Steward requests/Checkuser/2019-04

From Meta, a Wikimedia project coordination wiki

Requests

PSK SkySon@zh.wikipedia

Done - PSK SkySon and 天子想要女朋友 are  Confirmed; evidence for Lmcty is Inconclusive Inconclusive. – Ajraddatz (talk) 15:45, 1 April 2019 (UTC)
Thanks, reported back.--Cohaf (talk) 15:57, 1 April 2019 (UTC)

Crystalpanyf@zh.wikipedia

Not done - one of the two accounts is Stale, so there is nothing to compare the other against. Please address using behavioural evidence. – Ajraddatz (talk) 15:43, 1 April 2019 (UTC)
Noted and reported back. Thanks and apologies. --Cohaf (talk) 15:53, 1 April 2019 (UTC)
No need for apologies! The other account had edits from December, but the limit is unfortunately three months. – Ajraddatz (talk) 15:55, 1 April 2019 (UTC)

Albert20009@zh.wikipedia

Autoblocks aren't configurable through wiki interface; it is configuration settings. — regards, Revi 07:14, 12 February 2019 (UTC)
Let me try to explain it in a clearer manner. This user is socking prolifically, the list of socks are found here. Based on local Checkuser policy [1], a CU can be conducted to find out the underlying IP / ranges of IP of all the accounts and then do a CU block (which must then be oversighted) to prevent new socks accounts to be created from the IP / ranges. This is what we are requesting. Anymore details do co-ordinate with Techyan. I am here to just explain on behalf what exactly is needed in more details. Best Regards, --Cohaf (talk) 18:39, 12 February 2019 (UTC)

References

  1. 检查已封禁的账户所使用的IP,便于延长自动封禁

    translation

    Check the IP addresses of blocked users, so as to extend the autoblock(s) accordingly

@Techyan: can you list the most recent 2 - 3 socks this user is using, sorry I am not that well to go through the list. Thanks.--Cohaf (talk) 18:53, 12 February 2019 (UTC)
Not stale:
Alberteffendy22333 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Alberteffendy40555 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Alberteffendy70335 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Alberteffendy89995 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Alberteffendy90551 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Alberteffendy92996 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Alberteffendy92999 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Alberteffendy95881 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Albert20229 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
--MCC214#ex umbra in solem 11:29, 16 February 2019 (UTC)
On hold pending some related internal discussions. — regards, Revi 03:15, 13 February 2019 (UTC)
@-revi and Cohaf: Ctrl+F on this page and look for keyword "Albert". All recently discovered socks edited this page. Please block their IPs if what they are using are concentrate enough, or more ideally, all of them are using the same IP, and immediately oversight block logs - that's what we have always been done on zhwiki. --TechyanTalk03:42, 15 February 2019 (UTC)
It is allowed to block the underlying IP or range of IPs to prevent abuse, as specified in the Access to nonpublic personal data policy s.4(b)(v) - "the public, when it is a necessary and incidental consequence of blocking a sockpuppet or other abusive account". It is more complicated in this case because it is against our policies to take actions that a sysop could take (local blocks) when there are local admins who could perform them. This request is still on hold for the time being, as it is still under discussion. – Ajraddatz (talk) 00:23, 16 February 2019 (UTC)
Question Question: It seems that "extend the auto block" means "check the IP and enforce the CU block (if possible)". I have checked the log and I've found out that some stewards had done something similar before (though some of the logs have been removed). --云间守望 13:59, 18 February 2019 (UTC)
@Ajraddatz and -revi:Any updates? Thanks.--Cohaf (talk) 07:17, 24 March 2019 (UTC)
Ajraddatz and -revi,↑?It was put here two months ago.--MCC214#ex umbra in solem 11:18, 29 March 2019 (UTC)
Sorry for the delay. Our internal discussions wrapped up a while ago, but I haven't had much time to complete this. There are no underlying blocks that can be made in this case. – Ajraddatz (talk) 15:42, 1 April 2019 (UTC)
Thanks Ajraddatz. Reported back. --Cohaf (talk) 15:48, 1 April 2019 (UTC)

James3333@zh.wikipedia

Doing... --Alaa :)..! 18:00, 7 April 2019 (UTC)

Completed..

  • Possible Possible (nearer to unlikely) James3333, Jesoneejan, 許幻, Second-tone Nong, 蘇泓宇

There's no enough data. This is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 18:14, 7 April 2019 (UTC)

Aloesiodys@zh.wikipedia

Doing... --Alaa :)..! 17:07, 15 April 2019 (UTC)

Completed..

  •  Confirmed 保護劉創馥條目, Aloesiodys, Seicoaite, Trapsophie, Modorcimsatte, Trugspram, Enosalvan, Siprohusx, Aryahchalese, 妍太金, Toqueuser, Eoateo, Waßnok, 仇思達博上位, Haffieros, Heigongfansssas, Mosionale, Wassnoce

This is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 17:22, 15 April 2019 (UTC)

Hactlcpslaat@zh.wikipedia

Doing... --Alaa :)..! 09:40, 16 April 2019 (UTC)

Completed..

