Talk:Wikiproject:Antispam

From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search
Report and discuss cross-wiki spam

Hi, welcome to the talk page of the antispam project!

Information we need to investigate promotional spam:

  • a list of the accounts involved in cross-wiki spam
  • the reasons you think there's cross-wiki spam, e.g. single-purpose accounts coordinating on closely related topics which don't meet notability guidelines and/or contain highly promotional content
  • have there been past community discussions on local projects? Have sockpuppet investigations been conducted?

We can investigate on other wikis, find new sockpuppets or suspicious edits and find new data to get the bigger picture. When a case is solved, we can inform local communities to ask for help with cleanup (e.g. by deleting pages or systematically removing promotional material).

We also keep an archive of past cases to keep track of and minor cases and internal matters.

Welcome[edit]

Hi, welcome everyone to the antispam project. Native English speakers, I am guilty for the terrible style. ;) Feel free to rephrase as you see fit. Best, Bédévore (talk) 15:30, 30 July 2021 (UTC)Reply[reply]

For the record, this project is born after this discussion (permalink) on en-wp. Best, — Jules* Talk 15:36, 30 July 2021 (UTC)Reply[reply]
@Bédévore and Jules*: How come all things frwiki-related just look so beautiful? This is great work, thank you so much for taking the time. I've given the landing page a major copyedit. Blablubbs (talk) 17:07, 30 July 2021 (UTC)Reply[reply]
Thank you @Blablubbs (twice)! — Jules* Talk 17:10, 30 July 2021 (UTC)Reply[reply]
Thanks Blablubbs! Bédévore (talk) 21:59, 30 July 2021 (UTC)Reply[reply]

Looking for contacts on Wikimedia projects[edit]

Hello,

As discussed before, this wikiproject would be very useful to identify volunteers of other Wikimedia projects willing to help on cross-wiki promotion cases.

Bédévore and I will soon start contacting other wikis (using embassies or other means) to identify such volunteers, so they can join this project and list their names on Wikiproject:Antispam/Contacts. I suggest we list below which projects each of us did contact, in order to avoid any redundancy.

Regards, — Jules* Talk 16:35, 30 July 2021 (UTC)Reply[reply]

@Jules, could you also leave the invitation for volunteers among uk.wikipedia admins? Village pump (administration) page. Thanks. --Anntinomy (talk) 16:27, 6 September 2021 (UTC)Reply[reply]

About Pierre Malinowski[edit]

Hi,

On fr-wiki we identified problematic spam on closely related topics:

SPI showed that: fr:Wikipédia:Vérificateur d'adresses IP/Requêtes/juillet 2021#Svetlana090, Foundation-french, Marija1st, BKTeaman, Yasinkovski, Jean-Dumoulin1, Jehanne-Sylvie - 24 juillet = 31.28.224.0/19 is proxy and sockpuppets are:

I also blocked other SPAs:

The pages are also under extended protection (2 yrs)-see request to admins: [3] Affected wikis are:

  • commons++++
  • en-WP+++++
  • fr-WP++++++
  • ru-WP++++++
  • de-WP++
  • WD+++

I can't speak German or Russian to warn them about this spam by a bunch of SPAs. Best regards, Bédévore (talk) 14:40, 31 July 2021 (UTC)Reply[reply]

created the page on en.wp. I blocked them for spamming back in April, for creating w:Roman Bekmuradov. MER-C (talk) 12:29, 1 August 2021 (UTC)Reply[reply]

Hebert Neri[edit]

Deleted two times in German Wikipedia (de:Hebert Neri) as repeated posting of advertisements. See (label), (label) and (label) (Requests for deletions). --Kolja21 (talk) 22:05, 10 August 2021 (UTC)Reply[reply]

This appears to be a more complex case which focuses on Hebert Neri on multiple wikis but not exclusively. Following accounts are associated with it:
Mark1340 (CA · xwiki · COIBot report) created article de:Hebert Neri on 7 August 2021 with another edit on 10 August, no other contributions
Monicanunez13 (CA · xwiki · COIBot report) uploaded File:Hebert Felipe Neri.jpg (6 May 2021) and File:Kiarablay.jpg (12 May 2021), account was locked by steward Stanglavine on 1 August 2021
Jsmithn22 (CA · xwiki · COIBot report) uploaded File:Hebertneri.jpg on 2 November 2018 (same picture as File:Hebert Felipe Neri.jpg which was later uploaded by Monicanunez13)
More sockets of Jsmithn22 are documented at Wikipedia:Sockpuppet investigations/Jsmithn22/Archive. This account created en:Hebert Neri on 22 October 2018 (see log) which was subsequently moved to en:Draft:Hebert Neri on 5 November 2018 and finally deleted on 30 March 2020. In addition (see log), Jsmithn22 created also an article for en:Jennifer Lobo on 8 October 2018 and uploaded pictures of Herbert Neri, Jennifer Lobo, and Fabiano de Abreu. The other confirmed sockets are:
Paulojunior34 (CA · xwiki · COIBot report) created pt:Hebert Neri on 19 April 2019 (see log)
Marcospontes73 (CA · xwiki · COIBot report)
ImperadorPalpatine99 (CA · xwiki · COIBot report) created es:Hebert Neri on 4 July 2019. Later, pt:Hebert Neri was created on 21 September and 7 December 2019 and pt:Hebert Felipe Neri on 10 April 2020 (see log)
From es:wp we come to the next sockpuppet:
JuanRojas22 (CA · xwiki · COIBot report) re-created es:Hebert Neri on 7 October 2020 and pt:Hebert Neri on 14 October 2020. I addition, this account created an article for pt:Rabino Avraham Franco on 19 October 2020 which was subsequently deleted.
--AFBorchert (talk) 13:53, 15 August 2021 (UTC)Reply[reply]
I found more related wikidata links: Q58099779 (Q58099779), Q31847105 (Q31847105). --AFBorchert (talk) 14:11, 15 August 2021 (UTC)Reply[reply]


