Wikipedia:Sockpuppet investigations/Çelebicihan/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Obvious cross-wiki undisclosed paid-for spam related to attention-seeking ex-USSR topics. In all cases, the files were taken from Facebook/received from the subject, professionally posed and OTRS cleared. . MER-C 14:11, 31 December 2019 (UTC)
 * Çelebicihan created Dimitry Dikman. Silavysoty uploaded File:Dimitry Dikman.jpg.
 * Çelebicihan created Yury Mosha and uploaded File:YuryMosha.jpg. Silavysoty created kk:Юрий_Игоревич_Моша.
 * Çelebicihan created Julie Pelipas. Silavysoty uploaded File:Julie Pelipas.jpg.
 * Çelebicihan created Aram Mnatsakanov and uploaded File:Aram Mnatsakanov.jpg.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 14:58, 31 December 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

This is apparently a sleeper or meat puppet, who returned just after Çelebicihan's block to create several of the masters creations includig Yuri Mosha and all the photos in the article are conveniently uploaded by the master and Silavysoty. Praxidicae (talk) 16:47, 4 January 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ ST47 (talk) 16:55, 4 January 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

More meatspam! Praxidicae (talk) 19:28, 11 January 2020 (UTC)
 * Thanks, I was just on the way to file this!ThatMontrealIP (talk) 03:00, 12 January 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * – bradv  🍁  03:14, 12 January 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Several IP editors have taken an interest in work produced by the Çelebicihan sockfarm. For example, less than a day after Celebicihan's last edit, ip editors (neither of which had made previous contributions) submitted both Draft:Yury Mosha and Julie Pelipas to AfC, a fairly advanced user action. In addition, two ips have extensively edited (contributions here and here) the Julie Pelipas article, editing which includes the attempted removal of COI templates. It should be noted that this sockfarm has involved ip editors before as ST47 blocked several ips related to the sockfarm in the past. SamHolt6 (talk) 14:48, 12 January 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Ranges 37.1.208.0/21, 192.71.166.0/24, 89.33.192.0/22, 84.38.129.0/24, 84.38.130.0/23 and 84.38.132.0/22 blocked as webhosts. Closing. MER-C 09:12, 13 January 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

ColoursOfYourLove: recreation of Olga Flеr (see Draft:Olga Fler) and moved Svitlana Bevza (see Draft:Svitlana Bevza) to mainspace. The latter was recreated by Мікіто Луппов. Both drafts are quarantined articles by the sockmaster. This is the second sock I've blocked this week. Time for a clear out.

I've also laid range blocks for 103.28.148.0/23 and 37.252.0.0/20. They've shown an interest in previous articles by this sockmaster and have petitioned for the undeletion of others. I know you can't comment on IP addresses, but it may be worth looking on those ranges for more. MER-C 17:54, 7 March 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * CU is not of particular value as things are already blocked and dealt with anyway. -- Amanda  (aka DQ) 19:14, 7 March 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

more Anka Tsitsishvili spam as Anka Tsitsishvili (fashion entrepreneur) Praxidicae (talk) 15:29, 25 April 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked, deleted, tagged, closing. MER-C 16:35, 25 April 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Pro forma, per checkuser. -- zzuuzz (talk) 19:30, 14 May 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Confirmed. -- zzuuzz (talk) 19:30, 14 May 2020 (UTC)
 * Tagged, spam deleted. Closing. MER-C 16:21, 15 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Like past socks, created Dimitry Dіkmаn (was Dimitry Dikman) using copyvios from Praxidicae (talk) 19:50, 22 May 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * given the last run had more than a dozen, self endorsing cu for sleepers. Praxidicae (talk) 19:53, 22 May 2020 (UTC)
 * This account is ❌, they are editing on a different continent. Note that Dimitry Dikman was not deleted, it was moved to Draft:Dimitry Dikman. There's no training notice here but I assume this is part of a training exercise, so I'm leaving open for the clerk to suggest further action. Ivanvector (Talk/Edits) 23:23, 22 May 2020 (UTC)