 Confirmed Hactlcpslaat, Pearsonint, Eason2020, Justnewaccount, Teychanissabotage, Nonvandelism


This is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 09:45, 16 April 2019 (UTC)

Asybaris01@ro.wikipedia

User's last edit is too old, however we do not associate specific IP addresses with user accounts. If the IP is being disruptive, feel free to block it. --Wim b 16:41, 17 April 2019 (UTC)

AYCU@zh.wikivoyage

Users appear technically unrelated. Jon Kolbert (talk) 07:43, 18 April 2019 (UTC)
Thanks Jon Kolbert.--Cohaf (talk) 07:56, 18 April 2019 (UTC)

白目金百利@zh.wikipedia

Comment Comment:I believe you will confirm.--White Timber Kimberly (talk) 22:30, 19 April 2019 (UTC)

 Confirmed, same IPs and UAs. There does not appear to be any other accounts, except USASAS which claims to be an alternative USSIS's account --Wim b 22:35, 19 April 2019 (UTC)
Sorry add User:Samoa Sniper and User:Sannnosa. --Wim b 00:22, 20 April 2019 (UTC)

Lagoo sab@en.wikipedia

Iswjy1mcb@zh.wikipedia

And adding target below to the sock of User:3GFRIENDSNSD is confirmed in Steward_requests/Checkuser/2019-01#3GFRIENDSNSD@zh.wikipedia,Steward_requests/Checkuser/2019-02#Iswjy1mcb@zhwp and Steward_requests/Checkuser/2019-03#3GFRIENDSNSD@zh.wikipedia:

And here are some other recently created puppets that still have data available.--MCC214#ex umbra in solem 08:06, 20 April 2019 (UTC)

Doing... --Alaa :)..! 17:33, 21 April 2019 (UTC)

 Confirmed Nxyssscrh --Alaa :)..! 17:52, 21 April 2019 (UTC)

Thanks علاء. @MCC214: as per IRC discussion with علاء, these request will be better processed faster + better if this format is used "(list of all accounts + just write request to find sleepers)"-علاء words with mine explanation in bold. Thanks --Cohaf (talk) 17:56, 21 April 2019 (UTC)

Razerader@ro.wikipedia

Razerader is  Confirmed. NeaIancu is Unrelated Unrelated. Ruslik (talk) 19:57, 22 April 2019 (UTC)7
Thank you! --Robbie SWE (talk) 18:52, 23 April 2019 (UTC)

Mak kau negro@ms.wikipedia

Doing... --Alaa :)..! 10:56, 25 April 2019 (UTC)

 Confirmed --Alaa :)..! 11:04, 25 April 2019 (UTC)

白目金百利@zh.wikipedia

Hamish: are the BrendonGeck's edits similar as the other 8 users? Because IP and user agent are the same as the other 7 (ref)… Do you want more detailed or this information is sufficient for your purpose? --Wim b 16:00, 26 April 2019 (UTC)
@Wim b:Wim b: BG's edits indeed resemble other users' in the list, but I and another user consider it's not enough to be duck, and also you said that the IP is also shared with 3 other users, I left this request for both confirming BG and checking sleepers.-- CreampieGolden State Finals Champion 16:17, 26 April 2019 (UTC)
@Hamish: yes, 3 other users registered only in Meta and loginwiki, but there are 3 registered in few minutes before BG.
  • 19 April 2019: 00:04: BrendonGeck, 00:03: User2 (0 edit no on zh.wiki)
  • 18 April 2019: 23:55: User3 (0 edit no on zh.wiki), 23:30: User4 (0 edit no on zh.wiki).
I kept myself vague because I am not "Minority Report", but it is very likely that they are the same person. The CU with BG is confirmed to my point of view, for the other users we have only the login logs from a school's IP in USA. --Wim b 16:34, 26 April 2019 (UTC)
@Wim b: is it able to disclose those 3 users currently so we could have eyes on them? If not, you may close this request after confirming that BG has the same IP with other listed users and no other sleepers on zhwiki.-- CreampieGolden State Finals Champion 16:44, 26 April 2019 (UTC)
Doing... ok. --Wim b 16:45, 26 April 2019 (UTC)
@Hamish: I  confirm BrendonGeck, same IPs and UAs and no other sleepers with these. --Wim b 16:59, 26 April 2019 (UTC)

Bunadea1@en.wikibooks

@Atcovi: "Vandoapal" don't exist. En.WB have a local CUs, are there any reasons for not perform a local CU? --Wim b 20:53, 28 April 2019 (UTC)
Probably should've requested there first. My mistake... just came back from a two month wikibreak so my noggin isn't exactly in the right place yet. Pinging QuiteUnusual. —Atcovi (Talk - Contribs) 22:18, 28 April 2019 (UTC)
@Atcovi: Isn't a problem, it happens to everyone now and then :) --Wim b 22:41, 28 April 2019 (UTC)
@Wim b: There are only two CheckUsers here in the first place, and one of them is inactive. @QuiteUnusual: Leaderboard (talk) 11:41, 29 April 2019 (UTC)
@Leaderboard: QuiteUnusual‘s last edit (in en.wikibooks): 2019-04-29 09:43. Try to contact he in his talk in en.wb. —Wim b 11:51, 29 April 2019 (UTC)
I've already dealt with this locally following the first ping, thanks - QuiteUnusual (talk) 14:34, 29 April 2019 (UTC)