Steward requests/Checkuser/2019-02

Add links
From Meta, a Wikimedia project coordination wiki

Requests

唐三好@zh.wikipedia

Status:    Done
List of users
唐三好 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
許問水 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
白涎安 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
郭淇玉 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Vicky2019000 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): 唐三好 and Vicky2019000 edits same articles and shows similar editing patterns. 唐三好 (許問水, 郭淇玉 are his old accounts, however he forgot their passwords) and 白涎安 are similar in their user name and editing patterns. Requesting per Techyan's evidence. --云间守望 05:26, 1 February 2019 (UTC)
Doing... --Alaa :)..! 14:06, 2 February 2019 (UTC)

Completed..

  •  Confirmed 許問水, 白涎安, 가을11001, 唐三好
  • Vicky2019000 Unrelated Unrelated but Vicky2019000  Confirmed with Marrymark2018
  • 郭淇玉 Unlikely Unlikely

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 14:27, 2 February 2019 (UTC)

Pafsamias@ro.wikipedia

Status:    Done
List of users
Pafsamias (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Paraidis1 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): The former is registered under a username that mimics w:ro:Utilizator:Pafsanias in order to discredit him because of a conflict în which Pafsanias has cancelled repeated vandalisms of Pafsamias. Also, he appears to be a clone of Paraidis1, created in order to avoid identification. There might be more clones. Victor Blacus (talk) 19:28, 3 February 2019 (UTC) Well, I may have mixed the actions of two guys. Sorry! Victor Blacus (talk) 19:33, 3 February 2019 (UTC)
Doing... --Alaa :)..! 19:34, 3 February 2019 (UTC)

Completed..

 Confirmed Patsanias, Paraidis1, Pafsamias

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 19:39, 3 February 2019 (UTC)

Anar Məmmədov@az.wikipedia

Status:    Done
List of users
Anar Məmmədov (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Maqamedd (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Anar Mammadov stated that he had left the Wikipedia for some reason. After writing this, the Maqamedd user account was created. Both users have the same editorial and conversational style. NMW03 (talk) 17:22, 29 January 2019 (UTC)
MoreInfo Additional information needed It is not clear to me why this check is requested. The use of multiple accounts is not prohibited unless they are used abusively. Could you please clarify and/or identify instances of policy violations or abusive use of multiple accounts? Thank you. —MarcoAurelio (talk) 18:32, 29 January 2019 (UTC)
Hello @MarcoAurelio: , I also was planning to address about this issue. Maqamed has voted here for the article Anar Məmmədov introduced to laboratory. I worry that there is a trick. Please, help us in this issue.Thanks.--Turkmen talk 18:39, 1 February 2019 (UTC)
Please, somebody help me. I haven't got a reply in 4 days. Why do the authorities here not respond?--Turkmen talk 20:29, 3 February 2019 (UTC)
Doing... --Alaa :)..! 14:33, 4 February 2019 (UTC)

Completed..

  •  Confirmed Anar Məmmədov, Maqamedd
  • Possible Possible Anar Məmmədov, Hüseyn706

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 14:41, 4 February 2019 (UTC)

Dear @علاء: thanks. --Turkmen talk 19:09, 4 February 2019 (UTC)
Sorry, I was ill all these days. Apologies for not being able to handle this in due time. Thanks to Alaa for taking care of this one. —MarcoAurelio (talk) 20:33, 4 February 2019 (UTC)

Iswjy1mcb@zhwp

Status:    Done
List of users
Iswjy1mcb (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
2pvr2 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
MTR 553892 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): All of them are sock puppets of LTA w:zh:WP:TS106. Requesting a user check for technical proof. --云间守望 06:24, 5 February 2019 (UTC)
Doing... --Alaa :)..! 16:00, 5 February 2019 (UTC)

Completed..

