Wikipedia:Sockpuppet investigations/Nauman335: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
Line 82: Line 82:


Are we not supposed to update projects and actors? It's weird that just because of common interest of multiple users you are assuming and imposing baseless suspections. [[User:Pppery]] and [[User:Explicit]], Kindly look into the matter or take it to concerned authorities. I had IP 182.182.8.51, now I've created a new account. [[User:AsiaTV45|AsiaTV45]] ([[User talk:AsiaTV45|talk]]) 06:22, 9 February 2024 (UTC)
Are we not supposed to update projects and actors? It's weird that just because of common interest of multiple users you are assuming and imposing baseless suspections. [[User:Pppery]] and [[User:Explicit]], Kindly look into the matter or take it to concerned authorities. I had IP 182.182.8.51, now I've created a new account. [[User:AsiaTV45|AsiaTV45]] ([[User talk:AsiaTV45|talk]]) 06:22, 9 February 2024 (UTC)

User:AsiaTV45 has been blocked, but not admitted IP sock User:182.182.8.51. Their only other edit, three minutes after the post above, was to !vote "keep" at [[WP:Articles for deletion/Teri Ik Nazar]] [https://en.wikipedia.org/w/index.php?title=Wikipedia:Articles_for_deletion/Teri_Ik_Nazar&diff=prev&oldid=1204964679]. Could User:182.182.8.51 also be blocked, to allow a sockstrike at the AFD? [[User:Wikishovel|Wikishovel]] ([[User talk:Wikishovel|talk]]) 07:37, 10 February 2024 (UTC)


====<big>Clerk, CheckUser, and/or patrolling admin comments</big>====
====<big>Clerk, CheckUser, and/or patrolling admin comments</big>====

Revision as of 07:37, 10 February 2024

Nauman335

Nauman335 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki)
Populated account categories: confirmed · suspected


29 January 2024

– A checkuser has completed a check on relevant users in this case, and it is now awaiting administration and close.

Suspected sockpuppets

Most recent socks working on Draft:Akhara (TV series), Draft:Khaie, and Draft:Serial Killer (Pakistani TV series). They previously (and again today) have been using IPs in order to avoid the block/ban. Resubmitting the drafts in an attempt to avoid the previous blocks. Not only is editing behavior the same, but also using the same operating system for many of the edits. Also note that user:PAKEDIT123 is one that was NOT previously included in any of the SPI reports filed, but noticed it while logging the IP addresses for this filing. CNMall41 (talk) 20:30, 29 January 2024 (UTC)[reply]

One IP is back to removing the redirect from a page that sock has relentlessly attempted over the last month. --CNMall41 (talk) 20:49, 29 January 2024 (UTC)[reply]
They also created some additional articles which I moved to draftspace. Looks like a different OS so they may have finally read the SPIs that were previously filed. In the very least, it is MEAT and undisclosed PAID. --CNMall41 (talk) 21:00, 29 January 2024 (UTC)[reply]
Additional evidence as it appears they may be editing from proxy or different location. IP:39.34.184.141 editing the page Mawra Hocane which was previously edited by user:WikiiUsee, a sock of Jha09. Note that these farms are all closely related and likely the same paid editing firm. I also have additional information on a more experienced user that I will be emailing in the next hour. --CNMall41 (talk) 05:26, 30 January 2024 (UTC)[reply]
More evidence, this one for IP:39.34.172.106, who edited Ishq Murshid, a few days after being edited by now blocked sock user:N335786.--CNMall41 (talk) 06:10, 30 January 2024 (UTC)[reply]

Private information for this SPI just sent to checkuser email with subject "SPI Case - Nauman335." --CNMall41 (talk) 06:39, 30 January 2024 (UTC)[reply]

Adding User:IK804, account created on January 30, 2024 with Android OS. Left message on my talk page about Draft:Khaie, a draft this account has never edited (but edited by IPs listed above and other SOCKS of Nauman335). --CNMall41 (talk) 20:33, 31 January 2024 (UTC)[reply]
More on IK804, they edited the page Meray Paas Tum Ho, within 2 hours of edits to the same page by user:Azlankazmi (see below filing with Azlankazmi in other SPI). --CNMall41 (talk) 21:02, 2 February 2024 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  •  In progress - preliminary findings: IK804 is  Technically indistinguishable from Nauman335. PAKEDIT123 sometimes operates out of the same IP range, but there are some differences - certainly  Possible, will need to look harder at that one. Looking at the accounts in the report below to get a better overview before taking any action. Girth Summit (blether) 11:38, 3 February 2024 (UTC)[reply]
  • OK, I'm convinced on both of the accounts. As I said, IK804 is indistinguishable from numerous previous socks. I was initially uncertain about PAKEDIT123, but their footprint is identical to that of the blocked sock Roundabout777, listed as confirmed to this case, so I'm blocking both of them. No comment on the IPs in this case - someone else will need to look at them and determine if any of them need blocking. Girth Summit (blether) 11:52, 3 February 2024 (UTC)[reply]

02 February 2024

– A checkuser has completed a check on relevant users in this case, and it is now awaiting administration and close.

Suspected sockpuppets

Again (as with previous SPI filings), some of these socks likely overlap with other sock farms in the film-related space. I firmly believe these are all the same company but have editors in various locations which is why so much overlap. Assigning to Nauman335 based on the OS of some of the socks, but likely can be associated with others listed below in comments such as ANASKHAN777 and Helloo 68 based on editing behavior.

User:Azlankazmi created account on January 9, 2024. Editing from Android OS. Recent contributions made to Ishq Murshid which has been heavily edited by Nauman335 socks user:MaG45443 and user:N335786 (also both Android OS).

