Wikipedia:Sockpuppet investigations/KurdîmHeval/Archive

Suspected sockpuppets
Same annoying interest in drowning articles about the Kurdish diaspora with long list of Kurdish personalities. As all three accounts have few edits, just looking at their contributions is enough. Examples of edits: Semsûrî (talk) 20:39, 6 June 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked and tagged the master. Blocked the /64 range for one month. Closing. Bbb23 (talk) 00:35, 7 June 2022 (UTC)

Suspected sockpuppets
Continuation of blocked editor (and sockpuppets) from last week. --Semsûrî (talk) 17:06, 13 June 2022 (UTC) Semsûrî (talk) 17:06, 13 June 2022 (UTC)
 * Has the same specific type of edits --Semsûrî (talk) 16:28, 16 June 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * At this point, none of the IPs have edited in a while, and I don't see any recent activity that looks like them on the ranges. Feel free to re-report if disruption resumes. Thanks, Spicy (talk) 14:32, 25 June 2022 (UTC)
 * Sock is still active but seems to edit with a new IP account everytime. They were active yesterday through . Semsûrî (talk) 14:43, 25 June 2022 (UTC)

Suspected sockpuppets

 * ( originally filed under this user)

Dilok27 was already banned, as it was found to be a sockpuppet of KurdîmHeval and many other accounts. Both Dilok27 and Brûki27 make edits (often huge removals of information and source) without backing it up with sources or supposedly backing it up with often low-quality and poorly cited sources that do not support the change. Their edits are all mobile web edits. Their usernames match up as well. Dilok is the modern Kurdish name for Gaziantep, a city in Turkey, and 27 is the number of the province of Gaziantep. Therefore, both users most probably originate from the same region. They have a particular interest in List of Kurdish dynasties and countries and related pages as seen from the edits of Dilok27 and those from Brûki27. Many other details about the actions of the account match with the banned sock puppets; please reach out if I should provide more evidence. Ayıntaplı (talk) 17:49, 14 July 2022 (UTC)
 * Apparently, after a 31 hour ban, Brûki27 is possibly active through another IP address (2001:871:210:2D03:4519:6014:F6E3:ADA1). All mobile web edits. Editing the same pages and reinstating reverted edits (with aforementioned problems) of Brûki27: Plus, this address is also reverting the reverted edits of a user called "BakurêKurd27," again with the number 27 and a name that suggests the user's ethnic identity but this time, not banned:  I deem the actions of this IP address as a connection between BakurêKurd27 and Brûkî27.Ayıntaplı (talk) 14:02, 16 July 2022 (UTC)
 * I added 62.201.255.196 in the list (few hours ago) mainly because during his edit frenzy, Brûkî27 made the same edit on Yaşar Kemal's page as a previous edit by this IP address. I couldn't add evidence, since I was too caught up by what Brûkî27 was doing, as he was constantly removing huge chunks from articles and reverting at the time. Ayıntaplı (talk) 22:20, 19 July 2022 (UTC)
 * Brûkî27 seems to be very stubborn and a sockpuppet machine. He/she created another account just a few minutes ago: User:Kurmanc63. And there is no doubt that it is the same person: "Kurmanc," by the way, also means Kurmanji-speaking Kurd, but 63 is the number for the province of Şanlıurfa, which is just next to Gaziantep. Anyways, these aren't significant details, but it's as if this person wants to not sound like a sockpuppet, because he's not using the word "Kurd" and the number "27" now, but it is apparent in every way. Ayıntaplı (talk) 22:47, 19 July 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''