 Confirmed 3GFRIENDSNSD, 2pvr2, MTR 553892, Un1pjvr, Iswjy1mcb

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 16:28, 5 February 2019 (UTC)

Ucv1948@ro.wikipedia

Status:    Done
List of users
Ucv1948 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Nickoala27 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
WikiHelp2198 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Looks like a campaign to push the POV of football team CS U Craiova in their legal conflict with FC U Craiova. Andrei Stroe (talk) 19:03, 5 February 2019 (UTC)
Done. WikiHelp2198 and WikiHelp21 are  Confirmed. The rest are unrelated from a technical standpoint. – Ajraddatz (talk) 19:42, 5 February 2019 (UTC)

Çim Çen In@azwikipedia

Status:    Not done
List of users
Aydinsalis (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Çim Çen In (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Aydinsalis was a blocked by Wikimedia Foundation. Çim Çem In's edits are similar to the edits of Aydinsalis. It is almost identical. Must check for prevent abuse--NMW03 (talk) 15:15, 6 February 2019 (UTC)
As the second user has not edited within three months, CheckUser cannot be used to find a connection here. I looked at this, and turns out I ran a check two years ago on this user. The results of the check can be found at Special:Diff/17341213. There was not definitive technical evidence to make a connection.
Also, in the future, if you suspect that an account is a sockpuppet of a WMF-banned user, please report it to ca[at]wikimedia[dot]org. Thanks, – Ajraddatz (talk) 22:05, 6 February 2019 (UTC)

Giteshs78@hi.wikipedia

Status:    Done
List of users
MrJohnAlex (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Giteshs78 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): use wikipedia for self promotion. Both account created gitesh's own article in hiwiki. User use fake acccount for argument.--आर्यावर्त (talk) 04:33, 7 February 2019 (UTC)
Done - Both accounts  Confirmed. I've blocked both on Wikidata, and am considering global action. – Ajraddatz (talk) 18:55, 7 February 2019 (UTC)
Thanks--आर्यावर्त (talk) 07:46, 8 February 2019 (UTC)

Regularcelibrity@hi.wikipedia

Status:    Done
List of users
Regularcelibrity (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
अनुराग मौर्य (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): the person anurag maurya creating many account on enwiki and hiwiki. In hi wiki both user created own articlen many times. He use fake account for argument.--आर्यावर्त (talk) 04:44, 7 February 2019 (UTC)
user created anurag maurya's article on hiwiki, after he arguming on talk page of article. User uploaded two anurag maurya's photo on commons, in this pic he listed seft as [[User:Regularcelibrity|Anurag Maurya Actor]]. see this. In english wiki anurag maurya's other fake account is here. One of other account is in hi wiki named anurag maury in devnagri script.--आर्यावर्त (talk) 04:34, 8 February 2019 (UTC)
Doing... --Alaa :)..! 05:58, 8 February 2019 (UTC)

Completed..

  • Stale अनुराग मौर्य (last edit on May 2018)
  •  Confirmed Regularcelibrity, Rajapraja584

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 06:16, 8 February 2019 (UTC)

Thanks.-आर्यावर्त (talk) 07:46, 8 February 2019 (UTC)

De Patre Romuli@zh.wikipedia

Status:    Done
List of users
De Patre Romuli (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): After the stated account was created, it keeps editing its own user page until it reached 50 edits (the minimum requirement for moving pages on zhwiki), then it starts moving pages until it was blocked by admin for gaming the system. Thus we are confident that this account is a sock of an experienced user, though it is not clear that which is the main account. A user suspect this may be a sock of 南方的小鳥 (talk • contribs • deleted contribs • logs • block user • block log • CentralAuth • AllContribs • checkuser • investigate). Request to find if there is a match. Some discovered sockpuppets of 南方的小鳥 can be found here. Techyan（Talk） 05:17, 7 February 2019 (UTC)

Completed..

  • 南方的小鳥 and all of socks are Stale
  •  Confirmed De Patre Romuli, Njsgdsza
  • Likely Likely De Patre Romuli, Scottmacs

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 06:16, 8 February 2019 (UTC)

@Cohaf: no, as I checked De Patre Romuli globally, so you can found it here --Alaa :)..! 13:30, 8 February 2019 (UTC)
@علاء:. That's what I'm thinking also, I knew there is an SUL account. Thanks, all reported back. --Cohaf (talk) 13:32, 8 February 2019 (UTC)

User-4488@vi.wikipedia

Status:    Not done
List of users
67.188.179.66 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Charmhymn (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Kok125a (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
UserDead (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): Cross-wiki project disruption.Common features include using multiple accounts and abusing user pages.He has abused socks for more than two years in the English Wiki project.

