Talk:Wikiproject:Antispam
Hi, welcome to the talk page of the antispam project!
Information we need to investigate promotional spam:
- a list of the accounts involved in cross-wiki spam
- the reasons you think there's cross-wiki spam, e.g. single-purpose accounts coordinating on closely related topics which don't meet notability guidelines and/or contain highly promotional content
- have there been past community discussions on local projects? Have sockpuppet investigations been conducted?
We can investigate on other wikis, find new sockpuppets or suspicious edits and find new data to get the bigger picture. When a case is solved, we can inform local communities to ask for help with cleanup (e.g. by deleting pages or systematically removing promotional material).
We also keep an archive of past cases to keep track of and minor cases and internal matters.
Welcome
Hi, welcome everyone to the antispam project. Native English speakers, I am guilty for the terrible style. ;) Feel free to rephrase as you see fit. Best, Bédévore (talk) 15:30, 30 July 2021 (UTC)
- For the record, this project is born after this discussion (permalink) on en-wp. Best, — Jules* Talk 15:36, 30 July 2021 (UTC)
- @Bédévore and Jules*: How come all things frwiki-related just look so beautiful? This is great work, thank you so much for taking the time. I've given the landing page a major copyedit. Blablubbs (talk) 17:07, 30 July 2021 (UTC)
- Thank you @Blablubbs (twice)! — Jules* Talk 17:10, 30 July 2021 (UTC)
- Thanks Blablubbs! Bédévore (talk) 21:59, 30 July 2021 (UTC)
- Thank you @Blablubbs (twice)! — Jules* Talk 17:10, 30 July 2021 (UTC)
- @Bédévore and Jules*: How come all things frwiki-related just look so beautiful? This is great work, thank you so much for taking the time. I've given the landing page a major copyedit. Blablubbs (talk) 17:07, 30 July 2021 (UTC)
Looking for contacts on Wikimedia projects
Hello,
As discussed before, this wikiproject would be very useful to identify volunteers of other Wikimedia projects willing to help on cross-wiki promotion cases.
Bédévore and I will soon start contacting other wikis (using embassies or other means) to identify such volunteers, so they can join this project and list their names on Wikiproject:Antispam/Contacts. I suggest we list below which projects each of us did contact, in order to avoid any redundancy.
Regards, — Jules* Talk 16:35, 30 July 2021 (UTC)
- Done wp-de: de:Wikipedia_Diskussion:WikiProjekt_Vandalismusbekämpfung#Wiki-übergreifende_Vandalismusbekämpfung_:_Vorschlag by user:Sijysuis + de:Wikipedia_Diskussion:WikiProjekt_Umgang_mit_bezahltem_Schreiben#Meta_Wikiproject:Antispam by me — Jules* Talk 18:22, 30 July 2021 (UTC)
- Done WD in Fr & Eng. https://www.wikidata.org/wiki/Topic:Wdpwdyaftk490tvl and [1]. I'll also hit one or two Italian-speaking fellow wikipedians (my Italian writing skill is so rusty!). Bédévore (talk) 21:43, 30 July 2021 (UTC)
- @Bédévore: for it-wp, we could send a message on it:Discussioni_progetto:Coordinamento/AntiSpam. (I can do it, but in English, not in Italian!) — Jules* Talk 13:46, 31 July 2021 (UTC)
- Done Message sur la itwiki [[2]], j'ai aussi contacté un admin pour lui demander de faire suivre s'il y a une page plus appropriée.--Msbbb (talk) 18:05, 1 August 2021 (UTC)
- @Bédévore: for it-wp, we could send a message on it:Discussioni_progetto:Coordinamento/AntiSpam. (I can do it, but in English, not in Italian!) — Jules* Talk 13:46, 31 July 2021 (UTC)
- Done eswiki: es:Wikipedia:Café/Archivo/Noticias/Actual#Nuevo proyecto en meta contra el spam. MarioGom (talk) 23:09, 30 July 2021 (UTC)
- Off the top of my head, we have some cross-wiki UPEs working in Ukrainian, Russian and Turkish too. Hopefully we can contact someone on these communities? MarioGom (talk) 23:13, 30 July 2021 (UTC)
- @MarioGom: Yes, it would be nice too (I didn't list all wikis on Wikiproject:Antispam/Contacts, but anyone can ad it's own wiki, obviously), but I don't have much contacts on these communities. Maybe we should use the embassies. — Jules* Talk 08:41, 31 July 2021 (UTC)
- Off the top of my head, we have some cross-wiki UPEs working in Ukrainian, Russian and Turkish too. Hopefully we can contact someone on these communities? MarioGom (talk) 23:13, 30 July 2021 (UTC)
- Done wp-ro: ro:Discuție_Utilizator:Jules*#Undeclared_CdI / ro:Discuție_Wikipedia:Ambasadă#Metawiki_Project:Antispam / ro:Wikipedia:Cafenea#Proiect_antispam. — Jules* Talk 08:24, 2 August 2021 (UTC)
- Done wp-pt: pt:Wikipédia:Esplanada/geral#Meta_Wikiproject:Antispam. — Jules* Talk 08:52, 1 August 2021 (UTC)
- Done tr-wp tr:Vikipedi:Köy_çeşmesi_(ilginize)#Çapraz_viki_spam_ile_mücadele--Jean-Mahmood (talk) 18:48, 5 August 2021 (UTC)
Following up Prix Versailles
Prix Versailles was promoted across sixteen Wikipedias and inspired the creation of this meta project.
On en and fr Wikipedias we have
- discussed the problem on an antispam forum
- requested a local sockpuppet investigation for the editors involved
- requested a sockpuppet investigation on meta for the editors involved
- added templates to articles such as en:Template:Undisclosed paid (ongoing)
- nominated affected articles for deletion (ongoing)
- cleaned up promotional material (ongoing)
I have posted a version of the following message on fourteen Wikipedias and Wikidata.
