Wikipedia:Sockpuppet investigations/Shuppiluliuma/Archive

Report date April 23 2009, 03:48 (UTC)
For background, this is the most helpful of the previous cases to read through: Requests for checkuser/Case/Shuppiluliuma last year.
 * Suspected sockpuppets
 * Evidence submitted by Hiberniantears
 * Evidence submitted by Hiberniantears
 * Evidence submitted by Hiberniantears
 * Evidence submitted by Hiberniantears
 * Evidence submitted by Hiberniantears
 * Evidence submitted by Hiberniantears
 * Evidence submitted by Hiberniantears

This time through, I blocked Shiham K as an obvious sock, but requesting a CU for all underlying IP ranges. Currently appears to be editing from 85.153.27.4 and the associated range out of Istanbul. I have previously blocked an IP range out of Milan, Italy, and could greatly benefit from a comprehensive look at this editor's IPs.

Additionally, I blocked User:Hekatonesos as another obvious sock, and suspect that User:Truthspeaks11 is probably him as well. For a little additional background, Shuppiluliuma edits from dynamic IPs, and has created at least dozens of sleeper accounts over the years. I'm looking for multiple IP ranges that can be blocked, and a list of sleeper accounts.

In fairness, whoever this guy is, he makes a fair number of helpful contributions. However, every couple of months he goes off the rails and starts antagonizing other editors at pages generally related to Turkey. This has now been going on for years (in fact, my initial run in with him back in Spring 2007 killed my first attempt at RfA). Lately, I have been giving him space so long as he behaves, and because chasing his socks around is a bit like a dog chasing its tail. In the case of Shiham, I was fairly certain all along that it was Shuppiluliuma from day 1, but let him be until another administrator reached out to me for my opinion on whether it was him or not. When he began an edit war this week over an image of Turkish money, I blocked him, but as you can see from the growing list above, he hasn't really missed a beat. Because of the number of sleeper accounts and IPs from different ranges that Shuppiluliuma uses, it is very difficult to regularly keep an eye out for him as the pages he edits already tend to have many editors of various nationalist POVs. My request for a very thorough CU here is aimed at avoiding mistakenly identifying innocent editors making newbie mistakes, as well as finding a more effective way to create a stable environment around pages like Turkey. Obviously, if we get flagged revisions off the ground, life becomes a lot easier for those of us watching pages that are impacted by editors like Shuppiluliuma... but in the mean time, I would really appreciate a deep look at this by a CU. Hiberniantears (talk) 18:00, 24 April 2009 (UTC)


 * Comments by accused parties    See Defending yourself against claims.


 * Comments by other users


 * CheckUser requests

to check for potential range blocks and collateral damage Mayalld (talk) 06:29, 23 April 2009 (UTC) merged from other case. Mayalld (talk) 06:29, 23 April 2009 (UTC)
 * Clerk, patrolling admin and checkuser comments


 * Conclusions
 * ✅: and  are the same and almost certainly Shuppiluliuma (including both IPs).
 * ❌: and, to each other and to Shuppiluliuma.
 * The 78 address range was softblocked for a month, but the other would cause a great deal of collateral damage. &mdash; Coren (talk) 04:51, 26 April 2009 (UTC)
 * Thanks! For future reference, what was the range for the 78 address? Hiberniantears (talk) 15:28, 26 April 2009 (UTC)
 * 78.40.192.0/18 &mdash; Coren (talk) 15:31, 26 April 2009 (UTC)

--Tagged confirmed accounts; already blocked. Peter Symonds ( talk ) 16:49, 26 April 2009 (UTC)
 * Okie-dokie. Archiving.  —  Jake   Wartenberg  17:11, 26 April 2009 (UTC)

Evidence submitted by User:Athenean
User:StanStun appears to be the latest in a long list of socks by the dreadful User:Shuppiluliuma. This case screams WP:DUCK pretty loudly. Specifically:


 * Identical interests with previous Shuppiluliuma socks: Turkey, Turkish cities (esp. Istanbul), Economy of Turkey, Turkish Navy, Accession of Turkey to the European Union. Compare the contribs for  with those of previous Shupp socks:      and many many others.
 * Identical editing style, lots of small incremental edits in a row.
 * Turkish nationalist agenda, e.g. denial of the Armenian genocide, and also promotion of Turkey, particularly it's European credentials and economy.
 * Stubborn edit-warring accompanied with extreme hostility and trolling, e.g. here.
 * Same MO as previous socks, a few edits to random articles at first, before focusing exclusively on Turkey articles with a WP:OWN mentality, as for example with this sock . See also this.

