Wikipedia:Sockpuppet investigations/SyrianObserver2015/Archive

01 October 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

User:SyrianObserver2015 is evading his block with IP sockpuppets. To give a little necessary background, User:SyrianObserver2015 is an WP:SPA account who has done nothing but disrupt Wikipedia. He essentially opened his account for the sole purpose of disrupting one article (Cities and towns during the Syrian Civil War), the associated module map (Module:Syrian Civil War detailed map) and the associated talk page (Talk:Cities and towns during the Syrian Civil War). He also has a very distinct attitude & rhetoric (very angry Syrian government supporter). So he is relatively easy to detect.

I learned about his location (Ireland) when he used (by mistake?) his IP (86.40.58.48, Ireland Cill Airne Eircom) for one edit instead of his user’s account. Notice that in this edit, he is continuing a conversation in a section on the article's talk page. At the beginning of the conversation, User:SyrianObserver2015 is saying: "Article will be nominated for deletion if these are not changed." At the end of the conversation, the IP is echoing that by saying: "I will nominate the map and the article again for deletion". Also notice his language when he calls collectively all editors of the map: “you little terrorist supporting shit”. I therefore became suspicious of Ireland based IPs making edits on the aforementioned article and its talk page. Ireland does not have a large population (only 4.5 millions) so not many Irish are editing Syria war related articles (unlike countries like US, Russia, France, etc.) So I started looking for IPs that edited after his blocking date and that sounded like it could be him from the tone & rhetoric. I found many Irish IPs that are all clearly him. There might be more. First, I link to specific language written by the sockmaster. Second, I link to similar language on the part of the IPs.

I- Links to specific language written by the sockmaster, User:SyrianObserver2015, focusing on 2 aspects:


 * 1- Accusing editors of the map: Here he calls a pro-opposition user: “degenerate zombie”. Here he is saying the map “is becoming a scum pit of ISIS and jihadi supporters” and again calling editors: “Jihadi boys”. Here he is calling an editor: “ISIS fan boy” Here he is referring to another editor and “his support for his foreign invaders.” Here he is talking to another editor: “calm down young boy, don't behead me virtually lol.” Here he is saying: “the editors of this map are mostly supporters of isis/fsa/al nusrat/opposition” (notice the use of the term “al nusrat”) Here he is talking about the “complete bias of this page, and its editors.” Here he talks about “A complete map for Terrorists Jihadist supporters.” Here he is calling an editor: “ISIS terrorist supporter”, and “all you Al Nusrat and Free Shit Army guys” and “You support a dirty terrorist organization” and “a fucking dirty scumbag terrorist supporter”. Here he accuses another editor: “you support the terrorist moderate beheaders.” Here he insults everyone by saying: “Hail Putin bitches.” Here he calls editors "isis fanboys". Here he says: "the lies is sickening here, you all support isis terrorists" and "A little pack of isis fan boys" and "I do not support head chopping civilian killing terrorist like all you here" and "ISIS are terrorists and their supporters are terrorists meaning all of you above." Notice how the edit summary reads: "ISIS supporters run wikipedia lol." Here he says: "We all know wikipedia is run by Jihadi fools sitting in a basement" and "terrorist supporting fools." Here he says: "Go f*ck yourselves Wikipedia sheltering ISIS fighters and fan boys since 2011."


 * 2- Aggressive language towards Syrian opposition: Here calling opposition “Terrorists”. And here: “the terrorists of Al Fatah” and “terrorist brigade”. Here he changes the word “rebels” into the word “terrorists”. Here he says: "the terrorists FSA groups." "Terrorist rebels" and "ISIS and Rebel terrorists." "AL Nusrat".

II- Below is a list of his sockpuppet IPs that I have found, and what they say:


 * 193.1.100.67 (Ireland Limerick Computing Services): Notice how he is calling the Syrian opposition, “terrorist”. Also accusing editors: “terrorist supporting editors on this map.” Also notice the use of the term “Al Nusrat” (more on this later).


 * 83.71.82.35 (Ireland Waterford Eircom Ltd): Here he is undoing a typo correction and therefore reintroducing an error.


 * 213.94.235.254 (Ireland Cill Airne Eircom Ltd): Again he is calling Syrian opposition “Al Qaeda terrorists of Army of Conquest/FSA.” and “rebel terrorists”. Also notice that the 4 sources he is linking, are to the same news organization (almasdarnews.com). This is the favorite source of User:SyrianObserver2015 as can be seen on his talk page where he listed 70 articles from this same source. He also listed 70 articles from this same source on the article Cities and towns during the Syrian Civil War. And he is using the source on the talk page of the article and his own talk page.


 * 83.71.84.255 (Ireland Cork Eircom Ltd): Again accusing an editor: “ISIS beheader supporter”


 * 83.71.84.255 (Ireland Cork Eircom Ltd): Here again very aggressive language towards Syrian opposition: “FSA now rotting in the ground”, “false revolution”, “rebels are around 15% actually Syrians”.


 * 83.71.81.5 (Ireland Cork Eircom Ltd): Here using extreme propaganda, claiming that the president of the US is the leader of the Islamic State of Iraq and the Levant: “ISIS leader Obama, and Al Nusrat commander Netehyahoo.” This mirror what the sockmaster says here: “You know their an Obama/mc Cain puppet when they use the word regime all aboard the zionist bus, to visit Al bagdadi leader of the FSA/AlNusrat/ISIS.” Notice the use of the term “Al Nusrat” in both the quote from the IP sockpuppet and the master. The name of the organization is “Al Nusra” (without the letter “t”) but some call it “Al Nusrat” to evoke that they are like “rats” (the rodent).


 * 193.1.100.62 (Ireland Limerick Computing Services): Again ranting about an editor: “Just another biased editor trying to make things look nicer for the terrorists.”


 * 83.71.86.87 (Ireland Banagher Eircom Ltd): Again antagonizing another editor: “The butthurt from you Dajesuz your Isis whabbiboys are burning alive”; "all you can do is cry"; "you do support Isis the terrorists scum".


 * 83.71.86.87 (Ireland Banagher Eircom Ltd): Here repeating what he wrote above.


 * 159.134.98.10 (Ireland Mallow Eircom Ltd): Here he is deleting a section on the article's talk page that is complaining about the behavior of the sockmaster, User:SyrianObserver2015.


 * 159.134.98.178 (Ireland Mallow Eircom Ltd): Here repeating what he did above.

I am requesting checkuser. You can notice that the article on which the disruption occurred is subject to General sanctions/Syrian Civil War and Islamic State of Iraq and the Levant. Tradedia talk 07:06, 1 October 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' he made a sockaccount called SyrianObserver2016,and it was blocked by a co-admin.Alhanuty (talk) 01:31, 26 October 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've declined the CU reqeust. We rarely publicly disclose the IP address of a named account.--Bbb23 (talk) 13:21, 1 October 2015 (UTC)
 * None of those IPs have been active in the last one month, so I'm closing this.  Vanjagenije  (talk)  16:10, 3 November 2015 (UTC)