Message |
---|
Cross Wikipedia promotion and sock puppets for Prix Versailles An investigation has found that articles on en:Prix Versailles and related subjects were the subject of a coordinated campaign of promotion, over several years and sixteen languages, involving numerous sock puppets and probably paid editing. Ten active and six older accounts were identified. Related subjects include en:Purple economy, en:Cultural footprint and en:International Appeal of 7 June 2020. If you have any questions or comments please reply here or post them at the Cross-Wikipedia section of the en Wikipedia discussion. Links |
Please post your comments and questions on the case in this discussion. TSventon (talk) 13:01, 31 July 2021 (UTC)
- Thanks for reaching out all these communities! FYI, I opened an archive for this case: Wikiproject:Antispam/Archives/2021/Prix Versailles.
- I also used id:Templat:Undisclosed paid on id-wp. I guess we can do that too, when there is such template on the wiki. — Jules* Talk 13:26, 31 July 2021 (UTC)
- Thank you Jules* only a few projects have responded so far, so I may need some help or advice with finding the right contact.
- Based on your suggestion, I have added adding templates to the steps taken.
- I have asked at en:Wikipedia:Articles for deletion/Prix Versailles whether it is possible to keep the history of the article accessible while cross wiki investigation is ongoing. Do you think that would be useful, or indeed practical? TSventon (talk) 14:23, 31 July 2021 (UTC)
- I will help you on the second round, but let's wait a bit for a reaction on wikis where there is no reaction for now.
- For the en-wp article: I'm not sure it's needed, except if you think we miss socks? I did not really dig the en-wp article history tbh ;-). — Jules* Talk 14:28, 31 July 2021 (UTC)
- I agree people need time to respond, especially where I only posted messages today. I will look for another route for it Wikipedia as I have posted on their Antispam project which appears dormant.
- I was "thinking aloud" about whether there is a value in keeping the history of PV accessible and wondering whether it would hinder investigation on other Wikipedias if most of the evidence on en and fr Wikipedias was deleted. Probably it wouldn't. TSventon (talk) 14:51, 31 July 2021 (UTC)
- Has somebody contacted Commons? I noticed that the sustainable development files on the Purple economy articles have almost all been deleted today, but I suppose that could be coincidence. TSventon (talk) 22:49, 31 July 2021 (UTC)
- I did not! But I indeed saw that files were deleted. Maybe an initiative of wikipedians from one of the several wikis you informed? Best, — Jules* Talk 08:10, 1 August 2021 (UTC)
- Thanks, I will ask at Commons. Should the remaining pictures by MARdF (Guy Savoy) and Idoumou33 (Francesco Bandarin, Paulina Morán, Jury Prix Versailles 2018) be nominated for deletion? I am not sure how to do that. They are all own work: if that is correct the subjects suggest a closer involvement with Prix Versailles than the editors admitted. File:Guy Savoy.jpg seems to be a copyvio as it is marked ©laurence Mouton. TSventon (talk) 12:36, 1 August 2021 (UTC)
- @TSventon: for File:Guy Savoy.jpg, it's not copyvio as there is a VRTS permission ticket attached ;). For the other files, yes, it suggest a closer involvement... but I can't find older sources on the web for those files, so there is no evidence of copvio (and as the people pictured are not anonymous, I guess there is no reason to delete it?). Except for File:Réunion Jury Prix Versailles 2018.jpg which is also on Prix Versailles website, with a risk of copyvio; I will add a template for this one, and Commons user will decide what to do. Best, — Jules* Talk 12:47, 1 August 2021 (UTC)
- Jules* Guy Savoy is flagged as MARdF's own work and also as ©laurence Mouton, who seems to be a professional photographer.The VRTS permission ticket may explain that, but I can't see it. The photograph of Francesco Bandarin with a giant tortoise, flagged as Idoumou33's own work, was probably taken on a visit to Galapagos. If the Prix Versailles editors uploaded copyrighted sustainable development files, arguably all their work is suspect. TSventon (talk) 13:08, 1 August 2021 (UTC)
- TSventon For Guy Savoy, indeed, there seems to be an error in attribution. For the rest, I understand your point; feel free to submit the case to Commons sysops. Best, — Jules* Talk 13:31, 1 August 2021 (UTC)
- The Commons sysop who deleted the files on the Purple economy articles had seen the archive page and has now nominated everything except Guy Savoy for deletion. TSventon (talk) 18:33, 1 August 2021 (UTC)
- TSventon For Guy Savoy, indeed, there seems to be an error in attribution. For the rest, I understand your point; feel free to submit the case to Commons sysops. Best, — Jules* Talk 13:31, 1 August 2021 (UTC)
- Jules* Guy Savoy is flagged as MARdF's own work and also as ©laurence Mouton, who seems to be a professional photographer.The VRTS permission ticket may explain that, but I can't see it. The photograph of Francesco Bandarin with a giant tortoise, flagged as Idoumou33's own work, was probably taken on a visit to Galapagos. If the Prix Versailles editors uploaded copyrighted sustainable development files, arguably all their work is suspect. TSventon (talk) 13:08, 1 August 2021 (UTC)
