Wikipedia:Sockpuppet investigations/Hassan Guy/Archive

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility







Ad Orientem (talk) 14:32, 27 January 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Note: I have blocked the IP on the basis of WP:DUCK. However I would like solid confirmation before I indef the puppet master. -Ad Orientem (talk) 14:34, 27 January 2017 (UTC)
 * Addendum: The master appears to be using at least one other IP to evade his block which I've added above. This is enough for me. I've indeffed him. Ping me in the unlikely event that this turns out to be someone else. -Ad Orientem (talk) 15:15, 27 January 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Everyone's blocked, closing. GABgab 19:31, 27 January 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

User was blocked for disruptive editing and adding un-sourced content. Continued to disrupt articles like Pakistan Navy SSP programmes using address 5.36.76.146. Is now back with the same subnet and editing similar articles with pro-Pakistan POV. Adamgerber80 (talk) 05:24, 10 May 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - .&#32;In order to facilitate and expedite your request, please provide diffs to support your case. Please give two or more diffs meeting the following format:
 * 1) At least one diff is from the sockmaster (or an account already blocked as a confirmed sockpuppet of the sockmaster), showing the behaviour characteristic of the sockmaster.
 * 2) At least one diff per suspected sockpuppet, showing the suspected sockpuppet emulating the behaviour of the sockmaster given in the first diff.
 * 3) In situations where it is not immediately obvious from the diffs what the characteristic behaviour is, a short explanation must be provided. Around one sentence is enough for this.  Vanjagenije   (talk)  08:23, 10 May 2017 (UTC)
 * IP edits too old. Closing. Bbb23 (talk) 16:54, 17 May 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

We are dealing with an IP hopper who continues to disrupt Pakistan related defense pages with POV editing. The IP has been blocked in the last few days for harassment and personal attacks. The pattern of the IP is similar to this editor who has been blocked quite some time back. They both also the use the same subnet for IP socking based on past sock investigations. Adamgerber80 (talk) 14:12, 1 October 2017 (UTC)
 * Pinging who has also dealt with other investigations in the past. Adamgerber80 (talk) 14:15, 1 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I am certain beyond a shadow of a doubt after looking at these diffs that it's him. &mdash;  MB laze Lightning T 16:24, 1 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The pages are semi'd, let's go with that and see what happens. Callanecc (talk • contribs • logs) 10:38, 7 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

IP is continuing the discussion after 5.36.80.147 stopped. Seems to be a SOCK by co-relation. Has been blocked at these IPs 72.52.87.66, 62.231.238.166 in the recent past. Uses many other IPs- more info here User:Adamgerber80/Oman_IP_Hopper Adamgerber80 (talk) 14:16, 1 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * The pages are semi'd, let's go with that and see what happens. Callanecc (talk • contribs • logs) 10:38, 7 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Account was created on 1st October immediately after the IP edit warring on the page was blocked. Is a clear duck which continues with the earlier argument. Pinging who is also involved in the discussion. Adamgerber80 (talk) 16:03, 1 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * &mdash;  MB laze Lightning T 16:24, 1 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * ✅, . Closing. Callanecc (talk • contribs • logs) 10:35, 7 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The account was created recently and the editor continues to disrupt edits on List of military equipment manufactured in Pakistan. This is same as the the other IPs and the Sockpuppeteer. Adamgerber80 (talk) 14:06, 5 October 2017 (UTC)
 * Pinging who has also dealt with this editor before. Adamgerber80 (talk) 14:19, 5 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * CheckUser is ., closing. Callanecc (talk • contribs • logs) 10:36, 7 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

The account was created recently and the editor continues to disrupt edits on Talk:Al-Zarrar (diff). This is same as the other IPs and the Sockpuppeteer. Loopy30 (talk) 21:39, 14 October 2017 (UTC)
 * Pinging and Adamgerber80 who have also dealt with this editor before. Loopy30 (talk) 21:39, 14 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Looks like a duck to me quacking. Same line of argument as before about joint venture and almost singular focus on these two articles. Adamgerber80 (talk) 23:24, 14 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Already blocked. Closing.  Vanjagenije  (talk)  09:03, 15 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Persistent sockpuppetry on the same pages. Adamgerber80 (talk) 20:51, 16 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * I'm starting to think this may be a candidate for WP:LTA. -Ad Orientem (talk) 02:18, 17 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * The new sock is already blocked and tagged, so there's nothing left to do here. Closing. Sir Sputnik (talk) 01:55, 17 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Seems to be make the same edits as the other editor and making the same arguments. Account was created immediately after a request to merge the page was made. Adamgerber80 (talk) 22:06, 17 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''
 * Blocked per DUCK. Two suggestions. First if a list of articles this sockmaster likes to edit can be compiled I will protect them for at least a month. Either ping me here or drop me a line on my talk page. Secondly I suggest adding HG to the list at WP:LTA. -Ad Orientem (talk) 22:45, 17 October 2017 (UTC)
 * I have been compiling a list of IPs, Sockpuppet accounts and list of pages which the editor usually edits. This is here. I will go and ahead and add him there. I have never added anyone at WP:LTA. Is there anything I should I keep in mind or just fill out the interface they have. Thanks. Adamgerber80 (talk) 00:39, 18 October 2017 (UTC)
 * I'd just follow the directions. I will start going through the list of frequently targeted articles. -Ad Orientem (talk) 00:48, 18 October 2017 (UTC)
 * Hi Adamgerber80. Thanks for staying on top of this. I've protected some of the articles that he seems to target frequently for 3 months. Let me know if he expands his interests or starts hitting some of the ones I did not protect. -Ad Orientem (talk) 01:18, 18 October 2017 (UTC)
 * Thanks for all your help. I have also submitted a LTA page for the editor. Adamgerber80 (talk) 01:28, 18 October 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * Tagged and closing. BTW,, you can go ahead and close SPI cases once you block socks by changing the parameter to  GABgab 00:04, 18 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Same arguments on the same pages. Account was recently created. Even the user name is similar to one of the sockpuppets. Please scan for sleepers as well. Adamgerber80 (talk) 18:01, 22 October 2017 (UTC)
 * Pinging who has dealt with the user before and is aware of the LTA. Adamgerber80 (talk) 18:08, 22 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Sock blocked. Page protected. Closing. -Ad Orientem (talk) 20:31, 22 October 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility

Editor seems to be arguing the same point as Hassan Guy has done on other pages mostly WP:DONTLIKE regarding the origin of Pakistani equipment. Has a long history of socking and has a LTA case. Has history of editing the page in the past before the editor was banned. Adamgerber80 (talk) 20:42, 29 October 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Blocked per DUCK. Target page protected x 3 months. -Ad Orientem (talk) 21:16, 29 October 2017 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Account created a month after the last sock was blocked.

Same edits on Nuclear triad.

Image formatting on List of active Pakistan Navy ships. 

Reverting Adamgerber80 without edit summaries.

I have requested CU as may still remember the technical details and ping  who is very experienced with this case. Lorstaking (talk) 15:50, 21 July 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked per WP:DUCK. I have a high degree of confidence that this is Hassan Guy. But no objection if a CU wants to take a look in their magic 8 ball just be 100% sure. Ad Orientem (talk) 16:15, 21 July 2018 (UTC)
 * Followup The editor has posted an unblock request. While I still think they are a sock, a CU check now seems like a good idea out of an abundance of caution. -Ad Orientem (talk) 17:05, 21 July 2018 (UTC)
 * This case is . See also Sockpuppet investigations/Usman47. Closing.--Bbb23 (talk) 17:06, 21 July 2018 (UTC)


 * Post Close Note: I subsequently unblocked the user based on CU evidence that raised a reasonable level of doubt. -Ad Orientem (talk) 18:59, 21 July 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Usman47 and AAG Baron don't look different. This article is first edit for both these accounts and Usman47 was blocked 1 month ago. Orientls (talk) 06:00, 6 November 2018 (UTC)


 * Usman47 is not stale as he edited until last month and was blocked by for WP:NOTHERE and also because there was "is strong circumstantial evidence" that the account is a sock of Hassan Guy. Orientls (talk) 04:56, 8 November 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
This case is. CU declined.--Bbb23 (talk) 14:11, 6 November 2018 (UTC)
 * Usman47 and AAG Baron are ❌.--Bbb23 (talk) 13:24, 8 November 2018 (UTC)


 * The account looks to be abandoned. Case closed.  Vanjagenije  (talk)  15:44, 9 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

These socks of Hassan Guy have been edit warring and making personal attacks against people who revert him,[],[],[],[],[],[],[]. Another detail is that the first IP address listed matches with what is on the long term abuse page for Hassan Guy saying he operates from either Oman or Libya. The other 2 trace back to both Rawalpindi and Islamabad in Pakistan which to me sounds more of like Abhishek9779. Mountain157 (talk) 01:40, 27 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Only one IP has edited recently and then only one edit. Closing. Bbb23 (talk) 01:59, 27 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

These IP addresses appear similar to those listed at the Long Term Abuse case for Hassan Guy. The IP's additionally are located from the same Lattitude and Longitude[],[]. Mountain157 (talk) 00:01, 21 February 2019 (UTC)
 * I am adding another account by the name of Hummer431. This user is suddenly reverting back to the same edits made by another sock IP in which he calls the Balochistan Liberation Army(BLA) a "terrorist organization". [],[]Mountain157 (talk) 20:17, 22 February 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
The IPs are on a mobile phone network. Hummer431 was blocked as a sock of Nangparbat. Nothing left to do. Closing. Cabayi (talk) 12:37, 11 March 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same Pakistani POVPUSH as previous sock IP ranges (see archive).

IP ranges also match the ones listed at the Long-term abuse page. Other IPs from the ranges mentioned at LTA have made the same edits (e.g. 5.37.187.78, 5.36.48.63). Gotitbro (talk) 20:09, 20 January 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've added pending changes protection to Durand Line for one month. The IP addresses have made only 1-2 edits to this article, many not recently. Let's see how protection goes. Closing SPI...  ~Oshwah~  (talk) (contribs)   08:49, 22 January 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Same edits on Durand line as previous socks and IPs in the same range (see LTA and archive). The pending changing PP is clearly not working as not all editors are familiar with this LTA puppeteer, the term abuse and socking definitely requires further and longer protection. Gotitbro (talk) 12:16, 22 January 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP has been blocked for evasion, and the article has been semi protected for one week. Closing SPI report...  ~Oshwah~  (talk) (contribs)   13:33, 22 January 2020 (UTC)
 * Case closed.  Vanjagenije  (talk)  20:25, 22 January 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Whitewashing Pakistani pages as usual. Range is same as those listed at Long-term abuse/Hassan Guy. Aman Kumar Goel (Talk) 17:35, 27 March 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * This IP is not active any more. Closing.  Vanjagenije  (talk)  09:24, 29 March 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar POVPUSHing as the master and socks/IPs, from the same range on the LTA page. Gotitbro (talk) 03:52, 1 July 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Probably pointless, but blocked the IP for a week. The LTA lists 5.37.128.0/18, but looking at the contribution history of that range, I suspect that's wider than it should be, so I just went with the single IP.  Closing. -- RoySmith (talk) 17:40, 1 July 2020 (UTC)