Clerk, patrolling admin and checkuser comments

 * Blocked, obvious. Don't think there's a need for CU; I don't think he usually keeps sleepers around. Fut.Perf. ☼ 19:37, 30 April 2010 (UTC)

Requested by Athenean (talk) 19:26, 30 April 2010 (UTC)

agreeing with Future Perfect with regard to sleepers, as the accounts have been blocked no further need for checkuser. Thanks for the report, and thanks to Future Perfect for dealing with it. Regards, SpitfireTally-ho! 19:42, 30 April 2010 (UTC)

Evidence submitted by User:Athenean
Standard Shuppiluliuma sock.


 * As soon as the latest Shup sock, was discovered and blocked,, this account picks up right where he left off with the maniacal removal of any mention of the Armenian Genocide from Turkey , which i had restored only a few hours previously .  Note the reverts by StanStun and Iceman are identical.


 * Identical interests: Turkey, Ottoman Empire, Accession of Turkey to the European Union, Turkish Armed Forces, Turkey geography articles .  Compare the contribs of the Iceman account and the suspected IPs with the contribs of the StanStun account and previous Shuppiluliuma socks:.


 * Identical editing style, lots of small incremental edits to geography articles, e.g. on Heybeliada (compare with Trabzon ).


 * Same level of English, stubborn edit-warring over keeping any mention of the Armenian Genocide out of Turkey: StanStun:   Iceman:     .  Athenean (talk) 05:57, 25 May 2010 (UTC)

A checkuser is necessary, since the evidence shows this was a sleeper account. He could well have more and uses a wide IP range. The maniacal tenacity of this individual is not to be underestimated. He has created something like 100 socks so far. Something more than a simple block is necessary, otherwise he will be at it again in no time

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments
Requested by Athenean (talk) 22:26, 23 May 2010 (UTC)

The submitted evidence makes sense, and I see my own similarities in edit summary style. A CU would be good as a rangeblock was placed in the past, but seems to have expired. -- Sh i r ik ( Questions or Comments? ) 14:08, 25 May 2010 (UTC)
 * Blocked all three reported under WP:DUCK, not requesting a CU comment on the IPs. Just looking for a possible rangeblock. (The fact that the IPs were so dramatically different suggests this may not be possible, but if we're lucky maybe it's two small ranges.) -- Sh i r ik ( Questions or Comments? ) 14:13, 25 May 2010 (UTC)
 * A rangeblock is probably not going to happen... J.delanoy gabs adds  18:24, 25 May 2010 (UTC)

Evidence submitted by User:Athenean
Obvious socks of Shuppiluliuma, created as soon as previous socks were blocked, identical reverts (e.g. compare to ).

Comments by accused parties
See Defending yourself against claims.

Clerk, patrolling admin and checkuser comments

 * Koruyucu blocked and tagged. No evidence links Karakemence and Shuppiluliuma, and Ka. is here since 2008 anyway, so that account is left alone. Tim Song (talk) 22:52, 1 June 2010 (UTC)

02 July 2012

 * Suspected sockpuppets


 * Other, already blocked, recents accounts, for CU comparison:
 * Other, already blocked, recents accounts, for CU comparison:


 * User compare report Auto-generated every hour.

Latest of the innumerable socks by user:Shuppluliuma. Primary interests are Turkey and Turkish military articles. There is a simple, foolproof way to detect his socks: Because most of the articles he likes to edit (Turkey, Turkish Air Force, etc...) are semi-protected, he needs to rack up a number of edits on non-semiprotected articles. So the first thing he does after creating the new account is to make a few edits to non-semied articles before editing his favorite articles. Interestingly, these first few edits are always related to the new sock's name, it's as if each of his socks has a "theme". I noticed this with his sock, which edited a few Japan related articles, then as soon as he reached 20 edits or so, immediately switched to Turkey and never looked back. The first edits by Ben diyom Angora are to topics related to the Turkish capital Ankara (of which "Angara" is an alternate spelling and "Ben diyom Angara means "I sent him to Ankara"). Then, after those edits, it's back to the Turkish Armed Forces and Turkey.  Also, Shuppiluliuma and socks love to make lots of small consecutive edits to articles, endlessly tweaking them, much like Ben dioym Angara.  Ben diyom Angora thus fits the pattern perfectly. Athenean (talk) 20:21, 2 July 2012 (UTC)

Regarding the checkuser, he has at least two socks that were active until a few days/weeks ago, User:Namuslu and User:Türbanistan, so they can be used for checkuser purposes. His older accounts are of course stale. Athenean (talk) 21:32, 3 July 2012 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  17:18, 3 July 2012 (UTC) — Berean Hunter   (talk)  22:08, 3 July 2012 (UTC)
 * - because all of the contrib data in the archive is stale. This will have to be decided on behavioral evidence.
 * Please reconsider; recent account with several other socks ( etc.) were likely also him. Fut.Perf. ☼ 21:58, 3 July 2012 (UTC)
 * I wasn't aware of the other accounts. Striking my decline and moving back to open CU request for consideration.

