Steward requests/Checkuser/2010-11

Add links
From Meta, a Wikimedia project coordination wiki

Requests

Memail555@th.wikipedia

Status:    Done
List of users
Chaiyokub (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Memail555 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Finna (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Winterrus (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Disarrange in Wikipedia, use sock puppetry perverted and charge anothere. Mahatee 13:23, 13 November 2010 (UTC)

Comment Comment Some format changed to reflect the real case. Memail555 is originally from Thai Uncyclopedia, known in Thai Wikipedia as his possible usage of sockpuppet to support admin self-nomination, and writing annoying message to certain users. Recently this user has moved a user talk page to a rude word. Also note that per consensus of Thai uncyclopedia, this user and his counterpart have been indefinitely blocked. --G(x) 03:04, 14 November 2010 (UTC)

Note Note: User:Finna have been renamed to Natza2010 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
  • Sorry Memail555@th.Wikipedia I Not Block
 Confirmed All accounts are the same person, including w:th:user:ธะวัชชัย . Regards - @lestaty discuţie 22:51, 14 November 2010 (UTC)

RobertoPalhano@pt.wikipedia

Status:    Not done
List of users
RobertoPalhano (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Shato (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): As there are no local checkusers, I request that this user be checked with banned user Shato. This user's standard edits are the creation of improper articles, whose summaries are the same as page titles. Francisco 21:10, 13 November 2010 (UTC)
Not done Shato edits are too old to check. es:Magister Mathematicae 21:24, 13 November 2010 (UTC)
Comment Comment: Shouldn't you request an older log from a previous local checkuser? We are very familiar with this case. There are some previous requests here, here and here (and more if you need), where you can find some more recent accounts too. Could you reconsider?” TeleS (T PT @ C G) 00:28, 14 November 2010 (UTC)
Since users were des-checkuserized, they shouldn't have access to the logs anymore. And if ex checkusers have information available on-wiki, it should be provided. You can't expect stewards to know the very details of local archives for every wiki.
Understand that, from our point of view only 2 usernames were provided, one of them unavailable to check and if those requesting don't provide more information we can't know where else to look. Therefore requests like this will be denied.
I'll review the case with the additional information es:Magister Mathematicae 02:37, 14 November 2010 (UTC)
I don't see a strong correlation except sharing the same ISP. es:Magister Mathematicae 02:48, 14 November 2010 (UTC)
Sorry if I didn't make myself clear. I didn't require access to the logs. My question was if you considered necessary any personal record from a previous checkuser to perform the check. It is possible that another request involving an old account be made and some personal record might be necessary and, respectfully, it can't just be denied IMHO. I am agreed with what you said about providing a more complete info. Thanks anyway for reviewing the case and for your comment. If some day you think that any info from the previous checkusers may be useful and if you consider it is the correct procedure, be sure they will be willing to help. Thank you again.” TeleS (T PT @ C G) 06:33, 14 November 2010 (UTC)

Maluco671@pt.wikipedia

Status:    Not done
List of users
Bad_Boy97 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): User blocked for sockpupetry and filtered for two months on main domain due to fraud on featured articles nominations. Obsessed with that page, tried to bypass the block anonymously, on what was detected and warned not do do it. viniciusmc 21:38, 14 November 2010 (UTC)
 It looks like a duck to me, please request a block to local admins. Regards - @lestaty discuţie 22:38, 14 November 2010 (UTC)

Polaquinho@pt.wikipedia

Status:    Done
List of users
Polaquinho (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): This account is being used for block evasion. The user Polaco galeto was blocked before for edit war, vandalism and personal attacks (check 1). Since this block, he keeps creating other accounts to evade it (example: Polacogaleto, Polacogaletoinjusticado, Pasargada)

Similar edits: from 'Polaco galeto'; from 'Pasargada'; from 'Polaquinho' (removing content and creating controversial redirects, ignoring the page history).
Similar names:Polacogaletoinjusticado, Polacogaleto, Polaquinho
Similar interests: Articles and templates related with television. Until the opening of ths request, all the edited pages were also previously edited by Polaco galeto or one of his socks.
Behavior: The conflict involved other user (Bruno Leonard). 'Polaquinho' just edited this user talk page (see), telling he was already blocked more than once in the past.
Other checks: 1, 2, 3, 4, 5
” TeleS (T PT @ C G) 09:09, 15 November 2010 (UTC)
Results