 * After consultation with Ivan, due to proxy use, CU is . This case should be evaluated on behavior. Best, Kevin ( aka L235 · t · c) 00:05, 23 May 2020 (UTC)
 * I've blocked this as confirmed to recent socks, and I am also persuaded that they are related to the master. There may be one possible sleeper here, but that is slightly inconclusive. -- zzuuzz (talk) 00:09, 23 May 2020 (UTC)


 * Closing per the above. The SandDoctor  Talk 03:53, 23 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same shit, different day. Listing to find other accounts. MER-C 14:41, 13 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * for sleepers given their extensive socking in the past. Praxidicae (talk) 15:04, 13 June 2020 (UTC)

Confirmed, along with: -- zzuuzz (talk) 15:44, 13 June 2020 (UTC)
 * Spam deleted, closing. MER-C 16:41, 13 June 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Created Yury Igorevich Mosha which is a near exact copy of Çelebicihan's previous attempts to publish an article on Yury Mosha. Requesting a CU due to the user's previous history of having sleepers. GPL93 (talk) 00:29, 9 July 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Sock blocked and tagged based on behaviour. CU isn't helpful here. Closing. Callanecc (talk • contribs • logs) 05:07, 12 July 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

some sorta paid spammer, see Draft:Andrii Ostapchuk fka Andrii Ostapchuk Praxidicae (talk) 20:25, 13 August 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Yes, it looks like a sock puppet. I cannot find their contribs on other Wikipedias.Ahmetlii (talk) 20:29, 13 August 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Dreamy Jazz talk to me &#124; my contributions 20:38, 13 August 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Creation of promotional articles with the same writing style on ex-Soviet attention-seeking BLPs. There are other tells which are obvious once you look at the edits, although one of them is starting to go away. Time for a periodic emptying of the sock drawer. MER-C 13:51, 5 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
As good as confirmed. (but always worth checking). -- zzuuzz (talk) 15:07, 5 September 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

SPA recreated Aram Davidyan (professor) previously created by one of Çelebicihan socks under Aram Davidyan. GSS &#x202F;&#128172; 08:38, 18 September 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . Dreamy Jazz talk to me &#124; my contributions 11:13, 18 September 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Perfect recreation of Natalya Simakova at Natalya Simakova (actress and singer). – Thjarkur (talk) 14:12, 6 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * based on behavioral evidence. Thanks for reporting this. —  Newslinger  talk   14:45, 6 October 2020 (UTC)
 * I've requested a global lock for Vazowski at . —  Newslinger  talk   14:49, 6 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Perfect recreation of Artem Kahan under the title "Artem Kahаn", bypassing creation protection (note that the second title does not use a regular Latin "a" but a "Cyrillic Small Letter A") – Thjarkur (talk) 21:42, 7 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . . Dreamy Jazz talk to me &#124; my contributions 22:36, 7 October 2020 (UTC)
 * - actually per the note in the archives by zzuuzz, it is always worth checking for sleepers. Therefore, requesting and endorsing for a sleeper check. Dreamy Jazz talk to me &#124; my contributions 22:38, 7 October 2020 (UTC)
 * ✅, no other sleepers obvious.  Maxim (talk)  01:53, 8 October 2020 (UTC)
 * Tagged Slanchev Bryag as confirmed. Added the extra account found in the check to the SRG lock request. Nothing left to do. Close. Dreamy Jazz talk to me &#124; my contributions 10:25, 8 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Hear some QUACK'ing on this one. Brand new account adds userboxes to their userpage and then recreates a recently G5'd page Diana Pegas. Requesting CU to confirm and find any sleepers due to the extensive socking of the master. Kb03 (talk) 20:08, 19 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * due to proxy use. Evaluate on behavior. Kevin ( aka L235 · t · c) 02:32, 20 October 2020 (UTC)
 * compared to Mojoneú. Dreamy Jazz talk to me &#124; my contributions 11:43, 20 October 2020 (UTC)
 * GeneralNotability (talk) 14:01, 20 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreated Artem Kahan as Artem Kahan (entrepreneur) and Artem Kahan (entreprenеur) after gaming for AC Praxidicae (talk) 19:21, 28 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . Dreamy Jazz talk to me &#124; my contributions 20:56, 28 October 2020 (UTC)
 * Also Dreamy Jazz</i> talk to me &#124; my contributions 20:56, 28 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation of the draft at Draft:Artem Kahаn. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 22:24, 29 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Por forma. Blocked (which was previously blocked as colocationwebhost in 2018 so this might be a proxy) 1 month. Close. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 22:24, 29 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same padding edits to achieve autoconfirmed, same UPE spamming ex-Soviet attention seeking entities (this time Nataliya Resh and Anna Oris (actress), the latter a recreation of Anna Oris) and same writing style. I've already blocked these. However CU requested because there was a one-month gap in November where I did not detect any suspicious articles by this sockfarm, before which they reliably created 1-2 spam pages per fortnight. MER-C 15:36, 13 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * No sleepers that I could find. Closing SPI report...  ~Oshwah~  (talk) (contribs)   18:27, 14 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