Ben diyom Angara, Türbanistan, and Namuslu are ✅. --MuZemike 23:31, 10 July 2012 (UTC)
 * Blocked and tagged. -- DQ  (ʞlɐʇ)  02:19, 11 July 2012 (UTC)

22 April 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Block evasion. Identical arguments: Lord of Rivendell diff1, Lord of Rivendell diff2 vs. IP 78.181.138.199.

More IPs have been involved over the past few days, ex. 2 IPs 88.251.xxx.xx, but this is the latest disruption using IP 78.181.138.199. . Δρ.Κ. λόγοςπράξις   01:56, 22 April 2014 (UTC)
 * Examples
 * IP 78.181.138.199: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)
 * Lord of Rivendell diff1: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * Blocked, closing. King of &hearts;   &diams;   &clubs;  &spades; 21:56, 23 April 2014 (UTC)

16 August 2014

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

New account. Username derived using names from Lord of the Rings, exactly as the master, and edits disruptively. The articles the sock edits are, you guessed it, Turkey-related with an emphasis on Turkey. . Δρ.Κ. λόγοςπράξις 10:20, 16 August 2014 (UTC)
 * Evidence
 * Image-related edit-warring at Template:Largest cities in Turkey: Lord of Rivendell as compared to Eldarion of Gondor
 * Large-scale additions/deletions on Turkey-related articles accompanied by edit-warring and personal edit-summaries directed at user : Lord of Rivendell, Eldarion of Gondor
 * The userpage of Lord of Rivendell was decorated in a similar way with that of, using images from the Lord of the rings
 * Repeating the same disapproved activity
 * Editing identical articles
 * Similar writing/editing styles
 * WP:ACTING

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Eldarion of Gondor and Arnor has same altitude with Lord of Rivendell as you can see in the history of Turkey. He removes valuable/cited/GA reviwer recommended edits without any reasonbale in summaries. Also see this elmasmelih  11:37, 16 August 2014 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
Eldarion blocked as obvious, plus a recent IP that was trying to stir up trouble at WP:AN. Fut.Perf. ☼ 16:08, 17 August 2014 (UTC) — Berean Hunter   (talk)  18:23, 17 August 2014 (UTC)
 * Closing...no checkuser necessary at this time.

24 April 2015

 * Suspected sockpuppets
 * - IP sock activated after Superfluous got a second edit-warring block.
 * - IP sock activated after Superfluous got a second edit-warring block.


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Although there has been a long time since the last disruption by the socks of Lord of Rivendell, long enough to render a CU check impossible, I open this SPI based on rather loud quacking. I think there is enough evidence to firmly establish the relation between sock and master. Δρ.Κ. λόγοςπράξις 19:27, 24 April 2015 (UTC)
 * Evidence
 * Heavy edit-concentration on Turkey accompanied by incessant edit-warring
 * Master got indeffed due to edit-warring, sock is blocked due to edit-warring on Turkey even as the 3RRN report was ongoing, a fact noted by the blocking admin. The sock was finally blocked after he reached 6 reverts.
 * Edit-warring on Turkey about the same sources and victim numbers of the Armenian Genocide
 * Keywords: Encyclopædia Britannica, Tehcir Law, Arnold J. Toynbee and Justin McCarthy
 * Key number: 600,000
 * Master mentioning the victim numbers and Encyclopaedia Britannica, Master mentioning the numbers, Encyclopaedia Britannica and historian Toynbee during his edit-warring on Turkey vs. sock doing the same and adding McCarthy to boot
 * Master mentioning the victim numbers, Encyclopaedia Britannica, Tehcir Law, Toynbee, and McCarthy on his talkpage vs. sock Superfluous adding exactly the same things to Turkey
 * IP sock 78.181.138.199: Section title: The correct number of deaths is 600,000 according to Encyclopædia Britannica, Arnold J. Toynbee and Justin McCarthy Text sample: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)
 * Lord of Rivendell Identical edit as the IP above also mentioning the usual keywords Encyclopædia Britannica, Arnold J. Toynbee and Justin McCarthy. Text sample: According to Encyclopædia Britannica (which is the world's most prestigious "academic" encyclopedia, and will always be more prestigious than Wikipedia, which will never be accepted as an "academic" source)
 * Very similar locus of articles
 * Apart from their heavy concentration and edit-warring on Turkey, sock and master have similar interests and edit several common articles
 * Istanbul
 * Turkish Armed Forces
 * Turkish Land Forces
 * Turkish Naval Forces
 * Mustafa Kemal Atatürk
 * Galatasaray S.K.
 * Similar top-four articles from edit-count
 * Lord of Rivendell
 * 1) 599 edits on Turkey
 * 2) 52 on Turkish Naval Forces
 * 3) 44 on New Mosque (Istanbul)
 * 4) 42 on Istanbul
 * Superfluous man
 * 1) 137 edits on Turkey
 * 2) 61 on Turkish Naval Forces
 * 3) 35 on Turkish Air Force
 * 4) 24 on Istanbul
 * Interest on aircraft articles and the Turkish Air Force
 * Air force/jet related edit of master on Turkey vs. sock performing a similar edit on Turkish Air Force
 * Aircraft-related edit of sock on TAI TFX vs. master editing the aircraft article ATR 72
 * Similar image work on Istanbul
 * Image edit by 武士道 vs. Superfluous man's similar edit vs. image edit by Rivendell master
 * Similar mode of sock insertion
 * Use of non-Latin usernames for the socks: Blocked sock (blocked by ) versus  the username of Superfluous man before he had his name changed.


