Steward requests/Checkuser/2009-08

Add links
From Meta, a Wikimedia project coordination wiki

Requests

Cinik@skwiki

The following discussion is closed.

I ask to check this user and "recently locked and hidden account" and [1], [2] and [3] All of them written in Czech language and have some offense against one of sysops. Vasiľ 22:48, 30 June 2009 (UTC)

Inconclusive Inconclusive; from technical point of view, "Cinik" doesn't seem to be related to these account, but they are controlled by the same person (from what I can see) using open proxies, except for -Miminka-, who's totally unrelated. There are more usernames that belong to this person: Martin Bútora [blocked], Mercy ohhh Mercy [(b)locked], Zerwwe and Sarka Frrr. --FiliP ██ 23:37, 30 June 2009 (UTC)

wikt:ja:User:アンビシャス樫村 etc.

The following discussion is closed.

Please check these accounts:

I think they are sockpuppets of EMPIS. 그상찾 and アンビシャス樫村 were blocked because of their vandal edits, and their edit tendency was very similar to EMPIS's. ォマンキー片岡 has edited only his userpage, not yet done any vandal edit, but this username is very same as アンビシャス樫村 (nonsense Katakana + person name-like Kanji), so I suspect he is at least sockpuppet of アンビシャス樫村(blocked). --Ninomy 23:45, 23 July 2009 (UTC)

result
 Confirmed socks of EMPIS.
Open proxies used:
  • 211.162.78.178
  • 211.162.78.177
  • 84.42.51.154
  • 66.9.60.130
  • 200.107.22.102
  • 211.138.198.6
Best regards, --birdy geimfyglið (:> )=| 20:09, 29 July 2009 (UTC)
Thank you very much, --Ninomy 00:24, 30 July 2009 (UTC)

et:User:Nish kid 64

The following discussion is closed.

Impersonator of User:Nishkid64 on several projects. CheckUser action requested by himself on IRC to fight vandalism and limit disruption of the projects. Kind regards, —DerHexer (Talk) 21:37, 25 July 2009 (UTC)

Confirmation that I in fact requested this. Nishkid64 (talk) 22:00, 25 July 2009 (UTC)
Action taken, results sent to checkuser-l. Kind regards, —DerHexer (Talk) 22:07, 25 July 2009 (UTC)

Qiwengong@zhwikipedia

The following discussion is closed.

I'm a sysop from zhwiki. Recently various accounts added promotive imformation about a person and a book in Chinese and many other languange Wikipedia. These affected articles are zh:壮族通史, en:General History of the Zhuang, ja:チワン族通史, es:Historia General de los Zhuang, pt:História Geral da Zhuang (the book), and en:Huang Xianfan, zh:黄现璠, etc. (the person). These good-looking articles in up to amazing 122 language versions are almost promotive and without reliable sources. While zh:壮族通史 is being requested for deletion, these accounts disrupted the discussion by creating severe personal attacts[4][5] and removed vote for deletion templates in article. In addition, when some of the accounts were blocked because of making personal attacts, new sockpuppet accounts came out and did the same thing. I personally believe that they are likely the same person or from the same organization and premeditated all these jobs.


These accounts including:

Would you please perform a CU to see whether these accounts are related and find out other potential sleepers. Sincerely.--Wcam 14:24, 19 July 2009 (UTC)

Looking at the list (and combining the names suggested): is there a discussion of this situation on zh.wp? I don't see any contribs by Wolfer; is the name spelled properly? -- sj | help translate |+ 06:42, 21 July 2009 (UTC)
some of these accounts had contributions in language versions other than Chinese. If you cannot do anything about this inter-wiki situation, just ignore these accounts. Thanks.--Wcam 07:26, 21 July 2009 (UTC)
Progress report?? Hello, what is the status here, sj, are You going to do the check, Wcam, please can You link to the correct accounts, if some of the accounts edited on different wiki, please don't list them, or link to the correct wiki or it will get confusing, please note that not all accounts are global yet. Thanks, best regards, --birdy geimfyglið (:> )=| 14:20, 5 August 2009 (UTC)
It seems that they have stopped their disruptive behaviors, so checkuser is no longer needed. Thank you everyone.--Wcam 00:36, 6 August 2009 (UTC)
Ok, thanks for letting us know, best regards, --birdy geimfyglið (:> )=| 18:47, 6 August 2009 (UTC)

User page vandals on kowp

The following discussion is closed.