This is back.

Also spammed:

@AFBorchert, Jules*, and DarwIn: I guess it's time to create a case page for this. MER-C 15:00, 19 September 2022 (UTC)Reply[reply]

Noting historical spam: d:Q72816807 (Miguel Toddy), spam articles never created. MER-C 16:28, 19 September 2022 (UTC)Reply[reply]
Yes check.svg Done for fr-wp. Thanks for the ping. — Jules* talk 21:06, 19 September 2022 (UTC)Reply[reply]
@MER-C: Cleaning up on the way on wiki.pt, deleted articles for pt:Tulio Borgias & pt:Leticia Dionizio, 4 new socks caught and added to pt:Categoria:!Fantoches de Jsmithn22. Marketer en:Luca Moreira is related to this operation too (biography deleted in wiki.pt as non relevant spam, btw). Most of the promotional content seems to come from MF Press Global. Thank you very much for the ping. - Darwin Ahoy! 22:30, 19 September 2022 (UTC)Reply[reply]
Also warned the folks at wikinews.pt. - Darwin Ahoy! 22:33, 19 September 2022 (UTC)Reply[reply]
Updated to add Ricardo Holz. MER-C 16:54, 21 September 2022 (UTC)Reply[reply]

@AFBorchert and Jules*: I've been reviewing the case for two years and it looks like attempts to promote clients of MF Press Global, a digital marketing company. I would like to point out that I am not accusing the company. However, all pages analyzed were referenced by MF Press advertisements.

The case becomes complex because evidence indicates involvement of smaller companies. In my opinion, we need to act and take actions more harshly to aim for combat. For example, is there a global blacklist of article titles? Edmond Dantès d'un message? 21:41, 19 September 2022 (UTC)Reply[reply]

Title blacklist. MER-C 18:55, 22 September 2022 (UTC)Reply[reply]

Wiki PR, Status Labs[edit]

Notable - literally, because they have articles written about them - spammers with a lengthy history. There's a lot of residual cross-wiki cleanup that needs to be performed, plus some of the spam seems to have returned in the intervening years since this case was investigated. MER-C (talk) 17:17, 17 August 2021 (UTC)Reply[reply]

List of articles pasted at User:MER-C/Spam/WikiPR. @Jules*: there's a couple for you to nuke. MER-C (talk) 16:38, 21 August 2021 (UTC)Reply[reply]
Yes check.svg Done @MER-C: maybe it would be useful to open an archive subpage (with the links above)? best, — Jules* Talk 09:49, 22 August 2021 (UTC)Reply[reply]
P.-S. : if it can help to discover other socks, @MER-C:, MonsieurJohannes (who created fr:Freshworks listed on your subpage):
— Jules* Talk 09:58, 22 August 2021 (UTC)Reply[reply]
Okay, so, some other articles to delete not on your list:
Ping @Itti and MarioGom:. (We have no contact for it-wp.) — Jules* Talk 11:09, 22 August 2021 (UTC)Reply[reply]
Yay, untagged socks. The CU data was too cloudy, but there is little doubt these accounts are affiliated. Sigh. See en:Wikipedia:Sockpuppet investigations/Japanelemu/Archive for the untagged accounts. I also created Wikiproject:Antispam/Archives/2021/Wiki PR but someone needs to complete the research. There are a lot more discussions than this. MER-C (talk) 14:27, 22 August 2021 (UTC)Reply[reply]
There is also:
— Jules* Talk 15:51, 22 August 2021 (UTC)Reply[reply]
@MER-C: en:Wikipedia:Sockpuppet investigations/Boskit190/Archive may also be Wiki PR/Status Labs: Keke1970 (CA · xwiki · COIBot report · ja · en), who created ja:SnatchBot and ja:PMインターナショナル, has been blocked on en-wp as a sock of Boskit190.
I also found out new and more recent (2020-2021) accounts, not blocked nor locked, via ja:チェーザレ・カターニア (found with ja:利用者:Keke1970/sandbox), which led me to wikidata:Q56141864:
— Jules* Talk 16:36, 22 August 2021 (UTC)Reply[reply]
Found another SPI: en:Wikipedia:Sockpuppet investigations/Fatima 77/Archive. New articles added to User:MER-C/Spam/WikiPR. MER-C (talk) 18:12, 22 August 2021 (UTC)Reply[reply]
Tagged es:SnatchBot and es:Ben Heine for deletion. es:eDreams.es is notable and someone already did some clean up. It might need further review though. Action still pending for VhuroMu2 (CA · xwiki · COIBot report · es). MarioGom (talk) 20:21, 22 August 2021 (UTC)Reply[reply]