 * What's going on here please? Funny that the obviously Turkish nationalist up there would like to remove everything that is Kurdish and Kurdish directly or look at it again 10 times. We are group of people, and against the injustice and ignorance of you people. leave Wikipedia free for everyone, and above all no place for nationalism. — Preceding unsigned comment added by Kurmanc63 (talk • contribs) 23:26, 19 July 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * We've got insufficient evidence for 62.201.255.196, I'd say, and the IP address was used only once, two weeks ago. The username similarity of Dilok27 to Brûkî27 and BakurêKurd27, combined with their cross-wiki focus on Kurds/Kurdistan, made me place a behavioral block that I'd uphold independently of the checkuser result. The other mentioned accounts are already blocked; KurdîmHeval is also globally locked. 2001:871:210: 2 D03:0:0:0:0/64 seems to be the same person as Brûkî27 ; the entire /48 is full of them ( by 2001:871:210: 8 428:a091:4290:3a5a:7968). I'll rangeblock 2001:871:210::/48 for a year as this is a persistent, static issue . I had even blocked the same range for three months earlier this year. ~ ToBeFree (talk) 22:01, 19 July 2022 (UTC)
 * See also Sockpuppet investigations/MountainKurd. ~ ToBeFree (talk) 22:11, 19 July 2022 (UTC)
 * Regarding 62.201.255.196, due to the completely different geolocation and lack of any other edits, I'd say we can afford not taking action yet. If similar edits appear with similar IPv4 addresses, we could place a rangeblock later. ~ ToBeFree (talk) 22:26, 19 July 2022 (UTC)
 * Kurmanc63 blocked. ~ ToBeFree (talk) 12:24, 20 July 2022 (UTC)
 * @ToBeFree it looks like there's nothing left to do here. Can this be closed? -- RoySmith (talk) 18:43, 20 July 2022 (UTC)
 * I'm not sure. Checkuser had been requested and there may be other socks, so I didn't close the case myself. I wouldn't object to a closure though. ~ ToBeFree (talk) 19:20, 20 July 2022 (UTC)
 * - I'm taking a deeper dive on this vis-a-vis whether it should be merged with Sockpuppet investigations/MountainKurd -- RoySmith (talk) 12:31, 22 July 2022 (UTC)
 * - Brûkî27, MountainKurd, BakurêKurd27, Kurmanc63 are all ✅ to each other. Please merge this case with Sockpuppet investigations/MountainKurd and retag everything accordingly. -- RoySmith (talk) 12:46, 22 July 2022 (UTC)
 * PS  -- RoySmith (talk) 12:47, 22 July 2022 (UTC)
 * I agree that this SPI is ready to close once the merge is done. ToBeFree's blocks appear to be well-chosen given the CU results. I looked to see if any semiprotections are possible, but the guy's article interests seem to be widely scattered. EdJohnston (talk) 19:36, 23 July 2022 (UTC)


 * Merged case and moved to KurdîmHeval as that's the oldest listed account - the behavioural evidence connecting them to the others seems pretty obvious. (Re)tagged accounts accordingly. I'll request locks as the master is locked and some of these accounts are blocked on multiple other wikis. Closing. Thanks, Spicy (talk) 16:31, 24 July 2022 (UTC)

Suspected sockpuppets

 * ( original case name)

New account created as soon as Brûkî27 was blocked. Same interest in Kurdish diaspora, especially Germany. Semsûrî (talk) 21:16, 19 July 2022 (UTC)


 * Same interest in adding long list of Kurds living in the respective country as MountainKurd (as mentioned in the archived report) Semsûrî (talk) 21:18, 19 July 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Closing, see above. Spicy (talk) 16:31, 24 July 2022 (UTC)

Suspected sockpuppets
Like the infamous sockpuppeteer KurdîmHeval, Mavis Smith 1 removes sourced information in edits with misleading summaries and marks them as minor edits: This editor seems to have a past grudge against me, as they make personal attacks on my talk page, when I only tagged a picture submitted by this editor on Wikimedia Commons for speedy deletion, since it was a clear copyright violation:  The offensive language in their first ever message to me indicates that this editor is not new. Then, they also replied to a message by one of KurdîmHeval's socks on my talk page with another personal attack, when the older message had nothing to do with a content dispute: Just like KurdîmHeval, this editor pervasively uses the terms "violation" and "vandalism." I didn't add the edits by the numerous socks of KurdîmHeval, but they should be accessible in the archived investigation, just a peak of which may give an idea about KurdîmHeval's problematic edits and use of language. Ayıntaplı (talk) 23:13, 24 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - all previous socks in the archive are stale The SandDoctor  Talk 22:42, 7 January 2023 (UTC)
 * Callanecc (talk • contribs • logs) 11:11, 8 January 2023 (UTC)