 * Similar MO of socks once inserted
 * 武士道 started his edits by editing Japanese articles while Лев Я́шин started editing Russia-related articles. Soon after that they started heavily concentrating on Turkey and edit-warring there. By the way Лев Я́шин is Lev Yashin, a legendary Russian goalkeeper.


 * Similar layout of user pages
 * Superfluous man has a single picture decorating his user page with the caption "Superfluous man" while Lord of Rivendell had a picture of Rivendell with the caption "Rivendell".


 * Edit-warring is the strongest common thread of all the socks
 * As mentioned above, Superfluous man was edit-warring while the 3RRN report was open and got blocked at 6R. Please see also User:Dr.K. and User:Elmasmelih reported by User:武士道 (Result: Submitter blocked) where the Bushido (武士道) sock was impacted by a WP:BOOMERANG. The master's edit-warring does not need further mention for obvious reasons.


 * Sock has violated 3RR again after release from block
 * Hours after release from block and while the previous edit-warring report is still at 3RRN and has performed a total of four reverts so far. The usual keywords of the master and other socks are all there.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I dont believe that Superflous is a sockpuppet of Rivendell. Rivendel was much more aggresive. kazekagetr 19:31, 24 April 2015 (UTC)


 * Socks can change some aspects of their behaviour. Δρ.Κ. λόγοςπράξις 20:27, 24 April 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
— Berean Hunter   (talk)  22:09, 8 May 2015 (UTC)
 * Blocking sock but leaving IP since it is stale. Closing.

14 September 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

is a banned user and particularly prolific sockmaster, with close to 100 outed socks. He has a penchant for unstoppable edit-warring and extreme incivility that crosses the line into hate speech, particularly in edit summaries. One of his innumerable socks, made the following comment in an edit-summary long ago, taunting Armenian users about Armenia's "3 million population" and "11 billion GDP". The account, which I suspected of being a sock due to the similarity in hate speech, was blocked today for 24 hrs for edit-warring. He was also participating in this talkpage discussion. Immediately after the block, he edited the discussion as an IP, making the following comment. It couldn't quack any louder. CU is desirable to ferret out sleeper accounts. Frankly, considering the magnitude and incredible tenacity of this maniac (he has been socking since 2007), it seems a rangeblock is the only way to put an end to the disruption. All his IP edits are from the 88.251 IP. Athenean (talk) 00:18, 14 September 2015 (UTC)

More evidence:
 * Shuppiluliuma socks always uses wikilinks in edit summaries
 * Main focus on Turkish economy and armed forces, and the neighborhood of Galata
 * An obsessive attention to detail, reflected in the many incremental minor quality control edits, and the lack of spelling mistakes.

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * I've declined the CU request. Per the archives, there hasn't been a puppet blocked since 2012. Thus, among other issues with the request, there's nothing to compare against.--Bbb23 (talk) 04:10, 14 September 2015 (UTC)
 * The sock account is already blocked, the IP is not active. Closing the case.  Vanjagenije  (talk)  15:41, 5 October 2015 (UTC)