About KapitalBrand (frwp, commons, enwp)[edit]

Hello,

KapitalBrand is an e-reputation company based in Morroco and they hire freelance editors to write on wikis. They use a lot of sockpuppets to edit articles about their clients (to get the "upper hand" in debates and to publish articles, sometimes cheating on typo to bypass protections). They never declare their conflicts of interest or their sockpuppets. They are banned on fr-wp. Typically, a freelance writes a draft and another dude publishes the draft.

Sockpuppets page is here: fr:Wikipédia:Faux-nez/KapitalBrand. They operate mainly on fr-wp and commons however a few of them are on en-wp.

Best, Bédévore (talk) 08:52, 23 August 2021 (UTC)Reply[reply]

Olga Vaganova[edit]

Olga Vaganova [stalktoy] – [cross-wiki edits] (Ольга Ваганова in Russian) is a founder of ukrainian PR agency (article in russian about starting agency). Edits in uk, ru, en concern clients mainly, ignoring paid editing template. --Anntinomy (talk) 08:36, 4 September 2021 (UTC)Reply[reply]

Thanks for the information, @Anntinomy. On fr-wp, I only found one old (2011) creation: fr:PrivatBank. It used a promotional style, but it has been edited by an experienced user since. — Jules* Talk 20:38, 5 September 2021 (UTC)Reply[reply]
She has disclosure on English Wikipedia. So there is no issue here so far. MarioGom (talk) 07:48, 29 October 2021 (UTC)Reply[reply]

Unknown multilingual UPE sockfarm[edit]

I found en:Mikhail Valerievich Lifshitz in my fortnightly suspicious article list. This was created by Straycatgirl (CA · xwiki · COIBot report) who has 13k edits on uk.wp but their creations on en.wp are spewing red flags for UPE. Barvenkov (CA · xwiki · COIBot report) created uk:Лифшиц, Михаил Валерьевич.

The obvious publicity photo File:Mikhail Lifshitz.jpg in this article was uploaded by Jackrosse (CA · xwiki · COIBot report) and sourced to this Flickr profile hxxps://flickr.com/photos/187794352@N07/ engaged in obvious license laundering. The Flickr profile contains three images, the second File:Dr Amine Issa.jpg also being uploaded by Jackrosse for d:Q106809433 (Mobalytics).

The third image File:Michael Baczor.jpg was uploaded by Vladmedv (CA · xwiki · COIBot report). They substantially edited d:Q89453053 (Michael Baczor).

This Wikidata item was created by Momarfish (CA · xwiki · COIBot report). They uploaded File:Netskope Headquarters.jpg, sourced from another license laundering profile on Flickr hxxps://flickr.com/photos/187387549@N06/ (one image only), made en:Netskope a lot more spammy and created en:Nexthink, en:Lily Jay (both spam) and en:Martin Devergie.

Momarfish also substantially contributed to d:Q23672838 (Roobee). This yields three articles:

And this is where it starts to get complicated. MER-C (talk) 12:16, 4 September 2021 (UTC)Reply[reply]

This is getting old for this sock farm, so I will stop here. @DarwIn: please delete the images on Commons. MER-C 09:41, 5 September 2021 (UTC)Reply[reply]

PR Olaf Kosinsky[edit]

Olaf_Kosinsky (CA · xwiki · COIBot report) Subteno (CA · xwiki · COIBot report)

A German TV show showed a PE connection between user Olaf Kosinsky and Subteno a disposable sock. This was confirmed by CU. Olaf Kosinsky was involved in many projects. It is reasonable to assume that he also enriched many articles there with advertising. --Itti (talk) 12:28, 4 September 2021 (UTC)Reply[reply]