Please check

and its socks. These users have vandalised user page. Lately, the number of vandals for user page(s) has increased on Korean Wikipedia. Thank you. LERK 09:10, 31 July 2009 (UTC)

results

Unrelated Unrelated Worlddd and A.general seem to be unrelated to each other from the checkuser-point-of-view,

but, both accounts seem to have socks, of which some were blocked:
Possible Possible socks of
 Confirmed socks
Possible Possible sock of A.general3
Please make sure to check their contributions carefully before blocking an user because the checkuser result for the socks of "Worlddd" is not 100%. In doubt for the suspect ;)
Best regards, --birdy geimfyglið (:> )=| 13:52, 5 August 2009 (UTC)
Thank you very much. LERK 14:44, 5 August 2009 (UTC)

Truth Seeker@fawiki

The following discussion is closed: nothing further heard

this user was blocked previously on fawiki for PA and disruption but now he is going on to his edits with new account i would like to check beneath account and also check for possible sleeper

thanks in advance --Mardetanha talk 16:50, 19 July 2009 (UTC)

  •  Confirmed: all above-named accounts, plus: Thirsty for Truth, Mardetanha Malidi Dadash - Truth Seeker, Hellfire, Genuine Truth Seeker, Cowards flee from their countries, I hate cowards, Artesh-e-Iran, Drittes Reich 1940, Shir-e-Iran
  • Possible Possible: Yousef arab, IsSat, Hsh44, Breathing Dead, Aspadas

 — Mike.lifeguard | @en.wb 17:19, 19 July 2009 (UTC)

Thanks indeed , this would help us alot --Mardetanha talk 17:28, 19 July 2009 (UTC)
New accounts

The user is creating new account (most probable using open proxies): Why not, New to wiki, Kiusk telephone, Allein Mann ist ein Schwein, Gapgap, Yohoooo, Hello2, Hoohoohoo, etc.

I think we need the proxy IP(s) lists to find which free proxy list he is using.... TIA -- Meisam 19:59, 19 July 2009 (UTC)
he keeps creating new accounts . --Mardetanha talk 20:01, 19 July 2009 (UTC)
Mardetanha, was that the proxy list you blocked the other day? Do you still need further steward assistance here?  — Mike.lifeguard | @en.wb 03:33, 21 July 2009 (UTC)
I have blocked that proxy list , but it seems he found some new lists , so i would need to know which Open proxies he is using right now --Mardetanha talk 19:28, 21 July 2009 (UTC)

Progress report? Hello, what is the status here? Mike? Mardetanha? --birdy geimfyglið (:> )=| 18:47, 6 August 2009 (UTC)

Morgenstern@bgwiki and IPs

The following discussion is closed: nothing furhter heard

Hello. I request a check for coincidence between the following username and IP-addresses, due to their subsequent disruptive edits on same articles (and respective talk pages) about Islam, Turkey and Ottoman Empire on Bulgarian Wikipedia.

  • Morgenstern ([[
bg:Special:Contributions/Morgenstern|contr]] · [[
bg:Special:DeletedContributions/Morgenstern|deleted]] · [[
bg:Special:Block/Morgenstern|block]] · log · block log · CA · guc · checkuser · lwcheckuser)
  • 188.40.50.204 ([[
bg:Special:Contributions/188.40.50.204|contr]] · [[
bg:Special:DeletedContributions/188.40.50.204|deleted]] · [[
bg:Special:Block/188.40.50.204|block]] · log · block log · CA · guc · checkuser · lwcheckuser)
  • 85.187.230.156 ([[
bg:Special:Contributions/85.187.230.156|contr]] · [[
bg:Special:DeletedContributions/85.187.230.156|deleted]] · [[
bg:Special:Block/85.187.230.156|block]] · log · block log · CA · guc · checkuser · lwcheckuser)
  • 76.73.1.50 ([[
bg:Special:Contributions/76.73.1.50|contr]] · [[
bg:Special:DeletedContributions/76.73.1.50|deleted]] · [[
bg:Special:Block/76.73.1.50|block]] · log · block log · CA · guc · checkuser · lwcheckuser)
  • 74.63.85.60 ([[
bg:Special:Contributions/74.63.85.60|contr]] · [[
bg:Special:DeletedContributions/74.63.85.60|deleted]] · [[
bg:Special:Block/74.63.85.60|block]] · log · block log · CA · guc · checkuser · lwcheckuser)
  • 66.197.160.245 ([[
bg:Special:Contributions/66.197.160.245|contr]] · [[
bg:Special:DeletedContributions/66.197.160.245|deleted]] · [[
bg:Special:Block/66.197.160.245|block]] · log · block log · CA · guc · checkuser · lwcheckuser)