gamed for AC, moment they got it, moved Diana Pegas to mainspace, same old same old. , your favorite farm is back. GRINCHIDICAE🎄 14:12, 16 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Has been since globally locked. Deleted draft. Close. Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 15:42, 16 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

The user was registered last month and started editing today and created Anna Demis under Anna Demchenko. <span style="font-family:monospace;font-weight:bold;font-size:16px;color:hsl(205, 98%, 55%);">GSS &#x202F;&#128172; 06:13, 13 January 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked, deleted, tagged, closing. MER-C 12:56, 13 January 2021 (UTC)


 * Dreamy <i style="color:#d00">Jazz</i> talk to me &#124; my contributions 21:41, 13 January 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation of Svitlana Bevza at Bevza Svitlana. We haven't seen this sockpuppeteer in a while, and this account suggests the tactics, techniques and procedures have changed. MER-C 15:27, 20 March 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' P.S. in order to facilitate the process of discussion I ping here the accounts and ask them to explain what they could do wrong. @Breaking Sir, @Braduman, @Tarabono00, @Inkitrinky, @Inger Berg18, @Pestrolim, @Pysatel, @Olga Malozhvanets, @Nameitgood --Щіпальця (talk) 09:22, 23 March 2021 (UTC)
 * Dear @Blablubbs, what do you mean by putting me here in that list? I read the section Defending yourself against claims and feel good as I didn't violate any of the wikipedia rules. But I'm pretty much confused of your statement "The following accounts are on the same connection". Can you please explain what is "the same connection"? To make things clear I state that I don't know any of the mentioned accounts. However, I do see that some of them have edited English wikipedia articles about politicians related to Ukraine. Is that the case or something else? I ask you and anyone else to remove any suspicions from me. And if possible to explain what do I violate. If it can help, I live in Ukraine and edit from here. @TonyBallioni - thank you for suggesting a deep look. It all looks strange.
 * thank you for explaining @Blablubbs. So, that is a question for me too, why @TonyBallioni put me on a list. If same connection means same IP - why TonyBallioni didn't state that clearly? Talking about IP, I'm sure enough it is a mistake as I use it from my mobile phone (and it provides a dynamic IP). My brothers and sisters don't edit or create wikipedia profiles. Maybe my IP range is in a blacklist or something? Can I ask someone else to investigate the results of the CU too? --Щіпальця (talk) 13:31, 23 March 2021 (UTC)
 * @Blablubbs, your last sentence made me frustrated. You pointed below: I do note that all of the accounts listed certainly do have an interesting familiarity with Wikipedia for new users, and an interesting fascination with promoting things across multiple wikis for users who have no relationship to one another. I didn't get your point at all. It seems like you want to accuse my behaviour or myself of violationg some wikipedia rules :( Let's wait the checkuser who could explain what he/she meant by "the same connection". --Щіпальця (talk) 14:03, 23 March 2021 (UTC)