en:Wikipedia talk:WikiProject Articles for creation notified. MER-C (talk) 16:35, 4 September 2021 (UTC)Reply[reply]
Filed en:Wikipedia:Sockpuppet investigations/Olaf Kosinsky. MER-C 08:53, 5 September 2021 (UTC)Reply[reply]
  • frwiki: @Jules*: frwiki is also involved, for example: fr:Bianca Arndt, fr:Günter Henle, fr:Patrick Sensburg and more
    Yes check.svg Done for fr-wp. I'm sad I don't know german, to understand the TV show and how it revealed the UPE. — Jules* Talk 15:33, 5 September 2021 (UTC)Reply[reply]
    @Itti: Sorry to bother you with that, but I'm trying to understand the whole case in order to report about it on fr-wp. I'm reading de:Wikipedia Diskussion:WikiProjekt Umgang mit bezahltem Schreiben/Verdachtsfälle/Olaf Kosinsky with machine translation and there is something I don't get: was the de-wp community aware of paid edits of this experienced user? It seems he had a PR website under his own name, but I don't see any disclosure of PE on his de-wp user page. — Jules* Talk 15:57, 5 September 2021 (UTC)Reply[reply]
    @Jules*: here a short list de:Wikipedia:WikiProjekt Umgang mit bezahltem Schreiben/Verdachtsfälle/Olaf Kosinsky. I did not know. It may be that someone had seen it before, but in principle it was not known. Olaf Kosinsky was active, he organized and carried out the state parliament projects where MPs were photographed. Also in the EU Parliament. He must have used this contact and probably the idea with the PE has grown over time. It became obvious when Jan Böhmermann (quite popular in de), after doing some research, tried to get in touch with the PR agency of Kosinsky and then commissioned three rather stupid additions. They did that, he delivered with the sock and on Friday it was broadcast in the evening program. I hope to have explained it clearly. Many greetings --Itti (talk) 17:04, 5 September 2021 (UTC)Reply[reply]
    Thank you very much @Itti: Previously, I did not understand that it was the journalist who asked for the three additions made by Subteno; it's very clear now! Best, — Jules* Talk 19:54, 5 September 2021 (UTC)Reply[reply]

Regards --Itti (talk) 09:32, 5 September 2021 (UTC)Reply[reply]

@AFBorchert and DarwIn: c:Commons:Volunteer Response Team/Noticeboard#Tickets verified by Olaf Kosinsky. MER-C 10:10, 5 September 2021 (UTC)Reply[reply]
Reported to eswiki: es:Wikipedia:Tablón de anuncios de los bibliotecarios/Portal/Archivo/Miscelánea/Actual#Olaf Kosinsky. TaronjaSatsuma: could you look at the cawiki side? MarioGom (talk) 11:13, 5 September 2021 (UTC)Reply[reply]
reported in :ca.--TaronjaSatsuma (talk) 12:42, 5 September 2021 (UTC)Reply[reply]
Blocked on Commons: c:Commons:Administrators' noticeboard#Case Olaf Kosinsky. MER-C 13:02, 5 September 2021 (UTC)Reply[reply]
Wikidata checkuser request made: d:Wikidata:Requests for checkuser/Case/Olaf Kosinsky. MER-C 13:10, 5 September 2021 (UTC)Reply[reply]
blocked on wikisource.org -jkb- 14:39, 5 September 2021 (UTC)Reply[reply]
  • Inevitably there will need to be some sort of cleanup for the UPE here – how do we intend to go about this? Do we treat all of his contributions as UPE, or a select few? If so, how would we determine which? Thanks, Giraffer (talk) 18:08, 5 September 2021 (UTC)Reply[reply]
@Giraffer: Olaf Kosinsky was a very prolific and experienced editor and a significant part of his contributions were apparently not paid for. As far as I can see, Olaf Kosinsky was using sockpuppets for paid editing but used his main account to support these activities by moving articles from draft to main space (at en:wp, example), by reviewing new articles (at de:wp, example), and by processing VRT tickets which were related to his paid activities ([example). The problem is that we just know some of the socks but there are probably more which did not come up in the CU results at de:wp as they weren't used in the last three months. --AFBorchert (talk) 09:49, 6 September 2021 (UTC)Reply[reply]
Nothing extra found in the en.wp sockpuppet investigation. MER-C 17:11, 7 September 2021 (UTC)Reply[reply]
Thanks, AFBorchert. I think I'm just gonna go through the sockpuppets' contributions and then whatever interaction the main account had with them (on enwiki). Thanks for your help. Regards, Giraffer (talk) 21:24, 7 September 2021 (UTC)Reply[reply]

Ross kramerov[edit]

Upwork freelance spammer (not their real name) that has polluted multiple wikis. Ongoing abuse. Falsely claims authorship of at least two articles on their Upwork profile.

Residual articles:

Cleanup is mostly complete but there is another sockpuppet investigation pending. MER-C 18:40, 17 September 2021 (UTC)Reply[reply]

Linkspam online casinos et. al.[edit]

We are currently investigating accounts in dewiki which are involved in cross-wiki spamming, there was an SPI on enwp uncovering lots of socks. The accounts usually make a few edits verifying wayback archive links and then they add valid content with a reference to an unsuitable commercial website (online gambling, hair replacement, etc.).

