Wikipedia:Sockpuppet investigations/Safi Bhatti/Archive

Suspected sockpuppets

 * ( original case name)


 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same fixation on user-talk templated messages, especially welcomes and barnstars. Same vague familiarity with how MediaWiki works, but inability to put together a coherent sentence. Both named accounts have made incorrect or nonsensical edits about Roblox and specifically its logo. Kamran has placed a barnstar on Mohananad's talk page with the text "Block from editing." Oh, and I somehow only just now noticed that they have the same (ostensible) last name.

Both IPs have edited the named accounts' userspace making similar edits. Second IP is pre-block and fairly old, but I'm including it just to give a full picture.

I'd give more diffs, but basically every edit in all four histories fits into the patterns I've described.

Pinging ToBeFree, the blocking admin on Mohananad. Tamzin (they/them) &#124; o toki tawa mi. 05:00, 21 October 2020 (UTC)
 * Also, this diff, which is part of what Mohananad was blocked for, gives me a suspicion that there may be older accounts here. Because it sure sounds like they're quoting a block message they've received before. Tamzin (they/them) &#124; o toki tawa mi. 05:04, 21 October 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Added, they were blocked for "significant competency issues that make editing constructively extremely unlikely," the rationale in the suspiciously specific block reason referenced above.


 * I'm pretty confident these are all Safi Bhatti given their similar major CIR issues. named accounts, IPv6 /64 blocked two weeks. Closing. GeneralNotability (talk) 16:15, 21 October 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * per below.-- Jezebel's Ponyo bons mots 20:20, 6 July 2021 (UTC)  Jezebel's Ponyo bons mots 20:20, 6 July 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * To avoid any duplication of effort, noting that I've gone through every account created in May, June, or July with "Bhatti" in the name, and found none that match Safi's patterns. -- Tamzin  (she/they) &#124; o toki tawa mi. 03:30, 7 July 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * WP:DUCK blocked. Noting for the record.-- Jezebel's Ponyo bons mots 20:20, 6 July 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

DUCK, self-admitted on userpage Pahunkat (talk) 20:51, 10 July 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Nothing left to do here, closing. -- RoySmith (talk) 22:46, 17 July 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

There's no real question that the latter is a sock of the former, between the names and the fact that they immediately picked up editing Draft:C2 (RailShark). Courtesy ping to Mackensen as the blocking admin on SulaimanBhatti.

The tougher question is whether they're sox of Safi as well. The behavior isn't very similar, but there's the obvious name similarity—CamelCase like with the last two Kamrans—and the same habit of creating a sock that has the same name as the blocked account but with added numbers. I think CU is warranted to see if there's a link, as well as to check for sleepers. Since my last run of query/56545 on July 6th, 28 users with "Bhatti" in the name have been created, including several 0-edit accounts with similarly-formatted names; only 11 "Bhatti"s were created in the same timespan prior to that, so there's cause to think some of these might be sleepers.

Also, just for future reference, dropping a link to here, since it's got some behavioral evidence I had to go hunting for.

If no other clerk's gotten to this by the time I've been shown the ropes, happy to self-clerk it, but for now I'm here as a "civilian". -- Tamzin [cetacean needed] (she/they) 05:22, 29 August 2021 (UTC)
 * If there's no CU evidence for a connection to Safi, then I don't think behavioral evidence will get us there either. Odd to have two sockmasters going at the same time with the same habit of creating accounts with the same surname. Looks like Sulaimat is the oldest of this bunch, so if this is split off, should probably be under that name. Anyone have thoughts on if the drafts should be G5'd or left open as honeytraps? I'm a little biased in that I love dolphins and don't like seeing them libeled.[mostly joking. mostly.] Also, an interesting behavioral quirk to take note of for the future: Openly creating a sock while logged in. -- Tamzin  [cetacean needed] (she/they) 14:57, 29 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The following accounts are ✅ to each other and to Safi Bhatti:
 * I've CU blocked but not tagged them pending either a behavioural investigation or, if not related to Safi Bhatti their own SPI. Callanecc (talk • contribs • logs) 10:27, 29 August 2021 (UTC)
 * I've CU blocked but not tagged them pending either a behavioural investigation or, if not related to Safi Bhatti their own SPI. Callanecc (talk • contribs • logs) 10:27, 29 August 2021 (UTC)
 * I've CU blocked but not tagged them pending either a behavioural investigation or, if not related to Safi Bhatti their own SPI. Callanecc (talk • contribs • logs) 10:27, 29 August 2021 (UTC)
 * I've CU blocked but not tagged them pending either a behavioural investigation or, if not related to Safi Bhatti their own SPI. Callanecc (talk • contribs • logs) 10:27, 29 August 2021 (UTC)
 * I've CU blocked but not tagged them pending either a behavioural investigation or, if not related to Safi Bhatti their own SPI. Callanecc (talk • contribs • logs) 10:27, 29 August 2021 (UTC)
 * I've CU blocked but not tagged them pending either a behavioural investigation or, if not related to Safi Bhatti their own SPI. Callanecc (talk • contribs • logs) 10:27, 29 August 2021 (UTC)
 * I've CU blocked but not tagged them pending either a behavioural investigation or, if not related to Safi Bhatti their own SPI. Callanecc (talk • contribs • logs) 10:27, 29 August 2021 (UTC)


 * From a behavioural standpoint, I think it's possible, but I don't have enough to tag them as socks of this master. Since both the behavioural and the technical pattern are different, and only the username pattern is shared, I've elected to split this to Sockpuppet investigations/Sulaimat via a pro-forma filing and tag as socks of that user. Closing. --Blablubbs (talk) 11:06, 30 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

If it's not obvious by now, Iftkhar Ahmad Bhatti and other previous socks reported here have similarities to each other. One interesting thing to note is the first sock in question have similar interests to article Habibabad. This quarry I saw also has more information, but I won't say what it is to the best of interest here. DarkMatterMan4500 (talk) (contribs) 14:11, 29 August 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Now before anybody asks me why I filed this before the previous investigation is complete, is because I probably didn't read the bottom note until just a few minutes ago. DarkMatterMan4500 (talk) (contribs) 14:20, 29 August 2021 (UTC)


 * Feel free to merge this with the other report if you would like. DarkMatterMan4500 (talk) (contribs) 14:59, 29 August 2021 (UTC)
 * similar interests to Habibabad—which existing account are you saying this is similar to? I don't see Habi ba bad show up in the contribs of of any of the accounts that Callan blocked; am I missing something? As to the three without edits, "Bhatti" is a common enough surname that I don't think the name is enough evidence on its own. (That doesn't preclude the possibility that one turns up in a check on another account.) -- Tamzin  [cetacean needed] (she/they) 15:48, 29 August 2021 (UTC)
 * Hmmmm, perhaps you're right, but I'm talking about the article, not the user account . DarkMatterMan4500 (talk) (contribs) 15:54, 29 August 2021 (UTC)
 * This article is what I'm talking about, just to clear up confusion. Also check the history of the page. DarkMatterMan4500 (talk) (contribs) 15:55, 29 August 2021 (UTC)
 * Right, but the page's history only shows edits by one account listed here. (I've reverted one of the three edits for unexplained removal of content, but it looks like standard new-user stuff.) Which of the accounts mentioned in this SPI (on the Safi side or the Sulaimat side) do you think the Habibabad edits show a connection to? Where are the "similar interests"? -- Tamzin  [cetacean needed] (she/they) 16:48, 29 August 2021 (UTC)
 * Hmmm, I probably should've clarified what I meant, similar interests like the article on that specific page I linked, and not just that one. Previous sock edits from above and also these (not sure if this is helpful or not, but correct me if I'm wrong) are mostly their favorite targets. DarkMatterMan4500 (talk) (contribs) 17:13, 29 August 2021 (UTC)
 * I'm sorry, but I'm really not following. Iftkhar has only edited one article, Habibabad. Safi primarily edits pages related to corporate logos and Wikipedia. Sulaimat primarily edits pages related to trains and animals. Despite having a (common) South Asian surname, as far as I can tell neither Safi nor Sulaimat has ever edited about Pakistan; Safi has used an IP that geolocates to California and does not appear to be a proxy. What are the similar interests you're seeing? -- Tamzin  [cetacean needed] (she/they) 18:02, 29 August 2021 (UTC)
 * Hmmm, I might've been mistaken. DarkMatterMan4500 (talk) (contribs) 18:31, 29 August 2021 (UTC)
 * I decided to withdraw this case, but didn't know which ones to use to withdraw this. DarkMatterMan4500 (talk) (contribs) 01:53, 30 August 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same username format. Same interest in corporate/organizational logos. Same nonsensical usertalk history and interactions with other users. Also Currys is a recurring interest. Interaction (both on their talkpage and loutsocking on articles) with the same IP range that Bhatti has used for a year.

Requesting CU (with respect to the account) based on Bhatti's history of sleepers / below-the-radar parallel sox, and also to see if we can get a solid answer on whether there's a connection to (ruled unlikely on CU evidence and split off to WP:Sockpuppet investigations/Sulaimat, and I think probably not the same person after getting to know both sockmasters better, but I'd still like to know if a second check finds more definitive data this time, in either direction). -- Tamzin  [ cetacean needed ] (she/they) 19:58, 10 October 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
'''This case is being reviewed by Tamzin as part of her training as a clerk. Please allow her to process the entire case without interference. You may pose any questions or concerns either on her talk page or on this page.'''
 * . --  Tamzin  [ cetacean needed ] (she/they) 20:00, 10 October 2021 (UTC)
 * No sleepers / parallel socks found in search. is stale. Closing. PhilKnight (talk) 16:45, 12 October 2021 (UTC)