- @TSventon: for File:Guy Savoy.jpg, it's not copyvio as there is a VRTS permission ticket attached ;). For the other files, yes, it suggest a closer involvement... but I can't find older sources on the web for those files, so there is no evidence of copvio (and as the people pictured are not anonymous, I guess there is no reason to delete it?). Except for File:Réunion Jury Prix Versailles 2018.jpg which is also on Prix Versailles website, with a risk of copyvio; I will add a template for this one, and Commons user will decide what to do. Best, — Jules* Talk 12:47, 1 August 2021 (UTC)
- Thanks, I will ask at Commons. Should the remaining pictures by MARdF (Guy Savoy) and Idoumou33 (Francesco Bandarin, Paulina Morán, Jury Prix Versailles 2018) be nominated for deletion? I am not sure how to do that. They are all own work: if that is correct the subjects suggest a closer involvement with Prix Versailles than the editors admitted. File:Guy Savoy.jpg seems to be a copyvio as it is marked ©laurence Mouton. TSventon (talk) 12:36, 1 August 2021 (UTC)
- I did not! But I indeed saw that files were deleted. Maybe an initiative of wikipedians from one of the several wikis you informed? Best, — Jules* Talk 08:10, 1 August 2021 (UTC)
- Has somebody contacted Commons? I noticed that the sustainable development files on the Purple economy articles have almost all been deleted today, but I suppose that could be coincidence. TSventon (talk) 22:49, 31 July 2021 (UTC)
TSventon, you added [3] very specific information to the en:World Architecture Festival page. That page was created by the organisers themselves, and mainly updated by SPAs. It's not possible to add so specific information to the page without explicit interest. You also created the dedicated page en:INSIDE Festival, which is part of en:World Architecture Festival. The World Architecture Festival is merely known by some architects. That organisation awards buildings, as the Prix Versailles does, but the Prix Versailles adresses also the large public. There are not many awards with this scope. I can't believe you are not acting here for the UK-based World Architecture Festival. Apart from the University of Oxford, up to now your job was mostly correcting typos. Since one month [4] @ GeneralNotability, Prix Versailles deleting has been a major part of your work [5]. As we can see, your will was clearly to delete Prix Versailles mentions in all wiki: "If Fr Prix Versailles is deleted, will fr Wikipedia remove other mentions of the prize?" [6] @ Blablubbs and Jules*. You worked conscientiously for that. And you organised canvassing with that purpose: "you are obviously welcome to comment at Wikipedia:Articles for deletion/Prix Versailles as well. If Prix Versailles is deleted, then mentions of the award in other articles will probably be removed as well" [7] @ Netherzone. You said to Possibly: "I'm no specialist" about architecture and design. That is not true. [8] All this reveals manipulation with a big conflict of interest for the benefit of a competitor. 95.140.7.136 11:40, 21 August 2021 (UTC)
- (Blocked) IP editor, I edit subjects in Wikipedia I enjoy, including Oxford, architecture and typos. In July I noticed that Prix Versailles related content on Wikipedia had been added by a number of single purpose accounts so I felt obliged to report that at Wikipedia:Conflict of interest/Noticeboard and do some work on following up the report. I made a few edits mentioning the World Architecture Festival in 2019, but I was and am not acting for them. (Response copied from en:Wikipedia:Categories for discussion/Log/2021 August 2#Prix Versailles.) TSventon (talk) 14:59, 21 August 2021 (UTC)
About Pierre Malinowski
Hi,
On fr-wiki we identified problematic spam on closely related topics:
- fr:Pierre Malinowski
- fr:Tunnel de Winterberg
- fr:Fondation pour le développement des initiatives historiques franco-russes
SPI showed that: fr:Wikipédia:Vérificateur d'adresses IP/Requêtes/juillet 2021#Svetlana090, Foundation-french, Marija1st, BKTeaman, Yasinkovski, Jean-Dumoulin1, Jehanne-Sylvie - 24 juillet = 31.28.224.0/19 is proxy and sockpuppets are:
- Svetlana090 [stalktoy] – [cross-wiki edits]
- Foundation-french [stalktoy] – [cross-wiki edits]
- Marija1st [stalktoy] – [cross-wiki edits]
I also blocked other SPAs:
- BKTeaman [stalktoy] – [cross-wiki edits]
- Yasinkovski [stalktoy] – [cross-wiki edits]
- Jehanne-Sylvie [stalktoy] – [cross-wiki edits]
- Jean-Dumoulin1 [stalktoy] – [cross-wiki edits]
The pages are also under extended protection (2 yrs)-see request to admins: [9] Affected wikis are:
- commons++++
- en-WP+++++
- fr-WP++++++
- ru-WP++++++
- de-WP++
- WD+++
I can't speak German or Russian to warn them about this spam by a bunch of SPAs. Best regards, Bédévore (talk) 14:40, 31 July 2021 (UTC)
- Done en-wp: https://en.wikipedia.org/w/index.php?title=Talk:Pierre_Malinowski&diff=prev&oldid=1036490082
- Done de-wp: https://de.wikipedia.org/w/index.php?title=Wikipedia:Administratoren/Anfragen&diff=prev&oldid=214388756 & https://de.wikipedia.org/w/index.php?title=Diskussion:Winterberg-Tunnel&diff=prev&oldid=214388830
- Done ru-wp [10] & [11] Bédévore (talk) 22:03, 31 July 2021 (UTC)
- Done reported to stewards 2021-07-24 https://meta.wikimedia.org/w/index.php?title=Steward_requests/Global&diff=prev&oldid=21784791
- Done reported to stewards again 2021-08-01 https://meta.wikimedia.org/w/index.php?title=Steward_requests/Global&diff=prev&oldid=21814476
created the page on en.wp. I blocked them for spamming back in April, for creating w:Roman Bekmuradov. MER-C (talk) 12:29, 1 August 2021 (UTC)
Çelebicihan on VPN
Çelebicihan is a cross-wiki UPE sockfarm, based on Ukraine, and editing primarily en-wp, ru-wp and uk-wp. I have created an archive page for those not familiar with it Wikiproject:Antispam/Archives/2021/Çelebicihan. The article list is still not complete, and there is a lot of clean up pending.