https://vi.wikipedia.org/wiki/%C4%90%E1%BA%B7c_bi%E1%BB%87t:Nh%E1%BA%ADt_tr%C3%ACnh/67.188.179.66 Abuse user pages and talk pages, and create content that matches the socks he uses. https://en.wikipedia.org/w/index.php?title=Special:AbuseLog&wpSearchUser=Charmhymn Abuse talk pages in English wiki project, has confirmed that he is a sock in the English wiki project. https://zh-classical.wikipedia.org/wiki/%E7%89%B9%E6%AE%8A:%E8%AA%8C/Kok125a Abuse talk pages in zh-classical wiki project, has confirmed that he is a sock in the English wiki project. https://vi.wikipedia.org/wiki/%C4%90%E1%BA%B7c_bi%E1%BB%87t:Nh%E1%BA%ADt_tr%C3%ACnh/UserDead Abuse user pages, and create content that matches the socks he uses.Also confirmed that he was disrupted in the Spanish wiki project.https://es.wikipedia.org/w/index.php?title=Organizaci%C3%B3n_de_Cooperaci%C3%B3n_de_Shangh%C3%A1i&type=revision&diff=113546262&oldid=112799895

It can be confirmed that he can use a considerable number of different accounts in different wiki projects, and is particularly active in Chinese wiki projects and English wiki projects.Ex:https://en.wikipedia.org/wiki/Special:Contributions/Dali0Lama & https://zh.wikipedia.org/wiki/Special:%E7%94%A8%E6%88%B7%E8%B4%A1%E7%8C%AE/Dali0Lama

Judging from these activity records, he should have both English and Chinese communication skills.I think the problem with this account is that it seems to have the ability to use multiple nationality IP( https://en.wikipedia.org/wiki/Wikipedia:Sockpuppet_investigations/User-4488/Archive ).But if we look at his communication skills, his true nationality and IP source should be China and the United States.

His biggest problem now is that he is constantly increasing the socks he can abuse, and he is activing in multiple wiki projects.

36.232.206.140 18:33, 7 February 2019 (UTC)

Not done We do not accept checkuser requests from unregistered users --Alaa :)..! 06:17, 8 February 2019 (UTC)

Kurdisk kultur@no.wikipedia

Status:    Done
List of users
Kurdisk kultur (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Kamranshad5 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Javanehp (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Baydetah (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Zana.mona (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Raymoh5 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Bureihan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Omid.zanadel (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Nicark (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Somayyehm (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Kurdisk kultur is POV editing on no:Kurdere, an article/topic subject to POV edits by sockpuppets of en:User:Escoperloit (see also Steward_requests/Checkuser/2018-08#Samandari27a@no.wikipedia), such as the most recent (blocked) accounts listed above. 4ing (talk) 13:37, 8 February 2019 (UTC)
 Confirmed (in sense that they belong to the same person). Ruslik (talk) 18:37, 9 February 2019 (UTC)

User-EAV204@sk.wikipedia

Status:    Not done
List of users
EAV204 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
2A02:AB04:3CB:F000:F406:41E0:F306:3CAF/37 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Bronto (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): User EAV204 was on skwiki blocked for personal attacks (1 m). The same attacks were previously recorded from active IP range (for example [1]). Some editors consider these accounts to be a sockpuppet of old inactive user, Bronto, with a similar way of discussion. Please check, if Bronto use EAV204 and 2A02:AB04:3CB:F000:F406:41E0:F306:3CAF/37 range and if EAV204 use 2A02:AB04:3CB:F000:F406:41E0:F306:3CAF/37 range. Thank you, OJJ (talk) 11:09, 8 February 2019 (UTC) (sk admin)
Check cannot be performed. Bronto (talk • contribs • block • xwiki-contribs • xwiki-date (alt) • CA • ST • lwcheckuser) is Stale because they have not editted for a long time, thus there will be no data avalaible to make a comparaison.  No comment with respect to IP address(es). We do not run checks that would have the effect of directly or indirectly linking a registered account with IP addresses. If the IP or IP range is being disruptive, feel free to block it. Best regards, —MarcoAurelio (talk) 14:12, 9 February 2019 (UTC)

MeritTim@zh.wikipedia

Status:    Done
List of users
MeritTim (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
CAMCAD (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s):

CAMCAD appealed for his block and triggered autoblock #261307。MeritTim applied for IPBE citing the same autoblock number as reason. --Mys_721tx（留言） 2019年2月14日 (四) 18:06 (UTC)

