Wikipedia:Sockpuppet investigations/129.234.0.13/Archive

11 May 2016

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

This editor has engaged in long-term sock cite disruption, interjecting the author Muhammad Aurang Zeb Mughal and the DOI for various papers by this author into valid cites, replacing the correct information. This is done disingenuously, making it appear as if a valid paper on a subject is by MAZ Mughal within a particular (and valid) edited collection of papers or journal. Other times, the information is just added as a valid cite; I caught the now-blocked sock because it was updating the cite format on a large number of disrupted cites from years ago. Right now the oldest disruption is this one but I bet I will uncover more if I look further.

I'm not sure what to do about this situation other than report it. Ogress 07:19, 11 May 2016 (UTC)

First noticed here, deleting "outdated" ref by Muhammad Aurang Zeb Mughal. I spot-checked some of their other edits; every one had to do with the same author in a cite. Repeatedly insists on "last name first" or replaces "PhD thesis with the directly related published work of the same author". Behavior extremely similar to other IPs listed here. — Gorthian (talk) 16:16, 12 May 2016 (UTC)

Also note Administrators' noticeboard/IncidentArchive922. And Wikipedia talk:WikiProject Spam/2013 Archive Dec 1.— Gorthian (talk) 16:23, 12 May 2016 (UTC)

More discussions:
 * User talk:Blue Mist 1/Archive 1
 * User talk:Oshwah
 * — Gorthian (talk) 16:49, 12 May 2016 (UTC)

The contributions of the last IP listed here (129.234.252.65) go back to September 2009, but so far I've found the refspam behavior only on March 6, 2013. Possibly a shared IP, but on the user page, there is a note about possible sockpuppetry. — Gorthian (talk) 19:28, 12 May 2016 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

This is becoming a bit of a pest... - DVdm (talk) 16:37, 12 May 2016 (UTC)

I ran a WHOIS on all of the listed IPs. There's some from different UK ISPs and networks, some from Pakistan, etc. -- Have we checked to see if these aren't open proxies by chance?  ~Oshwah~  (talk) (contribs)   21:55, 12 May 2016 (UTC)


 * His pattern is to use each IP for a single day, and the dates are over a span of three years (so far), so it seems plausible to me that he is moving around over time. The U.K. and Pakistan would be logical, given what we know of him (I am assuming that he IS Mughal, and not someone else obsessed with him and his academic record). He may not even be a true sock, unless there's evidence that he's hopping IPs to avoid blocks etc. But he certainly is a refspammer!


 * I put together a table of what IPs he has used when:


 * {| class="wikitable sortable mw-collapsible mw-collapsed"

! IP ! Date ! Edit count
 * 92.17.8.169
 * style="text-align: right;"| March 6, 2013
 * 129.234.252.65
 * style="text-align: right;"| March 6, 2013
 * 80.44.118.193
 * style="text-align: right;"| May 27, 2013
 * 78.148.11.236
 * style="text-align: right;"| June 3, 2013
 * 78.148.2.74
 * style="text-align: right;"| June 7, 2013
 * 193.60.182.115
 * style="text-align: right;"| June 18, 2013
 * 84.13.68.20
 * style="text-align: right;"| June 22, 2013
 * 193.60.182.113
 * style="text-align: right;"| June 25, 2013
 * 84.13.73.242
 * style="text-align: right;"| July 3, 2013
 * 84.13.69.1
 * style="text-align: right;"| July 4, 2013
 * 78.148.7.191
 * style="text-align: right;"| July 12, 2013
 * 129.234.163.70
 * style="text-align: right;"| July 24, 2013
 * 2.123.151.125
 * style="text-align: right;"| October 6, 2013
 * 84.13.74.181
 * style="text-align: right;"| September 25, 2013
 * 94.1.163.34
 * style="text-align: right;"| December 10, 2013
 * 94.7.175.163
 * style="text-align: right;"| December 29, 2013
 * 129.234.0.13
 * style="text-align: right;"| January 8, 2014
 * 119.158.13.23
 * style="text-align: right;"| May 31, 2014
 * 119.158.4.85
 * style="text-align: right;"| June 12, 2014
 * 119.158.16.157
 * style="text-align: right;"| June 24, 2014
 * 119.158.12.253
 * style="text-align: right;"| June 25, 2014
 * 182.186.83.94
 * style="text-align: right;"| April 27, 2016
 * 39.37.116.188
 * style="text-align: right;"| May 6, 2016
 * 182.186.43.192
 * style="text-align: right;"| May 6, 2016
 * 182.186.37.215
 * style="text-align: right;"| May 10, 2016
 * 182.186.37.215
 * style="text-align: right;"| May 11, 2016
 * 182.186.87.63
 * style="text-align: right;"| May 12, 2016
 * }
 * 94.1.163.34
 * style="text-align: right;"| December 10, 2013
 * 94.7.175.163
 * style="text-align: right;"| December 29, 2013
 * 129.234.0.13
 * style="text-align: right;"| January 8, 2014
 * 119.158.13.23
 * style="text-align: right;"| May 31, 2014
 * 119.158.4.85
 * style="text-align: right;"| June 12, 2014
 * 119.158.16.157
 * style="text-align: right;"| June 24, 2014
 * 119.158.12.253
 * style="text-align: right;"| June 25, 2014
 * 182.186.83.94
 * style="text-align: right;"| April 27, 2016
 * 39.37.116.188
 * style="text-align: right;"| May 6, 2016
 * 182.186.43.192
 * style="text-align: right;"| May 6, 2016
 * 182.186.37.215
 * style="text-align: right;"| May 10, 2016
 * 182.186.37.215
 * style="text-align: right;"| May 11, 2016
 * 182.186.87.63
 * style="text-align: right;"| May 12, 2016
 * }
 * style="text-align: right;"| June 25, 2014
 * 182.186.83.94
 * style="text-align: right;"| April 27, 2016
 * 39.37.116.188
 * style="text-align: right;"| May 6, 2016
 * 182.186.43.192
 * style="text-align: right;"| May 6, 2016
 * 182.186.37.215
 * style="text-align: right;"| May 10, 2016
 * 182.186.37.215
 * style="text-align: right;"| May 11, 2016
 * 182.186.87.63
 * style="text-align: right;"| May 12, 2016
 * }
 * 182.186.37.215
 * style="text-align: right;"| May 10, 2016
 * 182.186.37.215
 * style="text-align: right;"| May 11, 2016
 * 182.186.87.63
 * style="text-align: right;"| May 12, 2016
 * }
 * 182.186.87.63
 * style="text-align: right;"| May 12, 2016
 * }
 * style="text-align: right;"| May 12, 2016
 * }
 * }


 * Maybe it will be helpful. — Gorthian (talk) 00:40, 13 May 2016 (UTC)


 * Though this vandal is not really a sockpuppet, I'm continuing to add records of his past WP:REFSPAM here. I'm also going through the articles he's spammed and removing his self-added references. This is, of course, a long process.— Gorthian (talk) 23:47, 17 May 2016 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Edit filter has been requested, so that should help here. Closing the case.  Vanjagenije  (talk)  21:24, 27 May 2016 (UTC)