They have also edited while logged out and using VPNs. They are currently using VPN-Point, see:
The IP is reported at en:Wikipedia:WikiProject on open proxies#193.111.61.165 for block on en-wp. We may want to request global lock, or blocks at ru-wp and uk-wp.
cc Oleg Yunakov. MarioGom (talk) 18:21, 1 August 2021 (UTC)
- I pasted all the deleted contributions by the tagged socks on en.wp, as well as the files they uploaded on Commons. They turn up in my suspicious article list every now and then; I'm sure there's plenty that slipped through the net (in fact, I just found two that have). MER-C (talk) 19:18, 1 August 2021 (UTC)
- Thank you for bringing this to my attention! I have blocked the IP for 3 months (fr now), nominated for deletion some of their pages as well as deleted some older nominations. I'll be verifying more and keeping an eye on them. Oleg Yunakov (talk) 23:32, 1 August 2021 (UTC)
- Thank you for taking care of it! MarioGom (talk) 07:13, 5 August 2021 (UTC)
- Thank you for bringing this to my attention! I have blocked the IP for 3 months (fr now), nominated for deletion some of their pages as well as deleted some older nominations. I'll be verifying more and keeping an eye on them. Oleg Yunakov (talk) 23:32, 1 August 2021 (UTC)
Self-promotion: Badr Rafiki
(Q107171297) (b. 1998), Moroccan singer. Articles in different languages (mostly deleted) and repeatedly uploads in Commons (commons:Category:Badr Rafiki). --Kolja21 (talk) 01:45, 2 August 2021 (UTC)
- On fr-wp, I extended the creation protection for one year, as it was about to expire. — Jules* Talk 06:55, 2 August 2021 (UTC)
Wikibusiness
Hi,
I'v been alerted on Twitter by someone who had been approched by Wikibusines.com; they have another website: www.wikibusiness.com.ua.
Their websites display a list of articles they claim to have edited – it should be noted that the list of edited wp articles differs from one website to another, but also, on the same website, depending on the language; example with Wikibusines.com: es, fr, es.
Client lists (and more) |
---|
Here is the current wp articles list (with my assesment for some fr-wp and en-wp pages):
|
I found out (via en:Beyond_Meat) that the case has already been discussed on en-wp, with a SPI, see:
- en:Wikipedia:Sockpuppet investigations/Bodiadub/Archive
- en:Wikipedia:Administrators'_noticeboard/IncidentArchive1020#Paid_editing
It seems that ru-wp and uk-wp are aware too, as they blocked several accounts (see for example there), but with the language barrier, it's hard for me to get a big picture of it. Does anyone have more info/links? @MER-C, NickK, and Oleg Yunakov:?
Regards, — Jules* Talk 18:16, 5 August 2021 (UTC)
- + Cutezorn (CA · xwiki · sc · COIBot report · commons), for the fun. — Jules* Talk 18:27, 5 August 2021 (UTC)
- Also known as Crazyalien (CA · xwiki · sc · COIBot report). They've been banned by the W?F. They're also still active, I blocked Petrshenko42 (CA · xwiki · sc · COIBot report) not too long ago. They are on PAIDLIST, but there is no additional information there. Sockpuppet tagging is rather spotty on en.wp - this needs to be tidied up before I can look at the deleted edits en masse. MER-C (talk) 19:29, 5 August 2021 (UTC)
- Hi Jules*, I have checked and all of them are already blocked on ruwiki. Oleg Yunakov (talk) 23:45, 5 August 2021 (UTC)
- @Jules*: Basically, they are a major pain in the ass to Ukrainian Wikipedia (and likely to the Russian one as well). Almost all of their paid editing is undisclosed. There three main approaches are the following:
- Cold calling companies or celebrities that do not have Wikipedia pages yet offering them creation of pages in their language, or creating pages about their company in additional languages (usually asking for something like 250-500 USD per article). Some companies or celebrities then complain (sometimes publicly on social media) that Wikipedia is not really free and you need to pay to get a page there.
- Contacting companies or celebrities whose pages were nominated for deletion, often just hours after nomination, offering their help in keeping the article (offering even positive result from a 'friendly' administrator for some fee). This is a major source of damage to Wikipedia reputation: companies or celebrities think that Wikipedia blackmails them into payment to keep their article.
- Literal blackmailing, manipulations and harassment. For instance, on one occasion they contacted a (prominent and rich) politician, asking for payment to protect their article against vandalism, and heavily vandalised the article the same day. On another occasion, they organised an edit war to remove a major scandal from an article about a company, and they manipulated an administrator to protect this article on their version. They have also manipulated on-wiki discussions, like nominating articles about notable companies for deletion, harassing editors willing to keep these articles, and then contacting companies for a payment to 'save articles from evil Wikipedians'. This is borderline criminal, and as far as I know (but cannot confirm) some company or celebrity even complained to the police about them.
- Based on what Wikibusiness' post on social media and job forums, they are willing to expand their business to new languages. By this point they are well-known in Ukraine (both as a group ready to made a really dirty work on Wikipedia, and as a group trying to sell you expensive services you don't actually need), so it is disappointing - but unfortunately not surprising - to see their activity on more and more wikis.
- Their founders Bogdan Dubyliovsky (Bodiadub) and Roman Melnyk (Crazyalien) are both globally WMF-banned. They created multiple sockpuppets and made many IP-edits globally (including VPNs and proxies), so 2019 socks are clearly not the only ones. I know at least one confirmed case where they paid a relatively experienced Wikipedia editor to make edits requested by Wikibusiness from their account. This is clearly not the only case, so they are likely working with multiple meatpuppets/subcontractors in multiple wikis.