Completed/ongoing investigations:

Other affected wikis:

--Count Count (talk) 10:55, 19 September 2021 (UTC)Reply[reply]









Sites spammed on en.wp:



















Unblocked sockpuppets found:

SPI renewed. MER-C 14:18, 19 September 2021 (UTC)Reply[reply]

I endorsed a CU-check for sleepers on enwiki; I'm basically certain that – at least on en – these are all operated by the same person. I also had a go at a (private) abuse filter. Spam blacklist might be something to consider as well(?), though I have little experience with that. Blablubbs (talk) 18:03, 21 September 2021 (UTC)Reply[reply]
No new domains found on en.wp. Someone needs to gather up all of the domains and send them to Talk:Spam blacklist - but that can only be done once the German and Spanish investigations are completed. MER-C 19:11, 21 September 2021 (UTC)Reply[reply]

Some more socks that we found on it.wiki and then xwiki:

They're probably related to these old accounts: Marcooo671 (CA · xwiki · COIBot report), Blixa8519berlin (CA · xwiki · COIBot report), and Smith8519berlin (CA · xwiki · COIBot report) which edited w:it:LeoVegas the same way User:AnnaAmiar did. Sites spammed on it.wiki: sitiscommesse.com and migliorisitiscommesse.net--Sakretsu (炸裂) 19:47, 25 September 2021 (UTC)Reply[reply]

Dewiki CU-results are in (w:de:Special:Diff/215891560). I requested locks for the unlocked accounts. Blablubbs (talk) 21:52, 25 September 2021 (UTC)Reply[reply]




















































































Additional accounts found:

MER-C 09:24, 26 September 2021 (UTC)Reply[reply]























More. MER-C 15:13, 26 September 2021 (UTC)Reply[reply]

Domains mentioned here nominated for blacklisting. MER-C 10:47, 3 October 2021 (UTC)Reply[reply]
All blacklisted. Dirk Beetstra T C (en: U, T) 12:48, 3 October 2021 (UTC)Reply[reply]
LuchoCR: Some of the accounts listed in this case edit eswiki, maybe you can have a look? Thanks! MarioGom (talk) 07:55, 5 October 2021 (UTC)Reply[reply]
@MarioGom:: None of the accounts have activity in the last 90 days, son can't run a verification. --LuchoCR (talk) 18:51, 5 October 2021 (UTC)Reply[reply]
Next CU on dewiki: de:Wikipedia:Checkuser/Anfragen/Supercars08 --Itti (talk) 13:09, 22 January 2022 (UTC)Reply[reply]
























These links were used by recent sockpuppets related to this spam. --Johannnes89 (talk) 13:56, 22 January 2022 (UTC)Reply[reply]

+ enWP [6] --Johannnes89 (talk) 21:31, 22 January 2022 (UTC)Reply[reply]

Rohit Mehta[edit]





Affects en.wp, simple.wp, hi.wp, Commons and Wikidata. Spam for Rohit Mehta and his website. MER-C 08:35, 20 September 2021 (UTC)Reply[reply]

CharmenderDeol[edit]

See w:en:Wikipedia:Sockpuppet investigations/CharmenderDeol. A large sockfarm working on simple, Commons and enwiki; accounts are usually either segregated between wikis or have a strong focus on one. Per enwiki CU, there is proxy use involved, so I suspect additional local checks may uncover additional accounts. Any assistance with filing relevant investigations and cleanup would be appreciated. Blablubbs (talk) 09:18, 25 September 2021 (UTC)Reply[reply]

Thanks, at Commons speedy deletions have been initiated for File:DAO Minh Quan.jpg, File:Michael Obeng.jpg and File:Luis Marti.jpg. In addition, a couple of regular DRs were opened: c:Commons:Deletion requests/Files uploaded by ImmaDie, c:Commons:Deletion requests/File:Griffin Lotson.jpg, c:Commons:Deletion requests/File:Richard Bohannon.jpg, c:Commons:Deletion requests/File:AQUILES ESTE.jpg, c:Commons:Deletion requests/Files uploaded by Nirmaln404. --AFBorchert (talk) 23:34, 25 September 2021 (UTC)Reply[reply]
I ran into SabrinaMaze (CA · xwiki · COIBot report · simple · en) while working on the enwiki SPI case. They are stale on en, but based on their creation of simple:Aquiles Este they are probably related to this farm (see en:Draft:Aquiles Este, c:File:AQUILES ESTE.jpg). CU on simplewiki might be helpful. Spicy (talk) 01:30, 26 September 2021 (UTC)Reply[reply]
@Ferien: see above. MER-C 10:00, 26 September 2021 (UTC)Reply[reply]
I've sent that page to requests for deletion.. Eptalon, could you take a look at the sockpuppetry stuff? Thanks, Ferien (talk) 10:12, 26 September 2021 (UTC)Reply[reply]

UA85 and related[edit]



  • Affected wikis: Wikidata, pnb.wp (Western Punjabi), en.wp, fr.wp, no.wp, hi.wp (Hindi), ur.wp (Urdu), pl.wp, es.wp, bn.wp, Commons.