I'd like to be advised how to proceed. →Spiritia 11:31, 26 July 2009 (UTC)

Very similar disruptive behaviour from

  • 174.36.153.167 ([[
bg:Special:Contributions/174.36.153.167|contr]] · [[
bg:Special:DeletedContributions/174.36.153.167|deleted]] · [[
bg:Special:Block/174.36.153.167|block]] · log · block log · CA · guc · checkuser · lwcheckuser)
  • 96.31.81.200 ([[
bg:Special:Contributions/96.31.81.200|contr]] · [[
bg:Special:DeletedContributions/96.31.81.200|deleted]] · [[
bg:Special:Block/96.31.81.200|block]] · log · block log · CA · guc · checkuser · lwcheckuser)
  • 67.159.41.85 ([[
bg:Special:Contributions/67.159.41.85|contr]] · [[
bg:Special:DeletedContributions/67.159.41.85|deleted]] · [[
bg:Special:Block/67.159.41.85|block]] · log · block log · CA · guc · checkuser · lwcheckuser)

The Luxo tool reports that these IPs have already been blocked for vandalisms on other wikis and for being open proxy. →Spiritia 15:26, 26 July 2009 (UTC)

If there is disruptive editing from the proxy IPs then you should block them.  — Mike.lifeguard | @en.wb 15:41, 26 July 2009 (UTC)
Oh yes, this is already done, but obviously doesn't solve the problem. The question was whether checkusers can help for tracing the root IP of the vandal and block it too. →Spiritia 17:25, 26 July 2009 (UTC)
Progress report?, Hello, what is the status here? --birdy geimfyglið (:> )=| 13:38, 5 August 2009 (UTC)

wikademia@en-wikiversity

The following discussion is closed.

Blocked user, creating multiple accounts to evade block. See: previous CU request and WV:Community Review: Wikademia --mikeu talk 13:31, 3 August 2009 (UTC)

results

 Confirmed socks:

Best regards, --birdy geimfyglið (:> )=| 14:00, 5 August 2009 (UTC)
Thanks. There is one more that just turned up... --mikeu talk 11:19, 11 August 2009 (UTC)
 Confirmed &  It looks like a duck to me ;) Best regards, --birdy geimfyglið (:> )=| 17:58, 11 August 2009 (UTC)
Yes, the quack was rather loud ;) Thanks. Mostly I wanted to make sure there were no more sleeper accounts. I was rather surprised to find I eat wiki for breakfast and a couple others in the last batch. --mikeu talk 11:51, 12 August 2009 (UTC)
He seems to use ops, from this account no sleepers were found or I would have posted them of course, the others all already blocked were listed above from the first cu-run. Best regards, --birdy geimfyglið (:> )=| 22:25, 13 August 2009 (UTC)

wikt:ja:User:Anpontanlerkkurukurupa　etc.

The following discussion is closed.

Blocked due to vandal edit. Please check whether they are all same person and are from any open proxy. Best regards, --Ninomy 12:34, 5 August 2009 (UTC)

results
 Confirmed socks (of EMPIS):
proxies used
  • 94.52.112.70
  • 114.4.12.16
  • 119.82.73.20
  • 124.238.252.150
  • 189.75.119.18
  • 189.76.209.66
  • 190.144.127.202
  • 211.239.84.131
  • 220.69.182.136
  • 220.227.165.14
Best regards, --birdy geimfyglið (:> )=| 14:18, 5 August 2009 (UTC)

pt.wiktionary

The following discussion is closed.

Ok, now we took out his admin privileges but he continues to harass us in all possible manners using many of his sockpupets and even some anonimous IP addresses. I have been blocking him here and there, but this situation is really untenable. Is there a way to simply ban a person from accessing our project? If no, is there a "legal" way for me to simply block all his sockpupets forever? Do I call a vote to get the community's approval? Or is there another way to rid us from this annoyance? Thanks in advance for your reply.