Suspected sockpuppets
In their first ever edit, there is simply too much indication of a past "grudge" for them to be a new user. Pretty similar to Mavis Smith 1's comments. I would also like to underline the parallel misuse of "vandalism." My edits all had clear reasons; in the current case, the source didn't mention such information, and in the other, there was a clear copyright violation regarding a map that even had the creator's name printed on it, although it was not declared and the source was set as "Vivid maps," whatever that means. Ayıntaplı (talk) 14:59, 11 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * for confirmation due to the limited amount of edits. DatGuyTalkContribs 16:28, 11 February 2023 (UTC)
 * I compared against, and against IPs in the CU logs. Their IP geolocates to a different country from the previous accounts, Spur doesn't think it's a proxy. I can't rule out some clever shenanigans of course -   Girth Summit  (blether)  14:25, 12 February 2023 (UTC)
 * WP:KURDS is a messy area and I'm also not positive about being related to this case. The instant POV-push is suspicious, but stuff like parallel misuse of "vandalism" can be explained by a frequently occuring translation. I'll keep an eye on them, but for now . DatGuyTalkContribs 15:17, 12 February 2023 (UTC)

Suspected sockpuppets
Very little doubt on that this is the same person. Keeps removing sources or making unsourced changes on the same pages: It was actually tagged as a possible sockpuppet several months ago but the ban was only for two weeks, and I didn't care enough to report it again here, because this IP was not active after the ban (until today). Ayıntaplı (talk) 17:10, 22 February 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Trying a month this time. Closing. Bbb23 (talk) 17:19, 22 February 2023 (UTC)

Suspected sockpuppets
Removing/changing sourced information as always after a month-long block: Aintabli (talk) 19:03, 28 March 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked for 3 months, closing. Bbb23 (talk) 21:32, 29 March 2023 (UTC)

Suspected sockpuppets
Sirgûcî, means from "Sirgûc" or Akbudak, Araban (according to the Kurdish Wikipedia), a village in Araban District, Turkey. KelêÛxelfetî is one of the blocked socks on the English Wikipedia, whose nickname literally means "Araban and Halfeti", probably denoting their region of origin. Both Sirgûcî and KelêÛxelfetî have edited the article for the village Akbudak on the English and Kurdish Wikipedias, respectively. In one of their edits, they have added that the Bruki tribe lives there, which is literally the name of one of the socks, Brûki27. Sirgûcî has also edited Ömerli, Halfeti. KelêÛxelfetî was recently banned from the Kurdish Wikipedia, which is likely why they started another account and then noticed that they could edit English Wikipedia, so they are now back to socking again. I believe there is overwhelming evidence but would happily provide more if seen as necessary. Aintabli (talk) 05:15, 27 July 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * Hello @Aintabli and other Wikipedia User‘s. I think there is a big misunderstanding here. I have not had any connection to Wikipedia in the past, I find it powerless to accuse me because of my origin which lies in Araban district like the district only has 2 to 3 inhabitants and I have to be that person. A big misunderstanding here, I must defend myself from such claims. Best regards. Sirgûcî (talk) 15:04, 27 July 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked, tagged, global lock requested, closing. Bbb23 (talk) 15:29, 27 July 2023 (UTC)

Suspected sockpuppets
After getting blocked once again, sockpuppeteer has started editing logged out. A quick peek at this range's edit history is enough to know that this is the same person. They are often adding random sources that various people are of Kurdish or Turkish origin. Here, they have even edited one of their favorite pages, restoring a version that the socks would constantly reinstate. Moreover, the IPs geolocate to Austria, which coincides with where the sockpuppeteer most probably originates from, since other blocked IPs also geolocate to the same place, and confirmed socks often use German conventions (such as using „“ to quote instead of "") and don't have the best command of the English language. I'm pretty confident that this IP is used for block evasion due to countless instances of sockpuppetry and disruption by the same person, but I can provide more evidence if necessary. Aintabli (talk) 04:46, 3 September 2023 (UTC)


 * I was just going through the IP range's edits, and I came across Türkiye Cumhuriyeti8119. A very weird username meaning "Turkish Republic" in Turkish, but the account was first created through the Kurdish Wikipedia, where they got indeffed after just 30 edits. This sock has also made more or less the same edits as the IP range, adding sources (which they are most probably misrepresenting) that various people are of Kurdish origin. Aintabli (talk) 05:00, 3 September 2023 (UTC)


 * Found another Austrian IP that was likely used by the sock, since they literally restored the edit of the aforementioned IP with an edit summary in poor English. Aintabli (talk) 05:13, 3 September 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