14 September 2015

 * Suspected sockpuppets




 * User compare report Auto-generated every hour.
 * Editor interaction utility

See the discussion at WP:ANI section "WP:BATTLEFIELD threats and constant edit-warring at Turkey" as of right now. The user is aggressively editing on Turkish topics; I blocked him yesterday for edit-warring on Turkey (see recent history), and an IP that's seemingly him has been active on the talk page, advocating the position that Heimdallr was trying to force into the article. Over at WP:ANI, someone adds a note:"Heimdallr of Æsir has a name from Norse mythology. (To see the connection to Lord of the Rings, Google for 'Heimdallr Tolkien'). Based on his choice of user name and his interest in Turkey, this editor is most likely the same person as WP:Sockpuppet investigations/Lord of Rivendell. EdJohnston (talk) 21:06, 14 September 2015 (UTC)."This seems like a convincing argument to me. If you want more evidence, let me know and I'll supply more diffs or other links. Nyttend (talk) 23:50, 14 September 2015 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Actually Lord of Rivendell and Heimdallr are both socks of the original sockmaster,. The aggressive POV is the same, the insults to Greek and Armenian users are the same, the "Ethnically themed sock" is the same, the many consecutive minor grammar edits are the same, the consistent use of wikilinks in edit summaries is the same. The smoking gun is this edit summary by one of Shuppiluliuma's socks, where he taunts Armenian users about "Armenia's 3 million people and 11 billion GDP". The IP sock of Heimdallr made the same exact taunt at Talk:Turkey a few days ago. They are all the same guy. I've opened an SPI on Heimdallr here, I think these should all be merged. Athenean (talk) 18:34, 16 September 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * I've declined the CU request. Per the archives, there are no non-stale puppets, confirmed or otherwise, to compare against. If you know of an account that is not stale, feel free to renew the request and provide the username.--Bbb23 (talk) 01:15, 15 September 2015 (UTC)
 * Just curious, Bbb23: in general, how long do we give before considering a puppet to be stale? I mistakenly thought that an April 2015 appearance would be recent enough.  Nyttend (talk) 02:25, 15 September 2015 (UTC)
 * Three months.--Bbb23 (talk) 04:03, 15 September 2015 (UTC)
 * Oh, so "stale" means "you're absolutely unable to get it". I didn't know that: I figured there was a continuum between stale and not-stale, and the checkuser had to determine where a specific case fit.  So basically you're allowed to work with whatever data are available, since stuff older than three months is totally unavailable.  Thanks for helping me understand.  Nyttend (talk) 04:25, 15 September 2015 (UTC)
 * That's generally correct. However, one can look at other CheckUsers' logs that predate the three-month window. I don't look at logs except in unusual circumstances and, even then, they have limited value.--Bbb23 (talk) 04:49, 15 September 2015 (UTC)

— Berean Hunter   (talk)  17:10, 8 October 2015 (UTC)
 * Admin needed. Please, merge this page into Sockpuppet investigations/Shuppiluliuma.  Vanjagenije  (talk)  15:44, 5 October 2015 (UTC)
 * ✅ . I've also retagged a few of the old accounts.
 * Closing the case.  Vanjagenije  (talk)  18:10, 8 October 2015 (UTC)

22 December 2015

 * Suspected sockpuppets

In the tradition of the recent sock incarnations of the this new sock makes a few initial token edits on some articles and then starts the edit-warring on his favourite article:. But let's start from the beginning. Dr.  K.  01:13, 22 December 2015 (UTC)
 * User compare report Auto-generated every hour.
 * Editor interaction utility
 * Introduction
 * Evidence
 * Name
 * The name of this sock is related to the mythology surrounding the saga of Harry Potter: Protego Totalum. The other socks also have names inspired by similar magic-related mythologies, as the one of the Lord of the Rings.
 * Edit-warring on Turkey
 * In the unbroken and time-honoured tradition of all the other socks, Protego T also makes his/her last stand by edit-warring on Turkey.
 * Elaborate edit-summaries
 * All socks belonging to this sockfarm use up most of the edit-summary field writing elaborate edit-summaries to justify their edit-warring.
 * Heimdallr of Æsir vs. Protego T writing a mini Bachelor's thesis inside his/her edit-summary
 * Edit-warring about the GDP of Turkey
 * Protego T, Protego T again vs. blocked sock Superfluous man vs. Heimdallr of Æsir and more Heimdallr of Æsir.
 * Use of wikilinks inside elaborate edit-summaries
 * Lord of Rivendell himself, Lord of Rivendell again vs. Protego T and more Protego T
 * Duck probability

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

I also strongly suspect this is a sock of Shuppililiuma/Lord of Rivendell. The last sock was blocked back in September and this would be right around the time this user would create another sock. This new account, created a few days ago knows how to edit-wikipedia and is clearly a sock. What made me suspect it was the latest sock of Shuppiluliuma is
 * Comment by User:Athenean
 * 1) A few token edits to get past the semiprotection on Turkey, and once that is done, almost exclusive focus on Turkey
 * 2) Incessant edit-warring: this user simple cannot not edit-war.  Even though all his previous socks have been blocked for edit-warring, he keeps doing it.  He just can't not edit-war.
 * 3) Meticulous attention to detail, lots of small quality control edits to Turkey in keeping with this individual's obsessive nature.
 * 4) Long-winded edit-summaries without any typos or grammatical mistakes
 * 5) Frequent use of wikilinks in the edit-summaries, whenever possible.  This is a signature of this user. Athenean (talk) 05:22, 22 December 2015 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * and are . Blocked, tagged, closing.--Bbb23 (talk) 17:17, 22 December 2015 (UTC)