--ValJor 22:01, 2 August 2009 (UTC)

Hello ValJor, if he vandalizes, harasses etc. using socks, we can do a Checkuser on that user, to find his puppets and be able to block him, if You wish that, please give a list of the users which harassed others, thanks, best regards, --birdy geimfyglið (:> )=| 05:11, 3 August 2009 (UTC)
Hi Spacebirdy!
Here are some of the sockpuppets that he has been using recently:
He has dozens of others that haven't shown up in the past few months.
He has also created two others that he hasn't used yet:
And on top of that he also "contributes" using anonymous IP addresses. Here are some of them:
As you can see, this guy is a royal pain in the neck...
--ValJor 14:31, 3 August 2009 (UTC)
Hello again, please can You write me some diff-links of some vandalism/harassment/... he did, I saw he was not blocked with those accounts, only for a short time, please link to some of the trouble he makes, thanks, best regards, --birdy geimfyglið (:> )=| 20:15, 3 August 2009 (UTC)
As requested, here is a non-exhaustive list of the vandalism and harassment that the user above has inflicted on pt.wikt:
Well, I think that's enough for now...
--ValJor 23:26, 3 August 2009 (UTC)

Previous discusion copied from [21] and [22]. Doing..., --birdy geimfyglið (:> )=| 12:56, 5 August 2009 (UTC)

results
 Confirmed socks:
some more accounts Likely Likely to be socks of 'Diabo e Santo'
Possible possibly also connected:
too old to check:
Since You know his range is "85.246.128.0/19" You could consider to block it for a while, note that this might as well affect good users.
To desysop him was from the checkuser point of view very important, best regards, --birdy geimfyglið (:> )=| 13:27, 5 August 2009 (UTC)

Rifrodo@itwikinews

The following discussion is closed.

Someone from IP 80.116.124.79 has requested a new password for my account on itwikinews where I am admin and I have a suspicion that he is user Ridolfo who has a disruptive behaviour. --Darth Kule 21:28, 12 August 2009 (UTC)

Hello, that looks a bit like fishing to me, just block the IP, they can't do anything with a password request btw. If the other user is desruptive, just warn him or/and block. Best regards, --birdy geimfyglið (:> )=| 22:23, 13 August 2009 (UTC)
I know that he can't do anything only with a password request, obviously he has to know my password email, but I consider this serious. In the meantime user Rifrodo has been blocked, so there is no need of the check user. Thank you. --Darth Kule 08:26, 14 August 2009 (UTC)

Yonideworst@enwiki

The following discussion is closed.

I was refered to this page from en.wiki. Please check if there is a connection between the above offensive and troll account to accounts or IPs in the Hebrew Wikipedia, where I am a sysop. Yonidebest 13:48, 14 August 2009 (UTC)

Hello Yonidebest, You need a checkuser on Hebrew wiki and En.wiki? If that is so, and since both wikis have checkusers You need to contact them, they can exchange their results. Usually it is done like this, for example via the mailinglist or the checkuser channel. Best regards, --birdy geimfyglið (:> )=| 19:38, 14 August 2009 (UTC)

Whiteroll @ ukwiki

The following discussion is closed.

Please check uk:User:Whiteroll and uk:Special:Contributions/155.135.55.247. Firstly, both are from California (Ip's belonging to the State University, see WHOIS), there aren't well-known ukwiki users from California except him. Secondly, the first anon's edit is vandalism very likely to be commited by Whiteroll (he used to spoil NickK's userpages and talk pages in different WMF projects, see ru:ВП:Проверка участников/Whiteroll; more than 20 similar Whiteroll's vandal edits you can see on his talk page in ruwiki). The checking may help to determine his new IP ranges, according to his words, he went to the USA recently, before this he vandalized pages, mostly from User: and User talk: spaces. Thanks, Igor Soroka 12:25, 17 August 2009 (UTC).

  • Likely Likely: Homme
  • The range is quite busy, I wouldn't recommend blocking it, so I won't provide it here. If the levels of vandalism become unmanageable, please ask again and a steward can provide the IP range if necessary.  — Mike.lifeguard | @en.wb 17:31, 21 August 2009 (UTC)

Samoilovski @ mkwiki

The following discussion is closed.
  • Samoilovski ([[
mk:Special:Contributions/Samoilovski|contr]] · [[
mk:Special:DeletedContributions/Samoilovski|deleted]] · [[
mk:Special:Block/Samoilovski|block]] · log · block log · CA · guc · checkuser · lwcheckuser)

User:Samoilovski on Macedonian Wikipedia was banned indefinitely under suspicion of being a sockpuppet, although no formal check of this suspicion was attempted and no proof or satisfactory explanation was provided by the blocking administrator. Suspected puppet masters are User:StanProg (also silenced with a block after a discussion) and User:Relativefrequency. Provided your technical means, I would like to request a check that would confirm or refute the appropriateness of the undertaken administrative action. Thank you. →Spiritia 20:21, 18 August 2009 (UTC)

