Misplaced Pages

:Sockpuppet investigations/Lrednuas Senoroc: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Sockpuppet investigations Browse history interactively← Previous editNext edit →Content deleted Content addedVisualWikitext
Revision as of 19:55, 16 February 2017 editCordless Larry (talk | contribs)Autopatrolled, Administrators56,632 edits →16 February 2017: Moving comment to correct section; reply← Previous edit Revision as of 20:11, 16 February 2017 edit undoMcGeddon (talk | contribs)Extended confirmed users, Pending changes reviewers, Rollbackers121,439 edits →Comments by other usersNext edit →
Line 147: Line 147:
Oh, no. Another conspiracy? We have two SL's and the latest one is trying to pass himself off. Unfortunately, there is no attempt to pass off anyone as any other person here at WP. There is this thing called a computer, They function very conveniently especially when you set it up so that you do not have to supply the usual log in information. Unfortunately, when the programmed computer no longer functions and you are unable to log back in you have to carry on and work with the system. Voila, I put in the user name I previously used and WP accepted it. Is that a conspiracy? They have medications for that syndrome and I prefer to leave conspiracies to others. Or is my editing someone a threat to the endurance of WP? Growing up, in the neighbourhood there was a fellow that as long as he could direct how everyone played everything in his mind was okay--well, really perfect. Unfortunately, for him he became what we had yet to learn what it was called--annoying. Use your time for your own entertainment but leave me out. I am not here poisoning the towns water well.] (]) 19:50, 16 February 2017 (UTC) Oh, no. Another conspiracy? We have two SL's and the latest one is trying to pass himself off. Unfortunately, there is no attempt to pass off anyone as any other person here at WP. There is this thing called a computer, They function very conveniently especially when you set it up so that you do not have to supply the usual log in information. Unfortunately, when the programmed computer no longer functions and you are unable to log back in you have to carry on and work with the system. Voila, I put in the user name I previously used and WP accepted it. Is that a conspiracy? They have medications for that syndrome and I prefer to leave conspiracies to others. Or is my editing someone a threat to the endurance of WP? Growing up, in the neighbourhood there was a fellow that as long as he could direct how everyone played everything in his mind was okay--well, really perfect. Unfortunately, for him he became what we had yet to learn what it was called--annoying. Use your time for your own entertainment but leave me out. I am not here poisoning the towns water well.] (]) 19:50, 16 February 2017 (UTC)
:Please see my comments above, {{u|Srednaus Lenoroc}}. I suggested that you created a new account, not that you were trying to pass yourself off as someone else. However, you did not "put in the user name I previously used" - there's a slight spelling difference, which is why the new account could be created. As long as you don't use both accounts, I don't see a problem though. ] (]) 19:55, 16 February 2017 (UTC) :Please see my comments above, {{u|Srednaus Lenoroc}}. I suggested that you created a new account, not that you were trying to pass yourself off as someone else. However, you did not "put in the user name I previously used" - there's a slight spelling difference, which is why the new account could be created. As long as you don't use both accounts, I don't see a problem though. ] (]) 19:55, 16 February 2017 (UTC)
::If "Srednaus" is a new account of "Srednuas" because of a ], that should be flagged on both of their user pages. Wouldn't it save some confusion to rename this SPI (even just to a placeholder), if it was started as a result of impersonation of an unrelated third party? --] (]) 20:11, 16 February 2017 (UTC)


====<big>Clerk, CheckUser, and/or patrolling admin comments</big>==== ====<big>Clerk, CheckUser, and/or patrolling admin comments</big>====

Revision as of 20:11, 16 February 2017

Lrednuas Senoroc

Lrednuas Senoroc (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

Populated account categories: suspected

For archived investigations, see Misplaced Pages:Sockpuppet investigations/Lrednuas Senoroc/Archive.


09 January 2017 (originally 30 December 2016)

– This SPI case is open.

Suspected sockpuppets

Per WP:DUCK. The ip ranges belong to notorious disruptive editor Lrednuas Senoroc. The last year, the user was reported on ANI by user Hegvald and his sock accounts were banned from editing. In an another ANI report, an another user highligted the problematic edits of the same ip-hopper on FGM and Kurdish women. See this. The same editor was also warned and reverted by Doug Weller. See this and talk pages of related articles. However, he continue the same disruptive edits through ip-jumping (in order not to be noticed), clear source falsifications, meatpuppeting/canvassing (e.g. pinging other Turkish nationalist editors to "win" the discussions or to achieve intended consensus), cherry pickings, ip-sockings/proxy sockings and ongoing campaign targeting a minority ethnic group. His geolocation was Switzerland but since 25 June 2016, he has been editing from Germany 1 2.