UA85 claims to be Umair Ahmad. Originally limited to this subject, they have since engaged in both UPE and link spamming. There is also likely a spam company behind all of this. Ongoing abuse. MER-C 20:01, 25 September 2021 (UTC)Reply[reply]

Most of the sockpuppets did not have any contributions at Commons. Most of the uploads are already deleted, File:Jeans Explosion.jpg is one of the surviving files with VRT permission (appears to be genuine). --AFBorchert (talk) 22:36, 25 September 2021 (UTC)Reply[reply]

Needs a flush out on Commons, Urdu and Punjab Wikipedias. MER-C 17:01, 16 April 2022 (UTC)Reply[reply]

@TheAafi: there are at least a few spam pages on the Urdu Wikipedia awaiting elimination. User:MER-C/Spam/UA85 may be helpful. MER-C 17:12, 25 April 2022 (UTC)Reply[reply]
MER-C Been in travel since last night. Gimme sometime and I'll get this done. ─ The Aafī (talk) 03:41, 26 April 2022 (UTC)Reply[reply]
I deleted several articles under UA85 tag, and will check all others once I reach back home. ─ The Aafī on Mobile (talk) 03:54, 26 April 2022 (UTC)Reply[reply]
{@MER-C:, I deleted a bunch of articles and removed the spam links from several others. I'll likely move few of these through AfD because I'm not sure whether to keep these or to delete them, so I'd seek consensus from the local community. Everything else is Yes check.svg Done. ─ The Aafī (talk) 14:38, 26 April 2022 (UTC)Reply[reply]

Trane007[edit]

These accounts have been blocked for socking and spamming on enwiki (see en:Wikipedia:Sockpuppet investigations/Trane007), but the first two are also active on frwiki. Articles that have been created or heavily edited by them include:

Trane007 was previously warned for UPE on frwiki [7]. There also seems to be some related logged-out editing on 2001:8A0:E80A:B200::/64 - see en and fr contribs. This might go back further than this - Barbapapa888 (CA · xwiki · COIBot report · fr), though stale, is likely related based on editing interests and username.

Thanks, Spicy (talk) 12:21, 1 October 2021 (UTC)Reply[reply]

Hi @Spicy. Thanks for the info. I blocked accounts on fr-wp, deleted some articles, marked the other for UPE, and asked for a SPI: fr:Wikipédia:Vérificateur d'adresses IP/Requêtes/octobre 2021#Trane007, Honesty888 - 1 octobre. (You can ping me when cases are related to fr-wp.) Best, — Jules* Talk 13:03, 1 October 2021 (UTC)Reply[reply]
That was fast - thanks. Will do in the future re. pings. Spicy (talk) 14:39, 1 October 2021 (UTC)Reply[reply]

Locks requested. MER-C 17:09, 9 October 2021 (UTC)Reply[reply]

@Spicy, MER-C, and Jules*: Mardit1 (talk · contribs) has started editing about AFRO on enwp. Blocked locally. Blablubbs (talk) 15:25, 28 October 2021 (UTC)Reply[reply]

Split-project UPE for Dave Sidhu among likely others[edit]

I got a set of users that are likely socks of one another, with single-project editing largely being limited to one of each account. What follows is the behavioral evidence that links them. I'm already working on making sure the enwiki editor gets blocked since it's pretty blatant.

User/Link summaries
















  • R. Edits is linked to R. Articles by the same strong interest in Dharmendra Ahirwar (see this global search)
  • Davesidhusydney is a little stale, but is linked to Tracktouch Productions by en:Dave Sidhu (see log of en:Draft:Dave Sidhu) compared to pa:Dave Sidhu being essentially identical
  • R. Articles is linked to Davesidhusydney by their substantial modifications to the above linked draft.
  • Kanwaljeetsingh is very stale, but had a similar interest with a mainspace creation on Sidhu in 2016, and no other activity.
  • Both R. accounts and Tracktouch have added links to thecover.in, and no one else.
  • Both R. Articles and Tracktouch have added links to davesidhu.in and no one else.
  • Some various other bits point to very likely UPE based from a marketing firm.

Because of the limited amount of single-wiki editing performed, there isn't really any place I can file an SPI. I'm putting this here mainly for documentation purposes, as there may be further cleanup needed: the accounts listed here are mostly very active in editing. I also provided a bit more evidence than probably needed to show that this is a spam ring, but both R. accounts have a decent number of edits (in the hundreds), so I don't want to skip out on any details. Perryprog (talk) 22:19, 5 October 2021 (UTC)Reply[reply]

+Tracktouchrecords, also years stale. GeneralNotability (talk) 22:22, 5 October 2021 (UTC)Reply[reply]

Xenen1970[edit]

Nigerian based spammer. Ongoing abuse. Focus is Nigerian politics and CEOs but occasionally strays into the West.

