Wikipedia:Sockpuppet investigations/Raheelejaz907/Archive

Suspected sockpuppets

 * ( original case name)

Last year, was blocked for socking. I found Raheeiejaz907 renamed the talk page of. Typically, such actions are indicative of socking as well. And the editing patterns of both users are similar, editing Pakistan military-related BLPs, particularly removing unwanted edits at Ahmed Sharif Chaudhry.

I suggest should be blocked based on this behavioral evidence, with the possibility of being unblocked only if they agree not to engage in sockpuppetry again. Also, I strongly suspect that the IPs (India and Israel based VPNs) responsible for removing sourced material from the same BLP belong to this @Atif ahmad8. — Saqib ( talk  |  contribs ) 11:55, 20 April 2024 (UTC)
 * I'm curious about how proxy IPs can edit WP? --— Saqib ( talk  |  contribs ) 21:15, 20 April 2024 (UTC)
 * Except for, all the other IPs are proxy IPs. These India, Germany and Israel based proxy IPs editing the biography pages of the Nadeem Anjum and Asim Munir, aiming to remove controversial content and potentially censoring them. Despite their various locations, I suspect they're all managed by the same individual. What actions can be taken against them? It's intriguing to consider why one from India or Israel might delete any negative aspects in biographies of high-ranking Pakistani military officials. --— Saqib ( talk  |  contribs ) 18:51, 22 April 2024 (UTC)

I've an update. According to this report, it appears that @CPPConstruct is a sockpuppet of the blocked user, who also operated another blocked sockpuppet under the name. Given that which attempted to remove the Controversies section from Inter-Services Public Relations page and then an proxy IP address  made similar attempts, it clear that WaseemAbbaass is the master account behind all these. What's your take on this? Pinging who may have some insights to contribute here. On a related note, The recent IP from Rawalpindi attempted to remove the same information as CPPConstruct, giving the impression it could be from ISPR HQ in Rawalpindi - just kidding. --— Saqib ( talk  |  contribs ) 19:24, 2 May 2024 (UTC)


 * Yeah, im 100% certain those three accounts (WaseemAbbaass, DaDefeender, CPPConstruct) are the same guy. They have the same editing styles, remove the same thing and even use the same edit summaries. Not even mentioning the countless IP addresses he used after his accounts got banned. Nadeem Anjum had to be semi-protected due to constant vandalism from him.
 * It’s clear he’s doing this because he believes writing controversy about the military makes a “bad image” about Pakistan, which he stated on my talk page.
 * This isn’t something recent, he’s been doing it for months, I remember when he used to blank like half of the Asim Munir page because some controversy/criticism was written about him. Thankfully the Asim Munir page hasn’t really seen any major vandalism recently. VirtualVagabond (talk) 22:16, 2 May 2024 (UTC)

Are these VPNs ? --— Saqib ( talk  |  contribs ) 21:43, 5 May 2024 (UTC)
 * I've come to the conclusion that Raheeiejaz907 is unrelated here. It would be better to merge this with Sockpuppet investigations/WaseemAbbaass. --— Saqib ( talk  |  contribs ) 09:09, 3 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.


 * But Atif ahmad8 is already in the suspect list. — Saqib ( talk  |  contribs ) 00:13, 21 April 2024 (UTC)
 * Thanks for chiming in. Is it feasible to block ranges of these proxy IPs? --— Saqib ( talk  |  contribs ) 09:32, 23 April 2024 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
To answer your question, IP proxies edit Wikipedia all the time. There is no technical mechanism that prevents them from doing so. There are some bots that detect and block proxies, but they're a long way from foolproof. Two users who know more about this than I do are and. As an aside, I don't know what you're doing with this report. If your principal claim is that Atif ahmad8 is a sock, they should be in the suspect list, not in the body. As it stands, it looks like you're requesting only blocks of IPs.--Bbb23 (talk) 22:29, 20 April 2024 (UTC)
 * If the user were in the list, it would display their name and surely you can see it does/did not. It does now because I fixed a mistake you made when filing this.--Bbb23 (talk) 00:55, 21 April 2024 (UTC)


 * From my point of view this is complicated, so I'll give some initial impressions. I can't link IPs with accounts, but I can say two things. First, the IPs appear (at least mostly) to be VPNs, and looking at the operator if I were to guess, I'd guess it's a PIA company. Suspicious much. There appears to be at least some geographically appropriate activity on some IPs. Second, IPs aside, I'm seeing connections between both usernames above and WaseemAbbaass (and his sock) and Raheeiejaz907, though it's a bit 'noisy'. There's a lot of socking on those Pakistani generals articles. -- zzuuzz (talk) 09:28, 23 April 2024 (UTC)
 * More interim results, though I'm not sure whether anything else will turn up. Here's what I have at this time:
 * Raheeiejaz907 is stale, I can't do or say much there.
 * DaDefeender is 100% ✅ to WaseemAbbaass.
 * CPPConstruct is WaseemAbbaass and DaDefeender. If they weren't already blocked, I'd block 'em.
 * Atif ahmad8, WaseemAbbaass, and CPPConstruct share a range, which is moderately busy with other users. I'd call it
 * Atif ahmad8, and I think all other accounts mentioned, have been editing relevant articles while logged out.
 * Usama Ahmad rana (see following report) is not a particularly strong match to anyone else
 * Most of the IPs above have been blocked as proxies. The ones located in Pakistan (103.137.*) are probably not proxies.
 * -- zzuuzz (talk) 21:09, 2 May 2024 (UTC)


 * Raheeiejaz907 and Atif ahmad8 are clearly the same person based on behavioral evidence, . I can't be sure on the WaseemAbbaass cluster of accounts, so best to leave them separate. - The oldest account is actually  (note the L instead of I), so this case should be moved there. The Wordsmith Talk to me 19:32, 12 June 2024 (UTC)
 * done. Closing. The SandDoctor  Talk 04:07, 14 June 2024 (UTC)

Suspected sockpuppets
This looks like a duck, swims like a duck, and quacks like a duck. — Saqib ( talk  |  contribs ) 10:12, 2 May 2024 (UTC)

Comments by other users

 * Accused parties may also comment/discuss in this section below. See Defending yourself against claims.

Clerk, CheckUser, and/or patrolling admin comments

 * User now blocked, closing. Bbb23 (talk) 13:04, 2 May 2024 (UTC)