 * @Primefac, @Drmies can you please look through this situation as I feel falsely accused to use the same IP? --Щіпальця (talk) 13:38, 23 March 2021 (UTC)
 * , "All of the following accounts are on the same connection "--that connection is the IP, or maybe a narrow IP range. I'm not sure what you want me to look at. This is the technical evidence, and so I doubt you're being falsely accused of anything; whether you are or are not related in terms of editing (that is, socking) is another matter. I see only one overlapping edit (this one) so I don't see much behavioral evidence that would prove you're a sock. Drmies (talk) 16:12, 23 March 2021 (UTC)
 * Hi! I have seen the notification mentioned here. Can anybody explain what happened? I am a new user and don't know all the wiki rules. --Pysatel (talk) 14:36, 23 March 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * . Blablubbs | talk 15:30, 20 March 2021 (UTC)
 * All of the following accounts are on the same connection and share the same type of device as :
 * The following accounts are on the same connection but have some variation of user agents from the above group and one another:
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * The following accounts are on the same connection but have some variation of user agents from the above group and one another:
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * The following accounts are on the same connection but have some variation of user agents from the above group and one another:
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)
 * Please examine cross-wiki behaviour before blocking. I'm not confident enough to block any of these accounts with doing a deep dive through other projects, and I don't have the time for that right now, so reporting and letting clerks and patrolling admins look at it. TonyBallioni (talk) 19:38, 20 March 2021 (UTC)


 * , I've moved your comment to the correct section. I did not put you on any list; I requested global locks for a sock that was already blocked. The CU results come from . What he likely means there is that you're all on the same IP address; could you explain why that might be? Blablubbs&#124;talk 12:58, 23 March 2021 (UTC)
 * , I have moved your comment again. Please put new ones in the "comments by other users" section. I do note that all of the accounts listed certainly do have an interesting familiarity with Wikipedia for new users, and an interesting fascination with promoting things across multiple wikis for users who have no relationship to one another. Blablubbs&#124;talk 13:41, 23 March 2021 (UTC)

The rest of the farm follows the same xwiki pattern; see e.g. the master here, here and here. There are some formatting quirks that all these accounts have (BEANS) that serve as additional evidence of socking. – please block, , , and. Thanks and best, Blablubbs&#124;talk 19:04, 4 April 2021 (UTC)
 * I don't see any behavioral evidence for Щіпальця socking. Inger Berg18 is a bit odd: all those useless spaces, that's often someone who tries to get autoconfirmed, but it wasn't enough edits and they stopped, so I don't know what to make of it. Mind you, I have not looked at the CU evidence and see no reason to. I don't know what the IP/IP range is; it might well be a location that explains similar interests. Drmies (talk) 16:14, 23 March 2021 (UTC)
 * , they are inserting the same promotional material about the same person into wikis in 3 languages uk, ru, en while demonstrating pretty good proficiency with Wikimarkup for someone who registered two weeks ago – given that this a UPE sockmaster and the other accounts demonstrate similar patterns for similar people (e.g. nameitgood on ru, pl, en; Pestrolim on eo, cy and be), I'm a tad bit suspicious here. Blablubbs&#124;talk 16:34, 23 March 2021 (UTC)
 * I haven't looked at the other wikis, but I'll take your word for it. Sorry, but I don't know what UPE stands for. I'm suspicious too, but I don't see any evidence for Щіпальця on the en-wiki, that's all I'm saying. IngerBerg, I just looked at their global contributions, and that seems to be a case of paid editing on the ru-wiki, so maybe my "they're trying to get autoconfirmed" makes even more sense. But I do not have experience or expertise here. is probably better at this here. BTW I have no idea why Щіпальця pinged me. Drmies (talk) 16:41, 23 March 2021 (UTC)
 * , UPE is "undisclosed paid editing" in this context – there is indeed a lack of overlap both here and xwiki, but they all have the same MO (at least the ones that have enough edits for me to be able to tell): Creating spammy pages about Ukranian people and entities on wikis where they don't exist and inserting identical promotional content into existing articles. They seem to segregate topics by account, which accounts for the overlap, but the xwiki pattern, coupled with the CU results, makes me hear avian noises here. Blablubbs&#124;talk 16:49, 23 March 2021 (UTC)
 * apologies for any stress. You shared an IP with one of the accounts listed above and had a relatively similar (but common) device. I listed you here because there was enough of a technical connection to list it, but not enough to block. This is a Common way en.wiki handles cases like this, especially when the CheckUser doesn't want to get involved with the behavioural evidence. I re-ran the check on you, and while the technical connection I mention above does exist, I would say it is not the most likely one.Also, to be clear, I felt saying "same connection with different device" was probably the most clear I could be. I specifically didn't use any of the SPI templates because I wanted to be as precise as I could. More clarity would be: you share one IP with 4elopuck, but that is separated by time, and the useragent is different. The useragent difference is easily explainable, though, so because of the overlap and the large number of accounts on other IPs with 4elopuck, as well as the limited number of IPs that account used, your account was reported here so that a behavioural investigation could occur. TonyBallioni (talk) 00:18, 26 March 2021 (UTC)
 * Whew, that was a fair bit to wade through. I'm confident that these accounts are part of an organised UPE effort: The MO is xwiki promotion, usually of Ukranian entities; new articles are created and existing ones are rewritten and "brought in line". For some, there is insufficient evidence to block (except if someone wants to do so based on CU results and the fact that e.g. Pysatel seems to be engaged in promotional editing elsewhere . The accounts where I did find evidence of being part of the same sockrings are
 * Tarabono00 and Inkitrinky; both have been involved in xwiki promotion: Compare es vs. en; the version that Tarabono created on eswiki ([perma), was brought in line on en by Inkitrinky, see.
 * Nameitgood has also been involved in xwiki promotion: PL: EN:  RU:)
 * Shipalzya (Щіпальця) promoted Ihor Umansky on uk, ru and en.
 * Pestrolim created, or attempted to create, articles about Igor Cherezov on eo, cy and be.
 * Blocked as requested - back to . Cabayi (talk) 11:19, 5 April 2021 (UTC)
 * Thanks. the blocked ones, will try and find a steward to discuss this later.  Blablubbs&#124;talk 12:11, 5 April 2021 (UTC)
 * , closing. Blablubbs&#124;talk 17:08, 5 April 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Creation of promotional biographies related to ex-Soviet countries and the fashion industry, publicity photos with OTRS permission, a typical Çelebicihan userpage. MER-C 14:05, 15 May 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - the MO here looks very similar, as does the xwiki pattern. Please compare and look for others. Thanks. --Blablubbs&#124;talk 10:31, 16 May 2021 (UTC)
 * to the archive is the best I can give. -- Amanda  (aka DQ) 17:06, 17 May 2021 (UTC)
 * Behaviour and xwiki patterns are sufficiently convincing to me. - please block the sock indefinitely. . --Blablubbs&#124;talk 07:57, 18 May 2021 (UTC)
 * Blablubbs - ✅. Closing SPI...  ~Oshwah~  (talk) (contribs)   05:35, 19 May 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Edits on Draft:Pravo (publishing house) and The Supreme Specialized Court of Ukraine for Civil and Criminal Cases are similar to that on the now-deleted articles National Academy of Legal Sciences of Ukraine and Draft:Research Institute for the Study of Crime Problems, which was created by the blocked user User:Inkitrinky (sock of Çelebicihan/4elopuck). All articles are about Ukrainian legal institutions created in March/April 2021; the ones by Inkitrinky in March, and the ones by Lesli Strong in April (immediately following the SPI investigation at the end of March). I'm not sure if this is due to use of VisualEditor, but the structure of article creation is frequently similar: start with an intro and blank section headers (Lesli Strong vs. Inkitrinky), addition of text chunks, and with external links at the end. Other small stylistic similarities include spacing between the "==" and text in section headers, spacing between the * and text in bullet points, addition of in use tags even when the article did not really undergo subsequent major edits (Lesli Strong vs. Inkitrinky), and addition of external links without bullet points (Leslie Strong vs. Inkitrinky).

More circumstantially, further edits have indicated potential links to other institutions with Ukrainian ties, such as Skyrora example. Of note, the Skyrora article also has potential COI/sockpuppet involvement, with multiple single-purpose account editors to that article, such as User:Vladimir Levykin (only edits are to Skyrora; first edit was to add in an image gallery), User:Jim Hartson (only edits are to Skyrora; first edit was to add in an image gallery), User:Faustinoiv (plurality of this user’s edits are to Skyrora), and User:Spacetouristgirls (single purpose account; last edited 2019). Of note, the Skyrora page lists a "Volodymyr Levykin" as the CEO, and he is British-Ukrainian.

Besides Skyrora, and not directly connected to this SPI case, there are other possible COI connections with other aerospace pages. This may reflect issues with COI and frequent occurrence of single-purpose accounts in the aerospace area of articles, rather than specific editing similarities. However, these Lesli Strong edits include adding Ukrainian-based references, such as in Isar Aerospace and CargoLifter, even when there isn't a clear connection to Ukraine in those articles (both companies are German). Overall editing patterns include the following:

Hypersonix Launch Systems
 * User:Lesli Strong
 * User:HypersonixLaunchSystems (blocked under spamublock) later renamed to User:Nina at HypersonixLaunchSystems (single purpose account)
 * User:WillfromAus (single purpose account)

Gilmour Space Technologies
 * User:Lesli Strong
 * User:DatMeleeMan (single purpose account; blocked for copyright violations)

Black Sky Aerospace ‎
 * User:Lesli Strong
 * User:SirDigit (single purpose account)

Hanwha Aerospace
 * User:Lesli Strong
 * User: Justjhy (single purpose account; last edited 2018)

Cobham Technical Services
 * User:Lesli Strong
 * User:Webmasterera (single purpose account; last edited 2011)

Draft:MGI Entertainment
 * User:ArgentinenaTao (single purpose account with edits to the now-deleted MGI Entertainment)
 * User:Lesli Strong (creator of the draft page)

-- Spencer T• C 00:40, 15 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - I took an initial look, but the CU data in this case is beyond my ability to handle right now. Thoughts from my check are that probably == Lesli Strong and this might actually be Bodiadub (based on overlap with recently-blocked Bodiadub socks), but I'd prefer someone more experienced take a look. GeneralNotability (talk) 20:26, 18 October 2021 (UTC)
 * I have reported this user as Bodiadub here. ST47 (talk) 18:24, 20 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Recreation at Alexander Belov (fashion stylist) created by past socks (see Alexander Belov (showman), Alexander Viktorovich Belov, Draft:Alexander Belov (fashion designer), Draft:Alexander Belov (stylist)). I find it difficult to believe this sockfarm gave up, so CU requested. The second, unblocked, account matches the previous behavior pattern. MER-C 16:15, 6 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I blocked the second one. – sleeper check seems like a good idea.  --Blablubbs (talk) 16:57, 6 November 2021 (UTC)
 * - -- RoySmith (talk) 17:01, 6 November 2021 (UTC)
 * Sarandë and Andrijauskienė are at least to each other.  Maybe even, but not much I can do to tie them back to Çelebicihan.   -- RoySmith (talk) 17:25, 6 November 2021 (UTC)
 * Thanks., closing. --Blablubbs (talk) 17:29, 6 November 2021 (UTC)