Wikipedia:Sockpuppet investigations/Aryankhodakarami/Archive

Suspected sockpuppets

 * ( original case name)

Within 60 minutes, all of these accounts posted on Talk:Javad Safaee protested the speedy deletion tagging of this article. I mean, one right after the other. The talk page was deleted when I deleted the recreation of this article that was deleted in Articles for deletion/Javad Safaee but admins can look at the comments posted on the deleted talk page which were virtually identical. Liz Read! Talk! 02:49, 5 March 2022 (UTC) Liz Read! Talk! 02:49, 5 March 2022 (UTC)
 * I'm adding Fatima usefi and Sasan mazloumi, both low edit accounts who posted similar Keep sentiments in the AFD for this article. Liz Read! Talk! 03:14, 5 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * -  Girth Summit  (blether)  11:20, 5 March 2022 (UTC)
 * Adding a few other accounts, some globally locked, for the scripts:
 * ,, , , , , are all ✅ to each other. These accounts have all been involved in spamming about the subject of that article, across multiple projects.
 * , and  are all  to the same group, but their editing exhibits enough similarities for me to be convinced that they are the same person. I will also block these and request locks.
 * CU policy prohibits the linking of named accounts to IPs; some latitude is given, however, with regards to non-specific information about IP ranges and geolocations. This user seems able to hop across some very wide ranges (too wide to check or block), but they are all geolocated to the same region. I can not and do not confirm anything about the IP addresses listed above, but I observe that the edits made through them would be behaviourally and geographically consistent with this user. I see no point in blocking these IPs however - they will have moved on. Girth Summit  (blether)  11:54, 5 March 2022 (UTC)
 * Found a couple more after looking at the history of an article authored by Babakbaris:
 * These two are ✅ to each other, and technically to the rest in terms of geolocation; the first one edited and article created by one of the socks and edited by the master, the second one had edited Javad Safaee - I'm sure it's the same person.  Girth Summit  (blether)  12:17, 5 March 2022 (UTC)
 * OK, that's all I can see - closing.  Girth Summit  (blether)  12:26, 5 March 2022 (UTC)
 * , and  are all  to the same group, but their editing exhibits enough similarities for me to be convinced that they are the same person. I will also block these and request locks.
 * CU policy prohibits the linking of named accounts to IPs; some latitude is given, however, with regards to non-specific information about IP ranges and geolocations. This user seems able to hop across some very wide ranges (too wide to check or block), but they are all geolocated to the same region. I can not and do not confirm anything about the IP addresses listed above, but I observe that the edits made through them would be behaviourally and geographically consistent with this user. I see no point in blocking these IPs however - they will have moved on. Girth Summit  (blether)  11:54, 5 March 2022 (UTC)
 * Found a couple more after looking at the history of an article authored by Babakbaris:
 * These two are ✅ to each other, and technically to the rest in terms of geolocation; the first one edited and article created by one of the socks and edited by the master, the second one had edited Javad Safaee - I'm sure it's the same person.  Girth Summit  (blether)  12:17, 5 March 2022 (UTC)
 * OK, that's all I can see - closing.  Girth Summit  (blether)  12:26, 5 March 2022 (UTC)
 * These two are ✅ to each other, and technically to the rest in terms of geolocation; the first one edited and article created by one of the socks and edited by the master, the second one had edited Javad Safaee - I'm sure it's the same person.  Girth Summit  (blether)  12:17, 5 March 2022 (UTC)
 * OK, that's all I can see - closing.  Girth Summit  (blether)  12:26, 5 March 2022 (UTC)

Suspected sockpuppets
see hijacking of Javad Arianmanesh PRAXIDICAE🌈 13:54, 14 June 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - these are all locked now, but it's worth a check for others considering the history. Spicy (talk) 17:29, 14 June 2022 (UTC)
 * - -- RoySmith (talk) 17:43, 14 June 2022 (UTC)
 * I'm afraid I can't be of much help here. I'd say that Aryankhodakaramim, Alireza mostafavei, and Ayooparts are  to each other.  Based on CU logs, they are  to various accounts from the archive.  There's not enough to a reliable baseline to run a sleeper check. -- RoySmith (talk) 17:57, 14 June 2022 (UTC)
 * Tagged accounts, closing. Spicy (talk) 19:49, 14 June 2022 (UTC)

Suspected sockpuppets

 * ( original case name)

Shortly after raising Articles for deletion/Javad Safaei, a number of new and recent accounts, in quick succession (some IP edits) all came in to "!vote" against what was, at that point, a delete-leaning consensus. The creation time of some these, less the suspected master, were all shortly before !voting, although user "Ali mihandoostam" was slightly before I raised the AfD. Accounts "Tatafof" and "Azadizan" show creation date both after the AfD started and make several meaningless edits, except for the participation in this AfD. I can't rule out conclusively that there may well be separate individuals in this mix, but it also seems too co-incidental for there to not be some sockpuppetry going on.