26 December 2015

 * Suspected sockpuppets


 * User compare report Auto-generated every hour.
 * Editor interaction utility

Not sure if CheckUser is even needed for this, however the user has went to user pages of other blocked sockpuppets from the master and removed the block notice. Dat GuyTalkContribs 19:04, 26 December 2015 (UTC)

1 2 3 4 5 6 7 8

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * IP blocked 72 hours. Closing. Bbb23 (talk) 20:16, 26 December 2015 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * Consistent edits on Turkey and Turkey-related articles. (you can check these edits here and compare those edits to old socks' edits here and here
 * Reckless edit warring.
 * Lots of small quality control edits in artcile of Turkey (related with this individual's obsessive nature).
 * Oh and he/she explictly stated that I used to consider myself a Hellenophile (listening to Dalaras, etc.) in here so one can figure out that his/her name comes from Greek-related persons or places such as Balki Bartokomous and Chalkidiki. kazekagetr  13:46, 2 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
As far as I can tell, everyone is. CU declined.--Bbb23 (talk) 14:52, 2 February 2017 (UTC)
 * Blocked on behavioral evidence. Neil N  talk to me 22:56, 2 February 2017 (UTC)

Suspected sockpuppets



 * User compare report Auto-generated every hour.
 * Editor interaction utility


 * 1) New account created very soon after last Shuppiluliuma sock was blocked
 * 2) Single-minded focus on Turkey, the usual lots of consecutive small quality-control edits, in keeping with this individual's obsessive nature
 * 3) The usual Kemalist POV
 * 4) The usual aggressiveness, hair-trigger edit-warring  Khirurg (talk) 05:50, 28 February 2017 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

We are tired of him/her. kazekagetr 15:40, 4 March 2017 (UTC)

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 18:02, 11 March 2017 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * 1) Similar grandiose Latin username, same as a previous account
 * 2) New account with a few token edits to get past the semiprotection on Turkey, and once that is done, almost exclusive focus on Turkey
 * 3) Single-minded focus on Turkey, the usual many consecutive small quality-control edits, in keeping with this individual's obsessive nature
 * 4) The same Turkish nationalist POV (e.g. does not like Kurds ) Khirurg (talk) 17:00, 25 September 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ plus:
 * Blocked the unblocked accounts and tagged all three. Closing.--Bbb23 (talk) 17:29, 25 September 2018 (UTC)
 * Blocked the unblocked accounts and tagged all three. Closing.--Bbb23 (talk) 17:29, 25 September 2018 (UTC)
 * Blocked the unblocked accounts and tagged all three. Closing.--Bbb23 (talk) 17:29, 25 September 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

A typical "themed" Shuppiluliuma sock, this time named after a street in the city of Thessaloniki (Egnatias avenue). He makes a few edits to Thessaloniki to get around the semi-protection of Turkey, and then edits exclusively Turkey almost exclusively, pushing Turkish nationalist POV and then lots of consecutive small edits to Turkey, as usual. Khirurg (talk) 16:39, 31 October 2018 (UTC) Khirurg (talk) 16:39, 31 October 2018 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
Egnatias 406 is ✅ to and others in the archive. . — Berean Hunter   (talk)  18:14, 31 October 2018 (UTC)
 * Case closed.  Vanjagenije  (talk)  20:42, 31 October 2018 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Identical in behavior to previous socks:
 * 1) Makes a few token edits to non-semiprotected articles, to get past the semiprotection at Turkey, and once that is done focuses exclusively on Turkey.
 * 2) Many small incremental edits to Turkey in quick succession.
 * 3) Same Turkish nationalist POV (e.g. against Kurds ). Khirurg (talk) 16:13, 30 January 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
. — Berean Hunter   (talk)  19:52, 31 January 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Classic Shuppiluliuma sock, which makes a few edits related to its username to get around the semi-protection at Turkey, and from then on exclusively makes edits to Turkey. Lots of successive minor incremental edits without edit summaries at Turkey, in keeping with the sockmaster's obsessive nature. When reverted, he just reverts everything without an edit summary and continues. Khirurg (talk) 15:34, 10 September 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, blocked, tagged, closing.--Bbb23 (talk) 17:17, 10 September 2019 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Typical "themed" Shuppluliuma sock: Makes a few edits related to its username (in this case related to Scotland) to get past semi-protection at Turkey, then lots of little incremental edits to Turkey and Istanbul. Khirurg (talk) 13:39, 24 September 2019 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅,, . — Berean Hunter   (talk)  19:25, 24 September 2019 (UTC) — Berean Hunter   (talk)  11:40, 25 September 2019 (UTC)
 * , hasn't been blocked or tagged yet. Cabayi (talk) 11:32, 25 September 2019 (UTC)
 * Thank you, Cabayi. I'm not sure what happened but he's blocked now.