IP is restoring his possibile sock account [] [] Shadow4dark (talk) 18:16, 8 September 2023 (UTC)
 * I'm kind of surprised how Weşanvan was confirmed. @Ivanvector, is it still possible or too late to request a global lock for KelêÛxelfetî? This account is still active on the Kurdish Wikipedia. They were also blocked there for some time, which they tried to evade by creating Sirgûcî, so cross-wiki abuse is evident. I was informed that there is often a UI option in sockpuppetry cases that allows you to automatically request global locks. I tried to request one myself on Meta, but I don't have enough edits there to edit the relevant page. So, it would be great if you could still request a global lock through here. Aintabli (talk) 19:04, 27 September 2023 (UTC)
 * @Ivanvector, sorry for pinging you once again. KelêÛxelfetî changed their username to "Baran Agir". I'm not sure if that would complicate the process. Aintabli (talk) 17:40, 28 September 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅ to each other; the oldest two are already tagged as suspected to this case:
 * No checkuser results with respect to the IPs, but I am blocking the /64 as behaviourally obvious. The other IP hasn't edited in nearly a month, so no further action. Ivanvector (Talk/Edits) 15:21, 27 September 2023 (UTC)
 * I don't use the script so I don't know if that's an option, but I didn't realize that account wasn't locked when it was discovered. I've updated my request there. The stewards are usually pretty quick but there's a large backlog right now. Ivanvector (Talk/Edits) 19:29, 27 September 2023 (UTC)
 * No checkuser results with respect to the IPs, but I am blocking the /64 as behaviourally obvious. The other IP hasn't edited in nearly a month, so no further action. Ivanvector (Talk/Edits) 15:21, 27 September 2023 (UTC)
 * I don't use the script so I don't know if that's an option, but I didn't realize that account wasn't locked when it was discovered. I've updated my request there. The stewards are usually pretty quick but there's a large backlog right now. Ivanvector (Talk/Edits) 19:29, 27 September 2023 (UTC)
 * No checkuser results with respect to the IPs, but I am blocking the /64 as behaviourally obvious. The other IP hasn't edited in nearly a month, so no further action. Ivanvector (Talk/Edits) 15:21, 27 September 2023 (UTC)
 * I don't use the script so I don't know if that's an option, but I didn't realize that account wasn't locked when it was discovered. I've updated my request there. The stewards are usually pretty quick but there's a large backlog right now. Ivanvector (Talk/Edits) 19:29, 27 September 2023 (UTC)
 * No checkuser results with respect to the IPs, but I am blocking the /64 as behaviourally obvious. The other IP hasn't edited in nearly a month, so no further action. Ivanvector (Talk/Edits) 15:21, 27 September 2023 (UTC)
 * I don't use the script so I don't know if that's an option, but I didn't realize that account wasn't locked when it was discovered. I've updated my request there. The stewards are usually pretty quick but there's a large backlog right now. Ivanvector (Talk/Edits) 19:29, 27 September 2023 (UTC)

Suspected sockpuppets

 * 1) Parallel to how blocked socks used German conventions and like all of the previously blocked IPs, IPs part of this range geolocate to Austria:
 * 2) Added that a celebrity originates from Gaziantep, which they have openly revealed before that they come from a rural district part of this province and even repeatedly used the location code 27 in most of their sock names (see the archives).
 * 3) Edits this page, which is a favorite article for many of the blocked socks: Weşanvan (who had previously added the same entry to the list), MountainKurd (countless edits here), Kurdî27 (several edits), and many more.
 * 4) Edits another favorite list of the socks, making the unsourced addition of Rauf Orbay to the list. This is interesting, because blocked socks were previously involved in WP:Cuckoo editing by adding random, misrepresented sources to his article, which would justify his inclusion there:
 * 5) Per Google Translate, out of the blue, attempts to chat with an editor on the Kurdish Wikipedia, where one of the socks was fairly active before a global lock. Aintabli (talk) 22:35, 3 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * IP range blocked for 3 months. Closing.  Vanjagenije  (talk)  11:32, 5 January 2024 (UTC)

