Wikipedia:Sockpuppet investigations/Fdinshaw/Archive

Source: Wikipedia, the free encyclopedia.


Fdinshaw

Fdinshaw (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log· investigate · cuwiki)

27 July 2020

Suspected sockpuppets

Please see the talk page of Xwedodah [1]

On July 26, he made the following 4 edits, where he reverts a clean page to an older unsourced, plagiarized and improperly cited revision. [2][3][4][5]

The same day the following edit by the newly created user TheNewWordBo here: [6], which he keeps reverting to is just copy pasted word for word from Iranica Online's page on xwedodah. For example just highlight and google search the 1st paragraph of the Religious Interpretation section [7] and you'll notice it's word for word from Iranica online, no effort to even properly put the citations in wiki format. UPDATE: While I was typing all this out, an admin already dealt with the copy right issue. But this should show he is not editing to build an encyclopedia, nor is anybody who ignored this copyright claim and kept reverting to it.

In these edits he edits in copy pasted stuff from who knows what website, publishes it. And then edits it again to remove "weasel words/ensure neutrality". This falls under wikipedia's definition of hiding vandalism.

  • "hiding vandalism (such as by making two bad edits and reverting only one),"

On July 27 He on 5 separate occasions reverted back to this plagiarized revision by TheNewWordBo despite being told it was plagiarized from Iranica Online. [8][9][10][11][12]

The IPs all originate from London (like his userpage admitted before he deleted it, weirdly deleting it when I told him that those IPs were suspiciously from London, the same place he states he is from).

The first two 2a03:1b20:7:f011::a12e AND 185.195.232.145 have the ISP "31173 Services AB" Which here at ScamAlytics [13] is shown to primarily run VPNs and TOR nodes, although not all. Now VPNs/Proxies are mostly blocked on Wikipedia, however there are Private VPNS as well as non-listed public VPNs which are not know to Wikipedia. Or for example VPNs made on Amazon Web Services servers (obtained through free trials) do work on wikipedia. For speed they are placed close to the user's home city. This of course is just a theory from what ScamAlytics say, it is possible this is also his normal ISP and not a VPN. This isn't very strong evidence, but in the technical context it should be noted as elaborate vandalism attempt.

The second 2 148.252.133.180 & 148.252.128.59 have the ISP Vodafone are more incriminating and helps support the above theory, that regardless if it's a VPN or not, this user is in London. It's a British phone service provider, and on phones you have a hotspot feature where if you turn it on, the hotspot itself is a separate internet gateway (separate from the phone's 4G IP), and when you turn this hotspot on and off, you get assigned a new IP. One can change their IP in seconds via this method. But of course they all originate from the same city your in, and show it's by the same ISP and IP range.

From this evidence we can say with 100% certainty all those 8 edits came from the same person. And considering the timing of these vandalism, his admitted location, and his previous attempts at subtle vandalism to promote his narrative, we can say Manzarne and the person who made those 8 IP+throw away account edits are in fact the same person. Lamazeva (talk) 18:41, 27 July 2020 (UTC)[reply]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

I have been an editor for a long time and I have never resorted to such dishonest measures as I am being accused of. Please note that this user has a history of harassment and disruptive editing. It is so bizarre he is launching an investigation into me when he is a suspected puppet master of a number of users. In fact there is another investigation (with a lot of support against him), yet he is persistent in trying to accuse me. This appears to me to be nothing more than an intimidation tactic to get me to stop editing. He is trying to engage in an edit-war on the article (

talk) 14:12, 29 July 2020 (UTC)[reply
]

For everyone else here, as it turns out the SPI filer Lamazeva was just confirmed as a sockpuppet in his own investigation [14]. So I'd personally be extremely suspect of every claim he's made. -- Qahramani44 (talk) 00:10, 30 July 2020 (UTC)[reply]
Yes this is clearly a hitjob from a obsessed and disruptive user who had a vendetta against me because of my editing that disagreed with his disruptive editing. I did include plagiarised material when reverting his edits but this was a honest mistake and the offending text has now been removed. Thankfully he has been blocked and we can put this ridiculousness behind us.
talk) 11:23, 30 July 2020 (UTC)[reply
]

Clerk, CheckUser, and/or patrolling admin comments

  •  Confirmed Manzarene = TheNewWordBo, w/some level of logged out editing. no No comment with respect to IP address(es). Literalcrapposter Red X Unrelated. -- Amanda (aka DQ) 10:10, 31 July 2020 (UTC)[reply]
  • @Manzarene: So, given the CheckUser result listed above, are you denying that TheNewWordBo is your account? Callanecc (talkcontribslogs) 10:25, 1 August 2020 (UTC)[reply]
  • @
    talk) 17:24, 2 August 2020 (UTC)[reply
    ]

06 April 2022

Suspected sockpuppets

Manzarene had name changed to Fdinshaw, so now he is known as "Fdinshaw".

No one else had edited these two pages for making such ethnicity-related edits.

Also prefers adding "Iranian" to a number of pages:[19][20]

Just like back in 2018,[21] he still promotes the term "Parsi" and does not understand

WP:BLPCAT.[22]Aman Kumar Goel (Talk) 15:01, 6 April 2022 (UTC)[reply
]

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  •  Clerk note: Moved case to Fdinshaw. Spicy (talk) 16:54, 9 April 2022 (UTC)[reply]
  • As always, with ethnicity-related cases we expect a certain amount of similarity between people who share a POV. Here, the two pages mentioned are the only ones where there's overlapy, and the edits are different in form. Likewise labeling people as Iranian is the sort of thing that may arise from two editors sharing a POV. An edit summary analysis ([23] vs. [24]) shows some notable similarities, but also some notable differences, although such differences may result from someone's writing style changing over time, or them intentionally trying to obscure their writing style. A timecard comparison suggests that they're in different timezones, although it's possible that Fdinshaw may have moved or had some change in circumstance that brought them onto a different schedule. Most importantly, though, even if this if Fdinshaw, it's not clear to me that this would violate
    WP:ILLEGIT. They had a previous block for sockpuppetry, but six months passed between that and their last edit as Fdinshaw; more generally, I don't think a first-offense sockblock creates a lifelong ban from switching to IP editing.
    no Closing without action. @Aman.kumar.goel: If you'd like, you can always ask the IP if they're Fdinshaw. I'll note that Fdinshaw admitted it the last time they were accused of sockpuppetry. -- Tamzin[cetacean needed] (she/they) 21:37, 22 April 2022 (UTC)[reply
    ]