- And of course there is no guarantee everything they announce is true, we have already seen them claiming things they were not related to - and vice versa, them denying things they have clearly done — NickK (talk) 12:45, 6 August 2021 (UTC)
- Thank you very much, @NickK, for this comprehensive summary. I find it particularly worrying that real experienced Wikipedians accept to get paid to do that kind of work, but I guess I'm still a bit naive about that; it probably also exists (beyond this firm) on fr-wp without me beeing aware of it.
- I will try to monitor it if Wikibusiness starts working on fr-wp.
- — Jules* Talk 14:00, 6 August 2021 (UTC)
- @Jules*: They already did. fr:Harfouch Walid is clearly one of their works. I guess there are more — NickK (talk) 14:24, 6 August 2021 (UTC)
- I would be happy to block it and to delete its edits, but do you have more info @NickK? I can only find that the account Fabrica2808 (CA · xwiki · sc · COIBot report · uk · fr · es · en · wikidata) used an open proxy (uk:Вікіпедія:Запити на перевірку користувачів/2020#Наші старі знайомі), but I can't find where it has been linked to Wikibusiness firm, and I see that the account is not locked, and not blocked on en-wp. — Jules* Talk 15:30, 6 August 2021 (UTC)
- @Jules*: Basically duck test for Fabrica2808 (interest in some of Wikibusiness clients like uk:Альянс краси or en:Reface (they seem to have a lot of clients on apps), plus interest in topics related to Ukrainian war in foreign wikis, e.g. fr:Cyborgs (défenseurs de l'aéroport de Donetsk) - Bodiadub personally wrote about translating this article into multiple languages - or en:Shatun), plus open proxies confirming block evasion. Plus uk:Валід Арфуш experienced a suspicious edit war exactly at the same time as fr:Harfouch Walid was written. I am not sure if this is a sock of Bodiadub or Crazyalien, or if it is a separate person that sometimes writes for Wikibusiness and sometimes on their own — NickK (talk) 16:07, 6 August 2021 (UTC)
- Thanks for this information; that's enough for me taking action on fr-wp.
- Sorry to take your time (!), but regarding fr:Harfouch Walid, what about the SPA Marya.dubovnickaya (CA · xwiki · sc · COIBot report · commons · en · fr · es · ar · de · it · ru), who created (back in 2013) en:Walid Harfouch, ru:Арфуш, Валид and ar:وليد حرفوش, the nearly-SPA Mestees (CA · xwiki · sc · COIBot report · uk · ru · en · wikidata · arz · ar · commons) (more recent), and the account Ebsentura (CA · xwiki · sc · COIBot report · uk · commons · wikidata), who uploaded several files of Walid Harfouch? And regarding es:Reface, also created by Fabrica2808, what about OmInna (CA · xwiki · sc · COIBot report · uk · ru · en · wikidata · be-tarask · pl · be · commons), who created ru:Reface and uk:Reface (where another editor added an UPE template)? May be linked to Bodiadub or Crazyalien? — Jules* Talk 16:13, 6 August 2021 (UTC)
- 2013 is before Wikibusiness was launched, but I cannot exclude that Marya.dubovnickaya was an employee (e.g. a PR agent) of Walid Harfouch. OmInna is extremely suspicious, first edit on enwiki is on an AfD of a person related to Playrix, a well-known Wikibusiness client (en:Wikipedia:Articles for deletion/Dmitry Bukhman), but I am not sure if this is a sock or a genuine person working for them. Ebsentura really looks like a paid editing sock (I have hardly ever seen newbies uploading four pictures from four different cameras but with their Commons username and license in EXIF, thus looks like a professional license launderer, plus involved in defending quite a paid editing article on ukwiki uk:Благо (фінансова компанія)). There goes Mestees as well: they have also edited an article on the likely Wikibusiness client uk:Альянс краси, plus enwiki contributions at en:Special:Contributions/Mestees are extremely weird (just two articles: cleaning biography of Lebanese-Ukrainian TV businessman and correcting extremely technical details of a case involving Russian businessmen), plus, again, Commons username and license in EXIF of their only upload. I think these three are likely a part of the Wikibusiness farm behaviour-wise, either as socks or as unrelated Wikipedians working for them. Not sure I will have time to CU them quickly, but pinging my fellow CUs @Goo3 and Andriy.v: who are also following them — NickK (talk) 22:16, 6 August 2021 (UTC)
- Note, for Mestees: on uk:Вікіпедія:Статті-кандидати_на_вилучення/26_жовтня_2020#Альянс_краси, he votes along with... Fabrica2808 (CA · xwiki · sc · COIBot report) (who created fr:Harfouch Walid). — Jules* Talk 09:48, 7 August 2021 (UTC)
- 2013 is before Wikibusiness was launched, but I cannot exclude that Marya.dubovnickaya was an employee (e.g. a PR agent) of Walid Harfouch. OmInna is extremely suspicious, first edit on enwiki is on an AfD of a person related to Playrix, a well-known Wikibusiness client (en:Wikipedia:Articles for deletion/Dmitry Bukhman), but I am not sure if this is a sock or a genuine person working for them. Ebsentura really looks like a paid editing sock (I have hardly ever seen newbies uploading four pictures from four different cameras but with their Commons username and license in EXIF, thus looks like a professional license launderer, plus involved in defending quite a paid editing article on ukwiki uk:Благо (фінансова компанія)). There goes Mestees as well: they have also edited an article on the likely Wikibusiness client uk:Альянс краси, plus enwiki contributions at en:Special:Contributions/Mestees are extremely weird (just two articles: cleaning biography of Lebanese-Ukrainian TV businessman and correcting extremely technical details of a case involving Russian businessmen), plus, again, Commons username and license in EXIF of their only upload. I think these three are likely a part of the Wikibusiness farm behaviour-wise, either as socks or as unrelated Wikipedians working for them. Not sure I will have time to CU them quickly, but pinging my fellow CUs @Goo3 and Andriy.v: who are also following them — NickK (talk) 22:16, 6 August 2021 (UTC)
- @Jules*: Basically duck test for Fabrica2808 (interest in some of Wikibusiness clients like uk:Альянс краси or en:Reface (they seem to have a lot of clients on apps), plus interest in topics related to Ukrainian war in foreign wikis, e.g. fr:Cyborgs (défenseurs de l'aéroport de Donetsk) - Bodiadub personally wrote about translating this article into multiple languages - or en:Shatun), plus open proxies confirming block evasion. Plus uk:Валід Арфуш experienced a suspicious edit war exactly at the same time as fr:Harfouch Walid was written. I am not sure if this is a sock of Bodiadub or Crazyalien, or if it is a separate person that sometimes writes for Wikibusiness and sometimes on their own — NickK (talk) 16:07, 6 August 2021 (UTC)
- I would be happy to block it and to delete its edits, but do you have more info @NickK? I can only find that the account Fabrica2808 (CA · xwiki · sc · COIBot report · uk · fr · es · en · wikidata) used an open proxy (uk:Вікіпедія:Запити на перевірку користувачів/2020#Наші старі знайомі), but I can't find where it has been linked to Wikibusiness firm, and I see that the account is not locked, and not blocked on en-wp. — Jules* Talk 15:30, 6 August 2021 (UTC)
- @Jules*: They already did. fr:Harfouch Walid is clearly one of their works. I guess there are more — NickK (talk) 14:24, 6 August 2021 (UTC)
@Oleg Yunakov: I see Orekhova (CA · xwiki · sc · COIBot report · en · ru · uk · fr · wikidata · commons) has been blocked on ru-wp for possible undisclosed payments (ru:Википедия:Запросы_к_администраторам/Архив/2020/10#Orekhova), and was suspected, if I understand well, to promote Rinat Akhmetov. I found this account because Fabrica2808 (see above) also made a few edits on es:Rinat Akhmetov. Is Orekhova linked to Wikibusines firm, or do I mix up different editors? — Jules* Talk 16:13, 6 August 2021 (UTC)
- I created Wikiproject:Antispam/Archives/2021/Wikibusiness as a skeleton. Sigh, there goes my weekend. I'd rather work on tooling. MER-C (talk) 17:12, 6 August 2021 (UTC)
- MER-C hi, there's Mestees on your page, do you suspect him/her or is it a proved sockpuppet ready for ban? --Goo3 (talk) 10:51, 7 August 2021 (UTC)
- I blocked Fabrica2808. I am also concerned about Ainhoa Díaz and OmInna who created the other language versions of Reface (now deleted). I won't be the first mover on Mestees, there is insufficient evidence on en.wp only (but the intersection with Fabrica2808 on Walid Harfouch cross-wiki is concerning). MER-C (talk) 11:24, 7 August 2021 (UTC)
- @Goo3: See my thread with Jules* above for Mestees. I would not say 'ready for ban' but I would say 'very suspicious'. I did not have time to run CU yet, and not sure I will have for the forthcoming week — NickK (talk) 12:35, 7 August 2021 (UTC)
- MER-C hi, there's Mestees on your page, do you suspect him/her or is it a proved sockpuppet ready for ban? --Goo3 (talk) 10:51, 7 August 2021 (UTC)
- Jules*, Your understanding is totally right about the reasons why Orekhova was blocked. Moreover, it was not the first time that we saw that someone has tried to "clean" the biography of Rinat Akhmetov (1, 2 and etc.). In the same time I do not have direct proof that Orekhova and Wikibusines are related, but the style of edits implies that it pretty much may be the case. Thank you. Regards, Oleg Yunakov (talk) 19:54, 6 August 2021 (UTC)
- I've blocked OmInna as a suspected sockpuppet - it is a close enough behavioral match to the en.wp sockpuppet investigation. They also created:
- en:Dominique Piotet
- Created on fr.wp by Lelisoppot (CA · xwiki · sc · COIBot report).
- Created on uk.wp by KotykUA (CA · xwiki · sc · COIBot report)
- Despite not knowing the languages, I am very confident these are spam.
- en:Florian Yuriev
- en:Irina Galay
- en:LetyShops (ru:LetyShops, uk:LetyShops)
- en:Dominique Piotet
- MER-C (talk) 13:23, 7 August 2021 (UTC)
- Done Done for user:Lelisoppot and fr:Dominique Piotet. — Jules* Talk 13:31, 7 August 2021 (UTC)
- File:Dominique Piotet.jpg uploaded by Petro Ivashchenko (CA · xwiki · sc · COIBot report). Obvious spam photo. Blocked.
- File:Irina Galay.jpg uploaded by Liza Brodova (CA · xwiki · sc · COIBot report). Obvious spam photo. Blocked.
