Wikipedia:Sockpuppet investigations/Raheeiejaz907

Add links
From Wikipedia, the free encyclopedia

Raheeiejaz907

Raheeiejaz907 (talk+ · tag · contribs · deleted contribs · logs · filter log · block user · spi block · block log · CA · CheckUser(log) · investigate · cuwiki)

20 April 2024[edit]

– A checkuser has completed a check on relevant users in this case, and it is now awaiting administration and close.

Suspected sockpuppets[edit]

Last year, Raheeiejaz907 (talk · contribs) was blocked for socking. I found Raheeiejaz907 renamed the talk page of Atif ahmad8 (talk · contribs). Typically, such actions are indicative of socking as well. And the editing patterns of both users are similar, editing Pakistan military-related BLPs, particularly removing unwanted edits at Ahmed Sharif Chaudhry.

I suggest Atif ahmad8 (talk · contribs) should be blocked based on this behavioral evidence, with the possibility of being unblocked only if they agree not to engage in sockpuppetry again. Also, I strongly suspect that the IPs (India and Israel based VPNs) responsible for removing sourced material from the same BLP belong to this @Atif ahmad8. —Saqib (talk | contribs) 11:55, 20 April 2024 (UTC)[reply]

@Bbb23: I'm curious about how proxy IPs can edit WP? --—Saqib (talk | contribs) 21:15, 20 April 2024 (UTC)[reply]
@Zzuuzz: Except for 103.137.24.8 (talk · contribs · WHOIS), all the other IPs are proxy IPs. These India, Germany and Israel based proxy IPs editing the biography pages of the Nadeem Anjum and Asim Munir, aiming to remove controversial content and potentially censoring them. Despite their various locations, I suspect they're all managed by the same individual. What actions can be taken against them? It's intriguing to consider why one from India or Israel might delete any negative aspects in biographies of high-ranking Pakistani military officials. --—Saqib (talk | contribs) 18:51, 22 April 2024 (UTC)[reply]

@Zzuuzz: I've an update. According to this report, it appears that @CPPConstruct is a sockpuppet of the blocked user WaseemAbbaass (talk · contribs), who also operated another blocked sockpuppet under the name DaDefeender (talk · contribs). Given that CPPConstruct (talk · contribs) which attempted to remove the Controversies section from Inter-Services Public Relations page and then an proxy IP address 194.61.40.101 (talk · contribs · WHOIS) made similar attempts, it clear that WaseemAbbaass is the master account behind all these. What's your take on this? Pinging VirtualVagabond (talk · contribs) who may have some insights to contribute here. On a related note, The recent IP 2400:ADCC:1100:3700:5D0B:3E95:F5AF:1FB4 (talk · contribs · WHOIS) from Rawalpindi attempted to remove the same information as CPPConstruct, giving the impression it could be from ISPR HQ in Rawalpindi - just kidding. --—Saqib (talk | contribs) 19:24, 2 May 2024 (UTC)[reply]

Yeah, im 100% certain those three accounts (WaseemAbbaass, DaDefeender, CPPConstruct) are the same guy. They have the same editing styles, remove the same thing and even use the same edit summaries. Not even mentioning the countless IP addresses he used after his accounts got banned. Nadeem Anjum had to be semi-protected due to constant vandalism from him.
It’s clear he’s doing this because he believes writing controversy about the military makes a “bad image” about Pakistan, which he stated on my talk page.
This isn’t something recent, he’s been doing it for months, I remember when he used to blank like half of the Asim Munir page because some controversy/criticism was written about him. Thankfully the Asim Munir page hasn’t really seen any major vandalism recently. VirtualVagabond (talk) 22:16, 2 May 2024 (UTC)[reply]

@Zzuuzz: Are these VPNs ? 154.192.47.86 (talk · contribs · WHOIS) 154.192.18.61 (talk · contribs · WHOIS) --—Saqib (talk | contribs) 21:43, 5 May 2024 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.
But Atif ahmad8 is already in the suspect list. —Saqib (talk | contribs) 00:13, 21 April 2024 (UTC)[reply]
@Zzuuzz: Thanks for chiming in. Is it feasible to block ranges of these proxy IPs? --—Saqib (talk | contribs) 09:32, 23 April 2024 (UTC)[reply]

Clerk, CheckUser, and/or patrolling admin comments[edit]

@Saqib: To answer your question, IP proxies edit Wikipedia all the time. There is no technical mechanism that prevents them from doing so. There are some bots that detect and block proxies, but they're a long way from foolproof. Two users who know more about this than I do are zzuuzz and ST47. As an aside, I don't know what you're doing with this report. If your principal claim is that Atif ahmad8 is a sock, they should be in the suspect list, not in the body. As it stands, it looks like you're requesting only blocks of IPs.--Bbb23 (talk) 22:29, 20 April 2024 (UTC)[reply]

If the user were in the list, it would display their name and surely you can see it does/did not. It does now because I fixed a mistake you made when filing this.--Bbb23 (talk) 00:55, 21 April 2024 (UTC)[reply]
  • From my point of view this is complicated, so I'll give some initial impressions. I can't link IPs with accounts, but I can say two things. First, the IPs appear (at least mostly) to be VPNs, and looking at the operator if I were to guess, I'd guess it's a PIA company.[1] Suspicious much. There appears to be at least some geographically appropriate activity on some IPs. Second, IPs aside, I'm seeing connections between both usernames above and WaseemAbbaass (and his sock) and Raheeiejaz907, though it's a bit 'noisy'. There's a lot of socking on those Pakistani generals articles. -- zzuuzz (talk) 09:28, 23 April 2024 (UTC)[reply]
  • More interim results, though I'm not sure whether anything else will turn up. Here's what I have at this time:
  • Raheeiejaz907 is stale, I can't do or say much there.
  • DaDefeender is 100%  Confirmed to WaseemAbbaass.
  • CPPConstruct is  Likely WaseemAbbaass and DaDefeender. If they weren't already blocked, I'd block 'em.
  • Atif ahmad8, WaseemAbbaass, and CPPConstruct share a range, which is moderately busy with other users. I'd call it  Possilikely (a mix between possible and likely)
  • Atif ahmad8, and I think all other accounts mentioned, have been editing relevant articles while logged out.
  • Usama Ahmad rana (see following report) is not a particularly strong match to anyone else
  • Most of the IPs above have been blocked as proxies. The ones located in Pakistan (103.137.*) are probably not proxies.
  • -- zzuuzz (talk) 21:09, 2 May 2024 (UTC)[reply]

02 May 2024[edit]

– This SPI case is closed and will be archived shortly by an SPI clerk or checkuser.

Suspected sockpuppets[edit]

This looks like a duck, swims like a duck, and quacks like a duck. —Saqib (talk | contribs) 10:12, 2 May 2024 (UTC)[reply]

Comments by other users[edit]

Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments[edit]

  • User now blocked, closing. Bbb23 (talk) 13:04, 2 May 2024 (UTC)[reply]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Wikipedia:Sockpuppet_investigations/Raheeiejaz907&oldid=1222423745"