From Wikipedia, the free encyclopedia


Btw Santhosh

Btw Santhosh ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log· investigate · cuwiki)

30 July 2023

Suspected sockpuppets

All users have the single purpose of promoting Santhosh Kumar / Btw Santhosh. Tol ( talk | contribs) @ 07:00, 30 July 2023 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


14 January 2024

Suspected sockpuppets

Users from this farm have been creating articles on a hacker Santhosh Kumar / Draft:Santhosh Kumar. Once that got protected, they seem to have now switched to trying their luck with Draft:Hacktivist Vanguard (Indian Hacktivist) / Draft:Hacktivist Vanguard (Indian Hacktivist Group) (and possibly others), apparently a group set up by the said Kumar. The first (that I'm aware of) was XPosBot, but they got blocked because of their username, and CONFLIXERS picked up the baton; I'm sure they're the same user, as their user pages are very similar, and the newer account was set up only two days after the older got blocked. But more to the point, I'm saying I think they're both Btw Santhosh.

BTW, three years ago Scounder also created Santhosh Kumar, although that's so long ago that I don't think it's part of this campaign. It is apparently part of the Srinesh.saravanan farm. I'm just mentioning here in case there's any connection, which I think unlikely.

Requesting CU to confirm, as the Hacktivist topic is a degree removed from Kumar, and also for a scan of others waiting in the wings. -- DoubleGrazing ( talk) 09:00, 14 January 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Came across this from another angle. See below. DatGuy Talk Contribs 15:22, 14 January 2024 (UTC) reply

14 January 2024

Suspected sockpuppets

Pro forma, all  Confirmed to each other ( Kurta ipasvc ( talk · contribs) was created directly by CONFLIXERS through Special:CreateAccount). Whoslivesmatterss ( talk · contribs) might be just  Likely instead but I don't see the point in making the distinction. DatGuy Talk Contribs 14:37, 14 January 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


19 January 2024

Suspected sockpuppets

Very similar user pages. I warned User:Santhosh Rajput about the misleading user page here. User:BOMBBITA has used a dragon gif at the bottom of their user page [1], which I believe no one else uses other than me. Requesting CU based on the behavioral evidence, as I remember seeing a very similar user page a couple of times recently. Jeraxmoira🐉 ( talk) 18:25, 19 January 2024 (UTC) reply

User page is similar to what XPosBot had initially. [2] Jeraxmoira🐉 ( talk) 18:28, 19 January 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


08 February 2024

Suspected sockpuppets

New account, whose first two edits had to do with this Hacktivist Vanguard thing, which is has seen a lot of socking from different farms, but most recently (AFAIK) from the Btw Santhosh one, so thought I'd flag this up here just in case. -- DoubleGrazing ( talk) 11:21, 8 February 2024 (UTC) reply

Huh? I didn't check the CU box. Soz! -- DoubleGrazing ( talk) 11:22, 8 February 2024 (UTC) reply
PS: On a different point, this user has created Draft:Rahhat Shah Kazmi, which was previously created several times under different titles. I had a look but couldn't see any blocked accounts anywhere in the history, but obvs the histories of deleted drafts/articles are not visible to me. I guess it could be that this user is just a new hired gun and not a sock, at least not from this farm? -- DoubleGrazing ( talk) 11:37, 8 February 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
  • The following are single-purpose accounts for publicising Hacktivist Vanguard, or in the case of ShingaChu a semi-single purpose account.

They look to me like sockpupets or meatpuppets associated with Hafzal Murbani. They may or may not also be Btw Santhosh, but either way I think a CU to compare them with one another, and to look for possible sleepers, would be welcome. JBW ( talk) 20:03, 11 February 2024 (UTC) reply

  • Hafzal Murbani is now globally locked, having been locally blocked on Faeroese Wikipedia for abusing multiple accounts, and on Hausa Wikipedia for a reason which Google translates as "immigrants". (????) However, a CU would still be welcome, because of the other accounts. JBW ( talk) 23:49, 11 February 2024 (UTC) reply

Clerk, CheckUser, and/or patrolling admin comments

  •  Likely to each other and to past sock accounts:

