Misplaced Pages

:Sockpuppet investigations/Najaf ali bhayo/Archive: Difference between revisions - Misplaced Pages

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< Misplaced Pages:Sockpuppet investigations | Najaf ali bhayo Browse history interactively← Previous editNext edit →Content deleted Content addedVisualWikitext
Revision as of 17:29, 26 September 2015 view sourceMike V (talk | contribs)28,285 edits Archiving case from Misplaced Pages:Sockpuppet investigations/Najaf ali bhayo← Previous edit Revision as of 05:11, 27 September 2015 view source Mahfuzur rahman shourov (talk | contribs)594 edits →Comments by other usersNext edit →
Line 499: Line 499:
====<big>Comments by other users</big>==== ====<big>Comments by other users</big>====
<small>''Accused parties may also comment/discuss in this section below. See ].''</small> <small>''Accused parties may also comment/discuss in this section below. See ].''</small>
ip addresses with FACE:B00C in their range are used by internet.org app service and not "geologically localized" in that a person in south asia can get allocated an address for a time which will be later cycled to any person in EU or NA. blocking entire ranges is too much collateral damage. please look deeply into this. block the sock accounts, not ip ranges.



====<big>Clerk, CheckUser, and/or patrolling admin comments</big>==== ====<big>Clerk, CheckUser, and/or patrolling admin comments</big>====

Revision as of 05:11, 27 September 2015


Najaf ali bhayo

Najaf ali bhayo (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

05 September 2015

Suspected sockpuppets

Recreation of hoax articles of same imaginary language (I can't provide diffs because the pages have been deleted). Both users added links to the new pages to the Arina article: ,.

New user was created three minutes after sockpuppeteer was indefinitely blocked. Blackguard 16:39, 5 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Both blocked indef, clerk needs to close the case. RMS52 16:40, 7 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

11 September 2015

Suspected sockpuppets

Creating the same hoax stub articles about Arina people and Arina language as User:LAST TIME OF EARTH, who was blocked after three hours of hoaxing a few days ago. McGeddon (talk) 09:01, 11 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Blocked. CambridgeBayWeather, Uqaqtuq (talk), Sunasuttuq 09:50, 11 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

12 September 2015

Suspected sockpuppets

I'm submitting this user based on the continuation with all the Arina-related articles. But this user also created Kohwari Language, which appears to be real, although it also appears to be borrowed from , so it may be a copyvio that needs taking care of. Copying it here could be a ruse to make the user appear serious. —Largo Plazo (talk) 05:03, 12 September 2015 (UTC)

Adding User:Maria Ksena, who joined Misplaced Pages one full hour after Laura Antonia, undoing attempts to redirect that user's Kohwari Language article to Khowar language, and making unexplained copypaste page moves of various "Khowar" language pages to "Kohwari" (seemingly just searching for the word "Khowar" and making copypaste moves of the few articles with that word). Requesting a checkuser check. --McGeddon (talk) 07:36, 12 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

These accounts may be actually related to Misplaced Pages:Sockpuppet investigations/Najaf ali bhayo - the archive there shows some similarly clumsy copypaste-and-redirect moving and a lot of Khowar-related edits. --McGeddon (talk) 08:40, 12 September 2015 (UTC)

Good eye, McGeddon. I thought the same thing because of the creation of Khowari Language, which seemed to be an attempt to escape the scrutiny the Najaf socks were getting at Khowar language, one of his favorite haunts. Cyphoidbomb (talk) 15:28, 12 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments


13 September 2015

Suspected sockpuppets

Raising a bad faith SPI against the same bunch of unconnected vandalism-reverting editors as User:Maria Ksena did around the same time yesterday. McGeddon (talk) 08:53, 13 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

14 September 2015

Suspected sockpuppets

Creating Arnia language ("also called Arina") after the previously-created Arina language was salted. Similar username to recent sock User:Laura Antonia. McGeddon (talk) 07:45, 14 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments


14 September 2015

Suspected sockpuppets

New editor whose two edits have been to link to the Arnia language article created hours previously by the previous sock, and to add the deleted-as-block-evasion Template:Chitral District to another article.

