to say that there is no RS talking about this fact? This SPI seem to me just a way to get me out of the whole encyclopedia... and just another one of his operations to turn discussions in his favor, as I have already shown in the case of Gordimalo.--Mhorg (talk) 13:17, 1 June 2021 (UTC)
MPSCL
Wow. I suspect my involvement in all of this stems from ONE edit, in which I agreed with the stance of MHorg, reflected this by stating 'per MHorg', while also copying parts of his edit summary. Aware of the risk of making the same 'mistake' again - let me be bold after being a WP editor for almost fifteen years, and quote the statement of another user, here above, and say my accuser seemingly goes by the rationale of 'multiple editors disagree with me, therefore they must be the same person'. Shame on this accuser, wasting everyone's time with this request. Please let me know what we might do to have this user sanctioned themselves. Since this is clearly an attempt to abuse proper procedure (and, as I have learned, not for the first time). This is is all I will say for now on this ridiculous matter, but I'd be glad to elaborate in case of said sanctioning procedure, which I would wholly endorse and very much encourage. MPSCL 13:15, 1 June 2021 (UTC)
- See also the bottom of this talk page, where this SPI is actively being used by the accuser for, let's just call it, 'unjust purposes'. MPSCL 16:26, 1 June 2021 (UTC)
Elsen Eor
I have been warned on my talk page by 194.44.36.31 that My very best wishes was trying to get me "banned as a Sock puppet" along with the other indictees. I wish to thank him here, regardless of whether he is himself a sock puppet or not, since the suer did not deem it necessary to let me know of his complaint. Instead, Mr Very best Wishes, who is most certainly a very gracious person, left me a note to inform me that my editing on subjects such as Eastern Europe or the Balkans could expose me to discretionary sanctions. After a quick perusal of his last edits, I felt convinced that he deserved this warning much more than I did, and therefore I sent it back to him. As for his case against me and the other gentlemen involved in this suit, I can do no other than encourage the checkusers to proceed with their investigation, since I know neither the defendants nor the prosecutor. However, I cannot help but note the irony for a newcomer, whose edits are few and far between on the English version, to be subjected to this procedure by a gentleman who seems to be more comfortable with the Cyrillic alphabet than with the English tongue..--Elsen Eor (talk) 21:46, 1 June 2021 (UTC)
Clerk, CheckUser, and/or patrolling admin comments
- Clerk note: Minor housekeeping note: My very best wishes, could I ask you to please sign any posts you make at SPI, including initial reports and follow-up evidence you present? Thanks. --Blablubbs|talk 20:07, 31 May 2021 (UTC)