Mys 721tx is one of the former CUers of zhwp. According to the Chinese Wikipedia consensus, this kind of check can be carried out directly (zh:WP:CUP#3). --云间守望 11:26, 15 February 2019 (UTC)
At first I was going to decline this, given the lack of behavioural evidence. It seems reasonable to me that in a country where people often connect through VPNs/proxies that there would be some overlap. But then I noticed the previous check from January, so I redid those results. I did find that MertTim and CAMCAD shared one IP and the same useragent on that IP, but I consider this to be a Possible Possible match. If the accounts were socks, I would expect more overlap than one IP out of many. The useragents are also very common. If you do take action here, you should consider behavioural evidence first. – Ajraddatz (talk) 17:02, 15 February 2019 (UTC)
CAMCAD is a single purpose account that was trying to game the system in order to vote in DYK. They were blocked as such. MeritTim has perviously applied for IPBE and was declined due to the lack of evidence. Four days later, CAMCAD appealed and triggered the autoblock and MeritTim cited that autoblock for the IPBE application. Were both accounts using proxy the entire time? -Mys_721tx (talk) 18:13, 15 February 2019 (UTC)
I've done some more extensive checks than I did the first time. MeritTim and CAMCAD have edited from one large range, and one common IP, over the last two month time period. Their useragents match. There is also overlap between both accounts and the IPs/useragents used by Responsibility330. Looking at this again makes me think all three are Likely Likely the same person. – Ajraddatz (talk) 00:48, 17 February 2019 (UTC)
@Ajraddatz, Mys 721tx, and WQL:Likely Likely≠ Confirmed. As a user who wants to improve the community, I only have one sentence to say: This kind of behavior does not have any benefit to me. Moreover, Pixiedust CheckUser is not magic pixie dust, and the result can only be known as Likely Likely. It is impossible to prove the relationship between the user and me. Therefore, it is very unreasonable. Finally, I am really in the public library for editing, so I feel sad about the banning order.--MeritTim (talk) 07:47, 17 February 2019 (UTC)

Asd01471aaa@zh.wikipedia

Status:    Done
List of users
Asd01471aaa (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
A0953258578af (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Bleach5x6a (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): All of them are socket puppets of an LTA. Request for checking sleepers. --云间守望 06:03, 19 February 2019 (UTC)
Done - Unblocked sleeper accounts: Jack881215ss, Qaz01471q. – Ajraddatz (talk) 07:09, 19 February 2019 (UTC)
Thanks and I have reported them to sysops. --云间守望 08:28, 19 February 2019 (UTC)

5258若批评不自由则赞美无意义@zhwiki

Status:    Done
List of users
5258若批评不自由则赞美无意义 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Coqja'uv (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
89ezagonoszkommunistanacionalista64 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
AoNQPBstout (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Japademos (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): 5258若批评不自由则赞美无意义 was suspected to be 123Aristotle(Coqja'uv). We need technical proof to confirm it. 云间守望 19:37, 19 February 2019 (UTC)
Doing... --Alaa :)..! 15:52, 21 February 2019 (UTC)

Completed..

  • 123Aristotle  Confirmed with 5258若批评不自由则赞美无意义, 사랑해요동생, 大风起兮云飞扬安得猛士兮守四方, 89ezagonoszkommunistanacionalista64, Coqja'uv, Openyoureye, AoNQPBstout

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 16:09, 21 February 2019 (UTC)

@علاء: Thank you! I reported the results back to zhwiki. -★- PlyrStar93 →Message me. ← 16:16, 21 February 2019 (UTC)

Kelvinwan@zh.wikipedia

Status:    Done
List of users
Kelvinwan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
MTR 553891 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Tsz Hin Wan (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
尹子軒 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Suspected sockpuppet. They are editing the same range of accounts and have an astonishing similarity of username between 1 and 3 (seems to be the same name), while 1 and 2 gets similar user page at user page history and edits the same field. 1233 | Questions?| This message is left by him at 01:29, 21 February 2019 (UTC)
Doing... --Alaa :)..! 19:47, 23 February 2019 (UTC)

Completed..

  •  Confirmed Kelvinwan, 尹子軒, Tsz Hin Wan
  • MTR 553891 Unrelated Unrelated with Kelvinwan but Possible Possible 3GFRIENDSNSD

Reminder: this is 100% technical analysis and does not include behavioral evidence --Alaa :)..! 20:01, 23 February 2019 (UTC)

Retrieved from "https://meta.wikimedia.org/w/index.php?title=Steward_requests/Checkuser/2019-02&oldid=24929220"