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

It's been a while since the last Shuppiluliuma sock, so we are due for another one. This one was created in February. After making the usual small edits to get around the page protection, begins to edit Turkey obsessively, as all past other socks.
 * Edits mostly Turkey, but also some Turkish industry-related articles, like past socks.
 * Lots of incremental, consecutive, small quality control edits
 * Turkish nationalist POV (removing 12 kb of material from human rights section )
 * Aggressive, rapid-fire edit-warring Khirurg (talk) 23:59, 26 April 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
also with a fair bit of logged out editing. . — Berean Hunter   (talk)  11:24, 10 May 2020 (UTC)
 * This case has already been actioned. Closing. Reaper Eternal (talk) 17:07, 10 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.


 * Sleeper account of Shuppiluliuma, was reactivated just after his latest sock, was blocked for good.
 * This is a typical "themed" Shuppiluliuma sock. All Shuppiluliuma socks, for some bizarre reason known only to him, have some kind of "theme" around which the first few dozen edits are related to, before exclusively editing Turkey and articles related to the Turkish military. In this case, the "theme" is the Austrian monarchy, the username being based on Gott erhalte Franz den Kaiser, the personal anthem of Francis II, Holy Roman Emperor. After making a few edits related to Austria, the account begins editing exclusively Turkey and Turkish Naval Forces. This is textbook Shuppiluliuma behavior. Turkish Naval Forces is a favorite article of Shuppiluliuma, as evidenced by many of his previous socks, e.g..
 * The account edit wars to re-instate edits  of the previous sock,
 * Non-stop edit warring . The latest sock just broke 3RR. The reason Shuppiluliuma was blocked in the first place was incessant edit-warring. He simply cannot not revert. He will keep reverting until blocked. Khirurg (talk) 23:01, 14 May 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
, . Closing. — Berean Hunter   (talk)  00:57, 15 May 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

See below. — Berean Hunter   (talk)  14:20, 1 June 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments
✅, . — Berean Hunter   (talk)  14:21, 1 June 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

like his old socks User:TR34Istanbul and User:Spiritum Sanctum they edit same pages. ,  and  + in Turkey He is already 2 weeks banned  Shadow4dark (talk) 14:27, 10 July 2020 (UTC)

More evidence After his block of his previous sock he continue edit same paragraph. Here he eddit same paragraph in "Financial Sector", [] [] It lacks more diffs because he is blocked. Shadow4dark (talk) 13:41, 12 July 2020 (UTC)

Comments by other users
The giveaway that this is a Shuppluliuma sock is the bizarre habit that this individual has of making edits related to the socks name. A "denarius" is a type of Roman coin, and his first edit was to the article of Constantine the Great, a Roman Emperor. Then, once that's out of the way, he starts editing Turkey (almost exclusively), making lots of small incremental quality control edits without an edit summary. If you look at the archive, every single one of socks follows the same pattern of behavior. This is one of the most prolific sockpuppeteers I have come across; he's been socking since at least 2007. Khirurg (talk) 15:10, 12 July 2020 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * -, interest in Turkey and Istanbul isn't unique enough to prove that two people are the same. Please provide paired diffs showing how the suspected sockpuppet is making similar edits to past socks. GeneralNotability (talk) 13:22, 12 July 2020 (UTC)
 * - It's borderline, but I think that this does match the "theme" pattern. Requesting CU. GeneralNotability (talk) 17:26, 13 July 2020 (UTC)
 * to who has previously been found likely to the master. They've also been editing logged out so their block is now indefinite. Closing. Ivanvector (Talk/Edits) 17:44, 13 July 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

His last sock User:Neolir was blocked 22 november and he created current sock same day. Here he do same edit as his older sock [] and [] he edit same pages as last socks in. Istanbul, Dolmabahçe Palace Grand Bazaar, Istanbul User:Spiritum Sanctum, Ataşehir User:Strabonis Levent User:Neolir and Istanbul Sapphire User:TR34Istanbul Shadow4dark (talk) 05:29, 25 December 2020 (UTC)
 * More blocked IPs https://en.wikipedia.org/wiki/Special:Contributions/88.246.76.187 and https://en.wikipedia.org/wiki/Special:Contributions/88.244.95.222 Shadow4dark (talk) 04:03, 28 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * is the best I can do with the data that's leftover but the behaviour is enough combined with that to block and tag. Pictogram resolved.svg All socks blocked and tagged. Closing case. Callanecc (talk • contribs • logs) 07:50, 28 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