Flagging again that this may be the same vandal as Misplaced Pages:Sockpuppet investigations/Najaf ali bhayo: Bhayo's most recent sock User:Be Wolph removed "Arniya" as an alternate spelling of Khowar in a half-hour window between edits by User:Pythagoraso Theorem, who resumed editing (adding "Arnia" to Tirich Mir) ten minutes after Be Wolph was blocked. McGeddon (talk) 08:30, 14 September 2015 (UTC)

Technically Be Wolph (talk · contribs) is same as Laura Antonia (talk · contribs) from this group. As I mentioned, CU data are muddied here by the use Opera servers, thus multiple editors are technically possible, but, if their target is the same then this multiple socking groups are the same as one sockmaster to me. Materialscientist (talk) 08:42, 14 September 2015 (UTC)
So is this worth merging into a single SPI case? --McGeddon (talk) 08:57, 14 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments


14 September 2015

Suspected sockpuppets

Created Arina Language. Everymorning (talk) 11:34, 14 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments




Najaf ali bhayo

Najaf ali bhayo (talk · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

05 September 2015

Suspected sockpuppets

Recreation of hoax articles of same imaginary language (I can't provide diffs because the pages have been deleted). Both users added links to the new pages to the Arina article: ,.

New user was created three minutes after sockpuppeteer was indefinitely blocked. Blackguard 16:39, 5 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Both blocked indef, clerk needs to close the case. RMS52 16:40, 7 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

11 September 2015

Suspected sockpuppets

Creating the same hoax stub articles about Arina people and Arina language as User:LAST TIME OF EARTH, who was blocked after three hours of hoaxing a few days ago. McGeddon (talk) 09:01, 11 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Blocked. CambridgeBayWeather, Uqaqtuq (talk), Sunasuttuq 09:50, 11 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

12 September 2015

Suspected sockpuppets

I'm submitting this user based on the continuation with all the Arina-related articles. But this user also created Kohwari Language, which appears to be real, although it also appears to be borrowed from , so it may be a copyvio that needs taking care of. Copying it here could be a ruse to make the user appear serious. —Largo Plazo (talk) 05:03, 12 September 2015 (UTC)

Adding User:Maria Ksena, who joined Misplaced Pages one full hour after Laura Antonia, undoing attempts to redirect that user's Kohwari Language article to Khowar language, and making unexplained copypaste page moves of various "Khowar" language pages to "Kohwari" (seemingly just searching for the word "Khowar" and making copypaste moves of the few articles with that word). Requesting a checkuser check. --McGeddon (talk) 07:36, 12 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

These accounts may be actually related to Misplaced Pages:Sockpuppet investigations/Najaf ali bhayo - the archive there shows some similarly clumsy copypaste-and-redirect moving and a lot of Khowar-related edits. --McGeddon (talk) 08:40, 12 September 2015 (UTC)

Good eye, McGeddon. I thought the same thing because of the creation of Khowari Language, which seemed to be an attempt to escape the scrutiny the Najaf socks were getting at Khowar language, one of his favorite haunts. Cyphoidbomb (talk) 15:28, 12 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments


13 September 2015

Suspected sockpuppets

Raising a bad faith SPI against the same bunch of unconnected vandalism-reverting editors as User:Maria Ksena did around the same time yesterday. McGeddon (talk) 08:53, 13 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

14 September 2015

Suspected sockpuppets

Creating Arnia language ("also called Arina") after the previously-created Arina language was salted. Similar username to recent sock User:Laura Antonia. McGeddon (talk) 07:45, 14 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments


14 September 2015

Suspected sockpuppets

New editor whose two edits have been to link to the Arnia language article created hours previously by the previous sock, and to add the deleted-as-block-evasion Template:Chitral District to another article.

Flagging again that this may be the same vandal as Misplaced Pages:Sockpuppet investigations/Najaf ali bhayo: Bhayo's most recent sock User:Be Wolph removed "Arniya" as an alternate spelling of Khowar in a half-hour window between edits by User:Pythagoraso Theorem, who resumed editing (adding "Arnia" to Tirich Mir) ten minutes after Be Wolph was blocked. McGeddon (talk) 08:30, 14 September 2015 (UTC)

Technically Be Wolph (talk · contribs) is same as Laura Antonia (talk · contribs) from this group. As I mentioned, CU data are muddied here by the use Opera servers, thus multiple editors are technically possible, but, if their target is the same then this multiple socking groups are the same as one sockmaster to me. Materialscientist (talk) 08:42, 14 September 2015 (UTC)
So is this worth merging into a single SPI case? --McGeddon (talk) 08:57, 14 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments


14 September 2015

Suspected sockpuppets

Created Arina Language. Everymorning (talk) 11:34, 14 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

17 September 2015

Suspected sockpuppets

New editor whose first edits were to create a user page with twelve full stops and then delete them one by one before posting a protected edit request at Talk:Khowar language an hour later, suggesting that they were hoping that twelve null edits would be enough to autoconfirm and let them just edit it directly.