11 February 2024

Suspected sockpuppets

Block evasion. New SPA ShingaChu created 10 February. 15 minutes after creation, first edit was to add 13 copies of "group" press release, posted to 13 different junk sites, to Draft:Hacktivist Vanguard: [3]. This is the same press release used heavily in deleted Hacktivist Vanguard and Hacktivist Vanguard (Hacktivist Group), and added this time to a parallel draft Draft:Hacktivist Vanguard, created in September before the master was blocked and the articles were deleted following strong consensus at AFD. Following day, first made a few precocious edits to Mir Sarwar, all marked as minor Then rewrote Draft:Hacktivist Vanguard in a single edit: [4], created a second nearly identical draft at Draft:Hacktivist Vanguard (Hacker Group), both using image uploaded by Hafzal Murbani.

And a third stab, at Draft:Hacktivist Vanguard (Indian Hacker Group). Wikishovel ( talk) 18:28, 11 February 2024 (UTC) reply

New SPA Hafzal Murbani, uploaded non-free logo File:Hacktivist Vanguard.jpg to Commons as "own work", with the same spammy description used in the original article and the two new drafts. This identical to the non-free logo uploaded to Commons three times by master, and deleted three times over licensing. Wikishovel ( talk) 16:23, 11 February 2024 (UTC) reply

An anon editor also worked extensively on Draft:Hacktivist Vanguard on 6 Feb, adding "This section will be updated periodically to reflect the group's evolving history and its impact on the cybersecurity landscape.", with no AfC template, essentially settling for a permanently parked draft to promote a one-person, zero-notability "hacker group". Wikishovel ( talk) 16:27, 11 February 2024 (UTC) reply

Adding two more socks, Manoj12Kumar11 and Prithivi Goswami, SPAs who created [5] and worked on [6] [7] Draft:Hacktivist Vanguard respectively. Wikishovel ( talk) 16:32, 11 February 2024 (UTC) reply

Just noticed that User:Hafzal Murbani was indeffed and globally locked for sockpuppetry at FOwiki by User:WikiBayer, and previously indeffed at HAwiki by User:Gwanki. Wikishovel ( talk) 17:35, 11 February 2024 (UTC) reply

This is Special:CentralAuth/Muhammad_Bilal_Muzzamil. He is blocked on Wikidata, Fowiki, SSWIKI, HAWiki, and ... .I habe added MahmudHM1 to the request please check.

other socks

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


22 March 2024

Suspected sockpuppets

We have a brand new SPA creating yet another version of Draft:Hacktivist Vanguard. I believe this topic has been attempted by at least Btw Santhosh's farm as well as Pplkhhb's, but I had to pick one so went with Btw S. DoubleGrazing ( talk) 18:15, 22 March 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  •  Confirmed to राहुल शास्त्री, technically  Possilikely (a mix between possible and likely) to previous accounts, but behaviour makes it clear enough.  Blocked and tagged, Redirect arrow Global lock(s) requested, closing. Thanks, Spicy ( talk) 18:12, 29 March 2024 (UTC) reply

15 April 2024

Suspected sockpuppets

Block evasion: new SPA Techrd2000cork created 15 April. An hour later, recreated Draft:Hacktivist Vanguard at Draft:Team Hacktivist Vanguard. Wikishovel ( talk) 16:10, 15 April 2024 (UTC) reply

New SPA Brosscreater, created 16 April. Games autoconfirm, then recreates Rachana Shah, G5'd a day earlier. Requesting checkuser. Wikishovel ( talk) 15:42, 20 April 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Please see my comments at User talk:Bbb23#Rachana Shah.-- Bbb23 ( talk) 15:45, 20 April 2024 (UTC) reply


21 April 2024

Suspected sockpuppets

Right after deletion that I nominated, its being created again so I just think this user is sock or employed by same person. HarryD ( talk) 08:44, 21 April 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


02 May 2024

Suspected sockpuppets

Obvious block evasion. New SPA HacktivistWasHere created 7 April. A minute after creation, first two edits were poorly sourced puffery about Hacktivist Vanguard at IIT Bombay: [8], [9]. Third edit just now was, as usual, to add Hacktivist Vanguard to List of hacker groups, with the usual rock-bottom blog sources: [10]. Checkuser might be a good idea at this point. Wikishovel ( talk) 15:47, 2 May 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


From Wikipedia, the free encyclopedia


Btw Santhosh

Btw Santhosh ( talk + · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log· investigate · cuwiki)

30 July 2023

Suspected sockpuppets

All users have the single purpose of promoting Santhosh Kumar / Btw Santhosh. Tol ( talk | contribs) @ 07:00, 30 July 2023 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


14 January 2024

Suspected sockpuppets

Users from this farm have been creating articles on a hacker Santhosh Kumar / Draft:Santhosh Kumar. Once that got protected, they seem to have now switched to trying their luck with Draft:Hacktivist Vanguard (Indian Hacktivist) / Draft:Hacktivist Vanguard (Indian Hacktivist Group) (and possibly others), apparently a group set up by the said Kumar. The first (that I'm aware of) was XPosBot, but they got blocked because of their username, and CONFLIXERS picked up the baton; I'm sure they're the same user, as their user pages are very similar, and the newer account was set up only two days after the older got blocked. But more to the point, I'm saying I think they're both Btw Santhosh.

BTW, three years ago Scounder also created Santhosh Kumar, although that's so long ago that I don't think it's part of this campaign. It is apparently part of the Srinesh.saravanan farm. I'm just mentioning here in case there's any connection, which I think unlikely.

Requesting CU to confirm, as the Hacktivist topic is a degree removed from Kumar, and also for a scan of others waiting in the wings. -- DoubleGrazing ( talk) 09:00, 14 January 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Came across this from another angle. See below. DatGuy Talk Contribs 15:22, 14 January 2024 (UTC) reply

14 January 2024

Suspected sockpuppets

Pro forma, all  Confirmed to each other ( Kurta ipasvc ( talk · contribs) was created directly by CONFLIXERS through Special:CreateAccount). Whoslivesmatterss ( talk · contribs) might be just  Likely instead but I don't see the point in making the distinction. DatGuy Talk Contribs 14:37, 14 January 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


19 January 2024

Suspected sockpuppets

Very similar user pages. I warned User:Santhosh Rajput about the misleading user page here. User:BOMBBITA has used a dragon gif at the bottom of their user page [1], which I believe no one else uses other than me. Requesting CU based on the behavioral evidence, as I remember seeing a very similar user page a couple of times recently. Jeraxmoira🐉 ( talk) 18:25, 19 January 2024 (UTC) reply

User page is similar to what XPosBot had initially. [2] Jeraxmoira🐉 ( talk) 18:28, 19 January 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


08 February 2024

Suspected sockpuppets

New account, whose first two edits had to do with this Hacktivist Vanguard thing, which is has seen a lot of socking from different farms, but most recently (AFAIK) from the Btw Santhosh one, so thought I'd flag this up here just in case. -- DoubleGrazing ( talk) 11:21, 8 February 2024 (UTC) reply

Huh? I didn't check the CU box. Soz! -- DoubleGrazing ( talk) 11:22, 8 February 2024 (UTC) reply
PS: On a different point, this user has created Draft:Rahhat Shah Kazmi, which was previously created several times under different titles. I had a look but couldn't see any blocked accounts anywhere in the history, but obvs the histories of deleted drafts/articles are not visible to me. I guess it could be that this user is just a new hired gun and not a sock, at least not from this farm? -- DoubleGrazing ( talk) 11:37, 8 February 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
  • The following are single-purpose accounts for publicising Hacktivist Vanguard, or in the case of ShingaChu a semi-single purpose account.

They look to me like sockpupets or meatpuppets associated with Hafzal Murbani. They may or may not also be Btw Santhosh, but either way I think a CU to compare them with one another, and to look for possible sleepers, would be welcome. JBW ( talk) 20:03, 11 February 2024 (UTC) reply

  • Hafzal Murbani is now globally locked, having been locally blocked on Faeroese Wikipedia for abusing multiple accounts, and on Hausa Wikipedia for a reason which Google translates as "immigrants". (????) However, a CU would still be welcome, because of the other accounts. JBW ( talk) 23:49, 11 February 2024 (UTC) reply

Clerk, CheckUser, and/or patrolling admin comments

  •  Likely to each other and to past sock accounts:

11 February 2024

Suspected sockpuppets

Block evasion. New SPA ShingaChu created 10 February. 15 minutes after creation, first edit was to add 13 copies of "group" press release, posted to 13 different junk sites, to Draft:Hacktivist Vanguard: [3]. This is the same press release used heavily in deleted Hacktivist Vanguard and Hacktivist Vanguard (Hacktivist Group), and added this time to a parallel draft Draft:Hacktivist Vanguard, created in September before the master was blocked and the articles were deleted following strong consensus at AFD. Following day, first made a few precocious edits to Mir Sarwar, all marked as minor Then rewrote Draft:Hacktivist Vanguard in a single edit: [4], created a second nearly identical draft at Draft:Hacktivist Vanguard (Hacker Group), both using image uploaded by Hafzal Murbani.

And a third stab, at Draft:Hacktivist Vanguard (Indian Hacker Group). Wikishovel ( talk) 18:28, 11 February 2024 (UTC) reply

New SPA Hafzal Murbani, uploaded non-free logo File:Hacktivist Vanguard.jpg to Commons as "own work", with the same spammy description used in the original article and the two new drafts. This identical to the non-free logo uploaded to Commons three times by master, and deleted three times over licensing. Wikishovel ( talk) 16:23, 11 February 2024 (UTC) reply

An anon editor also worked extensively on Draft:Hacktivist Vanguard on 6 Feb, adding "This section will be updated periodically to reflect the group's evolving history and its impact on the cybersecurity landscape.", with no AfC template, essentially settling for a permanently parked draft to promote a one-person, zero-notability "hacker group". Wikishovel ( talk) 16:27, 11 February 2024 (UTC) reply

Adding two more socks, Manoj12Kumar11 and Prithivi Goswami, SPAs who created [5] and worked on [6] [7] Draft:Hacktivist Vanguard respectively. Wikishovel ( talk) 16:32, 11 February 2024 (UTC) reply

Just noticed that User:Hafzal Murbani was indeffed and globally locked for sockpuppetry at FOwiki by User:WikiBayer, and previously indeffed at HAwiki by User:Gwanki. Wikishovel ( talk) 17:35, 11 February 2024 (UTC) reply

This is Special:CentralAuth/Muhammad_Bilal_Muzzamil. He is blocked on Wikidata, Fowiki, SSWIKI, HAWiki, and ... .I habe added MahmudHM1 to the request please check.

other socks

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


22 March 2024

Suspected sockpuppets

We have a brand new SPA creating yet another version of Draft:Hacktivist Vanguard. I believe this topic has been attempted by at least Btw Santhosh's farm as well as Pplkhhb's, but I had to pick one so went with Btw S. DoubleGrazing ( talk) 18:15, 22 March 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

  •  Confirmed to राहुल शास्त्री, technically  Possilikely (a mix between possible and likely) to previous accounts, but behaviour makes it clear enough.  Blocked and tagged, Redirect arrow Global lock(s) requested, closing. Thanks, Spicy ( talk) 18:12, 29 March 2024 (UTC) reply

15 April 2024

Suspected sockpuppets

Block evasion: new SPA Techrd2000cork created 15 April. An hour later, recreated Draft:Hacktivist Vanguard at Draft:Team Hacktivist Vanguard. Wikishovel ( talk) 16:10, 15 April 2024 (UTC) reply

New SPA Brosscreater, created 16 April. Games autoconfirm, then recreates Rachana Shah, G5'd a day earlier. Requesting checkuser. Wikishovel ( talk) 15:42, 20 April 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

Please see my comments at User talk:Bbb23#Rachana Shah.-- Bbb23 ( talk) 15:45, 20 April 2024 (UTC) reply


21 April 2024

Suspected sockpuppets

Right after deletion that I nominated, its being created again so I just think this user is sock or employed by same person. HarryD ( talk) 08:44, 21 April 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments


02 May 2024

Suspected sockpuppets

Obvious block evasion. New SPA HacktivistWasHere created 7 April. A minute after creation, first two edits were poorly sourced puffery about Hacktivist Vanguard at IIT Bombay: [8], [9]. Third edit just now was, as usual, to add Hacktivist Vanguard to List of hacker groups, with the usual rock-bottom blog sources: [10]. Checkuser might be a good idea at this point. Wikishovel ( talk) 15:47, 2 May 2024 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments



Videos

Youtube | Vimeo | Bing

Websites

Google | Yahoo | Bing

Encyclopedia

Google | Yahoo | Bing

Facebook