When i deleted large edits by his older socks he reverted me here [] and when i asked speedy deletion  WP:G5 (page created by his older sock) https://en.wikipedia.org/w/index.php?title=Metropol_Istanbul&diff=997020581&oldid=996740610 he reverted me again and he edit same page as his older socks here [] his sock User:Neolir Shadow4dark (talk) 17:43, 29 December 2020 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * ✅ to GigaBiga., closing. Mz7 (talk) 18:53, 29 December 2020 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Both already blocked but i want add my evidence here. AnatoLion is sock of Martevenere but they are both sock of Shuppiluliuma. Shuppiluliuma will Non-stop edit warring until blocked like his older sock, evidence here [] + he do personal attacks like older socks, look edit summaries of AnatoLion. Main pages of Shuppiluliuma is Istanbul related and or turkey related Shadow4dark (talk) 15:50, 18 January 2021 (UTC) Shadow4dark (talk) 15:50, 18 January 2021 (UTC)
 * New sock User:Smyrneika Shadow4dark (talk) 22:55, 1 February 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * CU confirms User:Moëtley as well; already blocked. Drmies (talk) 22:22, 19 January 2021 (UTC)


 * Everything seems to have been tidied up here already, closing. Girth Summit <sub style="font-family:Segoe print;color:blue;"> (blether)  15:31, 6 February 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Obvious sock, already blocked. CU showed no others. Drmies (talk) 21:07, 15 March 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * , closing. Blablubbs | talk 21:10, 15 March 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

He edits same pages and same section here.



Shadow4dark (talk) 02:45, 27 April 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.'' Look this user edits mostly on Istanbul or turkey related like his older socks. Look here mostly banned socks [][] Shadow4dark (talk) 19:45, 2 May 2021 (UTC)
 * I was pinged on this but unfortunately don't have much to add (not being familiar with the master) except that some of their edits (especially the ones to Armenian Genocide article) seemed to be agenda-driven although I tried to give them the benefit of the doubt. (t &#183; c)  buidhe  04:52, 9 May 2021 (UTC)
 * Lots of minor incremental quality control edits almost exclusively to Turkey and Khirurg (talk) 07:17, 9 May 2021 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * . Same geolocation and wide range. Same common user agent.  ~Oshwah~  (talk) (contribs)   03:09, 27 April 2021 (UTC)
 * Account blocked and tagged. Closing SPI...  ~Oshwah~  (talk) (contribs)   03:56, 22 June 2021 (UTC)

Suspected sockpuppets



 * Tools: Editor interaction utility • Interaction Timeline • User compare report Auto-generated every hour.

Similar with his older socks he editing again mostly istanbul and Turkey, see []. The main reason why i saw this is his sock is this edit, other editor adding WP:SANDWICH tag because he adding to many pictures but he reverts [] and see this [] and []. He will never stop reverting until he is blocked like his past socks. Here they edit same section like his past sock (Image gallery) []  Shadow4dark (talk) 10:43, 3 December 2021 (UTC)


 * Moxy -Maple Leaf (Pantone).svg 12:25, 3 December 2021 (UTC)

Comments by other users
''Accused parties may also comment/discuss in this section below. See Defending yourself against claims.''

Clerk, CheckUser, and/or patrolling admin comments

 * - -- RoySmith (talk) 00:45, 12 December 2021 (UTC)
 * Everything is stale, but based on some old log data, I'll call Benkerbrot to several accounts listed in the archive. -- RoySmith (talk) 00:53, 12 December 2021 (UTC)
 * I came back and took a closer look at the behavioral evidence. Based on that and my previous technical analysis, I'm calling this suspected. -- RoySmith (talk) 17:05, 17 December 2021 (UTC)

Suspected sockpuppets
First there is a overlap with past socks.[]

They fighting edits wars like past socks and has many warnings [], []. This happend also with his past socks [] and []

At this page they editing same section as last sock see page history Levent also city as Istanbul has more tall buildings if he is no sock why are they editing same building and why same section?

Further they do mostly small controll edits, editing mostly images and almost never use talkpage for edit wars as past socks Shadow4dark (talk) 23:09, 25 May 2023 (UTC)
 * Similar with his past sock mentioned above they do Turkish pov edits and removing genocide details []they did this similar deletion in 2010! []Shadow4dark (talk) 07:53, 11 June 2023 (UTC)

Comments by other users
I have also long suspected that Mercresis is a Shuppiluliuma sock. The combination of endless small edits combined with the uncompromising attitude are always a tell. Plus he is the most long-term sockpuppeteer I have ever encountered, and he is due for another sock. Khirurg (talk) 19:24, 4 June 2023 (UTC)

Clerk, CheckUser, and/or patrolling admin comments

 * -- RoySmith (talk) 23:44, 15 June 2023 (UTC)
 * Behavioural analysis + CU results leads me to believe Mercresis is indeed a sock. as proven. DatGuyTalkContribs 22:43, 18 June 2023 (UTC)