Their few subsequent edits have included the creation of Template:Chitral District, a template which was created twice by socks of LAST TIME OF EARTH earlier in the week. McGeddon (talk) 13:59, 17 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

And again, this may be the same user as Misplaced Pages:Sockpuppet investigations/Najaf ali bhayo. User:Materialscientist said that two socks, one from each master, were "technically the same" a few days ago - does that mean there was a CU match? --McGeddon (talk) 14:01, 17 September 2015 (UTC)

Yes, identical, which is a strong hint, but not a 100% proof in this case (because they edited through a particular web interface). Materialscientist (talk) 23:41, 17 September 2015 (UTC)
I was about to file this user under that master as well. There are multiple overlaps in behavior, as others have noted, even if CU doesn't prove it (but if it does confirm, so much the better). DMacks (talk) 14:14, 17 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

Yes. Materialscientist (talk) 09:40, 19 September 2015 (UTC)

18 September 2015

Suspected sockpuppets

Persistent attempts to redirect articles concerning Pakistani administrative districts to other articles, as other socks of this master, very recently SIGMA OMEGA (talk · contribs · deleted contribs · logs · filter log · block user · block log). General Ization 02:14, 18 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

There have been more IPs from Facebook Ireland Ltd today, editing typical Najaf targets. Thomas.W 10:05, 18 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments


19 September 2015

Suspected sockpuppets

Creation of Ethnic groups in Chitral (edit | talk | history | links | watch | logs) and edits to

— JJMC89 (T·C) 18:56, 19 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments


21 September 2015

Suspected sockpuppets

Redirects Teric, Pakistan to Tirich Mir; repeats other Chitral-related edits made by other socks. WP:DUCK General Ization 12:17, 21 September 2015 (UTC)

Removes G5 template from Template:Chitral-Topics after block of Cripsion. WP:DUCK General Ization 12:43, 21 September 2015 (UTC)


Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments


22 September 2015

Suspected sockpuppets

Redirects Teric to Chitral District, repeating edit of previous socks. WP:DUCK General Ization 02:17, 22 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

22 September 2015

Suspected sockpuppets

Name in ALL CAPS, editing typical Najaf targets. Thomas.W 10:07, 22 September 2015 (UTC)

Reverts reverts of socks, similar editing pattern. WP:DUCK General Ization 16:12, 22 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments


24 September 2015

Suspected sockpuppets

Two named accounts same edit behaviors as usual. Reverted and blocked as usual. The two IPs then rose to edit-war with the tagging of the latter one's user page (another not-unusual behavior). The IP6 of this editor rapidly changes, so it's pointless to block individual ones. But these (2A03:2880:3020:) are close to the ones noted in the #22 September 2015 report (2A03:2880:3010:). In that report , User:Mike V said he blocked 2A03:2880:0:0:0:0:0:0/36, but if I understand IP6 CIDR notation, /36 would that would miss all of the IPs listed in that report (and in mine, and the 2A03:2880:1010: pool mentioned in the #18 September 2015 report). Should it be /32 ? DMacks (talk) 04:41, 24 September 2015 (UTC) DMacks (talk) 04:41, 24 September 2015 (UTC)

And up pops:
so I blocked that account and spread the anon-block to the /32. DMacks (talk) 04:47, 25 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims. ip addresses with FACE:B00C in their range are used by internet.org app service and not "geologically localized" in that a person in south asia can get allocated an address for a time which will be later cycled to any person in EU or NA. blocking entire ranges is too much collateral damage. please look deeply into this. block the sock accounts, not ip ranges.

Clerk, CheckUser, and/or patrolling admin comments

26 September 2015

Suspected sockpuppets

New obvious sock doing the usual Najaf stuff, such as reverting my revert of a Facebook IP... Thomas.W 14:56, 26 September 2015 (UTC)

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


Clerk, CheckUser, and/or patrolling admin comments

Indeffed and tagged. Closing.
 — Berean Hunter (talk) 15:11, 26 September 2015 (UTC)