Then, my talk page was bombarded with nonsense which I removed when I saw it, from similar IPs but within minutes of eachother, so could well be the same person proxying.

The nature of the apparent WP:SPIs makes me think it's best to get another pair of eyes on this, especially as there have been recent cases of sockpuppetry from users in this region. Bungle (talk • contribs) 20:17, 14 October 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - the votes, writing style, and timing are a good match. Please, check the registered accounts. It's probably not worth to block the individual IPs at the moment since they are quickly rotating, and range blocks would need to be too wide. MarioGom (talk) 12:06, 16 October 2022 (UTC)
 * firefly ( t · c ) 12:26, 16 October 2022 (UTC)
 * Well this one has given me my first, but almost certainly not my last, CheckUser headache. Let's see if we can untangle things:
 * Jamosak == Ali mihandoostam - ✅ to each other, and also additionally to a couple of socks in the Aryankhodakarami case.
 * Azadizan is also ✅ to a couple of socks in Aryankhodakarami, and to Jamosak.
 * Tatafof is to this bunch, and by the transitive property of sockpuppetry, also ~ to the Aryankhodakarami lot.
 * given the results here, and the fact socks in both cases focus on promoting this Javad Safae(e|i) character, could we merge the two cases please? I would do it myself but I'd only screw it up and make more work for everyone. Not blocking or tagging anyone yet as it'd only mean redoing it post-merge. firefly  ( t · c ) 12:51, 16 October 2022 (UTC)
 * - Please, histmerge to Sockpuppet investigations/Aryankhodakarami. Thank you. MarioGom (talk) 14:39, 16 October 2022 (UTC)
 * Merged and blocked. I'll leave the tagging to you, . --Blablubbs (talk) 11:41, 17 October 2022 (UTC)
 * MarioGom (talk) 17:49, 17 October 2022 (UTC)

Suspected sockpuppets
After not having success creating Javad Safaei, this new editor has instead tried to hijack Jawid Safi article by saying that it is really about an artist called Javad Safaee. This resulted in a fierce edit war today. There have also been some IP editors involved. To be honest, I don't know whether this sockpuppetry or paid editing but there seems to be a concerted effort to get an article about Javad Safaei on Wikipedia that has been going on for several years now. There is even another SPI case, Sockpuppet investigations/Javadsafei, that might be related but it's from 2020. Thanks for looking into this. Liz Read! Talk! 03:02, 23 December 2022 (UTC)


 * Thanks for checking that old case. Maybe this person is just very popular. Or it's a common name. Liz Read! Talk! 01:13, 24 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 03:32, 23 December 2022 (UTC)
 * are both ✅ to Aryankhodakarami. -- RoySmith (talk) 03:41, 23 December 2022 (UTC)
 * PS, I also compared to Javadsafei. Based on oldish data we've got, I'd say they're probably ❌ -- RoySmith (talk) 03:44, 23 December 2022 (UTC)
 * Spicy (talk) 01:19, 30 December 2022 (UTC)

Suspected sockpuppets
This editor tried to hijack an article today to make it about themself (diff). Unusual behavior but not unprecedented. Then I saw that they also tried to change the Jawid Safi article to be about Javad Safaee (diff) so I thought they might be connected to this sockfarm which has had a focus on Javad Safaee. I'd usually ask for checkuser as this seems like it might be a sleeper account but the other accounts in this case are stale at this point so I don't think much could be gleaned using that tool. It is a bit unusual that their next attempt was to try to change an article to be about themself but similar article hijacking behavior. Thanks. Liz Read! Talk! 19:48, 27 May 2023 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * You're right, CU didn't throw up anything interesting. But blocked anyway.  Socking or disruptive editing it doesn't matter, this user is making a mess.  Courcelles (talk) 14:11, 31 May 2023 (UTC)
 * Closing. Spicy (talk) 16:56, 31 May 2023 (UTC)