Wikipedia:Sockpuppet investigations/Shir-e-Iran/Archive

Report date April 19 2009, 22:25 (UTC)

 * Suspected sockpuppets
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)
 * (accounts below added after checkuser findings posted)

User:Shir-e-Iran, started editing shortly after user:KDICO was blocked for having a promotional user name ''(no infraction of rules here, as a new username was appropriate)
 * Evidence submitted by Wuhwuzdat (talk)

Shir-e-iran became involved in an AfD discussion about article created by KDICO, and when consensus was clearly in favor of deletion, new account "Computer Geek number1" was created, with only edits so far being to back up Shir-e-Iran's position.

clear case of using a sock to help build consensus. Wuhwuzdat (talk) 22:25, 19 April 2009 (UTC)


 * Comments by accused parties    See Defending yourself against claims.

I fully agree with Wuhwuzdat and I think he's absolutely right in bringing this here. Yintaɳ 22:46, 19 April 2009 (UTC)
 * Comments by other users

I added the IP address 87.107.116.89, as it has also edited Kasra Hooshmand Engineering Co., P.J.S. (KDI). Unsurprisingly, that address locates to Tehran. Dori ❦ (Talk ❖ Contribs ❖ Review) ❦ 01:26, 20 April 2009 (UTC)


 * The KDICO account does not appear to have been used since 15:50 on 19 April. The switch from using that account to Shir-e-Iran (first contributions 16:13 on the 19th) seems to be a rename to avoid a username issue, since the company being written about is named KDI (KDI Co.?). However, the use of Computer Geek number1 does appear to be an attempt to stack votes in an AfD. —C.Fred (talk) 01:45, 20 April 2009 (UTC)
 * Possibly worth noting: while KDICO created the article in question, Shir-e-Iran removed the CSD tags editors applied to the article ( and ). While it's fine for someone to dump their old account and create a new one after being blocked for a spam username, if they're the same person, they shouldn't be deleting the CSD tag. Dori ❦ (Talk ❖ Contribs ❖ Review) ❦ 04:36, 20 April 2009 (UTC)


 * Added a second anonymous IP, locates to Tehran, removed maintenance template from same article without fixing problem. Wuhwuzdat (talk) 01:16, 25 April 2009 (UTC)


 * I agree with Wuhwuzdat, as Computer Geek number1, other than only making an edit to the AFD, used exactly the same reasoning, despite stiff evidence. However, I'm not too sure about the IPs (I haven't looked at them yet) Cheers.  I 'mperator 17:41, 26 April 2009 (UTC)


 * add a third anonymous IP, locates to Tehran, removed sockpuppeteer template from user:Shir-e-Iran. Wuhwuzdat (talk) 18:20, 27 April 2009 (UTC)
 * ...and a fourth, same reason, also locates to Tehran. Wuhwuzdat (talk) 18:35, 27 April 2009 (UTC)


 * added user:Watoowatoo2000, as they have just reposted the same sourceless material deleted by AfD consensus at KDI. Wuhwuzdat (talk) 18:43, 27 April 2009 (UTC)


 * added 79.132.204.188, removing speedy templates at KDI, locates to ...Tehran...suprised?
 * :IP above started wikistalking me after being added to this investigation, was blocked, and now I have another wikistalker from Tehran, 84.47.231.3, who has also been added here. Wuhwuzdat (talk) 19:09, 27 April 2009 (UTC)
 * a 3rd wikistalker IP from Tehran, 87.107.37.198, only edits have been to revert my actions. Wuhwuzdat (talk) 20:31, 27 April 2009 (UTC)
 * 4th wikistalker IP from Tehran, 87.107.118.220, again, only reverting my edits, now refering to my edits as "vandalism". Wuhwuzdat (talk) 00:01, 28 April 2009 (UTC)
 * 5th wikistalker of the day is 92.50.30.14. Wuhwuzdat (talk) 00:19, 28 April 2009 (UTC)


 * QUESTION, is it too late to request checkuser evidence in this case? If Possible I would like to add a request, due to Ongoing, serious pattern vandalism involving dozens of incidents, and possible meatpuppetry. Wuhwuzdat (talk) 19:22, 27 April 2009 (UTC)
 * I don't think it's ever too late to add a request. I'm adding one for you now. Canadian   Nine  22:30, 27 April 2009 (UTC)


 * I've added User:Artesh-e-Iran to this investigation, based on similarities between:
 * and
 * and
 * The usernames themselves: User:Shir-e-Iran and User:Artesh-e-Iran
 * I could be way off on this one; if anyone wants to disagree with my spidey-sense, go right ahead. Dori ❦ (Talk ❖ Contribs ❖ Review) ❦ 07:21, 28 April 2009 (UTC)
 * Comment I have just blocked Artesh-e-Iran for 72 hours for repeated personal attacks, mainly against Wuhwuzdat Tonywalton Talk 13:16, 28 April 2009 (UTC)
 * I agree 100% with your evidence, Dori, and witnessing this users recent rampage of userpage vandalism, personal attacks and profanity, (triggered by my templating their user and talk pages with the appropriate templates for a suspected sock) only adds to my belief that User:Artesh-e-Iran is yet another leg of this millipede. Wuhwuzdat (talk) 13:23, 28 April 2009 (UTC)

(comments below added AFTER checkuser findings posted)
 * Added user:Drittes Reich 1940, recently created account, used template created by Shir-e-Iran, very similar editing style and choice of subjects. User was blocked for username violation, and after block, replied with signed antagonistic comment on his talk page, comment was posted by an IP (87.107.118.66) from Tehran. I believe the pseudo-Germanic attributes of this account were an attempt at misdirection, in a similar fashion to the pseudo-American attributes of user:Watoowatoo2000's userpage. IP 87.107.118.66 also added to the investigation. Wuhwuzdat (talk) 14:14, 29 April 2009 (UTC)
 * Also added 92.50.30.171, (location:Tehran), signed personal attack/userpage vandalism on the admin who blocked Drittes Reich 1940. Wuhwuzdat (talk) 14:56, 29 April 2009 (UTC)


 * Clerk, patrolling admin and checkuser comments


 * This whole thing is a bit tl;dr, apologies in advance to the CU. — Jake  Wartenberg  02:45, 28 April 2009 (UTC)

Watoowatoo2000 is ; all the rest are. Dominic·t 09:15, 29 April 2009 (UTC)


 * Conclusions


 * Listed accounts blocked indefinitely.
 * Individual IPs blocked (AO, ACB) for one month.
 * 87.107.0.0/17 blocked for 1 month (AO, ACB).
 * Listed accounts tagged. Peter Symonds ( talk ) 15:19, 29 April 2009 (UTC)

Report date April 29 2009, 21:10 (UTC)

 * Suspected sockpuppets

Please consider this to be an extension of the investigation that was closed this morning.
 * Evidence submitted by Wuhwuzdat (talk)

User Drittes Riech 1940 was continuing the series of Iranian military edits started by Shir-e-Iran, (and continued by his socks) when blocked for username violation.

A template created by Drittes Reich 1940 was a copy and paste edit of a template recently created by Shir (note the internal template names are the same in both templates, with Dritte's V-D-E links going to Shir's template).

Admin who blocked Drittes had his userpage attacked by 92.50.30.171, who signed his work as "Drittes."

"Drittes" responded from a different IP on with this edit

After my posting on WP:ANI connecting Drittes and Shir, my userpage was attacked by Shir, using IP 217.146.216.194. I apologize for reopening this investigation so soon after it was closed, but the sockmaster in question here seems to be quite persistent. Wuhwuzdat (talk) 21:10, 29 April 2009 (UTC)
 * Forgot to mention, all IP's geolocate to Tehran, just as in the previous SPI. Wuhwuzdat (talk) 23:50, 29 April 2009 (UTC)


 * Comments by accused parties    See Defending yourself against claims.


 * Comments by other users
 * Added 91.98.9.162, outted my personal info on my userpage. Wuhwuzdat (talk) 23:10, 29 April 2009 (UTC)

Requested by Wuhwuzdat (talk) 21:10, 29 April 2009 (UTC)
 * CheckUser requests
 * see conclusion. ——  nix eagle email me 03:09, 30 April 2009 (UTC)


 * Clerk, patrolling admin and checkuser comments


 * Conclusions
 * All listed accounts/ips are blocked... there is not much a CU is going to do here. Just report new ones as you find them. ——  nix eagle email me 03:09, 30 April 2009 (UTC)


 * Archive. — Jake  Wartenberg  03:11, 30 April 2009 (UTC)