Suspected sockpuppets

 * 1) I have first come across Mêzgir when I was skimming through the edits of 2001:871:210:85B3:0:0:0:0/64, which has recently been blocked for block evasion (see the previous report for how this range is related to the other socks). This range's last edit before the block was on 4 January on Draft:Recep Dildar adding an image of the subject, which Footager has uploaded to Commons the very same day, which is also when Mêzgir created the draft. The Footager has also added a photo, which they uploaded to Commons, for Draft:Kani Yılmaz and further edited the article a few days after its creation by Mêzgir.
 * 2) Mêzgir has mostly worked on drafts up to this point; however, this edit to Bosniaks in Turkey is quite interesting. That article was actually a sock magnet: Mêzgir's edit, although with no comments, is in parallel with these edits, because the socks have previously tried to reduce the figures or the number of notable people of Bosniak origin on there.
 * 3) Mêzgir, like the socks, has a poor command of English (e.g. ) and knows pretty good German and Kurdish, which contradicts with what they claimed in their userpage on the Kurdish Wikipedia. There is neither an indication of fluency in Zazaki or French nor that their German or Kurdish is worse.
 * 4) Meanwhile, 213.142.96.226 and Footager have both edited Celal Başkale, which the latter again added a photo of, and the IP even geolocates to Austria. Aintabli (talk) 07:33, 13 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Mêzgir and Footager are ✅ to each other and look very to past socks. Blocking and tagging, requesting locks. . Spicy (talk) 19:25, 14 January 2024 (UTC)
 * IP hasn't edited in 5 days. Closing. Bbb23 (talk) 19:33, 14 January 2024 (UTC)

Suspected sockpuppets
Both are interested in the same topic area, edit through a mobile device, and geolocate to Austria. Both IPs made multiple major edits to Ali Saip Ursavaş, pushing a certain POV similar to previous socks and IPs used to evade block: (compare to ) Typical edit to diaspora articles:  Changes/adds ethnic origin to biographical articles as done for countless times by previous socks:  Aintabli (talk) 14:55, 31 January 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked the /48 range (again) for one year. The 213. IP hasn't made many edits and not for a couple of days. Closing with no further action. Bbb23 (talk) 17:32, 31 January 2024 (UTC)

Suspected sockpuppets
Oh boy... As soon as they started the account, they wanted everyone to know they are of Turkish origin: This is similar to how one of the socks or IPs commented that they were actually Turkmen, or the name of one of the socks was "Türkiye Cumhuriyeti8119," literally "the Republic of Turkey". But Ereğlı24's first edits were on articles about people associated with the PKK, a topic area the socks were very interested in: They couldn't even spell "Ereğli" correctly, which is their username. Moreover, Ereğlı24 goes on to suggest Kurdish ancestry in a well-known Ottoman-Egyptian ruler of Albanian origin: Likewise, the socks were especially interested in the List of Albanians and previously attempted to reduce the number of notable Albanian people as well as their figures in Turkey. Aintabli (talk) 07:46, 18 February 2024 (UTC)


 * They are also evidently a German-speaker looking at the type of quotation marks they’re using in their edit summaries. This is a WP:DUCK. Aintabli (talk) 07:50, 18 February 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

So because I would like to mention that Muhammed Ali‘s family claims Kurdish origin with sources, makes me a copy of another user? I am a liberal Turk, I don‘t like exclusions of Kurds. Ereğlı is a Mahalle from Erzincan province where I originating from. ;) (User: Ereğlı24)

Claims out of no where, is not going to get this to a right way. But, what should I do now? (user:Ereğlı24)

@

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to each other and to past accounts:


 * ,, closing. Spicy (talk) 14:23, 19 February 2024 (UTC)

Suspected sockpuppets
Mobile edits, name similarity, same area of interest. Looking at this page's edit history, 213.142.96.153 is obviously being used by Xelile, who created a blank page saying "content coming", and then this IP makes a major edit. On the other hand this "Austrian" IP is without a doubt connected to the sockmaster, who has made identical edits as the globally locked IP used by the sock factory: Latest socks were involved in draft-creation (uncommon for newcomers), which is exactly what Xelile is doing. I have also added SeaCherryCod. This account interestingly was created in September 2022 but did not make any edits in any Wikipedia project until 17 May on the newly-created page by Xelile: Aintabli (talk) 02:46, 19 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Xelîlê Zozan is to past accounts., . I did not find the evidence sufficient to check SeaCherryCod and they did not appear in my checks. Spicy (talk) 18:45, 8 June 2024 (UTC)