Ha appeared on Macedonian Wikipedia when User:Stan was blocked. The new user continued with the same style of speaking as these two guys. That is obvious puppet or agitated user, since new user cannot know the rules of Wikipedia, especially details, how Wikipedia functions and a new users cannot know what is vandalism, vandal and wikifying. What is most important he, as new user, had his first edit on a hot topic and supported one of the blocked guys. According to the rules of English Wikipedia and Macedonian Wikipedia he was blocked. Thanks.--MacedonianBoy 19:13, 19 August 2009 (UTC)
The summary of the block: In the event of an edit war, it is quite easy for accusations of sock puppetry to occur. Even veteran editors will sometimes get quite nasty during edit wars and commit three-revert-rule violations, leading to getting blocked from editing. If an edit war involves just two editors, each with an opposing viewpoint, and resulting in numerous reverts, the appearance of a third editor out of the blue supporting one side may lead to examination of that editor's history to determine if this account is operated by the same editor.. The master is either Stan or Relativefrequency, but Stan is probably the master since he was blocked some minutes before this puppet appearance. Additionally, totally new user can never know immediately the rules of blocking, vandalism, what is vandal, what are the basic rules of Wikipedia, to wikify and to behave like veteran. --MacedonianBoy 19:31, 19 August 2009 (UTC)
MacedonianBoy, please, let our colleague checkusers, with their access rights and advanced technical capabilities, rule out whether this is a case of sockpuppetry or you have overdone. Don't bereave them of their prerogative to do that, right? →Spiritia 21:10, 19 August 2009 (UTC)
So, according to you I cannot add additional info? This is what you mean?--MacedonianBoy 22:12, 19 August 2009 (UTC)

Sorry, the account seems Unrelated Unrelated to any others.  — Mike.lifeguard | @en.wb 17:21, 21 August 2009 (UTC)

OK, he is unblocked. Thanks--MacedonianBoy 17:51, 21 August 2009 (UTC)

Eeeeeewtw@zhwiki

The following discussion is closed.

These users are currently making edit wars in the same habit, that is edit articles about high schools in Taiwan, changing zh:Template:TWN into zh:Template:ROC. They has already been submitted to the local vandalizing in progress page. Some of them has been blocked for a short period per violating 3RR, but others has not been blocked per local policy, that is these users should be warned before they get blocked. Currently we are note sure whether they are sock-puppets of one user or not. So please help to check them out, which will make us easily to deal with it. Best regards.--Jimmy xu wrk 19:01, 19 August 2009 (UTC)

Additionally, our local community had already identified some sock-puppets of zh:User:Eeeeeewtw, the list is here. So if possible, please check if this user owns other unknown sock-puppers. Best regards.--Jimmy xu wrk 10:15, 20 August 2009 (UTC)
Likely Likely. Some of them without any doubt (same IP addresses during one day). Same provider for all of the users. --Millosh 04:24, 22 August 2009 (UTC)
Thanks a lot.--Jimmy xu wrk 04:33, 22 August 2009 (UTC)


Prima klasy4na @ ukwiki

The following discussion is closed.

Please check uk:User:Prima klasy4na because of possible block evasion. This user was blocked because of nominating for deletion the Main category and all the other categories of Wikipedia. In less than an hour uk:User:Ink made his first two edits. With his first edit he asked me and the administrator who blocked uk:User:Prima klasy4na of what are we doing, his second edit was a question if people who vote against deletion confirm that nominating all categories of Wikipedia for deletion is note against the rules. Also the style of the first edit of uk:User:Ink is similar with the style of uk:User:Prima klasy4na: uk:User:Ink's comment was moved to the left from the previous, but not to the right as usually, here uk:User:Prima klasy4na wrote that moving comments to the left instead of moving to the right is not against rules. So please check if it is a block evasion of uk:User:Prima klasy4na, and if it is possible, try to do that in an hour, as it would be better to get the result before the end of the block. Thanks — NickK 21:19, 20 August 2009 (UTC)

The two named accounts are Likely Likely the same person to me. Didn't find any additional accounts.  — Mike.lifeguard | @en.wb 05:28, 21 August 2009 (UTC)
Retrieved from "https://meta.wikimedia.org/w/index.php?title=Steward_requests/Checkuser/2009-08&oldid=24907137"