All of their contributions focused on almost all Kurdish-related topics (specificially Kurdish women, FGM, Women in X country, Christians in Kurdish dominated areas, Kurdish mythology, history, culture, demography, revolts, human rights, diaspora Turks and Kurds, Kurdification, honor killing, Kurdish refugees, etc.)

Evidences regarding “habitual behaviors” of (old)Swiss and (current)German ip socks and sock accounts:

  • Targeting the same ethnic group with the same agenda
  • IP-jumping in order not to be noticed
  • Blaming other editors for “personal attack” when those editors notice his disruptive edits: 1, 2, 3
  • Copying the same (or partly modified) content from one article to another: 1,2, 3,4,5,6, 7,8,9,10,11...
  • Moving certain offensive contents/sections (which were added by him) upward to take more attentions of readers: 1, 2, 3, 4...
  • Detailed and sensational style of writing to affect readers : 1, 2, 3...
  • Often violating WP:COPYVIO and WP:RS-most of his edits were deleted by JzG and Diannaa: 1,2,3,4,5,6,7... (However he restores them.)
  • Disruptive editings through WP:CHERRY, WP:SNEAKY, WP:FICTREF and source falsifications. The last example was mentioned here. To see the previous “Swiss” ips’ violations, please check the related articles’ talk pages, revision histories and/or related ANI reports. 
  • Being familiar with Misplaced Pages terminology, procedure, templates etc. : 1, 2, 3, 4, 5,
  • Disruptive tagging-unnecesary merging  and/or deleting the articles, probably because he does not like their “content”: 1,2,3,4,5,6. For more diffs, see the contribs of his sock account Hassan Rebell
  • Canvassing and meatpuppetry: 1, 2, 3...
  • Impersonating veteran editors by choosing similar usernames : 1, 2, 3, 4
  • Using proxies and ipv6s, when his physical ips are disclosed or become “notorious: 1, 2, 3, 4
  • Stalking contribs of particular editors and often edit-warring with them (eg. Ferakp and Vekoler)
  • Restoring his previous socks’ edits: 1, 2

Compare Swiss ipv4s of Lrednuas Senoroc and the German ipv4s on Kurdish women: 1, 2, 3 and 1, 2; on Honor killing: 1, 2, 3, 4, 5 and 1; on Human rights in post-invasion Iraq, Syria etc.:1, 2 and 2, 3, 4, 5; on Kurdification: 1, 2, 3, 4. He also used ipv6s (from Germany). See: 1, 2 and compare them with 1, 2 Regarding Kurdish population in Turkey, see 1, 2.

On the other hand, just like his older socks, the German ips are active on Christianity in Kurdish-dominated area-related articles (wishing to emphasize Kurdish "savagism" against Christians and de-emphasizing Ottoman role in Assyrian and Armenian genocides through putting emphasis on attacks of Kurdish tribes), on the articles of Kurdish and Turkish diaspora (trying to prove that most of "immigrant" Turks are actually Kurds and associating them with honor killings, crime, etc). Totally the same agenda with confirmed ip socks of the same editor.

Besides, there is an obvious sockpuppetry through proxies. Compare this addition by ip 87.189.xx and this by an ip from the US.

An another proxy sock of Lrednuas Senoroc have complained about an editor  whose contribs are often stalked by the same sockmaster 1 The previous Swiss and current German ips of the sockmaster also edited "History of Kurds" and related articles before-seems those topics are within his are of interest too: 1, 2. Further, the ip from “France” weirdly complained about additional issues which are clearly off-topic  but the pet topics of the sockmaster Lrednuas Senoroc.  Namely women rights, Christianity, anti-Turkism, etc.  Plus, the “French” ip accused the editor as “nationalist”, “meatpuppet” as ip sock of the same sockmaster did while he was arguing with user:Doug Weller on his talk page and provided exactly the same link/diff to prove his "righteousness": 1, 2. Again, clear WP:DUCK case through abusing various proxies. 

