Mojtaba2361 ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)

05 November 2022

Suspected sockpuppets

• ArmanAfifeh ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki) (  Clerk note: originally filed under this user)

• Miha2020 ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
• Tools: Editor interaction utility • Interaction Timeline • SPI Tools

Mojtaba2361 was blocked for UPE on enwiki (and later on fawiki). Some time later, Miha2020 signed up and continued editing in a similar way. I couldn't find the details on fawiki, but Miha2020 was blocked for sockpuppetry there. Similar timecards [1] [2]. Large article overlap [3]. Very similar edit summaries (e.g. [4] [5], [6] [7], [8] [9], [10] [11], [12] [13]). MarioGom ( talk) 22:15, 5 November 2022 (UTC) reply

Comments by other users

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

• I went back and looked at
  • Peymn NR ( talk ⁺ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser( log) · investigate · cuwiki)
  from the previous report; I'll upgrade their tag to  Confirmed. But the best I can say about Miha2020 is  Possilikely (a mix between possible and likely). -- RoySmith (talk) 14:23, 18 November 2022 (UTC) reply
• I haven't looked too closely at this but I don't think Mojtaba2361 is the same person as ArmanAfifeh. There is some discussion about this on the talk page of this SPI. The CU results should be interpreted in light of that. I note that Miha2020 is blocked on fawiki for something that seems to involve socking, but I can't really make sense of the Google translation. Spicy ( talk) 19:13, 18 November 2022 (UTC) reply
• @ RoySmith: Apologies for asking what may be a stupid question, but did you compare technical details for Miha2020 vs Mojtaba2361? Mojtaba2361 is old, but perhaps there's things in the logs, or login records? The behavioral overlap is quite strong, per MarioGom above and also common patterns in talk page contributions that I just found, including erratic capitalization and exclamation mark usage. Vanamonde ( Talk) 23:16, 19 November 2022 (UTC) reply

  @ Vanamonde93 Unfortunately, there's not a lot I can give you. Digging through the logs, there are some IP ranges that Mojtaba2361 appears to have used (note "appears"; everything dug out of the logs is subject to more than the usual amount of uncertainty) which overlap some of the IP ranges that Miha2020 used. I guess I'd have to call it  Possible  Behavioural evidence needs evaluation. -- RoySmith (talk) 23:30, 19 November 2022 (UTC) reply

•  Blocked without tags I've looked a little deeper here, and I'm convinced Mojtaba2361 and Miha2020 are the same person. The page overlap is absurd; nearly 400 pages, comparable to what I have with editors with tenures of a decade or more. There's numerous other tells, which I'd rather not disclose for BEANS reasons, happy to discuss them off-wiki. I have indeffed. I see no clear behavioral connection to ArmanAfifeh, though there's far more socks than I can look at. Spicy above appears to agree. I believe this may need to be split into a separate case, but I will leave the administrative details to the experts. Vanamonde ( Talk) 00:03, 20 November 2022 (UTC) reply
• Thanks, Vanamonde. I've split this into a new case under Mojtaba2361. Spicy ( talk) 00:08, 20 November 2022 (UTC) reply
• Tagged, closing. Spicy ( talk) 00:09, 20 November 2022 (UTC) reply