 Confirmed --dferg ☎ talk 14:26, 15 November 2010 (UTC)

츄앙... @ ko.wikisource

Status:    Done
List of users
츄양과 떡을치는 국철옥색선 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
츄양을 따먹는 국철옥색선 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
츄양보지존나깊네 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): This users make unhealthy ID(obscenity). I'm requset to every ID and IP of this users. Please, check if they are related or not. Thank you. ØSalamander (Talk / Contributions) 22:39, 24 October 2010 (UTC)
I think this account is relate with 츄석@ko.wikipedia etc (front paragraph account) --Betalph 04:19, 25 October 2010 (UTC)

非话@zh.wikipedia

Status:    Done
List of users
非话 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
封翻 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
带投人 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
‎分凡 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
形象少年 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): those spamers create advertisements about abroad studying and use "spelling wrong" username(acutely in chinese) . Mys_721tx(talk) 08:21, 27 October 2010 (UTC)
All users above, w:zh:User:圣印 and w:zh:User:深市 are  Confirmed. Same IP addresses used on all accounts and same user-agent. - @lestaty discuţie 01:13, 28 October 2010 (UTC)
Thanks-Mys_721tx(talk) 02:34, 28 October 2010 (UTC)

pt.wikisource

Status:    Done
List of users
Caràlho vou ca:gar (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Caràlho vou ca:gar (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Ċagar na sua cara 7-11 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Cagarr é muuito bom (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Peidar (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Renomeado32 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Renomeado30 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Renomeado28 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Renomeado27 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Renomeado25 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): The same as in Steward_requests/Checkuser/2010-09#Many_users_at_pt.wikiquote_and_pt.wiktionary, but at the wikisource. Probably the same vandal creating offensive user names and then go on and adds offensive material in many different pages in our sites. "Renomeadoxx" means "renamed user name". Giro720 20:47, 29 October 2010 (UTC)

The complete list of the accounts (just the links, because the names are offensive): [1], [2], [3], [4], [5], [6], [7], [8], [9], [10], [11], [12], [13]. In fact, the accounts were not renamed.” TeleS (T PT @ C G) 21:15, 29 October 2010 (UTC)
Results
  • Completed Completed - All those accounts are confirmed to be the same asshole user. Some proxys used:
  • No other sockpuppet accounts found.
  • Processing those sockpuppet accounts.

--dferg ☎ talk 14:04, 30 October 2010 (UTC)

ko.wp

Status:    Done
List of users
S96s097s (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
NuviieK (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Realidad y lllusion (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Germentower (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
BIGROLE (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): They were created for an hour continuously in Korean Wikipedia. Also, they have a pretended username - S96s097, NuvieK, Realidad y Illusion, Germantower, BIGRULE. One of those, SS96s097s created an article, that has abuse to admin on ko.wiki - "엿먹어라 씨발놈들아. 그리고 닥쳐라 씨발놈들아. 관리자? 그까이꺼 무시하면 그만이지."Translation: Fuck and shut up men. Admin? I can ignore an admin. That's all.(SS96s097s typed using Korean QWERTY Keyboard) I wonder who those pretened accounts were created. -Darkgallery 07:39, 31 October 2010 (UTC)
Results

Group 2 and group 3 Likely Likely--Shizhao 07:47, 8 November 2010 (UTC)

Feniks@sl.wikipedia

A couple of months ago, Slovene Wiki was the target of a malicious "experiment" in which a self-proclaimed group of researchers working under the username Feniks created a lot of articles copypasted from various copyrighted sources, testing how long it would be until they got caught. After discovery and admission (in Slovene), the user was blocked indefinitely because he/they couldn't be trusted anymore, and the work began to stubify all their contributions. Since last week, there has been some activity that we suspect might be linked to this "experiment" - a bunch of new users registered, most with nicknames following a similar pattern "NameNumber", each creating at least one article with content that was either clearly copied from online sources or at least looking as it was copied from somewhere. One of them - User:Phoenicis0011 - even has a name that clearly implies the connection. Below is a list of 10 of them:

Status:    Done
List of users
Ivchy93 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
AnjaT90 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Btjasa91 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Adidas25 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Lindsee00 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Mail277 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Nika5797 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
MajaB (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Antigona13 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Arcanne13 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): Please provide a reason.