- File:Letyshops.jpg uploaded by Usmiltons (CA · xwiki · sc · COIBot report) with VRT permission. MER-C (talk) 13:49, 7 August 2021 (UTC)
- Reported Fabrica2808 on es.wp: es:Wikipedia:Tablón de anuncios de los bibliotecarios/Portal/Archivo/Miscelánea/Actual#Títere de Bodiadub: Fabrica2808. MarioGom (talk) 23:36, 7 August 2021 (UTC)
MER-C: take a look at these users as well:
- Iamlookingforsugardaddy
- BFD-69
--Goo3 (talk) 09:14, 8 August 2021 (UTC)
- I won't be the first mover on these either. MER-C (talk) 13:37, 8 August 2021 (UTC)
- I haven't compared to all accounts yet, but this has been on my watchlist for Bodiadub socks for some time: Sorrow3 (CA · xwiki · sc · COIBot report · en · uk · ru · simple · wikidata · commons · de · nl · ro). MarioGom (talk) 14:10, 8 August 2021 (UTC)
- You know what, I found them on en:Special:Undelete/Beetroot AB just now, where they intersect with Speipk0 (CA · xwiki · sc · COIBot report) and Diana Andrusiv (CA · xwiki · sc · COIBot report). They are unquestionably a spammer, so I've blocked them. I am not sure whether they are a sock, see en:Wikipedia:Sockpuppet_investigations/Bodiadub/Archive#03_July_2020. Spam pages: en:Matterport Inc., en:EVA (chain of stores), en:Beetroot AB, en:Eightydays, en:Marharyta Pasha, en:N-iX, possibly more. MER-C (talk) 14:36, 8 August 2021 (UTC)
- Definitely a spammer:
- Yakssled (CA · xwiki · sc · COIBot report) was a substantial editor of en:Matterport Inc. and uploaded File:Matterport logo.jpg in similar circumstances to the spam photos above.
- Aslim Moniesev (CA · xwiki · sc · COIBot report) created no:Matterport Inc.
- Marco Tamiro (CA · xwiki · sc · COIBot report) created ca:Matterport Inc., ca:Phil Giordano and ca:Lycamobile.
- Astero567 (CA · xwiki · sc · COIBot report) created en:Phil Giordano, tl:Phil Giordano, tl:Supot (maikling pelikula) and d:SUPOT.
- Frank Milwood (CA · xwiki · sc · COIBot report) uploaded File:Phil Giordano.jpg, an obvious spam photo (in very similar circumstances to the spam photos noted above).
- JakirMjonir (CA · xwiki · sc · COIBot report) created simple:Phil Giordano, simple:Kylie Verzosa, simple:New York University Tisch School of the Arts, ca:Trevor (pel·lícula) and ca:Neotecman.
- Kerneli Kasein (CA · xwiki · sc · COIBot report) created simple:Neotecman, simple:Indra Sistemas, simple:Repsol and en:Neotecman.
- I also note that:
- Damaskopoio (CA · xwiki · sc · COIBot report) created ar:يوفيوتجر and uploaded File:UFuture logo.jpg in similar circumstances to the spam photos above.
- I'm now confident in calling all of these Bodiadub socks. MER-C (talk) 15:46, 8 August 2021 (UTC)
- Thanks MER-C! Yes, Sorrow3 had quite a few similarities with Boadiadub (targeted projects, articles {{In use}} usage...) I'm going to dig deeper on eswiki. @TaronjaSatsuma: cawiki might need to be investigated too, see ca:Especial:Contribucions/JakirMjonir. Let me know if you need help with it. MarioGom (talk) 15:50, 8 August 2021 (UTC)
- Definitely a spammer:
- You know what, I found them on en:Special:Undelete/Beetroot AB just now, where they intersect with Speipk0 (CA · xwiki · sc · COIBot report) and Diana Andrusiv (CA · xwiki · sc · COIBot report). They are unquestionably a spammer, so I've blocked them. I am not sure whether they are a sock, see en:Wikipedia:Sockpuppet_investigations/Bodiadub/Archive#03_July_2020. Spam pages: en:Matterport Inc., en:EVA (chain of stores), en:Beetroot AB, en:Eightydays, en:Marharyta Pasha, en:N-iX, possibly more. MER-C (talk) 14:36, 8 August 2021 (UTC)
MER-C, Tagiko is another WB account. --Goo3 (talk) 11:21, 10 August 2021 (UTC)
- They are. Also found and blocked (when possible):
- Pan Żabka (CA · xwiki · sc · COIBot report)
- Mioorleen (CA · xwiki · sc · COIBot report)
- Posts Cloth (CA · xwiki · sc · COIBot report)
- Downy Donny (CA · xwiki · sc · COIBot report)
- MER-C (talk) 16:51, 10 August 2021 (UTC)
More socks found:
- OmInna created uk:Crello, Dmitropolit (CA · xwiki · sc · COIBot report) created d:Q104875540 and ru:Crello. Phermophilas (CA · xwiki · sc · COIBot report) uploaded File:Crello 600x600.jpg in a manner very similar to the spam files above.
- Dmitropolit created uk:Getmancar.
- Sharky tale (CA · xwiki · sc · COIBot report) created en:Volodymyr Usov. Logdashzero (CA · xwiki · sc · COIBot report) created en:Usov Volodymyr. Lelemir (CA · xwiki · sc · COIBot report) uploaded File:Usov Volodymyr.jpg, somewhat similar to the spam files above.
- Logdashzero created en:Gryshchuk Roman and en:Getmantsev Danylo.
- Awangba Mangang (CA · xwiki · sc · COIBot report) is possibly a subcontractor. I blocked them a year ago for creating, amongst other articles, en:Dmitry Bukhman. The other relevant articles are: en:Neuton (network), en:Maxpay, en:AXDRAFT, en:Parimatch.
- Mosopudhara (CA · xwiki · sc · COIBot report) created hi:परिमाच, which is definitely spam.
- Awangba Mangang (CA · xwiki · sc · COIBot report) is possibly a subcontractor. I blocked them a year ago for creating, amongst other articles, en:Dmitry Bukhman. The other relevant articles are: en:Neuton (network), en:Maxpay, en:AXDRAFT, en:Parimatch.
