Wikipedia:Sockpuppet investigations/Rayooni/Archive

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * "Alooypasha" was registered 2 days after the sock master was indef blocked. On the day of their registration they started edit warring and left this comment, which gives away the fact that they are not new and is comparable, both in style and in substance, to the sock master's last ever comment.


 * They edited very few articles, yet 5 of those (excluding my talk page) have been edited by the sock master before (please see editor interaction utility for details).


 * Yesterday, they approached an editor for "help", supposedly because their edit on French conquest of Morocco was reverted. The problem with their complaint is that they didn't edit that article using their account, but 88.201.5.235 did. In other words, this is them inadvertently admitting that the IP is theirs.


 * The IP in question uses the same ISP and is from the same geolocation as 88.201.98.183 (See the comment where the sock master admits that it's theirs. The IP was subsequently blocked for a week after the sock master was indef blocked). M.Bitton (talk) 20:28, 6 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
 
 * - The behavioural evidence is convincing. Please indef the sock. Thanks, Spicy (talk) 06:12, 10 October 2021 (UTC)
 * ~TNT (she/her • talk) 08:41, 10 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

"88.201.69.67" is clearly another sock of Rayooni: the same geolocation and ISP, reinstating Alooypasha's edits (here and here).

they have been at it for some time now, using the 88.201.x.x range as well as 89.148.x.x (please see the previous IP that was blocked on the same day as the one mentioned in the previous SPI). Is there anything that can be done to stop them IP socking? Thanks. M.Bitton (talk) 20:43, 10 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - The IP has been blocked for 1 week for block evasion. --   LuK3      (Talk)   20:54, 10 October 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Rayooni has been IP socking using 88.201.81.189/17, 89.148.46.199/17) and 109.161.192.239/20 since they joined the project. I reported these ranges to "NinjaRobotPirate" who blocked them for a month on October the 18th. Unfortunately, as soon as the block expired, they started again, but this time they also are using a new registered sockpuppet.

Here's a small list of articles (mostly about Moroccan footballers) that have been edited at the same time by the new sockpuppet and an IP from the "89.148.x.x" range (starting from the 18th of November): Mohamed Timoumi, Noureddine Naybet, Ezzaki Badou, Salaheddine Bassir, Aziz Bouderbala, Ahmed Faras, Mouha ou Hammou Zayani.

They are easily identifiable through their usual one word edit summary. M.Bitton (talk) 17:33, 28 November 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Thanks. I have also noticed that Footballintrst (a very similar name) has edited the Larbi Benbarek article just like the confirmed SP. Best, M.Bitton (talk) 20:40, 30 November 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ -- RoySmith (talk) 19:53, 30 November 2021 (UTC)
 * - I guess we're not done yet -- RoySmith (talk) 21:40, 30 November 2021 (UTC)
 * Footballintrst ✅ -- RoySmith (talk) 21:48, 30 November 2021 (UTC)

Suspected sockpuppets
A new editor targetting all the articles that the sock master has edited in the past (mostly about football, but also including their favourite, List of wars involving Morocco). They have been known to use the following IP ranges: 88.201.81.189/16, 89.148.46.199/16 and 109.161.192.239/16 (mentioned in the previous SPI). The Added edit summary is also a giveaway. M.Bitton (talk) 21:36, 22 March 2022 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The CU data is entirely consistent with that of previous socks. Given article interest overlap, I have no doubts. I don't see any other active accounts, but the ranges involved are quite wide and I haven't spent a huge amount of time sweeping. Blocked, tagged, closing, come back if any more show up.  Girth Summit  (blether)  09:52, 23 March 2022 (UTC)

Suspected sockpuppets
Obvious sock adding to the draft articles that were started by the master, such as Draft:Allal ben Abdallah and Draft:Siege of Mazagan (1769), as well as creating articles that are related to football (their other obsession) such as Draft:Morocco at the African Nations Championship. They have been known to use the following IP ranges: 88.201.x.x/16, 89.148.x.x/16 and 109.161.x.x/16 (mentioned in this SPI). M.Bitton (talk) 16:46, 7 August 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

They are targetting the articles that were previously created by the sock using one of their IPs (see this conversation between myself and the sock where they admit to IP socking). They obviously ignored that conversation and kept IP socking (see my comments on User_talk:109.161.220.215 and User_talk:89.148.53.209). There is also the obsession with football (something the master is known for). M.Bitton (talk) 17:03, 7 August 2022 (UTC)

The Added edit summary (mentioned in the previous SPI) is also another signature of their edits. M.Bitton (talk) 17:25, 7 August 2022 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * - Maybe I'm just missing something, but I don't see any overlap between Turtleninja4 and previous socks from this case. Could you point out specific diffs, please. -- RoySmith (talk) 16:58, 7 August 2022 (UTC)
 * ✅ -- RoySmith (talk) 17:43, 7 August 2022 (UTC)

Suspected sockpuppets
Re-created an article that was created previously by the sock master. M.Bitton (talk) 16:20, 27 December 2022 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * Callanecc (talk • contribs • logs) 11:39, 28 December 2022 (UTC)