We suspect this might be "phase 2" of the experiment (user Feniks clearly stated that individuals operating under this name might create new accounts - here), so I would like to request checking if either of those user's IPs matches User:Feniks'. Especially Phoenicis0011. Some further suspicious users are BC19, Danaja18 and Cuker. Even if they are unrelated to Feniks, we would like to know if they share any IPs between them. Hope this isn't too much to ask. Thank you, — Yerpo Eh? 19:11, 15 November 2010 (UTC)

So there is no way to check users that are inactive more than a couple of months? That's unfortunate, but thanks for the effort. We will deal with each suspected copyvio issue individually. — Yerpo Eh? 07:27, 16 November 2010 (UTC)
No, there are no available records. And those recent accounts you linked, from a pure checkuser point of view, are not related. es:Magister Mathematicae 07:50, 16 November 2010 (UTC)

Denipetkov@bg.wikipedia

Status:    Done
List of users
Denipetkov (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Denipetkov2 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Denipetkov3 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Maymaytupasihaha (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): I would like to request formal proving of the case of sockpuppetry and disruption of the above four user accounts, both on Bulgarian Wikipedia and on Wikimedia Commons. The user has been repetitively placing unencyclopaedic content (kind of funny vandalism) on BG WP, illustrating it with out-of-project-scope photo uploaded on Commons. After the registration of the three alike accounts "Denipetkov", "Denipetkov2" and "Denipetkov3", (presumably) the same person created also the account "Maymaytupasihaha" (translating to "Maymay you're fool, haha" after the name of the administrator who handled the vandalism). The latter account registration was hidden by another sysop.

On the user page bg:User:Denipetkov3, the vandalism has been repeated, accompanied by an address to the administrators (translation is mine):

To the administrators, who delete the article. I waited for my block to expire, as I decided not to nag at you, yet. But since I was fed up with its deletion, I decided to write you.
1. If you block me per account, I will create a new one and will again add the article.
2. If you block me per IP, I will change it and will add the page again (I have at my disposal 500 IP address (+ other 500, at the disposal of my neighbour) and I am stubborn, much stubborn!)
3. I am not going to receive IP range block, due to the simple reason that I am a client of Vivacom and you won't dare to.
4. I have the article and only copy/paste it, and I don't ever care how many times I am going to repeat.
5. If you think that this is the consecutive recreation of this bullshit - as you've written - simply don't read it, nobody forces you to read it!
6. Anyway, if you'd like, we can continue - I add it, and you delete it.

I think that this appeal fully (though informally) proves the sockpuppetry and the arrogant, malicious attitude of the user. I'd kindly request information of the used IP range block, as well as any insights of how shall we proceed in a situation of this kind. Thank you in advance. →Spiritia 19:31, 17 November 2010 (UTC)
Avalaible technical data confirms the relationship between the following accounts:

No other accounts sockpuppet accounts where found. As for commons, they have their own CheckUsers. Should you need data from them please see Commons:Requests for checkuser. Also, as the accounts have been abused at some projects I have globally locked them all, the latest one will be locked & hidden as you've said it is insulting. Request processed.
--dferg ☎ talk 14:31, 19 November 2010 (UTC)

Thank you, Dferg, for your investigation. But what shall be done in case the user continues registering accounts using other IP addresses from the range of his disposal. Does locking prevent this kind of behaviour? →Spiritia 16:12, 19 November 2010 (UTC)
Hello Spiritia. Locking prevents an user account to continue being exploited on other wikis. Locked accounts can not edit on any wiki, see info page. If he keeps creating vandal accounts block them and if the abuse grows you can approach us here so that we can study the possibility of placing range blocks on his IPs. Regards, --dferg ☎ talk 22:07, 19 November 2010 (UTC)
Thanks a lot. →Spiritia 19:02, 20 November 2010 (UTC)
You are welcome. --dferg ☎ talk 23:29, 20 November 2010 (UTC)

N10@th.wikipedia and นโปเกรียน วินิฮาร์ต@th.encyclopedia

Status:    Not done
List of users
Stang2000 (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): N10 is a greanpharaguy Klid N10 10 yearold. 110.164.151.229 11:47, 18 November 2010 (UTC)
Comment Comment ผมได้ยินว่า เจ้า เอ็น10 เป็นเกรียนปลาร้าวัยจริง ไม่แตกต่างกันเลย ขอบล็อก N10ในวิพีเดีย และ ไร้สาระนุกรมด้วย —The preceding unsigned comment was added by 110.164.151.229 (talk • contribs) .
The reasons provided by 110.164.151.229 (talk · contribs · CA) does not address in any way the use of the CheckUser tool. Please see the relevant policy and the instructions at the top of the page before making a request. Request declined. --dferg ☎ talk 13:37, 18 November 2010 (UTC)
Comment Comment Please Note that Thai Wikipedia and Thai Uncyclopedia is a completely different project, and the use of Checkuser are limited within the foundation and its project, not Wikia. (The hosting of Uncyclopedia) --G(x) 15:20, 18 November 2010 (UTC)

Nicholas Waquim Sales@pt.wikipedia

Status:    Done
List of users
Bruno Leonard (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Nicholas Waquim Sales (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Reason(s): User Leonard was blocked many times for sockpuppetry, and tried to bypass the block on most of occasions. This Nicholas account goes by the same pattern: edits on articles of radio stations and TV channels from Northern Brazil. viniciusmc 22:17, 21 November 2010 (UTC)

Unrelated Unrelated - From a pure CheckUser point of view the users do not seem to be related. --dferg ☎ talk 22:56, 21 November 2010 (UTC)

Torm3ntor@pt.wikipedia

Status:    Done
List of users
Torm3ntor (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)
Blaspherereion (contr · deleted · block · log · block log · CA · guc · checkuser · lwcheckuser)

Reason(s): Suspect of block evasion. The user Torm3ntor was blocked two days ago due to personal attacks. Three hours after the block, the account Blaspherereion was created. They have both the same interests and edit the same articles. Only one article edited by Blaspherereion was not edited by Torm3ntor ([14] [15] [16] [17] [18] [19] [20] [21] [22])

There's a block request informing about this possible block evasion. It may be a en:WP:DUCK but I'm not sure. Thanks.” TeleS (T PT @ C G) 00:58, 22 November 2010 (UTC)

Likely Likely - both operates from the same range and has the same UA. Another user that could need a review is Jonathan Pereira da Silva --Jyothis 02:01, 22 November 2010 (UTC)

Thank you, Jyothis. Could you please clarify what do you mean by saying that Jonathan Pereira da Silva "need a review"?” TeleS (T PT @ C G) 03:26, 22 November 2010 (UTC)
In the same range, has the same UA, but not listed in your list. Would be nice to check it out. could be unrelated as well. --Jyothis 04:34, 22 November 2010 (UTC)
His edits are not similar with the others and the account was registered in april 2010. If the checkuser tool can't confirm, maybe it is not related. I blocked the listed ones. Thank you.” TeleS (T PT @ C G) 04:59, 22 November 2010 (UTC)
I have a question: who is supposed to make this review on Jonathan Pereira da Silva edits, as pt.wikipedia doesn't have checkusers at this moment? Should the sysops help in this issues? CasteloBrancomsg 05:25, 22 November 2010 (UTC)
Local sysops should check their edit / behavioural patterns against the possible socks. --Jyothis 12:57, 23 November 2010 (UTC)
Retrieved from "https://meta.wikimedia.org/w/index.php?title=Steward_requests/Checkuser/2010-11&oldid=24950677"