Ip Range 39.XX has also been editing the same sock pages and listed in previous Nauman335 report currently awaiting CU. IP 39.62.182.122 edited Saba Qamar in an attempt to change name of page Tere Ik Nazar (redirect) to Teri Ik Nazar (non-existent page at the time). That edit was reverted and then 22 minutes later restored by user:Pllutin who created a new page for Teri Ik Nazar 5 minutes prior to that time.

Pllutin also created page Sar-e-Rah in April 2023 before it was moved to draft space. It was then recreated by user:Avadh990 who is a blocked sock of ANASKHAN777, a sock farm also using the IP 39.XX range. Also editing other pages that have been edited by these sock farms, including ANASKHAN777 and Nauman335. Note that user:Pllutin also includes creation of pages to update awards such as those winning Lux Style Awards. This behavior is similar to that of the sock farm for user:Helloo 68. Most recent edit at time of filing that came from Pllutin is for the page Aagha Ali which was edited by user:Dicraft788 (now blocked sock of Nauman335). The edit by Pllutin is the first to that page since the revert of sock edits by Dicraft778. CNMall41 (talk) 20:55, 2 February 2024 (UTC)[reply]

@Girth Summit:, As stated here, HUGE THANKS!!! I know this was a rabbit hole and I appreciate you taking the time out of your personal enjoyment to take care of it. I will mention that you are likely correct about Qwef1234. I had emailed some private info to CU email so you finding this in your check would only confirm the suspicion. Thanks for that. I also understand about the IPs above. Was just hoping to connect them to the three drafts (based on DUCK at least since the other socks were also editing) so we can get those G5'd. Either way, this is huge for what you found. Again, thanks!!!--CNMall41 (talk) 01:54, 4 February 2024 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


04 February 2024

– A user has requested CheckUser. An SPI clerk will shortly look at the case and endorse or decline the request.

Suspected sockpuppets

In classic Nauman335 style, new account created on February 4, 2024 and goes right to Draft:Chikkar (film) and submits to AfC. Draft originally created as Chikkar (film) by 39.34.184.141 before being moved to draft. This IP is associated with the sock farm and awaiting CU comments from previous filing. Note that Wys777 is editing with same OS as most Nauman335 socks. CNMall41 (talk) 23:23, 4 February 2024 (UTC)[reply]

User also added the page Khaie to Zeb Bangash. Note that it was moved to draft previously for being created by socks. This user also created and submitted Draft:Khaie (2024) under a disambiguation title in an attempt to avoid detection. --CNMall41 (talk) 23:26, 4 February 2024 (UTC)[reply]
And today edited Jaan-e-Jahan, a page where edits were recently rolled back that were made by user:MaG45443, a now blocked sock of Nauman335.--CNMall41 (talk) 21:40, 6 February 2024 (UTC)[reply]
As well as College Gate, a regular page for Nauman335 socks. --CNMall41 (talk) 21:41, 6 February 2024 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


07 February 2024

– A user has requested CheckUser. An SPI clerk will shortly look at the case and endorse or decline the request.

Suspected sockpuppets

Page Gumn was deleted on the 4th per G5 based on creation by Nauman335 sock user:Qwef1234. User:Metamentalist (account created on December 21, 2023) requested it be restored so it is back in the mainspace. Interaction tool shows a ton of same page editing which I believe is more than a coincidence for an account only 6 weeks old. A check of the edit history by user also shows editing pages from other sock farms as well so may be associated with the whole lot. CNMall41 (talk) 22:43, 7 February 2024 (UTC)[reply]

Metamentalist added the film Khaie to Shamil Khan today. There are now two drafts (one here which was heavily edited by Nauman335 farm and here which was created by user:Wys777 reported above on February 4th).--CNMall41 (talk) 19:25, 8 February 2024 (UTC)[reply]
Also have IP adding the Wikilink which could potentially be LOS. --CNMall41 (talk) 04:30, 10 February 2024 (UTC)[reply]
Adding user:M.Nauman123 for obvious name reasons, but also editing Ishq Murshid, a favorite target for Nauman335 socks. Note the OS of this user as it is possible they are in the same group as Sock:Cricket Butterfly (I believe these are all the same at this point). IP:39.34.168.88 also editing right after M.Nauman123 on the same pages so likely LOS. --CNMall41 (talk) 04:42, 10 February 2024 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

So as per you everyone who edit articles related to Pakistani television and film industry is a sock. It's so unfair just because editing methods are similar you've blocked them on this assumption that they might be socks. Somewhere it discourages editors to join and contribute Wikipedia. I demand equal and fair opportunity to edit articles with respect to Pakistani media and kindly have SPI for User:Qwef1234 and User:Lillyput4455. I created multiple articles and they were just deleted on baseless assumptions and now I'm so demotivated to create new articles. I request administrators to kindly look into the matter as I requested User:Liz earlier for the same. 182.182.8.51 (talk) 13:52, 8 February 2024 (UTC)[reply]

Are we not supposed to update projects and actors? It's weird that just because of common interest of multiple users you are assuming and imposing baseless suspections. User:Pppery and User:Explicit, Kindly look into the matter or take it to concerned authorities. I had IP 182.182.8.51, now I've created a new account. AsiaTV45 (talk) 06:22, 9 February 2024 (UTC)[reply]

User:AsiaTV45 has been blocked, but not admitted IP sock User:182.182.8.51. Their only other edit, three minutes after the post above, was to !vote "keep" at WP:Articles for deletion/Teri Ik Nazar [1]. Could User:182.182.8.51 also be blocked, to allow a sockstrike at the AFD? Wikishovel (talk) 07:37, 10 February 2024 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments