Wikipedia:Sockpuppet investigations/محمد الخوبري/Archive

02 May 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

All currently tagged in, would be nice to get some formal confirmation. A classic case of WP:DUCK - Arabic-speaking editor (sockmaster is from Yemen) who edits, and creates non-notable articles, related to IFFHS. GiantSnowman 19:21, 2 May 2012 (UTC) GiantSnowman 19:21, 2 May 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * With most of these accounts being blocked months ago and with no basis to suspect that there may be other active accounts, a check is not required. AGK  [•] 21:28, 2 May 2012 (UTC)
 * I'm positive that there are active accounts - just the other day I blocked three in a matter of days - we simply haven't found them yet. GiantSnowman 08:20, 3 May 2012 (UTC)
 * Dates of blocks for reference:
 * D.villa - 3 February 2012
 * 2.178.145.124 - 10 February 2012
 * Jarni17 - 27 April 2012
 * Raulmohammed - 30 April 2012
 * Salas.jarni - 1 May 2012
 * 109.200.180.192 - never blocked, now inactive
 * The two with Arabic text were blocked 8 February 2012 and 17 February 2012, but the formatting is messing up due to the text display. GiantSnowman 15:11, 3 May 2012 (UTC)


 * The name محمد الخوبري transcribes as 'Muħammad al Khawbari' or similar. Anthony Appleyard (talk) 05:30, 5 May 2012 (UTC)
 * Now re-appeared as . GiantSnowman 10:00, 6 May 2012 (UTC)

Given the continued socking, I see grounds for a check: . AGK  [•] 11:43, 6 May 2012 (UTC)


 * I found more socks, and blocked everything. ✅:
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)
 * I was unable to block the IP addresses, due to the variety of addresses used and volume of collateral. AGK  [•] 12:01, 6 May 2012 (UTC)

04 July 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

This looks to be a case of WP:DUCK to me - editor appeared soon after last accounts were blocked, has Arabic-script name, edits exclusively in Yemeni football - prime example is him taking over from previous account, within days, as the sole editor of 2011–12 Al-Oruba F.C. season. GiantSnowman 16:36, 4 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - Probably the same, but it's time for another sweep, I think. ​—DoRD (talk)​ 17:58, 4 July 2012 (UTC)
 * Obviously that's him, did a couple of range blocks. WilliamH (talk) 05:25, 5 July 2012 (UTC)
 * Seems to have been taken care of by WilliamH. Marking for close. Keilana&#124;Parlez ici 07:00, 5 July 2012 (UTC)
 * Thanks, blocked on that basis. GiantSnowman 07:54, 5 July 2012 (UTC)

07 July 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Emerged just after the previous sock was blocked, continues to edit the same articles and topics. A clear case of WP:DUCK but bringing here for a) AGF b) so it's formal c) checkuser in case there are any more. GiantSnowman 18:55, 7 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅. . Tiptoety  talk 03:32, 8 July 2012 (UTC)
 * Done. -- DQ  (ʞlɐʇ)  03:33, 8 July 2012 (UTC)

12 July 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Emerged just after the last sock was blocked, edits the exact same articles - appears to be a clear case of DUCK but bringing it here per AGF and to keep a record. Please check the archive for evidence of recent disruption - is there a longer-term solution? GiantSnowman 16:09, 12 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  22:44, 12 July 2012 (UTC)
 * to confirm block evasion and look for sleepers. Checkusers may advise whether rangeblocks may prove effective at preventing further disruption.

Yemen.houes is a ✅ match. Didn't find any other accounts. Also, I wouldn't advise rangeblocks, looks a little busy to me. Elockid  ( Talk ) 22:58, 12 July 2012 (UTC)
 * Blocked and tagged. -- DQ  (ʞlɐʇ)  01:49, 13 July 2012 (UTC)

20 July 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Emerged just after the last sock was blocked, edits same articles, similar names to previous socks - we all know it's him, but bringing it here for formal confirmation and AGF etc., and to seek check for sleepers / consider possible rangeblock? GiantSnowman 12:48, 20 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * . For reasons I can't comment on, i'm not really in the best position to make a rangeblock, as the previous CU noted. -- DQ  (ʞlɐʇ)  00:25, 21 July 2012 (UTC)
 * Bagged and tagged. Dennis Brown - 2&cent;    &copy;  16:57, 21 July 2012 (UTC)

24 July 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Similar names to previous socks, edits same articles, appeared just after previous sock was blocked - clear case of WP:DUCK, I've already bagged and tagged him but bringing it here (again) to request formal CU and a range block / further action. GiantSnowman 08:10, 24 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  20:15, 25 July 2012 (UTC)
 * ✅ to the last sock in the archive., 2 blocks are active, I only expect it to slow him down, not stop him. -- DQ  (ʞlɐʇ)  14:01, 25 July 2012 (UTC)
 * Closing.

04 August 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Already blocked per WP:DUCK - emerged after last sock, edits same articles - but bringing it here for formal identification and see if you guys can work your magic and prevent further disruption; once confirmed I'll feel happier cleaning up after him and G5ing some stuff. GiantSnowman 10:26, 4 August 2012 (UTC) GiantSnowman 10:26, 4 August 2012 (UTC)
 * but endorsed anyway ;) Dennis Brown - 2&cent;    &copy;   Join WER 15:01, 4 August 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * for sleepers. Dennis Brown -  2&cent;    &copy;   Join WER 15:01, 4 August 2012 (UTC)
 * Another . I, again, don't expect it to stop him, and there is another range that's too busy to block right now. But for the record ✅. -- DQ  (ʞlɐʇ)  16:48, 4 August 2012 (UTC)

28 August 2012

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.

Clear case of DUCK, already blocked, but even when I'm 99.99% sure that little bit of doubt means I need it confirming by SPI GiantSnowman 09:35, 28 August 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * , with what I see though, it's . I ran this check on the possibility that there were more socks when I was looking through the evidence, but nothing is showing. GaintSnowman, you should consider your DUCK blocks as good and keep going with that. CheckUser won't go out to confirm all of them, but can back you up on an unblock request when it happens. -- DQ  (ʞlɐʇ)  15:10, 28 August 2012 (UTC)
 * Looking at the edits and template creations, the duck case does look pretty convincing. (The master's username also transliterates to Mohammed Alkhobary, I believe.) Marking for close. Jafeluv (talk) 16:06, 28 August 2012 (UTC)