In a nutshell, clear WP:DUCK case with WP:NOTHERE, WP:DISRUPT, WP:SOCK through using various ipv4s, ipv6s, proxies and accounts. A range block for his current German ip ranges(87.189.xx/88.128.xx/81.92.xx) and ipv6s would be useful to prevent wikipedia further disruption by the same ip-jumping editor. It is a serious problem, since he also targeted "indefinite protected" articles too. See: this request on user Beeblebrox's talk page. Also, mind that this guy intentionally switches his ip in order not to be noticed. See his last edits: 1 and 2. Ip sock 87.189.xx made his last edit on 20.01 and just a few minutes later ip 88.128.xx edited an another article. Also see: this and this. Again, ip sock 87.189.xx made his last edit at 19.51 and after a few minutes ago, ip 88.128.xx copied the same content an another article. 46.221.216.243 (talk) 00:08, 30 December 2016 (UTC)

@Materialscientist:, @Doug Weller:, @Favonian:, @DoRD: please take a look at this case. The user might be a "paid editor", since most of his edits requires a large amounts of time and even the most active users do not spend such a time on the internet/wikipedia. Plus, his "knowledge" regarding Misplaced Pages terminology is also makes my doubts possible. 46.221.173.105 (talk) 05:54, 30 December 2016 (UTC)

I have added two socks to the list. The “new”  account Nilgravity was created after his ip ranges were revealed on this SPI case.  The account’s suspicious acts are:

  • Adding the same/similar content with previous ip socks in Kurdish or Christianity-related articles:1, 2. For the similar/same additions of ip socks, please see the revision history of Christianity in Iraq, Persecution of Christians, Iraqi-Assyrians, etc.
  • Moving the preferred section/content (that was added by him) upward probably to take more attention of the readers : 1, 2, 3, 4

I have added Kinetsubuffalo to the list too. I know the account is stale but it should be tagged as “suspected sock” at least per WP:DUCK.

  • The file regarding FGM in Iraq was uploaded by user:Kinetsubuffalo on 17 April 2016 on Commons and  just a few hours later, the same map added an article by notorious “Swiss” ip (those Swiss ips are confirmed ip socks of Lrednuas Senoroc, he admitted it. See previous case). See:this.
  • The same user created new pages, namely “Rape in Kurdistan”, “FGM in Kurdistan”, etc. and redirected them to certain articles articles which were edited by the previous Swiss ip socks of Lrednuas Senoroc.
  • Additionally, the account’s user name is very similar to user user:Kintetsubuffalo.  Please note that, his previous sock account’s user name (Lrednuas Senoroc) is also very similar to veteran editor user:Srednuas Lenoroc’s. I think that vandal “intentionally” chooses those nicknames in order to confuse other editors. Please see previous case. 46.221.181.223 (talk) 08:35, 21 January 2017 (UTC)
  • Note: I'm just re-filing this (I am not 46.221) to fix a previous misfiled report. No comment one way or another, I have not actually read the above beyond half-awake skimming for any obvious problems. Ian.thomson (talk) 02:16, 9 January 2017 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I've just been pinged about this. One of the above mentioned IP's (87.189.128.42) edited Genocide exactly like described and was reverted by User:Doug Weller for attacking Kurds. Same edits were added back later by these IPs, please check them too:

--92slim (talk) 11:09, 11 January 2017 (UTC)

Argentina? It seems that an another case of proxy socking by the same editor or an off-wiki organization? No idea but I have noticed many proxies abusing by the same disruptive editor (Romania, the US, the UK...) I'll add them when have a time. 46.221.213.142 (talk) 11:21, 11 January 2017 (UTC)
Yes, either that or Argentinian proxies are popular. I am not sure. --92slim (talk) 12:07, 11 January 2017 (UTC)

UPDATE: Another one. Please add:

Despite he has been continuing his disruptive edits for at least 1-2 years, it is hard to notice all of the disruption, since he is an ip-jumping editor.  Also it is hard to check all the sources in order to see if he falsified the sources. Nevertheless, I have noticed so many falsifications by this vandal and his proxies. For example, see: 1, 2, 3, 4. The sources are about ISIS’s human right abuses but it “changed” by a proxy (most probably belong to the same editor) and when an another editor reverted it, the ipv4 of Lrednuas Senoroc/Heysem/Hassan Rebell restored it. It reminds me this and this. And here, the sources are actually about "total" number of Kurds living in Germany but the user showed it as the number of "Turkish Kurds" to push his agenda I have mentioned above. Moreover, he made an another source falsification here. (The sources are about Iraq and have nothing to do with Syria. Those are the current disruptive edits by ip socks of Lrednuas Senoroc. God knows, how many falsifications, cherry pickings, etc. were done by the same editor!