- OmInna created pl:Iljaszew i Wspólnicy and uk:Ілляшев та Партнери. Gibes Lumpy (CA · xwiki · sc · COIBot report) created be:Ільяшаў і Партнёры. 43Darwing (CA · xwiki · sc · COIBot report) created et:Ilyashev & Partners Õigusbüroo. Genie Starodub (CA · xwiki · sc · COIBot report) created d:Q85614901.
- Genie Starodub created et:RIA.com Marketplaces. Crazyalien created uk:RIA.com_Marketplaces.
- 43Darwing created simple:DIGIS and simple:Looksery.
MER-C (talk) 14:47, 14 August 2021 (UTC)
- This is as far as I can take it. MER-C (talk) 12:59, 15 August 2021 (UTC)
Automatic article list pasted here: User:MER-C/Spam/Bodiadub. MER-C (talk) 16:18, 21 August 2021 (UTC)
Hebert Neri
Deleted two times in German Wikipedia (de:Hebert Neri) as repeated posting of advertisements. See (Q58008050), (Q79463761) and (Q97778798) (Requests for deletions). --Kolja21 (talk) 22:05, 10 August 2021 (UTC)
- This appears to be a more complex case which focuses on Hebert Neri on multiple wikis but not exclusively. Following accounts are associated with it:
- Mark1340 (CA · xwiki · sc · COIBot report) created article de:Hebert Neri on 7 August 2021 with another edit on 10 August, no other contributions
- Monicanunez13 (CA · xwiki · sc · COIBot report) uploaded File:Hebert Felipe Neri.jpg (6 May 2021) and File:Kiarablay.jpg (12 May 2021), account was locked by steward Stanglavine on 1 August 2021
- Jsmithn22 (CA · xwiki · sc · COIBot report) uploaded File:Hebertneri.jpg on 2 November 2018 (same picture as File:Hebert Felipe Neri.jpg which was later uploaded by Monicanunez13)
- More sockets of Jsmithn22 are documented at Wikipedia:Sockpuppet investigations/Jsmithn22/Archive. This account created en:Hebert Neri on 22 October 2018 (see log) which was subsequently moved to en:Draft:Hebert Neri on 5 November 2018 and finally deleted on 30 March 2020. In addition (see log), Jsmithn22 created also an article for en:Jennifer Lobo on 8 October 2018 and uploaded pictures of Herbert Neri, Jennifer Lobo, and Fabiano de Abreu. The other confirmed sockets are:
- Paulojunior34 (CA · xwiki · sc · COIBot report) created pt:Hebert Neri on 19 April 2019 (see log)
- Marcospontes73 (CA · xwiki · sc · COIBot report)
- ImperadorPalpatine99 (CA · xwiki · sc · COIBot report) created es:Hebert Neri on 4 July 2019. Later, pt:Hebert Neri was created on 21 September and 7 December 2019 and pt:Hebert Felipe Neri on 10 April 2020 (see log)
- From es:wp we come to the next sockpuppet:
- JuanRojas22 (CA · xwiki · sc · COIBot report) re-created es:Hebert Neri on 7 October 2020 and pt:Hebert Neri on 14 October 2020. I addition, this account created an article for pt:Rabino Avraham Franco on 19 October 2020 which was subsequently deleted.
- --AFBorchert (talk) 13:53, 15 August 2021 (UTC)
- I found more related wikidata links: Q58099779 (Q58099779), Q31847105 (Q31847105). --AFBorchert (talk) 14:11, 15 August 2021 (UTC)
Benutzer:مسافرت در ایران
Spam to push a car rental --Itti (talk) 18:10, 16 August 2021 (UTC)
- This is مسافرت در ایران (CA · xwiki · sc · COIBot report). Google translate delivers “Travel in Iran” for the username. Contributions so far:
- dewiki: link to car rental added: [12]
- fawiki: fa:کاربر:مسافرت در ایران/صفحه تمرین draft about Tehran in user space, created on 16 August 2021
- ruwiki: link to the same car rental added: [13]
- trwiki: same here: [14]
- --AFBorchert (talk) 18:33, 16 August 2021 (UTC)
- I've asked for a global lock: SRG#Global lock for مسافرت در ایران. --AFBorchert (talk) 18:47, 16 August 2021 (UTC)
- This account is now globally locked. --AFBorchert (talk) 08:35, 17 August 2021 (UTC)
- I've asked for a global lock: SRG#Global lock for مسافرت در ایران. --AFBorchert (talk) 18:47, 16 August 2021 (UTC)
Wiki PR, Status Labs
- https://www.wsj.com/articles/how-the-1-scrubs-its-image-online-11576233000
- en:Wiki-PR editing of Wikipedia
- en:Status Labs
- en:Wikipedia:Sockpuppet investigations/Musbaunow/Archive
- en:Wikipedia:Sockpuppet investigations/Japanelemu/Archive
- en:Wikipedia:Conflict of interest/Noticeboard/Archive_143#Sophisticated_AFC_subversion
- en:Wikipedia:Conflict_of_interest/Noticeboard/Archive_153#"How_the_1%_Scrubs_Its_Image_Online"_from_The_Wall_Street_Journal
- en:Wikipedia:Conflict_of_interest/Noticeboard/Archive_156#Olive_Writing_Hub
Notable - literally, because they have articles written about them - spammers with a lengthy history. There's a lot of residual cross-wiki cleanup that needs to be performed, plus some of the spam seems to have returned in the intervening years since this case was investigated. MER-C (talk) 17:17, 17 August 2021 (UTC)
Serghiy Hrabarook
Another W?F banned spammer, but I couldn't figure out which one. MER-C (talk) 14:42, 21 August 2021 (UTC)
- Looks like the only surviving articles are about WOWCube although there may be some residual from previous spamming runs by users that haven't been tagged under this SPI:
- @Jules* and DarwIn:. MER-C (talk) 16:28, 21 August 2021 (UTC)