New accounts not mentioned in the en.wp SPI which I just blocked:

Heavy spamming on Simple English and English Wikipedias, and lots of copyvio images on Commons (there's no way File:European Diversity Awards.jpg, File:Gideon Olanrewaju.jpg and File:Scott Lumley11.jpg among many others, is this user's own work). @Celestina007, DarwIn, and AFBorchert:. MER-C 17:05, 9 October 2021 (UTC)Reply[reply]

@Ferien: see above - I've made a few DRs on Simple, but there's too much and new socks keep on being discovered. MER-C 11:59, 10 October 2021 (UTC)Reply[reply]
I've taken the list of accounts from the simplewiki SPI, and every one of their uploads to Commons was copyvio. I've tagged all of those, but the accounts on the enwiki SPI will also need to be gone through. Jack Frost (talk) 13:06, 14 November 2021 (UTC)Reply[reply]

Several UPE/socks blocked on fr-wp[edit]

Hi (ping @MER-C, @Blablubbs).

We found (and blocked) several accounts on fr-wp which are socks (and probably UPE!), in two separate cases. Articles created should probably reviewed. Some accounts are not blocked yet on en-wp:

I only put the not yet blocked accounts with at least one edit on en-wp; exhaustive lists can be found in the "case summary" links.

Kind regards, — Jules* Talk 22:18, 14 November 2021 (UTC)Reply[reply]

USA/India spammers[edit]

Here is a link to a portfolio of a Wikipedia PR company: https://www.wikipedialegendsllc.com/portfolio.php. List of articles they claim to be theirs:

--212.91.160.53 10:11, 25 November 2021 (UTC)Reply[reply]

Many of the companies offering paid editing services have false client lists, and this appears to be another one of those. Giraffer (talk) 20:54, 26 November 2021 (UTC)Reply[reply]

Changingguardsatbuckinghampalace[edit]

Changingguardsatbuckinghampalace is an Israeli UPE operation primarily focused on English Wikipedia. You can see the accounts in the English sockpuppet investigation, but I'll list here the cross-wiki ones:

And articles:

Maybe frwiki and dewiki could run some checkuser checks? Big UPE operations that go cross-wiki rarely do so for a single article.

Pinging fr and de contacts: Bédévore, Jules*, LaMèreVeille, AFBorchert, Itti, MBq, Millbart.

Best, MarioGom (talk) 19:24, 19 December 2021 (UTC)Reply[reply]

thx for the info, on dewiki a CU ist not possible, account was only active 1 June 2020, the edit is to old for CU. But I will have a look. Regards --Itti (talk) 19:29, 19 December 2021 (UTC)Reply[reply]
Thanks Itti! By the way, for any CU, contact GeneralNotability privately if you need some tips to interpret technical evidence for this sockfarm. MarioGom (talk) 19:34, 19 December 2021 (UTC)Reply[reply]
Thanks for the ping, @MarioGom. I deleted the article and blocked the accounts. Sadly, edits are too old for CU as well. Best, — Jules* Talk 17:33, 20 December 2021 (UTC)Reply[reply]
de:Millennium Management now deleted and protected --MBq (talk) 12:42, 12 February 2022 (UTC)Reply[reply]

Wikipedia:Sockpuppetry[edit]

Misuse of spare account. Creating custom pages in all Wikipedia languages. User accounts:

Global user contributions

--Persia ☘ 13:57, 25 December 2021 (UTC)Reply[reply]

History of creating current pages
History of creating current pages
wiki history by
ps.wikipedia 1:35 9 November 2021 AriaTess
th.wikipedia 21:50 1 November 2021‎ AriaTess
tr.wikipedia 07.16 24 November 2021‎ Miladtayan
uk.wikipedia 15:17 7 November 2021 AriaTess
zh.wikipedia 12:20 8 ‎November 2021 AriaTess
en.wikiquote 16:33 16 November 2021‎ Miladtayan
commons.wikimedia 04:07 28 October 2021‎ AriaTess
wikidata 22:22 25 May 2020 Huyancho
pnb.wikipedia 6:45 6 December 2021 Abbas dhothar
pt.wikipedia 05:27 19 January 2022‎ Aryankhodakaramim
Delete history
Delete history
history Page on [wiki] deleted by
09:25, 30 December 2021‎ [hiwiki] User: रेजा गुडारी
15:56, 27 December 2021 [eswiki] User:-sasha-
17:13, 26 December 2021 [jawiki] User:Marine-Blue
15:21, 26 December 2021 [kowiki] User:Reiro
12:05, 26 December 2021‎ [urwiki] User:Ulubatli Hasan
23:36, 25 December 2021 [ruwiki] User:Q-bit array
22:55, 25 December 2021‎ [itwiki] User:Merynancy
17:12, 25 December 2021 [frwiki] User:Jules*
17:06, 25 December 2021 [dewiki] User:Partynia
18:09, 11 December 2021 [fawikiquote] User:فرهنگ2016
23:19, 08 December 2021 [eswiki] User:Ezarate
06:54, 28 November 2021 [fawiki] User:Jeeputer
01:16, 17 November 2021‎ [enwikinews] User:Acagastya
11:12, 03 November 2021‎ [dewiki] User:Kuebi
10:20, 03 November 2021 [itwiki] User:Gac
11:02, 02 November 2021 [dewiki] User:Stefan64
17:08, 17 September 2021‎ [fawiki] User:Mardetanha
15:46, 11 May 2021 [fawiki] User:Mardetanha
19:57, 17 January 2021 [enwiki] User:Praxidicae

--Persia ☘ 09:24, 28 December 2021 (UTC)Reply[reply]

@Jules*: Hello, What user handles the reports here?--Persia ☘ 20:20, 6 January 2022 (UTC)Reply[reply]
@Persia: Those who follow the page. But, as each report is about various wikis, you should ping users listed in Wikiproject:Antispam/Contacts for wikis relevant in the current case. — Jules* Talk 20:32, 6 January 2022 (UTC)Reply[reply]
  • Remarkable administrators of other wikis in:

--Persia ☘ 09:53, 23 January 2022 (UTC)Reply[reply]

WOWcube[edit]

Hi, can we ping users from other wikis where there were no discussions about this article yet? This is related to Hrabarook and en:Wikipedia:Sockpuppet_investigations/Iexeru/Archive.

Illustrations:

--Anntinomy (talk) 20:39, 20 January 2022 (UTC)Reply[reply]

Multi-language Spam : creation of Luka Snoj in different languages by several accounts[edit]

(in french, sorry)

Bonjour, j'ai la forte suspicion que Luka Snoj a spammé entre mai et octobre 2021 une dizaine de wikis, dont la wikipédia francophone, pour créer sous différents pseudonymes son propre article wikipédia.

Les utilisateurs, tous CAOU, sont inactifs maintenant que ces articles existent (en 9 langues à ce jour, tandis que 2 langues ont été supprimées) mais pourraient revenir si on faisait un gros nettoyage (admissibilité discutable et articles publicitaires bien entendu).

À ce jour 4 de ses présumés pseudonymes ont été exclus, mais de la wikipédia espagnole uniquement.

En déroulant le fil avec l'article français qui me paraissait louche, je me suis fait un petit pavé avec les notes que j'ai pu rassembler. Si l'on supprime les articles sans s'occuper de ces comptes le problème pourrait se poser de nouveau :

Basketball3x3 (nom du bouquin)

CAOU sur en.wiki

17 décembre 2015 à 14:02‎ création page en.wiki

2 imports sur commons effacés en 2015

Europe3x3basketball (variation sur le précédent)

CAOU sur en.wiki et jp.wiki

9 janvier 2021 à 21:15 modifications page en.wiki

17 mai 2021 à 21:15 création page ja.wiki

17 mai 2021 à 23:15 modification sur l'item wikidata

Stephenlentz

CAOU sur en.wiki

compte bloqué sur es.wiki pour abus de faux-nez

3 mai 2021 à 11:59 modifications page en.wiki

18 mai 2021 à 00:02 modifications sur l'item wikidata

213.172.247.30

CAOU sur sl.wiki

4 mai 2021 à 00:31 création page sl.wiki avec le diff "Ustvarjanje nove strani Luka Snoj (po vzoru Luka Snoj strani na amer. Wikipedii)" (google trad : "Création d'une nouvelle page Luka Snoj (sur le modèle de la page Luka Snoj sur Wikipedia américain) "). (NDLR : Ben voyons... si je créé moi-même ma page en anglais, je m'en sers comme modèle pour les autres ;) )

920aa

CAOU sur de.wiki, en.wiki et fr.wiki

compte bloqué sur es.wiki pour abus de faux-nez

18 octobre 2021 à 16:25 modifications page en.wiki

18 octobre 2021 à 20:33‎ création page fr.wiki

18 octobre 2021 à 23:06 une dizaine de modifications sur l'item wikidata jusqu'au 20 octobre

19 octobre 2021 à 00:16 modification page fr.wiki

19 octobre 2021 à 00:42 création page de.wiki

Jskii221

CAOU sur de.wiki, en.wiki, nl.wiki, pl.wiki, pt.wiki

compte bloqué sur es.wiki pour abus de faux-nez

18 octobre 2021 à 16:53 import d'une photo du sujet sur commons

une photo supprimée précédemment, date d'import inconnu

18 octobre 2021 à 22:25 modifications page en.wiki

19 octobre 2021 à 01:47 création page pl.wiki

19 octobre 2021 à 01:58 modifications page de.wiki

20 octobre 2021 à 12:55 création page pt.wiki

20 octobre 2021 à 21:25 création page nl.wiki