Plus, most probably, Ultimate Destiny (talk · contribs) is master of all the socks. Many of the editor's additions were copied by the ip socks. Also, it seems that they interested in the similar topics. The IPS that I have mentioned above and previous confirmed Swiss ip socks of Lrednuas Senoroc seem professional as user Hegvald mentioned on his ANI report regarding the same user. Thus, it makes this old user more suspicious. However, i did not add him the list, since the account is very stale. But, i think it may be tagged as "suspected sock". 46.221.213.148 (talk) 11:03, 18 January 2017 (UTC)

It has been almost 1 months now. It would be good, if checkusers or admins block that long-term vandal. 'Cause it seems that he is back with various proxies 1 involved in suspicious taggings regarding "certain" informations. An ipv6 from Germany (like the sockmaster) also made suspicious edits on an another article. 2.Stalking, suspicious edits and geolocation: all resembling me the same sockmaster again. It would be an appropriate action, if admins/checkusers pay attention to those suspicious anon editors too. 46.221.171.152 (talk) 13:10, 5 February 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

I've blocked User:Kinetsubuffalo as an impersonation of User:Kintetsubuffalo. RickinBaltimore (talk) 20:24, 9 February 2017 (UTC)


16 February 2017

– This SPI case is open.

Suspected sockpuppets

The name alone makes it obvious that this is the same person. Sir Sputnik (talk) 15:02, 16 February 2017 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

@Sir Sputnik:, it was discussed here and as @Blackmane: and @Cordless Larry: mentioned, he was just impersinating user Srednuas Senoroc. "Impersonating veteran editors" is one of the habitual behavior of this vandal. Please read the SPI case above. His another sock account Kinetsubuffalo was blocked by the admin for impersonating Kintetsubuffalo. 46.221.160.141 (talk) 16:37, 16 February 2017 (UTC)

Yep, there is no doubt that Srednuas Lenoroc (talk · contribs · deleted contribs · logs · filter log · block user · block log) and Srednaus Lenoroc (talk · contribs · deleted contribs · logs · filter log · block user · block log) are the same person but I doubt that they are related to this SPI. Nthep (talk) 17:26, 16 February 2017 (UTC)

Oh, no. Another conspiracy? We have two SL's and the latest one is trying to pass himself off. Unfortunately, there is no attempt to pass off anyone as any other person here at WP. There is this thing called a computer, They function very conveniently especially when you set it up so that you do not have to supply the usual log in information. Unfortunately, when the programmed computer no longer functions and you are unable to log back in you have to carry on and work with the system. Voila, I put in the user name I previously used and WP accepted it. Is that a conspiracy? They have medications for that syndrome and I prefer to leave conspiracies to others. Or is my editing someone a threat to the endurance of WP? Growing up, in the neighbourhood there was a fellow that as long as he could direct how everyone played everything in his mind was okay--well, really perfect. Unfortunately, for him he became what we had yet to learn what it was called--annoying. Use your time for your own entertainment but leave me out. I am not here poisoning the towns water well.Srednaus Lenoroc (talk) 19:50, 16 February 2017 (UTC)

Please see my comments above, Srednaus Lenoroc. I suggested that you created a new account, not that you were trying to pass yourself off as someone else. However, you did not "put in the user name I previously used" - there's a slight spelling difference, which is why the new account could be created. As long as you don't use both accounts, I don't see a problem though. Cordless Larry (talk) 19:55, 16 February 2017 (UTC)
If "Srednaus" is a new account of "Srednuas" because of a forgotten password or something, that should be flagged on both of their user pages. Wouldn't it save some confusion to rename this SPI (even just to a placeholder), if it was started as a result of impersonation of an unrelated third party? --McGeddon (talk) 20:11, 16 February 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

Categories: