Wikipedia:Sockpuppet investigations/Eleonóra Dubiczki/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Also see User:Vajna Rightpedia Alex (Talk) 00:44, 21 February 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * All + .  GABgab 02:42, 21 February 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same ol, same ol. Threats to create crap on their wiki and adding nonsense rightapedia links everywhere. Two are already blocked but requesting CU for sleepers given the sheer amount of disruption today. I imagine this is a coordinated effort of users but there appear to be several masters operating at once. CHRISSY MAD ❯❯❯  ¯\_(ツ)_/¯  17:06, 1 May 2018 (UTC)
 * I saw you filed a separate case but I believe the oldest master is here in the archive. CHRISSY MAD  ❯❯❯  ¯\_(ツ)_/¯  17:07, 1 May 2018 (UTC)
 * No sleepers. I can confirm that the accounts in the earlier SPI are identical, but they locate to Prague, while these are in the US. Two of the socks there identify as the owner, one of them using the owner's name. I can't confirm that that lot is technically the same as this lot, but they're clearly the same people. is identical to those in this SPI. So we've clearly got block evasion, not just meatpuppetry and probable socks.  Doug Weller  talk 17:49, 1 May 2018 (UTC)
 * They've got quite a history on SFS of being a spam IP (for the one blocked today) is it possible they are spoofing that? I find it strange that a school of RIT's caliber are unaware of a mass spam campaign by students. CHRISSY MAD  ❯❯❯  ¯\_(ツ)_/¯  17:52, 1 May 2018 (UTC)
 * has confirmed that it's an exit tor node (the ip above) and I'm not sure what all that entails but I suspect that since it can easily manipulated these could all very well be the same accounts? There also seems to be some xwiki abuse as well. CHRISSY MAD  ❯❯❯  ¯\_(ツ)_/¯  18:01, 1 May 2018 (UTC)
 * TorProject Metrics. Seems to be Exit as of 2018-04-29. &mdash; regards, Revi 18:03, 1 May 2018 (UTC)
 * Thanks Chrissymad. I'm not that techy I'm afraid. SFS? The one blocked today is Rochester Institute of Technology but perhaps they're vulnerable. Maybe we should report this to their IT people? I doubt they want to be used this way. This is basically a Czech outfit and most of the news sources mentioning it (some using it for photos) are Czech. Doug Weller  talk 18:09, 1 May 2018 (UTC)
 * Interesting. They need to fix something. Doug Weller  talk 18:10, 1 May 2018 (UTC)
 * If the university IT is running the tor node, they know what they are doing. That means they know "they can't do anything". If not, they'll probably forward that to the tor node operator, and then they'll say "we have nothing we can do". It's how tor works. They even have a boilerplate notices for abuse complaints like this. &mdash; regards, Revi 18:15, 1 May 2018 (UTC)
 * I'm commenting strictly about geolocation, due to it being a tor node, the geolocation is probably entirely irrelevant to the end users actual data. CHRISSY MAD  ❯❯❯  ¯\_(ツ)_/¯  18:20, 1 May 2018 (UTC)
 * the geolocation made no sense as I know they aren't in America, but I hadn't realised that a university could be so vulnerable. Those sfs posts seem to be virtually all from fake addresses. Doug Weller  talk 15:54, 2 May 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' It may help to see the documentation on Sockpuppet investigations/Eleonora Goldmann, which is (apparently) a duplicate of this investigation... - zfJames Please ping me in your reply on this page  (chat page, contribs) 16:19, 2 May 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * this seems to have been checked already (ping ) but results weren't posted. I asked at Sockpuppet investigations/Eleonora Goldmann if we should merge these cases; waiting for further discussion. Ivanvector (Talk/Edits) 13:50, 8 May 2018 (UTC)
 * Closed, see below. Ivanvector (Talk/Edits) 16:50, 21 May 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Each one of these users have supported the same vandalism revert to the Metapedia and Rightpedia pages. Rightpedia 1488 has deleted content twice on Metapedia ([one], [two]) to restore the revision made by Eleonora Goldmann ([a user who claimed to be the 'owner' of Rightpedia]) made here ([diff]). IP User 129.21.234.92 made the [the same claim—asserting that the user was Eleanora]. This user has been repeatedly disruptive, especially by setting a redirect on the Rightpedia page itself repeatedly. - zfJames Please ping me in your reply on this page  (chat page, contribs) 16:55, 1 May 2018 (UTC)
 * This a brigading attempt, which is something alt-righters will commonly do. Adding another account, 💵Money💵emoji💵 Talk 17:03, 1 May 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * There is already an existing SPI for this... see here. CHRISSY MAD  ❯❯❯  ¯\_(ツ)_/¯  17:33, 1 May 2018 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
I decided to take this to ANI instead. There are three editors actually, but they are meatpuppets, not the same person. Or rather two at least are, Rightpedia might be Mikemikev. Doug Weller talk 17:02, 1 May 2018 (UTC)
 * To clarify. Goldman identifies as the owner of Rightpedia. is an Admin there as is User:Mikemikev, known for being so racist Metapedia kicked him off, also a prolific socker here. But on second thought, he's not Rightpedia as the geographical location is different.  Doug Weller  talk 17:06, 1 May 2018 (UTC)
 * I see this and the other case have already been checked, and we seem convinced that this is the same group even if they are in different locations. Should the cases be merged, and/or should they be merged to Sockpuppet investigations/Mikemikev?
 * Side note: any new account with "1488" in its name should be blocked immediately, without waiting for it to edit. Ivanvector (Talk/Edits) 13:47, 8 May 2018 (UTC)
 * I think they should be merged. Sorry for the delay. This isn't Mikemikev. Doug Weller  talk 15:02, 9 May 2018 (UTC)
 * ✅. I've tagged the accounts that don't have Nazi propaganda in their usernames, per WP:DENY. Closing. Ivanvector (Talk/Edits) 16:52, 21 May 2018 (UTC)